skysight-inc/HackerNews huggingface dataset:
> You can see some awareness of the value of integer overflow detection among some individuals that work on Rust but despite that, here we are without that feature. Swift, on the other hand, is one language that has put some thought to the matter.

We have put a lot of thought into the matter, and the conclusion was that (a) the performance overhead, as measured by benchmarks, could be significant; (b) the relative benefits of doing the checking in Rust would be much less than in C and C++, since overflow in (safe) Rust cannot result in memory safety problems. However, we're looking into ways that we could allow folks to opt into the feature globally in the future should the performance story change or if they want to panic rather than overflow. You can already use the special checked types for arithmetic on a case-by-case basis if you'd like overflow checking.
It's clear in this case that their motive was to stop the release of the film. Sony decided to let them win this one. They are choosing their battles and this appears to be one they don't believe they can win or that is not worth winning. It's not what I would have done but it appears that it's what Sony wants, and it's their movie.
hi gsands, Thanks for your tips and information! We have made some tweaks. Do take a look :).
Fortunately we've made some progress in terms of rights of the accused in the last 70 years. It's stories like these that provide strong arguments against the death penalty.

But the pendulum does swing the other way, to weekend furloughs for murderers sentenced to life imprisonment without parole.[1] That particular individual played a big role in the 1988 US Presidential election.

[1] https://en.wikipedia.org/wiki/Willie_Horton
I think there might be a difference between mocking an actual dictator causing real harm to real people and an ancient religious figure.
Mail is absolutely awful.

They've redesigned the Yahoo Finance homepage but they've really trashed it. Recent quotes rarely works, the page is cluttered, they constantly link to articles that start auto playing some obnoxious video. Their financial data is good though and the stock quote pages haven't changed much so the internals are OK. There's a stuff they could do to improve it, but given their track record, I hope they don't try.

The irony is that Yahoo! Finance's users presumably have money since they're looking for investment news, so you'd think that those ads would be especially lucrative.

One thing I do like is that they have several financial writers on tumblr now and they link to that content from the Finance home page. Those tumblrs are actually some of the best content on Finance.
I thought Hollywood accounting was already one step ahead of that and redefined "gross revenues" so those don't exist either?
thanks paulftw :). Theres a tonne of information and we didn't want to flood our customers with too much technical detail.

We are releasing a series of technical articles on our website, so stay tuned!!

Do read my super large writeup above. It will be condensed and published with lots of images on our site soon.
he turned out alright
India and Pakistan when various groups threaten to bomb theatres they delay the film release a few months then show it anyway. Sony is going to do the same, then shill it as a must watch in order thwart glorious victory of comrade jong-un.
I cannot believe how many times I have seen a PROD (or new env X) deployment go bad from configuration issues. At least they separate configuration deployments from code deployments, that's a good sign. Why not take it a step further and instead of doing config deployments, use a config server?
A terrorist is someone who threatens/harms bystanders for a political goal, more or less.

Hacking Sony is not an act of terrorism, threatening theaters with violence is.
Wow, is all PR speak from SV companies so absolutely vacuous?

This guy sounded much more intelligent in his private memos. This crap sounds like a teenager's diary. So many "feels" and "hurts" and "angrys"...really seems like he's writing to a bunch of young teens.

I don't know how people work at companies like this. Between this and Marissa Mayer's children's book reading at an all employee meeting, I'd get fired twice for laughing out loud and calling the CEO of the company a blabbering idiot.

Anyone care to unravel the mystery of teen mystery PR speak?
Not sure I take the reductionist view point of calling the hacking "just a Bond script release". Allegedly the hackers stole over 300TB of data, and we have already seen them mountains of private information such as SSNs. If those SSNs were then sold/used for fraud (causing even more damage), and that revenue used to by weapons, could we call it a terrorist act then?
Older gcc versions have `-ftrapv` option, which checks overflow for signed addition, subtraction, and multiplication. However, the implementation calls libgcc functions to do the checks, resulting in non-negligible overhead.
Uber's legal battles and robocars
Experience beats certification when it comes to job-hunting hands-down. The trick is being able to demonstrate that you actually do understand the technologies you listed. Set up a Github account and put code in there. I've literally gotten job offers on that alone.

