skysight-inc/HackerNews huggingface dataset:
Heartbleed isn't a memory safety issue though, which is what kicked this off. You're right in your original reply to me that if you want to go reuse buffers with leftover data, you can do that in any language. If you want to create a byte array in Java, fill it with private key material, then reuse the same byte array for an output buffer... what can stop that?

But more to my point: in C, I could end up executing arbitrary code by misparsing a network packet. In Rust, the worst I'll do is parse it wrong send invalid data onwards. That's just a massive reduction in scope.

I suppose if you have a tool that writes to arbitrary, attacker-supplied file locations, that could have a severe impact. Or it could pass an attacker-controlled value to the shell without escaping.

But things like the cpio[1] bug mentioned in the lessopen issue. Or the numerous compression libraries that require trusted inputs. Image manipulation code. And on and on. How many of them become simple crashes with a memory safe language? Cause from my unscientific (and flawed as this entire article is about) review, it seems like the great majority are these memory safety issues. Perhaps 90%? For widespread code, am I that far off the mark? (I understand that most intranet or custom software might just eval() every querystring given to it.)

1: http://seclists.org/fulldisclosure/2014/Nov/74
Open Source Finance Library (JavaScript)
Google's Slow Fade with Librarians
Cybersecurity in the US Fiscal Year 2016 Budget
I'd really like PhantomJS to declare issue bankruptcy on their Github repo, which is currently a whopping 1,367 issues, many of which are just pastes of core dumps with no replies.

Wiping the slate clean with Phantom 2, combined with any changes that enable more contributors to fight down the issues list, could lead to PhantomJS being a much more solid project.
They could at least stop making up bullshit claims in headlines and text. Research institution don't usually go saying they're 100% certain something is this-or-that and has huge implications for everything. It's the media outlets that add those things to the articles.

Surprisingly, I don't recall a relevant xkcd, but then there's the famous Science News Cycle: http://www.phdcomics.com/comics.php?n=1174.

> What the hell else is the journalist going to do? They Just Can't read up all the relevant literature -- that's a full time job, and they already have jobs.

Well, you're telling us that Reddit and Hacker News can do what journalists can't, even though people posting there are definitely not employed to fact-check things.
You are romanticizing the past. Take a look at the ads in LIFE magazines from the first half of the 20th c. There's consumer exploitation going on that would make Zynga blush.
In his own words (along with ), I think his bigger objection is that it will stifle innovation.

The history of telecommunications regulation tells a sorry story of glacial decision-making focusing on yesterday’s problems, inhibition of innovation, and, worst of all, what economists call “rent-seeking”—businesses’ use of the regulatory process to put their competitors at a disadvantage.

http://www.technologyreview.com/view/531671/are-we-really-sa...
Whatever form profits are required to be reported to shareholders and potential shareholderes -- tax that calculation.

Bingo, there is no incentive for minimizing it anymore. Since you want to show profits to shareholders and investors.

Plus, you get to save all that money you spent on calculating your taxable income, you only need to calculate it once to report to both investors and the government.

I'm sure the devil is in the details and it would be much more complicated than this with many things to be worked out. But I think just that proposal is evidence that it's not impossible to make corporations actually pay taxes by aligning their interests appropriately.
And once this new company that limits everything that is not Facebook, Twitter and Netflix gains a large market share, how will any new company ever compete with Facebook, Twitter and Netflix?
Contrast the cost of maintaining GPS versus the cost of tracking every person in the western world by other means.

It is a very good cost-to-utility ratio for the US.
and here I am, barely managing to find a decent, simple 3D C++ rendering library to run on a mac with XCode.

Edit: 3D

It's pretty crazy how weird it is that there's no dead simple 3D rendering library that supports just bare polygons. When I look at an opengl tutorial I just flee when I see how much boiler plate code is necessary to make the mouse move a camera.
The Curse of Ndamukong Suh
Mostly 30 year old DARPA projects.

I joke, I too would like to hear about exciting SV research projects.
I like it - not sure why "priority' is not used more - it is such a useful construct. Instead of re-purposing it though, maybe add "tags' and still keep it super lean
>A lot of people seem to be OK with dull, boring jobs,

I'm a little shocked to see this sentiment, and even more to see support for for it from other commentators.

Has anyone here actually worked jobs like this?

I've had several factory, dull, boring jobs where you repeat the same task 2-10 times per minute, and none of the people I worked with enjoyed it. It's hell.Time slows to a crawl. You can repeat a task a hundred times and only 20 minutes go by.

Attempts were always made to rotate people though different tasks throughout the day. The vast majority would leave to go to a non-repetitious job if possible.
I am told I am overpaid and life is comfortable but I know I'll be working until normal retirement age and am very concerned about ageism in tech as I get older.

