skysight-inc/HackerNews huggingface dataset:
>> Lets not forget how many security exploits we have to thank C for exactly this mis-feature.

> No actually we have to thank sloppy and/or naive programmers. The C language is clear in that it doesn't hold your hand.

While it is true that security exploits come from sloppy, naive, hasty developers, we should also remember that even the programmers of projects such as OpenBSD are not immune to C's pitfalls. This is why I think that it's so interesting when languages try to achieve what C does, while also making it more likely that a programmer who's tired or distracted can't actually get incorrect code to compile. Besides the usual D, Go and Rust that are mentioned, I should say that the language Clay is another very interesting project and it's a shame that it does not get the amount of publicity these other alternatives get.

> You can write an operating system in lots of languages besides C (and it has been done aswell), yet all the operating systems/kernels in wide use these days are all mainly written in C or a combination of C/C++.

I don't know that it's really because of some functionality proper to C; I feel it's more of a familiarity issue. People have been implementing operating systems in C since the early 70's, there is a lot of documentation on the subject and C is widely known.
This is incredibly annoying. I didn't realise how much I replied on Tumblr. I was trying to get the contact email for a few people for my YC application and they all have tumblr site's, I do too. Luckily Google has a cache.
May not be anything or may be..

I noticed a couple of days ago that some of our dns entries were mysteriously removed from level 3 servers which out of old habit are used for resolution (some of the ip's go back to uu-net/worldcom/mci)

Now the interesting bit is they were for private subnet ip's. They're working fine everywhere else.

Today the last of their dns servers removed the entries so I had users go to google (8.8.8.8) and all's well with our apps.

Level 3's entries for our external stuff is there, just the private subnet stuff is removed.

If others do this too and resolve with level 3....

edit: just found this: http://tracker.outages.org/reports/view/59
The key is that they effectively double their foundry output by supplying Apple their chips, which means that every one of their 58 million smartphones can have a larger margin. That's huge.
It looked like some sort of online gambling interface, which didn't help.

Nails what's horrible about it, thank you. I've always disliked its aesthetics but never realized before why it feels so extremely inappropriate.
My money is on Hurricane Sandy: http://www.nhc.noaa.gov/refresh/graphics_at3+shtml/084338.sh...
Tell me about this. I got 3 rejections, the last 2 about point 3.2 ("the app crashes"), after neither anyone in my team nor at our MS contact team was able to experience any problems. And the only feedback was a PDF showing a snapshot of the Windows desktop and some text that the JPEG compression had rendered unreadable. I thought it was a joke. Luckily a support person was nice enough to spend time reviewing the app and helped me discover the problem. Which was due to unclear and misleading expectations about the review process. Oh well...
Well, you wrote this:

>The corruption perceptions and international ease of doing business surveys and rankings would provide more statistically significant evidence to counter your anecdote.
No, it's been running for months.
BufferBox (YC S12) launches deal with transit system
[2011]...
But this is a very classy piece of copywriting.
So i'm an independent contractor and as such make quarterly estimated payments to the SC Department of Revenue. Luckily they have this ancient payment platform that is constantly throwing classic ASP errors. I noticed one when I did a payment the other day that made me suspect that the whole system was vulnerable to SQL injection. I decided not to poke much further and to warn them about it.

I've sent them two messages over the last few months warning them that a system likely created over 10 years ago that is vital to process hundreds of millions of dollars in tax payments shouldn't be throwing visible SQL errors and ASP errors and that this stuff is a huge security risk... never heard anything back.
Thanks, very helpful. The only thing I'd add is that the long rescission period is applicable only to consumer ACHs; if you make sure to stick with the "Corporate Credit and Debit" (CCD) transaction type, I believe the limit is a workable 24 hours or so to reverse it.
Props, really?

