skysight-inc/HackerNews huggingface dataset:
Having done a small amount of work with the Linux kernel I do not consider this to be an informed position. There are a lot of conventions being followed here and they are followed consistently throughout the code base - they become more and more obvious the more code you read. Not knowing about copy_{from,to}_user is a very rookie mistake. I find it hard to believe the author of this code didn't know about it (they even annotated the parameter as a user pointer), my guess is they probably just figured that the functions they were calling already performed this check and didn't think it needed to be inserted twice.

Edit: Re-reading your comment I also wanted to point out that the problem of handling user mode pointers in a kernel is a difficult one, and requires discipline. You can't keep a straight face and say as you do that you can handle it in a way that newbies can come right in and write bug free code without learning these conventions. The only sane way is to create a workable set of conventions, apply them consistently, and do what you can to educate new contributors as they come along. It's not unique to Linux - I used to work at MS and can tell you the NT kernel has the same issues.
Have you tried calling? Their phone support is unusually good in my experience.
Seriously, I don't know where this "France is not entrepreneur friendly" rant comes from.

France offers a tremendous amount of help to start, cost of employment is not worse than any other developed country (yes there are a lot of taxes, but salaries are lower because a lot of stuff is provided by the state) and mentalities are evolving towards a more startup-friendly attitude.

The only problem of France are French people who don't believe in their own country.
Examining our "essential" tools
Too cold.
I'm pretty sure those posters are making fun of the thinking that says you can just use some replacements and magically be safe.

The 'safe' versions of the functions have their own risks too. No amount of use-this-thing is a replacement for conscientious programming and review.
As the bearer of bad news, so to speak, I think that's often a good approach. On the flip side, I think it's bad as an enforced policy from above. I've worked with some managers who have a "Don't come to me with problems, come to me with solutions" rule. I think that's poor management for at least three reasons:

1. This kind of thing leads to bigger problems. If they're small but your employee is having trouble coming up with a solution, and they don't come to you, odds are the problem will get worse and you might not find out about it before it takes the proverbial "pound of cure" to deal with it.

2. If your employee already has a solution in mind, why do they need to come to you at all? Just let them implement it. If you need your employees to run their "solutions" by you, you might be a micromanager. As a manager, I want my employees coming to me with their unsolvable problems, not the stuff they think they can handle. Sure, there's some risk of a mistake from time to time, but I treat those as experiences to learn from and there are other ways of keeping those "lessons" from getting too expensive.

3. It's often hypocritical. Does the average middle manager waste their senior exec's time with stuff they already know the answer to? Most likely not.

All that said, a policy of "Don't come to me with a problem until after you've thought about it a little bit" (i.e. a form of "Don't come to me with data, come to me with analysis") is perfectly reasonable to me.
Jamie Dimon's 74% Raise Proves U.S. Regulatory Strategy is a Joke
They're all equally off-topic as per the guidelines.
I would be nice if you had screenshots of the UI...
> Use of grinders is pretty standard practice.

It is? I thought everyone used giant shredders.

https://www.youtube.com/watch?v=yd_O7-rqcHc
Yes seriously. The US and EU are the reason why Russia sees the need to defends its western borders. This conflict is as much about internal politics in Ukraine as it is about geopolitical failures.

If the EU members would cling less to the US (instead of letting them build a rocket shield in Poland), Russia would possibly have fewer reasons to keep a pro-Russian buffer zone.
Promoting abstinence results in higher rates of teen pregnancies and STDs than pretty much every other policy. That's the reason for ridiculing it - far from 100%, it actually has a negative value, working against its stated goals.
Kensington Lock.
Hi Jay, thanks for creating this thread :) Much appreciated!

We'd love to hear your and everyones feedback.

We're working hard to create the best user experience.

thanks again!
ryan
Maybe he's saying that migrating to the less safe, more performant functions can ... wait.
What a great article. I recently shifted my approach to client relationships in a similar way but never really did any real thought with why it was more effective or formalized my methodology. Looking at it in perspective makes a real case for responding like this consistently.
Read TFA -- Guardian decided to destroy the materials in order to protect its journalists. They were afraid that recovered computers would contain information about which Guardian staff accessed the machines and when, and that could be used as evidence against them.

