skysight-inc/HackerNews huggingface dataset:
Agree with most of this except for "and many specialized allocators have their own security mitigation build in." This is generally not true in my experience [1] when it comes to unlink checks, guard pages and the like. Often a generic homegrown allocator will call mmap/VirtualAlloc and chunk the page(s) up into a doubly linked list or simple arena allocator.

Sometimes a default generic allocator will have design properties about it that make exploiting certain bug classes difficult (e.g. WebKits RenderArena and Use-After-Free). There are exceptions of course, see Chromes Partition Alloc for one example.

Heap hardening/exploit mitigations are hard to get right. Ptmalloc has done a decent job save for 1 or 2 techniques lost to time. As a result modern exploits target application specific data (C++ object vtables, function pointers, etc) and not heap meta data.

[1] I wrote this blog post and I audit code for a living
Become successful in two steps
I've heard the billing alerts elsewhere.

Seems like AWS did a great job of making things right in the end.
There is always the wally solution ie deliberatly mess up.
Ruby Concurrency Primer
Not all startups are created equal.

The biggest difference between (say) Amazon and the startups discussed in the article is that the startups in the article are aggressively local. "We deliver lunch in the Bay Area" doesn't scale to other communities as easily as "We ship books to anywhere from a giant warehouse in the middle of nowhere" does, since the former requires building up local infrastructure (meal prep, delivery, legal/regulatory compliance, etc.) for each expansion.
> It was, therefore, not possible even in principle to have mutually-compatible, independent implementations (and all of the existing implementations just did "link to some version of SQlite and do whatever it does".)

SQLite library is in public domain, has more lines of code test cases than lines of code C library code and its SQL API is stable. Plus the SQL language is well documented: https://www.sqlite.org/lang.html

W3C could also simply just fork SQLite at any time and modify the SQL dialect.

Mozilla and Oracle both are official gold sponsors of SQLite, both companies use the library in their own products though made a lot of effort to create IndexedDB and especially tried to deprecate WebSQL - nice job!

Microsoft has several embedded SQL libraries (JetBlue, JetRed, SQL Server Express) and it would be a piece of cake for them to modify the SQL parser a bit to the WebSQL SQL dialect.
Paying employees, executives, money for the car leases, gas, all while located in SF?

An $8 meal, they make it at $4. With one avg engineer on salary at 125K, (~10K a month), you'd have to sell 2500 lunches with a $4 profit to cover just his salary.

I'd bet they're losing money.
As John Maynard Keynes put it, "in the long run we are all dead."
I actually have a PBA card given to me by a police officer that will supposedly help me get of out a ticket. It has nothing to do with wealth.
define old news? It's technically newer than SuperCollider by quite a bit. ChucK has a lot of users in the laptop orchestra world.

Even CSound has had resurgence with iOS apps. Likewise with Pd. I'm really liking the haskell based sample player Tidal, that's a lot of fun.
Things like that only work to a point. I had a good friend who liked to drive fast and had a nice BMW with a purple heart license plate. He got out of a lot of trouble with that, until an incident where they revoked his license, and he couldn't drive for a few years.
Right or wrong the police give preferential treatment to people who gave money, time, or blood to a cause they support, but only to a point.

Personally, I have a bronze star plate on my car, and I don't push my luck too much any more, but I also know for a fact it got me out of a ticket for an expired inspection.
IOS Development Podcasts
Some countries reverse the role of period and comma in numbers. The author meant ten thousand.
> But this example does not require any allocation space at all.

That's not possible if you're comparing algorithms apples-to-apples. If you have an intermediate collection, it's in memory somewhere, even if the language does the allocation for you transparently.
If I was doing heavy C++11 today, that kind of range namespace would be the second thing I'd write; the first being a bunch of string functions for the operations I actually want to do with strings (as opposed to the low level "character buffer manipulation primitives" the STL offers).

I was ok with that low level, low semantics design in the STL until I heard that stuff about integrating a graphics library. Now I'm just confused. :)
You could probably convince most "audiophiles" that the color of sneakers worn by the production line employees changes the sound of opamps.
I wouldn't have believed that wasn't a cover story 5 years ago - today?
>I for one do not see how to implement it.

(referring to an allocation-free strstr if strings had an associated length)

If a string was a (pointer,length) pair, then strstr would return a pair (pointer+offset,length-offset) where, just like in the original strstr, the new pointer points into the existing string. No allocation needed

(But what about the pointer-length pair that has to be created? Well, it will live on the stack just like the return value from the original strstr, which has to be stored somewhere also.)
> So the focus on the self-written allocator seems to get a little biased in this discussion.

I feel like I'm missing something here. Where are the self written allocators? This article states that the OPENSSL_Malloc is simply malloc by default.
Make your decision based on the quality of the program, mentorship, and imprimatur. You're most likely going to pivot around anyway at some point in your life.