That's exactly it.

And it's bullshit, because of the amount of value we generate for our companies--and if we don't, they aren't using us correctly.
Nah, there's no real limit. It all depends on the longest distance between a sender and a receiver (there might be more than one on your last-mile) the quality of the cable and output power on the sending end. European cities seem to have settled one 15mbps as both standard and max, American ones seem to have settled on lower. The phoneline infrastructure was probably not as good.
The article provides a summary of research on a very complex topic and it appears as usual there's no simple "answer". It seems a pretty safe bet that bilingualism confers some advantages, though the challenge is to try to differentiate just what those are and aren't.

The researcher's problem is the enormous overlap of factors affecting cognitive function. For example, psychiatric disorders are quite common and associated with deficits in executive functioning, which we might reason affects capacity to become bilingual in the first place, thus a variable to be controlled.

However it's also been shown that biological relatives of psychiatrically disordered individuals have similar (if less severe) deficits. Dispersed into the general population, it's difficult to screen for the potential confound, injecting a subtle and essentially incomputable bias into the comparisons of bi- vs. monolingual individuals.

Similarly, the association with earlier or later onset of dementia is extremely difficult to parse. We're back to the usual pulpit re: correlation vs. causation. It could be argued that bilingualism is one indicator of advantaged systemic integrity. There are no doubt many other signals of such advantage. Dementia could be the outcome of an intrinsic lack of fitness in the Darwinian sense.
> At the very least, it seems like sending a robotic balloon probe to Venus to try to tool around in the upper atmosphere for an extended period of time is at least as worthwhile as sending another lander to Mars.

Exactly. Enough with Mars already. Red sky, red sand and red rocks : it gets old, frankly.
In the kernel:

1. Access to hardware performance counters and energy counters

2. Easily loadable custom drivers

3. File system that is not slow as hell ("Getting the modification time of a file ... seems to be about 100 times slower on Windows than it is on Linux"[1])

4. Practical mechanism to allocate large pages

5. Futex

In the ecosystem:

1. Package manager

2. C99 compiler

3. POSIX environment (a lot of scientific libraries and tools depend on it)

[1] http://www.aosabook.org/en/posa/ninja.html
That seems like a more reasonable position.

However:

(1) The federated wiki has not replaced C2. Ward has put up a notice saying that he plans to do so at some unspecified time in the future. Right?

(2) You claimed earlier that "the 'potential' for improvement doesn't matter and doesn't exist," which I point out is excessively negative and dejecting.

(3) Wiki has always been a research testbed and a place for experimentation. That's why the whole thing is done in public in such a way that any interested person may participate and give input. To help such projects, if one has any reason to believe that they may be valuable—as you now seem to agree—it is more productive to give constructive feedback through appropriate channels.
Oh, nothing. Well, maybe just that little thing, indexes.

But who needs indexes when we have MapReduce and Mongo. That is awesome and makes everything fast.
Not very rainy. No hurricanes or blizzards. Very hot. Usually in a drought, and not to uncommonly 50+ days exceeding 100 Fahrenheit in a year.

(I'm in Austin, which is pretty close to San Antonio, but I see now is considerably hotter: http://www.srh.noaa.gov/ewx/?n=100degreedays.htm ww.usclimatedata.com/climate/san-antonio/texas/united-states/ustx1200 )
I would imagine that many of us working on interesting things are prohibited from telling you about them. No point in letting everyone taste the secret sauce.
> It'd be great if someone could just synthesize raw, objective truth out of all that data, but I don't believe that's possible. Given that it's not possible, I won't let the perfect be the enemy of the good.

What would be certainly possible though is for them to stop putting lies inside. Exaggerating claims and inventing linkbait nonsense actually requires work - work which shouldn't be done in the first place.
This is kind of a red herring.

1) Surgery-over-IP would be designed within the limitations of the existing infrastructure, which is more than capable of handling high resolution real-time video.

2) Surgery-over-IP would be useful mostly in areas that are unlikely to have reliable high speed internet access (poor countries, battlefields, etc.).

3) Netflix traffic is streamed to the customer using a strategy that tries to minimize the number of hops it has to take (i.e. content delivery network). This reduces congested links for something that would be a point-to-point application like remote surgery.
Perfectly legal and perhaps a fiduciary responsibility to their shareholders in some respect.
Show HN: PushForms, Collect rich mobile data with a link
I interpreted investment in the GP as meaning getting users to put their energy into a product. Like https://hbr.org/2014/11/how-customers-get-hooked-on-products
Any links to your work with arrow functions and d3?
First, offering an alternative solution is not a necessary component of arguing that a given proposal is objectively bad.

