skysight-inc/HackerNews huggingface dataset:
This isn't great, but it's not quite as terrible as its being made out to be for the official packages. The Mercurial bug is only relevant if you're using Mercurial with user supplied input on your production servers. Unlikely if you're not BitBucket. http://chargen.matasano.com/chargen/2015/3/17/this-new-vulne... Is a good read on the subject.

The libtasn1 bug seems to be only relevant if you're using GnuTLS. Again, not great but not the most widely used library either.

Cutting those two out cuts the number of vulnerable images in half and there's probably a few more rarely used programs with security issues further down the tail. Again, this isn't great, but it's not quite as terrible as the authors are making it to be.

The user supplied packages on the other hand seems to be quite a bit worse.
Interesting. I've found myself working almost entirely without unit tests (at least when I have an advanced type system) - making small incremental changes means that if an end-to-end test starts failing there's only a very small number of places that could have caused that failure. What kind of problems did you face? Why were they hard to diagnose?
Don't forget about the YouTube fiasco where Google forced Microsoft to withdraw their unofficial app even though they tried everything to comply with Google.
I like to think that I'm "any intelligent individual", and I use Facebook. That's where some close friends and family are, and if I want to keep in contact with them, that's where I need to be.

I understand the nature of the data Facebook collects about me, and I understand what they would like to do with that data. They want to know who I am, what makes me tick, and use that knowledge to show me advertising I'm more likely to click on. They also want to draw me into their walled garden by promising me shiny things if I stay. It doesn't really work, because I see the same middle of the road content and advertising shown to my friends and family.

I also share my location on Messenger, although the friends and family I chat to might or might not be interested in where I am. I don't chat to strangers, or even "strangers". And if I'm somewhere people don't need to know about, I don't share my location. These are things we teach children about using the Net, or should be. Adults should be able to figure this out themselves.

And I explain the difference between myself and my devices to people; when Facebook tells them I'm at home, that's where my phone or tablet or desktop PC is connecting from. I might be there, I might be away, I might not even be awake.

The technology lies, and sometimes so do I.
Purescript will make you purr like a kitten
Down-to-earth tech tips for real businesses
Top Tips from Professional Resume Writers on What Can Make Your Resume Rock
> Everyone knows that they have the money to throw at the problem.

They may have money to throw at the problem, but Nepalese migrants building the infrastructure to host the 2022 World Cup died at a rate of almost one per day. Look at the full report, it's astounding:

* Evidence of forced labour on a huge World Cup infrastructure project.

* Some Nepalese men have alleged that they have not been paid for months and have had their salaries retained to stop them running away.

* Some workers on other sites say employers routinely confiscate passports and refuse to issue ID cards, in effect reducing them to the status of illegal aliens.

* Some labourers say they have been denied access to free drinking water in the desert heat.

http://www.theguardian.com/world/2013/sep/25/revealed-qatars...
For the tax one, what rounding rules apply? How many significant digits are in the dollar amount and tax rate? Do I have access to IEEE 854 decimal or should I used scaled integers? And to how many digits?

This is important! Consider the following Python code, which shows how the order of operations can change the result by a penny:

>>> d = 6405 # amount in dollars
>>> r = 0.018 # tax rate of 1.8%
>>> int(d * r * 100)
11529
>>> int(r * 100 * d)
11528

This occurs because:

>>> d * r * 100
11529.0
>>> r * 100 * d
11528.999999999998

whereas if I use 854 math:

>>> from decimal import Decimal as D
>>> d = D("6405")
>>> r = D("0.018")
>>> int(d * r * 100)
11529
>>> int(r * 100 * d)
11529

The person who proposed the question believed that the key point was for the interviewee to ask why the result was to be returned in an array. As an inverted fizz-buzz test, this question really reveals that the questioner has little experience with the details of doing accurate math on a computer.
Most C3-like projects fail after a decade and millions of wasted dollars. Failing faster and cheaper provides real value.
I have yet to see up-front "architecture" add value, and I have seen it sink a company.
> In Python a function can fail with any error and there is nothing you can do about that.

