skysight-inc/HackerNews huggingface dataset:
This is what I love about HN - an anti-troll comment. Like most of us I think a generalist knowledge confers the right to an opinion and expressing that opinion.

Comments like this point out just how much I do not know, they sweep their arms across a horizon of maths and hard won understanding and say "only express that opinion after you know what that means"

Anti-trolling.

It's what keeps us honest about our own limitations, and reluctant to spout off crap.

love it. Now going to look up inertial frames and start translating.
What's amusing is that the correct title of the piece (no plural on 'overflow') is more ambiguous. I wonder which way the HN title mods will rule.
Thank you in advance. If you send me an invite to the e-mail in my profile I'll be happy.
Lots of requests I know, but I'd also like one please. haydendotsa@gmail.com if needed.
Thanks for the reply. Just noting that I'm not American (don't assume every ignorant-sounding person you meet on the internet is American!)

I have visited several European countries and met and interacted with many young and old Europeans, and I hope to live there permanently in the future, and so find add more depth to my admittedly incomplete data. I do know that every part of Europe is different - some parts are in my experience much worse than even than the picture I painted (Hungary for instance). I guess I was exaggerating for dramatic effect. Still, I think there are serious emotional problems in modern Europe, and I'm not satisfied that people are really acknowledging or facing up to them.

I really do have a lot of love and hope for Europe. It just frustrates me I suppose. Perhaps a corollary of meeting primarily younger, party-oriented Europeans?

Hope this explains my views a little better.
Could you at least try to read an article before you comment? Like, at least the first 5 words?
Most cogent perspective here.
Well assuming you run in virtual mode you could always leave the page/segment directly below the stack unmapped, this way if the stack overflows it'll trigger an exception by accessing invalid addresses.
Ask HN: How to start your own startup when you are on H1b?
Hi all,

I'm on H1b and it expires on october. I have bunch of ideas that I implemented as prototypes to present friends, and they used and loved some of those.

I want to try my ideas, but looks like I'll have to sacrifice my work visa in US. I'll find a country where my budget is enough for living a year (e.g Tblisi)

Has anybody else with H1b convinced themself to sacrifice work visa / greencard for doing their own things in another country ?
If I'm reading the testimony correctly, there is actually no evidence that a stack overflow caused unintended acceleration. The idea is that Toyota used 94% of the stack, and they had recursive functions. If (big if) the recursive functions used enough stack to cause an overflow, memory corruption could happen. If (big if) that memory corruption happened in exactly the right way, it could corrupt variables controlling acceleration. And then, maybe, unintended acceleration could occur.

But that's a far cry from the stack overflow actually causing any cases of unintended acceleration.
I agree that things like blogger are a great example of what not to do, but I'd go further and say that treating something as a single page web app running on the client side throws away most of the advantages of the web:

URLs which can be stored and shared and are idempotent

Mostly stateless operation for anonymous use (fast to serve/load/cache)

Document formats that anything (including dumb crawlers and future gadgets) can parse and reuse in unexpected ways

What you call suboptimal browsing devices are what makes the web special and distinct from native apps. These are not trivial advantages, and most websites would benefit from these strengths of the web, even if they are an app.

As an example of where something like a single page app can shine on a public site, I've seen chat software which used it which worked really well (using socket.io I think), but only because people didn't care about sharing individual messages and the chat was ephemeral.
Porn habits on one side of the table, real name pulled from the credit card used to pay for it on the other. $50 and this all disappears from the internet!
To be honest, those drawings are pretty good and very creative.
Crazy Octodad Dance, London Style
Girl demonstrates a fine ability to dance just like Octodad in all sorts of landmarks around London!
...and in your hex-editor? ;-)
I'm a bit annoyed at how your response to me has turned out. Did you actually read my response which you're criticizing instead of jumping at the first "critical points" I make about the comments made about git by the user? Or is it because git is not your favourite tool? No argument you list here is in any way contradicting what I said.

Yes, I did indeed read the post. I wasn't jumping at "critical points", I was pointing out that he doesn't seem to have his head around a DVCS like git.

As I've pointed out a few times, the UI is not really more complex. There is literally one more step - git push - to have your changes "pushed" to a remote repo.
Very very awesome.

I'd take some trade-off between between crazy optimization and maintainability, but I'd definitely rather do this than slap on any number of frameworks because they are the new 'standard'.

Of course, the guy who has to maintain my code usually ends up crying like a little girl.
If it's not free (as in freedom) software and I can't compile the version of the sources that the community inspected, then I don't really care that some source code is publicly shown. I can't verify that it's actually the code I run when downloading the precompiled app.

