skysight-inc/HackerNews huggingface dataset:
Let me assure you that this is true regardless of language or platform.

I've done vulnerability analysis on codebases written in C++, Java, C#, Objective C, Ruby, and Python. I've found bugs in each of these platforms. The biggest differentiator I found was experience. More experienced software developers, on average, made fewer bugs resulting in vulnerabilities than less experienced software developers.

There is no magic language or platform that makes writing secure software easy. There are tools, techniques, and training that can help. But, these can only help. Writing quality software -- of which security is an important part -- is a difficult process that requires a lot of experience and discipline.
I'd say you're doing pretty well then ;-) but point taken.
Digitalocean vs. AWS EC2 IO performance benchmark 2015
read a new benchmark of digital ocean, looks like the CPU performance is not good
And in all of that training discipline is a small part? Who is the bullshitter now?
It's not true. According to the EIA, 11% of global energy consumption went to residential uses in 2007:

http://www.eia.gov/forecasts/archive/ieo07/enduse.html

So it would be difficult for residential heating to be more than 10% of total consumption.
>People take on the ideas to which they're exposed.

Children take on ideas to which they are exposed, adults evaluate ideas before accepting them. Suppressing opposing viewpoints is therefore treating me like a child.
> We have a way of dealing with abuse.

What is it? I mean, technically so does Twitter, but you see bad stuff on there all the time.
Pardon my possible ignorance, but shouldn't all water consumed in the process be recycled when the cows + humans urinate? Water doesn't just disappear.
Chapulines[1], a form of fried grasshopper, are already a popular dish in Oaxaca. I've had them, they're tasty, a bit like salty, earthy, not very meaty crab I guess. In fact, there's already a cricket bar based off of this dish[2]. Americans in general are pretty squeamish about their food, but this is not true in many other parts of the world. See tripe, chocolate meat (dinuguan), balut, etc.

1 http://en.wikipedia.org/wiki/Chapulines
2 http://chapul.com/
> along with an invasion of a country thousands of miles from home

The U.S. didn't invade Iraq as a response to terrorism. They invaded Iraq because of the threat of "Weapons of Mass Destruction". Many people just assumed Iraq was behind 9/11 simply because the government wanted to invade them after 9/11, and the government did little to dispel that mistaken notion. And we all found out that Iraq having "Weapons of Mass Destruction" in the first place was a mistaken notion as well.
I have used WAMP 1.0 for a few projects and converted some Play framework code to pure Java EE7 code. However I haven't used it in any of my recent projects because of support, I like losing the HTTP header, saves a fair bit of traffic.
"Clicking a demo will automatically load and execute it, and will also remove this welcome window." <-- I clicked on "small stack of shaders" and I'm not sure what I should be getting but I see the code and that's it.

I clicked on the audio demo and nothing happened. I selected all the text and pressed control + return (mac) and it flashed red and said it loaded a sample but I heard nothing.

I'm on Chrome 39 on Mac OS X (Yosemite)
My assembly classes at undergrad had a final project consisting of writting a tetris clone in x86 assembly. Shortly after the deadline, my program had a bug that made pieces fall up, instead of down, and I was completely unable to find it's cause...

In the end, I just rewrote the score checker to verify the top of the game, instead of the bottom, and delivered a game where pieces felt down. Everybody not just noticed, but I had a line of people wanting to play it.
I'd expect to see at least a scattered amount of online PSYOP from military organizations in Israel or the United States[0] or many other countries. It would be wise to keep the following in mind before deciding which ones should change how they're doing it:

- Every one of these organizations is in some secret or not-so-secret budget under "psychological operations." In one form or another this has been considered a normal part of warfare since Sun Tzu.

- Every one of these organizations would say that "criticizing our country online means attacking its reputation" and that "we are defending our country by posting counter-arguments."

- Serious long-term damage happens to any PSYOP group that habitually spreads false information. The fact that the people at many of these organizations certainly know this does not mean that they would never spread false information, just that doing so would make them very bad at their jobs.

[0] http://digitalcommons.kennesaw.edu/cgi/viewcontent.cgi?artic...
This hiring process is great, but requires lots of time, for the applicants and especially for the hiring manager - I suspect the author was targeting unemployed people, so they would have time for this long application (he put his job advert on the New York Times). To be honest, that is what surprised me the most in this article: that someone who runs a statistical arbitrage desk has the time for all of this.

I wonder if companies could collaborate to create this hiring process. It would save hiring manager's time, applicants' time since one application will count for different jobs, and then a system could be set for candidates to rank their employees, then the candidate who performs the best get his first wish, the second candidate gets is first wish if there is still room, otherwise he gets his second wish, and so on - a similar system is being used in France for students to chose in which universities they want to go after competitive exam entrance, basically lots of universities pool exams together.