To be fair, the adorable `except:` black magic exists there to be used in such a case. Of course its use is extremely dangerous for obvious reasons (it even catches the `SystemExit` exception!), so I can understand why the author didn't mention this.

> This is a big change in how you think about programs but you will get used to it.

Possibly! But I have a feeling that the ownership model would be the biggest blocker to newcomers, as well as the largest innovation Rust brought to the mainstream languages. I can already hear the crowd saying Rust's just a giant mess, after struggling with the borrow checker. This may impact the success of the language. Now that Rust is post-1.0, we will see.

> the constant encoding and decoding you have to deal with in Python just to support O(1) string indexing.

Strictly speaking, Python also doesn't support a complete character indexing, because it works on code point basis. O(1) string indexing is largely a myth.[1] But I'm sure that the author definitely knows about this, considering his previous rants on Python's Unicode handling. ;)

Regarding Unicode handling, I think Swift's `String` type is arguably more complete than Rust or Python. Its internal representation is UTF-16, possibly due to the interoperability concerns with `NSString`, so it can't compete with Rust on the performance aspect. However, it indexes a string by grapheme cluster (so Swift's `Character` type is actually a slice, not an integer) and compares the characters by their normalized forms, which eliminates many mistakes that can be made by careless programmers, including me. Of course the same thing can be done in other languages using external libraries, but the official support residing in the built-in string type is very nice to have.

[1] https://hamstergene.github.io/post/wchar-is-useless/
Show HN: Node.js adapter for 11 json-schema validators
Drawscript – convert Illustrator shapes into code
There are ways to mark memory pages as read-only. It's not even difficult.
How do i know that the compiler that compiled my software was/is secure ? Will I ever find out ?
In principle I'd agree. In practice, I think people consistently overestimate the value of planning, and my experience is so overwhelmingly in favour of not planning that I don't think it's worth spending even a small amount of time (which is a nonzero cost) trying to calculate whether this is one of the one-in-a-million cases where it would be worthwhile.
It's not necessarily about gossip and judgment. Consider two different kinds of friendship groups. There are small, close-knit ones, where everyone is friends with everyone, and everyone wants Alice to be there. And there are large, loose ones, where if Alice doesn't show up, nobody might even notice.

In the first case, if Alice isn't on facebook, they might make plans on facebook and someone will say "cool, I'll let Alice know". In the second case, they might make plans on facebook and nobody will think to do that. Her closer friends might - but her closer friends might not even be going, and that doesn't mean she doesn't want to go.
That's not quite as interesting a comparison as you might think [ed: or maybe it is, now that I've thought it through... ;-) ]. Eg, from the Introduction to the second edition of "The C Programming Language": "Appendix A contains a language reference manual. The official statement of the syntax and semantics of C is the ANSI Standard itself.".

Note that there's an ANSI standard for C -- and while I don't know what kind of license it is connected with off the top of my head -- it's very idea is to serve as a reference for implementers.

Note also, that if I remember correctly, the whole thing (Google vs Oracle) was tied to what Microsoft did with their "Java that wasn't quite java" -- and that what Google did was something similar: they took the API, but didn't make "a java" -- they made Dalvik/Dex etc -- which only sort-a-kinda was java.

As for "The C Programming Language", I can't find anything about license in my copy, and the copyright page doesn't exactly encourage re-use of the code-examples:

"Copyright 1988, 1978 by Bell Telephone Laboratories, Incorporated.

All rights reserved. No part of this publication may be reproduced ... yada yada yada"

So using some startling code such as "hello, world" -- as foundation for writing out something -- would probably not be legal. Even if the text does allude to the fact that a programmer is expected to draw upon the examples for inspiration.

I'm not sure that alone is enough to grant fair use.

It certainly seems that the examples in the book is similar to that in the java documentation -- and that neither gives an explicit license for use. Perhaps now AT&T owns everything, including Oracle?
I've been using Go 1.4 for iOS development and it works fine. This is just mainstream'ing the support for iOS, which is needed now because things seem to be quite settled.

