skysight-inc/HackerNews huggingface dataset:
Besides the already mentioned:

- IOC : low overhead, only for integer overflows

- KCC : high overhead, for all kinds of undefined behavior, limited standard library support (and source-level only)

- Valgrind : medium overhead, for various memory errors, binary, may fail to detect undefined behaviors that have been made undetectable by compilation.

You may also find:

- various memory-safe C compilers. There are plenty here, I had better let you do the googling. medium overhead, generally better than Valgrind at being sound (since they work at source level), unless they trade efficiency for soundness: http://research.microsoft.com/pubs/101450/baggy-usenix2009.p... . May require all source code to be available.

- Frama-C's value analysis, a static analyzer that can be used as a C interpreter. This is what I work on. Limitations comparable to KCC, quite a bit faster (but still high overhead), some slightly different design choices. I do not have a good single write-up for this use, but some details are available at these URLs:

http://blog.frama-c.com/public/csmith.pdf

http://blog.frama-c.com/index.php?post/2011/08/29/CompCert-g...
30% of MBA's are engineers, and the most common degree for CEO's is engineering. 1/3 of S&P 500 CEO's have an engineering degree, even though only a small fraction of the S&P 500 is tech companies.
Hi taganwald, I'm the one who outright called you a hypocrite. I hope you don't take it personally, that's just what I feel reading this. I'm a programmer because that's what I like doing, not because I think that this is the best way I can contribute to the world.

To be honest, even your last line doesn't impress me much. I've been told smoking is bad and I never smoked. I've also been told to go to university and work in a stable job. Not all advice from older people is applicable to everyone. I will not regret not being a doctor (or whatever you are advising) because I am happy and the world needs more happy people :)
The Google crawlers, at least, will only consider a robots.txt on a subdomain valid for the subdomain it was served from.[1]

[1]: https://developers.google.com/webmasters/control-crawl-index...
Yup, Save The Cubes was my first, less polished, title. I'm glad you enjoyed it!
Dawson student expelled after finding online security flaws
Apache runs on all hosts, on port 8080. It cannot run on the loopback adapter, because it has to be externally visible to the varnish instance which is running and listening on the floating IP. (However it is firewalled such that it is only accessible within the VLAN.)

The floating IP is implemented via ucarp, and when a host becomes the master pound and varnish are both started automatically. (They should be stopped when a machine loses the master-IP, but this is not currently done.)
There needs to be (if it does not already exist) some method of doing completely anonymous and confidential disclosures that somehow get to the the right person.
The Best Web Design Goodies of the Week #6
Take a look at http://tent.io
Hate being a buzzkill, but that is precisely what couchsurfers was before AirBnB.
> it was a large amount of extra work to get that performance boost.

Not really, actually. It took a lot of time to document the transformations, but actually doing the coding was short, much less than an hour total.

> The global re-arrangements of the way data flows through the code are more difficult than many micro-optimisations, not less, so I don't understand how you can claim.

Maybe more difficult for you, but not for me. Micro-optimizations are actually harder for me, there are infinite possibilities there, flow has really only one (or very few) 'proper' mapping(s) from problem space to solution space.

> And you don't have to be an expert in C to make the claim he is making, because most people are not experts in C, but might turn to it because "it's faster".

Every tool has its uses. If you pick C then probably you're doing so because you are convinced that you need it. You should then study how accomplished users of that tool use it, not stop at the first naive use that you come up with yourself.

> It's precisely this kind of person who needs to understand that with their level of knowledge, and the amount of effort that they might put into optimisations, Haskell can be just as good or better.

That's very well possible, again, I do not know Haskell so I can't comment on it. But I don't see any meaningful comparison between the two languages here, speed certainly isn't it and you failed to acknowledge that the article in fact did make that claim.
In that case, you can always opt to return bool(return_value), which lets you return True or False without the ugly if / else : )
What about when Gmail moved to the new compose format? They totally did an overlay style walkthrough to get existing users accustomed to it.

