skysight-inc/HackerNews huggingface dataset:
openBSD credo: security bugs are just bugs.

Mostly human, and avoidable but always present because people don't take the time to do it correctly.
Quality, taking the time to make the things right, slowly, correctly, all that matters more than genius. Quality code at all level is the key to secure development. Every little things count.

I know a few openBSD developers, and their song about doing the right things, taking our times to do it correctly - simpler, with quality because it is the shortest path to correctness thus speed (what is the use of an incorrect program: none). This song is appealing. The fact they are strangely psychopathic paranoid nerds is not ;)

I think computer industry would be far better if we would slow down and focus on doing less software, but better built.

Less functionalities maybe, but the one that maybe more powerful. The stable foundation for sustainable progress.

And, if you like them -even though they are repulsing antipathic nerds- you can support them :)
RESO - San Francisco, CA

Consumer-facing startup in stealth-mode focused on a key aspect of our complicated everyday lives. We're a team of 8 located in downtown SF. About to launch our private beta. Love to tell you more, but it's a secret shhhh

We hire smart people and get out of their way.

We're hiring:

-senior infrastructure engineers

-hands-on manager of infrastructure engineering

-devops engineer

We mostly use java with a healthy sprinkling of objective-c, ruby, and more.

If you're interested or want to know more about our top-secret operations, email us at careers@reso.io.
Our landing page is a bit silly (it was a hackathon project), but my company made Inbox Pause (http://inboxpause.com), which works by automating the creation and deletion of Gmail filters at scheduled times. If you aren't comfortable with installing an extension on top of Gmail, you can also try it on your own with the same filters manually.
They're in serious trouble without the IP assignment. If they want the IP, they should pay you for it.

If they go ahead without the IP, and rewrite, then they shouldn't pay you for it.

You've tried to play nice, its lawyer time now. Get the lawyer to post a letter, you can probably pretty quickly agree to a small equity stake, such as 3-5%. That's a small enough amount that they'll just agree to it, a large enough number that it'll pay you off if the company goes somewhere. It seems roughly fair for the amount of work you put in.
If you are really too uncomfortable to meet in person, there are few other interim options and you probably need a lawyer if you want to take this further.

I would suggest that you reconsider meeting in person - this is a good interim step that will help you to understand exactly what the situation is. Of course, it's sensible to insist that any agreement is made in writing.
Yeah, I don't get the unending Javascript love. I "waited" a long time to learn to program, mostly just cause it never "felt" right, and I never really had a need to learn it. I've pretty much come from nothing to where I am today in about 18 months.

How I'd want to learn programming:

If I were to learn programming through just messing about, I really wouldn't want to do it using Javascript. Javascript can have a very convoluted syntax, and that can be really off putting.

I'd much rather learn to program in a language like BASIC or, even better, subset of Python 3; a language that lacks many high level features, but not a language where I have to deal with the hard edges of the hardware (like you'd have to do in C).
2 year anniversary today
"JSON isn't the friendliest to write and maintain by hand."

And this is a problem why, since it SHOULDN'T BE WRITTEN BY HAND?

This suggestion adds additional complexity to every parser of the "new" format, in exchange for... nothing, apart from a few less syntax errors for sloppy hand-editors. WTF.
Google Maps' killer feature for me is getting directions for public transport. Finding out how to get from point A to point B using buses and subways is invaluable. It doesn't seem like any Android OSM client has that yet... too bad. I would much rather use OSM.
which is not used in France but rather in Quebec.
What does this do that calm.com doesn't do better?
> "Plus, the (classic intro-to-LISP) notion that "it has a simple syntax with few constructs so it must be easy to program in" has to die.
Assembly has very simple syntax too. I wouldn't write a large program in it."

Suppose we amend that to simple high-level constructs?

I don't think I've ever picked up a language as fast as I picked up scheme. Not even python.
Engineers are so highly underpaid for the value they contribute to these companies. What's the average salary, $140k? It should be $300k, half a million total comp conservatively. Even at that amount, employers would still be getting a 50-75% margin on you. It's insane how much we are ripped off. Good eningeers can literally make or save companies 10s of millions a year, but are never compensated for it.
Going to court is the last resort. Asking a lawyer for advice on a legal matter is not the last resort.
A bit of revamping is probably in order.

Scientists are naturally a very mobile group and will usually work wherever the facilities/environment is favorable.

Certain pan-European organizations have a very strong reputation, such as The European Molecular Biology Laboratory (EMBL, link below), and the EU funds the Joint European Torus (link below). These institutes have a very mixed national contingent.