In fact, I really like using Go on iOS - the ease with which it can be done was astonishing!
Visual Studio Community Edition, there you go -> https://www.visualstudio.com/en-us/products/visual-studio-co...

Agreed Eclipse is a hog that should be lead to the slaughter. But an acceptable dev machine can be had for $250 at Best Buy.
My son has $23.6B. How is yours doing?
The insurance in question would only pay off under some very improbable and dire circumstances. And under these circumstances the chances of getting a payoff are rather slim because, you know, the world is crashing and burning. Some time during the crisis the risk became very real which was reflected in the market prices of credit protections. But DB and "investors" continued to act as if the risk was small.

What I don't get is who paid for that risk in the end. I suspect it was the government which bailed everyone out with public money so that the doomsday scenario was never realized.
I taught my girlfriend LaTeX using Overleaf -- having the PDF by the side and being able to see changes immediately really helped. And now she has a really beautiful-looking CV.
He has something to hide
>call from Go into Cocoa libs

It can be done, thus:

#cgo LDFLAGS: -Wl,-U,_iosmain,-U,_PopUpDialogBox

Any developer who wants to do this needs only to create these #cgo statements for whatever Cocoa API they want to use, and they become available from the Go context ..
United States V. Ross William Ulbricht: GOVERNMENT SENTENCING SUBMISSION [pdf]
Too late to edit, I'm committed!
How to add voice recording to Imovie to make it Brilliant
So, what? Everything is vulnerable.. You're not restricted by official images, just create your custom image that is not vulnerable ;)
All json-schema validators have very different interfaces. Now switching between them is easy.
> To take more extreme example, first thing you expect from housing is a protection from elements. So according to YAGNI, you should build the roof first, and see if it's good enough for you (and you don't bother, for instance, that you can only stand in the middle of the room). Again, no one really does that with real houses.

Maybe they should. I once stayed in a house with no internal walls. It seemed weird at first, but then I realized I actually quite liked it.
As a workaround, update/rebuild your containers more often and deploy more often.
Live stream recording here: https://youtu.be/Fx304EfqtMo?t=395
I don't think you understand my comment. I don't want to disable it.
Esports (at least RTS) games have to be constantly iterated on with regards to balance. That tweaking is probably simple enough when it is things like giving a unit 5 more HP, but the designers can not a priori know how the game will play out on the dedicated, professional level. Maybe what strategies and mechanics that are balanced on the level of "500 hours played" works great at that level, but falls on its face and is inverted at professional levels. Then you are either left with some part of the design that is so broken that no one uses it (underpowered), or force the game into a spectator-unfriendly monoculture of single-strategy, single-unit or whatever the players had to use to adapt.

Designers of competitive RTS games rely incredibly on player feedback. And they are eager to give it.
I am very impressed by the way SQLite maintains it's documentation. http://sqlite.org/docs.html
> the author has corrected the discrepancies since then

As of the time I posted this comment, the blog post still seems to be comparing indexed MongoDB operations against non-indexed RethinkDB operations. Under those conditions I'd expect RethinkDB to be at least 1000x slower than MongoDB. The fact that he's finding that RethinkDB is only 3x slower than MongoDB makes me think that there are still other major problems with this benchmark.

> No, but at least he tried...

It's true that the author tried; but that doesn't change the fact that people are going to read this blog post and assume that the numbers are at least approximately correct. As a RethinkDB employee, it really frustrates me to see RethinkDB being judged according to benchmarks that are conducted so carelessly that they are essentially random.

I think this is the fourth time in the past year that I've seen a third party try to benchmark RethinkDB and get something wrong. Maybe we need to start a "best practice" of checking in with the maintainers of a project before publishing benchmark results about the project.
Football (soccer) is relatively minor sport in the U.S. but it is still a major country in this sport as well: during the FIFA ranking history, it averages on position 19. That is very good, and higher than the ranking of several past World Cup or continental competition winners.
Live stream recording here: https://youtu.be/Fx304EfqtMo?t=2468
7 Must Track Metrics for Inbound Marketing
That's a rather harsh argument and we could (not trying to derail this) proceed and say the same thing about people that use Google products, Twitter, WhatsApp, 'the cloud' etc. - and in the end we'll finally agree with Stallman.