That's what i _expect_ them to do - otherwise i can't see anyone trusting/using them if even they themselves avoid their own product(s)..
Sounds like a good case for change.
This is a tempting argument, but think for a second whether you actually believe it. Are they the exact people who did that to him? Not at all. You can say all you want about how the government has or hasn't changed, but I think the fact that it's up for discussion is a good sign. It's a different time, different people, and if the people want to honour him I don't think that's necessarily a bad thing (even if he were able to judge). Of course, if you refuse to look past the symbol of government then I guess you're pretty much stuck where you said.
Show HN: Drawception. My browser-based drawing game (picture telephone)
Get Your Google Back (On Windows 8) [video]
so is developer.android.com.
US: Slow legal proceedings are Megaupload’s fault, don’t unfreeze assets
I would say it's over-the-top, not pathetic. It would be pathetic if Ceglia were charged with murder and he could only be convicted of not licking stamps. The quoted line is just silly. It would be at home in a Mel Brooks movie, except that mail fraud in the U.S. is no joke and carries serious penalties.
Someone please write a php interpreter in Python and call it "Phyton" just to spite this guy. Please?
There's less bureaucracy than you imagine. I asked a couple coworkers from the Go and Downloads team, "hey, should I post about this?" and they were like, "yeah, go for it."

But yes, it's kinda marketing because I love Go (which is why I joined the Go team), and I wanted to spread my happiness and want to see other people use Go.

But the Official Google Marketing Department was not involved. We don't have any fancy videos like Chrome. Just me emailing.
^ previous submission, ~ 1 year ago, plenty of comments.

please include a description or something next time, instead of a bare link. Otherwise it's hard to assess the relevancy without clicking: http://i0.kym-cdn.com/photos/images/original/000/000/681/wha...
Why sweet.js Matters
FYI: http://fyre.it/zcmvtx
No, I think that it's natural to be tempted by immediate gratification (watching stuff on YouTube, checking Twitter, reading xkcd archives) even when you really care about the delayed and more satisfying gratification of progress on a long term project.

When all those distractions are easily accessible from the same place you work (your computer) it seems ok to take measures to offload the task of avoiding them.
Thanks for the constructive feedback. We think we do have somewhat of a grip and significant feedback on what the pain point is that we were trying to solve: Shooting and sharing good videos with your mobile phone is hard and a lot of hassle and OneSec aimed to change all that. I do think we failed spectacularly to communicate that, though.
People still treat Kickstarter like a pre-order system, also Kickstarter disallows you from posting renderings instead of actual products (pretty much all game publishers do this).
You are correct, it just the whiny entitletard fandroids who have imagined an apology was forthcoming. They are as wrong about this as they are in their fantasy that Samsung does not steal product designs wholesale from Apple.
Your comment is a fantastic summing up of the hyperbole coming from turing fetishists.
Here's the page for Asia: http://internettrafficreport.com/asia.htm
Breath Technology detects serious infections in breath
For big ticket items you could count all the phone calls and contact form submits as conversions... but then calculate the final conversion rate manually as leads-to-purchases are tallied up.
I always wondered if there was a need for a cheaper, worldwide document certification system.

Of course you can get a notary to stamp a document or file it with the county clerk in your jurisdiction. But what about taking an MD5 of a PDF and printing it in the newspaper? Would that work?
Yeah, but here's the thing about the US. It's a large enough number of people, to the point where somebody would be making noise until it was remedied. Also, I'd like to think that the US is culturally diverse enough, that there are large communities and groups of people outside the standard "white male" category who are reading AlJ, and would complain loudly if said paper was fire-walled. Lastly, hopefully there would be trusted academics and professors who would yell and howl and moan about the ethics of it. Then the stereotypical American would get involved, over the simple facts that his is America, and he loves freedom.
I'm reminded the "Four letter words" from Rework. How many times have you been asked "Can you just get <feature> done. It only has a few parts and should be easy!"

Those two sentences nail almost all fo them.
The code running these should be on github and the binaries should be cryptographically signed to ensure it's the correct one.
ha i have no idea possibly. Either way that is where my inspiration came from.
This is a really great article and really similar to the compilers class I got to take in college.