Thinking of it, it would be interesting to be able to display such proof…
typo: over population is not one of humanities most pressing problems
Did you show interest in the startups willing to hire remote? A pretty large number of startups (in absolute terms, but not a large percentage) are willing to do that.
Using HTML prettify on the source is a start at least:

https://github.com/victorporof/Sublime-HTMLPrettify
:D Your browser has been hijacked apparently!!!
Oh! Oops... I see what you mean. That's a fair point... I thought he was comparing equivalent git commands! Read that way that makes a lot more sense.
Well we're debating a totally hypothetical situation. The premise to begin with is that we're talking about a far future post scarcity society. If you want to say that's implausible, sure, I might agree with you, but that's not the issue.

As far as the theft like nature of taxes, we'll just have to agree to disagree. The concept of theft in and of itself only exists in the context of a society where laws exist and are enforced. That society can only exist with taxes. In the jungle, there's only what you can carry and what you can protect, and what stronger people want to take from you. But I can't say more without understanding where you get your morality from. If you get your understanding of morality from religion for example, most major religions justify allowing the government or head of state to use force to sustain that government.

P.S. As far as the marginal value of goods; yes I think you are right in that if you took 10% of each good (like fresh water) and distributed it that way it would probably cause huge economic problems. My guess is that any workable way of implementing this tax would be more complex and progressive, much like our current tax system doesn't tax everything equally. For example, luxuries would probably be taxed more, and basic necessities such as water would probably be taxed less. I have no idea what the details of such a system would be, it would probably take a lot of thought to work out what would make sense.
Don't Get Into Sales If...
Ever wonder what might stop you becoming successful in tech sales? My post should explain a bit.

Some background: The name's Areya. I run Sales for Ringio. We're a startup out of NOVA. I'm vulgar and sometimes inappropriate, so the read shouldn't be a bore. Just started the blog to log my musings.
Well before we were simply sending the password and comparing with hash on server side, but a pentest team retrieved sent passwords from browser's memory (not entirely sure how), so they recommended that we send hashed passwords.

The random string which is part of session is to avoid replay attacks. But i suppose SSL should be taking care of it, right?
There is an enormous class of embedded devices not running on chips capable of address virtualization.
I tested is one more than one browser.
Unless you move the stack pointer by more than a page (the stack in Linux grows automatically: IIRC any access to at most 64k below the stack pointer is considered to be an attempt to grow the stack, because the compiler may very well reorder a change in SP in a function's prelude and an access to the newly-allocated stack frame).

Edit: I'm sorry, I was somewhat wrong. Accessing stack below SP is considered a bug, but x86 enter instruction can make it seem like such an access has taken place if it faults:

http://lxr.free-electrons.com/source/arch/x86/mm/fault.c?v=3...
Really, this seems to be more of a case of the wrong tool being used for the wrong job than a tool with flaws and no real use. AngularJS positions itself as a fit-all solution for great Javascript based applications, when in reality it is meant for use only in an authenticated user setting. Look to an application like Asana (built on a similar internal Javascript framework), you only get the Javascript application version after you've logged in, not before.

It's like creating an online store and deciding to choose MongoDB or any other NoSQL branded database and then discover it doesn't support transactions and having to move over to a RDBMS like MySQL or PostgreSQL. The caveats listed in the article are definitely true though. As someone who's used AngularJS enough to know its downfalls, it's definitely not a one sized fits all solution and much like anything it comes with both its own pros and cons.

It's important you spend the extra amount of time when planning your project to ensure you choose the right tools for the right job (well at least at the time). If your requirement is to be indexable via search engines, choose a solution that allows that and so on. Don't use something just because it's the flavour of the day on the HN front-page.
> One classified document shows that GCHQ used its surveillance system to secretly monitor visitors to a WikiLeaks site. By exploiting its ability to tap into the fiber-optic cables that make up the backbone of the Internet, the agency confided to allies in 2012, it was able to collect the IP addresses of visitors in real time, as well as the search terms that visitors used to reach the site from search engines like Google.

This is real-time surveillance of website visitors & search terms to websites that governments don't like. I'm guessing it wouldn't take much for them to correlate those visitors to IP addresses, cookies, device IDs and cell tower signals to pinpoint people in real time too?

Knock knock

Who is it?

It's the police. We know you're browsing Wikileaks right now.

Edit: Looks like GCHQ's "ANTICRISIS GIRL" [0], the tool used to monitor Wikileaks visitors in real time, was based on Piwik [1]

[0] https://prod01-cdn01.cdn.firstlook.org/wp-uploads/2014/02/pi...

[1] http://piwik.org/
I'm not sure if you're intentionally glossing over the "this happens with or without virtualization" point, but I'm glad you're happy with the tools you're using.
The distinction is quite simple, some people are interested in how things work and why, others just use them (usually in a wrong way).

If you truly believe that, and believe that people can be so divided, then I suggest that you read https://plus.google.com/+JeanBaptisteQueru/posts/dfydM2Cnepe and discover that for all you think you understand about how things work and why, there are things you just use.

