skysight-inc/HackerNews huggingface dataset:
Agreed. Simple code is easy to understand and just as easy to find any bugs in. After looking at the heartbeat spec and the code, I can already see a simplification that, had it been written this way, would've likely avoided introducing this bug. Instead of allocating memory of a new length, how about just validating the existing message fields as per the spec:

> The total length of a HeartbeatMessage MUST NOT exceed 2^14 or max_fragment_length when negotiated as defined in [RFC6066].

> The padding_length MUST be at least 16.

> The sender of a HeartbeatMessage MUST use a random padding of at least 16 bytes.

> If the payload_length of a received HeartbeatMessage is too large, the received HeartbeatMessage MUST be discarded silently.

Then if it's all good, modify the buffer to change its type to heartbeat_response, fill the padding with new random bytes, and send this response. No need to copy the payload (which is where the bug was), no need to allocate more memory.

(Now I'm sure someone will try to find a flaw in this approach...)
I think this is the price we pay for hewing to the party line of only permitting non-breaking incremental changes on the Web.

Would this still be the case if Web development wasn't a broken matrix of browser and OS versions powered by a language which people are constantly trying to paper over with abstractions? (Seriously, it's like a person you'd only have sex with as long as you'd put a paper bag over their head.)
Yes, that figure is about right for the few finance technology films.
Seems like it was bought in the UK, from Amazon.co.uk, so what relevance would Norway have? They're not even in the EU.

(If I import some random device from China, I don't complain to the FTC when it doesn't work.)
Here it is: http://www.listbox.com/member/archive/247/2013/06/sort/time_...
Based on my experience, I would say that is pretty accurate.
prepositions are hard :D
University of Florida would work well for you under those circumstances. You can get the practical side by working on your own GitHub projects--I know young people who have been there and done that.
just got an error while trying to sign up for a monthly donation
A C# Class in Roslyn with 20 type parameters and 19 constraints
Uber and Lyft are fighting to starve each other off it seems.
Here's an article about the PS4 and XB1's power consumption. Looks like the XB1 draws 18W on connected standby.

http://www.extremetech.com/gaming/173127-ps4-xbox-one-power-...
Latvia, Lithuania Ban Russian State TV Broadcasts
Your browser can cache a web app to be used offline. Plenty of Chrome apps are packaged this way. Firefox also has an option to do this, and Firefox OS can work without an internet connection. An HTML5 app is just source code obtained from a website that's run through a VM, and may or may not connect to a back-end (usually does though).

The problem isn't the web, it's how many web developers choose to use it. If you want to really know how powerful the web is, check out many of the WebGL demos and game demos out there...
I strongly disagree! Text to speech needs the same data as speech to text - a well annotated collection of raw, single speaker speech data from a variety of speakers and accompanying text labels.

It is very, very difficult to find a large, well curated dataset of speech with accompanying text labels. TIMIT is the gold standard of speech recognition despite its simplicity, and it costs ~$150(!) to get access at all. Switchboard is another famous one which is bigger, but only partially labeled and still very hard to get. CMU has an openly available, small dataset called AN4, but it is only 64MB of raw recordings (a lot for 1991 when it was recorded, but still small today).

You could use YouTube and their automated translations, but the text is shoddy at best and definitely too unreliable to feed to an algorithm without significant cleansing.

Honestly, U.S. Congressional speeches may be the best "open" option IMO - good transcriptions, a variety of speakers, and TONS of data. If you could sync up the transcriptions with recordings of C-SPAN it could work very well, though I have not seen a dataset that puts this together. This still only covers English!

Companies understand that data is valuable - that is why they take the rights to it in every EULA! Well curated internal datasets will be the KFC/Coke secret recipes of the "big data" age.
Are there any programs that offer tuition for a percentage of future earnings? Would any investor want to pay for my college for a large stake in my first startup?

No and no.