Removing left-recursion from a grammar by hand! Woo!
There's no technological problem with creating a "contract bureau" - just demand contracts to be in a somehow-digital format (scanned handwritten document counts) and have everyone send [SHA1(document) + names of entities signed on the document] to the bureau.

Only problem with demanding this is that you /want/ people to be able to sell their car without access to a computer. That, and authentication.
It is a very good idea to write a small compiler for teaching purpose. However I think it would have been better to have clean code where the reader can understand what happens at each line. Here the massive usage of global variables makes it harder and unintuitive. Also there are a lot of functions which returns for instance 0 or 1 to signal their success or failure but then at the call sites their return values are always ignored. Also, the way the ∗_expr functions works in the part 2 is really, really weird and unintuitive (but this is due to the all-in-global-variables design). I could go on with other issues, but all this is to point out the big caveat: one should not take the code of the article and try to grow the compiler to extend it because doing so will lead to horrible spaghetti code. And that really is too bad, because it would have been an even better exercise for beginners to extend such a small compiler.
Sorry to disappoint, I wasn't joking. Nor am I in any way associated to Pando, Sarah, or anything related to them.
What does grumpy mean? I get frustrated with my code. If I'm jamming out or in a bug sesh I have been known to be loud or a bit obnoxious, but it's all in context.

As with most posts like this, context is key. What's appropriate around my friends is not appropriate around my mother and the skill to recognize that is KEY but it's also not one that you're likely to learn from an article if you don't already "get it".

If grumpy just means rude and disrespectful, then you're just an asshole and your profession isn't super relevant.
Master it in 10 days? Forget most in 10 more.
From that list I'd go Surface RT. If you'd look at other options I'd say something like the Dell Latitude 10. That's a tablet but with the full Windows 8 experience.
It makes me very glad that Windows ... either Vista or 7 and on have allowed individual-app volume control
Hackers steal 3.6M Social Security numbers from SC Revenue Department
The SEMAT Kernel: A thinking framework in the form of an actionable kernel
Great service. Makes shopping for groceries a cinch. My only qualm is that they're not serving NYC yet. Hopefully this funding means fast expansion!
Congratulations, Apoorva! I've used Instacart a few times now and it's very intuitive and straightforward.
Of course, I don't know of a better system, just that the current system seems archaic. (You probably couldn't create a centralized "contract bureau" in the federal government, because many contracts are private, until someone sues.)

Of course you can! Only submit a short cryptographic hash (summary), instead of the plaintext. Along with the digital public-key signatures of the signing parties.

https://en.wikipedia.org/wiki/Cryptographic_hash_function

https://en.wikipedia.org/wiki/Digital_signature

You could even privatize it. There was at least one startup/concept like this on HN, but I forgot where.

(edit): Here's one discussion:

http://news.ycombinator.com/item?id=4618362
In that case, what is the ratio of "time spent doing ops-related tasks" vs "time spent developing new features" in your company? Please offer an honest evaluation. Everything has a cost; I'm genuinely curious about data points other than my own.
No affiliation with Pando at all. Sorry to disappoint.
I completely agree that Google is likely to do better than many teams, modulo your second point (which I completely agree with - generic is much harder than specific). For me it really just comes down to the lock-in aspect: with GAE if you decide that Google isn't taking the platform in the right direction for your business you're looking at something close to rewriting your application. This is far from the most likely outcome - although pricing can be interesting - but it's the kind of thing you really want to consciously acknowledge, similar to the way Netflix has accepted the risks of AWS by investing heavily in failure management tools.
Very slick!

How are +/- stars done? I clicked the star a few times, and it seemed to count down from 4 to -3, which persisted on page reload. I'm not sure if others found a "subtract stars" button that I did not notice, or if I was causing it.
For me and my co-founder, especially during the dark days of 1) tech not working 2) clients stopping service with us or 3)someone yelling at us over Twitter, email or phone - it is Critical to have a team and more importantly to have a partner. I don't share all of my concerns with the whole team because that could shift the mood of the company and damage our internal resolve. But I need to be able to talk about the full reality of the situation with someone and depending on who is having an up day one of us can rally the other person around to being enthused again.

