skysight-inc/HackerNews huggingface dataset:
railroads is a foolish argument

i wasn't comparing the Indian government with the Nazi's - but i will say there has been a long history of religious bloodshed in India, it doesn't take a major leap of imagination to see that someone with nefarious intent towards Hindu's, Muslims, Sikh's etc should not have access to extensive information about them - human nature being what it is, and looking at what has happened in those circumstances throughout history.
Any good business plan resources?. I was able to find pitch decks of most startups but not the actual business plan
I don't think that's the root of the problem. While you could make a simpler strings(1), which would help people who only use that one, more complex stuff like objdump(1) really does need to parse binaries. And that should be possible to do without worrying about security problems: you're just reading a file and extracting some information, which even in the worst case should be possible to do without accidentally executing arbitrary code. It's just that libbfd seems to have a lot of bugs, and because it's written in an unsafe language, such bugs can not only cause incorrect information or crashes, but sometimes attacker-controlled code execution. But if you don't do it via libbfd, you're going to need some library that can parse binaries, since many utilities end up needing to do it, and it shouldn't be impossible to safely do so.

An alternative is to implement a subset of full parsing specifically tailored to each utility. In the case of strings(1) that's very simple; in the case of some other utilities it's of intermediate complexity; all the way up to some that need to parse every corner of ELF. Whether that produces a bigger or smaller attack surface depends on a lot of factors: each parser might be simpler, but there are many more of them. FreeBSD was contemplating centralizing more of that into a common libelf, so I don't think it's only GNU who think that's a good idea in principle: https://wiki.freebsd.org/LibElf
I understand wanting to appeal to the same user base and tell that it was develop by the same team. It's a brand decision. Nevertheless Angular 2 "deserve" a completely new name. It has no resemblance of Angular 1.x. Welcome to a new framework.
It doesn't have to be profitable to be problematic.
I do actually cover this in the preface: https://github.com/progit/progit2/blob/master/book/preface.a...

The conflict of interest does bother me, so I did try to be as clear as I could about it and to point out at the beginning of the chapter that you could easily skip it if you don't like or don't want to use GitHub. I also stayed away from everything I could that required payment.

The truth is that I've been approached to write books specifically about GitHub for several years so I thought that the demand for that sort of information was high enough to warrant moving it to it's own chapter. Had I been approached about writing about other resources I would probably have also included them.

The more difficult decision was whether to include information on Gerrit. I actually started writing a section on it, then considered a chapter or appendix. The main deciding factor was how many people I thought might benefit from it.
Address space randomization is security theater. It slows down attackers, but doesn't stop them. See "stack spraying". What it does prevent is replication of security bugs, which allows vendors to ignore them.
If the owner refuses to do maintenance, you can stop paying rent altogether until they do it.
Skynet? :)
yeah, isn't it even quite the opposite, I'd be really surprised to hear otherwise. The startup scene in SF is predominantly white, but SV is nothing like that, pick any large software company and you'll find the split is something like 80% Asian, split with varying amounts between south asian and the far east (india and china/taiwan) with the remaining 20% being of european descent. Whenever I interview for a position, I can guarantee one or more of the candidates will be from one of the IITs. As someone said, with CS being such a strong emphasis in two of the largest population centers of the world, this really isn't very surprising at all. America was and continues to be an immigrant's best opportunity for prosperity with the shift over the centuries from europeans to asians.
Ugh, yeah, this is complex. The second edition isn't going to be properly out for probably months. While it's online now and still undergoing some copy and technical editing, I'm not sure that sending you to the Amazon page for a pre-order months down the road is the best. It's hard to say though. :(
Meteor in no way abstracts MongoDB away from the developer. Meteor is very tightly bound to Mongo, and Mongo permeates every aspect of coding in Meteor.
I just hope the Rust developers don't screw up. We badly need a safe, fast, low-level language to replace C.

