skysight-inc/HackerNews huggingface dataset:
>properly programmed and designed

And therein lies the problem. HN commenters know how fragile technology is.
You could always put the type in a tooltip on hover for auto or something like that. That way you get modern code style along with how an IDE would handle it. But yeah, there's no pleasing everyone when it comes to verbosity :)
Once again: the EO can only do what the IEEPA allows it to do. It does not matter what the EO says: if it conflicts with (or, in this case, is simply vague about) something in the IEEPA, it's the IEEPA that controls. Look at your own citation (50 USC 1702 is part of IEEPA); it's right there in the text.

This has come up before in US law --- executive orders w/r/t IEEPA --- before, by the way.
I like the topic but could not stand the background.
"I ask honestly, why?"

As you say yourself, it is part of your history, you've probably forgotten which concepts that K&R taught you and the OP is trying to learn C from scratch.

The OP mentions that they are learning C to help them with their reverse engineering skills, so learning about the older ways that C was programmed is also invaluable as those insecure programming techniques are still (unfortunately) widely used today and if OP wants to exploit such bugs, then all information is useful!

You mention nostalgia, and yes that is certainly one of the reasons as in my opinion the preface, the preface to the second edition and the introduction in the K&R book are worth the cost alone.

Besides, the book is so thin and flexible and makes a perfect ultra-portable, high-definition, long-life, skills acquisition device that works well on bus journeys, flights etc. ;)

I would say owning it is better than not.
Especially considering the official announcement blog post still says Chrome 41.

http://googleonlinesecurity.blogspot.be/2014/09/gradually-su...
My hypothesis is because of zeromq, I basically have to code a zeromq client as the backend. This is not convenient; I don't get to use any of the existing frameworks in my ecosystem. Plus since zeromq messages are defined by length, I've always wondered how one would stream data in the response, ie one would have to know the response size before sending back thru to mongrel2.

If anyone has experience with using mongrel2, I'd love to hear, I have not been interested enough to go research it myself however.
Demystification of React Google Maps Componentization
Differential dataflow in Rust
they're marked ok because they expire before 2016. If you had a 3 month cert issued in q4-2015 that expires in early 2016, it'll display a warning.
We still choose something to learn as a part of self-improvement and self-education.

Some languages are worth knowing even if you mostly use other languages, because of the way they change your way of thinking.
Another decent writeup:

http://readwrite.com/2015/03/18/arduino-open-source-schism
Busted: Edward Snowden Statue Prompts Cover-Up at Brooklyn Park
I didn't mind much that TextSecure removed the SMS feature, since I didn't use it anyway, but I think the removal was badly handled. I'm glad someone is catering to the users who used this feature, it gets more eyes on the code and increases the pressure on the Signal team to do things right.

When TextSecure removed SMS encryption there wasn't a clear warning about it in the what's new message, and as far as I can tell there was no deprecation period or warning to users who had been using it. You'd be sending encrypted messages before the update, and unencrypted messages after. For some reason they didn't link to their blog post[1] in the what's new message. It looks to me like they didn't want people to notice that they were removing a feature.

This lessens my trust in the creators and makes me hesitate to update the app since I don't know if they will change or remove features I do use in the future without warning. Hopefully they'll review their process so they don't scare more people over to SMSSecure.

[1] https://whispersystems.org/blog/goodbye-encrypted-sms/
I think the author assumes you're free to learn whatever language you'd like.
I did some emscripten/WebGL performance tests a while ago which went into the hundred-thousands particles for 3D-shape-particles at 60fps, but this depends very much on the target hardware, less on the browser or operating system.

Both tests use simple 3D shape particles (5-vertex diamonds) and hardware-instanced rendering (instanced_arrays extension), the first updates particle positions on the CPU, the second on the GPU (fragment shader writes particle position to offscreen render target, which is then sampled in vertex shader to displace particle positions).

