skysight-inc/HackerNews huggingface dataset:
I've seen a real-world example something like this:

int a[32] = {...};

int flag = 1 << index;
if (index < ARRAYSIZE) {
a[index] = x;
return flag;
} else {
return 0;
}

The "1 << index" operation is undefined behavior (!) when index is greater than 32 (on a platform with 32-bit integers), even if the result is never used!

The compiler inferred that index must always be less than 32, which allowed it to optimize out the array bounds check, which turns the code into a write-anywhere gadget.

Note that if the standard had not declared "n << 32" to be all-bets-are-off UB, but instead had said something like, "it results in some implementation-specific value, or maybe traps" -- as a rational person would presume -- then this would not turn into a security problem.
> Anytime you are cooking something acidic, tomatoes, vinegar, wine. I try not to deglaze meat brownings into sauce in cast iron.

I wouldn't simmer an acidic sauce in cast iron for hours, but this is poor advice. Deglazing will not damage the seasoning on cast iron pan once it is properly seasoned (and maintaining that is easy, contrary to lots of what you hear).

Unlike to your experience, I don't find them functionally equivalent for a number of things, which is why I have both (and enamel cast, much better than almost all clad steel dutch ovens that aren't really expensive, as most of them don't clad far up the sides)
Yes, this is from the same person. Turing Tumble is almost amazing. Unfortunately, gears and balls used there are not reliable enough and more complex circuits have abysmal reproducibility (~50%).

I tried it with my kids and they were very excited up until this unreliability killed all the fun. I wish Turing Tumble had a premium version with a better determinism.
Or let it cool down, and use chain mail.

For seasoning to form the oil needs to turn into plastic. A wet layer of oil that isnt heated wont do that.
> “In reality, noone is struggling with the web”

How do you know? Is there usability research to support this claim? Probably not, since practically no one does actual usability testing anymore. Product managers just slap something together and then start A/B testing to fudge the narrow metrics that they need for their performance reviews.
> all of the tricks which make "malloc" work,

What are those, exactly? AFAIK, you can safely track memory addresses by storing them as intptr_t/uintptr_t.
"Moments later, his computer’s command line came back with a response: “File not found.” He examined the Rackspace server’s contents again. It was empty. Leetham’s heart fell through the floor: The hackers had pulled the seed database off the server seconds before he was able to delete it."

I get the compulsion to delete it, but deleting it wouldn't have provided any real comfort. You would have no idea if that was the only copy. So, delete it just in case it is, but it doesn't change what you would have to do afterwards...the master keys have to be assumed leaked.
From the article:
"My staff visited 79 nearby stores. Forty said they wanted to hire. Twenty-four said they'd hire people with no experience."

This is John Stossel's favorite stunt, he has also walked around offering to hire unemployed people to do manual labor for $8/hr, and been surprised when he doesn't get takers.

Advocating for people who are qualified, and have experience doing higher-paid work to take entry-level jobs feels like a waste. It's pretty clear that these employers aren't willing to offer higher pay, or they would be able to fill their openings, just like white collar positions are filled in a reasonable time.

"We are always hiring" is quite a bad sign for an employer.
Apparently torrenting sci-hub is a thing right now https://www.reddit.com/r/DataHoarder/comments/nc27fv/rescue_...
Are we not all generating income using the work products of our elders?

None of this happens in a vacuum. Their contributions multiply our income.

If we work with someone on a project, we don't expect them to work for free do we?

Well, look around. The machinery of society was not, and is not free. "Your income" is the product of many people over a sustained amount of time.

Doing it all on your own looks very different.

That said, the only reason pensions are under discussion is the very wealthy take too much value and are not required to help fund the system.

In the US, the cap is something over 100k. Raise that and the funding problem goes away. That cap should be raised because everyone benefits from the labor products and fertile society we live in today.

Those of us who end up with huge benefit and who do not contribute in like kind are literally diluting the future for those to come for arguably self serving in the now. I have no problem with self serving choices either. Work hard, play hard, change the world.

All good.

This is about net good, and talk of ending retirement is talk that completely ignores why we have Social Security and work until we drop is as negative as child labor is.

Some of us may choose to do that. I might!

But to make excuses for what is basically unbridled greed and largess impacting so many other people unnecessarily?

Not all good.
Heh, sounds like this list (not sure if this is the orginial)

https://www.kalzumeus.com/2010/06/17/falsehoods-programmers-...

People have exactly one canonical full name.

People have exactly one full name which they go by.

People have, at this point in time, exactly one canonical full name.

People have, at this point in time, one full name which they go by.

People have exactly N names, for any value of N.

People’s names fit within a certain defined amount of space.

People’s names do not change.

People’s names change, but only at a certain enumerated set of events.

People’s names are written in ASCII.

People’s names are written in any single character set.

People’s names are all mapped in Unicode code points.

