skysight-inc/HackerNews huggingface dataset:
This happened to me last year. I am an undergraduate student majoring in Computer Science. Last year, I got a part-time internship at a company that makes school applications. Work was monotonous, every day was like the other day. The people I worked with never challenged me to improve my skills. All they wanted was to get the job done. I started despising the moment I open the IDE.
When I moved to BrainJocks, a web development company, I loved computer science again. The team are all enthusiastic and young. The company divides my time into learning, working, and exploring new things. They gave me an account on PluralSight.com to learn whatever I like, and they encouraged me to explore new tools and propose them to the company. This new internship invigorated my love for software development.
Of course, every person has his own circumstances. If you find that your workplace is the cause to your problem, try somewhere new, even if it pays a little lower. The benefits you can get in return may be worth much more than the money.
It is trivial for register software to not print a tip line when the takeout button is pressed, if the businesses wanted to support customers and not press for tips there.
My company paid for my trip.
Thank you for taking the time to respond.

> The rest of my advice assumes the CEO (your co-founder) has quite a bit of confidence in the CTO.

This is the case, it is in my interest however to remain in the company because my equity is vested, the sooner I leave the less I will get in return, apart from my time, and opportunity cost I invested all my personal wealth.
I work for other people to survive. I work on projects that I find interesting to stay sane and hopefully change the world at least a little. Of course I try to keep those two lined up, but it doesn't always work out that way. That doesn't necessarily mean its time to move on... if you are in a stable work situation where you can pursue what you really want to be working on the side that can be a really good thing.

Could I do something else? I write a little fiction when the mood strikes if that ever took off I would be tempted to see where it went, but writing software scratches that same creative itch and is a much more reliable source of income.
Seems to me here, the biggest lesson one can learn from this story is don't work for companies like Goldman Sachs. if they don't want to get with the times and understand how the world they don't understand works then they deserve to be technically behind. So on top of not understanding your work as a developer instead of learning how things work, they choose to abuse the law. Worse part is the law is like a big spider web where it traps the small guys while the tigers and elephants walk right through, there is no justice here no matter how many sections you quote or how many laws you read. Best thing is to just be smart and not get involved. There are many opportunities out there for talented developers.
They've come a long way and deserve to be one of the major names in realtime apps. Congrats!
You are describing a very high end dining experience.

In most restaurants the server "recommends" the highest margin item (bonus commission) or whatever they like or is easier for their friends in the back to prepare. It's dinner, not a bespoke ball gown.
Spring Break Expectations Vs Reality
beyond accurate for everyone that just finished spring break
From Google (http://www.google.com/intl/US-en/about/company/rewardprogram...):

URL redirection: Some members of the security community argue that open redirectors are a security issue. The common argument in favor of this view is that some users, when presented with a carefully crafted link, may be duped into thinking that they will be taken to a trusted page - but will be not be attentive enough to examine the contents of the address bar after the redirection takes place.

On the other hand, we recognize that the address bar is the only reliable security indicator in modern browsers; and consequently, we think that any user who could be misled by a URL redirector can also be tricked in other ways, without relying on any particular trusted website to act as a relying party.

The reward panel will likely deem URL redirection reports as non-qualifying: while we prefer to keep their numbers in check, we hold that the usability and security benefits of a small number of well-implemented and carefully monitored URL redirectors tend to outweigh the true risks
This site is great for teaching CSS layout skills. Next time someone asks me, I'll refer them here.

I especially like how it references caniuse for each property it discusses. Nice work!
Wow, that's tough. I have heard that when a biz scales, sometimes the early employees don't fit as well, because the skills needed are different than when first starting out. To get things going you do a lot of everything, and later they need specialists. How passionate are you about this startup? What does your co-founder think? You would think there could be some role you could fit into, maybe COO? Depending on its success I would hold your ground , or they should be willing to buy you out or something. Best wishes!
Wirth is one of my biggest influences. I was just inspired by this post to finish a short little draft I had sitting around about Wirth as an influence, and the Oberon language report. Oberon-07 is defined in a 17 page document that is simplicity itself. Of that, about 2 pages is EBNF (Wirth published the first EBNF variation too...) for Oberon, and the rest is easily accessible prose...

Unlike most languages, Wirth's languages have gotten simpler, but more powerful, from generation to generation. His greatest legacy to me is his focus on engineering vs. science in programming language design. He's never been concerned with adding the latest and greatest features, but on what is proven, and what has a well understood means of efficient implementation.

This is both the beauty and elegance of his language designs, and in some ways probably his "downfall" in terms of getting credit outside of quite small circles:

Wirths languages are not "sexy". They're stripped down and bare. Their implementations are not sexy - they're stripped down and bare: Simple recursive descent parsers with direct code generation (most, or possibly all, of his compiler implementations output code without generating an AST at all) and minimal optimization - focusing on being easy to understand and modify, predictable, and fast, rather than on producing the fastest possible code.

