skysight-inc/HackerNews huggingface dataset:
> I don't see anything wrong with that code.

Look longer.

Let me give you some examples:

Forward declarations for functions that could be avoided by re-arranging the code, using both 0 and -1 to indicate error returns from functions, bits like:

s = fd == -1 ? socket(ss->ss_family, SOCK_STREAM, IPPROTO_TCP) : fd;
if (s == -1)
goto bad;

Sure, I can read that but it takes more effort than it should and could be re-written much clearer and so on.

> There is nothing wrong with using the stack for what it was designed for.

The stack should not be used to allocate buffers intended to hold data written by other routines or read from untrusted sources for reasons that have become painfully clear over the last couple of years.

> The function names are self-explanatory.

Strong disagree about the function names being self explanatory, plenty of the functions have non-obvious side-effects. The 'style' is asking for trouble and as for it being derived from 'relayd' that pretty much confirms that this isn't something new (which is actually a good thing), but an adaptation of something old to a new role (such adaptations are security wise something to be very wary of, re-purposing old code is a great way to find out what edge cases were missed previously).

Far more symbols are exported than necessary.

> The "style" might not be yours, but it doesn't make it bad.

There's a return at the end of a function returning void for no reason.

#if 0'd old code that should simply be purged.

In the server_log code I think there may be a path to get a double free of 'ptr' where it is used first in the block with the while loop, then not reset to NULL and re-used in the second block and freed if it is not NULL (which it still is from the previous block...).

The style used obscures this possibility.
You've built a strawman. You can have both privacy and keep contact with lost friends and loved ones.
I have a large glass over my desktop. Its main use is supposed to be to cut leather/patterns on it, but I end up putting papers below it to remind me of stuff. So, it is a handy idea. I prefer glass, even if it is somewhat unwieldy to lift up (weights a bit)
I haven't really looked in it yet, but it seems that "statistical features" here are mostly about replay-gain, which makes wholes thing much less interesting and isn't "complete solution" whatsoever.
"Ricardo's Difficult Idea" is an essay that provides a good online education in economics and why trade makes everyone richer, as demonstrated not just by history but also by mathematics.

http://web.mit.edu/krugman/www/ricardo.htm
https://news.ycombinator.com/item?id=9151263
Another great example would be the example of stallman "In the future, debuggers will be illegal to use" and a recent court case where a person was sent to jail for accessing a website with a spoofed user agent using wget.
William Jones, the Welshman who invented π
Yeah, not the case at all.

Seniority means, to us at least, experience (i.e. beyond "don't know what you don't know" and at the "know I know some stuff but there's a lot I don't know" stage) and the ability to rapidly pick up and grok new tech, languages, ways of working, and what have you.

It's not about a certain level of experience in Node.js, or whether you have used the shiny new tech that came out last Thursday - it's about whether you can.
It was a good rant until he encouraged writing a test after writing the code to be tested :(
As a developer also with 12 years experience, I implore you to write your tests first. Otherwise your organisation will almost inevitably end up with brittle tests & it will often cost more to patch up the tests when they break than the cost of the possible increase in genuine bugs.
I don't necessarily espouse slavishly adhering to TDD (it works for some devs, not everyone) but experience has taught my heart to sink every time I hear someone say "I've implemented the feature, now I just need to write tests."
Thanks for the hard work. When can we get the long-awaited ORC file support, including predicate-pushdown?
Indeed, you don't know who Stallman is.

His most important work isn't the software but the Free Software movement, the GPL license and the Free Software Foundation.

Sure, we all like emacs and gcc but these were just Stallman putting his money where his mouth is. Stallman made the first commits to these and many more programs but it was the thousands of programmers who accepted his ideas and made them what they are today.

Of course you are free to criticize him, but portraying him like Usain Bolt trying to teach the biological mechanisms behind doping shows a certain degree of ignorance.
Flawed ranking algorithm. It's the replies that vote him up.
> Huge numbers of couples in Europe, Japan, Korea, etc have decided to not have kids, so clearly they can "afford" to not have them.

Do you have any proof of this? IMO, the declining birth rate is more of a consequence of a huge number of couples deciding to only have one child (so one child per 2 people -> eventual extinction).
Why use a name that's already in use as a general descriptor? At least the other httpds have names that can be used to differentiate them: http://en.wikipedia.org/wiki/Httpd
Even today, very few people accept to believe that the NSA actually leverages their technology to do mass tracking. Few people have an idea of the scale of their operations actually. Most of them now think they have the gear, but that they only leverage it in state investigations.
So... Apache was removed from base on Mar 14 2014 in favor of nginx, and nginx on Aug 27 2014 in favor of OpenBSD httpd.

For sysadmins who closely follow the "recommended" way, having to migrate the configurations of the http server twice within half a year must have been a frustrating experience.

