skysight-inc/HackerNews huggingface dataset:
% cd ~ && ln -s /usr/bin/sudo sudoedit && ./sudoedit -s \\
sudoedit(75875,0x109abbdc0) malloc: Incorrect checksum for freed object 0x7fcf2fc06bf8: probably modified after being freed.
Corrupt value: 0x737666635f343332
sudoedit(75875,0x109abbdc0) malloc: *** set a breakpoint in malloc_error_break to debug
zsh: abort ./sudoedit -s \\

Doesn't bode well at all for it being non exploitable (due to ASLR sometimes it doesn't crash tho)
Any information on how it would be linked?
If this company is indeed run by the senior editor of the right-wing rag The Federalist, then it is deeply hypocritical. The Federalist is loading scripts from Cloudflare, Taboola, Quantserve, Facebook and others. This site is on SquareSpace.

You can't stand on a soapbox and whine about not being allowed to stand on a soapbox. These people think they're oppressed because they can't make death threats and plot deadly riots on federal property with impunity. Suck it up, put up a reverse proxy and host it on your own hardware. If people can run dark web marketplaces, you can sure as hell complain about the liberals being mean to you on your own hardware.
Do we know if any of the C-Suite of GME sold a ton of shares during this debacle?
[irrelevant link]
This looks like the thesis of the article:

> Our solution to this problem is developing free software and rejecting proprietary software. Free software means that you, as a user, have four essential freedoms: (0) to run the program as you wish, (1) to study and change the source code so it does what you wish, (2) to redistribute exact copies, and (3) to redistribute copies of your modified versions.

I'm not seeing how anyone is being denied profits. This seems focused on the user, and the choices the user should make, rather than the provider of the SaaS and what they ought or ought not to receive. Maybe I missed something?

> Do your own computing with your own copy of a free program, for your freedom's sake.
Why are you surprised? You've outlived your usefulness.

Yes. People who attacked Trump thought Biden would reward them. But actually, he can’t risk that they just enjoy attacking any government regardless.
Some of these software companies want you to use your work email so that they can go after your company after a while to pay licensing fees. The argument is that the software is only free for personal use and because you used your work email, it became commercial use. And because you used it for a while already, there are nonzero costs that your company needs to pay and cannot undo anymore.
Not saying all companies are like that, but I have seen some do this.
My company is headquartered in Cupertino, CA and I live and work in Dallas, TX. The obvious pros are I don't need to commute or really drive at all, I can work from bed (probably doesn't matter to most, but I've got 10 screws in my spine from past surgeries and it matters to me), and I can live in a 3,000 square foot 4-story townhouse within spitting distance of downtown for less than my sisters in California pay for a third of the space in the middle of nowhere.

I don't really see any cons or hurdles, honestly. Timezone coordination is clearly harder for the people on the coasts, but I'm right in the middle anyway. I have a security clearance and some of my software is deployed into a classified runtime environment, so not having access to a SCIF without traveling does make that challenging, but I imagine that specific challenge doesn't generalize much and doesn't apply to you.
Great question, and historically the answer is hyperinflation. In fact, there was one very well known historical case involving the Weimar Republic...
Who knows, you may be right. That would actually be the best outcome, regardless of the Comission losing face and Boris getting bragging rights.
yes, futures contracts.
15 Years in a Submarine Clowning with Fish
To be fair, a stern glance is usually enough to get a 2019 MacBook hot enough to cook your breakfast
> Sometimes people will put out rumors or even go on fiance shows talking about how poorly run some company is. Maybe they make a discreet call to their buddy at the ratings agency and have them downgraded a step.

Some people buy a stock, and then put out rumors or even go on finance shows talking about how great this company is and how its stock is undervalued. And then sell it at the peak, leaving others holding the bag. Yet people don't run around saying that we should ban people from being able to buy stock because of that.