Another tip is that you should avoid applying through the company website - hundreds of people do that. They have software which will automatically filter out people without the correct keyword.

Instead, meetups and user groups have been more fruitful for me. You want to work in Java? Chances are, there's a Java User Group happening in your area, and chances are, there are people attending those meetups to source local talent. Attend them, network, collect contact cards, and bypass the HR process altogether.
The indicators per se are not gamed. Instead, you select a few indicators like "Olympic medals", "life expectancy" (etc) and commit every resource of the country to them at all cost and without regard for everything else. The indicators you picked will show amazing and you can use them to justify your ideology. Pretty much like a SEO hack, they are hacking public opinion (looks like it worked on you).
sony should just release the damned thing on christmas day on netflix and let the whole world deal with it at the same time.
Hi Marban, allow me to quickly answer your questions:

1) this link will help explain why we started on BibShorts : http://www.redwhite.cc/whybibshorts/

To summarize, we conceptualized RedWhite in late February 2014, started design work in March and launched in August 2014 :). You're hearing about us now thanks to a large Instagram following and us getting more active in forums to reach out to a wide audience. And we totally need your help to reach an even wider audience.

PRICING : SGD210 (Singapore dollars) including shipping and taxes. We have an online store here on our site :)

OEM Challenges : We searched for a manufacturer for MONTHS until we found him in Italy. It made perfect sense from a supply chain perspective because our fabrics and chamois are made in Europe, so keeping manufacturing there is key to keeping costs low. Our Italian manufacturing partners own factories in Eastern Europe and meet our strict policy on quality.

Every RedWhite BibShort is made in Romania and shipped back to Italy for a final quality inspection before sent to us in Singapore. We keep costs low by piggy backing on larger shipments from our manufacturer, keeping our transportation costs and carbon footprint low.
Madrid Escorts – Spain Escorts – Leading Escort Agency in Spain
It is just an rational act. With NSA there any country should be aware of their security while using something developed by another country...
Look at the arenas, they are beautiful. They have cloth objects blowing in the wind. Everything looks like it was custom made from scratch.

"Let me guess, every arena had a bike shed off to one side?"

I'm guessing that was a shot at Road Redemption, and I do wish the art was better, but having a huge art team to make 50+ miles of track from scratch would cost a lot more than 150k, and leave no money for making the actual game. We used a lot of premade assets from turbosquid and the unity asset store. We used EZRoads to make all the tracks except the rooftop levels. Most of the animations we had to mocap/animate ourselves though because there just are not a lot of solid on motorcycle animations available.

The point is that we actually made a game and it is pretty fun(90% user review score), and we did it with a lot less than 500k. Art does not make a video game. That is why I am saying the clang project was mismanaged. The art they made is beautiful, and looks like it is all custom. They could've easily gotten 90% of that from the asset store and it would be worse, but it would also cost less than $1000. Then they have at least 400k left to make the game. The problem they had to solve was difficult, but with 400k they should've been able to make something awesome.
ISRO successfully tests crew module
Although I agree with you that this was not a well-written email at all, I've personally found it to be quite common for people in Spiegel's position to write surprisingly badly for business communication. My first boss out of college, for instance, was a multi-millionaire whose general writing style was full of run-ons and countless "fuck"s. It stood out to me quite a bit, but it was obvious that when writing really mattered he was capable of producing perfect grammar, as if it were out of a textbook.

I don't like Spiegel either, but I wouldn't take this as truly representative of his writing ability.

I think this phenomenon occurs due to a combination of (1) there's a point in the chain of power after which it's more cost efficient to just get the email written and sent than to worry about its composition; and (2) when you're at the top you don't have nearly as many people whom you must impress.
We don't because we are currently a small company and distribute in South East Asia at the moment.

With scale and a larger US, EU customer base, we will be able to distribute from Italy.