The material was destroyed in this way because the alternative was to hand it all over to the UK government agency mentioned.

...what did the security services expect to achieve here?

To stop or severely impair The Guardian's ability to report classified materials.
> Lync doesn't even have an option to pop up notifications when new chats come in.

Install the Metro version of Lync </evil>
That'd make it much easier to portray them as irresponsible risks to national security. They're trying, but the caution and deliberation being used in these releases counts heavily in the favor of the news orgs.
I don't see a problem with this. Have you ever actually used an SSD for swap space? It's awful, compared to real RAM anyway.
Because C strings are arrays of characters terminated by a null ('\0') character, and arrays in C don't have bounds checking and don't come with a length attached.

If you allocate a 10-element character array, it can hold strings of up to 9 characters (plus the null terminator). But, the library functions ("runtime") don't know how big it is.

So if you try to copy a 20-character string into that 10-element buffer, it will copy 21 characters. The first 10 will go into the array, and the next 11 characters will go... somewhere else. Depending on where in memory your array and other things are, something important will probably get overwritten with garbage.
Or you could just give a concise definition:

>What is this "DTrace" thing? It stands for "Dynamic Tracing",
>a way you can attach "probes" to a running system
>and peek inside as to what it is doing.
I, too, hate it when people ask to be paid for services rendered. You're supposed to be working for free, damn it!
Of course not. In fact the police brutality towards a few peaceful student protesters was what triggered the mass protests in Kiev and all over Ukraine, it wasn't about any particular agreement as many people wrongly believe. I'm just talking about the Russia vs the West politics in Ukraine.
America's security clearance program demands that people authorized to handle its most sensitive secrets be held to a certain standard. They cannot be addicts. They must refrain from imprudent sexual relationships. They must pay their taxes. They must obey the laws. They cannot lie to the government, or keep their embarrassing, blackmailworthy secrets from it.

And one of these people has the unmitigated gall to take evidence of unethical government activities which had been clearly classified as SECRET and TOP SECRET and just release it to the American public, along with the rest of the world.

Clearly, if the clearance process worked as intended, every single person authorized to see this stuff should feel a tiny bit queasy after reading it. The problem is that people who try to escalate within the system are denied promotion, are not awarded the contract when it is up for re-compete, or they are simply fired outright and blacklisted from further work. And then nothing else changes. Clearly, if your choice is between losing your livelihood and making no impact whatsoever and losing your livelihood and maybe also your freedom, and possibly changing things for the better, you might take that additional risk.

America, if you don't want your specialist personnel, specifically chosen for high ethical standards, to spill secrets, maybe, just maybe, you should arrange your affairs such that speaking truth to power isn't the stupidest thing someone could possibly do. And it would also be nice if you would stop acting like the sleaziest boss/customer on Earth in front of the people most likely to actually be bothered by that.
On the other hand, 6 figures salary is as well a rarity in Euros (in EUR currency countries) for engineers.

EDIT: I should had put more emphasis on "rarity" - lets say almost unimaginable. At least, I have an impression that it is much more common in USA.
The secret here is that the underlying philosophy--manage the client and get things done--applies to everything. If you are a salaried employee, treat your boss that way. If you are coordinating with another group, treat them that way. If you want a date, etc. The guy or gal who gets things done is more valuable than the guy or gal who gets hung up on details.
(I'm a philosophy professor.)

Some training in logic -- reflecting on what make good reasons and justified conclusions -- does have value. It has the same sort of value that learning grammar does. It enables you to make certain things explicit, to put them under conscious scrutiny and control, when needed.

But I think this sort of enumeration of logical fallacies is of very limited value. In the abstract there are only a few ways that arguments fail, and informal fallacies are all iterations on an extremely similar theme.