Doesn't that undermine your argument and example?
Wow, that's a very inspiring story. I will keep this in mind as I continue to develop more and more games. :)
Functions as first-class values, lexically-scoped closures, map, curry...objects, methods, classes & class inheritance...immutable objects that can have their pointers optimized-away by the compiler.

This sounds ahead of its day for a language intended for industry.
I'm curious, how often does this occur?

"included the clause that urges you to get advice from a lawyer"

I can't recall being offered a NDA with this language.
> - i is a mutable, but should be constant

It's not really mutable, because it isn't a variable. However, if there is a variable by that name, Matlab will use it instead of the complex constant.

> - It a feature that has a special syntax (sort of).

The problem is rather a lack of special syntax (or too much leniency). Python also has built-in complex numbers:

>>> 1 + 1j
(1+1j)

but it doesn't allow you to omit the constant before the j:

>>> 1 + j
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
NameError: name 'j' is not defined

You can do it the same way in Matlab to avoid this problem (1 + 1i is always OK since implicit multiplication is not allowed), so the problem is that Matlab lets you use i syntactically like a variable when it in fact isn't.
What about using Klarna (https://klarna.com/)? Admittedly not credit card payment but also decreases risk as they take on the risk, according to themselves.

Reputable company based in Sweden so no dealing with American companies - more suitable for European markets.
I'm most curious to find out more about the de-duplication issue. Could this be a carry-over from their previous ToS where someone just didn't put 2 and 2 together?

How could they de-dupe stuff without knowing what it is in the first place?
I think it's only human. The standard should be that you present your case for your 'favorite' and then put out an open challenge to supporters of the opposition to do their worst.
GoCardless isn't supported by Shopify which is a big pain. Braintree does so I'm awaiting an email from them now so I can start to open my online shop.

I recently blogged[1] about the need for Stripe to come to Europe whilst the market is there. Until GoCardless, Braintree Payments start making the API just as good as Stripes, then the need for them to come here is here.

[1]. http://james.brooks.so/blog/stripe-in-europe/
Condoms treated with silver nanoparticles could ‘completely inactivate’ STDs
It should be true if the Arial examples were provided with comparable weights. That is, assuming, that the two fonts were weighted similarly from their base.
My dad went to a NHS hospital with chest pains, was misdiagnosed, and died in the "recovery room" of a heart attack.

Afterwards, he didn't fill out a patient survey.
> No one spends 40 hours a week with a language without knowing its strengths and weaknesses.

I wouldn't take that bet.
What if you're dealing in imaginary units that aren't constant? E.g. foo*i.
Software, fear and witchcraft
Atari files for bankruptcy
And multimethods ... but no protocols/interfaces sadly.

But it is enjoyable to write. :) There's a reason that I wanted to let it live again so much that I pour days of my time into it.
Since the same plaintext produces the same ciphertext with different passwords dosn't it expand the search space for a possible attacker?
I don't understand that part:

Symmetric encryption means the same key is used to encrypt and decrypt your data; this is less secure than asymmetric encryption (where one key encrypts and a different key decrypts), but it's faster and easier to implement.

Isn't that comparing apples to oranges? What would be the benefit for Mega or the user to switch to RSA for that? Encryption would be using a symmetric cipher anyway, unless I'm missing something.
I am not sure that some occasional rudeness to the vainly well-meaning isn't part of the solution.

Let's grant that this may be the case in general regardless of whether it influences me personally. It's important to consider the net benefit or loss to a social environment. It could be that incivility does discourage some people from posting things you think are unhelpful or noisy.

On the other hand, such incivility also signals to other people that incivility is acceptable. You may have the judgment to make such a thing "occasional," but can you be sure everyone else will share your restraint?

I think that the HN style as espoused by Paul and as specifically mentioned in the guidelines is to err on the side of civility here on HN, and the evidence so far seems to suggest that civility does work.

Look at this thread. There is some rudeness, but there're lots of perfectly cogent and civil arguments explaining that my rant was flawed.

