skysight-inc/HackerNews huggingface dataset:
No, rewriting things in memory safe languages is absolutely something that should be done where it makes sense. There is no good reason to write things like ntpd in C anymore.

Anyone who says you'll just have a new set of similar issues is full of crap. You'll likely have issues, but ruling out memory corruption out the door is an indisputable win.
真的吗？There are plenty of Americans who understand Chinese. (I have also studied Russian, although my Russian is less proficient than my Chinese.) In fact, the United States offers exceptional opportunities to understand the rest of the world, because the United States is full of immigrants from other countries, including Russia and China (I know both), and receives more international tourist visitors each year than any other country besides France.

The single biggest reason that the United States government can't control what I hear about world news from other sources in other countries is that it doesn't try to. News organizations in the United States are private enterprises, sometimes run on a nonprofit basis, and I can read and listen to news from all over the world while living in the United States. It's easy to get an unfiltered Internet connection here, and in the old days it was easy (and remarkably inexpensive) to get a shortwave radio here. (I have done both.) It's also possible to subscribe to periodicals published in other countries and receive those by mail here (I used to do that, but now read those on the Internet).
all predicate adjectives in Japanese end in -i
ookii, chisai, mazui, etc.
the -i is the suffix indicating it is a predicate

oishii thus means "is delicious" - you don't need a "da" after it
That's easy when you have just one, or a handful, of production projects to maintain. When you have hundreds it's a vastly different story. But that's where I think https://railslts.com/ comes in.
I didn't find this paper to be very good. While it talked lightly about a relatively complex mathematical object it computes, it did not talk much about what's involved in its computations, except for some very high level keywords ("comprehensions", "object graphs").

What algorithms were used? What data structures? Was the code idiomatic? Was there any effort to reduce things like allocation?

Was homological computation the only test case? Even numerical benchmarks typically come in a suite (a good sprinkling of linear algebraic computations, tight straight line floating point programs, differential equation solvers, various numerical simulators, ...), because one LAPACK function will not give you the full picture.

This paper did not give me a very good understanding of how performant non-numeric math—which in and of itself is an extremely broad and general term—is on each implementation.
JavaScript Sort vs. Bucket Sort
I can totally get struct of arrays format in haskell (Heck, the Unboxed.* modules in the vector package are basically that http://hackage.haskell.org/package/vector)

I can define the SOA format as something like (Vector Bool, Vector Bool, Vector a, Vector b), or something similarly along those lines. That allows a pretty reasonable branchless vectorized formulation with only a relatively small ~2x space overhead for most pointwise operations.

I actually wrote a prototype of a simd backed vectorized arithmetic lib for haskell that does the right thing over a year ago, https://github.com/wellposed/vector-vectorized, but the fact of the matter is that pointwise simd is honestly kinda boring, it really only is useful for streaming/linear time workloads. What more interesting is SIMD on super linear time algorithms like FFT and (Dense) Matrix multiply, along with on compressed structures and audio/video. In all of these latter cases, SIMD shuffle matters to! And I've not yet seen a high level language that does a good treatment of supporting simd shuffles.

https://github.com/flame/blis/blob/master/kernels/x86_64/avx...
is a very very good example of how shuffle/permutation heavy interesting SIMD gets. (The associated project, BLIS, is a modern, amazingly well engineered sequel to blas, written in C, thats easy to customize to new architectures).

I definitely agree that GHC's current SIMD isnt very useful, it lacks nice support for shuffles, and its a bit weird (it naively just bundles up the LLVM simd api). I hope to work with a few folks to fix that up in time for GHC 7.12, I actually spent a bit of time this summer trying to plan out some design ideas.
StrategyValidator- zf2 validator used in Apigility
I love atop - and install it everywhere that I can. The in depth metrics + historical view is excellent.

That being said, I wouldn't call it a one stop tool for performance analysis. Particularly due to the word 'analysis' - it tells you what resource was used, and what was using it. It doesn't tell you anything about /why/ the process was using it. It doesn't help with hunting down regressions. It doesn't give you insight in to what these processes are actually doing.

For that, you need to utilize strace/ltrace/ftrace/dtrace/ktap/systemtap/perf/sysdig/whatever

(If interested in the actual analysis/engineering side of performance, I recommend following Bredan Gregg's blog and buying his systems performance book - http://brendangregg.com/ )
There's a big difference between "proper" and "more accurate than 99.999999999% of people care about" though. How many microseconds of accuracy do most people need? How many does openntpd provide and how many does the other ntpd provide? Claiming it isn't "proper" because in theory it may be 2 microseconds less accurate in some circumstances sounds like FUD.
Not necessarily. A sort of test with a somewhat random computation where implementations have not specifically tuned for said test can provide beneficial information. If you have enough of such tests, one can get a broad idea of the performance of such systems.