But that's what makes him stand out as a beacon of programming language engineering. We need the fancy, sexy languages and implementations too, but "Wirthian" languages and compilers are an important counterpoint.

(The blog post is here: http://www.hokstad.com/oberon)
It's interesting how you choose to spin it to fit your narrative. That product has multiple licenses, the one that allows redistribution of the source is this - http://www.binpress.com/license/read/id/1567/app/859

The one you linked to only allows binary distribution. This is how those projects support themselves, by offering tiers of pricing depending on the user needs. We just require that at least one of the licenses allows redistribution of the source. So I'm understanding that by your world-view, Open-Core projects are not open-source? or that open-source can only be used if sanctioned by the OSI? I'm afraid that no one has monopoly on that term. It means different things to different people. We call our products "Commercial open-source", which you can find the usage of which on the web and wikipedia as well. Most projects on GitHub do not have a license, which means they are copyrighted by default. We vet licensing for each project on our site, to make sure there are no copyright or licensing breaches, and provide a range of licensing options to fit the developer POV. Not sure where all the hate is coming from.
test.org/redirect?url=http://test2.com

vs

{'test2':'http://test2.com'}
on server +
test.org/redirect?url=test2
Can't the NSA just monitor the whole network to detect anyone else using an exploit? So once they discover one, just use it to their heart's content until they start seeing it in the wild. At that point, disclose it.
Scientists Report Teleportation of Physical Objects From One Location To Another
Deleting then resubmitting articles is a bannable offense on HN.
Actually the sanitizers where added to LLVM by Google who also added them to GCC as they are actively working on both compiler toolchains.
I doubt the NSA's image problem is that large. I suspect many NSA recruits fall more toward the "black hat" end of the spectrum. They break into things without thinking about the consequences of their actions.

The NSA can likely get all the recruits it needs by just offering the chance to hack with legal immunity.
I'll keep that in mind, Brian, although my reading list is long, and not getting any shorter.
You can tell the manager why you aren't coming back.
This is exactly what happened with the first era of URL shorteners, and has the detrimental effect of scattering dead links around the web when your service closes. (termed link rot)

ArchiveTeam has a project scraping URL shorterners to attempt to archive exactly these things. Their tagline is "url shortening was a fucking awful idea".

http://archiveteam.org/index.php?title=URLTeam

My takeaway from this is that having a whitelist is fine, but keep the original URL visible so that if your service isn't available the original content is still visible (although potentially requiring manual user effort) is a good thing.
And we would all like to thank you for your continued " I have opinion x and don't change it when confronted with new information" contribution of showing issues with the programmer and instead of the language.
Man - that problem 3 was a pain. I couldn't get it to work until the last minute.

Anyone solve the small case for problem 2, but get the large case incorrect? Can't fathom what the issue might be.
I'm wondering how come no one is talking about the elephant in the room. Google Services! No one really cares about Android's "open"-ness anyone, because without Goog services a smartphone is virtually nothing -- you need maps, youtube and gmail at the very least. AMZN has a plan for that?
Does it matter? Once you know they might have, you have to assume they did. That's why the Cloudflare challenge was watched so closely.
Viewing the page in IE11 gives a text-only version that - unfortunately - appears to be outdated and incomplete.
If I took a version of DTrace and removed about 95% of it's functionality, you'd have what sysdig currently does. It'd be a lot easier to learn, because there wouldn't be much to learn.

The sysdig command line style is promising, and it's exciting to see innovation in this space, but what's there right now is still give and take. Try writing a DTrace aggregation and a sysdig chisel side by side, to see what I mean. In many common cases sysdig is much more laborious to use right now.

More functionality can be added to sysdig (aggregations -- or chisel functions, thread local variables, tracepoints, kprobes, uprobes, PMCs, register inspection, kernel stacks, user stacks, user stack helpers, kernel filters and aggregations), allowing it to catch up to what DTrace can do, and solve the problems it can solve.

But I think comparing sysdig to DTrace is either wrong or premature. If sysdig isn't going to do those features I mentioned, then it's a different type of tool (nothing wrong with that), but it is misleading and unfair on itself to compare it to DTrace. If it is going to do those features -- and it just hasn't yet -- then why compare it to DTrace now? sysdig will be giving people a poor first impression, and again, it's unfair on itself.
Not really; the desert temperature differential isn't really relevant afaik; it's just to drive the air down below the dew point to generate droplets. If there's already a high ambient moisture content in the air, I can't see why it wouldn't work. This is a just a structure to collect droplets, and there are plenty of those in the jungle.
> Support TACK!