Which do you think contributes more to HN? Which do you think is most likely to influence me personally in the future?
If the client (your browser in this case) sends a hash of file chunks before it encrypts and uploads the data you could do deduplication without having the actual decrypted data.
This guys are better than me to explain things probably : http://www.codinghorror.com/blog/2009/12/version-1-sucks-but...
and http://successfulsoftware.net/2007/08/07/if-you-arent-embarr...

But I get all you points guys, no problem, and I find amazing that he managed to do all of that by himself.
Looks neat! What is this written on? Are you making the source available?
Indeed, or just "return var == True".
Victims of Revenge Porn Mount Class Action Suit Against GoDaddy and Texxxan.com
Chomsky on the lack of progress in AI:

If you take a look at the progress of science, the sciences are kind of a continuum, but they're broken up into fields. The greatest progress is in the sciences that study the simplest systems. So take, say physics -- greatest progress there. But one of the reasons is that the physicists have an advantage that no other branch of sciences has. If something gets too complicated, they hand it to someone else.

If a molecule is too big, you give it to the chemists. The chemists, for them, if the molecule is too big or the system gets too big, you give it to the biologists. And if it gets too big for them, they give it to the psychologists, and finally it ends up in the hands of the literary critic, and so on.
Introducing the "2013 SEM Landscape" infographic
Block ciphers are not "less secure" than RSA. If anything, the opposite is true. You can ignore this part of the article.
Thanks! yes, this goes to show the perils of coding after a 12h work day on Friday :-). This affected the use of fgets() I/O (I understood you have to call the line-buffered routines based on their description)

Enjoyed reading your code. Beautiful. Thanks!
The discussion is here: http://news.ycombinator.com/item?id=5090007

Currently #3 on the front page, 447 points, 169 comments.

Here are some other versions of the story that you might like to check out:

* http://news.ycombinator.com/item?id=5091766

* http://news.ycombinator.com/item?id=5092064
This phenomenon isn't unique to computer crime. The other day my iPhone was stolen from my car in my apartments parking garage. I forgot to lock the door. I noticed that the guy who parks next to me (we have assigned spaces) also left his door unlocked. I was going to leave a note suggesting he remember to lock his doors because something was stolen from my car, but I thought better of it. If something was stolen from his car, do you want your note to be the only piece of evidence of what happened?
The discussion is here: http://news.ycombinator.com/item?id=5090007

Currently #3 on the front page, 447 points, 169 comments.

Here are some other versions of the story that you might like to check out:

* http://news.ycombinator.com/item?id=5091766

* http://news.ycombinator.com/item?id=5092047
Far Cry 3 problems and issues with save games or crashing finally fixed
Including open discussion and over 100 comments.
You're not missing anything. I clenched my teeth when I red this phrase. It doesn't mean anything and discredits the whole article as it shows the author has got a superficial knowledge in cryptography.
IANAL, so I couldn't tell from the TOS if API use like this is acceptable or not, but at least on the "root page" of app.imdb.com, they say:

For use by clients authorized in writing by IMDb.

-- http://app.imdb.com/

OP: Did you ask for authorization?
They make "shirt stays" which clip to your shirt and your socks, keeping your shirt tucked in and your socks from falling down. People in the military use them for their uniforms.
Why would you call the French academic system abysmal? My experience of it was quite positive (granted I was in a grande école).

Also I don't understand why you say that the students graduating from grandes écoles are technically incompetent. I believe they've produced a ton of world class scientists and engineers: last year's Physics' Nobel prize winner, half of the last batch of Fields medallists to name a few…
Shipping doesn't get you on the homepage of HN anymore; having a grabbing title does.