The worst case is when people hyperoptimize for a particular benchmark, which tells you nothing. You see this especially in the Benchmarks Game.
I think the term is small caps. :)
In either case, I went for it when I was 15-16, so it's more than half a lifetime ago. The underlying reason was simply that my handwriting was absolutely terrible, and if notes were left for too long, even I couldn't decipher them.

So... I saw a problem, and I fixed it. ;)
Well, walking past it every day on the way to work certainly gives me a bit of terror
That's why a decent language multiplexes green threads over native threads so you can have your cake and eat it too. You still need the ability to choose to create a green thread or a native thread though, it is the idea of trying to make the two interchangeable that was a problem.
This was in 1999.
Correlate real time online banking traffic (5,000,000 hits a day) with multiple threat intelligence feeds fraud data to deliver real time security alerts within 10 seconds of suspicious online activity.
I don't know why this is always posed as some sort of hypothetical or thought experiment, as if we don't have ample empirical evidence. Before modern nation-states emerged, we had feudal war lords in charge. When you overthrow nation-states, as in Afghanistan or Iraq, the feudal war lords return to power. Those are the two options.
I'm confused. Are you saying that the MIT Tor node is at Lincoln Lab, or are you suggesting that anything MIT-affiliated is tainted because of LL?
What I want to know is how a broad assessment of any agency's "competence" is at all relevant here.
Oh, certainly. I was thinking we were speaking developer experience within the realm of building/hosting network services, not so much end-user experience for client software.

That space is still a special hell for lots of reasons. Auto updaters that steal your features away being quite inexcusable but yet also not chief among them for most users.

It seems it still takes a software engineer to work the average client OS and not get it infected with crap. Maybe the average child can operate a shared walled-garden device without exposing their family's sensitive documents to untold numbers of developers of third party software on accident (or on purpose, yay Minecraft Mods!), but that's certainly not true of general computing devices.

Lots of paid (or ad-bloated) software that's lower quality than free alternatives but with cash to spend on a marketing budget, and that's not a high bar given that generally FOSS for end-users performing day-to-day tasks on client devices is still really sad.
No. No. No. Successful salespeople get something in return for information they give up. Timeline, budget, application, preferences, payment method, etc. without data a salesperson cannit determine where her time should be spent. Time is her most important commodity.
A School of Music Where Test Scores Soar
> growing food instead of lawns.

I've occasionally attempted to grow vegetables in my yard. They won't even sprout.

My apple tree is over 10 years old and still is little more than a stick with a few leaves.
Vulnerability Note VU#852879 ntp
The police seem to treat protestors much worse than anybody else, which makes me think such heavy-handed tactics are a response to pressure from above.

The government(s) have shown a consistent disregard for freedom of assembly.
I believe we're beginning to see that happen, slowly. Younger folks tend to get their news from their friends on facebook, twitter, etc. Mainstream media sources are toward the late stage of the conversation rather than the beginning and end. I don't know that it's necessarily improving things, in that a lot of Fox News style bullshit gets passed around in the form of photos with inaccurate captions, etc. But, "mainstream" it is not.

Then again, the dialogue is still being controlled for enough of the population that the state line gets reproduced by a large number of people, possibly even the majority of people, in most instances where the state interests are at stake. Even seemingly without mainstream media, the message is well-controlled.

Some recent examples of a large percentage of people seemingly buying into the state story without question that I found unnerving: "North Korea was definitely responsible for the attack on Sony" (despite many technically savvy people having serious questions about that), "Michael Brown was definitely in a rage and running into a hail of bullets toward an armed police officer when he was killed" (despite significant evidence to the contrary), "Eric Garner wouldn't have been killed if he had just obeyed the law; it had nothing to do with his race", "Tamir Rice pulled a gun on cops" (despite video contradicting this claim).
Atop was absolutely my favorite tool when I was supporting lots of interactive systems and users complained to me that "foo is slow". Even better, the logging let me determine the cause after the fact when a user complained "foo was slow". The beauty of it is that it's using process accounting to gather the resource utilization of everything that was running on the system between two points in time. Compare that to a more standard metrics-gathering system like collectd, where I would have to know the names of the processes I want to monitor in advance (http://collectd.org/documentation/manpages/collectd.conf.5.s...).

The case study at http://www.atoptool.nl/download/case_leakage.pdf is worth a read to get a feel for what it's like to use atop.
LDAP for Golang
CL goes near C speeds with an INCREDIBLE amount of work to make your program as static and C-like as possible. It also requires intimate knowledge of your particular implementation.