On one hand it would scale hiring process, on the other hand it's not flexible and offers have to be transparent (it's currently not the case but maybe that would be a good thing), and it would hurt the pride of companies who are ranked in the last position.

In the case of the article, I am sure someone who is able to solve in a language he recently learn the non trivial software that are mentioned will be able to land a job at some point. It was written in 2004, maybe Github, Stackoverflow and Open Source in general are now contributing to that selection.
I learned something from this. I'm saving this snippet of advice for future reference.
I absolutely love it! Do you have any more? Do you care about reuse?
The worst is when you have to go through one of those interviews with some smug hoser across from you whose face is contorted into a rictus grin because you couldn't recall, immediately from memory, some obscure Junior Year Computer Science thing. It's just amazing how bad the hiring situation is - It makes me a lot less likely to look around because I just don't want to go through that.
It is true that TLS is part of the problem. But, it is also a widely deployed standard that cannot be changed overnight. That's why LibreSSL is necessary.

We need to build simpler protocols that make better use of cryptographic primitives, but first, we have to push back the tide. Eventually, TLS will be superseded by a better standard. But, this is something that even if started today with the most aggressive schedule would take 5 to 10 years to go industry-wide.
Complying with the new VATMOSS regulations
http://www.lyquidity.com/wpstore/
We've developed a WordPress adding which ensures compliance for the new VAT regulations. Even better, it's a one off cost of £59 so not paying a percentage of your sales. There's instructional videos here http://youtu.be/e9eLVo9WMiw
Yeah it's a jerk move.

Think what would have happened if he hadn't added the alloc. The team would have been in the same situation, would have busted their guts, got it down under budget and slapped themselves on the back. They might have got it down earlier too: who knows how many person hours got wasted on the last 384K of savings that were never needed.

Think what could have happened with the alloc: the team is hovering around 3-4MB above budget and running out of ideas, with major efforts shedding only a few tens of KB each. They agree they might manage to cut 1-2Mb with a herculean effort, but 4? No way. So with the deadlines approaching decisions are made to cut some feature or content to avoid failing TRCs or missing contracted delivery dates.

If you have to get it down under target or cut something else, then I can't think of a single situation in which having an artificially low goal will help you.

At the very least, the fact that the team thought this guy somehow helped them ship rather than adding to their problems and lauding it over the actual engineers who'd bust their ass to make the savings, is a huge jerk move.
I've read literally nothing about perl 6 but what David Skoll wrote here: http://david.skoll.ca/blog/2010-07-29-perl-sss.html

Quote:

"I asked on a forum what the goals are for relative size and speed of Perl 6 vs. Perl 5, and a Perl 6 developer responded that a reasonable goal would be to have Perl 6 be twice as big as Perl 5 and take twice as long to start up.

"To achieve this goal, the Perl 6 developers will have to shrink the program size by a factor of 6.1 (that is, get rid of about 84% of the code.) They'll need to reduce startup memory consumption by a factor of 13.7 (that is, cut out 93.7% of their memory use) and reduce startup time by a factor of over 275.

"Oh, and this is after they add in all the missing features required to bring Perl 6 up to production-level."

Has the situation gotten better since 2010?
> Always explain rationale around the No, to help them improve

This is my inclination: "We liked your attitude, you seem intelligent, and well-spoken, but we have concerns about your knowledge of <some key area>, maybe start contributing to <open source project> or experiment in <technology> and reapply in a year or two."

...my concern is opening up my company for legal liabilities. Am I just being paranoid?
Looppay – A new take on mobile payments using Magnetic Secure Transmission
Having read the entire article, I'm a little confused.

He says it's one of his favorite questions to both ask and be asked, but when VCs ask it, it is sparked by their ego with the intent of putting them down. But when he asks the question himself, he doesn't claim to do it with the same bad intentions.

Seems overly negative towards VCs to acknowledge that they ask a really great question, but do it with the intent of making founders feel like crap.
If you google the stat, it seems to be a little more plausible: 47% for heating and cooling. it is not obvious that global warming would be a net savings of energy: much of the world is already very warm and relies heavily on air conditioning.
Actually, I don't plead for maximal decentralization. This article is in response to those who argue that BitShares is more centralized than other systems.
Sign up for Jet Insider: Earn a free 6-month membership

Be in our Top 100,000: Earn early access to our site

Be in our Top 10,000: Earn a free 1-year membership

Be in our Top 1,000: Earn a free 5-year membership

Be in our Top 100: Earn a free lifetime membership

Be in our Top 10: Earn 10,000 shares of Jet stock

Be the No. 1 Insider: Earn 100,000 shares of Jet stock
That's what I saw when I spot checked it. Explained both pseudo selector and content prevalence.
Edward Snowden on Cyber Warfare
Demos working for me. Chrome 40 on 10.9.5
I second this concern. The problem isn't the free work aspect of things - I don't mind working on things for free that I enjoy - it's the finite nature of time. I, and probably most good engineers, don't have this amount of time to spend on things such as this for a hiring that will probably not happen.
hahaha, man, I hope he joined that boxing gym like I suggested last month. Get the bad blood out, man. It's good for you.
You can be 'hard on terror' and mostly ineffective whilst making life of non-terrorists more miserable all across the board.
I sometimes consult to clients on improving their hiring process. Candidate experience is now a topic that at least some companies consider.