Moreover, the kind of argument for which it is easiest to characterize fallacies is deductive, and many instances of reasoning that appear deductive are in fact statistical, inductive, inferences to the best explanation, or some combination thereof. Even for deductive arguments, what if any fallacies are being committed will depend upon how one interprets suppressed premises.

The best thing is to learn about different sorts of reasoning and how they work in good cases, and pick up a feel for some fallacies along the way. At the end of the day, reasoning is an art.
Doesn't work for me unfortunately, I see no textures and a lot of errors like this:

WebGL: INVALID_VALUE: texImage2D: width or height out of range

[.WebGLRenderingContext]RENDER WARNING: texture bound to texture unit 0 is not renderable. It maybe non-power-of-2 and have incompatible texture filtering or is not 'texture complete'

This is on a retina MacBook Pro. I guess there's some hw incompatibility there.
OK, it has been a few years since I tried, but if you could get Gentoo installed you must have known a fair amount.
Yes, particularly if that is just one thing in your larger toolbox of "things which provably make businesses large amounts of money." (It also is one of the metaabilities like programming which can often make your other skills more valuable. For example, CRO makes email better, it makes PPC better, it makes SEO better, etc etc.)

If you have a particular concern about it, feel free to ask.
As I am young, I often get the chance to start at a company that just laid off many old employees (because most companies know they cannot stop hiring at all, because I am cheaper, and because I'm educated in recent technology). But do I want that? I'll be one of those old employees one day. So I will go to the company that treats its aging staff (or people from unsuccessful business lines, etc.) right. Don't forget that effect when you choose hire&fire over educating your internal staff.
It's not necessarily correctness for its own sake. Sometimes it's the linguistic equivalent to pointing out a spot of mustard on someone's shirt, which is a courtesy in my book.

That being said, an audience member pointing this out to someone on stage is a net negative. But I'm not convinced that I should ignore irrelevant errors altogether, especially for errors that people use as signal levels of education or intelligence (nuclear and nucular, you're and your, etc.).
You are free to leave the country and renounce your citizenship. The fact that you have not constitutes acceptance of the social contract.
Whether 100k is huge or not depends on the project's requirements. In some cases it's perfectly fine, in other cases it's a problem. Such a broad statement cannot be supported.

Much the same; even if jQuery is that much slower it can sometimes provide something that overcomes the slowness factor. It varies from project to project. Especially if the project scope practically requires you to rewrite jQuery from scratch, you might as well use it.
I'd second the okcupid blog. An overlooked part of the role of an analyst is being able to effectively tell a story with the data. Okcupid is particularly good at that aspect, so you can learn a lot by keeping up with them.
They were enforcing the law. There is no 1st amendment protections in the U.K.
You've gotta watch Steve Blank's "The Secret History of Silicon Valley". Goes back to its post-war roots in 40's and 50's. A real gem and quite surprising.

http://www.youtube.com/watch?v=ZTC_RxWN_xo
Grab Content From a Web Browser in Your Mac App
That is a very developer mindset.

Remember, many more of us use the compiler to build packages in the wild, we need it to be fairly permissive to hope to get things to build.
Actually I think "Ad Hominem" is a rather good filter.
Although it's not a proof of statement being true or false, it's still good to ask your self a question "why is this person saying this?"

For example: A stranger rolls up in a truck up to a kid on their walk from school and says "get in my truck, your parents were in an accident, and I need to drive you to hospital". Now all the person said could be true - but I would strongly advise from getting into the truck.
Darn, I also had this on Firefox. For non WebKit browser I already use a lower res texture. What browser did you use?
I have long femurs as well and can't squat comfortably for very long periods of time either, it feels like it cuts off the blood flow in my knees, but I would argue that that is most likely due to years of adaptation to a life of sitting on chairs and sofas, rather than due to some hereditary physiological quality. The more I squat and the more I get used to squatting, the more comfortable it becomes. When I started powerlifting, I struggled to hit depth, but now I do go almost ATG on every rep without any discomfort in my joints.