I sympathize enormously with your predicament here, but your best option is primarily going to be loans. You can also spend the next several months aggressively essay-writing for hundreds of $500 to $2k a pop scholarships given out by numerous private organizations in the US. I did it like a pretty serious part-time job and shaved about $13k off the cost of college.

If the $100k+ in marginal indebtedness gives you pause, consider strongly whether the marginal increase in your employability is different with the degrees. My guess: not that much.
I love forums and hate mailing lists. There just isn't enough functionality in mailing lists, and I end up feeling spammed.

Also, Reddit and HN are basically forums.
socket is powerful but it's not stable/supported by all browsers. maybe in the near future, I'll switch to socket. Thanks.
> how people made games

In my experience this is the common question amongst everybody (myself included) that started programming young. Some adult somewhere (how sad that I don't remember) took me seriously enough and gave me some books so I started writing in C, BASIC, and assembly and I was too stupid to realise that it was supposed to be too hard for a 9 year old.

Today (as in literally this moment in time) I am still writing C for games.
Download Datezr and find ideas for exciting and new date activities in your area
i often get the feeling that uber is positioning itself to strike gold with business billing. uber should build a feature that enables companies by allowing employees to expense there uber rides and 'rush' deliveries.

There is alot of business in this space and they will get the app into high level employees phones

It would be the akin to a corporate 'amex' ... bill the company 'uber'
I didn't read the original study, but based on your quotes it seems like you could append (p>0.95) to any of those headlines and have a meaningful statement which is supported by the data.
those linked tests are extremely disingenuous, it only shows the fixed cost of FFIs.

Considering that in C the plusone call is 4 or so cycles, and the Java example is 5 times slower, that's only 20 or so cycles. If the function we're FFIing into is 400 cycles, that's only a 1% decrease in speed. I'm willing to pay that price if it means not having to wake up to everything being vulnerable every couple of months.
Yikes, sorry to hear that. What was the error message? Feel free to email me - grace at watsi dot org - and we'll sort it out.

Thanks for wanting to sign up!
Gmail is faster than any native email client I have ever used.
I think I have more apps on my phone than I ever visited sites with it.

If I want to navigate on the web, I'll use a desktop. Only if I can't, and in that order, I'll try a laptop, tablet, or phone. The interface gets worse the more portable the device is, and at the phone extreme my usage is quite restricted to small apps, with few, to-the-point functionality or simple games.
Ah okay, interesting, thanks for the link. So it's basically a maximally powerful non-Turing-complete language. I would argue that the section in our v2 whitepaper on non-Turing-complete languages still covers the fallacy behind that: you can still have exponential blowup, so you still need a concept of maximum steps, but then once you have a concept of maximum steps there's little benefit to restricting the programming language.
This is not so; we rely on authorities because we can't judge everything ourselves. If you show me some new evidence on the role of free protons in the aging process or whatever, it's not a mistake for me to say "I'll ignore that until such time as <someone I trust> addresses it". I might be wrong as to reality, but I can't avoid using that exact strategy in almost all of my life.
If you put in laws that say owners can not profit from their buildings, but their renters can, then you will have chronic underinvestment in housing infrastructure as a consequence. You wind up feeding the problem you are trying to solve. This has happened in both San Francisco and New York City.

I'm not saying cities should be an unzoned and unplanned free-for-all, but good intentions at the expense of capital have unintended consequences.
The latter, and AFAIK the buffer doesn't get reallocated on every connection, so it should be unlikely that any private keys actually get dumped. However, I could be missing a way to exploit it.
First, I do realize that rewriting the software stack from the ground up to have only managed code is a huge task. I do think that as an industry, we should set a goal of having at least one server implementation along these lines (where 'set a goal' may mean, say, grants or calls for proposals). Microsoft Research implemented an experimental OS like that, although it probably didn't have all the features a modern OS would need. I don't know if we need a new language, but we do need a huge rethink of the server architecture, and not just a piece-by-piece rewrite, which I think will founder on the interface issues that you mentioned.