Both the scenarios (the one you describe and the one I describe) are illegal market manipulation. Sure, I would not be surprised if market manipulation of the short side were vastly underprosecuted, but I don't think that's a reason to complain about short selling per se.
I don't think I disagree with any of that. But if you're implicitly arguing that more of the GP would be just fine for HN, then I do have to disagree.

Moderation comments are an unfortunate evil. To some extent they do the very things we're scolding others for. I don't feel very good about that and I'd love to find a better way—especially because they're even more tedious to write than they are to read. https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so... Unfortunately, the system doesn't regulate itself with community and software mechanisms alone. There needs to be a moderation mechanism as well, i.e. humans who are giving the system their primary attention and giving feedback to it. I'd never claim that the way we do it is the only way or the best way, just that it's better than nothing.

While I have you: could you please stop creating accounts for every few comments you post? We ban accounts that do that. This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html.

You needn't use your real name, of course, but for HN to be a community, users need some identity for other users to relate to. Otherwise we may as well have no usernames and no community, and that would be a different kind of forum. https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme...
Dodd-Frank and rules around trade settlement - in particular brokers have to post collateral based on complicated calculation to the clearance firm (DTCC) until the trade clears (usually T+2). Unfortunately it looks like DTCC increased that percentage to 100% for a few names (like GME) - https://twitter.com/KralcTrebor/status/1355172567242469377
>they'd still have to come back to me?

Depends. I was dealing with accountants who were very at home in Excel. They were fine with linking Excel to a whole table or query and sorting and filtering for the data they needed. Note that Excel can be actively linked, rather than just doing a one-time import. Something like emailing a subset of customer ID's would have needed my involvement. My users were mostly using the data for discovery, looking for patterns and trends in workflow and client needs.
Couldn't Robinhood just disable margin trading without disrupting cash trading?
No, it can’t. To exploit this vulnerability, you need the ability to run shell commands/arbitrary code on the system. Google Cloud SQL only lets you run SQL, and I would expect the servers to be locked down pretty heavily when it comes to non-database stuff.
fetch, unless you use proxies then request. axios won't work with https vs. http proxies.
I'd encourage you to read the CDA again. I suspect some things you think Section 230 requires are actually things Section 230 merely supports companies in doing. See Also: https://en.wikipedia.org/wiki/Reno_v._American_Civil_Liberti...
This page has critical misinformation which has already caused confusion on this thread.

Version number alone cannot tell you if you are vulnerable or patched! Many, many Linux distributions, including (at least) Ubuntu and RHEL "backport" security fixes to older versions of the software. That means you could be using an old version of sudo, but still fully patched and protected from this exploit.

Edit: furthermore, the patching instructions for WSL is completely wrong and should not be followed. The correct procedure is to just get the update from your distro:

sudo apt-get update && sudo apt-get --only-upgrade install sudo
I too dislike PHP, but this is one of the things I hate the most: this is like conflating addition and multiplication of types. Arrays and maps have separate use cases and very different trade-offs and PHP gives you no choice in the matter.
I'm not a hardware engineer, but I am a GPU-focused graphics engineer.

> C-style fine-level control over a GPU device as though it were a CPU.