I don't have a Facebook account and have to admit that I never truly understood the benefit, the appeal. It seemed full of ads, games, random pictures and without structure - i.e. you might read about people ranting about the current soccer game (I hate that), but miss an important update from a close friend.

Plus, as soon as email isn't a suitable format to exchange information, I have the impression that the communication is either too broad (shout to the public) or trivial (one liners about nonsense). I don't get it.

I DO get the network effect though. So while I agree with you that the 'why' might be hard to grasp, I don't like the stab at people's intellect. It doesn't matter if an individual is intelligent or not - not using a service that all your peers decided on using is hard.

Your last line about being severely judged by friends especially doesn't sit well with me.

For one, people might not judge you - they just might communicate less with you, forget you at times (because you're the one person that needs a mail or a text message or whatever).

And then there's the ridiculous 'find different friends' part. Seriously…
India should make more of a valuable asset abroad
And can "Hello World" work around it by returning (void *)0 from main()?
Is there anyway to navigate that presentation using only the mouse? If not, why not?
Competition is about alternatives - the Air Force could have just trusted the Lockheed-Boeing venture to do it. F-35 comes to mind and not in a good way.
Can a news site be reborn? Gigaom readers are about to find out
Back when I was into Python (mid-2000), this reference was quite famous:

Python for Lisp Programmers - http://norvig.com/python-lisp.html
I like questions that bootstrap productive discussions. Showing code might work, but asking to write code is a bad idea. Even simple code can become a nightmare to write if the person is uncomfortable due to the natural pressure that arises in a technical interview. The best programmers transform themselves while alone, in front of their computers, and there is no way to induce this kind of behavior in an interview. There is no way to get completely "in the zone" there. The best you can do is to read code previously written and talk - a lot. Talk about algorithms and data structures if that's the case, but don't ask the subject to write it down. He is not prepared to.

To filter out extremely unskilled candidates, simple questions might suffice: "how many bits does a byte have?", "what's the difference between an array and a linked list?", "what is the difference between GET and POST?", "what is the difference between a function and a macro?", and also more informal questions: "what technologies are you watching lately?", " what fields of computer science you would like to dive more?". These make it very easy to spot people who have no idea of what they are doing.

One thing that I have never seen but I suspect it should work is to ask the candidate to write the code days before the interview, and then bring it to discussion in the moment of the interview. In this method, you eliminate the uncomfortable process of writing code in an unusual circumstance but keeps the feature of discussion.
> sensible choice is made for you

At the moment, it's chosen to be 6: https://doc.rust-lang.org/src/collections/btree/map.rs.html#... (note the FIXME though).
Supercharge Your Brand with User-Generated Content
2015 Soil Atlas: Facts and figures about earth, land, and fields
It would also be helpful if they could notify the recipient when my digestive system is below 10% capacity, so they would know that I'm likely to stop for a bite to eat (and maybe suggest a good restaurant nearby if Facebook hasn't done so already).
From the instructions on the page:

> Use the left and right arrow keys _or click the left and right edges of the page_ to navigate between slides.
makes little sense but since go doesn't have user defined parametric types, it makes no difference.

Now I wish I had 1 million dollars and a better brain to work full time on a proper language that would fix go's issues. What a missed opportunity to create something everybody would be comfortable with. It could have been the biggest language of the next 20 years in webdev, CSP is a great concurrency model. At least it will inspire some people in the future I hope. Rust is cool but doesn't have CSP builtin.
64-Bit PC Operating System
docker hub: the petri dish of choice for malware
It is said that for a goldfish, each turn around its bowl is a new experience, because it remembers nothing of its previous circuits. You appear to be in the same situation, unaware that each claim you make is contradicted by something you wrote earlier.