I really don't think there's any bone preventing you from squatting to depth. I believe it's almost always an issue of the condition of your muscular and connective tissue.
Bear in mind Snowden has proven his commitment to rigorous honesty. Many people you might think of as decent might think these things, but not admit it, even to themselves.

I don't judge Snowden for saying these things, any more than I would judge a person who lives in a rich White/Jewish area and would never dream of living or going to a poor Muslim/South Asian area. That is to say, I don't judge him at all for saying these things.
It's worth noting that strncpy doesn't always null-terminate strings (on some platforms), so strlcpy is preferable.
I'm a new DO customer as well and I have no problem with this either. The $5 is for devs and designers- $10-$15 gets me something the public can use.

No contracts.

I have a couple of laptops in the office I use for devs as well- but it's on a dsl with a dynamic ip. To make it static is $30/mo (last I checked). To upgrade from dsl-- I have to switch providers, get a bigger bundle, etc.

This is waaaay better. I can still use the office machines- and do- but have something easier for most worker to use on a daily basis.

(The office ip is tracked with ddclient and I use dnsdynamic.org to follow it. I also email it to myself 4 times a day because dnsdynamic is free, and a little spotty. By the time I start paying for real ip stuff, I might as well go with DO.)
Elon Musk is missing from the famous photo (http://victorstuff.com/wp-content/uploads/2013/09/paypal.jpg) because he received an innovator of the year award in Chicago at the same time as when the picture was taken.

The YouTube founders, Chad Hurley and Steve Chen, were not allowed to participate in the photo because the corporate handlers at Google didn't want them to be linked to the mafia ;)
You can also take MOOC courses for example:
https://www.coursera.org/specialization/jhudatascience/1?utm...
The mail in rebate is also trying to get feedback from the customer, which is very difficult.
Friends don't let friends program in C
Ask HN: Bitcoin business unexpectedly taking off, help!
I launched a service to buy gift cards for bitcoin earlier this week (cardforcoin.com) and it's doing far better than I expected. Like, in a scary way.

I have a full-time job, and was hoping to carve out a small bit of passive income, not launch a full-blown startup.

I could really use some advice from anyone else who's run a bitcoin business, dealt with an unexpected success, or could get me in touch with a lawyer interested in the BTC world who might start pro-bono.

PS - Earlier discussion - https://news.ycombinator.com/item?id=7144067

PPS - I want to leave the link for context, but if you'd actually like to use the service, please wait a bit / until the weekend.

EDIT - I'm not accepting cards until this gets on the road to straightened out, for obvious reasons. If anyone has any particular further insights please drop me an email.
It's not because it's cheap, it's because you can avoid capacity planning and blowing capital (for which you would need an ROI). Once you are big enough that you hire your own accounts, lawyers & ops, then you can make a capital investment into your hosting infrastructure get a return on it. Too early and that was money that could have been better invested into growth opportunities.
> Have you ever actually used an SSD for swap space?

Yes

> It's awful, compared to real RAM anyway.

What? SSDs page far faster than HDDs. Comparing an SSD swap to RAM is wrong headed.
Or was it really a mistake?
Great post. Now, if you're reading this and still calling yourself a "freelancer," your next step is to stop. Calling yourself a consultant instead of freelancer is the quickest way to start asking higher rates.
AWS micro instances do not have swap or overcommit enabled by default. Caused me problems when trying to run a Go program.
King is trademarking the words candy and saga so nobody can ripoff king’s ripoffs
I believe that Crimea (peninsula in Black Sea) wouldn't mind to go back to Russia since it has never been historically a Ukrainian territory. East of Ukraine may not be keen on becoming Russian, but sure as hell they don't want to be ruled by Western Ukraine. Differences between East and West of Ukraine run deep and go far beyond political preferences. West sees East as scum. Period. For example, when Western protestors in Kiev catch youths from the East (they call them 'titushki', or provocateurs), protesters write the word 'SLAVE' on easterners' foreheads with permanent marker: http://icdn.lenta.ru/images/2014/01/27/13/20140127131837914/.... I don't think East and West in Ukraine have any future together.
Obviously connections matter. Trying to hire the best people is much much harder if you don't have connections to make the introductions and vouch for you.
Great list. I'd just like to give a shout out to Hilary Mason and her blog, as her very approachable style was what initially got me interested in this space.
The fallacy of the form "A has trait X, A has trait Y, B has trait X, therefore B has trait Y" is an association fallacy (the particular subtype you refer to is sometimes called "honor by association", its exactly the same as the somewhat more popular "guilt by association", but where the faulty conclusion is positive rather than negative.)