Anyway, I am quite realistic about the prospect of my comment having that kind of effect on the industry - I don't suffer from delusions of grandeur. I was aiming the comment more at people who choose C/C++ for no good reason to write a user-level app; that app is nearly certain to have memory use errors, and if it has any network or remote interface, chances are they can be easily exploited. I'd like as many people as possible to understand that they can't expect to avoid such errors, any more than one of the most heavily audited pieces of software avoided them. We have had decades of exploits of this vulnerability, and yet most programmers are oblivious to it, or think only bad programmers are at risk. So just as tptacek goes around telling people not to write their own crypto, I go around telling people - with less authority and effectiveness, unfortunately - not to write C/C++ code unless they really need to.

As for the performance issues forcing OpenSSL to use C, well, we apparently exposed all our secrets in the pursuit of shaving off those cycles. I hope we are happy.
> There are languages that make it very very hard to write bad code. Haskell [...]

Sure, but how much slower is Haskell than an equivalent implementation in C? Some quick searching suggests numbers like 1000% slower... and no amount of security is worth a 1000% performance hit, let alone a vague "security mistakes are less likely this way" sort of security. Being secure is useless if your code is so slow that you have to run so many servers you don't make a profit.

Could the Haskell compiler be improved to the point that this isn't a problem? Maybe. Ultimately I think the problem is that Haskell code is very unlike object code, and that makes writing a good compiler very difficult. C is essentially portable assembler; translating it to object code is much more trivial.

> C is a language that doesn't offer many advantages but offers very many disadvantages for its weak assurances.

C offers simplicity. Sure, there are some quirks that are complex, but by and large it is one of the simplest languages in existence. Once you understand the syntax, you've essentially learned the language. Contrast that to Java and C#: you are essentially forced by the language to use this gigantic and complicated library all the time. You are also forced to write your code in pre-determined ways, using classes and other OOP abstractions. In C, I don't have to do that: I can write my code in whatever way I feel makes it maximally readable and performant.

C also offers flexibility: in C, I can make the computer do absolutely anything I want it to in exactly the way I want it to. Maybe I don't like 8-byte pointers on my 64-bit CPU, and I want to implement a linked list allocating nodes from a sparse memory-mapped pool with a known base address using 16-bit indexes which I add to the base to get the actual addresses when manipulating the list? That could be a big win depending on what you're doing, and (correct me if I'm wrong) there is no way to do that in Java or Haskell.

> there's no longer many excuses to run around with raw pointers except for legacy code.

If by "raw pointer" you mean haphazardly casting different things to (void * ) or (char * ) and doing arithmetic on them to access members of structures or something, I agree, 99.9% of the time you shouldn't do that.

Or are you talking about that "auto_ptr" and so-called "smart pointer" stuff in C++? In that case, your definition of "raw pointer" is every pointer I've ever defined in all the C source code I've ever written.

Pointers exist because that's the way computer hardware works: they will never go away. I'd rather deal with them directly, since it allows me to be clever sometimes and make things faster.
This is the big reason for me. I've built my business on my values, and it is incredibly satisfying to see it succeed against competitors with different values.
And I would argue that that is why Reddit sucks so much (personal opinion - I can understand why someone might enjoy the community there, but I do not in the slightest).

Don't get me wrong, I enjoy the news aggregation feature, but the community aspects are terrible. The benefit of forums was primarily in their segregation of a small-but-active community. Reddit works in precisely the opposite manner, so you end up with boring, repetitive, least-common-denominator tripe. Any subreddit small enough to avoid that is too small to be worth the time - it seems that small communities (by which I mean actual communities, as opposed to random conglomerations of people with vaguely similar tastes) tend to have other sites and methods of communication they frequent, such as this one.