People’s names are case sensitive.

People’s names are case insensitive.

People’s names sometimes have prefixes or suffixes, but you can safely ignore those.

People’s names do not contain numbers.

People’s names are not written in ALL CAPS.

People’s names are not written in all lower case letters.

People’s names have an order to them. Picking any ordering scheme will automatically result in consistent ordering among all systems, as long as both use the same ordering scheme for the same name.

People’s first names and last names are, by necessity, different.

People have last names, family names, or anything else which is shared by folks recognized as their relatives.
People’s names are globally unique.

People’s names are almost globally unique.

Alright alright but surely people’s names are diverse enough such that no million people share the same name.
My system will never have to deal with names from China.

Or Japan.

Or Korea.

Or Ireland, the United Kingdom, the United States, Spain, Mexico, Brazil, Peru, Russia, Sweden, Botswana, South Africa, Trinidad, Haiti, France, or the Klingon Empire, all of which have “weird” naming schemes in common use.

That Klingon Empire thing was a joke, right?

Confound your cultural relativism! People in my society, at least, agree on one commonly accepted standard for names.

There exists an algorithm which transforms names and can be reversed losslessly. (Yes, yes, you can do it if your algorithm returns the input. You get a gold star.)

I can safely assume that this dictionary of bad words contains no people’s names in it.

People’s names are assigned at birth.

OK, maybe not at birth, but at least pretty close to birth.

Alright, alright, within a year or so of birth.

Five years?

You’re kidding me, right?

Two different systems containing data about the same person will use the same name for that person.

Two different data entry operators, given a person’s name, will by necessity enter bitwise equivalent strings on any single system, if the system is well-designed.

People whose names break my system are weird outliers
. They should have had solid, acceptable names, like 田中太郎.

People have names.
We also say "Perifereia Attikis" for the municipality (?) of Attica. I don't find it fancy, just not often used.
Anecdotally, I find about as many bugs in my Java code at work, as I do in my hobby C code, including "dereferencing null pointers" aka NullPointerExceptions.
I’m one of the few ‘people of colour’ in tech who’s risen to this level
These phones had like 1 MB, 2 MB, 4 MB of RAM. And these were 3D-accelerated games running on them. A GC language was definitely the wrong choice for the platform, but J2ME was the industry standard because portable. So if you're allocating a dozen objects in a frame it's best to GC them in the same frame or you're going to lose tens of frames later.

Even in modern times, for the longest time Android Java apps had laggy scrolling due to GC hitches that the refcounting iOS Obj-C apps avoided.
To add to this: I don't get why C++ distinguishes a latch from a barrier. Both of them are effectively a counter with the ability to decrement that counter (in a thread safe way) and the ability to wait until the value reaches zero (or return immediately if it is already zero). The only difference is that is a latch does those things separately from different threads while a barrier does them both at once in every thread. That's even reflected in the similar method names: .count_down() and .wait() on latch, and .count_down_and_wait() on barrier. Why not make all three methods be methods of one class, which simplifies the API and potentially allows other use cases?
What the author is suggesting is not creating an incentive, it's creating at threat. Take the job offered (no matter what it is), or become homeless.

It's misleading to engage in this labor debate (support vs jobs, etc) without also including a discussion of poverty. Our system is constructed to keep a large group of workers just at poverty level where they have no real options but to take work offered on any terms.

The enhancement of unemployment benefits has revealed this normally hidden dynamic.

This is just as much about a semi-permanent class of exploited low wage workers as it is about lazy people preferring unemployment to work.
Might want to check out some of pg's essays:

- How to start a startup: http://www.paulgraham.com/start.html

- Do things that don't scale: http://paulgraham.com/ds.html
I find it similarly disturbing to hear of kids torturing animals, which apparently is/was kind of common?

I've never done it myself and only knew one person who (as an adult) admitted to doing it as a kid, but apparently it is/was a thing.

When I read that many serial killers tortured animals when they were young before moving on to attacking humans[1], it somehow didn't surprise me.

The phenomenon reminds me of Hogarth's famous series of engravings on "The Four Stages of Cruelty"[2], which starts by showing children torturing animals in the streets of Eighteenth-century London.

It's appalling to me that this sort of behavior was ever tolerated.

[1] - https://www.nytimes.com/2010/06/13/magazine/13dogfighting-t....

[2] - https://en.wikipedia.org/wiki/The_Four_Stages_of_Cruelty
> If an American author had written

This is a common pattern of false equivalency, like "reverse racism" and the likes.

The analogy is invalid because the harms of discrimination come from the power imbalance.

In this case, immigrants in the US are in a position of disadvantage, due to linguistic/cultural struggles and the perception issues they cause. Perpetuating stereotypes that reinforce that perception causes harm.
#6 - our first 10 customers came from customer development interviews, then our next 10 were referrals from them, etc... (did this twice).

