skysight-inc/HackerNews huggingface dataset:
I'm not sure how much those macros affect anything here. For one thing, most static analyzers are actually very good at cutting through that kind of crap, running its analyses on code that has already been pre-processed using exactly the same command-line flags as the real compiler saw.

Even if that weren't the case, I think this particular bug would still qualify as low-hanging fruit. It doesn't involve a lot of macros. It doesn't involve dynamically assigned function pointers. It's not limited to one execution through multiple iterations of a complex loop. I'm painfully familiar with the constructs that can defeat static analysis, and none of them seem present in this case. The code allocates a buffer of size N, then reads from an offset that's not checked to be less than N. That's kind of Static Analysis 101.

My biggest worry here, TBH, is that static analysis was done, and this was flagged, but it was buried among so many other reports - many of them false negatives - that nobody paid any attention. That would be truly sad.
" none of those are a factor to the class you are accusing him of oppressing. Unless you actually think it would be different if he only discriminated against gay, rich, white males?"

You seem completely allergic to even attempting to get it. How about instead of twisting my words to suit your argument you simply read what I said and realize that my point is only "be aware of your position of privilege and, at the very least, try not to take away the civil rights of less privileged groups while doing so." If this is offensive to you than I refuse to acknowledge that you are a rational person.
dropbox is not a good product, and will never be. so I'm not concerned. tech unsavvy people use those kinds of products, and that's how you spy on so many people.

I'm not surprised, and I don't care, because most people don't really care to understand the implications of technology and the implications it can have, and that's exactly how you rule over uneducated smartphone and computer users.
If you're "going to feel really bad" if you're wrong, why don't you go look it up and make sure before commenting?
He admitted it himself. In Greenspan's book, he mentions how he regretted urging Bush to do it.
> Every ranking official of any country (or company) owns a big share of that country's sins and there are no "clean" administrations.

This sounds a lot like apogolism. These war crimes are VERY far removed from the standards of contemporary western civilized countries.

Obama administration continuing many of the evil policies doesn't make it any more acceptable, taking this as "the new normal" would be apathy bordering on nihilism.

From a broader POV, this line of reasoning exemplifies the syndrome "perfect is the enemy of good" (also known as the Nirvana fallacy, https://en.wikipedia.org/wiki/Nirvana_fallacy).
Browser support. We've got major internet sites on board waiting to deploy it, but despite some early indications of support, the browsers have not been forthcoming. We even tried writing the code for them, but to little avail.

My sense is that Google is all-in on Certificate Transparency right now, and doesn't want anything to distract from that. However, I think a successful CT deployment is a long time coming still, and TACK could have been out two years ago. My sense is that Mozilla is just understaffed and/or waiting to follow Google's lead in this area.

Ultimately, this is the frustrating thing about trying to improve the state of secure communication today. Most of the levers are in the hands of the browser vendors, which makes it difficult for those of us on the outside to help iterate things forward.
... And wasn't the Debian bug caused by someone running a tool against the code and trusting the tool?
Node 0.8.x and 0.10.2+ Not Vulnerable to Heartbleed Issue
Every link on the Mozilla thing was demoted. What the mod said about doing it seemed very reasonable, but I can't recall the details at the moment.
What led me to believe this is Pike's article about the design goals of Go. I don't know enough about Go to know how well it succeeds, but I know what the intent was.
"Trade Unions representing workers in the technical and digital sectors have won a legally-binding agreement prohibiting employees from contacting staff after work."

http://www.dailymail.co.uk/news/article-2601526/Turn-BlackBe...

I guess those who would prefer the Daily Mail not to exist in its present form will enjoy rebutting this 'alleged news'.
I'm stuck on the teleporters one as well. Can we please have another hint?
Airbnb Group Trip (a proposal)
This is one thing that bugs me a lot about how centralised Github becomes: if you want any changes, you have to resort to begging with blog posts.
Why it is not a good option to boycott them? I'd say this is a great option to putting pressure on a corporation.
> So is it security the customer is paying for? [...] The only way to get a useful amount of data is to pay at least $40 a year.

Security is one of my top concerns, which is why I don't need much storage at FastMail. My email is deleted from FastMail's servers in less than 180 days after receipt because the USG considers email over 180 days old to be abandoned and will access such email without a warrant.

http://en.wikipedia.org/wiki/Electronic_Communications_Priva...
For the data entry jobs as a contract employee, I think it is actually the correct word. Outsourcing doesn't need to be on-shore, or even remote. IBM outsources its secretaries and maintenance who work in the same building as employees. This company wanted to outsource data entry and customer service.

If they are actually hiring the people (as it seems the author of the post had happen to him eventually), then it isn't outsourcing anymore.
Short version - build something that you want to build. Something that makes your live easier, or helps people you know. Platform and language aren't as important as taking a project to completion.