So... if the motive of EU funding is to promote transnational collaboration, then the approach they take is needlessly complicated. A simpler possibly solution would be to fund "magnet" institutes (which could be based in existing centers of excellence, or created de novo) that have a requirement to recruit from diverse EU states.

http://www.embl.de/
https://en.wikipedia.org/wiki/Joint_European_Torus
If there is sarcasm or rhetorical point to the article, it is not made clear at all. This is just poor writing.
Comments are not in json for a well understood reason:
https://plus.google.com/app/basic/stream/z12ztpczbxrdglfgl04...

I want trailing commas.

But the delta confuses me - what is it and how is it used and can it be negative?
SEEKING WORK - SF Bay Area - Remote or Local

Web Developer (Rails) freelancing while I build my startup. In a past life I spent three years as a Data Analyst at PricewaterhouseCoopers. I also play around with Machine Learning in my spare time.

I'm open to contract work at a big company, but I particularly enjoy helping startups and founders get their products off the ground. I'm currently working on that problem myself, so I'd like to think I know the pain points and best practices.

Production experience: Ruby/Rails, TDD, Heroku, MySQL/Postgres, jQuery, Bootstrap, Haml, Crawlers, Redis, ElasticSearch, Python, Git, Unix, AWS

Side projects: MEAN (MongoDB, Express, AngularJS, Node), Node/Meteor, R, C, Octave/Matlab

dpmehta02[at]gmail[dot]com https://github.com/dpmehta02
Yeah, there's a big U.S./European difference here. In many European cities, OSM has better business listings than Google. OSM is especially better about not continuing to list restaurants that closed 3 years ago, as Google likes to do. But in the U.S., Google is much better.

The UK is maybe the best case for OSM, unsurprisingly since it started there and has the most concentrated community there. There is barely any stone unmapped in the country, and stones that move get updated within days. France, Denmark, the Netherlands, Belgium, Germany, Austria, and Switzerland are also very well covered.
Vurb (http://vurb.com) - San Francisco, CA

Max Levchin funded, early-stage consumer startup - http://techcrunch.com/2013/02/20/contextual-content-engine-v...

We're working on search, browsing, and sharing, by connecting the services we use in a contextual way that's more usable, efficient, and social (e.g., no more having lots of windows/tabs open). We do this through unique UX/UI combined with search, machine learning, big data, and more. We're stealth but funded by Max, Drew Houston (Dropbox), Naval Ravikant (AngelList), Arrington (CrunchFund), and many others. If you're looking to join a small team that solves complex problems and is making something people will use daily, then come find out what we're up to.

Opportunities - on-site in San Francisco

* (FULL-TIME) Search / Data Science - search / classification / ranking, machine learning, recommendations, NLP, data crawling/processing

* (INTERN) Marketing

jobs@vurb.com | angel.co/vurb
I see this comment every time for many of years in almost every discussion about using JSON for configuration and while YAML is certainly used by many projects most of the people still continue to use JSON and I think that's because YAML sometimes feels like Scala of serialization markups when people just want something like Python. I personally think that TOML[0] is not only more simple but also as easy to read as YAML and we use it in our projects without any issues.

0. https://github.com/mojombo/toml
email is the word used in french for electronic mail. I rarely see people writing e-mail, and more often see people writing mail or email.
I think I understand those issues, and I agree that this is potentially a real bug. It's the statements in your description I'm not sure I agree with.

I do not believe though that a compiler is allowed to remove a function call to the external library function call memset(), as it does not know whether there are any side effects to that call. It does not matter if I use the argument again afterward, a library function call will not be optimized out. Consider: what if at runtime I link to a different library where memset() performs IO?

The issue is that there is that there may be no function call to the library function memset() in the source. Rather, memset() may be defined as a macro such that the memory manipulations are inlined. Since the optimizer sees only these memory operations (rather than the function call), in the absence of a 'volatile' declaration it can legally delete them.

Thus whether this is actually a bug depends on whether the compiler treats memset() as a builtin macro. This is only a bug if there is no function call in the source by the time the preprocessor has done its work. One does not have to live in fear that a compliant compiler will delete non-local function calls. Or at least if it does, it's a bug in the compiler.
The legal path is difficult and very subjective. If you used github or some other kind of version control, make sure you keep the repository history intact in its original form.

If there's no money behind this idea, you're probably not going to get paid regardless of whether there was a written agreement in place. This is assuming you did the one base step of forming an LLC or corporation - if not, they can be personally liable for paying you as an employee.

Sorry you got burned, it happens to the best of us. Good luck on your future ventures - the best revenge is to be way more successful than those two.
What is particularly bad? How would you have done it differently? I've not done much C, so I can't see the issue, although is it perhaps the types? Would count be modified by side-effect in the calling context also?
I agree with you. Everyone makes a mistake once in a while. To be successful, you should learn from it.
First, the whole document concerns itself with what is called "free". If you do not label your game as free and do not market your game for children, then you are out of document scope. Do what you want.

