skysight-inc/HackerNews huggingface dataset:
No, you just run the static type check on the entire program. Like you run the Haskell REPL on a file and it type checks it for you and executes the main. It can just do this in RAM without generating an executable file.

Yes, it will technically complain before you even run it. Because it will first analyze it and only then run it if it type checks. The entire file, not just the reachable parts.
The funny thing is that in the 90s, after the scare was mostly over, when adults would see me and my friends with rule books and pieces of paper full of numbers they'd always congratulate us for being 'studying hard'. ;)
For credentials like facebook, emails, coinbase and etc, my password will be [identifier]_mypassword. So for example, my fb password will be facebook_yyu9023, email password will be gmail_yyu9023 and the patterns continue. Now days I just write it down and then encrypt it with a passphrase.
I love that people do this. Do you really thing someone is going to write a web scraper and NOT include obvious things like converting AT -> @ and DOT com -> .com?

Also, who even worries about spam any more? I haven't seen actual spam in my inbox in years.
For anything operating over internet latencies and bandwidth, writing it in an unsafe language makes no sense. RTT will dominate, that compromise is a false dichotomy for real world scenarios a safe language will be indistinguishable in performance and orders of magnitude closer to the goal of robust encryption.

Speed gets you this, http://www.openssl.org/news/vulnerabilities.html and now where do you stand?
Until the last panels I wanted to believe this was a parody. The intense occult training through D&D prepared Debbie to accept the invitation to enter a witches' coven.
An often-overlooked aspect of the tulip mania story is that Tulip bulbs are actually a productive investment, as they can (slowly) produce more bulbs.
In France too there was lots of bad mouthing about role playing games in the mid to late 80s, when it was really popular (while it was nowhere as popular as in the US), and fearmongering in newspapers and media. A couple of years later, (early 90s, basically), video games were targeted, and they made it sound like people who were playing video games were retarded.

There was a documentary about Eric Chahi as he was finishing his work on Another World on Amiga (one of the milestones in Gaming!) in 1991-1992, and the reporters described him almost as being autistic. The media suddenly changed their stance on video games after Sony's success with the PS1 turned most young people into gamers and gained mass approval.
I decided I would write a short story everyday. Ended up forcing myself to write random gibberish for a few days before i gave up.
> there seems to be some actual demand that went missing at some point.

Silk Road?
Another bad thing about bitcoin is that even traders who sell real products and services for bitcoins use dollar as a price, and then convert it to bitcoin in real time. This makes bitcoin completely unnecessary, it doesn't add value to bitcoin, but the opposite - everyone start assuming bitcoin is like some virtual dollar tokens that have no meaning if there are no actual dollars involved.
While the idea of teenagers literally worshiping Satan was a moral panic, I suspect many Christians would find D&D incompatible with Christianity, given its emphasis on violence, personal power, and the occult.
In the age where "most" web-servers are idling at 10% load and yaaaawning most of the hours away, it makes no sense that security-critical network-code should be written in unsafe languages which can leak memory, such as C.

Due to improved hardware, we've now reached the point where we can have reasonable security and performance at the same time. We no longer need to sacrifice security by using unsafe languages. So why are we using them?

Yes some companies like Google and Facebook has busy servers, but for the rest of us, for the rest of the entire internet having to redo all our keys and certs and passwords due to a archetypical C-style bug in OpenSSL, the cost using C compared to the potential performance-benefits is absolutely not worth it. Not even close.

TLDR: Stop writing network-code in C unless you bloody well need to
Naww, thanks. I'll take that as a compliment? ;)
I'm actually curious how this all happened in the French media. In the U.S. it spread like wildfire through Evangelical media.
I'm Robert, the Editor of Mozilla Hacks. We publish articles about anything regarding to the Open Web and is open source that we believe developers can learn and get inspired from.