This isn't your typical candidate experience - applying for a vague job ad, being asked to answer 6 puzzle questions, invite to an open house, two days of free training and then left alone for three weeks, followed by a vote by the tribe to see who will get the job.

It's definitely a plus that many of the students were hired elsewhere, but this is likely a method that would only appeal to the unemployed. I hear quite a bit of negative feelings towards companies that ask for extensive amounts of time commitment during the hiring process, and this is probably the highest level I remember.

If most companies asked candidates to go through this process, I expect they would want (and feel entitled to) some explanation at the end of the process.
Because there is no conceivable way to feed the world on pasture animals. There just aren't enough resources.
> What about the great candidate that you couldn't hire because you only have X positions?

Life's tough all over, you know?

I mean, if you know of an opening they would be good for off the top of your head, sure, go ahead and refer them. But you're not obligated to go find them that opening.
"Internal Server Error"

maybe you should have hired that website guy
5 Stupid-Easy Ways to Get Press on Your Startup
I don't think maximum decentralization is what the author is pleading for. To the contrary in a different article he does in depth about how his alternative consensus protocol specifically limits the number of distinct block validators because of the marginal utility of each additional validator vs the linear increase in cost, and the consequences this has on speed and scalability:

http://bytemaster.bitshares.org/article/2015/01/07/The-Most-...
I'm not really interested in leasing, but that was a surprisingly interesting comparison that seemed to go into enough detail about both.

I did have some unanswered questions, but they link to a site comparing the actual financials of it which will answer many of them.

I still don't know if I am sold on leasing, and I still have a question about what happens if you got into a "serious" accident and wrote your leased car off?

In a traditional buy/loan car your insurance pays like 80% of the remaining on the loan (roughly). On a lease I have no idea how that would work.
I usually store things as aliases...and while sometimes I don't end up using the alias exactly having a useful name that describes what it does helps me tailor the command later on. For example I have the following alias 'watch_port' that looks like this:

sudo ngrep -W byline -d en6 -qilw 'get|post' tcp dst port

so `watchport 8080` will print all network traffic over port 8080 on my ethernet. I actually rarely use this as 'watch_port' directly, but it helps me remember quickly how to bend ngrep to my needs.
>But he also got about 30 people to spend four weeks building trading software for him.

I don't think he did. He got 13 people to work on problems for 3 weeks. (I assume the rest of the 30 bailed at some point).

They also weren't obligated to stick around (though it turned out valuable to them as well). And they picked up a new skill (APL programming). They also asked for it: "Twenty-seven of the applicants suggested I teach them all first and then make a hiring decision."
I completely agree. I would include supporting open source projects as another way to practice sustainable development. Many kinds of personalities wilt in corporate environments that could work (for relatively cheap wages) on open source projects that benefit everyone.
Please point to the CVEs for the plethora of remote code execution bugs in apps written in Java and C#, for instance.

I went through every single security bulletin MS published over the past couple years. The vast majority of the serious ones were 100% due to memory safety issues. The biggest exception was due to trying to sandbox arbitrary code (their .NET equivalent to Java applets).

If you have some counter-evidence, showing C to be even remotely as safe as, say, Java, please step forward. If you are actually saying "Well I found a lot of SQL injection bugs in code written in Java", that's a different issue. And I'm sure you're aware of it.

There's probably a name for the use of rhetoric of the form "Nothing's perfect. Therefore X and Y are just as good, since they are both imperfect."
That's an interesting story. Did you have experience writing firmwares and drivers in C before joining that startup? Did they ask you about it or it came on the spot? I am quite curious.
A fair and informative comparison.
I think you'd be surprised. I have family in Paris who have steadily become more and more reactionary as the FN (the French far-right) have been given more exposure, even before these attacks.

And it's not an "opposing viewpoint" to me, it's just completely harmful. In my opinion, things like being against gay marriage, or being racist are objectively wrong and not things that are up for debate.
If you're that worried why not cut it short to "We liked your attitude, you seem intelligent, and well-spoken, but we have concerns about your knowledge of <some key area>." There can't be any risk there, surely?
I've never had any issues in years and years.