If you're not getting referrals then you may not be solving the problem or the problem isn't that valuable.

Once you have 10-20 customers from outside your network it's an early indication of product market fit.

Next, hire a full time marketing leader.

Over simplifying a little, here's a more product focused answer from a few weeks ago (the other answers in the thread were excellent): https://news.ycombinator.com/item?id=27059370
My favorite thing as a Windows user who (shocker!) actually keeps my admin account separate from my user account, is when I have to sign in as admin to install something and then... all the data/env/shortcuts get set up for the Admin user instead of my user account. Many Windows installers break in various ways when you're applying the most basic security practice of only signing in as Admin when needed, and not constantly rolling around in an admin account.
There is no way to change the phenomenon of "World's largest iceberg", because the world will always have a largest Iceberg.

The largest iceberg ever was B-15 in 2000.

https://en.wikipedia.org/wiki/Iceberg_B-15
My partner got an Instant pot but I don't like the meat that is made in it. Maybe it's overcooked? Tomato-based ground meat (e.g. ground lamb) sauces are tolerable.

I generally prefer my meat fried (seared) in a cast iron pan and finished in an oven (if necessary, e.g. a big piece of beef).
I cant recommend this enough for great heat in small spaces. Extremely portable as well.

https://www.ikea.com/us/en/p/tillreda-portable-induction-coo...
Even if I'm using a JIT-ed product like C#/Java apps, I might still need to use OS-specific features that might differ from the ARM vs x86 flavour of Linux.

I develop and test against docker containers that run on a specific image + arch + base OS.

Even though my environment is supported on ARM, I am still not keen on using ARM servers even if I think it will work. There's just too much risk involved and I don't have the time to set it up and test it thoroughly.
Demeo is a turn based D&D clone that is pretty fun.
I just went through all the Confidentiality agreements I could find in my mail spool and none of them had an explicit time limit. Is it normal for people to have 5-year NDAs, or even 10-years, for company secrets? How does that make sense? One of the main characters in this story had a tenure at RSA that exceeded 10 years.
new Camrys cost 75k in Europe?
yeah, see https://github.com/google/breakpad/graphs/contributors
luser was contributing as Mozilla staff, Gabriele is too.

And a bunch of others folks (I counted 3 more)
Yep. Wanna know why my M1 Macbook Air never gets any usage? Because all my servers are x86.
A fun historical example: https://feross.org/gcc-ownage/

But yes, generally, UB manifests as "the compiler is allowed to assume this doesn't happen" and the bad stuff is a consequence of doing things following those assumptions, not the compiler going "oops well lol UB time to screw with this person."
While technically correct, “undefined behavior” in terms of C and C++ refer to what the standard calls out explicitly as undefined, and not a simple “it’s not referenced, therefore it’s undefined.”

For example, signed(?) integer overflow is explicitly undefined by the standard, but as @formally_proven said, just because write(2) isn’t mentioned doesn’t mean usage of it is undefined.
Sounds like good public policy! Considering real wages for most Americans have been stagnant for decades, the government should drive wages higher.

https://www.pewresearch.org/fact-tank/2018/08/07/for-most-us...
an iron whisker with a single crystal defect in it has dramatically different macroscopic properties, especially tensile strength, from an iron whisker without a single crystal defect.
Under-desk treadmill. Very relevant for HN. Support your vascular system, hips, and your back. Sitting or even standing still all day at the computer is extremely unhealthy. I now walk while working (and while I'm typing this) 1-2 hours/day, taking 10-40 min walks every time I've been sitting for an hour. Does not affect productivity at all once you get used to walking at a slow speed, and may even enhance it.

Cheap ones on Amazon (~$300) work fine, but you may have a little maintenance every month or so. If you lubricate it occasionally and never put weight on the back roller, you shouldn't have problems.

Disclaimer: not a substitute for exercise. Exercises slightly different muscles and not as well as real walking.
I'm not particularly interested in some "studies" that come out with statistics saying its hard not to be obese when poor. The fact of the matter is that it's possible to eat relatively healthy affordably (e.g. rice, potatoes, food on sale/discount), and that if you were truly poor you should be saving money by eating less food.
Have you ever used Beyerdynamic headphones?
Optimizing the wingtip on a 747 actually sounds interesting, and it's the sort of thing that could meaningfully affect the world. It might even prevent more wars than the SR-71 program in terms of lessening ecological and environmental pressures.

A much worse career would be convincing regulators that new aircraft like the 737 MAX don't need any additional training. Maintaining lists of open exploits, and keeping them secret from vulnerable parties is that kind of job, where you're making the world less safe in a perversion of your ostensible goals.
> I've been able to do 6 hours in a single day

Is... Is that a typo? Six hours of continuous driving in a day is a weekly commute for some. 8 to 10 hours a day is fairly normal here...
There are two problems: (1) hardly any History of Art and Architecture people play competitive multiplayer games, which are far and away the gaming zeitgeist, (2) you can't be taken seriously in a History of Art and Architecture program taking a positivist or normatively-positive approach to video games.