Also, I wonder what "removal from base" means exactly - can you still install them (the OpenBSD-patched versions) from the ports collection or something like that?
> "... it's a business that needs to make money, how else is that supposed to happen?"

This attitude is what's wrong. Exxon also needs to make money so maybe we should cut them some slack around oil spills. So does Foxconn, so let's not badger them about employment practices. Etc.

To your point about how they are supposed to make money. I dunno, innovate on business models, maybe? Advertising has been a driving force for mass-consumer web services and it would be healthy to have alternatives.
You said that your editor is free software, meaning that no one made money on you using it. I'm not sure how this refutes the point about a "_viable_ company." (Given that viable necessarily includes making money.)
Actually, there's literally 78 different links on that page ;)
If I may take this opportunity... Does anybody know what I'm supposed to put in /etc/ssl/server.crt for SSL encryption? I have concatenated all six possible permutations of my own certificate ssl.crt, the intermediate certificate sub.class1.server.ca.pem and the root certificate ca.pem, but this gives me the error The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer) (my Ubuntu Chrome gives me a green lock, though). Feel free to visit my blank site https://ezequiel-garzon.net

Thanks!
Yeh, you Only have to download and install Firefox first.
Dynamically allocated buffers on the stack are somewhat risky, an overflow of that buffer will allow all kinds of nasty things to happen, some of those things can lead to exploits. So if you're reading data from an untrusted source you normally should avoid reading that data into a stack allocated buffer, especially if the code that does the actual reading is not immediately visible from the scope where the buffer is allocated.
Every day. Stove, rice cooker, microwave, wok and a BBQ. Better tasting food, cheaper, and a more complete (and trackable) micro+macronutrient profile.
> in the last six years

It's older than that, right? What is the significance of this time frame?
> Error establishing a database connection

Hm, don't depend on a database when rendering your page? scnr
Rack-pratchett
Docker in Practice – A Guide for Engineers
Interestingly, though, those movements very much relied on their cohesiveness around a single, fundamental grievance.

Eventually they reached a 'cultural' tipping point and that brought about cascades of change.

Currently the field looks a bit different, as there's been an exponential growth in both the quantity of information, and the effectiveness of its delivery (via the media, technology) at lower costs.

This is, of course, not an argument in favor of inaction... I just think we should be wary of the fact that it's now a lot easier for capital to change culture (by way of advertising and private-interest media) than it is for culture to rally around a sustained idea long enough to produce legislative change.

(And remember a lot of these forces work in both directions, however I do believe the biggest benefits of technologies' reach will always be concentrated among those with capital)
wow that's embarrassing! Should be back up now..
Wow I am shocked to see how little money Balanced raised. Considering their pedigree and name recognition I would have expected a lot more. They must have either not been interested in raising funds or had really bad financials that scared off any Series A prospects. Hopefully we get some kind of post-mortem once the dust has settled.
-Wall -Wextra -Werror -pedantic
@US
to me the entire thread seems like a reflex of denial. How else would this list enounter so much ignorance?
The lack of substance in the arguments reminds me of reddit rather than the typical HN, which makes this topic special and american-centered, where patriotic feelings seems to be involved. We are the good guys, so to speak: Our tech wouldn't spy, censor and snitch on you.

@pariah
It was my reading/interpretation that you seemed surprised about RS actually having valid points. You state that the OP-troll disagreement "is too strong". Well, the OP didn't disagree, OP just made wild comparisons without commenting the issues, babbling something about Husain Bolt and becoming the top comment. There we are back at my @US claim. This reads like a denial.
> You want to buy satellite images of the tesla factory to work out how long it will take them to get to your number in the purchase list?

No, satellite images of the gigafactory buildout out progress, because I'm/we're huge Tesla fans.
My Thoughts on “The Realities” of Web Development
well you changed a word out there. the first question is you accept that people can fight. the second question is you can have a meaningful. i accept that people and can fight but i don't accept their discussion is meaningful and i don't accept that they can reach a conclusion i agree on.

i don't see how accepting that people can fight and decide on rules, means that i think there's any meaning in it and why that means i agree, disagree or care about the conclusion.

> It says you might as well have a discussion about which colour is the best and try to reach a conclusion everyone agrees on.

that seems pretty close to how i feel about it.
Please try to read all the words before making implications about the author's character.
No we don't. I personally think that EU's approach to privacy, especially when it comes to the internet (e.g. "right to be forgotten", "cookie law"), is completely fucked up. While EU's dysfunctional governing game (i.e. multiple countries with immensely different cultures, goals, histories and levels of development trying to act in unison) explains such things as the tax loopholes, no freedom of speech and the Euro, even this can't explain the mistakes in internet laws.