Personally, I think this is a fool's errand, and this has nothing to do with my desire for job security or anything. When I look at how code in the ML world is written for a GPU for example, it's really easy to see why it's so slow. The CPU and GPU architectures are fundamentally different. Different pipelining architecture, scalar instead of vector, 32/64-wide instruction dispatches, etc. HLSL/GLSL and other such shader languages are perfectly "high level" with other needed intrinsics needed to perform relevant warp level barriers, wave broadcasts/ballots/queries, use LDS storage, execute device level barriers, etc. This isn't to say that high level shader language improvements aren't welcome, but that trying to emulate a CPU is an unfortunate goal.
I think the OP has a fair point. I could be way off but I feel few developer get excited about working on PHP projects. I jumped ship to Node.js around PHP 5 and haven't enjoyed working on PHP code bases ever since. I think this in part could be due to TypeScript, giving much more confidence in refactoring and moving a project forward. The massive npm module ecosystem is probably also a major factor.
The fact that WordPress and Facebook use PHP is more historic then being exemplary for it being an excellent solution.
On Go 2 Generics
Everything has its tradeoffs, the problem is what are you willing to give to get what, and I don’t think users know exactly that because systems have become so complex that even engineers sometimes struggle to make the right choices specially when pressured by marketing depts. To me personally i trust more a piece of steel wire than a motor-driver-microcontroller-switch-battery chain. Just for my door handles being able to move in and out.
I read Python and PHP's offline .CHM files, and was quite happy with the level of information contained there.
I Hired College Students to Run My Business (PK&C WINternship 2020 Report)
What's wrong with ellipsis as syntax? Plenty of languages have some sort of ellipsis (either 3 dots or 2) as syntax. See for instance https://en.wikipedia.org/wiki/Ellipsis#Programming_languages and https://en.wikipedia.org/wiki/Ellipsis_(computer_programming... . JavaScript/TypeScript also uses it in a similar way to PHP.
(Just checked and it crashed on me on the second plug-in...)
Been waiting for a WSL thread. Does WSL have a performance hit on Windows 10?

I sometimes can't decide if I want to use a familiar linux version of a program or a Windows version, but I like how WSL lets you access the windows file system
This is really making what used to be an easy to read, easy to learn language a lot less of that. Some of us still don’t use IDEs and are okay with more thoroughly defined code that is readable.

If people are so gung ho on adding in syntax hacks, shortcuts, etc, they seem to be bringing ideas from other languages and why not simply continue to use that other language? PHP seems to be looking more and more like Go or JS to me now. Anyone want to start a fork called “PHP Classic”? :)
The Armenian Alphabet
It’s not naked short selling. BME trades it’s entire share count in a daily basis, making it easy for the same share to be shorted multiple times.
> The second order effects are problematic though. Someone shorting a stock has an incentive to see a company fail. Sometimes people will put out rumors or even go on fiance shows talking about how poorly run some company is.

“ Tesla CEO Elon Musk had a number of things to talk about during Wednesday's quarterly earnings call, but spent a lot of time discussing the company's Full Self-Driving system. According to Musk, the FSD will be capable of Level 5 autonomy by the end of 2021.”

How is Elon Musk claiming (lying) that level 5 FSD will be available for Tesla vehicles in 2021 any different from short sellers making similar claims about the potential downsides of a stock?

FWIW, Elon Mysk said they’ll have a million robotaxis operating before the end of 2020. I believe there are 0 currently operating. [1]

I will bet anyone 10,000 dollars that Tesla will not have level 5 FSD by EOY. If anyone is willing to lend me money to make the bet, I’ll bet as much as they’ll lend me.

[0] https://www.cnet.com/roadshow/news/elon-musk-full-self-drivi...

[1] https://www.cnbc.com/2019/04/22/elon-musk-says-tesla-robotax...
Except for rules put into place by Dodd-Frank make that a legal requirement for all brokers (to remove systemic risk from DTCC). You can argue that it doesn't make sense for fully covered cash accounts - but it's not a decision Robinhood could make on their own - they are mandated by law to post that collateral from their own operating capital, and not use client assets (like the cash in their account).
As a side note, in O365 and a few other mail providers, you can set it up to drop any email into your spam folder that is not from someone on your contacts. I get a lot of spam on my work email, but I don't open any of it. All of it ends up in the spam folder. No idea if gmail supports something like this.
Yeah. You can optimize as many metrics as you want, but you never have all the metrics. You can optimize your kid's soccer/chess/piano/judo skills too. Maybe it will allow them to live the life of their dreams. Or maybe you completely crush their happiness. I know it's not the same, but hopefully people will get the idea. If something doesn't look healthy, trust your instinct too and not only the metrics. They don't capture everything.
It's trivial for the SEC

I don't know if you're implying the SEC is in cahoots with the hedge funds, and not just any hedge fund but one associated with SAC/Cohen whom the SEC went to war with. I'm sympathetic to your general point but as someone who has spent his whole career in the financial markets that seems vanishingly unlikely to be the case here.
> They didn’t manipulate squat, they were fighting to save their life.