There are a million interesting things you can say about architecture in video games! There are more people that can close their eyes and visualize the exact locations of the plants in Counter-Strike's Office map than there are people who can visualize any other building anywhere in the history of the world, other than their own homes. And it would be really interesting to just talk about the design of levels as spaces for killing in a fair way, as opposed to say, architecting a museum or a school.
Note that these work as advertised on Windows 10 at least. I seem to recall those were listed as edit keys in a cmd or terminal window at some time in the past, but not when I just checked.
For context, it's helpful to consider the size of the average unemployment check in each state: https://www.cnbc.com/2020/07/23/average-unemployment-insuran...

Federal benefits currently add $300/week to this amount, which roughly doubles the payments. The recent tax changes make this effectively untaxed income for most.

Now obviously $2.5K to $3K per month (including federal +$300/week) isn't a luxurious income, but that number is at or slightly above the median income in the United States.

To understand the issue: If someone has a choice between working 40 hours per week plus commutes to earn the median income or working 0 hours per work with no commutes, it can be difficult to convince some people to get that job.

Even a job paying more than unemployment benefits can be unattractive. If someone can collect the equivalent of $40K/year tax-free from unemployment by doing 0 work and they're offered a job that pays $60K/year (taxable) for working 40hrs/week, they only stand to gain about $15-20K (after taxes) by taking the job and leaving unemployment.

That's the crux of the issue: Even if people may be able to earn more by returning to work, the marginal increase in their payments might not be enough to incentivize them to work 40 hours per week.

If you're making $100K/year and have a career path and a mortgage and car payments and bills, these small unemployment payments may sound too paltry to even consider. However, for young people living frugally, it can be tempting to earn the median US income for doing 0 work, having all the free time in the world. Candidly, this is exactly what some young people I know are doing. Although some of them were just caught trying to check in to unemployment benefits while on a roadtrip out of state. Apparently unemployment portals do GeoIP checks now in an attempt to catch things like this.
People were absolutely getting verified because they knew somebody who worked at Twitter. Old boy gang stuff.
The best way to learn is to do because learning requires tight feedback loops.

You have more or less the correct idea with these steps, however they should be weighted (and continuously re-weighted as you progress).

I would add an additional step 0: commit to yourself that this is something you're going to see through. Do you want to start something because of a sense of FOMO or because you genuinely enjoy creating? Are you ready to quit your job and start, having the confidence in your tenacity? Importantly, your internal motivations will inform the amount of weight that should be put into each step.

For example, if you're building something to solve a problem that you yourself experience, steps 1 through 4 can be weighed at 0 and 5a (5 should be split into distinct parts) should be weighted at 1. Assuming the behaviors which give rise to your need are distributed, within the general population, on a bell curve and you fall somewhere within a standard deviation of the median, you are your average customer and don't need to prove the market ahead of time.

Overall, YC's advice to "build something people want" is spot on. Do that systematically and everything else is more likely to fall into place in spite of your weaknesses.
I have a somewhat contrarian perspective to your #1/2. Instead of starting with an idea, start with a market. Maybe even a problem in that market. Then go out and have as many conversations as possible with people in that market to really wrap your head around what problems they have and how they currently solve them. Only after that, start testing solutions to their problems to find marketable products or services. The 'idea first' mentality so often leads to confirmation bias.

Lastly, as a full-stack engineer who has made the transition into 'successful' full-time startup ceo, I advise to to focus less on the technology than on the sales and customer relationships. Tech skills will be your competitive edge, but personal relationships will be the foundation of the business.
Point to where I wrote they had to live with the family?
No Meetings Before Noon
I did ear plugs for a long time but really disliked the discomfort (to me at least) of inserting them in my ears. I found hearing protectors, typically made for industrial purposes, to be much more comfortable and effective.

Just do a search for "noise reduction earmuff" for this option. They're obviously not a good solution for sleeping but work well for working.
He has a point, although that is not all there is.

Most web stuff dont deploy on x86, they deploy on VM or more specifically JVM. Which is someone else's problem. Amazon and Oracle are both spending resource making sure it works flawlessly.

I mean seriously, most doing Web Development dont even want to touch the VM.

You may want to ask Amazon, who is trying to get as many Graviton 2 produce as possible from TSMC because the demand for them are outstripping supply.

And all of that was before Apple even announced their switch to ARM on Mac.

For some workload it is half the cost on R6g than x86 instances. And for some like Twitter, they will invest into making sure it works with ARM. Those works get filter down the pipe. Medium-Large size companies see ecosystem matures and clear cost benefits they will move.