skysight-inc/HackerNews huggingface dataset:
The author presents a decent overview of some of the issues related to source code static analysis from a parsing perspective, but makes a pretty weak argument that parser generators are useless for the task.

Static analysis is a broad term, compilers generally do static analysis as part of many optimizations. Here I think the author is referring to static analysis used in areas such as program verification (ie security).

Usually if one is implementing an application to provide static analysis services, one would like to support as many languages as possible, broadening the accessible market.

Ultimately, such static analysis needs to end up with an abstract syntax tree (AST) that represents the program when machine code is emitted. This can be a very complex task for some languages:

1. C/C++ the source code should be preprocessed, with all includes resolved identically to the system being analyzed. Processing alters the source file from what the user sees, making relating error message to source location much more involved.

2. Templated source files ie php, asp, jsp, ... the templated text has no relavance to the meaning of the program.

There are two problems the author states with parser generators that I agree with:

1. Lack of facilities to relate parsing error messages to relevant offsets in the source file. Users expect relevant error messages.

2. The curiosity that the most current language parsers are implemented in that language (C# Rosalyn, Java comiler api). Antlr is the exception among parser generators in that there is a large corpus of grammars for a variety of languages. Usually they're out of date with the latest language spec (C#). I think lack of grammars is the criticism here.
From the same page:

(And yes, I know Gadgetopia’s URLs are somewhat lame in this regard. There are reasons why I did it, but changing it now - See more at: http://gadgetopia.com/post/6346#.dpuf)
Hi, I'm getting the following error using Opera 12.17.

Unable to complete secure transaction
Secure connection: fatal error (40) from server.
I understand the design of this question (edit: an perhaps the whole exercise) as making a tradeoff between providing an opportunity for two average persons to bond strongly and being appropriate for everybody in favor of the former. The average person's most terrible memory, I would wager, is something easier to share in a way that encourages intimacy, namely losing loved ones, injury and personal failure.
> There are a handful of good alternatives. Use one. Use multiple.

For search at least, unfortunately, the alternatives are pretty questionable. I've been using DuckDuckGo experimentally for a few months now, which is mostly Bing as the backend, with some DDG-specific add-ons and tweaks. I find myself having to use the !g command to rerun the search in Google somewhere around 40% of the time. Some of this is site owners causing the problem: a surprising number of sites block all crawlers in robots.txt, but then whitelist Googlebot and only Googlebot. But even leaving aside those sites, DDG seems to miss a lot of results, and the quality of the first-page results, at least for how I search, is consistently lower.

If you try searching in a language other than English the differences are even larger. I suspect that's because some of the infrastructure and datasets used for Google Translate are also used by search in some form, while Bing doesn't have a similarly solid multilingual stack.

I'd like to see more competition in search, but the barrier to entry to produce a good full-web search engine seems quite high.
Could you explain to me why it's a problem or should be illegal? I don't know enough about the topic to understand your surprise that it's legal.
Thats life. To clarify: this is NOT about a GitHub lead developer.
Well... In some extraordinary cases, shorting is the right thing to do.

http://www.eetimes.com/author.asp?section_id=4&doc_id=128389...

But, still, you need someone who understands what't being done.
This is a pretty good explanation of why almost all practical applications of NLP are now accomplished by statistics rather than fancy linguistic grammar models you might have read about in a Chomsky book.

Old school NLP has always fascinated me though, and I'm pretty excited about what might be possible in the future by using more than purely statistical methods for accomplishing NLP tasks. Maybe the author could have speculated more wildly in his prognostication ;)
Leak or ad? ;)
Agree with you. For me it's crucial to get results as fast as possible and I found this approach is the most satisfying and productive. The problem with C++ (unlike python, for example) that it is really hard to experiment with the language: you change one minor detail of the code, and you have to rewrite big chunk of the program eventually. That's why I first want to get results and then read how it works.

