skysight-inc/HackerNews huggingface dataset:
I'm not sure.. there are trash cans in certain public places like parks and subways, but they're rare enough that you have to spend time looking.

And sometimes it's not practical to carry your waste the whole day - I have seen trash piled up beside the street on occasion.

I have trash anxiety from spending time in tokyo.. whenever I buy something I have to consider the wrapping and whether there's a trash can nearby.
I really do not know. I prefer not to make specific guesses, even lower-bound estimates, when there is insufficient information available.
This is probably a bad idea; Uber drivers will primarily use this to screen which calls they pick up. Even if they only revealed the destination after the driver accepted, if the fare was unfavorable enough, the driver might still accept the ding for canceling.

There may also be liability reasons for not directly handling nav in the driver app, even if that just meant delegating to some iOS framework:

* It would give customers a toehold to litigate the routes Uber selected, rather than leaving them out of that process entirely

* It would require drivers to interact with iPhones while driving in order to handle the routing, which might be considered less safe than dash-mounted nav devices.
Not quite what you are suggesting but....

http://aws.amazon.com/rds/postgresql/
If your code has changed enough that GitHub can’t automatically do the merge, you have to either do the merge yourself or ask the submitter to do it.

I expect that GitHub lets you do the merge yourself by adding the submitter’s fork as a remote to your clone and then doing a local merge with all your command-line tools, and finally pushing your merged version to GitHub. But I’ve never been in the situation to try it. I guess this would be what you call going through change by change. I’m afraid I don’t have any tips for doing merges in general.

If you’d rather ask the submitter to do the merge, post a comment in the issue saying “Sorry it took me so long to get to this. This diff no longer merges cleanly. Please merge the latest version of my code onto your branch, and I’ll merge your pull request right after that.” You can either ask them to update the branch in the existing pull request, or close that issue and ask them to create a new pull request for their new version.
Google map that can show me parking?

I'm driving to a coffee place, great, but then it's 10min turning around the place looking for parking. Ideally it should drive me in real-time to a place where I can park.
Putin's administration justifies the current economic state and the rampant corruption in Russia by that Russia has is own 'special way' of development which is limited the history and the socio-economic heritage of the communist regime. If Ukraine(or any other ex-Soviet country) manages to get rid of the current cleptocratic system and launches succesfull socio-economic reforms that tackle corruption, it will be a strong signal to the broad russian population that the current regime is not the driver, but a hindrance to the overall development. That is why any regime change in ex-Ussr countries is viewed by suspicion or even open hostility by the elites in Russia.
As I understand it, they generally like airport pickups. What they don't like are (a) "haul you out into the middle of nowhere near any other fares", and (b) "pick you up from the middle of nowhere and drive you for less than 10 minutes".
Of course, the negative effect is that if a driver sees the destination address before picking you up, they'll avoid taking the call if it is to a location they'd rather not go. (e.g., city -> airport, forced to use heavily congested roads, etc.)

That is one of the reasons taxis in NYC are not allowed to ask where you are going prior to letting you in the car. They can be fined a few hundred for that and a few violations will get their license revoked.

Also, what if there is more than one destination?

One way to avoid this -- perhaps the Uber app could let you push a contact's address to the Uber driver's phone/GPS nav after you are in the car as the "next immediate destination" to avoid having to say the address and have the driver key it in.
I'm so grateful we have people like Willem Pinckaers uncovering these things.
Ask HN: How to deal with writers block for programmers
I suppose I'm in a bit of writers block, but for programming. How do you deal with it? Take a vacation? Drink a beer?
Those point-of-sale computers are probably running XP Embedded, which has a longer support window.
Another excellent application for the elderly!
The problem isn't bounds-checking, the problem is that most of the _s() functions that deal with bounds-checking already have pre-C11 equivalents that check boundaries.

I also disagree with some of the interface choices, for example when strlcpy() fails it tells you how many characters you needed, not simply "error" as in strcpy_s. Also the use case for memcpy_s() is extremely limited. It just seems like the _s() functions were rushed and stuck in there without regard for what makes sense.
I remember reading an article a few years ago about Larry Ellison owning the second-largest yacht in the world [1] but having to downsize because it felt too large and lonely, like an empty mall. I feel like that's a good metaphor for the ultra rich who live flashy lifestyles. Having lot's of money isn't all it's cracked up to be.

[1] http://blogs.wsj.com/wealth/2007/07/26/ellisons-new-yacht/ - Btw I spent almost 5 minutes googling for this, hit it on the first try on yahoo. Happening pretty frequently these days. Time to reconsider my search habits?
Huh? Looks like HN front-page traffic killed my server. Rebooting...
This would have been a cutting bit of wit indeed, had Akamai not stepped on your moment by confirming Willem's central thesis. Ouch.
> That sounds like a failure of the JVM.