The first (CPU updates) goes up to around 450k particles on my Windows7 desktop machine before consistently dropping below 16ms per frame, the second (GPU updates) goes to about 800k particles before dropping below 60fps:

http://floooh.github.io/oryol/Instancing.html

http://floooh.github.io/oryol/GPUParticles.html

These numbers are not much different then using desktop GL (2.1 with extensions). The real advantages for this type of scenario would come from updating persistently mapped buffers which are not available in WebGL.

What's impressive is the raw math performance of asm.js, the particle update loop is simple glm code (https://github.com/g-truc/glm) without any fancy optimizations.
Cryptocurrency. Reading that section reads like a playbook on threatening cryptocurrency networks.

If you are a part of a cryptocurrency network, you are materially assisting and providing technological support for services potentially in use by foreign entities that are potentially targeted by United States enforcement of this EO.
The brain game: How decreased neural activity may help you learn faster
Thanks for sharing this!

An installer for Arch Linux is something I've been wondering for quite a while and didn't know it already exists :-)
The people who are really getting somewhere aren't the people who are always out for drinks

Too true.

As a side note, there are an awful lot of people who seem to go to a different startup event every night of the week, and then some hackathon over the weekend.

I generally find it's the other people who are getting stuff done.
Airline safety culture is highly developed in the course of a long time, and a lot of it is enabled by assuming benign actors. A lot of safety principles, assumptions and practices would go out the window when you start factoring in insider adversaries and preventing the secondary plots that would pop from your threat model after adding the first couple of controls.
Yeah, *.ycombinator.com is using a 5-year certificate which was issued in 2014.
Our gambling culture
PowerISO 6.2 Registration Code and Serial Key Free Download
> We can't really make those systems more safe than they are right now.

True, more or less.

> We need a paradigm shift.

Really? Perfect safety is a pipe dream, and the rule of diminishing returns applies here as everywhere else.

Compared to modern aviation, the early days were just chock-full of accidents and incidents, because we hadn't encountered the 90% cases in order to solve them. Happily, we've solved those cases and more, which is how we come to have the luxury of confusing edge and corner cases, like deliberate CFIT (e.g. Germanwings 9525), with major safety issues.

Introducing full-on, pilotless cockpit automation is going to have the same high incident rate that early aviation did, for the same reasons -- we just don't know enough about the problem domain to account for the 90% cases, so we're going to have to see them fall out of the sky and hit the ground before we know how to solve them.

And, of course, there's also the fact that pilotless aviation can't actually solve all the edge and corner cases of piloted aviation, but only some of them. It'd make deliberate CFIT a thing of the past, sure! But deliberate CFIT, and things like it, aren't the only reasons why a commercial aircraft falls out of the sky. Sometimes it's maintenance error; sometimes it's equipment failure; sometimes we don't even know what happened. Pilotless aviation won't address all of these cases.

Eventually, I don't doubt, we would achieve the same excellent safety record with pilotless aircraft that we see right now with piloted ones. The question boils down to whether, in order to address a subset of the corner cases in piloted aviation, it's worth accepting the costly process of working out the 90% cases in pilotless aviation. I really do not think it's Luddism to regard the tradeoff there as not worth making.
Add “pintag.in?” before an URL in your address bar
In Steam there is something called "the review queue" to encourage you discover games you might like.

I think it would be possible to build review queues for user by listing stories positively correlated to stories you up-voted and even more correlated to stories you commented.
"Obsolete cryptography" does NOT refer to SHA-1. It refers to using old cipher suites which are not viewed as secure.