Furthermore, history will not be on EU's side in this regard. Right to be forgotten and restrictive data storing laws will have to be revoked eventually (when we have robots - "Remind me what I was talking about on that dinner during Mauritius vacations!" "I'm sorry Jessica, that was more than 3 years ago, I don't remember."). Euro won't survive without a fiscal union / federation (like the US).

Even the restrictions of data export don't help us much - sure, the companies legally can't export data to the US, but don't worry, GCHQ will!
Among women born in 1960, 17% in the U.S. were childless at approximately age 40, compared with 22% in the United Kingdom, 19% in Finland and the Netherlands, and 17% in Italy and Ireland. Rates ranged from 12% to 14% for Spain, Norway, Denmark, Belgium and Sweden, and from 7% to 11% for several Eastern European countries and Iceland.

http://www.pewsocialtrends.org/2010/06/25/childlessness-up-a...

The population of childless aged couples, especially women, is expected to grow rapidly. In Italy and the US, for example, the population of childless women aged 65 or older is expected to nearly quadruple over the next four decades.

http://yaleglobal.yale.edu/content/childless-choice

Statistics in the UK for women by age (e.g. 20% for age 50):

http://www.neighbourhood.statistics.gov.uk/HTMLDocs/dvc211/i...
I've done this successfully with libGDX/RoboVM for my game Feldspar. (http://feldspargame.com)
There is not only the privacy inside Facebook but also outside facebook. People are generally aware of what they give inside Facebook but I'm not sure most people expect Facebook to store their entire web history with dodgy techniques.
I think it's in part because 64-bit requires driver signing, and there are no funds for signing the coLinux64 driver.
That's correct. They are still available in the ports. If were operating a complex setup, you probably already used nginx from ports before.

Not being in the base means that it doesn't get the same security attention as its not officially part of OpenBSD anymore.
> In case anyone is interested we've been able to do this for quite some time for TEM and SEM.

Well, not with SEM :) Do you have any more links to other significant cryo-EM papers btw? Looks incredibly fascinating.

On the non-bio side, the recent major advances have been in aberration-correction technology. The big limiting factor in electron microscopy has been aberrations introduced by the electromagnetic lenses used to focus the beam (and the quality of the electron source itself). We're starting to get past that, which is good.

The next step seems to be creating a lot more specialised electron microscopes, rather than just adding multiple detectors to a single microscope. To use an example, X-rays are also generated due to how the electron interacts with the sample, and if you detect the X-rays it can tell us what elements are present. Trouble is, X-rays are emitted in all directions, and in older microscopes there'd only be room for a single X-ray detector off to the side, because it also had a bunch of other detectors in there too, so it'd only capture a fraction of the X-rays emitted. So now people are realising that if they really want to push the limits of the technique, they have to create a electron microscope dedicated to, say, detecting these X-rays, so they can cram as many X-ray detectors around the sample as they can. This can make the difference between detecting an unambiguous signal to not detecting one at all, which is incredibly important when looking at, say, dopants or impurities in semiconductors which exist at very very low concentrations.

This is just a single example, but there have been many many electron microscopy-based techniques that have been successfully validated in practice and can now be taken to the next level by building dedicated, specialised microscopes.
I agree that in case of buggy code stack allocated buffers are much easier to exploit, but in my post I assumed that the code is secure, i.e. the developer doesn't allow buffer overflows.
The cost of these phones (due to lack of mass production) is probably much higher.

There's also the issue of no roaming - users can't go into/out-of that region with existing devices.
I believe a lot of people think Internet is an entirely different dimension. "What happens on the Internet stays on the Internet" or something.
Event Planner Inbox Management – Save Time
Yes, everybody always assumes that the code is secure. That's the root cause of the problem.
Event Planners – Make Goal Setting Your Best Friend
> because any _viable_ company that wants to provide a service that a consumer other than Stallman himself will use will "infringe" on those two idiotic requirements.

I work for a data center operator and ISP and our customer database is air gapped. We're in the business for 18 years now.
If you're talking about weev, I can not think of a more disingenuous way of describing what he was sent to jail for. Otherwise, I can't find what you're talking about with a simple search.

I am completely unsure how you went from a prediction that hasn't come true to an unrelated computer crime.
> Which contradicts the observed facts of moral development, aside from all the other problems with it.

Well I contradict your observed facts. Look at all the major religions, legal systems, there the similarities and differences are many.
> If were operating a complex setup, you probably already used nginx from ports before.

Does "before" refer to the period before Apache was dropped from and nginx was imported to base? (Since apparently you can just use nginx from the base when it is there.)