Whether that's good or bad, it's true and nshen succeeded on both fronts.
The thing they did with China? Move their french "operations" to Monaco (domain and stuff), serve their audience from "there" and sit on that.
Marten Mickos: How To Build A Billion Dollar Open Source Company
Just to remember Bill Gates only made software and he is doing pretty well at the moment trying to make the world a better place and cure horrifying disease.
Search Google By Drawing V2
Dave Morin, CEO of Path: ‘If Facebook Is a Chevy, Then We’re A BMW’
Website Quality: the Surprisingly Big Impact of Small Flaws
Please, be explicit when you say the word "design". It's not a single skill; it's an all encompassing term that means nothing more than the step before creation.

Anyway, good for you and nice slides!
A fellow student and I discovered a similar flaw in my college's system a few years back, but not as serious as this (no social insurance numbers, but emails, full names, phone numbers and addresses).

We brought it to the attention of the head of the IT Department by email. Later that week, the head visited our morning class to discuss this with us.

He discussed the issue to the class and actually acknowledged his appreciation for students like us for reacting promptly and responsibly over the issue.
Badly off-topic, but I found it amusing that the user asking the question was "Lelouch Lamperouge". The juxtaposition of Lelouch and "home" brought that series back into my mind full-force.
Case history can't be dismissed without consideration but … ever think about how long it took before we reached the modern consensus that non-property owners or women could vote, that slavery should not be allowed, the government should not be allowed to prevent inconvenient news from being published, etc? In each case, you could point to a mountain of argument which was commonly accepted, cited by high courts, and yet we now agree that those arguments were wrong.

Politicians, judges and lawyers aren't saints – they follow the beliefs of their times: we currently have policies (torture, detention, eavesdropping, assassination) which are currently politically expedient for many people to accept despite very clearly being unconstitutional.
There is a key fault common to every 'scientific' study done in this area - and there is an immense number of these studies done every year.

The correct headline should be as follows: "Engineering students do not view themselves as caring as medical students do." Key point being that these are not studies done on 'action', but rather on 'cheap speech'. I can claim to be the most empathetic person alive, but will happily walk out the room and flip off a beggar asking for change while still believing I am empathetic as I may subconsciously not recognize the act.

This is a huge problem with these kind of studies, and imho, these studies are fairly worthless. If you want to test this kind of thing, pretend to be a beggar outside each faculty and see which students actually help the most rather than say they will help the most.
People have successfully robbed banks with just notes. The penalty for witch can be less than 5 years depending on the note.

Not that robbing a bank is all that profitable vs. the risk and penalty's.
Atari U.S. Operations File for Chapter 11 Bankruptcy
Tell HN: Chicken pickin' republican ticket? Chuck Norris, or else.
You're with 1 = 3 or the 2 = 4's.
Generating RSA keys with math.Random is clown crypto, though.
Indeed, by just reading the title I thought the encryption is already broken and useless. It's just a filesharing site and not a secure and personal backup space. (I'm sure some guys will use it as their only backup like it was happening with MU though).
Unlike many of the other commenters, I don't see much problem with having "i" mean the imaginary unit. Where MATLAB falls down though is:

1.) not having lexical scoping

2.) not having warnings when a global is overridden in a local scope

these are pretty inexcusable. For anyone looking for a "better MATLAB", Python has NumPy, SciPy and Matplotlib which are pretty much everything.
I said this on the last thread about Mega. I'm fairly sure that the encryption is not to protect your data from them and others, its to protect them from your data by giving them an optionality to deny any knowledge of what they are hosting.

It is in there interest to do de-duplication and as they are still required to remove files under the DMCA it will just mean that multiple people loose there infringing files at once. All someone then needs to do to upload the file again is change one byte.

The encryption also stops them from being able to implement a back door for the content industry to police the site themselves as was the case with megaupload.
What would be the economic impact to French business if Google (and by extension anyone else that would get taxed) didn't provide their free services? I'd guess considerably more than the revenue they make?
I'm not sure that would work either. If Alice encrypts a block with key A and uploads it, then Bob encrypts the same block with key B and uploads it and Mega only stores Alice's copy then Bob won't be able to decrypt his own data.