I think that the poor scaling of forums is their greatest strength, and Reddit is an example of what happens when forums do scale.
I'm on several mailing lists, and the client I'm using shows the threaded discussion and search works fine. I get to use a real editor and not what Firefix/Safari/Chrome/IE provide in too little text areas (like now).
Colorbay Is A New Way Of Looking At Instagram And Other Photo-Sharing Platforms
JWPlayer on the future of HTML5 video
I agree. It seems that Uber could be for transportation what Seamless is for food (at least in midtown Manhattan). Currently, banks etc. either hire company car services to take employees home late at night or reimburse late-night taxi expenses post-hoc. It would be great to simply charge these late-night rides to the company Uber just as we order dinner on the company Seamless.
Show HN: LearnByExample-OperatingSystem
Hey all,

This repo is intended to give clear examples on basic C++ OS interaction. This is essentially a good way to help college student with their operating systems class too. Is will give you C++ code example for threads/semaphores/processes/etc. I think it's a great place to start if lower level C++ and OS interaction is of interest to you.

Feel free to comment and contribute.
I hope you're saving the results so we can shame companies who don't revoke their certs.

Also caching the results should also lighten the load on your server significantly since many people are probably checking common websites.
I love forums. Their layout and functionality make a lot of sense to me.
In Asia a lot of the microfinance goes to fund new businesses. The rates are similar to what's been discussed here - once all the fees are factored in it can be 30some percent. It doesn't sound like charity, but there are a lot of fixed costs involved in the loans that need to be amortized.
GitHub.com is vulnerable, FYI.
Uber itself requires an account, so it's not that different.
Just a note to others: all crypto includes things like SSH keys, SSH host keys, and GPG keys. Anything in memory could have been read.
> The "groups" for me were a secondary thing and a means to share knowledge

I think this is the key point. For those that grew up with computers before modems became popular in early 90's, your best option to have access to information was to meet folks with similar interests and find your nearest computer club.

I remember Phrack from those early days, with the editions being passed in 5 1/4 diskettes. Nice to see that it is still alive.
I implemented this once in my C interpreter picoc. Users hated it because it also prevented them from doing some crazy C memory access tricks, so I ended up taking it out.
Make sure you check running daemons too... apt-get install debian-goodies; checkrestart
Although Fog Creek definitely skews towards Ivy League hires, as a former FC intern from a tiny Midwest school I can say it's not a requirement.
FOBO (YC S11) Hiring Biz Dev Director, local electronics marketplace (SF)
FOBO, a local marketplace undergoing rapid growth, is looking to hire a highly motivated head of business development.

Would love to chat, just shoot me a quick note and resume at ryan at fobo.net

-----------

We're well on our way to profitability (10% week over week growth leading to $1M run-rate, in just 6 weeks).

This is a key hire with lots of room to influence the strategic direction of the company. The best fit will probably be someone who has founder experience or expects to be a founder in their next role. Must be a strong marketer, with experience and passion for building/managing/leading teams, getting your hands dirty with customer issues to turn them into success stories, and managing/driving PR as we grow into new markets.

FOBO has raised >$1.6M from a number of top-tier investors such as YC, Kevin Rose, Dave Morin, Joshua Schachter, Chris Sacca, Tim Ferris, Index, Greylock, et al. Visit us at http://fobo.net

We're located in San Francisco's mission district, just blocks from BART.

-----------

FOBO - The Fastest, Easiest Way To Sell Your Consumer Electronics

http://techcrunch.com/2014/01/10/fobo/

Gadget Marketplace App FOBO Has Hit A Million-Dollar Run Rate

http://techcrunch.com/2014/03/16/fobo-video/
The Age of Digitized Professionals
Serious reading takes a hit from online scanning and skimming
NYU has a program where college students doing internships in NYC can live in an NYU dorm for ~$360/week.

I didn't find the groceries/food to be all that expensive.
Eyetracking Jetpack Joyride, Smash Hit and Dungeon Keeper
Hacking Spoken Language
Audio has also been spotty on Linux for years. I know that at least Chrome can play 2 sounds at once (music + sound effects in a game)...
Peer review for the Internet - rbutr
I didn't knew bike couriers existed before I saw this movie on TV. Is this common in NY, or is Uber introducing the idea?