One of the security team engineers also acknowledged that this is an unclear warning and that they are working on it.

https://twitter.com/vtlynch/status/574301319428702208
Is there a good book "modern C++", kinda like "modern perl" I guess?
Well, hosted at scala-academy.com ;)
Please add 2014 to the submission title. Also, Since Arch is a rolling release distro, it is encouraged to always refer to the latest documentation over at the Arch Wiki.
Agreed! But all too often the problem of "what not to do" leads to doing ... nothing. I'm hoping to avoid that outcome.
Time management the Hard way
Great, and with the "workshop" (http://numericjs.com/workshop.php) it's like an JS based IPython or Mathematica.
Seconding Understanding and Using C Pointers by Richard Reese and 21st Century C, but more for after you've gone through a more basic resource. I haven't looked at Kim King's book, but if it's anywhere near as good as his intro to Modula-2, it will be excellent to learn C from.
I don't think Linus opinion is necessarily against Arch. I am using Arch precisely because I don't want to fight my OS!

I also found Gentoo, let alone Linux from Scratch, very complicated and time consuming. The nice thing about Arch is that it hits the sweet spot between simplicity, technicality and easiness. In my opinion having vanilla binary up-to-date packages is the way to go.
No, because HTTP doesn't imply security, whereas HTTPS does. If someone follows an HTTPS link, then that's an intention for security and should be respected. (Though it's not a bad idea to put some sort is warning indicator on HTTP, just to help reinforce things.)
You missed all the stories about toddlers killed by dogs?

https://en.wikipedia.org/wiki/Fatal_dog_attacks_in_the_Unite...
NASA and IBM team up for a hackathon
The way Slashdot worked when I last used it was cool. Regular visitors would be randomly granted 5 moderation points which could be used to either upvote, or downvote stories and comments. You had to give a reason for the vote (funny, interesting, off topic, etc)
I don't agree with you but I upvoted your comment (that was already being downvoted) - it adds value to the discussion.

The simplicity of HN is something innegociable IMHO. As I understand you are proposing to evolve HN into a mix of Reddit-social network for hackers/entrepreneurs.
"earning ~$1400 a day as a consultant disposing nuclear waste"

"work for his lifetime more or less guaranteed"

I don't want to sound sarcastic, but what kind of life span expectancy is implied in this kind of job?
Yeah, I've thought a lot about this. Realistically, if I didn't have to stay in New York I would probably spend the months traveling/hiking/camping and that sort of thing. But I feel like NYC will make you crazy if you don't have commitments to keep.
I find the title of this submission slightly misleading, as I thought that there can't be something like a hostile fork.

FYI: The title has been updated, see: https://news.ycombinator.com/item?id=9334255
Yes, but Numeric works fine in IE11 anyway.

The IE11 user agent looks like this:

Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
I'm always surprised when programmers confuse unidirectional implication with bidirectional implication. I'm only making a comment that alternatives to C++ are really good at attracting people who never developed the discipline required to write good C++. Experienced and talented C++ developers don't really have C++ problems, so most articles trying to lure them away with promises of memory safety using contrived examples will fall on deaf ears.

I know many good and experienced programmers with former C++ experience who detest it. Personally speaking, I'm an average but fairly experienced programmer, so I tend to prefer tools that help me catch my mistakes so I can focus on solving problems cleanly.
If you allow external control, there's also risk of an external hack. It might work out if external control is only possible after the button is pushed; that would still allow for a hack coordinated with onboard attackers, but maybe that's giving terrorists too much credit.

But I'd be happy relying on the steep odds against hardware failure happening on the same flight as human attack, as long as we can keep those variables reasonably independent.
Being opposed to capitalism is like being opposed to evolution, hell even the Communists are not crazy enough forgo capital markets.
Awesome quote! I'll definitely being using that in the future.
"If you haven't already, check your certificates." -- I'd love too, but I use Chrome for Android so I only get a Magic 8-ball level of detail.
That fixed header bar over the top 1/4 of my screen is very annoying. Phone displays are small enough without that crap.