Yep.
There's the (relatively) micro-scale issue of individual apps being rejected, and the macro-scale issue of Apple utilizing open source projects and putting their methods in their list of private, disallowed method names. This seems like the exact sort of macro-scale issue for which Apple maintains mailing lists viewed by actual engineers.

I just don't see how publicly attacking Apple over this is going to lead to any sort of positive situation, especially for the author and his relationship with people at Apple. Mogenerator is super-useful, but if it's going to be the centerpiece of some sort of political statement regarding Apple's policies, developers such as myself are going to have to look elsewhere to get their work done.

--

EDIT: I'm sure you already know about these mailing lists...? https://lists.apple.com/mailman/listinfo ... The fact that you guys want to publicly attack Apple over this, while staking your entire careers on developing for Apple's platforms, is insanity. A course on politics is in order.
The last fraction of 1KiB on each head, on each cylinder. In a 1TB disk, that's nothing, in a 100MB disk, that adds fast.
I prefer something with a more house/techno/trance vibe. One of my favorite artists to listen to lately is Overwerk. I feel like this electronic synths make me feel one with the cyber world :P
The main point, that more eyeballs doesn't necessarily lead to more bugs found and fixed, is a good one. Reading code, or text, specifically with the intent of finding errors is very hard, and is itself an error-prone activity. Anyone who has had to do close proof-reading knows this. It's hard work, so our brains are constantly fighting us and trying to "relax" back to a higher level of abstraction. That's one of the reasons I read the Coverity post with some interest. We humans are hopelessly ill-suited for these tasks, and we need all the help we can get.
If you check the bottom of the page, you'll see they've set up a production-ready CDN via MaxCDN: http://rawgit.com/#cdn
The link to the PDF you're talking about on that article appears to be busted. :(
That I can remember, yep, PyQT and PySide, and Psycopg. Psycopg is not a problem on Linux, only Windows.
Links to three of his social profiles are next to his post if you care to learn more about him.

I guess if my opinions don't apply he could choose to ignore them. But if they do apply, maybe it'll help him. I consider that worth it.
That's good, and I didn't notice.
He's trying to fuck you over. Remind him that he works for you, not the other way around. Start looking for his replacement. Check with a lawyer about the security of your own stake and make sure you are good with the business guy, because the CTO has probably been whispering poison in his ear about you.
I assume outsourcing is done to save money. The amount it would cost to have each developer get their answer would be interesting to me, and would remove the perceived racist element too.
How to detect the software your visitors have installed
> So it's not that you think the article isn't very good but instead it just isn't? Bold statements like this need an explanation...

First off, everything I say is "according to my opinion". That is implied and I don't have to explicitly state it on every sentence I write (especially on sentences that already sound like opinions).

Second, it's really not a bold statement. Read the other comments here—quite a lot of them are critical and the top rated ones all have excellent points. Given that, claiming the article isn't very good isn't much of a stretch. You want reasons? Read the rest of the %$#@! comments.

Now, my comment may have been on the pithy side, but I found it particularly funny that the guy was commenting about how he agreed with the article, complaining that when he expresses the same sentiment on HN he gets downvoted, but nearly every other comment on the story was attacking its shallow understanding of Free Software/Open Source, cryptographic library programmers, and virtually every other point it tried to make. IE, he appears to have same misguided opinions as the article's author, but not the self awareness to enlighten himself.
This is BS; the bug was found by people analyzing the open-source code because anyone can do so. Also, criticizing the developer because he's a PhD student makes zero sense; the two best developers I've known were a student and a 13-year-old.

I also love how the author puts a thinly-veiled plug of his slimy "open-source" code-selling website in the middle. As benatkin said in his excellent comment [0], all four of their featured products are closed-source. The OSI should sue them for violation of their trademark of the term "open source".

[0] https://news.ycombinator.com/item?id=7579700
I hope as a cofounder you signed contracts and have equity.
grooveshark broadcasts are the bee's knees
Ruffle – Send an Anonymous Picture Message to Any Friend's Phone Number
Even if he has contacts at Apple who can resolve the situation for him, according to his tweet (linked at the bottom of the article) he lost an entire afternoon addressing it. I imagine he's really annoyed.
You can diff your output against someone else's to see if you can find a discrepancy, then debug it from there.
Snowden doesn't seem like a blackhat. Certainly looks can be deceiving, but it's hard to believe they'd be so shortsighted as to hire mostly people who are in it for the thrill of doing usually-illegal things.
In any other field, I would agree with that assessment. In the world of crypto, with side-channel attacks on the sound of your keyboard as you type, I think that having domain knowledge is essential for any implementer.
Based on the file name at least, this looks like it: http://www.inf.ethz.ch/personal/wirth/Oberon/Oberon07.Report...
I have a suspicion that they have solved thousands upon thousands of these problems, developing a library of sorts. They can probably translate these problems into ones they have solutions for and just work from there.