Indeed I can give you dozens of examples of important things that impact your life, ranging from the reason why fertilizer makes good high explosives to how airplane wings work, and you'll find that for all that you pat yourself on the back for being such an intelligent and curious person, you're far more someone who just uses that which you find around you than someone who understands your world.

If you can accept that, then you might get beyond your naive belief that you bring enlightenment that I have failed to grasp, and you may come to see why I think that the purported distinction is BS.

After that, you might realize why I became curious about how a theory that is so obviously BS would appeal to otherwise intelligent people. And then you might find my theory about it to be enlightening.
Thanks, that's a ton of help. I tried stackoverflow but apparently i wasn't using the right keywords. Bookmarking this for future reference
> Define "application".

I think he/she defines application as "application", as opposed to the web folks' definition that a web site having a text box, a button and 1 mb of JS libraries is an application.
If you visit Darwin's home in the UK you'll also see that he had a slide made that fits on the staircase so his kids could slide down it. And there's a section about the effect the death of his daughter had on him. Clearly, a guy who loved his kids.
James Cameron to shoot Avatar sequels using HFR technology
I even tested it on more than one computer.
I use FreeGate as proxy software.
But https domain works correctly.
I use Common Lisp and Scheme at work, and have written and maintained several systems heavily relied on class redefinition and run-time code loading. They're great. OTOH, I feel Common Lisp's concurrent process handling is rather weak, and I envy Erlang for that (Not that CL can't do the trick, but usually what implementations offer is fairly low-level and I had to roll my own higher-level IPC.)

For example, how well CL's class redefintion and instance reinitialization work with preemptive threads? It isn't obvious how each implementation address this issue by skimming docs, so I'm curious if anybody with direct experience. When I implemented CLOS/MOP style OO in my Scheme, I ended up using a global lock during class redefinition, for it need to modify lots of places. It's MT-safe now, but I'm still wary to run class redefinition on a system written in my Scheme, which is busy handling requests.
just look at how the production ramp up looks like (hint airbus has a public plan, there was no such thing for 787).

The guys over at airliners.net are tracking the state of building frames. They are ~1100 hours into a 2400 hour test flight program and they have only 4 planes flying (or almost there) and 2 in various states of building. Compare that to 787 which had to fix so many uncomplete frames after finding issues in test flights
Football field sized asteroid whizzes by earth
So what's the catch? We have been developing memory architectures, and embedded systems, and OS's for decades now. So if the solution is as simple as this post says, why hasn't it ever been implemented before?

I am hoping there are experts here that can shed some light on this
I'd love an invite - thanks!
Iranian Hacking to Test NSA Nominee Michael Rogers
You make some interesting points, but I suppose that I take issue that branching is a particularly complex thing. IMO, branching allows you to make changes without affecting the mainline code, then the merge points allow you to get back to contributing back to the codebase.

I think it's odd though that you use the example that someone checks out the current branch, makes some edits, then commits back in the changes. You have the same problem you highlight - if someone else makes changes, then you get the same merging issues, only this time it's on the main branch. You will still get the same project managers screaming for a hotfix, and you'll still get the same problems of merging in the changes that were checked out. After all, SVN doesn't prevent others from checking out the same files and commiting changes whilst you are making changes.

BTW, what do you mean that a DVCS is a subset of version control?
Google cache text version: http://bit.ly/1gZj3kQ
Another example of C's impact into our daily life.
Related:

The Press Freedom Index by Reporters Without Borders has the U.S. ranked #46 in their 2004 report [0] - just above Haiti and just below Romania.

[0] http://rsf.org/index2014/en-index2014.php
How about a reverse event: Have two sides start with the same set of machines in bare metal; they have a time limit and a set of parameters about hw to config the bare metal.

One team is security; the other is black hat.

Each team has a mole. The mole cannot reveal their position...

Mutiple iterations.

* Develope/Secure a [type] of site against [type] attack

* Create/Find resource leach

* Create/Recover from, [outage type]

These teams should be sponsored by various vendors... A weighting system needs to be developed.

You'd want a balanced team; where you have a range of skills in your team; where you also have a need for their expertise in each step through resolution.

It would be even more interesting to develop the team that writes the scenarios...
Wouldn't a with(file) statement (instead of a finally block) be much more idiomatic in the example they give? Not to be be pedantic but I think it illustrates a good criticism. How can you ensure quality code snippets that are "idiomatic?"
The Afghanistan war has lasted longer than 84% of all wars in human history
Ask HN: I compulsively over engineer everything. Is professional help an option?
I can't finish personal projects because I compulsively over-engineer everything. With the simplest tasks, I always find myself going off on a grandiose architecture. This happens despite my complete self-awareness of the problem.

Half seriously I wonder if I should go to a psychologist with this issue. It may be difficult to find one with enough of an understanding of software development though.