By the way, could you briefly describe RP approach?
Supervised Learning for Document Classification with Scikit-Learn
Show HN: PublicKey.js – Easy keyserver searching
Cool Giveaway for Startup Entrepreneurs Worth $1600 :)
hey guys,
We are running a super cool giveaway valued at $1600 to help you get your million dollar idea off the ground for 2015!

The prize pack is valued at over $1600 and includes:

OneMonth course on Growth Hacking – A step-by-step guide on how to start a business and rapidly grow and scale your business in one month – $900 RRP

6 Month subscription to Landing Page builder, Unbounce – $600 RRP

36 month subscription to the Foundr Magazine – $175 RRP

If this is of interest please enter here - http://foundrmag.com/giveaways/foundr-magazine-epic-give-away/
Author here - slightly overwhelmed by the response, but thanks for everyone's feedback! I never thought so many people would be as interested as I am in the lamp...
Updated the title to be avoid confusion.
Better journalists, or just critical thinkers, too.

This person drank a bit too much of the valley kool-aid already, it seems.
I applause the effort, but anti-surveillance device is not possible unless we have truly open hardware. There's more than enough space for backdoors in baseband alone, I'm not even talking about modern MCUs that power tablets, smartphones etc. and run closed firmware on multiple levels. I hope one day to see a strong open hardware movement, so we can be the real owners of our devices.
Q: Is Palantir a front for the CIA?

A: No, the CIA is a front for Palantir.

- Peter Thiel
Yeah, and this person supposedly believing in "merit" wants you to buy into his vision based on fluff and hype.
"ie. my Mom and a dozen bots" in the graph is priceless.
That's a slightly old version of Opera. If I could install it now I would test, but hard to find it on package managers.
What a so-called “Patent Troll” has to say
Why I am not Charlie
You're implying that they should give up their competitive edge over the market so that they can help the world "tackle local and global problems around the planet". That sounds like you're saying they should give to charity and/or forfeit profit for some noble good.

And yes, it's an attitude/opinion though it sounds like you're just nitpicking words. I'm not the OP you responded to, but it's clear your attitude/opinion towards this topic is that this software should be given away for free, with the sole reason for that being that it would "[do] more good".

They invented it, they didn't steal it (presumably), and they're choosing to use that product of their intellect in a way that makes them profit. Heck, you could argue that they're already doing good by making it available to law-enforcers while still profiting. In which case your entire point is that they're not doing enough good according to your opinion.
Ask HN: E-commerce packaging, how much do you care? Customer/merchant
As a customer C and/or merchant M, what packaging do you like the most? Have you read some studies about packaging what customers like or if they even care? The design - shelf appeal (glossy, matte, minimalistic, colorful,..), function over form (universal,..), sounds good (pop, click, snap, effectivness), magic-touch-feel, eco-friendly etc.

As a merchant how do you pack your goods, what design etc you got.

As a customer what did you like the most?
Homosexuals are child abusers http://armedndangerous.blogspot.co.uk/2002_06_16_armedndange...
R&D Engineer Computer Vision / Blippar / Amsterdam, NL
(https://layar.workable.com/j/0A73FE978C)

We are now seeking a computer vision engineer to join our R&D team who can help bringing our technology to the next level. You will be part of a strong R&D team that builds some of the core technologies that integrate in the app and our backends, using modern C++ to achieve the best performance.

Blippar is continuously improving its Augmented Reality and image recognition technologies. You will be researching as well as implementing the latest technologies in the fields of image retrieval and recognition, natural feature tracking, SLAM, and feature-based 3D reconstruction. You will be reporting to the Computer Vision Team Lead, joining a small team of enthusiastic developers that are stretching mobile and server-side technologies to the limits of the available device capabilities. You will:

- research and implement the latest real-time computer vision algorithms in the areas of natural feature tracking, SLAM, object detection, image retrieval and image recognition
- improve performance and extend the capabilities of our products
- work closely with the other R&D engineers
- architect, extend and maintain a shared codebase used in our mobile clients or server-side in our backends

As computer vision R&D engineer, we expect you to have MSc or preferably PhD level academic experience in computer vision and machine learning, as well as a proven track record of practical experience in areas such as natural feature tracking, multi-view geometry, 3D reconstruction, object detection and image retrieval and recognition.