Sometimes it's not even possible (!) to get C speed because of things like float boxing across function boundaries.
This issue has been addressed multiple times with considerable success by pyinstaller, py2app, cxfreeze. You can get your single-zip-file distribution package without nuitka, although it may have other advantages.
This is kind of how i2p does it. Currently i2p has like 6 "reseed servers" which bootstrap you into finding some other peers. Once you are connected to the network you then can contact "floodfill" servers, which are essentially a distributed form of the directory authorities. Floodfills are autonomously chosen routers on the network, and distribute other nodes to whoever asks.
Disarming most police patrols would be an excellent start. Most of the violence committed against innocent civilians is perpetrated by the police. In major cities like Los Angeles, "no criminal organization kills as many people as the police.” [1]

[1] http://www.fatalencounters.org/shocking-police-homicide-perc...
It's two sided -- officers behave better because they're on camera, and people make up fewer false accusations because they know they were on camera.

My city (Denver) passed a law mandating body cameras for police during the last election. It'll probably be a year or two before we get data on how well it's worked.
The names seem forced. I can't help but think they're anagrams of real people.
Honestly, we can't really blame the developers either. If you inherit a compilation of different techniques, there isn't much you could do to it. There isn't necessarily a code base that you could build on as the same thing is already been done in a number of different ways. So any way you're going to make changes there isn't going to make the code much better and, thus, the least worst choice would be to start gradually injecting some consistency into the codebase even if that's the fifth layer on top of the previous ones.

Maybe, just possibly, the second developer could at least theoretically continue exactly from where the first developer left off (a single person or team == a single codebase that's at least somewhat consistent) but it could often make the mess even worse if the first developer really didn't have much of a clue of what he was doing.

The managers are basically the customer who ordered the software and they can't be trusted to know anything. It's a very common case that the customer doesn't know what they need and it's the job of the developers to first figure out the customer's real problem before beginning prototyping.
Eisberg and Resnick's Quantum Physics has a nice discussion on the philosophical disagreement. 2nd Edition, page 79.
Any relation to qute?

http://www.inkcode.net/qute
Tails: a live operating system that aims to preserve your privacy and anonymity
>But getting millions or billions of people to start growing food instead of lawns. That is a challenge.

I have a feeling it's likely an intractable one, at least in Western society.

People like convenient, simple, self-contained, magic solutions that don't involve compromise.

My guess is residential agriculture might take off upon the advent of a device analogous to the personal 3D printer. Grow whatever you want at the click of a mouse.

On the other hand, if things take a turn for the worse, I suppose we could see a phenomenon similar to victory gardens arise out of necessity.
There are 6 bugs that were announced.

#1 Weak default key in config_auth()

If you're only doing local timekeeping, and not using authentication (you'd know if you were) this doesn't apply. Basically the automatically generated key used for authentication (if you didn't specify one) was only 31 bits long and easily guessable.

#2 non-cryptographic random number generator with weak seed used by ntp-keygen to generate symmetric keys

Same as the above. If you're not using keyed sessions with remote hosts, this doesn't apply to you. Even if you are, the worst you're losing here is that someone could potentially mess with your clock.

#3 Buffer overflow in crypto_recv()

If you are using crypto (i.e. your ntp.conf file contains a line starting with "crypto pw"), you are potentially remotely exploitable to remote code execution. You probably do not have that configuration line set unless you know you put it there.

#4 Buffer overflow in ctl_putdata()

From the sound of the post on ntp.org, this is the scary one. "A remote attacker can send a carefully crafted packet that can overflow a stack buffer and potentially allow malicious code to be executed with the privilege level of the ntpd process." This makes it sound like everyone is exploitable. However, Redhat says "the ctl_putdata() flaw, by default, can only be exploited via local attackers". This makes me believe if you have your ntp.conf locked down using the 'restrict' lines you might not be vulnerable.

#5 Buffer overflow in configure()

This is the same as #4, ntp.org's advisory is vague enough that it sounds like everyone is vulnerable. Redhat is saying "the configure() flaw requires additional authentication to exploit." I do not know what this means.

#6 receive(): missing return on error

From their description, it's technically possible (but they haven't done it) to get ntpd into a weird state that is unlikely to be exploitable.

TL;DR: You're possibly vulnerable to #4 and #5 on a stock configuration. Redhat says no, ntp.org's advisory is vague enough that I'm not sure.
Clever (YC S12) is looking for full-stack engineers – help change the classroom
K-12 schools have a huge problem using software. This problem is technical, rather than ideological - teachers want to use great learning applications, but they can’t get them to synchronize properly with the legacy school systems that house their students’ data.

Clever (YC S12 - clever.com) is solving this problem by building a modern, developer-friendly API for schools… which we give them for free. Schools love finally being able to use software seamlessly, and developers love being able to plug into schools without having to write a complex integration for every single district they’re working with, so they pay us for access to the platform. This business model has helped us grow quickly; we’re now in 1 in 5 schools in America (over 29,000 schools), and our product is used by millions of students every day. We were also recently in the news here:
http://blogs.wsj.com/venturecapital/2014/12/16/clever-raises...