Here's an excerpt from another point in this thread:

>If regulation must occur, then I would prefer to see it happen in a manner that increases rather than decreases my choices. Forbidding a certain pricing strategy does not increase my choices. If regulation must occur, then I'd like to see something along the lines required sale of excess infrastructure capacity. This could happen in terms of utility pole access (the majority of which are not owned by telecoms to my understanding[0]), or through sale of excess bandwidth in an ISP's network.

This is definitely an "if" for me though. It seems that the majority of ISP monopolies we see grew out of the exclusive cable franchises offered by many (most?) municipalities when cable TV was becoming a thing. Since public rights of way were/are (depending on current status of these franchises) and pole access can be granted without adding new regulations, and permission from the city is all that's needed to bury wire, it would seem that these are the best first steps. If it turns out that the advantage granted to incumbents by their past franchises are too great (i.e. we do not see improvements in ISP service/quality), then the idea above of mandatory leasing of excess infrastructure capacity starts to make more sense.
That's... actually really neat. So there's no operator precedence?
No doubt you are correct in that assessment. Time to fire up Kerbel to see how much payload a Falcon 9 Heavy can get into an Earth/Venus transfer orbit :-)
Yes, I've used a similar technique myself; however I consider it only a last resort. But doesn't that require your language to have threads? Is it possible to do this in eg. Javascript?
Experience would have told you that human flight was impossible just 110 years ago. The reason you should believe the contrary is because it is an open world, and there is not proof that you are correct.

>There is also the parallel to spoken languages. Where there are pretty good patterns of speach for making different points.

And programming is largely a domain specific task today, so you could have pretty good patterns for it.

But anyway, that parallel expresses a better point: language is extensible. If you have something in another spoken language to express, you can certainly do it in any other language. You just can't maximize terseness everywhere, which is not what we're using to measure how good a language is. The measure for this is terseness in proportion to usage, which doesn't conflict that rule. Especially if you can control terseness dynamically.
Firefox and IE both implement WebGL using DirectX too. It's a sad state of affairs when OpenGL drivers are so flaky that it's less trouble to write an elaborate cross-API abstraction layer and shader translator, than to just use OpenGL directly with a nearly 1:1 mapping.
We took a unique path with mobile forms. The competitors all require registered accounts for all users. We decided screw that, why not share links that can allow rich (photos, location) data collection with just a link and an app. All received data can be integrated with Zapier, or webhooks to your own servers. We also have an api and think of ourselves as a platform not a black box.

I hope any startups or users here that are tasked with capturing data let me know and we can help you out. Feedback is always appreciated.
Cuddlr is a location-based social-meeting app for cuddling
Sprint is 80% owned by SoftBank, who also owns controlling interest in Alibaba. Amazon, Alibaba's largest competitor, has been recently talking about getting into physical retail space. It's possible Alibaba is thinking the same thing.
It's a good type system. Many programming languages don't support this kind of type information, notably C.
I'm pretty sure a friend's app got a bad rating when he declined to sign up for a service like this.
The difference is that in Rust not the whole source code but rather only the `unsafe` blocks and what they touch need to be verified for memory-safety.
Requests for Startups: Richard Kerby (Venture Capitalist at Venrock)
>I suspect Comcast is just the [only broadband] option in your location [due to their non-compete agreement with Time Warner and the city council not letting other service providers lay cables] and you're dissatisfied with it.

That's a bit more accurate. If somethings the only provider of a service, that's a monopoly. Plain and simple. There's no exceptions, there's no misunderstanding. The definition of broadband is 25/3, and Comcast is the only company offering that. There's no chance for upstarts with newer and better technology. There's no chance for cheaper alternatives. There's no chance of market forces. If you want to be an ISP in this city, you have to go through the city council who says no one but Comcast can lay cable and only utilies companies can use their utility poles. Guess what, if Comcast is Title II and everyone has access to their poles and conduits, well here comes the competition.

http://www.engadget.com/2015/01/01/google-letter-fcc-title-i...
A related way of composing code is railway oriented programming already commented on HN (1)

Underneath there are monads, sure, but the author has deliberately chosen a more mechanical metaphor which may help those for whom monads sound too abstract.

The post focuses more on how to handle errors that asynchrony,
but it shows well the key steps to lift a blue function into red ones and to compose these constructions.

(1) https://news.ycombinator.com/item?id=7887134
Understanding PHP Object Injection
you can't if all code is running in the same thread, as sleeping would prevent any code to run at all.
SMTP/IMAP isn't better than webmail. IMAP is an awful protocol. It's less secure than HTTPS. It doesn't do a better job of avoiding "spying" than webmail does. You can sync multiple clients with IMAP, but webmail accomplishes the same task so seamlessly clients don't even need to be aware of it.