More nuanced, according to their first position, you should be able to market game with removable ads as free (unless they cover whole screen or make game unplayable). You would be able call the game free with cosmetic in app purchases too, but you probably would have to make it clear to customer prior downloading eg. "you have to use default avatar unless you pay 1$" somewhere in description.

You could even lock content unless money are paid and still call it free, as long as customer was clearly told what parts are available and what parts are not available. (Hard to understand one liner in the middle of 20 pages long terms of services does not count).
> you find out that someone forgot to renew your domain the hard way

Is that really still a thing?

Keeping the bank account used for direct debit for the domains above zero should not be that hard I would assume.
>There's more to it.

That is alluded to in the 5th from last paragraph: "Facebook's terms of service forbid third-party verification of its clicks". What reason, other than fraud, would they have for such a clause?
It probably isn't obvious from my original post, but I agree with you.

In my community college, there were a number of professors with incredibly low standards for academic work. However, I tend to think this is a reflection on the level of preparedness of students coming out of high school.

The issue is, and maybe it is sad that it is this way, but it is probably better for people to end up with 1/10th of the education at 1/2 of the price and end up with less debt overall due to what they end up doing with their degrees.

And if you apply yourself, you'll learn no matter where you go. Heck, you'll find plenty on YC who advocate skipping school entirely, so community is a step up from that.
Odd. I really hope this isn't related to a possible buy of Tesla for a huge amount.
Currently heading up a team of awesomely smart people building our back end in Haskell on snap. AMA!
It won't work on any manual made since maybe 1990. The starter won't engage unless the clutch is in.

Note that it is possible (with some luck) to start a car with a clutch that won't disengage this way and you might be able to limp to a garage.
There's whole host problems that owning shares of a company, with founders that are actively hostile against you.

Defiantly need to make the terms watertight.
I'm currently building something for more general use. An app to automate commonly executed tasks on different server environments. Its open source too http://eyjafjallajokull.github.io/gunnery/
Disney Animation Studios - Burbank, CA (near LA)

We're looking for Linux-savvy C++/Python hackers. http://disneyanimation.com/careers/open-positions
I took a theory of computation class at the U of I by Steve Lavalle. He's a brilliant computer scientist and a very personable professor.
SeatGeek -- New York, NY -- Full Time We're a search engine for tickets and live events. Think "Kayak for sports/music/theater tickets."

Web Engineer -- We're looking for someone who loves building for the web. Everything else (professional experience, where in the stack you fit, the languages you've used) is up for grabs. Details here: http://seatgeek.com/jobs/web_engineer/
I honestly thought TOML (https://github.com/mojombo/toml - created by founder of Github) was a good configuration format. But unfortunately, I'm not sure that Tom has been a good steward of it and most of the interest in the early dies died off because Github issues would go unanswered or unresolved for months.
Please consider changing the title font. It is very hard on my eyes.
It depends a lot on the field. At my community college, the STEM classes had standards. Totally incompetent people disappeared after a semester or two of going up the coursework chain. Meanwhile, the liberal arts professors had to deal with people that couldn't write a coherent sentence if their life depended on it, even in advanced classes. However, I constantly read similarly demented and completely mangled english sentences written by graduates of the local public four year university.

I can't really recommend community college for STEM, since at least in my original state, you had to start as a freshman at university even if you had an associate's degree in science that was "guaranteed" to transfer for credit. (The engineering department's justification was "we'll accept your credits, but you still have to take everything over again.") It's a good way to get screwed, and community colleges offer very few second year science and math classes. (The liberal arts people had much less difficulty transferring.)

However, I did learn my calculus and sciences very well because I had excellent teachers that I could ask questions of if I needed to. My physics professor had been teaching for over four decades--and with a small class size of around ~20, I had plenty of opportunity to absorb the material and understand it completely. As a result, I now find myself tutoring my buddy at a $60,000/year private tech college, because my knowledge of the subjects is sound and the quality of the teaching at his school is completely terrible. Interestingly, the homework assignments and test questions are near identical in terms of subject matter covered and difficulty--the main difference is that the private tech college curves, which my professors at my community college were explicitly forbidden from doing.
Australia has been through the "everyone needs to go to college" phase, and what we ended up with was a shortage of tradesmen, not a massive student loan debt. 'Having everyone go to college' doesn't mean you need to have these ridiculous loans.

It doesn't automatically follow that a bolus of tertiary eduction has to result in that much debt.
I hadn't considered that - thanks for the advice. I've now requested a consultation.
this was a good article about how quickly loan balances multiply after default, and how discharing in bankruptcy or otherwise is basically impossible http://www.nytimes.com/2008/08/24/business/24loans.html?page...
> After 7 weeks I've chased them a few times and received a single request to meet in person (I declined as I want written records of all exchanges).

You can do this in person, with video tape and an attorney witnessed it. No?