In addition to a great academic track record, we also require you to have outstanding programming capabilities. You will be working on and extending our well architected and cleanly implemented computer vision codebase, which serves as a technical foundation for our products. You will be responsible for maintaining the high level of quality of our codebase.
Is JavaScript getting worse?
Many otherwise intelligent people deal with this nonsense every day, and yet won't buy a Mac because they are "too expensive".
This feels like an online version of rubber necking
See here: http://www.opera.com/download/guide/?custom=yes
Glassdoor might give you a good idea!
Have you registered your site with Google webmaster tools (https://www.google.com/webmasters/tools/)?

That would be a good first step for seeing if Google are having specific trouble with anything on your site
What happens to the project in this kind of case? Can someone else take it over?
This is a hard thing to debug from outside the Googleplex, but you are currently serving a canonical tag:

<link rel="canonical" href="http://blog.mavnn.co.uk/type-providers-from-the-ground-up">

for a URL which cannot possibly return an HTTP 200. (It 301s to a URL with a / on the end.)

This combination could cause Google to conclude that you have no page which requires inclusion in their main index.
Hej!

I'm in my fourth year now as a ruby developer. I make 34000 SEK/month.
Identity diversification for optimal performance
Paris attacks: France to deploy 10,000 troops
Why should you use R to analyze your game performance?
I've always wondered why a feature with so much benefits and such low implementation overhead has not been implemented a long time ago.
400 000 - 450 000 SEK /y
If I recall correctly the issue with ios xmpp clients is that you cannot run them in the background.

Why isn't this a problem for Android or Windows phone?
The comparison is only rough, but the discussion below the post is insightful.
Agreed, although I respect Appelbaum very much for his work on TOR. His time and knowledge would be more effectively spent on TOR, while letting the people with Replicant, Osmocom, OpenMoko, and hardware hackers who know what they're doing focus on freeing telephones.
Version 12.17 isn't there. Any idea why?
Just don't forget about the fact that OpenSSH depends on OpenBSD (as a project).
That's a frequent argument: "it's no point being secure if you can't be 100% secure". Being a little more secure still has value.

You can even disable the gsm function in the phone and use it as a wifi voip device with a VPN you control in between.
Must-have? Hardly. It's much easier to run `du -sm | sort -n', both of which are already installed everywhere along with coreutils.
I'm not really sure what the benefit of this is over simply doing:

flock -n $lockfile -c "command here"

You can put the flock command into your crontab or spinup script.
RDMA Transfer with the Isis2 Cloud Computing Library
Indeed, need to update that theme.. Glad the reader view is there.
What's New in CPUs Since the 80s and How Does It Affect Programmers?
I have yes, no mention of any issues from the tools (it even claims to like the sitemap).
Ninjhax
How LEGO became the Apple of toys
And how much you take home?
And how much is the average rent?
12.17 was just a security update (Heartbleed), and Linux/Mac were not affected, so 12.16 is the same for them.
Sweden has a tradition of equality that is very strong: salaries are very closely tight, so most engineer positions would fall within 35-40k Kr/m.
the thing I never got is why is having the Google account an issue if you never use their apps?
Interesting; that's autogenerated by Octopress (or Jakyll). I'd never noticed it's missing the '/'.
I think it's a very bad idea to use this service. Your secret key should never be shared with a 3rd party.

Using an untrusted 3rd party service to generate a public/private key pair is like asking a thief to sell you a new door lock.
At that range, expect 30% tax; rent is about 8k-10k/m. That and transport could total to half of your non-tax budget.
Is it irony or something else that a system of supposed vast computing power and learning (and certain real world power via its distribution of search riches) is broken by a tiny thing like this fix for a missing slash ?
I have not run i2p or otherwise paid much attention to the project for more than a year, but I did notice it had a remote code execution vulnerability discovered last summer or so (stemming from its default-on web admin interface: http://blog.exodusintel.com/2014/07/23/silverbullets_and_fai...). Just because of that I would not consider it an alternative to Tor. However it's not true that "nobody uses i2p". The network is somewhat lively. Another thing is that relay mode is the norm rather than the exception (unlike with Tor), meaning your relay going down can be correlated with your i2p torrent client going down etc.