That is a natural feature of garbage collection. The asymptotic complexity of copying garbage collection is O(complexity of live object graph)/(total available heap size). That is, having more heap available makes it consume less computational resources, up to an including making many real loads have near-zero garbage collection cost if the heap is large enough. Having three individual processes share a heap can make them actually do less work than if they each had a static third.

Modern operating systems are not set up to exploit this. There has actually been some work done on Linux user space reclaim for it but it's not yet usable. Until there is a way to tell the kernel that you want to use every last free byte on the machine if possible but can likely free most of it when any other process needs it, to make best use of the machine you will have to roll your own in userspace.

> You are also putting multiple independent services in the same fault domain.

In practice, unless you are doing a few stupid things (which most places don't let you do), it's extremely uncommon for whole JVM processes to go down. With a bit of work you can make almost all faults only take out individual tasks.

Not that I personally like JVM. I'd much prefer to do work on the actual OS, not wrap it all and pretend it doesn't exist. However, the people who build and use it are not idiots -- there is an actual method to their madness.
Fortran=Math. Wherever there are projects solving math problems, they are running Fortran code. Or at best code ported from Fortran libraries.
Then don't tell the driver until after the ride starts. Maybe also require that the rider is near the driver before that happens or that the rider presses a button to send over the destination.
somewhat similar: http://learni.st/
Yup. Hard to read! Better that than not to read it.

As Rich Salz said in the post to openssl-dev, this is a prototype that nobody should take and use straight. We did think we were pretty lucky that our old patch to keep keys from being swapped to disk could help us against Heartbleed. A major voice in the internal decision about whether to release it or keep it secret as a "competitive advantage" was the possibility that we were wrong---in the hopes that someone would discover this and tell us if so. We were wrong. Pinckaers discovered this, and told us so.

He can mock my coffee as weak and my nose as big for all I care, in return for that necessary warning that we were mistaken.
I don't see what is inherently bad about that. If there is a route drivers don't want to take, shouldn't the free market push the price higher until they see it as worth it? (While per-route pricing differences might add complexity, that's exactly the sort of complexity a software company should be able to handle.)
Indeed; I further presume that if it was implemented, drivers would move to only accept fares that provided a destination location.

Some of my friends work in bars and want cabs to get them to their less than ideal neighborhoods at 3am or later. It's already very difficult for them to get a cab to take them to a questionable neighborhood once they're in the cab; having to front-load that information could make this much worse.

(Many municipalities require cab drivers to not discriminate. Obviously they do anyway, but I presume that Uber drivers that aren't medallion / license holders have even less impetus to go into these neighborhoods at odd hours.)
fyi, its choir or quire, not quior :)
If Uber's goal is to get regulated out of existence as fast as they possibly can, a great first step would be to allow drivers to screen fares by destination.
On a recent Uber ride, I had hoped that this would work since the rider app looks like it supports it. (If you click the '+' sign after choosing a pickup location, it lets you choose the dropoff location.) However, I was disappointed in that the driver still asked where I was going. He recommended to me that I try out Sidecar instead, which asks you where you are going as its first question when you schedule a ride.

The second suggestion in the post was about indicating what kind of car to expect. Lyft does a good job with this in the texts they send (it says your driver name and the color/make of the car.)
He bought a big yacht and didn't like it, so he bought a slightly-less-big yacht, and the logical conclusion is that "having lots of money isn't all it's cracked up to be"?
In contrast to other comments here, there's a lot they could do to mitigate concerns -- such as simply not showing it until the person was in the car.

Of course, it's condescending to think Max Horstmann has though more about this than Uber has.

That being said, it will show the driver the destination address if you use the Fare Calculator before requesting the ride. I'm not 100% sure on the details, though.
We're still evaluating some of his arguments. I still believe some of them are true in the general case, but do not apply to our specific embedding of this code. I say that aware that I was mistaken 12 hours ago, and so very well could be mistaken now.

But I am reasonably convinced that the CRT values are loaded into the normal heap, where they're available to a normal Heartbleed attack. Pinckaers doesn't have to be right about all his points to be right---just once---and I'm pretty sure he's right at least that once.
I have a hard time explaining this idea, so please bear with me.

As a founder and hacker, I want to know how my users use my web and mobile apps. But I haven't found an intuitive and dead-simple way to do it.

Mixpanel and google analytic are way more complex than what I have in mind.

What I would like to have is more similar to Facebook, but instead of looking at my friends activity, I'd like to see what's happening with my users.

I like the idea of a feed, or more specifically an exploratory object graph.

I'd like to open my phone and see a feed of what's happening, similar to a cat | tail but where I could click on a verb (Joined the website) or a noun (10 users) and it would direct me to that specific page.

So, for instance, it would tell me:

15 users joined <My service>.
Bob And Alice got a new highscore of 2500.
Marie played level 3 10 times.