Distribution from within the EU requires a business license, VAT registration and obviously a premises. These cost money and are huge fixed costs that a small firm can't handle right now.

We explored the option of distribution from our manufacturer's facility, but costs go up, because we need to pay fair wages for work done to distribute and handle customers - driving cost up again.

These key decisions are paying off - We now have brought to market (very quickly and with extremely high quality) - a great product at a great price point.
Set Up Trusted Locations in Android Lollipop
you're confusing content compression with header compression. it's fine to pre-gzip your css before serving it over http or tls.
I just did my own comparison using bzip2 (http://www.bzip.org/), comparing both CLang 3.4 and GCC 4.9 with -O3 -fsanitize=signed-integer-overflow. I omitted the 'unsigned-integer-overflow' because my version of GCC didn't support it. ICC is shown for the non-sanitized version, as it doesn't support it the automatic overflow checking.

I did a smaller file than Dan because I didn't have the patience to test with the 1GB file. Testing was Linux on Haswell, cycle and instruction counts are coming from 'perf stat' and are in billions except for the last column, (instructions/cycle). Not shown here is the number of mispredicted branches, which as expected does not increase for adding the checks since they are all well predicted.

cycles instructions branches ipc
clang-O3: 24.4 43.8 6.3 1.79
clang-O3-sanitize: 26.5 54.8 9.3 2.06
gcc-O3: 23.0 42.5 6.2 1.85
gcc-O3-sanitize: 24.6 47.3 7.6 1.93
icc-O3: 23.8 41.6 6.5 1.75

For Clang, adding signed integer overflow checking adds about 20% to the count of instructions executed, but only about 7% to the runtime. For GCC, 10% more instructions but also about 7% increase in execution time. Agreeing with this, the instructions per cycle ratio goes up more for CLang than for GCC, but in both cases there is a significant increase showing that each check costs less than a cycle.

I'm somewhat confused as to why the increase in instructions executed is so much greater than the increase in the count of branch instructions. This would seem to confirm Dan's experience with poor generated code quality, but looking the tight loops with 'perf record' both GCC and CLang appear to be generating reasonable code. Both sanitized and normal spill to the stack much more than seems necessary, but this doesn't seem to because of the overflow checking. I'd guess the extra instructions are just by chance because of how the 'jo' checks were laid out.
Is Fight Club an example or a counterexample?
North Korea Behind Sony Hack: U.S. Officials
>Every ANSI compliant C library comes with an implementation of a quicksort routine

Actually the standard doesn't require qsort() to be quicksort. For example, musl's implementation uses the smoothsort algorithm.

http://port70.net/~nsz/c/c11/n1570.html#7.22.5.2

http://git.musl-libc.org/cgit/musl/tree/src/stdlib/qsort.c?i...
I'm very interested, but haven't bought in yet because I don't see anything yet that seems to unambiguously work (other than careful use of a few nootropics).

I may try one of these tDCS devices soon. If I do I will blog it.
There has been a long evolution by international organisations to pressure global culture into "respecting" their ideology. Islam is best known for this [1][2], but Russia, China and half of Africa and South America are on the side of the "global censorship"-cabal. Depending on whether it applies to religion (e.g. islam), political ideology (e.g. socialism/communism) or people (dictatorships, or royal family or ...) it refers to "defamation of religion" laws or ...

[1] http://en.wikipedia.org/wiki/Defamation_of_religion_and_the_...

[2] Don't feel I have to include links, they'd detract from the discussion, but we all know the massive international protests and even murders against cartoons, films, books, ... that muslims keep throwing every 5 years or so.

(yes, it's called defamation of religions, but it covers a hell of a lot more than just religions. Mostly mentioning islam here because it's the driver behind these horrible laws)

But here's the thing Americans don't seem to understand. Number of people in favor of real freedom of expression* : 60% of the US, 5% of the rest of the world.

* irrespective of the subject, which excludes most of Europe. Europe is only in favor of freedom of expression where it doesn't interfere with religion, (some) policies, a few families, ...
No.