I'd look to GNUnet (https://gnunet.org/) as the future. It is more than just a Tor alternative, since it also has non-realtime features. Unfortunately it also has few or no users. A neat feature for any aspiring network would be capability to run over Tor, so you don't start with an empty anonymity set.
Anything between 400000 - 450000 sek per year is reasonable for that level of experience.
Why I tweeted Muhammad cartoon
Sorry but no. This makes your private key compromised by default...

The most important rule of public key encryption is... Never (really!) let anybody else handle your private key...

And why should I trust some random website for not storing an extra copy? The keys are definitely not "... as secure as if you have generated them by yourself. ". Because, if I generate them, I know that my box is the only one that had ever touched it...
I like `let`. It means you have to be implicit and actually be aware of what you're doing.
I'm sorry, but I really see no point in this article.

Do you realize that if the optional arguments were not included in Function#length, you'd just be saying "They are not reflected in the function’s length property. C'mon, man" instead ?

Also, I don't understand Whoop-dee-freakin’-doo.
Someone did take it over. Not sure how github handles that, however. see: http://screenfreeze.net/2015/01/
The problem is slippery though, people always reuse words to express different ideas :

"We can't buy any bread because we haven't got any bread."

And it's not just English. In Chinese one is taught that "ni hao ma?" is the greeting equivalent to "hello, how are you" but try it on a Chinese person and it amuses them. My Chinese friend at Uni says that Chinese people use "Ni chi ma?" which is literally "have you eaten?" (although we both appreciate that is a bit of a generalisation for 1bn people).
Big-data consulting services for secret services and oil companies... mhhhmmm.
I don't find this bizarre, rare or unusual. If you've been online long enough (forums, irc, etc) chances are some people who you've interacted/worked with, have passed away.

I can count up to 5 of these cases. Car accidents, cancer, etc... As someone said, c'est la vie
I agree, this service should never be used for any serious real-life usage. But this is a _vanity_ key service, and there are legitimate uses for such keys where no harm can be done.

I'm mainly interested in raising awareness to GnuPG and get more people using it - I also organize CryptoParties [1] in my area, exactly for this purpose.

[1] - https://cryptoparty.in/
What are best investment options for a bachelor India?
> We use various heuristics to determine what 'interesting' keys are, they are priced roughly by their uniqueness probability.

I was wondering how exactly are the keys priced.
Not sure how startup salaries are related to other salaries, and there may be other benefits involved there. 40k/mo would be considered "good", and 30k/mo would be considered "not good".
Indeed. It is the internet where everybody can write about something, even if he/she is (mostly) wrong. And posting it on HN or Reddit does not make it a better blog entry.
The changes that are currently being done in Rust for 1.0 are those kinds of breaking changes. Many things that are being changed have been in a state of semi-decay from old experiments, and old features of the language.

As an example, the IO subsystem had lots of generality designed for when lightweight tasks were still a feature. By ripping them out, the library is both easier to use, and simpler for future expansion. It was also changed to support the general error-handling facilities that Rust now has (which are partly similar to the old IO-specific error handling features, but wouldn't work well with other libraries).

Others like the collection-api cleanup were badly needed, because of inconsistency and a lack of direction over time. Now the collection-api is much cleaner, and consistent between different types of collections. This allows them to add things like collection-api traits in the future, and newer collections that can follow the same api conventions
Thanks for the feedback, I totally agree, and see my comment below. I'll definitely make this more noticeable on the page.
So called "Do no evil".
With an income of 37,500 SEK/month (salaries in Sweden are generally discussed as a monthly number, not yearly) in Stockholm, you're going to be paying around 25% in income tax (according to http://www.ekonomifakta.se/Fakta/Skatter/Rakna-pa-dina-skatt... which is a calculator).