Bicycle couriers have been in New York City and other large cities in the United States (including mine, Minneapolis) for a long time. They are especially suited for traveling from one building in a dense "downtown" area to another.

https://en.wikipedia.org/wiki/Bicycle_messenger

http://www.blazingsaddles.net/
oh yeah, bike courriers have been around in NYC for over a decade. Same goes for every major metropolis in the USA.
Digital Models "Perfect Pitch" Promotions
Am I the only one spending more time on figuring out how to cheat than actually doing the level the way you are supposed to?
My favorite is the "average age" line. Why would that question be asked? One would guess, because he wanted to manage it. Another example of how Jobs had little respect for the law as it relates to employment practices.
Unclear if this is better used for transporting drugs, or transporting cats. Seems like it would work for either. I don't see any real terms of service limitations or KYC which would prevent it from being used as a "delivery service" for drugs.
Wouldn't going to USC mean $120,000 in loans, not 150k?

Unfortunately I don't think 120k in loans in tenable. Go to UF and make the most out of a free education.

I'm actually surprised you didn't get more financial aid, if your parents truly do not have any spare income for college (I'm assuming when you said they have no income you mean no income for college; if they truly don't have any income I'd be even more surprised you didn't get more aid).
Bike messenger services are commonplace in the NYC area. Uber is using their logistics prowess to make it more efficient and probably cheaper.
Russian state TV is complete Volksempfänger at the moment.
As everyone predicted, Uber is branching out with their expertise on "delivering things on demand", whether it be cars, ice cream trucks, kittens, or now packages.
Yeah, I just built a wall that it got stuck behind, then I could run to the door before it got me. Don't have the code sorry.
Perhaps not with violins, but blind wine tasting is very hard to tell differences... http://www.liquidasset.com/WEILVDQS.PDF
BOSS: Dark Energy and the Geometry of Space
I'm wondering how big this market is - when I was growing up in NYC bike messengers were everywhere. And if you were an architect (like my stepfather), then there was a constant need to ship around drawings et al. But the messenger business seems to have largely disappeared - still there, but much, much smaller than when my brother was on the bike. Hasn't the digital age really ended the need for a lot of this? I'm guessing that there is a market need here or else Uber wouldn't be pursuing - but I do have to wonder. I agree with others, though, that they should get their business billing situation settled.
Money ~= power. Prop 8 was to reduce freedom of gays by non gays. Gay marriage has only "eww factor" affect on straight marriage.

Thus, while it is fine to prefer gays not marry, it is wrong for group a to exert power against group b to limit group b's freedom when group a suffers no harm either way.

Having the opinion is questionable. But when you exert your power over another group, you enter a sphere of active rather than passive bigotry.
There is some statistical evidence that males have higher variance in general. CEOs are mostly male, people in extremely advanced math classes are mostly male, but at the same time people in prison are mostly male, and people performing dirty and dangerous labor are mostly male. Since personal utility is logarithmic in success, but visibility is close to linear, it's very easy to miss the importance of this other side of the issue, but it's there and IMO not sufficiently talked about (likely because saying "X has high variance" has no bearing on whether X is high or low, and is therefore not really useful to any side trying to make a political point).
I would take the option to go to UF for free. Maybe it's more theoretical than you want but you might find you like it. Some of my favorite engineering classes were ones I knew nothing about before college. Also Florida is a pretty good school. I wouldn't sell it short.

For most employers, there is little difference between Florida and USC. All things being equal, I think just about every one of them would hire a UF grad with a few interesting open source projects over a USC grad without a Github account. Definitely not worth the extra tuition money in my opinion. Try Florida for a year and transfer if you don't like it.
I wish I was in NY just to play with the UX!

If I have a RUSH order in progress, can I still order a traditional Uber ride?

RUSH is a business use case, which makes me think they'll soon support multiple concurrent rides since that's also a common business use case. When I was a lowly analyst, I often had to coordinate multiple cars for large groups. Really common situation in the NY finance scene (thank god I haven't worked there in a long, long time...).