Once Rust settles down, the next step is academic work to automatically translate existing C into Rust.
This is just a trashy rant who scrapes everything together to demonize the big valley companies. There is no coherent message, he throws "monopolist" around like republicans "socialist". Not even starting with questionable facts like DOS being based on CP/M.

The most laughable quote: "Facebook builds nothing, manufactures nothing, creates nothing."

This guy wants Amazon and Google to be nationalized on another article, sure that will solve all these problems.

I feel bad giving this guy views.
View your own 3d Models in Google Cardboard
On (1) recursion elimination ...

Tail-recursions are the exact equivalent of loops.

We've lost sight of what "recursion" means. There's a difference between recursive functions and recursive algorithms, which need by definition a stack and there are lots of such problems that can't be optimized to run in constant space. Whether that stack is the call stack, or a manually managed stack (within a loop or a tail-recursion), that doesn't matter, what matters is that the space requirements are definitely not constant.

It's nice that the GCC compiler can optimize that Fibonacci sample. However you're not getting a guarantee that it can optimize every function that is optimizable. I'm also pretty sure that the compiler is extremely limited in what it can do here. And that is dangerous, as running in constant space is often a matter of correctness, not one of optimization. I would rather have the compiler err on me if it sees non-tail recursive calls, rather than try to be smart sometimes.
Dazed and Confuzzled: Thoughts on Object-Oriented Programming
Counter-ASLR measures are not always viable. Regardless, Go also lacks DEP, which is the more important of the two.
The Consumerization of Enterprise Software
Nice strawman.

Neither Angular nor React nor Backbone are equivalent to KDE or Qt, so those are false equivalencies use to construct a poor excuse for a strawman.

The user agents (browsers) and the web as a platform is the closest equivalent to Qt, since collectively, they abstract away all the differences between platforms as Qt does. Collectively and individually they represent excellent examples of engineering. The problem with them is that the problem they are trying to solve basically changed from what Tim Berners-Lee originally tried to solved. He tried to make a hyperlinked document platform, not an app platform. The web is now trying to evolve to supporting apps while also remaining a good documentation platform.

React would be most closely equivalent to added the paint/draw and retain-mode graphics part of Qt to the web. Flux and its different implementations and the various libraries out are likely equivalent to different solutions for events and data stores available in the Qt ecosystem, but I'm not a Qt developer so I wouldn't know. Those who built react are doing engineering as are those who build with react, it's just that the latter are absolved from solving the engineering problems related to render/paint/layout and retain-mode graphics.

Angular is an attempt to bundle everything together (render/draw, events, data) into one monolithic framework solution, doing reasonably well, but none exceptionally well. Those who built angular are doing engineering. However, those who build with angular are basically doing plumbing.

People who build with KDE and people who build with angular are basically performing the same type of work.

I don't know what backbone is equivalent to in the KDE or Qt world, but I would imagine it's probably some early library/quasi-framework in the Qt world when it was still the wild west and there weren't very good engineering practices and project organization strategies in Qt projects.

I can't believe I wasted my time responding to your logical fallacy.
Much easier to test a race track than a busy street too.
Igor posted on his twitter there'd be a video soon. Surely OP will deliver...

https://twitter.com/IgorMinar/status/525807334099288064
Hi,

Is the source available on a public repo?
This will be amazing for a private board.
Thanks.
If you solve the problem of determining all output strings of a given program with running it, please leave a message ;)
I tried some stuff with exercise a while back.

I was excited and did 4 push-ups but it is a convoluted thing to do.

I'm not writing off exercise completely, but I ended up moving away from it.
I've seen this movie before. The next step is to hire Linus Torvalds.
There's something fundamentally wrong with still using unsafe languages for system software.

C should have been buried decades ago, it's a toy language for small pieces of code on isolated systems (and yes, I've written larger programs in C myself, 20 years ago).