If you have any aptitude for this business at all, you ought to be able to pick up any language and API in a couple of weeks work, once you know your stuff. What's hard is having the discipline to get through the sloggy parts - fixing tricky bugs, adding features to your thing until it's actually useful. That's why it's best to start on building something that you can personally use. You'll have the motivation to finish that's hard to keep when you're learning something you have no use for.

If your current career involves doing anything on a computer that can be repetitive, start by automating that. Build a website or an app that does something you need. Keep working - keep adding features to whatever you build, as long as it makes sense.

If I'm doing the interview, I'd much rather hear about how you solved a real-world problem with your skills than how you spent X years learning Ruby or Java or Objective-C.
We picked MongoDB a while ago because of its built in geospatial indexing support. Would be happy to add support of other databases. Any strong candidates on top of your head?
That's true, and I think jakestl understands that. But it's received with a tone of "look, what a surprise, those Midwestern folks are worth something," which definitely isn't a great way to make someone feel.
I have to clarify that I should have said ‘enough’ :) And ‘ethical’ could be not the most accurate term for this but here’s my take on this. In the scientific world there’s so much closed software, so much closeness. A real revolution (and I’m sure you’re pushing it too as much as Substance) should be in the open world, as a whole. I do understand that monetization must happen somewhere, but I’m scared to see such a revolution happen on a closed platform.

Disclaimer #1: I had the chance to work with the Substance guys but I’m not affiliated with them anymore.

Disclaimer #2: Diamine, non avevo notato che fossi italiano. Damn, I didn’t notice that you are italian. Such a pleasure.
Do you think CocoonJS is better than Famo.us?
On Education Innovation
I don't feel this site goes far enough. As someone who values privacy, I feel I've already been slighted with this decision, and I don't plan on forgiving Dropbox for it if they change their mind. I'm cancelling my paid subscription this weekend.
and she's a dropbox board member!
From the Hacker School manual in which these rules are spelled out.

> The goal isn't to burden Hacker School with a bunch of annoying rules, or to give us a stick to bludgeon people with for "being bad." Rather, these rules are designed to help all of us build a pleasant, productive, and fearless community.

To build a positive environment, it sometimes helps to have a list of specific toxic behaviors that should be avoided.
If there's verifiable facts that prove Rice has acted in an unethical way in her job, then it would be a bad decision to give her more power and responsibility. If, on the other hand, it's found only that she made decisions in good faith based on the information given to her, you can't really fault her in terms of her occupational duties.

But there's a separate question to that, which is the moral ethics of a person who would do things (even in good faith) that they know will result in hurting others. Will Rice make decisions at Dropbox that she knows will hurt people, even if it's the right "business" decision?

With regard to the warrantless wiretaps, it's clear that if there was an actual terrorist that she was trying to put in jail, a warrantless wiretap may help accomplish that goal. She would in effect be acting in good faith while trying to accomplish the goals of her job. But at the same time, she's violating someone's privacy and potentially violating the law. If a similar situation came up at Dropbox, where violating someone's privacy could help the business, would you still want that person employed?
I'm not even going to ask you guys to stop with the angry villager thing. Almost a thousand of you upvoted it, you must be enjoying yourselves.

But I will ask that you take this off HN. All kinds of people in the world. They do all kinds of things and hold all kinds of opinions. I don't want to visit HN each morning and find the top item is the result of the latest googling and angry mob. Go get a room or something. It's not only that it's not interesting, it's actively non-productive. Every minute you spend with this is a minute you could be doing something better with your life -- the current person of outrage has nothing to do with anything. Trust me, there'll be a new one next week.

Just get a room. Take it somewhere else. Please.
I don't feel this way about drinking, but I think I can nevertheless commiserate with you because I do feel this way about another pastime/group activity that seems to be becoming distressingly common in the tech circles that I find myself in: Board Game Night.

No, I don't want to play monopoly, because my strategy for monopoly can be expressed in two or three lines of pseudocode and it is therefore an incredibly dull game. And if I have to sit through another hour long lecture about a game like Catan that is prefaced with "It's actually really simple; here, let me explain how it works...", I am going to put a power drill through my skull. Don't even talk to me about Magick or pokemans.

Do you know what I do when somebody proposes a board game night? I wish them a good time, politely excuse myself, and find something else to do. Not everyone likes everything, and I should not expect others around me to abstain from activities that I do not enjoy.
How else would you want it to be ?
Thanks for the excellent comment.

Your first point is very well taken - we also urge caution in drawing too many conclusions regarding an overall trend in mean temperatures. However, I think our conclusion - that we are having more hot outlier days now than ever before - is interesting in and of itself.