25K isn't really very much money, but if you can get paid to have an awesome learning experience, deeply engaged guidance, and a significantly increased chance of getting some angel funding after the program, that seems like a pretty good deal and might be worth being flexible on your idea.

On the other hand, if you're super-passionate about your idea and really know it's what you want to do, you should stick to your guns. The accelerator may be impressed enough to let you in anyway, but you should obviously be ready to go it alone.
I think people would prefer that openssl seg-faulted than silently allow theft of private data.

I.e. the array-decay-to-pointer is a more expensive problem.
No it isn't. You just need C++ libraries that do data analysis chains in a similar way. There are examples elsewhere in the comments here.
yes. if only they had gone to a web scale mongodb backed blog engine.
HMO:

I'm a web developer from Mapbox / former White House tech advisor running for Congress. I released my campaign issues on GitHub: http://www.wired.com/2014/03/cole-platform/

I need help raising money to compete. Small donations welcome. http://coleforcongress.com/contribute

How I can help:

Happy to share my experience / advice with those interested in working in politics or government.

Once elected, I'll be a Representative in Congress who has worked in and understands tech. Here's where I stand on the issues: http://coleforcongress.com/issues/technology/ and a reddit AMA: www.reddit.com/r/IAmA/comments/20wvx5/im_dave_cole_candidate_for_congress_nj2_a_coder/

dave [at] coleforcongress [dot] com
This is a relatively ahistorical, naive view of the operation of markets. Even with competition, assuming fixed price cabs eventually get driven to extinction, then what? There would be nothing to stop the collusion of existing market competitors (Uber, Sidecar, and Lyft) in order to drive up pricing or perform market division (customer allocation) - that is assuming that monopolies don't begin to form in the market as they are liable to do. There is tremendous incentive and pressure from investors for them to both divide markets and fix prices (eg, maximize profit). New firms may enter the market in an attempt to undercut these forces, but they will likely be unable to compete with monopolized pricing by the large companies and thus be driven out of business before reaching any sort of reasonable scale. These kinds of phenomena, far from being anomalies, are the traditional way in which really existing markets work [1][2][3][4][5]. Ultimately, the resolution of such problems occurs not through the markets - which instead create such problems - but instead through the mobilization of state forces (eg. lawsuits and monopoly busting).

This article just highlights the strong potential for these problems and more to form in the developing taxi service market some time in the near future and the algorithmic obfuscation used to give these forces the appearance of neutrality and legitimacy.

[1]: http://www.fbi.gov/news/stories/2013/september/guilty-pleas-...

[2]: http://en.wikipedia.org/wiki/Sherman_Antitrust_Act

[3]: http://www.theverge.com/2014/2/1/5368098/apple-hit-with-840-...

[4]: http://www.tomshardware.com/news/microsoft-office-price-fixi...

[5]: http://en.wikipedia.org/wiki/Price_fixing_cases
That is all perfect until your project has matured into 2, 3, or 5 years old and you need to do patches and migrations. Or how about you have to transfer your project to another developer? I bet he/she'll be happy not having a spec of what's in where, when!
$5k is still a lot of money for somebody making $120k/year
HMO - account recovery industry.

I'm building a service based on machine learning and operations to improve outbound recovery attempts. From customers experience it works very well.

I know there are people here who are or have been in the industry. Help me out by getting in touch so I can hone
my messaging, product and expand my network.

email in profile.
HMO:
We are a startup in Asia. We are three partners (all groomed at different startups in MA, US). We provide software development and software testing (manual, automation) services. We want to generate business from US and Europe.

We really need help with marketing and sales.
Ruby is beautiful (but I’m moving to Python)
IANAL, but:

1) It's only a felony if the secondary charge is allowed

2) They can retry this if they want, since the judgement was vacated, weev was not acquited or convicted. My understanding is that so long as there weren't certain kinds of prosecutorial misconduct (e.g. the prosecutor intentionally caused a mistrial so they could start over).

3) That being said, retrials are fairly rare, since it's expensive and it tends to look bad for the prosecutors.
I'm actually working on a project quite similar to what you two are talking about: http://www.mosttalked.com/ The idea is to prioritise news be shares + display the most popular tweets of people that you possibly care about, along with a summary as well. It might inspire you hopefully. I believe merging news outlets with social media has so many points to improve.
My grandfather is a retired police chief from a major metro. When I purchased my car (which has over 400 horsepower, so I like to... play), he told me to become part of the highway patrol or police charity organization. He told me when he was in law enforcement, any member of these organizations were treated "much more lightly" than others.

For only $25 or something like that, you can get a piece of paper you can put in your wallet to show you're a member. For around $2,000, you can get a license plate frame.