Without that, I know there would be days I would be lost, and if that lingered at all I could see weeks of inactivity at exactly those points where we needed to move fast.

I whole-heartedly agree with Jessica that having a co-founder that, above all, you can trust is huge (I'm lucky that I do), but I agree with the other reply here that a single founder, in almost all situations is more trouble than any sort of cofounder disputes.
http://www.echosign.com/

http://www.docusign.com/
The thing is, attendance at Liberty is non-compulsory. I'm sure it does feel like China to the more worldly of its student body, but there is no law compelling them to attend there. (Maybe family is, but that's different story ;)

I think it is very inaccurate to portray the environment and "conditions" at Liberty as a microcosm of the US, let alone as an apt comparison to the people of China being kept in the dark by their government.
Insight from Noah Kagan on moving on after getting fired from Facebook
No, it is not a logically sound argument, and is not proof. But in this world of imperfect information, sometimes you have to infer certain facts simply based on action and reaction. Also, truth (or fact) in such articles is very seldom a 1 or 0, there are many shades of it, many sides of the story. it's like there are a million other little letters between A -> B, sometimes its a guestimate where is falls on the scale. Another thing to remember, even articles appearing in the NYT are written by humans, who aware of it or not, write with some pre-bias, or with an intent.
Very cool. I think more articles like this, about how a compiler is not magic, should be written.

It still amazes me how many programmers I meet think that a compiler is something that they could never write. I say a production compiler might be too much work for just one person, but in its basic building blocks it's actually relatively easy to write.

I say this after trying to write one just to overcome the mystery, even though I probably won't need to ever write my own professionally.

You can find my attempt at:
http://www.codedemigod.com/jack-compiler/
https://github.com/alaasalman/jackcompiler
China looks inwards, not outwards. They fire-walled off the NYT awhile ago from internal users.

The USA has been fighting a very dirty fight against Iranian science programs, including using the stuxnet worms. Iran was also recently fingered for attacking Saudi networks.

EDIT: The West also crashed Iran's currency, where it lost 40% value in one week.

FYI: most serious attacks come out of Chinese networks and are managed by Eastern Europeans where the attack software is written.
Etsy Had Nearly 1.5 Billion Pageviews in September
Most Kickstarters for games now include or add support for Linux. I doubt most games would do it if not for HumbleBundle which requires Linux support and can earn you $100k to $300k or so. If not for HumbleBundle the number of new customers a Linux build gets you is almost certainly not worth it.
> If they were to give it, say, 16-way predicated SIMD

I think that would completely defeat the purpose of the architecture, as it'd massively bloat the transistor count per core. Their roadmap is for 1000+ independent cores on a single chip, not stopping at 64 per board.
Yea, that's totally our fault. We added an email signup form, but screwed something up. It should be working now!
This looks really nice! I will give it a try ASAP!
i'm not sure. I just threw a DISQUS plugin there for demonstration purposes.
self-righteousness: check

correctness: check
"But perhaps Topsy's biggest selling point is what it doesn't do: the service doesn't reveal user scores. That simple, easy to read score - Klout's calling card and biggest selling point - is also its biggest weakness. Obssessing over that number can quicly become addictive - and separated from geniune social influence."

Absolutely. This has been known for a long time:

http://buildingreputation.com/writings/2010/02/on_karma.html
Thanks for the update. I hope that you didn't read that I was asserting that the interest wasn't there, just that it wasn't clear from the post.
The site seems to be down
Maybe this time around the business can be profitable at scale. What few people know/remember is that Kozmo, despite ultimately burning large amounts of money, was profitable in three cities right before they shut down.