If I rob a bank it is not a terrorist act. If I use the money to make a dirty bomb and commit a terrorist act with said bomb, that's a terrorist act, not the initial robbery.
.5 ^ 100 is 7e-31. If everyone in the world did nothing but flip coins all day long, how many years before you would expect to see 100 heads in a row?
Invest in real companies using Bitcoin [Coming soon]
Hi Kluny,

We currently offer in only 3 sizes and are releasing larger sizes soon.

There are only 3 size variations given the type of fabric and construction. For example, the size S fits a 165cm tall guy with a size 29 waist and ALSO fits me (177m, 70kg and a size 33 waist). The material is a 220gsm nylon based lycra with 18% elastane.

Its absolutely perfect for fitting a wide range of body sizes and we complemented it with a detailed look at 10 key dimensions which make up the sizes, allowing us to fit 90% of cyclists.

Of course, there will be odd sized person who requires a larger or a small size. We are working very hard on sizing for these types of people and are close to perfecting them. It takes time to gather a variety of people, measure them, make prototypes and test.

Its also very expensive for a small company, so we chose to focus on 3 key sizes for now.
> -This is almost 30 days after the incident

What would have been the optimal response time? They fixed the immediate problem as fast as they could and gave a preliminary RCA, then they did a longer-term RCA and fix. I feel this shows maturity by not rushing to immediate
conclusions and trying to do a 5-Whys drill-down to fix the underlying cause. Furthermore, they also took steps to actually fix the problem by pointing out they moved the human out of the loop in one aspect and that's always a good thing (unless the replacement software is faulty itself of course).

Also, in response to the list, I believe [3&4] are actually the same thing, are they not? The operator was the one who made the 'decision' by accidentally ignoring the incremental config change policy that was in place and did it all at once. This was identified as a human error and they fixed it by enforcing incremental changes.
Hi Andrew,

That article's purpose is to introduce customers to our home base. It was in response to many enquiries asking if Singapore was in China - believe it or not!

No, we received absolutely no funding. RedWhite Apparel is entirely self funded by 2 passionate cyclists. Its a significant investment from our savings and I believe with our current focus on customers, quality and our tenacity, we will become as well known as the big guys.
It seems to me that, despite all the flexibility people demand, they only really want (and use) exactly three integer data-types in a language:

1. machine bit-string of size 8(2^n) bits (e.g. b/w/d/q fields) with no concept of being a signed/unsigned integer, but where you can apply both signed and unsigned integer operations to it in an optimized manner. Such code will be shimmed with sets of clever shifting ops if the target architecture doesn't actually have a storage type of that width, but you have to be explicit about what you'll allow (e.g. if an integer is of type "d|2w", then it will compile fine on a 16-bit architecture (and operate using shimmed ops), but fail to compile on an 8-bit architecture.

2. unsigned integer of fixed exactly-specified bitsize, which exactly matches the semantics of a having a value on a modular-arithmetic ring. You go up, it wraps around at 2^bitsize; you go down, it wraps back. This stays true even if the code is compiled on an architecture where the exactly-specified bitsize isn't a clean processor storage-width: a 27-bit ring on a 32-bit processor is A-OK, and shims will be inserted to enforce the semantics. Shims will also be inserted if you're targeting an ISA that doesn't have an integer type with wrapping semantics (e.g. the JVM.)

3. signed arbitrary-precision integer (i.e. optimal-machine-word-size-minus-a-tag-bit with bignum promotion checks). The optimizer might convert one of these to something of type #1 if it can be very, very sure of the value range you're operating within.

#1 is for doing pointer math in unsafe regions; #2 is for implementing cryptographic primitives; #3 is for everyone else.

(There's also a variant on #1—let's call it #1A—which is a fixed-size array of #1s you can repeat signed/unsigned integer transformations over, where this will generate optimized SIMD code. This would be the "buffer" type for wire protocol packing/unpacking, and also the backing store for non-sparse matrix ADTs, bloom filters, etc.)