More information at https://hacks.mozilla.org/about/
I took a course in ChucK at university. It was such an awful way to make music that all but three or four of around 20 people in the class dropped out.
But even 'safe' languages have unsafe VMs. There is no question that over the years these VMs (or the runtimes) have had equally severe vulnerabilities.

The thing that really sets heartbleed apart is not the details of the bug, it's the scale of the 'infection'. OpenSSL is a core dependency of so many distributions and of so many pieces of software.

I think we could argue for lots of different solutions (diversity of implementations, safe languages, more tests) and all of them might be good in one way or another but none of them are a silver bullet for any possible bug either.

I think the take away is that you need to in a position to upgrade any part of your software stack at a moment's notice not just the obvious top-level (e.g. Rails/Django/Jetty).
That's not an outrageously difficult part to solder by modern standards. Anyone with a modicum of soldering experience should be able to tackle the job with the right technique and a little practice.

The preferred approach is simply to use a wide chisel tip soldering iron and plenty of flux to make all the joints in one pass, and if necessary clean up the area with desoldering wick. That's the traditional method for soldering fine-pitch SMD ICs and works remarkably well, as it relies on the wetting behaviour of the solder rather than any particular dexterity or skill. The solder won't wet to the body of the package, only to the pads, so any bridges between the pads will naturally be drawn away by capillary action. As long as the wires are neatly tinned it should all go quite smoothly. A search for "drag soldering" should yield lots more information, including a number of demonstrations on YouTube.

If necessary, a basic jig to hold the part and wires could be easily constructed using a small piece of dense hardwood and a scalpel. I'd probably just hold the cable and part in place with Blu Tack and align the wires with fine tweezers.
> Too many investors not enough users?

This, very much. Bitcoin was designed as a currency, not as an investment vehicle. Most use it as the latter, which causes problems.
I'm a big fan of CCRMA. Just curious, but what is Ge working on now? And do you folks in the Knoll have any events coming up soon?
C++ is evolving at a kind of breakneck pace lately, and it's already a lot different from the language it used to be. Auto, range loops, and lambdas are making it much more pleasant to work in while still maintaining a lot of performance advantages.

I know it's pretty popular to hate on C++, but I'm pretty excited about where it's going, personally.
What's the "hunch" based upon?
Being fairly new to programming, I usually have a hard time coming up with realistic/manageable ideas that can be completed in a reasonable timeframe.

Your huge list of projects has been a huge help in that regard, so thanks!
WeChat sees US as ‘hardest market’ to crack
Maybe it's my inexperience but I feel like you guys are missing the point. Who in the world writes C Code like that? Seriously. Without any safety checks whatsoever?
That's just ludicrous.

And now everybody wants to change to a different language where idiot code can't do much harm...

Why not write real quality code instead?
Because "it's so fricking hard" ?? Did you see the FIX to the "bug", it's a simple "if ()"...
Rust allows you to write safe code without a VM. It is statically checked to be memory and concurrency safe.
I honestly thought this was a parody for 90% of the strip, then like most religious material, instead of a punchline, there's a testimonial. I wonder if there's some kind of law about this, like how porn movies and action movies have similar ratios of story to fight/sex scenes?
Building .NET projects is a world of pain and here's how we should solve it
Sorry I'm so late to this, but you should definitely not build your own. I can't necessarily endorse Magento without knowing your team, but there are many platforms, both standalone and SaaS, that have years or decades of developer hours invested. If you contact me (philip at madeupname.com) I'd be happy to discuss your situation and see if I can make a suggestion.
That is really cool. Something this cool rarely comes in a field like advertising. I only wish I was a game developer to try this!
I'm actually wondering, are their any ways to play with data like this (eg. downloading data from StackExchange http://blog.stackexchange.com/category/cc-wiki-dump/ )

Any other ways? I don't believe there is a VM for this sort of "experimentation"
Minimalism in life, web design and business
Miles looked down the business end of a trumpet, and I'm an idiot.
Maybe because most of the code currently out there being use by the biggest companies in the world still use these "unsafe" languages. & tons of the job market still is in these "unsafe" languages.
Think about all the retailers that sell oversized products. Pretty much any item that can't fit into a sedan is a prime target. Build a large list of items from appliances, to furniture, even trips to costco.