Take, for example, "all I ever said about it was this". What you actually did was first make the claim you are now repeating, and then, when I pointed out that doing so completely contradicted your original position, you changed your mind and decided that Eslaught's explanation was irrelevant (https://news.ycombinator.com/item?id=9433742). Now that I have asked on what grounds you consider it to be irrelevant, you have circled back around to your original position, creating a lose-lose situation in which you have contradicted yourself regardless of what your actual opinion is.

You have reached the point of creating epicycles of contradictions within contradictions, as all this is going on within your larger contradiction of first claiming inordinate complexity of any alternative to your approach and then trying to rewrite that as being merely a claim that there is necessarily some slight increment in complexity in avoiding C++. Let's look again at what you actually wrote:

"Sure you could do it that way. But it becomes exponentially more complicated because you need to either stick to one specific implementation of one specific language runtime, or you have to deal with explaining them all." https://news.ycombinator.com/item?id=9266387

That is not a claim of just slightly more complexity, and the phrase following 'because' is an attempt to offer some sort of explanation for this claim. It is obvious to anyone that you have changed your mind on this, and you have never attempted to offer any justification for the 'because' phrase, but so long as you insist that you have not changed your mind, it is not unreasonable for me to point out that you are still wrong even after one more turn around the bowl.

Furthermore, in attempting to present an example, you are having a problem with logical quantifiers. Putting aside the absurdity of claiming to believe that this sorry dialog is simpler and more straightforward than Eslaught' straight-to-the-point paragraph (the first one in https://news.ycombinator.com/item?id=9249285), one example cannot establish the general claim you originally stated, and your attempt to do so is simply an error in logic.

I see that my goldfish analogy is not quite complete - your revolutions are getting faster and tighter. This is not so much the trajectory of a goldfish in a bowl as one being flushed down the toilet.
Do you know what's not a beautiful interaction? Scrolling 40px on the website and wondering if your machine froze because it's this "cards scrolling over things" UI concept... Designers, don't make me doubt my scroll.
Are there any codes dependent on True and False being assignable? Don't those codes deserve to die?
I'd love it if the MAME project produced an emulator for the Motorola 56k DSP models .. anyone know of any effort to do that? I know its a gargantuan task, but .. so?

If this were to happen, MAME could start to take over the synthesizer (musical instrument) world as well .. imagine a Virus in MAME! :)
Great visualisation of sunrises/sunsets on instagram
Just how useful is it as a test? Suppose the "good" code is:

for (1..100) {
my $fizz = ($_ % 3 == 0) ? "Fizz" : "";
my $buzz = ($_ % 5 == 0) ? "Buzz" : "";
($fizz ne "" || $buzz ne "") ? print "$fizz$buzz\n"
: print "$_\n";
}

and the "bad" code is the one-liner:

print ( ((($_ % 3) ? "" : "Fizz") . (($_ % 5) ? "" : "Buzz"))
|| $_, "\n") for (1..100);

or is the following:

#!/usr/bin/perl
@v=(0, "Fizz", "Buzz", "FizzBuzz");
for($v[0]=1;$v[0]<=100;$v[0]++){
$k = ($v[0]%3)?0:1;
$k += ($v[0]%5)?0:2;
print($v[$k]."\n");
}

(All three from http://c2.com/cgi/wiki?FizzBuzzTest .)

What does that reveal about the interviewee that makes this a great interview topic? To my eye, I prefer #1, #3, and #2, but it starts to get into personal preference rather than anything seriously indicative.

Do you want to dock someone for not being able to give a seriously bad implementation?
> It may not always be better since you'll likely never be able to call from Go into Cocoa libs

IIRC, Go can call any Objective-C code through cgo.
Just wondering. WHat technology stack did you use for your app ?

Is it a swift only app ?
MESS is awesome (and was praised in the article, btw) .. incidentally what was your obscure East-German home computer? I'm a huge fan of 8-bit emulation and am always interested in hearing stories from folks who return to their code from 30 years ago ..