IMAP is a pretty good example of the kind of protocol that should be eaten by HTTP/RPC APIs.

(I've written a couple IMAP implementations, both client and server, and was [in the 1990s] responsible for the mail infrastructure for a popular ISP.)
Privacy: U.S. Department of Homeland Security Publishes 2014 Data Mining Report
I think I'd like it fine if my ISP treated my internet traffic as if it were.
Work can be ennobling, morally beneficial, etc. but instances in which this is actually the case tend to be few and far between. The ones that do exist invariably grant the worker a high degree of autonomy and decent living wage.

If good jobs like these are available to everyone then sure, denigrate the people who are reluctant to work for a living. But as long as most work is shit work for shit managers done for shit wages, then insisting that people work for a living on moral grounds is, in fact, the antithesis of morality.
SEEKING WORK - Remote, travel possible depending on location and duration.

Location: North-east UK

What I do: Backend engineer / Sysadmin.

Do you need a backend service to talk to your flashy new web / mobile app?

Does your current build and deployment system give you nightmares about the only dev who understands it falling under a bus?

Need a proof-of-concept for your latest, hard-to-pigeonhole idea?

I do have experience of the full stack (including AngularJS and Coffeescript; see below) but am looking for work primarily involving the back end of the stack, or server admin / reliability / scaling. In previous lives I've run large-scale Debian installations doing devops before it had a name, and been responsible for servers in Antarctica.

Recent work:

* Feasibility study investigating the possiblility of writing custom code to interface with a biometric timeclock (Common Lisp)

* Proof-of-concept hardware development for projects linking the physical and virtual worlds in real time (Arduino, Node.js)

* Project management webapp for construction companies (Rails, AngularJS, Bootstrap)

Buzzwords: Debian, Ubuntu, Chef, AWS, Heroku, PostgreSQL, MongoDB, Perl, Common Lisp, Ruby, Go, Arduino / AVR

Tools: Git for version control, Jira for issue tracking, HipChat to keep in touch.

Got something you think is a good fit? Drop me a line at mike -at- lambdafunctions -dot- com
Completely unrelated, but even assuming the author of the article posts here, are you from Columbus OH? I've gone to One-Line Coffee (the source of the first pic) myself a number of times!
Everybody seems to be really critical about the article. But he does say that it is an "extreme oversimplification". And he is a video game developer. Maybe he is mostly working as the CEO at Stardocks now (maybe not) but I have difficulties to think that it is just "wrong". I felt the criticisms were unfairs. But I'm a web developper so maybe I just miss it completely.
> Exercise on its own doesn't lead to weight loss (in order to burn the necessary calories, you'd have to be exercising all day long)

Assuming that you were in perfect calorie balance before, any additional exercise without additional calorie consumption will produce a calorie deficit. This may or may not produce weight loss depending on the exercise profile and a lot of other factors (including, IIRC, what and when you eat relative to when and how you exercise), since its possible to gain weight with a calorie deficit while if you are building muscle fat enough (since fat stores more energy per unit mass than muscle.)
Woven Digital

Location: Culver City, CA

We're looking for:

- Data Analyst Engineer

- Fullstack Engineers

- Frontend Developers

- Mobile Developer iOS / Android

- Wordpress Developers

The media has labeled us the "Quiet Giant" as we reach 85 million users each month through some of our properties like UPROXX and BroBible. As we continue to grow, we're looking to expand our engineering team to help build new products across desktop, mobile web and native. We're passionate about building great experiences and we value working with folks who believe the same way.

We offer competitive salaries and benefits in an open and fun working environment.

Interested in working with us? More details can be found at:

http://woven.com/careers.php

OR have any questions? Email me directly at jerry [at] wovendigital.com
If you have both the old and new password in plain text you don't need to do a compression-based check, just a raw iterative approach would accomplish the same thing with very low overhead (in either CPU or memory accesses).

Compression systems typically need a lookup table of some kind and have more overhead than just the raw comparison.
We were? 90s ISPs regulated by Title II? What? No we weren't.

I started managing ISPs during the dialup era and played shepherd to a field of Livingston Portmasters. I migrated us to racks upon racks of Ascend boxes during the 56k modem wars. I set up ISDN PRIs and DS1 terminations. I turned up our DS3s and set up our first default-free peering. I left just before the DSLAMs went in.

At no point were we ever subject to Title II regulations. We priced however we wanted to price, we shaped traffic however we needed to (we virtually never did that).
Top Android Apps for 2015: Http://goo.gl/pDJomO
Came to HN to distract myself from this news and here it is. Monty was a great inspiration to me mainly for his relentless work ethic and amazing creations. He is sorely missed in the RT community.

33 is too young to die.
I'll gladly take privacy over useless albeit "authentic" app store rankings.