These two things don't seem mutually exclusive. Actually, it seems like they'd be positively correlated. If you're fighting to save your life, aren't you more likely to resort to manipulation? And certainly when the cost of fines is several orders of magnitude less than the cost of closing your position at that point, it seems downright economical.
The usage goes further back then that. The first use was in 1896 by William Jennings Bryan in his Cross of Gold speech:

https://en.wikipedia.org/wiki/Trickle-down_economics
How does one borrow a share of stock?
I suspect a lot of people are just trolls trying to convince others to jump in so they can improve their positions.
Yes, I mean that with htmx it’s easy to make a page that works without JS but that works better with it.
I had an online interview last year, and it was basically me coding up as they supplied the criteria (in PHP).
For the life of me, I couldn't remember how to use array_column, but I knew that was what I needed to use.

They basically said "errr, you could just look it up?" - like, it was obvious that the interview was more about what you knew, and how to do things, rather than can you remember every little thing from ever about your job that you don't use day in day out.
The reason I’ve seen is that the domain on the email can be associated with the broader company account in CRM systems. This is used for lead routing, identifying an expanding interest within an org, along with getting more info about the company through lookup services for again lead routing based on size and location.
As if we needed further proof of exactly what kind of a company Facebook is and what their core business is.
For pointers to other vertices of this story graph, see https://news.ycombinator.com/item?id=25933543.

(Sorry for the annoying repetition:) Large threads are paginated. To see all the comments, you'll need to click More at the bottom of each page, or do this sort of thing:

https://news.ycombinator.com/item?id=25957748&p=2

https://news.ycombinator.com/item?id=25957748&p=3
I understand there's still trading going on overseas in after-hours trading. So foreigners from the Emirates (for example) can make money liquidating US hedge funds, but US peons can't.

Hopefully noone will do anything to piss off the Emiratis, like cancelling their fighter jet contracts or anything like that.
I don't think these things are okay. I don't see a realistic way to prevent them.
Not really. Canada is federalized, but still has a unitary authority for prosecution of crimes. There are very few countries operating parallel authorities, parallel criminal courts. Most countries have a unitary authority structure with the national government being the highest source of law. The US operates a bifurcated structure where States (50+ of them) are often the final authority on criminal matters. That is strange.
Yeah, it's more attractive to short it compared to 2 weeks ago, but consider:

(1) Price is determined by supply and demand, not one person's evaluation/perception of value. DOGEUSD was useless 3 months ago and is still useless (even more useless than GME), but shorting it then would've blown you up because of demand exceeding supply. The volume of the incoming retail flow is hard to predict, if enough retail people ascribe aesthetic value to it, the price will go up.

(2) Borrow is extremely expensive because of high demand for the relatively small float, so you need very significant edge to justify the high borrow costs.
> Their product can handle the high volatility, their finances can't.

Multiple times both here and previously, RH has demonstrated that their product cannot handle unexpected high volumes of traffic.

Also, their finances are part of their product. They are a financial services company. Money and finance is what they do.
You can have race conditions with message passing.
I had to increase the line-height to read it, was too cramped at 1.2.
Having been down this road perhaps a half-dozen or a dozen times, I take the same attitude towards exposing business processes to Google Cloud as I do to exposing myself to COVID19:

* Only when strictly necessary (there are no viable alternatives to Google login or YouTube for many purposes, and you need good search rankings)

* When absolutely necessary, use appropriate protection (don't rely on Google search for business, have fail overs for videos and auth, and do periodic Google Takeouts of my data)

If not for Google Takeout, I'd do a strict quarantine. It's kind of like the N95 mask for doing business with Google.