He said even with the piece of paper, if you're pulled over, you have a pretty good shot of being given a warning. You just need to make sure you show it to them when they pull you over.

With the license plate, he said he would never pull over someone with the license plate, because law enforcement doesn't have enough money as it is and they'd rather not piss off those who have money to donate.

I didn't really believe him (grandfathers and all), but I donated anyways (for a piece of paper, not the license plate). Now I see this article, and I'm starting to think he was serious.
Probably avoiding a backlash from partisans of the that db complaining about the bad press and from partisans of other NoSQL dbs complaining that the points in the article don't apply to them.
> How to write English (non-native language)

I suggest writing a blog in English. Practice is probably the best way to learn. There is also http://english.stackexchange.com if you have specific questions.

> Program well in c in userspare (Currently reading 'The Linux Programming Interface')

In my experience, reading other people's code is the best way to get better at a language. I don't have much experience with C but I guess there are a few projects that would be interesting to read here: https://github.com/search?o=desc&q=language%3A%22c%22&ref=si...

Relevant links: http://stackoverflow.com/questions/925754/resources-for-lear..., http://www.amazon.com/Beautiful-Code-Leading-Programmers-Pra...

> Embedded development (I don't even know where to start that one...)

I am currently learning embedded development (maybe we could help each other?).
Salesforce to lease half of Transbay Tower
> "I don't really think a 4 year degree decides your future, it just shows you are trainable and can commit to something."

Jim wants a job in software development, but instead studied [something that isn't related to software development]. Do you know what Jim's degree says to me? It says that Jim is not willing to put in the effort to learn about something that he supposedly wants to be involved in. Is he actually interested in the work?

If Jim can somehow convince me that he actually does care about the work (say, an extensive github account, previous employment in the field, or even perhaps one hell of a cover letter) then I would be more than willing to overlook the fact that he chose to get a degree in something unrelated. In absence of those things though? I'd rather find somebody who can point to their degree as evidence that they care enough about the field to spend time studying it.
Dating is a giant business.

10m daily users is an amazing stat.

Doubling their users at that scale in <5 months is earth shattering.

I know these things make for rational arguments.

And still my brain has trouble processing that valuation, especially in the context of "worth almost as much as IAC".

A friend said something that struck me yesterday:

"The fed has literally been dumping billions out of helicopters. Billions don't matter anymore."

I am not commenting on bubble / no bubble but it will be interesting to see what happens when $$$ tightens @ the top.
Infinitely infinitely many is still infinitely many. N x N has the same cardinality as N. Now if you meant N ^ N then that's actually different. "x" means set product and "^" means function space.
You piqued my interest, and it looks like NUL-terminated strings in files is actually common. tar, ELF, JPEG, gzip all use them. When the serialization format matches the in-memory format, you can mmap directly into a struct, which is fast and convenient.
Isn't "I realized the harm I was causing by my actions" a good reason to stop taking that action?
OK i looked at your HN post, your splash page, and your home page, and I still don't know WHERE you're running for congress. Perhaps you could lay out the basic vitals and your qualifications or platform here?
Well, on the one hand, you are at a unique the time of your life when you can invest your time into a startup (assuming you are single, and willing to eat some ramen). On the other hand, clearly you could be doing better, and any skills/experience/salary history you acquire now will put you in a very attractive position in a few years, and really will compound for the rest of your life.

I think you need to do some soul searching, and ask what is your motivation, what is your passion? Are you in this startup because you believe in it, think it can fly, and are willing to sacrifice a lot? Or are you there because you fell into it, they gave you a job, they're good guys, etc?

Other questions to ask are:

- What's your risk tolerance?

- Do you mean to have a family some day?

- How important is money to your situation?

- What would you value more: the experience of building something yourself, or the experience of working on a team?
So. I have recently spent about 5 full focussed days to crank out about 1k - 4k lines of code (can't check at the moment, vacation), which will save our operations team at least 3-4 full days per month. How much will each line of cost count? 4k / (my hourly payment * 40 hours)? 4k / ((my hourly payment - the average hourly payment of our operational team) * 40 hours)?

What about we include the fact that the new system is less frustrating to operate than the last one? What about the fact that the new system is more stable and saves frustration and plain time (since it just works and people don't get blocked in their workflow) in our software development team?

So, overall, point being: I don't see it feasible, or even possible, to calculate the full monetary impact of a line of code in a medium to large company.
A percentage is better than nothing, last time I was curious and looked it was 60-70% of your expected earning up to a max (120K/year IIRC) in my state. You can either take the `deal` so to speak or go to court for your compensation
A lot of the Hadoop users are in the right ballpark. Not necessarily that stack, but that approach to things, and the problems they are attacking, especially graph based data.