Nowdays, C should not even be considered safe for implementing interpreters and runtime systems for other languages. There are plenty of reasonably portable choices available (and no, don't use Java / anything JVM based).

It can't be terribly hard to reimplement "strings" and similar software in a modern language without such deficiencies (i.e. plenty of ways to shoot oneself in the foot and overwrite the stack etc.).
Is this only happening in America?
Twitter to acquire TwitPic
A book from someone who explains how to perform the exercise, nothing more.
From an author I am not associated with. There are probably a zillion videos about 5T on youtube, if you prefer and the original text (1930 or somesuch) is probably available for free as a pdf.
I believe most people would prefer something more "modern", though, that's why that specific book is on the page.

(Yeah, I have a referral link to Amazon on the left, but I am not exactly forcing anyone to buy the book).
You may want to use this icons as web font: http://zavoloklom.github.io/material-design-iconic-font
I believe I've actually offered to do this, but they haven't taken me up on it. I'm almost positive that I actually got a domain transfer code for it once but it was never transferred (I could be misremembering that though).

I think this just recently came up again when there was some issue with Heroku legacy routing stuff and people seemed to think that it was better that I continue to deal with it.
The article is about intelligence, not narcissism. :)
The Problem with Positive Thinking
Humans are unreliable, especially when doing uncreative work. Anything that can be automated should be.
Twitpic’s Future
The Cyclone dialect of the C language comes to mind: https://en.wikipedia.org/wiki/Cyclone_%28programming_languag...

Unfortunately, it's a dead project, and as far as I recall, never compiled on 64-bit architectures.
Biochemist here; not 100% certain how a micro-RNA survives the tea extraction process. If the claim is that honeysuckle tea has an antiviral activity, there are probably more active ingredients besides these.
I doubt it's worth forking to parallelize a small search.
The Skinny on Bad Parchment
C is fully self sufficient without calling into libc. Otherwise all the libc alternatives couldn't exist.

Sure, you don't get to call strlen (actually, you do if the compiler treats it as an intrinsic), but that's no big deal.
http://www.seed-db.com/accelerators has a pretty exhaustive and useful list of all the international incubators/accelerators with some metrics. You can point to it as a resource.

This is a good bundle you came up with. Thanks.
The problem is, until now there has not been a very good systems programming language that allowed you to stay lean on memory without introducing any performance overhead. Rust is certainly a contender, thankfully.

So, there is a perfectly good reason C is still prevalent to this day, even if there are many security implications in doing so.
Connecticut Library Digitizes World War I History
NPR Guts Its Climate Reporting Team
The problem is that Apple completely played their hand in the markets they entered in early: music with iTunes and mobile apps with the AppStore.

Now that everyone has seen how much the experience has sucked for many participants in those markets, participants in other markets Apple wants to enter, such as ebooks, movies and tv shows, and now payments, are extremely wary about cooperating. They want Apple's solution, but I don't see any new market playing along unless Apple changes their strategy to one that permits openness and competition as a poison pill in the case that Apple continues to treat its "partners" like shit.

Openness is great because it forces the best solution out there to always compete on being best instead of competing by abusing its market position. No market wants to let Apple establish a strong market position anymore.
Guardian launches open-source data journalism tool
Seriously though, what's so bad about distributing Tesla vehicles through a dealership franchise?

Is it simply because it's less profitable than direct sales? Is it not laissez-faire enough?
I can try and do that here in the next few days. I'm a little swamped with design and suggestions at the moment. If you could email me at: nicksstartups@gmail.com that would be fantastic!
If it slows them down and makes their lives harder, then it is a worthy mitigation. That's what a mitigation is, after all: it reduces severity and effectiveness. It's not a full stopgap. Even still, ASLR implementation quality has left much to be desired throughout the years.
Multithreading shouldn't be my job as a programmer. I love the idea. If this takes off and become standard it's going to save us from dealing with multithreading issues.
You never know, you might be talking to someone with actual experience.
IIRC, in the larger Google Doc cache of their Core documentation for Angular 2.x, they've stated in the manifesto of sorts that, well, that "easy shift" may just not be possible. Primarily when it comes to migrating existing applications.
I'm planning to write all of this up soon, but there are a few really interesting things about the second edition.