Also, this article sounds like it's not entirely serious?
I thought so too, but then I reminded myself that my laptop has a 256 gb solid state drive. 6 gb for a fully loaded system is pretty small in comparison.
Developing an Android Version of an iOS App?
Hey

I'm in the process of building an app on iOS similar to a dating app (it's not a dating app) we'd like to start the android version. So far the iOS build is 6 months. Will an Android version take the same amount of time or less as we have the initial research/ features and user journeys complete? Does anyone have any experience with building one app and taking it across to another OS?
If they are going to show a green padlock, the connection needs to be reasonably secure, because the icon is supposed to indicate as such. With HTTP there are no icons being shown indicating you are secure, so there should be no expectation of security.

Chrome's security team is working on a proposal to show negative UI indicators to sites using HTTP:

https://www.chromium.org/Home/chromium-security/marking-http...
If I could downvote articles, I would have downvoted this one. It's like an upbrand, long-form youtube comment.
Show HN: Offline flashcard webapp that syncs via CouchDB
I'm always up for a coffee though and I've found that to work well for most people.

Lots of people at evening startup events just want to have a drink after work. Get their card and pitch them on office hours.
Exactly, though I suspect moderator intervention, not user groups. Notably, anything remotely critical of AirBnB. Changes are too sudden (e.g. story on #3 position, loads of upvotes and comments, and while I'm formulating a comment, it disappears and a completely inane and inactive post takes its place). At times I've even had trouble finding the original post again in the first few pages. Maybe Porter could shed some light on that too.
I didn't know of the critique of K&R in LCTHW that got taken down. I'm surprised that the rabble-rousers weren't able to take it in context. When K&R was first authored, there were no "seasoned" C programmers from which to draw on for their experience in writing safe, secure C code!
Yeah you're totally right, it's a huge over simplification. I was specifically thinking of the scenario where you add roughly the same number of users each period, where that number isn't really enough for it to be a viable business but because there are some users, it becomes really hard to say "this isn't working" and either radically change something or quit. Agree that retention is often a much better metric.
I'm the author.

Well, it is my opinion in fact, and that's why it says a "%100 opinionated view" in the subtitle.

There are many other persons with the same opinion:
http://stackoverflow.com/a/43072/731933
http://blog.jooq.org/2014/12/11/the-inconvenient-truth-about...
http://www.teamten.com/lawrence/writings/java-for-everything...

If we were to discuss everything in this article, starting with dynamic vs static typing, we'd still be here 3 months from now :). Which is why it is opinionated.
“Cyber Insurance” Market Expanding Due to High-Profile Attacks
The Ruby Type Checker [pdf]
Yeah, I find it odd that they used that white page security indicator instead of the yellow yield warning sign.
> What happens if it falls on someone? Or someone climbs it and a piece breaks off?

How exactly does covering it up help with that? I agree that there are valid reasons for wanting to remove it, but covering it up before that is just ridiculous.
How to Deal with Conflicts in Agile Teams?
Thou shouldst.
Some time ago I messed around and somehow managed to break my Ubuntu system so that it wouldn't boot. Instead of bothering to work out how to fix it I just re-installed (with a different version number) and kept my old /home partition. It all worked out of the box.
Hmmm. Black canvas with the following in the console on Chrome OS: [.WebGLRenderingContext]GL ERROR :GL_INVALID_FRAMEBUFFER_OPERATION : glClear: framebuffer incomplete (clear)
Per GPL2, clause 4:

4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.

As I read that, as long as you don't further redistribute, you should be good.
By drawing circles rapidly around the particles, you can herd them into a tiny blob. Move your mouse into the blob for a colourful explosion.
Could you explain what causes Ubuntu package manager to fall over?
Since you describe yourself as a programming newbie, I think you should take a look at Head First C. I'm not the hugest fan of the Learn __ the Hard Way approach anymore, and I think the Head First series does a good job of teaching you in an interesting and easy to remember way.

I can't speak to what you need for reverse engineering, so I'll let others say whether it's appropriate for that.
I'm always up for a coffee though and I've found that to work well for most people.

Agreed. I can even be tempted by the occasional lunch as well!
Awesome! I need to try running this for myself! It's amazing to see what this could do. I remember my PC took 2 minutes just to compile Hello World in Borland C.