Note that this is on the B2B end. For personal use, I use many (free) Google services. It works great for things like maps, finding interesting videos on Youtube, using Android on my phone, or even sharing family photos. I am, apparently, a satisfied Google product (you know the old saying: if you're not a paying customer, you're a ....).
>the iPhone-maker abused its power in the smartphone market by forcing app developers to abide by App Store rules that Apple’s own apps don’t have to follow

Yeah... So?
PHP is incredibly easy for any competent programmer to pick up.
If you know C/Java you can get into php pretty easily.

If you use structured projects, (symfony) in our case its much easier to use and maintain.

We have older Java and Perl and Python to maintain. Its much harder to get those up and running.

The startup I worked at 8 years ago used PHP and got bought. I think the ability to get into it quickly and get something running is underrated frankly.
With a hand gesture so expressive incident to activation of the button, there really should be a buzzer sound.
Check out my app FUNDaily Looking forward for your feedback
Yeah, with fungible items you can easily do it, but you don't because all of them have the natural transformation into pure paper.

For instance, you could borrow a gold ingot and run through the whole thing. But there's no point in that since the validity of the whole thing rests on your creditworthiness and how good that contract is. So you might as well never borrow the real ingot and just write in the rest of the clause of how you are entitled to delivery of the ingot. That way you can trade them.

For shorts to be viable you just need sufficient liquidity that you know you won't fail to deliver on your side of the thing. Which is why fungible goods are easiest.
Would be an interesting case study to find out if remote developers from Mars are actually more productive due to lack of synchronous communication.
If anyone needs to patch CentOS 6 like I had to (I know, I know..), it's possible.

You'll need to install gcc, pam-devel and openldap-devel if you need it.
Then you can build from source using ./configure --prefix=/usr && make && make install

Oh and remember to switch your repos to CentOS Vault instead of the default mirrorlist if you need the packages mentioned above.
100% agree with these comments. I will never do unpaid on-call, a gas engineer is paid for being on-call, software shouldn't be any different. Its most likely because their are many people in software who will work on call for free, I see it first hand at my current company.
I would have never even thought to check until reading this, but apparently I make more than both the mayor of Dallas and the governor of Texas? I'm surprised they aren't paid more than they are. I suppose people who go into politics tend to already be rich and this is just another reason why.
Add the RFC library for fallback/server side of things.
> The problem with a conscience is that it gives you a tell.

We should encourage conscientious people to play more poker, I guess.
You're kind of both right IMO.

The great majority of products created by techies interested in startups are priced much lower than the market will bear, and so their prices should rise.

There definitely is a market out there for the cheapest possible version of something. Usually, turning a profit while moving a product at the cheapest possible price involves maximizing volume, cutting quality to be bare minimum, and ruthlessly eliminating overhead. Like, if there aren't thousands of people on the internet complaining about how crappy your quality is, you probably need to cut it further. I haven't studied it, but I have a hunch that most of the type of people who surf HN for business advice aren't interested in being in a commodity industry where you have to do these things to have a viable business. Or if they find themselves in one, they aren't going to be ruthless enough in the right directions to make it. They better find the right place to get advice for that sort of business, or they won't last long.
Sarcastic startup landing pages, generated with GPT-3
Suppose you're right. How do you explain the $1B loan Robinhood took out?
It's odd for a second, then seemed fine to me. Think if hexadecimal just kept going…
What use is a web app without internet access?

Also, as if no internet access = no refernce.
As long as it's not onions, that's what futures are for.

https://en.wikipedia.org/wiki/Onion_Futures_Act?wprov=sfla1
Facebook is fighting the good fight for evil reasons. They complain that Apple's restrictions on apps are not applied to their own apps, given them an unfair advantage and also preventing people from developing real QoL improving apps for iPhones. That sounds reasonable. But then the stated reason is that Facebook wants to be able to better track what people are doing with their phones, so now I want both sides to lose.
That could be seen as abusing their monopoly. Judges tend to take a dim view of that.