I could change the Zoom ratio.. I.e. see the feed of the last minute or the last year, and it would sum up the actions to one statement.. "1541 users upgrated to premium", etc.

Basically, I don't want to look at graphes or stats or parse log files, I just want a beautiful and simple feed of what's happening. And when I see something that I'm curious about, I can just click and learn more. Just a dead simple way to understand how my users use my apps.
We won't get anywhere without a definition, but I think most would disagree about the Clojure coment. They even assert it on the home page http://clojure.org . It's probably better to think of FP as a continuum rather than black and white.

While Idris may be able to eliminate some of the typing constructs in Haskell, I don't think one can say it would be easier to program in than Haskell. The chain of having to assert proofs to the compiler is an extra burden (i.e. refl).

Also, saying that a Pure FP language (Idris) is easier than a non-pure language (Scala), for someone without extensive FP backround, is an interesting comment. Part of the intimidation of Haskell is it's purity, and this extends to Idris.
Yes. Our actual implementation was vulnerable. We disabled TLS heartbeat before 5 April 2014, so are not still vulnerable.
English Universities Losing International Students
Good response from Akamai. No beating around the bush there.
Apple does this with iPad as well, showing a screenshot of a previously used app before the app is re-loaded into memory.
Rich Startups Go Back for Another Helping
OSX keychain runs as root. The user is prompted if an app asks for an entry in the keychain that it has not created the entry and has not explicitly been granted access to the entry

You need root to get at the keys otherwise. There is code to do it here:
https://github.com/juuso/keychaindump

(This pulls the key wrapping key out of the process and then decrypts the keychain file directly.)
You probably meant something subtly different than what "competitive advantage" sounds like, w/r/t hardening the public OpenSSL code. :)
Also: the way this played out makes an awesome story for the next time Akamai experiences internal pushback against participating in open source. "Remember that one time it saved our bacon" is a political goldmine.
Dunno. The 3 way is more "Explicit is better than implicit." Though it's a shame Python 3 messes up http://xkcd.com/353/
Sheeza Sabir – dark horse (cover)
> I'd say you are off by an order of magnitude.

On what basis? I know he didn't cite, and I'm not trying to put the burden of proof on you, but I'm curious why you think this. As in, I'd like to see some data (from either side).

I did some brief searching and he is correct that [45]00 HP brushless motors seem to go in the low five figures (at least on Ebay, which I know is not representative of Tesla's costs). I'm happy to believe Tesla's cost less, but I'm not sure.
More importantly, it removes the privacy leak from client to CA, since the client is no longer speaking to the CA directly (it just has to look at the signature).
FYI: If you request a fare quote before your request, the driver will see your destination once they have accepted the fare (otherwise it says "Drop off as directed").
It was released as both: we thought that our old protection against swap protected us against Heartbleed. What a stroke of luck. We did check for key values visible in the heap, and on our implementation, in our lab, didn't find them on any version of our software used since we took OpenSSL 1.0.1.

We weren't looking for the CRT values.

As one part of our response, we decided to publish the code we thought was keeping us safe. If we were right, sure, there's good PR from that. If we were wrong, it's a chance to find out and get right. Less wrong, anyway.
This is cool. I'd love to see via multiple places, since I'm sometimes borrowing a car for an hour and optimizing for running as many errands as I can (e.g., dry cleaners, grocery store, hardware store), and it would be great if they were all close.
Safari on iOS loaded the site with no warnings. Ouch—that's a lot of people.
What you say is true. But ... bosses are loathe to spend money when the current solution works "adequately" in their assessment. That's why they'll buy more weed whackers than a new tractor - to use your example. The tractor salesman would generally be disappointed.
Developer is a broad concept.

There are many levels of abstraction between electrons messing around to one click voila you just made a mobile app that works! Accordingly, there are many job/work opportunities on each level. Know on which level do you fit and exploit it. Currently, demand is huge on ALL levels! I do not know a single developer/programmer that fails to find work.

Over 10 years ago I was walking into an interview to decide upon my admission to a CS MS degree. This was after 5-6 years off college and working as a freelancer all that time. The interviewer said more or less this: you do not have the required skills, all these years you have been doing 'business software' using VB and that is 'useless' here. You'd have to do/repeat a year of undergrad before we consider you elegible. Naturally, I felt like crap. But she was right, I was not the guy who could build an OS (nor wanted to). However, I was really good at helping business solve problems with IT. That was the abstraction level where I fit quite nicely. I walked across campus and signed up for an MBA with MIS focus. Best career decision ever!