Average rent is very very hard to answer, it will depend on a bunch of factors such as location, building age, the exact form of contract, and so on. Getting a "pure" rental apartment is very very difficult, the required queue times to get one in central Stockholm are silly.

This list http://www.hemhyra.se/stockholm/stockholms-dyraste-och-billi... (in Swedish, but it's mostly street names and prices) show values between 320 and 1,745 SEK/m^2/year. Homes in Sweden are always specified using the exact floor area in square meters.
It's not too hard to figure out yourself :) The heuristics are very simple at this point.
Sorry for the OT.

> The good cars (and jobs) sell and sell quickly, while the bad cars (and jobs) stay on the market—so the market becomes saturated with bad cars/jobs, and the actual good cars/jobs become so rare that people invest more in pursuing them than they're worth, creating a sort of dollar-auction market failure.

This, at least in my experience, is exactly what happens with musicians seeking bands.
A good parallel is an escape velocity.

But in practical terms in the here and now it is a nonsense. Life expectancy has been going up 1 year in every ten for a hundred years, and the pace of that increase has not increased.
MyTomatoes, great pomodoro technique web-app, down due to server cost
Perhaps, because China doesn't have "enterprise" sweatshop industry and "Java mass hysteria" and Golang is, well, actually good enough?
Most of the comments are missing what to me is the main point, which to me can be boiled down to:

-----

1. Early in your career, gaining knowledge, skills and proof of same can be more important than immediate income.

2. Doing something for which you're "underqualified" is commonly a fast way to learn (and to prove that you've learned).

3. Start-ups are relatively likely to pay you to do something for which you're underqualified.
Love sshuttle, sadly it stopped working on OS X some time ago when apple moved from ipfw to pf.

I hope someone is able to crank out a version that used pf soon.
This is one of the few posts about javascript that I've encountered that sees hoisting as a good thing. I like `let`.
"They are not reflected in the function’s length property" is exactly what the article does say.

Whoop-dee-freakin’-doo

http://en.wiktionary.org/wiki/whoop-de-doo
http://en.wikipedia.org/wiki/Tmesis
If you have a machine with SSH access and git, you can always use git+ssh as a cheap remoting solution... it works pretty well, but usability isn't quite as nice as with github/gitlab etc... If you're one person, it's probably good enough though.
"there are legitimate uses for such keys" - not for crypto
"Given enough eyeballs, all bugs are shallow." -Eric S Raymond

"My favorite part of the "many eyes" argument is how few bugs were found by the two eyes of Eric (the originator of the statement). All the many eyes are apparently attached to a lot of hands that type lots of words about many eyes, and never actually audit code." -Theo De Raadt

The little experience Raymond DOES have auditing code has been a total fiasco and embarrassing failure, since his understanding of the code was incompetent and deeply tainted by his preconceived political ideology and conspiracy theories about global warming, which was his only motivation for auditing the code in the first place. His sole quest was to discredit the scientists who warned about global warming. The code he found and highlighted was actually COMMENTED OUT, and he never addressed the fact that the scientists were vindicated.

http://rationalwiki.org/wiki/Eric_S._Raymond

>During the Climategate fiasco, Raymond's ability to read other peoples' source code (or at least his honesty about it) was called into question when he was caught quote-mining analysis software written by the CRU researchers, presenting a commented-out section of source code used for analyzing counterfactuals as evidence of deliberate data manipulation. When confronted with the fact that scientists as a general rule are scrupulously honest, Raymond claimed it was a case of an "error cascade," a concept that makes sense in computer science and other places where all data goes through a single potential failure point, but in areas where outside data and multiple lines of evidence are used for verification, doesn't entirely make sense. (He was curiously silent when all the researchers involved were exonerated of scientific misconduct.)
How do you feel about asking for over $10.000 (I'm bad at counting) for generated keys while GPG is desperately looking for donors? How do you feel about the ethics of your project in general? It looks a lot like domain parking to me.