For one, everything was changed from Markdown to Asciidoc and the entire book can now be generated in multiple formats in the asciidoctor toolchain. Also, we're using O'Reilly's Atlas platform to generate amazingly high-quality PDF, ePub and Mobi versions automatically with every push to master. In every language. This is a massive improvement over the previous version.

The other really interesting thing is the production process. We used GitHub and prose diffs for the entire production of the book. I think we used about 100 Pull Requests to get to where we are now. This is a massive improvement over how I collaborated with editors for the first version, the first few chapters of which were actually done by sending Word documents back and forth.
Langford's Sequences
For those that don't get the reference: http://en.wikipedia.org/wiki/Transmeta
Validating Ideas Without a Line of Code
Is this the third or fourth dramatic development in the Twitpic closure? It's beginning to get a little ridiculous. Every week it seems like the story changes. They're closing, they're not, they're acquired, they're not, and now they are again.
Privoxy is your missing piece. Combine that with OpenVPN.

For compression:
http://www.privoxy.org/user-manual/config.html#ENABLE-COMPRE...

edit: Also, setting proxies on Android -- http://w3epic.com/how-to-setting-proxy-on-android-phone-tabl... ... iPhone: http://appletoolbox.com/2012/08/how-to-set-up-and-configure-...
Hmm. I might have a few buried in my email. I can try and dig those out. In the meantime: http://www.niacc.edu/pappajohn/business-development/start-a-... this might be helpful?
Swarmize – Data Journalism Platform
Awesome! Thank you! Glad I could help. :)
No, lots of people think that. Those people do not use GNU software for this reason.
Silicon Valley startup unveils Internet-connected smart guns for cops
NASA releases SOUNDCLOUD page with amazing audio clips
>You can execute out-of-order to try avoiding the stall.

Exactly. By running multiple interleaved branch-free binary searches at once you offer independent work to the out of order engine.
Fwiw, Chicago (what became Windows 95) was originally planned to ship in 93. Yes, we were pretty bad at scheduling back then :)
The first example is really dangerous. We recently had a issue with GCC not optimizing a tail recursion in a relatively large function with parameters passed in as references to std collections. The result - it was running out of stack space at large scale. So if you make it to a habit of using tail recursion extensively GCC can bite you where you don't expect.

Of course adding a unit test for every function saved the day as usual, however it is trivial to convert tail recursion into a loop and not worry about stack overflow.
I wonder how big of a project would it be to port all of GNU/Linux to Rust.

Here's a start:
https://news.ycombinator.com/item?id=7882211
https://github.com/uutils/coreutils/tree/master/src
No it isn't. If trying to exploit some daemon requires thousands of tries instead of one try, I am thousands of times more secure. Because they will almost certainly fail the first time, causing the daemon to crash, and then have no more tries. It is only security theater if you live in the land of "lets use broken software that crashes all the time and then run a monitoring tool to automatically restart it". That is the problem.
Security from credit cards isn't really any better, it's just that they established very strong fraud detection mechanisms and have accepted eating the losses from credit card theft as a cost of doing business. When I lose my credit card and someone starts using it to make purchases, so long as I notify my issuer promptly, they absolve me of being responsible for the fraudulent transactions.

So long as this new system accepts that this is a cost of doing business and implements a customer service policy where the risk is spread among all retail participants, this would be competitive with the status quo.

These merchants aren't going to get out of paying fees, but they should be able to reduce those fees to the cost of providing a competitive service to the credit cards. The benefit is that they won't have to also pay higher fees than necessary to get the benefit of the system.