So I am not a hacker but I am a 'good enough' developer that has seen clients coming in since the day I left college. I moved away from VB many years ago but I continue to help business with IT b/c that's where I fit, b/c that's what I love to do ;)
I would like to know how many security related patches they are keeping for themselves? And I think not only Akamai did this. I hope that this situation will prove that security needs a bit more patch reviews and a bit less of secret sauce.
We're talking about it. The patch is dependent on details of our unreleasable (GPL+OpenSSL+all sorts of other things) server.
Right before this all came out our Akamai rep came on site and swore up and down they were not vulnerable. They need to quickly communicate internally as well that a vulnerability existed and send account managers back out to work on high priority cert rollovers.
who calls Plan9 silly?
And hopefully freedom.
Don't over think it... Most times people get writers block when they think of style and syntax over substance. I mean programming isn't like writing a story... you don't have to make up the fact that your function has to return a string with a username... you just want to do it bad ass... just write it... I call it Jalopy Code... its the junk that gets it done and then I go back and clean it up after...
Yes, they've been clear and honest in their communication.
threaten microsoft to swith to linux?
Something like this, perhaps?

https://www.diigo.com/
https://chrome.google.com/webstore/detail/diigo-web-collecto...
You can do that by using Google Analytics custom events. https://developers.google.com/analytics/devguides/collection...
Not to nitpick, but wombats can actually run pretty fast when they want to - up to 40kph. And I reckon kangaroos, while fast, aren't very manoeuvrable; if they're on a line they tend to stay on that line, right into the path of the vehicle.

Koalas, though, geeze - they're slow, drunk usually, and don't give a damn. I almost hit one once, slamming on the brakes and almost going off the road, and the damn thing didn't react at all, just kept unconcernedly strolling across. Doubt anything can stop them except fences combined with safe crossings (tunnels, wildlife bridges).
Former lead kernel developer for Ethos has released source for OpenXCI:

http://comments.gmane.org/gmane.comp.emulators.xen.user/8208...
http://article.gmane.org/gmane.comp.emulators.xen.user/81902...

Related OSS projects are http://qubes-os.org and http://genode.org/
I hope Akamai has learned our lesson: upstream earlier, among others.

Watch and see.
Tests confirm Heartbleed bug can expose server's private key
Them and everybody else. "Remember that time akamai ran vulnerable code in production for 13 years and the bug got patched two days after they open-sourced it" should be able to drive open source contributions at all kinds of companies.
The part I still don't get because I haven't seen it discussed so far is that their original patch mentionned they had been using a variant of the patch "for a decade" but I never got why they didn't seek to get it merged upstream a decade ago. Or why they released "a variant" of their patch instead of the real thing to begin with.
> When I first saw this headline I thought oh no, have we created another "syndrome"? But after reading it I realize this is probably what my wife has.

The first sentence seems to convey an annoyance with people's propensity to hastily self-diagnose/make amateur diagnosis. And then you do the same thing in the next sentence...
I think there's a difference between sharing ideas and sharing code.

An idea or concept on its own can't really do much, at least until it's put into practice somehow. The potential for harm is quite minimal, if it even exists.

Code, on the other hand, can often be directly used with relative ease by people who may not fully understand the possible implications of using such code. The potential for harm exists, and could be significant.

In the context of security, it's important to avoid potentially-harmful code wherever possible. If somebody has concerns about some code, regardless of who wrote it, it is best to express those concerns in a very blunt and direct manner.

Security is just not something to fool around with. The hard questions and painful facts should be out in the open, especially when code is involved and capable of being used. It's just not the time or place for pussyfooting around.
I just thought I'd like to know what Hacker News thinks.
Will Python 2.x ever die?

I'm still writing lots of code with it and even quite a lot of new code. It's been around for ages and it feels like almost no libraries have been ported to 2.x yet. On a couple of occasions I've started a project with Python 3.x just to drop it or move to Python 2.x as a library I need doesn't seem to exist for Python 3.x and I don't want to port it over myself. I've never had this issue with 2.x (no libraries support 3.x only.)

Most Python 3.x "killer features" have been back-ported to Python 2.x and I honestly feel little reason to upgrade myself now. When support for Python 2.7 is officially dropped we could fork it and continue. I would hope it wouldn't take huge amount of effort for some people to support it? Just fix bugs and security issues and take pull requests? In that way might Python 2.x even outlive Python 3.x or at least remain more popular?
Interesting! So basically they already have that feature (except for the gps integration), you just have to know about it.
I think that's the direction RapGenius is headed in.

Here's an article where it's mentioned directly.
http://techcrunch.com/2012/10/03/rap-genius-andreessen-horow...
The Operating System That Can Protect You Even if You Get Hacked
Lyft has this feature (not sure if they added it in the latest update) but the last time I rode the driver was unfamiliar with this feature and asked me "where to", to which I said I added the destination and as soon as the driver marked the ride as "picked up", the destination popped up in the maps. The driver was surprised and didn't know this feature existed.

Out of curiosity, does the Lyft driver app have maps/nav in-built while Uber does not ?