I think this is an excellent idea with great potential.

The moving industry is nice, but I think there is much more potential in larger retail purchases and local delivery.
I don't have the time to investigate the language, but I wonder if its semantics borrows from synchronous programming languages such as Lustre [1], Esterel [2], or Signal [3]? Those languages were designed to program discrete controllers and embedded real time systems, and they have a very strong notion of timing and scheduling (via typing) in their semantics which allows to prove functional properties such as accessibility of states, liveness, time and memory bounds, etc. using formal methods such as model checking.

When I was doing my master thesis on this domain, another student in the lab (who was from an IRCAM [4] master degree) worked on the use of synchronous languages to follow a musician who plays at arbitrary speed a given music score (or something along those lines). It was quite fun!

[1] https://en.wikipedia.org/wiki/Lustre_%28programming_language...

[2] https://en.wikipedia.org/wiki/Esterel

[3] https://en.wikipedia.org/wiki/SIGNAL_%28programming_language...

[4] http://www.ircam.fr/?&L=1
> Every field is bound to have some common problem which is dying for an app to mobilize it, a site to collect and correlate it, some code to automate it or a framework to organize it.

At first sight, we can not see one but he will keep trying to find one because it is definitely helping to work on a project that could help you in your current job.

That said, I tend to agree with gofer's comment about how it could not evolve into a position of developer in his current field. There are definitely "IT people (developers included)" and "domain experts". Maybe mentalities could be changes…
The bug has "only" been present for 3 years. I think no enterprise appliance new enough to ship with an affected OpenSSL version is old enough to be EoL.
Depends. Are you a trustworthy person to handle my money, or are you a meth-head junkie who owes me rent? Because if it's option #2, the risk of "investing" with you is probably not worth the interest rate.
You are generalizing, incorrectly. Many people (including myself) are quite aware of Steve's flaws, and yet appreciate the fact that in the end he Got Things Done and achieved impressive things.

Admiring or having respect for someone does not necessarily imply you're having a "god-like image" of the person, or that you're unconditionally accepting everything the person has done.
Nahh, there are PLENTY of enterprise customers who will never move to the cloud with sensitive data. So software installation at the customers site is a must for many of them, especially the larger enterprises.
Sure, the small web startup of 10 people doesn't care where their employees data is, a 100k employee enterprise very well does.
A pixel-by-pixel clone of Medium
Thanks a lot, I will tell him to contact you.
Approaching Friends For Referrals and Their Business
When I use my card to buy drinks and I'm buying more than one, the helpful starbucks employees suggest I make multiple transactions to get more stars.
Thanks for sharing it, I will send him your blog.
I wonder, how does vertica link to this.
(http://www.vertica.com/2013/12/12/welcoming-facebook-to-the-...)
LastPass is sufficient for myself
I was reading and hoping there was an explanation why Safari for Windows discontinued. It is the only popular WebKit browser ( after Chrome fork to Blink ) on Windows.

Otherwise another great piece.
Ridiculous.

Question: In EU countries debts expire after 3 or 5 years, if no party claims them. It is not possible to remember and start collecting 10 years old debts. Is there similar period in US?
Don has always been such a positive person to be around. Great memories. Thanks for sharing.
You can write unsafe code in any language. It's not the language's job to protect you from yourself, that's what tests are supposed to do.
Synology Product Security Advisory [Heartbleed]
This doesn't quite make sense to me. Or, it makes sense, but not for the reasons presented on the surface.