If they provide this basic safety feature, than upgrading security will be a given since it will reduce a major cost on their balance sheet, which is dealing with fraudulent transactions.
Faster sequential writes. No compaction step needed. Constant amount of disk space is used.
The idea of breaking a single thread into parallel parts automatically at runtime has been thrown around in academia for a while -- anyone interested should search for "dynamic multithreading" and "thread-level speculation". So industry is going to be (rightly) skeptical. But if they've managed to build something that actually works, and on real code (not just toy benchmarks), this is a huge accomplishment.
Whisper CEO suspends staff pending inquiry into 'anonymity' revelations
> The problem is, until now there has not been a very good systems programming language that allowed you to stay lean on memory without introducing any performance overhead. Rust is certainly a contender, thankfully.

We've only had Pascal and Modula-2 for what, 40-45 years?

>perfectly good reason C is still prevalent to this day

... it's not that and it's not good. It's just that security implications were largely ignored, people were lazy and innovation and making sound decisions (rather than popular ones) has never been strong in the OSS/Linux community (apart from the kernel itself).
You ignore the article's point about the risk of choosing a proffession. For example, what's the return on investment for the worker that trained to be a professional car welder in Detroit? I don't know if "-100%" captures the loss.
Yeah, the smartphone was not such a big leap as it's made out to be. It was mainly UI. I used to have a Sony Ericsson dumbphone and I had Opera Mini and Google Maps on it. I ordered train tickets online with that phone.
Seems like an easy retaliation for Google and Apple would be to just block the CurrenC applications from the app stores when they are released. It's very similar to what the retailers are doing by blocking Google Wallet, Apple Pay and paywave by disabling NFC.

Also, I just don't see the banks simply rolling over and losing their beloved credit and debit card fees. They will definitely find ways to make their money (sgentle mentioned through contracts requiring NFC, etc).

I've had a paywave for a while, and have used it at CVS quite a bit. Sort of annoyed it won't work anymore due to this issue.

And giving retailers direct access to your checking account via ACH..uffda.
To recap:

a) TwitPic got into a trademark dispute with Twitter and decided to shut down instead of fighting it. (http://techcrunch.com/2014/09/04/twitpic-to-shut-down-on-sep...)

b) TwitPic says "just kidding," as they found an acquirer. (http://www.theverge.com/2014/9/18/6445597/twitpic-says-it-wo...)

c) TwitPic says "just kidding on the just kidding," as the talks fell through and they are actually shutting down. (http://techcrunch.com/2014/10/16/twitpic-couldnt-find-an-acq...)

d) TwitPic says "just kidding on the just kidding" again, as they are acquired after all.

It's impossible to take startups seriously sometimes.
I understand that people are downvoting this because of the obvious "it impacts freedom" downside.

However before downvoting please consider that the financial aspects are by far not clear to everyone, especially not to the programmer audience of HN.

I too would love to read an earnest analysis of the impact on Tesla's sales were they to restructure their Michigan sales efforts to comply with the law by starting to use middlemen.

Edit: Even the article itself throws that question up: "it’s not actually obvious that Tesla’s decision to operate without dealers will end up being a more profitable business model in the long run, given the valuable marketing, sales, and maintenance services that many local dealers provide."
I don't think you can go wrong with anything Git related by Scott Chacon.

There used to be screencasts by him that were really good, quick tutorials of running through common scenarios (branching, merging, rebasing, managing your stash). I haven't been able to find them in a while. Those were really great when I was learning how to do an interactive rebase.
It might be better to wonder what are the advantages of mercurial over git.

Better Windows support ? I think a huge proportion of OSS devs these days use linux / osx.

It might be useful for mercurial to focus on making itself the premier OSS DVCS for "enterprise"; that would create space between it and git / the git userbase, and would allow for it to specialize in a meaningful way that is perhaps less-easily forklifted into git.
While I feel for these guys, I have to imagine they'll go on to greener pastures.