EDIT: It just occurred to me that "complex setup" likely indicates that you would like to change some build flags, so you have to install from the ports. Stupid me.
urm, how does one use water with wiping?

to answer your question: you use more water but significantly less paper (you still need some with a bidet to dry yourself)
Which Life form dominates Earth?
Agreed. I appreciate Free Software a hell of a lot more now that I know the US government basically has secret control over any US tech company they are interested in. Free software isn't immune to outside influence, but it feels a hell of a lot safer than blind trust in companies we know are compromised.

Just recently the complaints about all kinds of bad software behavior having me seeing why Stallman has been right all along.

Think about the idealized versions of software we see on certain movies and TV shows, or even art. They're all cluttered and free from ads or exploitation - because that's what people really want. I understand people need a way to pay for their site, but we've gone overboard with surveillance and monetization of the user.
Why do they even have an httpd in base? They like to say they're smaller and simpler than FreeBSD, but FreeBSD doesn't include a web server in base!
He has refused to own a cell phone since inception because he doesn't like the idea of having his movements tracked.

It's now well-known that most of the crypto we depend upon for cellular calls and messaging is broken and can be tapped easily. Seemless, real-time, local area SMS and call interception has been publicly demonstrated, and these demonstrations were not from nefarious or particularly well resourced groups, just keen nerds.

It's also been publicly demonstrated that someone can track your location down to cell tower granularity, from anywhere in the world, without permission, using just your cell phone #, without prior access to your phone, and with only commercially available network access.

And none of this even touches on the ticking timebomb of proprietary firmware in phones that is basically unsupported and untouched by manufacturers and networks from the moment you walk out of the shop. The opportunity to exploit vulnerabilities alone is mind-boggling.

Oh and the fact that most people are replacing all this with centralised messaging platforms like Snapchat, Facebook chat, and Whatsapp.

You're completely naive right now if you think every SMS you've ever sent, every call you ever made, and every location query you've ever put through Googles Location Service hasn't been logged or acquired by NSA.

And frankly, the idea that NSA or GCHQ can silently ring your phone and turn it in to a listening device doesn't sound so James Bond these days.
The worst thing about Facebook I personally see is the peer (or even professional) pressure to have an account there and be active. And them doing what all (American?) megacorps do: buying small companies, stripping them of assets, absorbing them and forgetting them.

Then again, some people build start-ups for this very reason, don't they.
I am not going to give my data to google or anyone. Now i am using pure vpn which i choose from http://www.vpnranks.com/5-best-vpn-software/ and my provider did not keep logs.
"...in tech circles this was and is mainstream."

Things are different now. Take online tracking and privacy for example; many people in the tech community are perfectly fine with the online tracking carried out by Google and Facebook. They consider it relatively benign and useful. Some people (many?) are even happy to defend these companies over their tracking practices, are after all they are private companies, not government agencies.

The degree of tracking by these companies is unprecendented and often it's not even anonymous. Google, for example, has an entire OS that tracks you by default. It's tied to your identity, so it's not anonymous. If you have a Google or Facebook account, these companies probably already know more about your online behaviour than you know yourself.

At some point in the future, Google and Facebook may well be able to track you from cradle to grave. Does that sound far-fetched? Perhaps. Even now, Google's push into education means they hoard vast quatities of data about the online behaviour of students.

Even if you trust these companies, why is it considered perfectly acceptable for them to track you to such a relentless degree?

I can understand how the general public may be unaware of the privacy implications of such pervasive online tracking, but what excuse does the tech community have for not highlighting these issues and their privacy implications? Most of the reaction from the tech community over online tracking is equivalent to a "yeah, so what?" shrug of the shoulders.
Op seems to be confusing "Manually written tests" with "Manual testing", to being with, amongst a few other things.

Manually written tests can be run millons of time with negligible manpower cost. Manual tests take far more time and manpower.
Regularly is fine. Maintaining 20 simultaneous MAC addresses screws up things like DHCP and QoS.
> Of course phones were used to track people 10 years ago\

"In 1996, a detailed description of ECHELON was provided by New Zealand journalist Nicky Hager in his 1996 book "Secret Power – New Zealand's Role in the International Spy Network""*

This was common knowledge in the 90's ~ http://en.wikipedia.org/wiki/ECHELON
Miss Universe contestants represent their countries as dresses
The code is based on their relayd, so that's why it has the 2006-2015 copyright
Never heard of it before, no clue who is responsible for the designs. Still kinda interesting what the different countries choose.
Additionally, prior to the retirement they had advised that they wouldn't be communicating it to subscribers.

The retirement was so poorly handled that it's changed the way I think about services that I allow my business to depend on. Aside from a slight bias against anything with a "Google" label, I now consider it a lot more important that a service I'm using is the core business of the company providing it.
I never understood this suggestion. I've tried it, the toilet paper shreds and gets stuck everywhere, including my hands. It's a huge mess.
Nobody wants to see abuse - humans rationalise it as something that happens far away from them, not something that happens to people they interact with on a daily basis.