If you're Andreesen Horowitz, you have access to a nearly-unlimited supply of capital. You also have incredible access to information and dealflow throughout the industry. In situations in which you are not capital constrained, the most efficient way to establish a workforce is to acquire it from somewhere else; that's why acqui-hires make so much sense, because you've basically had someone else do the hard (and often completely unpredictable) work of figuring out if people can work together in a successful manner (which, I should note, is different from determination of whether the thing they're working on is successful). If I were A16Z, I would arbitrage my information advantage to secure a high quality engineering team by acquiring a company that had smart people but a lame product; going through a traditional hiring process would be a waste of my time (and since everyone is throwing money at my firm, it would also be a waste of time that could be better spent on figuring out where to deploy my capital).

A16Z is rich enough to buy people, if it really wants people, for internal use (whether it is for their own company needs, or for some idea that they want to incubate inside of the firm). And even if they don't want to buy a whole set of people, they have enough wisdom and experience to know that you want to hire within a cohort of successful people rather than randoms (to see this in practice, take a look at Don Melton's post about Eazel alumni ending up at Apple on the front page right now). This tells me that their programming test has more to do with some sort of evaluation of this Hacker Rank service ("tell you what, we will run our own test on the service to see what happens!") or some other sort of analytical adventure.

Or, you know, maybe it is really a programming test after all. Maybe they are hoping to find some sort of diamond-in-the-rough engineers who are socially and career-wise disconnected from an existing network. Some sort of "black swan programmer" or something. But I highly doubt it.

So basically, if you go through this test, you're helping A16Z evaluate something; that something, however, probably isn't you.
ChucK is old news in electronic music circles. SuperCollider (http://supercollider.sourceforge.net/) is (I believe) the most popular and well-maintained of these languages.
Overtone is just a clojure wrapper around the SuperCollider application. (It's pretty neat too!)
YouTube Now Offering 2160p 4K Video Resolution
Readability improved from squareVec1 to squareVec4, then went downhill. Hiding loops behind new names doesn't make programming better.
Veed.me finds your business a videographer for your budget
I have followed the same process as mentioned by @2810. Worth mentioning something I wrote last year - http://pivotedreality.wordpress.com/2013/08/02/i-dont-like-c...
I feel like every one is using heartbleed to pitch their products.
I presume, from their silence, that competing products also fail to find this bug?
Those aren't the only "dangerous" kinds of mistakes a programmer can make though
>> There are much larger forces at work. What these forces are exactly is...difficult to determine.

How about: "lots of people who bought at the top of the BTC hype are now abandoning the BTC market because they lost faith in their get-rich-quick scheme?"

The meteoric rise and slow but steady deflation in the BTC price you see now has all the properties of a classic, media-fueled bubble. At one point people who were never interested in monetary systems or cryptocurrencies at all, were asking me how they could buy BTC because they heard on the news it went from $100 to $500 in a few weeks. These are not idealists or miners, but just hoped to ride the hype train up and make a few quick bucks without actually having to work for it.

I don't think it's 'difficult to determine' why it's fading now. Maybe if you completely live in a kind of echo-chamber that HN appears to be on topics like this, but looking from the outside it all makes perfect sense.
and yet you're still alive and (I guess) obese... and he died of not paying attention to cancer. Donuts ftw I guess.
I love their password vault security audits, I've been de-duping and increasing my password security with the help of this.

Lastpass Mobile now also has autofill on Chrome if you are using Android, which is great because the inbuilt browser on the Lastpass App was awful.
"If the above is correct, it is rational to not sign up for cryonics only if:

1. You believe that P = 0, i.e. cryonics will never work;
2. You prefer being dead to being alive."

This kind of argument only discredits cryonics supporters. The "it might work" argument of cryonics is isomorphic to the "I might win the big one" argument of the Powerball. And while I think it's reasonable that the chances of cryonics working out are much higher than the chances of my state lottery investment scheme working out, that's at least partially negated out by the fact that one of them costs your whole life insurance policy to play (todo: see if I can set the beneficiary on my life insurance to Powerball numbers).
This has nothing to do with what I asked. Also, this I know. Sorry? :P
Insulting the artist adds no value to your point about the merits of the music industry. Nobody logs onto this site to read your opinion about whose music sucks. Please add value or don't post at all.
It occurs to me that if I was a (black hat) hacker looking for vulnerabilities, I could reimplement critical software in a safe language, leveraging the type checker to search for bugs. Is anyone aware of people doing this already?
Mm that's roughly the impression I got, but I hadn't thought of the papers - thanks for the clarification!
That's a fairly rude thing to say. Would you say that to their faces? This is a pretty large site, and a lot of people stop by here, possibly including some of the "monkeys" .

By all means, call the code what you want, but separate that from the people.
Actually that's what types are supposed to do ;)

Tests are still useful, as sanity checks and for checking empirical properties (eg. wall-clock time usage, timing attacks, etc.)
Not just restaurants. All business prices vary to the extent that their labor, rent and other costs are geographically variable and dependent.
Ok, point taken, if you take the pre-processor or code generator approach such as in the article the performance hit might be manageable, but when I look at that 'memcpy' example I can't help but suspect that that is not a free lunch (as in, that all the extra work is done at compile time). For that you'd need to look at the code generated.

Even if there is a 0 performance hit in this case, the majority of 'safe' languages are neither pre-processors for C or code generators for a C like language (which would presumably also require the linked libraries to be re-written using something safer).

So in the specific case outlined here this may be true but in the more general case there are usually run-time trade-offs involved.

I think the key operative word in your comment is 'correctly', writing correct C is extremely hard and this approach makes it harder to create a certain class of bugs at the expense of making it harder to write the program in the first place. Tough choice, even in the absence of a performance hit!
This was good! Starts out with very basic programming stuff, but overall gives you a nice introduction to what ChucK can do.
I remember similarly getting in trouble for playing cards in middle school, because the teacher couldn't conceive of a non-gambling card game.

Of course, I'm playing hold'em on my other monitor right now, so maybe he had a point too...
C being loved in the UNIX community is one of the primary reasons that these libraries are in C.

Ada has been around since the beginning of the eighties, has and had performance that is near that of C, does not use a garbage collector, provides C linkage, and is far more safe than C.

If you do allow garbage collection, there were many performant and safe alternatives in the 90ies, such as ML.

It's culture as much as performance.
Isn't it better to not include stuff that's insecure, even if they have historic value? Isn't this a big part of the problem of some (even OpenSSL) software?
It's a big assumption though, and you need to spend 3 hours to find out what you are actually applying for.
Oh wow, basically its Chernobyl with wings. Don't miss this, its pure gold: http://www.merkle.com/pluto/pluto.html

Quote:
"Meanwhile, at the Pentagon, Pluto's sponsors were having second thoughts about the project. Since the missile would be launched from U.S. territory and had to fly low over America's allies in order to avoid detection on its way to the Soviet Union, some military planners began to wonder if it might not be almost as much a threat to the allies. Even before it began dropping bombs on our enemies Pluto would have deafened, flattened, and irradiated our friends. (The noise level on the ground as Pluto went by overhead was expected to be about 150 decibels; by comparison, the Saturn V rocket, which sent astronauts to the moon, produced 200 decibels at full thrust.) Ruptured eardrums, of course, would have been the least of your problems if you were unlucky enough to be underneath the unshielded reactor when it went by, literally roasting chickens in the barnyard."
Was that code ever actually sanctioned by the IETF and included in their resources though? SSL had SSLREF but I've never seen (and didn't find anything just now) a similar thing for TLS.
It's bizarre to me that people have this perception when Jony Ive is practically a household name in the US; not to mention that Tim Cook, Phil Schiller, and Scott Forstall all have been given props by Steve in his keynotes. I could rattle off more of Apple's senior leadership than any other tech company, so I really don't understand why people claim that Steve Jobs took all the glory.