Have any of you overcome this problem? How?
This approach looks very promising; I agree with the other reply that this is the way forward. Best of luck.
Now we know what we've speculated darkly about all long: the NSA and GCHQ actively track users who visit sites they don't like.

Presumably your visit to The Intercept and First Look are similarly tracked and correlated with your other online and offline activity.

I for one will visit this site and open every linked document from each IP I have access to. These tactics of mass surveillance and intimidation must be resisted.
> Capitalism is just private property

Agreed. In particular, ownership of the means of production, land and natural resources (and now extended to ownership of ideas, information and data [eg: gene sequences that have been "discovered"]).

> and voluntary contracts.

I don't think we agree on what "voluntary" means.

> It's impossible to untie life from that.

"Life"? Are you trying to say that property isn't a social construct? How is the concept of property relevant outside of a society?

> The Native North Americans had private property

"What is this you call property? It cannot be the earth, for the land is our mother, nourishing all her children, beasts, birds, fish and all men. The woods, the streams, everything on it belongs to everybody and is for the use of all. How can one man say it belongs only to him?" -Massasoit

"We do not own the freshness of the air or the sparkle of the water. How can you buy them from us?" -Sealth
How microfinance disappointed the developing world
To quote form Mozilla's own PR 'Directory Tiles will instead suggest pre-packaged content for first-time users.'

Sounds an awful lot like toolbars.
It's "funny" how our western system hypocritically decries censorship in China, North Korea et al. when we do the exact same thing, just in a little bit more hidden/less detectable way.
Articles from indiatimes usually smell of propaganda.
Appologies in advanced, I signed up for a throwaway for this commment as I'm just not there yet to where I would tie this to my actual account.

I paid for porn from one of the largest sites, and immediatly had spam sent from my account until I changed my password. Yes, it was dumb of me to reuse passwords but that was my habit then, which has since changed.

I also rarely received spam to that account, and immediatly started to get plenty of adult themed spam (and continue to).

So, there is still sketchness in that corner of the internet.

That being said, what online porn sites need to do, in my opinion, is offer single video downloads. Plenty of people don't care to sign up to a single site for $100 a year. Some want just one scene. Some want a handful by the performer. The producer in the linked article, Kink.com, already does this, but many of the large porn sites do not. I don't think they would even lose much business, as the type of people who are already paying monthly subscriptions would still be better served by them.

edit: I'm not even sure if Kink.com does still do this? I looked on the site quickly and didn't see the option anymore. Don't feel like digging into it further at the moment.
What? That quote does not support your claim either. What the quote calls “non-free” software is proprietary software. BSD licensed software is, on the contrary, free software.

I have seen hints of this misconception before, but is this really a common thing? Do some people really believe that “free software” is exclusively GPL software?
I didn't read the linked article but I did look through the slides, which were very interesting and talked about

- the abhorrent state of the engine control module code,

- the RToS's design,

- the critical data structures right above the stack,

- that those critical data structures weren't mirrored to detect corruption as is standard and as they did for other data,

- that single bit changes in that critical data structure right above a stack can cause the death of tasks in the RToS whose failsafe capabilities were located in those same tasks, and whose death was tested and confirmed to cause unintended acceleration consistent with accounts and descriptions of the event

- that the failsafe monitoring CPU was not designed to detect this failure, and in fact Toyota outsourced its design and didn't even have the source code to it...
> We're suffering what happened to the music industry a while back

Not really. Songs or artists are not perfect substitutes to one another; if you want to listen to a specific song from a specific artist, you'll be looking for that song and in most cases another song won't do. Therefore, if it was possible to make this song absolutely unavailable via illegal means, you'd have a very strong incentive to buy it.

Porn videos are mostly perfect substitutes to one another (in their respective broad specialty; a gay sex video isn't a substitute to a straight sex video, but a nurse video is a substitute to a teacher-student one).

Therefore, in order to make people pay for porn, the porn industry would have to make all free porn videos disappear, which is impossible.

It would seem they're in much direr straits than the music industry.
I have to disagree if your not paying market, it should be on your priority list to keep the stars happy. And honestly if youre "too busy" and forget, that kind of is disrespect, and neglect.

Also, comp isn't a "little thing" to your employee no matter how much they make - it defines your role both inside the company and outside, measuring a developers skill and throughput is an extremely hard thing to do, comp is often the only thing you can really use to define your worth.

Correct me if im mistaken but that was sort of the intent of the post, to put at least as much effort into retaining staff as you do recruiting. Or did I misunderstand it?

I see my self as pretty average but probably ahead of most the pack developer yet I still get a constant stream of recruiters "touching base". If I feel stagnant or neglected eventually one will say the right thing to get me out the door or at least start looking around for somewhere new to learn.
For an unfettered Internet