Maybe that's jealousy talking, though.
Don't use it for production they say, then you look at the sites on http://rawgit.com/stats.html and facepalm.
It feels like shoddy work by Apple engineers, actually. Seriously, making use of an open source library and breaking it (indirectly) for everyone else in the process?
> (Not that most academics write good code either, but this is not an academia/industry issue. It is a security expert/non-expert issue.)

Security experts write bad code. Non-security experts write bad code. Code, by default, should be assumed to be bad -- you're right far more often than you are wrong. That's why stringent review and re-review of code (both at the micro and macro level) are required to actually end up with a decently secure product.

I'm a huge fan of setting up adversarial teams for this. If you have two product teams in a company, have each team breaking the other's product; the closer you are to something, the less likely you are to see the bugs, so this model works phenomenally.

In my experience, security training (even up to the level of expert) helps people write better code only in terms of the most low-hanging fruit (SQLi, CSRF, basic XSS). But due to how close the author is to the code, it's nigh impossible for them to see the really bad bugs. But if you train your developers to break things and then point them at other teams' products, you're going to end up with a far more secure company.
Apologies. Didn't know that.. I felt that https://news.ycombinator.com/item?id=7578670 was doing well, but triggered flamewar trigger (false-positive), because of 2 innocent comments :(

I'll take it off now.. don't mean to offend
Being newsworthy was never as important as today
What is your retention policy on uploaded photos? Do you keep them forever?
"EDIT: He's not asking me to leave now, since I'm still desperately needed, but in 3-6 months time after we have raised more funding."

Means they do actually need you, the CTO is waiting for a payday before kicking you out for a higher stake. Tell the CTO to go stick it if they need you before funding but not after.
Oddly, I felt the same.
Which engineers maintain the private API scanner? What mailing list do they hang out on?

I've been in the community a long time and I have no idea about either one. They are effectively anonymous and uncontactable as far as I know.

Publicly attacking Apple is actually the only way I know to actually start the conversation. If you know a better way then I would sincerely like to hear it, but you need to provide specifics, not just assumptions that it must be possible.

Response to your edit: give me specifics. Yes, I know about those mailing lists. They are useless for this. None of those host anyone who has anything to do with App Store review. Give me an exact email address or a contact form or a phone number or something that you know actually goes to the right people here, or admit that you don't know how. Insisting that it must be possible without saying how when others with more experience are saying that it is not is just embarrassing.
Heartbleed shows Open Source Needs Further Support
> How was this bug found again? Oh yeah. By analyzing the _open_ source code.

It was found by fuzzing. OpenSSL being open has absolutely nothing to do with its security, in a positive or negative way. It's just a poor project.
I don't think this had to be a failure. A huge part of the job of building a success is being willing to change what you're doing based on the results that you're getting.

The one thing that I think is missing from "what we could have done better" is this:

Be willing to CHANGE your ideas, big time.

You had people signing up. They wanted something. Instead of sticking with your first idea (video), why not try a bunch of stuff until something worked.

You have to be creative, flexible, and determined in order to make this type of business work. You had SUCCESS with many of the tests -- don't throw those successes away just because one test failed.

People didn't want video. Give them something else. Does it really matter what it is? Does it even have to be charades? Be willing to CHANGE on the spot in a BIG way.

Think about this:

1. People sign up and say "yes, I want to play charades".

2. They land on a page tht asks them to play charades. How the heck can you immediately engage them? By asking them to turn on video? Or...???

If you're giving up because people don't want to turn on video -- then you may as well not try. Think about this: If I want to have "online boxing", should I give up if people don't literally punch themselves in the face, in order to simulate real punches? Sure, it sounds silly, but it's not that different than asking people to turn on video. Online video can literally be harmful to people, especially when it involves strangers, and even when it involves friends and acquaintances. People don't want video charades. That doesn't mean they don't want charades.

Don't get stuck on the wrong thing!
Yeah, for some reason it is culturally unacceptable in our society to claim that fiction literature is unimportant.

We live in a society where it's fine to make shocking arguments about just about anything, but if anyone were to dare argue "What Dostoyevsky and Shakespeare had to say is pretty irrelevant and uninteresting at this point" they are a social pariah.
Oops. Thanks for catching that. My draft had been sitting around too long - the URL used to work.. (fixed)
Show HN: I built a 3D rotatable iframe pane demo with Famo.us
You could make that argument, but I will join with mehrdada in disagreeing with it.

It's possible that more vulnerabilities are caused by programming errors than by protocol misimplementation, but the latter do happen and are just as bad.
Atari's Five Million E.T. Pieces
Do you think the same people / organization that worked on the code administered the systems the resulting binary ran on? I highly doubt it.
Senior Twitter Engineer and LGBT leader, Dana McCallum Charged with Rape