(Edit: I'm talking about the proposal from previous threads of encrypting with a random key, not encrypting with the hash.)
Rails. No.
Agreed, when SQL Injections in ASP were all the rage some 10 years ago I contacted a couple dozen companies to inform of their full credit card visible customer admin pages and asked for nothing in return (at that time someone was offered money to help fix a security breach and was arrested for blackmail -- the employee that offered the money for services was actually the police speaking to him, so that saved my ass too) and I got a ton of threats, only one company actually gave me a number to call and thanked me but when I asked for a postcard of their city he got really pissed. Good times.
Revenue First: A Mantra for Startups
Do any HNers reject smartphones?
I'm currently the happy owner of a Nokia 5130 (2008). The phone is virtually indestructible, fulfils my needs and battery can last for days on end.

I briefly owned an Android phone (1 month), but found myself on twitter etc. constantly, and find myself much happier without it. I also got my hands on an early OpenMoko but didn't get around to hacking it.

I've attended mobile conferences, and fully understand that a 'smart' phone is going to be the primary way that the majority of the worlds population will experience the internet. I design my webapps 'mobile first' (borrowing phones for testing), and yet I've no desire to carry one around in my pocket.

Another offputting factor with purchasing a smartphone is that there is so much innovation that it's always easier to defer the decision (previously it was the prospect of the Nexus4.. now it's the promise of a Ubuntu smartphone).

Anyone else in the same boat? Am I a luddite?
There's the forward-iteration protocol... ;-)
Another good approach is to replace 'delete' with 'select count(1)' or something similar. The where clause can remain the same, you know how many rows will be affected and there's less overhead of remembering to set up a transaction, writing an update statement, rolling back, etc.
I love that you said that, I didn't read my daily dose of crying about PHP today. Thanks!
> [...] the implication is that a uniquely identifiable thing can be derived from any given piece of data. This returns some burden to Mega—rather than throw up its hands and say that it has no idea what Mega users Alice or Bob have in their Mega accounts, there apparently is a way of telling whether or not Bob and Alice have the same file or files. If the MPAA gets wind that Bob is hosting a copy of The Hobbit: An Unexpectedly Long Movie in his Mega folder, and Alice also happens to have the same file in her Mega folder, it's trivial to prove that Alice has the same file—in fact, the nature of deduplication means there's some record of every deduplicated block, and therefore every other infringing user.

This actually doesn't follow at all. What files a given user has in their account doesn't have to be known to the server, though it's generally not difficult to correlate gets/puts/deletes to accounts. If the hierarchy is handled on the client side and encrypted like everything else, then all the server knows is: we store blobs identified by keys, and when those keys are overlapping, we don't need to store a second copy.

This does make keeping track of storage usage impossible.
That is not what I call "worst" bug. It is a pretty cool bug. Screw Matlab for hiding this from you.
You are overlooking the fact that Al-Khabaz informed the system owner 2 days prior of the problem. Thus, you can not claim the actions of Mr. Al-Khabaz were definitely unlawful and unethical, that remains to be seen. This is not a black and white issue.
In all honesty, it is all of these reasons that make me believe that we're not hearing the entire story.
I don't think it's sensible to talk about probability when you only have a single data point and no clue whatsoever of the distribution involved. (E.g. is the human into which you're born actually random as that argument assumes?)
Check again. Google's revenue in France is $2 billion, but their overall gross profit margin is little more than half that...so roughly they are making $15 per French citizen.
He was passing the numbers directly when running stand-alone. His other code was looping through an array.
Came here to say the same. USA has hundreds of thousands of prisoners toiling away in Georgia and other states. They are simply better fed slaves, but slaves the same. Probably makes it worse that they are mostly black.
time and time again the trusty pomodoro philosophy is the most effective. just commit to ten minutes. just ten minutes. the act of starting blows away all your uncertainties.
Disclosure: I'm the co-founder of Flawless.QA and mainly responsible for the technical side. My friend Brian is doing the marketing and promotional work. We just started out this winter and would love to hear feedback from you about our idea. Any and all input will help us out a lot. Many thanks!