I guess as long as you're being positive about it, and try to reinforce the shortcomings versus the positives it ends up being a good conversation. Always do it over the phone, email doesn't cut it.
Insert in order.
StartupBlink Maps Startups and Accelerators Worldwide
Based on what you wrote, you're probably being paranoid. I deliver lots of 'No' answers as well, and I don't see any issues with what you wrote. Legal liability tends to be around the generic responses where candidates may assume the worst (race, gender/orientation, age, etc.). A specific response that points to a lack of experience in a certain area seems a safer bet than 'not a fit' in most cases.
>Always explain rationale around the No, to help them improve

Many recruiters don't do this for legal reasons. Anti-discrimination laws make it very risky for companies to explain their hiring rationale, even if it's perfectly reasonable. It would be too expensive to have the lawyers check over every rejection.
Well, we don't need to given these ideas a platform, sure. But I'm convinced that reasonable arguments and education are our best bet. Trying to completely suppress problematic ideas only makes them more appealing, because the question arises why they are suppressed.
This happened at my last company. It does in fact open you up to legal liabilities. The company had to settle 18 cases where applicants "disagreed" with the reason of their rejection.
Ask HN: What information around commits and code would be useful?
At tenXer we are working on tools to help development managers and developers identify software development problems and improve skills. We have been focused on getting information from project management tools to date but are now ready to look at commit level data from git.

When I say commit level data, I am referring to things like identifying if someone is thrashing on a piece of code (writing a lot of lines and rewriting them right away), identifying commits that have touched really old code (probably want to check for regression defects), identifying huge pull requests (hard to review), etc. Here are a couple samples -> http://cl.ly/image/1e1d2b0a0f0m http://cl.ly/image/0F2X2u1A3R2w

I was wondering if people had other thoughts around what might be useful information to extract. What might you want to know about your team based on their git activity?

Thanks!
> When you hire for a person, you find that personality traits are much more important than what an applicant has done in the past, including passion, drive, etc.

For early- to mid-career developers, definitely. But I wouldn't hire a fixer-upper architect (or systems specialist) then turn him loose on business-critical parts of my system. That's not to say you can't hire an architect for her big upside, but you'd want someone to collaborate on important decisions until she's proven herself capable and trustworthy.
Depends on the level of intolerance. If some are intolerant of my existence itself, do I have option to tolerate them?
On the one hand, this is really cool. On the other, I'm always sad to see projects like this which seem to follow Perl 4 Best Practices type design. By this, I mean ...

* No strict or warnings

* Calling subs with "&foo" syntax

* Globals, globals everywhere

It's cool that Perl just lets you whip things up with so little ceremony, but it's always nice when people write nice code, in any language.
Discipline is only a small part of the answer and IMO the wrong place to start with, especially for people who have never had good fitness habits.

What's more important is finding activities that are naturally motivating and fun to do. These habits are far easier to build when they are more rewarding.

And then you naturally build discipline because the cost of missing out becomes more expensive to you.
Thanks. We have a point system implemented - it is somewhat similar to what reddit has, but less aggressive (or rather community tends to be a lot less aggressive). There is an added twist. Any member can give a 'black card' to a comment or publication they feel is either abusive or inappropriate. It costs points to give one, but takes away a lot of the points from the receiver. These points impact visibility of publications, making them a valuable commodity. We can then also review the posts receiving a lot of black cards or members who tend to give a lot of them. The idea is to give all the power of moderation to the user base and only get involved in the most obvious cases. I must say - so far that black card tool has not really been used.
Asker of the StackOverflow question here! (And payer of the 500-point bounty to the author of HiScore, which I think is brilliant!) I'm excited about this for the potential applications for personal (or startup) goal tracking, like turning a bunch of constituent numbers into a single metric for how well you're doing.
Feedback is extremely important. So important, in fact, that you shouldn't rely on _deeply_ compromised sources for it.

People who have just rejected you will never be reliable sources for feedback (on average). That's what friends, confidants, and inside sources are for.
Do Inuits have any particular respiratory problems from living in the cold?
That's one way to put it. Often nobody has anything that would be playable in a full ring game. The button is paramount, almost like having the serve in tennis.

Also, HU LHE is (much) more complicated than full ring. You have less knowledge about your opponents range, not more. You have to play more hands, a wider range of hands, and you frequently need to make marginal decisions.
I bought a fake Apple Watch for $27 at CES
I work in Australia, not in the US. I don't know the intrinsic legal differences here, but I do know a few things about my local market.

I feel really strongly about trying to help people improve, and it's really challenging to do that if you can't bring up the reasons for rejection. If you're being dicky about it "You're not good enough in memory management", that instantly makes people defensive.

If you're trying to help them forward and give them useful tips for improving their portfolio and skillset, the conversation is almost exclusively positive and 9/10 times I get a thank you very much in the end.