Your second point is an interesting one, and I too would be curious to look further into the correlation between proximity to a city and temperature. However, to look for outliers, we created a long-running distribution of seasonal temperatures for each station individually - so in some sense the map is already corrected for this effect. Each anomaly you see is an anomaly for that station alone - meaning if an urban station regularly gets higher temperatures than a rural one, it will take a proportionally higher temperature to trigger an anomaly on the former than on the latter.

Furthermore, NOAA has been good about getting good national distribution of these stations so it's less of a concern than you might think.

That said, urban stations may still show artifacts compared to rural ones, eg. when there is an extreme warm outlier, cities may be more likely to have another warm outlier the following day due to the heat storage effect you mention. I'm not sure.
Agreed in general, but it is possible to enable this style of constraint propagation by being restrictive about what kind of contraints you can write. In particular, the "LIQUID" family of languanges that have been developed at UCSD allows properties which are conjunctions of LInear IneQUlites, and can infer them automatically. The programmer would annotate one declaration of a variable with a constraint like (0 <= x < 10), and the system tries to infer suitable constraints for all other variables (calling out to an SMT solver, and using invariant inference techniques from the program analysis community).

Their latest research language is "Liquid Haskell", I think it could deal with jarrett's example out of the box (with the caveat that yes, you still need to write the test explicitly). They used to have an online demo where you could just type programs into a web form, but that doesn't seem to work right now...
I answered on @apepe. Mostly it’s about the openness of the product. The formats are open, but how you interact with them is not.
Fanout.io Emerges From Private Beta, Provides Real-Time Push CDN
Stephen Colbert on the Late Show
It doesn't get any clearer than that...
>"So don't go fucking blaming the victims here."

Are you trying to imply that you are a victim, just because you naively believed that investing a great deal of power in another politician, who you thought was 'your man in Washington' would lead to better results? It is hard to be sympathetic to someone who pursued such poorly thought-out objectives. It is not the political system that was at fault; in fact, if anyone is to blame, it is all the conceited individuals who believed that the politician they picked would be 'better' than the 'opponents'.
This is really cool. I would love to see this mature a bit more.
I have to disagree with this. Look at the civil rights movement. When a minority is affected, we will rise up to change the status quo.
Eich's stance was (and is) personal, and I'm pretty sure it would have stayed that way

I think that political contributions are (and should be) fundamentally public acts. You can think all the reprehensible things you want, but once you start materially supporting reprehensible campaigns, it's a different thing altogether.
In the Brendan Eich case (and yes, I know that's not the same as Ms. Rice) his only objectionable actions were to contribute a small amount to a political campaign and to not publicly repudiate that donation. That case was 100% about political beliefs.

In the case of Condoleezza Rice, there are plenty of actions to object to including undermining human rights and helping to wage wars. By all means, prosecute Ms. Rice for violations of human rights and then ban her from the board as a convicted felon. I wouldn't even mind an outcry against her participation on Dropbox's board because of her stance on government surveillance of data storage companies. But to me, an outcry against her for war crimes smells of overdone politics.

That being said... I don't mind any person choosing to boycott a company for any reason they choose (including association with Ms. Rice). What I object to is a hue and cry that effectively blacklists her (and others) for their political beliefs.
Did you know that the largest number with a name is Googolplexian?
This is an overt support of someone that is highly controversial. The aftermath of the Iraq war isn't going way because the US isn't involved as much anymore. There is already a sense that accountability hasn't really been high with the Iraq war. Oops, we made a mistake doesn't cut it too much. With this appointment, it further amplifies the sentiment that there is absolutely no real accountability. I would say this is why a lot of people would feel strongly about this.
Dropbox's Next Chapter: Corporate Customers, IPO, Condi Rice, and Eddie Vedder
I approve this message, as I am a web software developer in the midwest. I'm also involved in a great startup focused community here, http://digitalfertilizer.org/ with a network of high quality developers and designers, many of whom are full-time employed by startups all across the country.

I'm also on the market for remote work. Same username on Twitter.
piacere mio!
We can fix it together too if you prefer. Any suggestions on database choice? We are open to discussions and feedback.
>But I think every well educated hacker / software developer should know about nomads.

Your typo? makes it easy for anyone reading this to put themselves into the shoes of a person not knowing something that they think they are supposed to know.
That's exactly right. A friend of mine in St. Louis is currently negotiating $14/sq.ft. down to, ideally, $12. Last I heard from my CxO friend in California, he was excited to find $30.

To me, it's shocking that anyone would start a business out there. (Okay, not really... there is a lot of money out there and it flows much more freely. But I couldn't personally justify spending my cash on 2.5x more expensive real estate!)
To me that makes it clear that a minimum size of over 20M is a serious problem.