Write to the accelerator organization and get an attorney to handle this matter.

I might even go as far as revaling their names and make this into a public issue. The more pressure they receive from your side, the more willing they will work with you. But that's dangerous so use that as last resort.
If we had LISP, we wouldn't really need CSS or HTML either. Everything could be represented with s-expressions and we would all reach nirvana.
Thats a really important distinction I hadn't made in my head, thanks for the advice
When you see a Heisenbug in C, change your compiler's optimization level (2010)
Putin Goes to War in Crimea
Without more details I have to disagree, based on anecdotal evidence. I own two Pis, those are awesome and do their respective jobs very well (one's a tiny server, the other runs OpenElec/xbmc).

I looked at 'upgrades', got myself an ODROID U3. That thing's collecting dust here. HDMI output is unusable for me (there's no way to compensate braindead overscan issues). Running Android on that thing seems pointless (I dare you to try and use Android with a usb keyboard only, for example..) and projects around that thing are .. not polished. To put it mildly.

My favorite was a supposed replacement for the Pi's xbmc distributions that spawned an X server, launching a WM and than started xbmc from the menu with some sort of UI automation. You could watch that happen, because it was running dead slow. This was the 'best' (as in, most loved acc. to the community boards) XBMC/media center solution.

For me, with my limited exposure, the Pi is excellent. I won't order a random potential replacement again without _really_ good reviews. Price and/or technical specs don't automatically make a decent device.
And also the color contrast.
SEEKING FREELANCER - Local (SF Bay area) or remote.

PROJECT: Front-end assistance with graphing interface for real-time and historic network traffic statistics.

WHO WE ARE: CloudHelix is doing a modern network visibility and control platform on top of an in-house postgres-fronted clustered column store database (API is DBI or REST).

OUR CURRENT STACK: jquery, underscore, D3, node, postgres, c, go

We're looking for something a little snazzier than Highcharts or current graphite frontends (either developed or adapted is fine), capable of doing 10-20+ 1-second refresh graphs and ideally with some interactivity in a good-looking dashboard view. Happy to provide access to our beta portal and examples of what we like/dislike and pay for some scoping time.

Could consider hourly, or a first phase of discovery/mockup then agree on a project price.
As Toby Keith quoted to me one day: "A word for a third". Copyright is implied at the time of authorship and is legally enforceable regardless of registration. Registering the copyright lays down a legal argument for your ownership, but it doesn't preclude other's ownership of the project. Op said "with a large group, including only one other dev", which means there are potentially others involved as well. I agree with your #1 suggestion and would add the application should include the names of all involved.

Before getting the attorney involved in communicating with the other parties, I'd suggest the Op mention to the other parties his copyright to the code/name/project is implied and he's filed for copyrights on the project for all involved. This gives the other parties something actionable, without getting too aggressive. They may or may not choose to do the right thing at that point.
I want the opposite.

When I receive a mail, I want to set a timer saying: "this needs to be answered before noon", or "today" or "by the end of the week". Then get relevant reminders.

That way I can go back to whatever I was doing and have it out of my mind. For now I just star messages that need to be replied to, but that's too coarse-grained.
> Dozens of what? Browser plugins? I don't have to imagine, that's the world we live in.

That's quite a stretch. There are two browser plugins that are in broad use on the web: Flash, for fallback audio/video support and some casual games, and Silverlight, for Netflix. Both are dead technologies when you consider mobile web; even if you're only thinking about laptops/desktops, both Silverlight and Flash have essentially been abandoned by their creators, and the web platform has almost entirely subsumed their original purpose for existing, currently with the exception of DRM.

Personally, what I'm hoping happens is that we get one, single better compile target, and languages can just target that — giving the web a broader selection of languages without the fragmented nightmare (and security nightmare) of introducing dozens of new plugins. This is something that browser vendors are currently working on: Google with PNACL, and Mozilla (and, to some extent, Google as well) with asm.js. I hope we end up with PNACL, but a sufficiently optimized asm.js would serve the same purpose, albeit with a more difficult debugging / performance optimization story.
When fans go wrong: Bieban, Justin Bieber Debian
Among others the Objective-C crowd might want to have a chat with you about it being the "widely-accepted state of the art." This is ignoring the fact that memory management does not really address C's ability to do unsafe memory operations as much as its just resource management.
Do you think that without regulation there will be less barriers for the small players? Because I can assure you that the Robber Barons made sure there were no small players left. They either bought them out or forcefully drove them out of business. As much as regulation places a burden on the small guys, if you let the big guys alone at it, they will make it much harder. This isn't theoretical; that's how it actually happened (and if the US 100 years ago is too far back for you, look at Russia in the past 20 years).
it is possible to disagree with apple's investment in "sustainability" and not be a climate change denier