My broader point is that if your project fits into pgSQL then you need another unique selling point and the data functions are just an implementation detail of some other aspect of your offering, whereas for many of the people not using that kind of thing their analytics and data systems are their selling point. (That's a backhanded compliment to pgSQL, in that it's easy enough to get right on small systems that any competent developer should be able to manage it, thus reducing the market value though). There is, of course, the blurred line of crazy MySQL deployments, many of which are barely relational.
Inevitably, that is what is attempted. But it doesn't solve the use cases I mentioned.

To take a diff for example, not only do you need to illustrate the diff version of (I drew a new line from here to here and made this other box green), you would also need to illustrate patches to textual details and how they related to the graphical code.

Maybe I can imagine a solution that could do that (at great expense). I cannot imagine the language being friendly enough that third-party compilers, IDEs, or static-analysis tools would be feasible.
I was actually disappointed when I didn't get feedback right away after doing the test.

Something to be aware of if you are considering doing this... it looks like it really is for employment and not a challenge.

I guess one of the first question "Are you ready to go to work in Menlo Park CA" (No) should have probably clued me in:)

Oh well... they will "be in contact". Right.
Shut up and take the Venture Capital
It's on his site, albeit a little hard to see. South Jersey seems to be the place.
I remember a coworker telling me in a condescending tone 'this is how a startup runs, you break even and try to expand market share, burning investors cash and growing without profit' when I asked about how it is that our company that has not made any profit in the past 4 years serving enterprise customers is able to still be solvent. What if investors suddenly stop injecting cash? Financials would be negative in the first quarter.

I never understood the working models of growing at the sole expense of investors money. Because I don't know but last time I checked capitalism and free market still is king, and they always have a history of major market correction. When something's not efficient or something's offplace, market has a tendency to correct itself, in a big, unexpected, ruthless sort of way and we've seen this again and again, but history seems to teach people nothing.
I appreciate the Futurama reference but it is true. Nuclear "waste" is extremely valuable for use in upcoming reactor designs like MSRs that burn up significantly more of the long-lived waste. Keeping it stored temporarily until these reactors go live is the most prudent and efficient option.
I'm reluctant to mess with the informal way that HN has been run over the years, so there isn't likely to be a complete list of rules. We do intend to augment the HN guidelines, though—just not any time soon. The new team has to get settled in first.

In the meantime, I've been posting feedback comments most places that issues like this come up. You may need to look to the bottom of the threads to see them, because we usually mark them off-topic.

And you can always get answers to questions by emailing hn@ycombinator.com.
Compare this to OkCupid.

When IAC acquired OkCupid in 2011 for $50MM, OkCupid had almost as many users as Tinder does now, but Tinder's valuation (according to IAC) is literally 100x more.
Someone beat you to it.

https://news.ycombinator.com/item?id=7569967
NSA said to have exploited Heartbleed for intelligence for years
In HTML5 we are stuck with NoSQL (IndexedDB), Mozilla refused to implement WebSQL.

Safari, Chrome and Opera implement WebSQL using the public domain SQLite library. This means WebSQL is available on almost all smartphones/tablets and on the majority of PCs.

Btw. Mozilla implemented their "NoSQL" IndexedDB on top of SQLite in the first place. Various features like bookmarks are also stored in a SQLite database. As well as in FirefoxOS.

https://news.ycombinator.com/item?id=7574533
I worked with a dozen startups to put together the Startup Sticker Pack: http://startupstickerpack.com/

A dozen stickers from cool companies for $5. I'd love to hear from people about why they would / wouldn't want to buy one. It's not quite selling as well as I'd hoped.

I'd also like to hear from startups / groups who might be interested in buying one for each member of their team.

You can email me at mail+hmo@robert.io (+hmo is to track if any spam comes from posting it here).
SKYVETS SAVES LIONESS
Why Amazon pays warehouse employees $5,000 to quit
You shouldn't waste any more time on spammers by spending it trying to vet your followers. They got to decide they wanted to follow you, but you're in control of the most precious thing we have: our time. Don't give then even 10 seconds that it takes to try and decide their worth. They don't deserve that power over you.

I've never looked at any person's Twitter account and judged them by how many likely spam bots they have. I assume spam bots follow people all the time and I don't hold it against them for becoming victims.
So what do you do when you aren't looking at Twitter in the timespan in which it appears in your feed? Just never see those articles?
I'm trying to learn ATS right now, and indeed I immediately thought of ADA. One of the advantage of ATS is that it is a lot more functional, but far from being anywhere as mature yet.
Happy Birthday in BASIC
I think there is another very good reason to not use a relational database. You want to build a prototype really, really fast and your data model and organization is gonna be changing constantly. In my experience I have been able to prototype applications much faster using NoSQL solutions. I think a good approach is to "sketch" your app with NoSQL and once things start to stabilize move to an RDBMS.