How crazy would it be if the Twitter app was over 50M, or Facebook Messenger over 80M?
Saddam didn't let the UN inspectors look everywhere they wanted to, so that wasn't conclusive (in retrospect, this was an incredibly stupid thing for Saddam to do... maybe he wanted to bluff that maybe he did have WMDs to make himself appear more powerful than he actually was, not thinking that the US would actually invade?).

IIRC Powell's "evidence" (and some other evidence too) came from Curveball, not from the UK. It was very shaky evidence, but it wasn't known to be completely false. And even if it was, there was still the hope that Saddam had some kind of WMDs that we didn't know about.

I'm veering off into speculation now, but I think their thought process was... We gave him WMDs in the 80s and he used them in the 80s. What were the odds he really got rid of them all and hasn't tried to acquire more? I think everyone in the Bush administration just assumed that to be the case, so they weren't worried that the actual intelligence was incredibly suspect and possibly even fabricated. They already "knew" Saddam was guilty, they just needed to get the authority to take him out, and then they would be greeted as liberators and find copious evidence of all of Saddam's WMDs and evil deeds.
I am not sure. If it is part of contract, it may require signing new contract by employee.
Lessons Learned Building a SaaS App for Stripe Users
A big difference is that Eich is a well-respected contributor to his organization who independently has an unpopular political viewpoint, and his actions only became notable in the context of Mozilla. Whereas Rice is known generally for her actions, has not been involved in creating Dropbox, and was most likely hired precisely for the skills that people despise.

But I also think this backlash comes from people being reminded about the fundamental reality of Dropbox. It's always been a centralized technology with a controller that's free to do whatever it pleases with your data, either for their own gain or simply out of expediency - any sane hacker should have been recommending avoiding Dropbox and its ilk this whole time. Appointing someone who's directly associated with facilitating and justifying hostile acts reminds everyone of this inconvenient truth, which makes those in denial uncomfortable.
This thought literally just occurred to me yesterday when I was looking at the famo.us repo.

what would be cool would be if each one could create their own views/rankings of anyone's public repo.
Seems to be down; here's a mirror:

https://web.archive.org/web/20070712113441/http://www-cs-fac...
I just deleted my Dropbox account.

Dropbox provides a space to explain why you're leaving. I said Rice's actions resulted in the unnecessary death and injury of many thousands of innocent people, and I will not entrust my data or my money to a company with such a person on the board.

I'm sure my small action won't make any difference, but maybe by making this visible we achieve collectively what we can't achieve individually.
Pearl Jam's Dropbox hypocrisy
I think it's really great how you're grappling with an internal political inconsistency. Most people (of all political stripes) aren't intellectually honest enough to do that.
Or you can also have a website where you do that
Riak is a good call. A SQL db would be nice too.
The extent of black-listing is quite remarkable; especially for a group of people so emphatic in describing themselves as 'tolerant'.
Show HN: I got fed-up of billing $200 and collecting $8 of that at the tax store
LiveWire is a modern tax preparation service that video conferences you with a tax code expert that will prepare your taxes for you – so you can get back to doing what you’re great at.
when you can do individualized filters that'd be nice. I mean if the underlying data/format isn't touched, but you you can tweek how you consume stuff, that'd be nice.
All this time I thought the line item reading "roll my own dropbox clone with a raspberry pi or something" on my Someday Maybe Projects list might always stay buried low on the stank rank.

Then this news broke. My personal digital exodus has commenced. Best not to wait until she conveys the authorization of Dropbox's administration to submit user data and activity in a privacy-flouting fashion.

"The president instructed us that nothing we would do would be outside of our obligations, legal obligations, under the Convention Against Torture," she replied. "So that's -- and by the way, I didn't authorize anything. I conveyed the authorization of the administration to the agency . . .By definition, if it was authorized by the president, it did not violate our obligations under the Conventions Against Torture." - http://www.huffingtonpost.com/phil-trounstine/stanford-anti-...
Snowden to EU: No legal means challenge mass surveillance [video]
I've been thinking a lot about agent-oriented programming. I had a General Magic device back in the day and later thought the concept of a Telescript like language as applied more for code organization than code mobility might be interesting. I guess APIs won, but I still think there is something there.
Do you have access to the Famo.us university?
I did not think a random-thing-generator could possibly make me laugh again, but for me `git-shoot-subtree` was the undeniable breaking point.
This is the first step towards a more secure internet, but that won't solve anything.

I think countries need to build up independent, public groups of computer experts who can actively work at approving softwares and security protocols and infrastructures. Something like the FDA for internet security. Don't know if it's impossible or not, but there isn't anything official about internet security in the world yet, apart from universities and the AES algorithm.
The Last Psychiatrist is something of a performance artist. I find a lot of his (or her?) writing hilarious and insightful.

This particular article even self-consciously responds to your criticism:

"You know, you could use an editor." You could use some free association, it may help you see unconscious connections which drive your life.