I still have my IBM PC with CGA card (my only computer from 1987-1993, although it was 1981 technology (1983 BIOS to support hard drives though)) still and since this uses composite output and PC speaker I could actually run this! (I don't have a CGA monitor anymore so I have to use composite out to a TV which is what this demo uses. I also don't have the 8-bit Sound Blaster I had put in it when it was my main/only PC.) I will have to transfer it to the PC over serial cable (only one of my modern PCs even has a serial port). Fortunately I have Telix (terminal program for modems) still installed on the 20 MB Seagate hard drive and it still works.

I wonder if it needs 640KB because I have a couple back RAM chips and so it's short by one bank of RAM (a few KB). I can probably find the chips to replace them if needed.
I don't imagine this is a serious question, but… Speaking for myself, I read this article and have "listened to Thiel" on other occasions because he says interesting things.

"Something that’s true that very few people agree with you on." I read this and my mind immediately tried to come up with such truths so.. interesting.

"The goal of every successful business is to have a monopoly." What's interesting about this idea?

Monopolies are profitable. Companies like that. They're big, they like that too.

A 'Differentiation' strategy is a way of creating monopoly-like microeconomics for your business. Differentiation is usually the dominant strategy in technologically new industries while its opposite (penetration strategy: high volume, low cost) is usually the dominant strategy in mature industries like supermarkets, auto components and canned beans. That's interesting.

Full-blown monopolies often arise at the centre of disruptive new industries. Rails, energy, computing. Patents were originally created give monopolies as a reward for innovation. That's interesting.

So far, this monopolies thing seems to be an interesting idea.

Other than that, he does interesting things and says interesting things about them: Philanthropy, Seasteading, dropping out of college, anti-aging, book writing...
Ask HN: Technical founder resources?
I have recently been searching around for books, blogs, etc. pertaining to being a technical founder. I have been a software engineer for a number of years and I have plenty of information regarding programming languages and practices. I am in charge of building, deploying, and setting the technical roadmap of our three person startup which builds a SaaS product. I am the lead between another engineer and myself.

We have built the initial product and are looking to make it more robust. Now that we are out of the initial build phase the roadmap is less clear and I am having some issues with technical prioritization (i.e. should we work on having better infrastructure or work on feature X that n customers want).

What I am interested in finding is information regarding technical priorities, architectural decisions, balance between bugs and releases, dealing with business requirements while also shipping good code, etc.

Searching around I have found plenty of information on the business side of things, which I am interested in but not really my primary focus. I was hoping you could suggest some books/websites that are focused on startup priorities and not so much enterprise web service development.

Thank you.
Go back or forward or sideways a few months and you'll find people authoritatively saying what you just said with all the nouns rearranged (turns out fat isn't so bad! etc). Modern nutrition seems like an endless merry-go-round mindfuck. (Not saying non-modern is any better of course)
Warning: Not actually about cookies.
This article really didn't get an objective analysis. The Scala language looks interesting, but the biggest "push" towards it was a graph of the job outlook, with the y axis at the scale of... .04? 4%? Is that supposed to convince me to use this in the industry, and apply my time?

I understand the article comes from scala-academy, but I think by offering a more objective viewpoint of different languages and the standards they impose, scala can show what niche they provide. I don't believe it is the niche of "Everyone is hiring a Scala programmer", but it should be (quoted from the article) "...implicits, underscore notation, flexible imports, multiple classes per file, multi-line strings, pattern matching, traits with variables, etc." If this article was about these points, with relations to other languages, that could be some quality content!

For everything else, either the article misrepresented other languages, or simply remained apathetic to their application.
I just want to know how many (hopefully not any?) additional suicides occurred with the experiment Facebook did with their unethical research to either show more positive or more negative posts in people's newsfeeds; I can't remember the specific experiment but that is the gist of it.