The only place integer overflow raising an exception would make sense, to me, are if you want some sort of hybrid type between #1 and #3: a value that pretends to be arbitrary-precision, but in fact only has a constant-size bitstring to operate within. I could see the use of this in something like Cap'n Proto, where you're keeping wire-encoded integer bitstrings (#1s from a #1A) around and pretending they're fully-functional integers (#3) for the sake of zero-copy—but do you really gain that much by not letting a data structure be recreated resized on the stack, if you're not also throwing down optimizations like intrusive lists in fixed arenas?
Doubtful in this scenario that they would take it as far as to threaten physical violence. That would up the anty involving law enforcement if Sony were to call out their bluff.

The threat is most likely real.
Someone most probably already has...
It continues to baffle me that so many people are assigning substantial blame to Sony.

Yes, their executives were uncouth in their private e-mails. However, these e-mails were literally stolen from them and made available publicly in a campaign designed to embarrass them after they refused to cave to initial blackmail demands. There is no Pentagon Papers conspiracy here that the press needed to expose for the public good -- they're just airing dirty laundry and furthering the ends of criminals.

Yes, Sony had lax computer security and they made it a lot easier than it should have been to abscond with internal data. However, it is so much harder to protect against a targeted attack and (I don't believe) the method of the attack has been disclosed, if it is even completely understood yet. They should be ashamed and apologetic about their security practices, but that doesn't mean they as much as published this information themselves.

Yes, The Interview doesn't look particularly great, and I didn't plan to see it. Yet it should absolutely be allowed to exist and to be publicly released. It is a comedy. It is not "an act of war" as Sony's attackers claim. The existence of this film did not harm real people, that is entirely a result of the extreme overreaction by the people behind these attacks.

I absolutely think that Sony is being blamed for their victimization, and I don't agree with it. It would be terrible to be in their position, and I don't think any company who operates within the laws of their country should be subject to any of:

1. A loss of over $40 million
2. A smear campaign using their own stolen, private correspondence
3. Release or misuse of all manner of employee personal information, SSNs, etc.
4. And all of the other things they're dealing with right now

If you place value in free speech, privacy rights and the arts I don't see how you can side against Sony here. I don't care if it's "terrorism" or not, the people involved in these attacks are certainly criminals.
That's a non problem if you use a cryptographically sound hashing algorithm. If someone can find collisions to sha3, they can do a lot more damage than xss.
hi Hoopsim, we've made some tweaks :) It should load faster now
Are you currently working as a web developer? If you are, then you already know 70% of what needs to be done. You just need to go out and seek clients. If not, I highly recommend you build at least one website from scratch, if only to convince yourself that you can do it.

I don't know how vibrant the tech scene is in Pheonix - if it's big, then focus on meatspace marketing: print out a stack of contact cards, and start handing them out at meetups and networking sessions. Make sure people know that you're available for a job.

If Pheonix's tech scene isn't so great, fret not. Focus on online marketing: your Linkedin profile, portfolios, personal sites and such. Post your profile somewhere public: HN's monthly freelancer site has been good to me.

How much to charge? I don't know, start with $2000/project for a small project, just to dip your toes in the water. If it works out, continue to raise your rates until you stop getting new clients.

Don't worry about contracting and invoicing - for contracts I use Word, for invoices I use Excel. I can't comment on how freelance income is taxed in the US - you definitely should check on that.
This interviewee's criticism is not narrowly focused against Sony, but the entire reaction: theater chains, Sony, media, the American psyche, a "lose our shit" mentality.

It would take a wider cultural consensus to respond in solidarity: theaters don't cave, studios don't cave, moviegoers don't cave, media doesn't feed panics, the legal system doesn't require cowering as a liability issue. We're not there yet... but maybe we can get there, with discussion and experience.
"terrorist" seems to be the modern equivalent of "communist" during the cold war.
I'm sorry for this stefap2. We have made some tweaks and the site should load more quickly now. Take a look :)
The wealthy are getting wealthier. As for everyone else, no such luck.
Yahoo's decline