I love Instacart, I use it almost every day! Glad to see some big name investors agree.
Simpler: include in the contract a clause that says "the version of this text that counts is in a PDF with SHA1 23afb87c...".

You still need a way to prove that the other side really signed the document you hold, and willingly. Notaries work.

But this system is not forced - so it protects the side holding a real contract form the other side denying they signed, but does not protect you from a fraud turning up with a contract that you didn't really sign and claiming that you did, you just didn't bother to go to a notary with him.

If there were a way to publicly claim "from now on, only contracts signed by my private key count as really signed by me... But it's not easy to implement such a measure. Every one you sign contracts with needs a really easy way to check if you declared this in the past, otherwise you can fraud them by signing a contract only with a pen. And they need to be aware of this new law.
I saw a commercial for a proposal that just said to vote yes on it. Didn't have any information, just vote yes on said proposal. I googled the proposal to figure out what it was and the first page of results was advertisements/propaganda to say yes on proposal two. I figured, well I guess I am meant to be a low information voter...
Good for them - I use Instacart at least weekly and it's a fantastic service. I really hope it's sustainable, as same-day delivery services have had trouble in the past. Launching in the valley where people will pay to have more time was a great idea, but I anticipate a long road ahead when it comes to middle America.
Not quite.. it seems the Go app is just a webapp run on the origin server(s) that their CDN pulls from. Chrome installs/upgrades would only fail once whatever caches expire.
My email is obsfuscated in my profile. Should be pretty clear, conditional on your humanity.
If Turing were to be chosen to be on a bank note, I'd hope that it was for his undoubted achievements in his field rather than a sense of guilt or sympathy.
> I would love pointers to Markdown processors that are implemented in a more principled way than the original code

This is almost what you want:

http://news.ycombinator.com/item?id=555153

EDIT: wrong link :(
Check out the video from Boeing. At about position 0:42, you can see the CD drive open and the disk inside comes flying out of the tray!
if you have some cheap speakers, set hardware volume somewhere over 50% and then never touch it. Use the software volume. That's because the hardware volume button will almost certainly break (mine were Logitech).
New Megaupload to launch on anniversary of closure
Completely agreed, however a copy of the certificate is what they're asking for.
NYC has FreshDirect though... How does this compare?
TEAM = Toll Ein Anderer Machts
You might want to try real hardware anyway since iOS apparently does some accidental touch detection at the edges. Anyway, that's how I interpreted the website.
I'm okay with Turing occupying that position.
>C requires a level of unassisted perfection that we spent forty years demonstrating nobody can attain.

So there is no exploit-free C code out there? It is just impossible to write C code without buffer overflow bugs?

>Tools that fail in human hands, shouldn't be.
If so why don't we throw out all programming languages? You can create buggy code with far-reaching implications in any sufficiently complex programming language, buffer overruns are but one type of bug.

And relating back to 'tools', we have lots of great tools at our disposal these days which can be automated to help identify possible vulnerabilities in our code. There really isn't a 'either you use a safe language or your code will by definition contain exploits' situation which some people try to paint.
Desktop browser market share across countries
These are similar to Amazon lockers in seattle right? Interesting business model (would love to hear more about it somewhere)
> This brilliant, charming, odd, driven workaholic could have turned the old industrial heartlands of Lancashire into a British Silicon Valley and perhaps America’s brightest and best would have flooded east across the Atlantic.

This just another example of the British yearning for bygone days in which their country was the center of the world.
A Halloween SEO Infographic: Cool but Scary, eh
Much lower
I've got a soundbar connected to a Dell U2711. If I play a piece of music on YouTube and the volume (of the YouTube player) is above 50%, the sound is distorted. Since I can't control the volume in Mac OS X, and changing the volume on the soundbar itself doesn't stop the sound from distorting, I'm dependent on the volume control of the application I'm using.
Yes, they did, and Turing was chemically castrated. Not by the baddies, either. It might not be going to war to die, but that is still pretty messed up.