Our goal is to become the education identity company. The first step in that direction is our Instant Login single sign-on platform: a universal login that allows students to access all of their learning applications in one place. (This is a big deal if you’ve ever seen a second-grader try to manage fifteen different usernames and passwords.)

Right now we’re a team of 42 people (19 engineers) based in downtown San Francisco. We’re looking for full-stack engineers who can hack in Node, Go, and Python (or are willing to learn), but more importantly, we’re looking for people who share our passion for improving education. If you’re interested, we’d love to hear from you.

Other stuff we like:

-Tech talks. Every other Tuesday, we do “Clever Talks” during lunch where one of us will give a presentation on anything he/she’s interested in. Recent talks have covered exoplanets, neuroscience, hacking big-company customer service interactions, and what’s wrong with American high school history education.

-Bughouse chess. We play pretty frequently, although not always with Magnus Carlsen: http://screencast.com/t/xD7umWfo

-Picking up new skills. We offer unlimited Amazon credits for learning.

Check us out: https://clever.com/about/jobs

At Clever, we want to work with the best people - applicants of all backgrounds and beliefs are welcome to come improve education with us. We're committed to making our office a safe and comfortable environment for all employees.
Who cares just open source it. People who are interested might even send you some pull requests
How Facebook May Secretly Foil Your Activist Plans
> Instead of a runtime library (whether jquery or roll-your-own), would it be possible to handle cases like that via syntactic sugar that expands at deployment time, and doesn't require shipping a library to the end-user's browser?

You could, but that would require user-agent sniffing (and thus continuous maintenance), and would probably need a pretty unusual caching setup.
This looks more like 16-bit weather though. 8-bit machines didn't generally have high resolutions (= 1x1 pixels) with that many shades of color. The best had either or. In contrast, the weather guy looks like a PC EGA era illustration.
https://www.youtube.com/watch?v=nymVNhy4dw8

I still have this one on tape!
Node streams
"Which ever is most efficient"

If I care about the most efficient way to make sure money stays local to my region, dealing with institutions that have a habit of keeping money in a particular region seems the best way to ensure that happens.
RapidPro – Open Source Messaging from TextIt
Those are the two options.

You were already arguing a false dichotomy, and then ended up admitting it with that last sentence.

Hopefully one of these days (probably in the far future, if ever), we'll have a society dominated by individuals cooperating and interacting with each other without the need for a top down autocracy, which the U.S. is moving towards now.

But as long as you have government agents and those in the media actively trying to divide people and pit groups against each other in order to gain power, that will never happen.

And as long as we have indoctrination of individuals into thinking that government should be involved in every aspect of their lives in order to promote fairness, there's no hope.
Rent the Runway, a Designer Fashion Startup, Raises $60M
Very excited about this. Was just having a conversation about what to migrate our Angular app since we're no longer happy with Angular.

Also, looks like until Tuesday it was named Vibrato [0]. I think I can understand the motivation to change that.

[0]: https://github.com/fastmail/overture/commit/2a8252764a124b19...
This is really at the heart of the problem I have with the American approach to policing - everything becomes a police issue. Your tail light is out. Does the cop: a) tell you your tail light is out and to have a nice day and drive safe or b) demand license and registration, take 10 minutes to run a complete background check, insult you for having the tail light out, threaten to search the rest of your vehicle, and finally get around to giving you a ticket so that they can meet their quotas and fill their coffers.

Drugs: we treat it like a policing issue, other countries treat it as a social and health issue.

Immigration: we turn it into a policing deal when really its an economic and social system matter.

Gangs: our cops talk tough on the nightly news and the newspaper, but really this is directly tied to the drug and immigration problem and is again, and economic problem of when you have disfranchised young men.

Even a lot of the speeding and traffic problems are really cases of poor civil engineering and traffic management, but we "fix" them through a convenient policing trick that also generated revenue without raising anyone's taxes visibly.

Homelessness, especially due to mental illness? Let's make laying on the sidewalk illegal so we can turn a social problem into a police issue.

So in short, our US system turns things into policing issues because you know, fixing the real problems would be tough.
This is very misleading !
Your article about that:

https://blog.hboeck.de/archives/863-Dont-update-NTP-stop-usi...
Or, to put it another way, the design process happened in the open, and you got to see some perfectly normal things that just wouldn't usually be visible to you. (And even have some input into them, if you were so inclined.) I don't really think that deserves criticism.
Also the person the officer is speaking with knows their behavior is being recorded.
Death Story of a Start-up in Developing Countries
A new tech bubble seems to be inflating
I would recommend this one for historical purposes: http://insecure.org/stf/smashstack.html