http://en.wikipedia.org/wiki/Association_fallacy
It is absolutely correct to question the underlying premises. All the modes have them. It's just that the evaluations are not amenable to the same standards.

E.g., you can cast doubt on a scientific hypothesis of "A causes B" by pointing out a previously overlooked possible common cause. Or e.g., the polygraph is fairly bogus, not because of the mere logical possibility of false positives and false negatives, but rather because of their relative magnitudes and the poor support of the premises (about physiological correlates of lying or truth-telling). The flaws are strictly defined in one mode, approximate or probabilistic in another.
100% effective? Just wait until your friends invite you to a Hackathon, and all promises will be broken that night..
When you suspect that someone hasn't thought through the problem enough, ask them to write it down in a short format (eg, bullet list, short paragraph, memo). It'll force them to think it through.
This writeup was actually a lot better than I anticipated. One of the key things in consulting that I learned over the years is that you're basically contracted to help and grow the business. You have to present yourself as an ally that can provide solutions to problems and help the client grow their business.

Don't just write in your email your products/services and "hey, let's meet up and discuss stuff". Any high school or college kid can do that. Throw solutions, it will really make you stand out.
I have a wide range of skillset across marketing and development so am thinking there should be no reason why CRO is not something that is going to be around for years to come!
Loved this. Another variation that HN will fight to the death over: A growth hacker is a marketer who lives in San Francisco.
Works fine on intel and radeonsi in linux in firefox nightly and chromium.

In firefox the textures are noticeably darker for some reason.
Well a quick multiplier of 1.35 means $135k in USD yearly for a 6 figure salary. Well that's a rarity even for software developers here in US unless you are pretty darn good. BTW, how much is the average salary paid by american companies in Europe ?
There's a lot of fun to be had with strace. I wrote a tiny perl script that spies on the file descriptors of another process and outputs it to your terminal: https://github.com/psypete/public-bin/blob/public-bin/src/sy...
I don't claim anything. The report claims "This appears to be a serious bug". If it wasn't, then they would have not suggested a patch and we would have not have this conversation.

Now, I don't have to show you anything. What are you talking about?

Do you dismiss me because I extrapolate developer attitudes from their obtuse/obscure code (dubious/discuss) or because I can't keep a stack of callbacks in my mind to get myself out of the maze (true by the way)?

But what about that function? It has 5 arguments! Do you claim that they need no explanation whatsoever? And don't cheat. Tell me without looking what is "type" suppose to contain?

[1]http://lxr.free-electrons.com/source/net/compat.c#L223
I'm using NewRelic's free plan for this.
Instructions for setting up their monitoring daemon on Ubuntu server: https://docs.newrelic.com/docs/server/server-monitor-install...
+1. I've used Cloudkick (before Rackspace), Copperegg (not too bad either) and New Relic. Server Density is VERY reasonably priced, simple and gets the job of server monitoring done. The custom metrics are key. New Relic for example doesn't support custom metrics. A custom metric example: my Sidekiq queue sizes. When Sidekiq first came out, there was no way to alert/monitor this. It only took a few hours of Python.
Why did they have to smash up the fax machine too? That was just gratuitous.
The Adventures of Fallacy Man (Comic):

http://existentialcomics.com/comic/9
What I learnt from bootstrapping my startup for two years
To say it's dead implies it was alive at some point.