skysight-inc/HackerNews huggingface dataset:
TCP Fast Open is a terrible idea, and RFC 7413 should be marked as historic so that no one actually tries to implement it. Google has given up on it in favor of QUIC and so should everyone else. QUIC allows for "zero RTT" requests that are also signed (preventing spoofing).

We started blocking these large requests over 3 years ago when we started seeing them. Interestingly enough, that was a full 6-9 months before Radware wrote an article and coined the term Tsunami SYN. We just called it "big SYN". The attack is trivially easy to stop, and anyone running a client that tries a TCP Fast Open should expect failure frequently.
Are other software engineering jobs more fun?
I just completely changed careers to software, following my passion and gift for solving problems and writing code.

While I don't regret the move, I've been a little disappointed.

Things get done so slowly at my job. I feel like my natural talent and passion get wasted. I also get to do very limited interesting work. I'm not a fresh college grad - I'm used to the corporate world and expected some frustrations and I didn't expect to always be doing something cool. But I was hoping for a little more excitement.

To make matters worse, the tools we use are excessively complex and clunky and in the short time I've been here, we've had several outages of our version control and issue tracking systems.

And a lesser, but still important point is that my talent will never mean much. Being new means I'm not as fast as I'd like to be. But half of my work is process so the best I can do is really a 2x improvement.

I wonder, is it just the company I work for? Is it because we use Java or because we manage our processes so poorly?

Are other companies better?

Is consulting any better?

Edit: What about startups? I have family obligations but I have substantial savings and can stomach some risk.
It's not just science that progresses one death at a time.
Amazing! Webbrowser version here: http://wheelof.com/sketch/
I got a good website from crafting pixels
- If you are a technical cofounder, what is the topmost item in the must-learn list for an ideal non-technical cofounder?

- Sales

- Ability to understand the limitations of the team and product

- Hiring/Firing

- Charm
Good article, I agree with a lot of this, but I can't help myself from commenting.

>>> When given the choice to add a preprocessor (e.g. LESS, SASS, CoffeeScript etc) to the technology stack, the BFED realises there is a deeper impact beyond just "writing less code". Will it be harder to onboard developers? Will debugging code be more difficult? If the answer to any of these questions is yes then the BFED will say no to preprocessors.

Really? You will ignore the many many advantages of pre-processors because it will be harder to train new people? Come on...

>>> Furthermore, the BFED realises that Single Page Applications cause severe problems and that by avoiding them and leaning on the server appropriately provides a better experience and reach.

That's a bit one sided. There's a time and place for SPAs, you can't just dismiss it entirely. Every web app today should be an SPA.

Edit: I should clarify that by webapp I don't mean website. There seems to be some confusion.
Show HN: BootBundle – bundle of templates, snippets and stuff for Bootstrap
... and yet, with all that horsepower, they still stutter and lag like crazy. An iPhone might be a less powerful computer, but you wouldn't know it from the UX (if you are upgrading every 2 years and running the iOS release that was designed for your phone - running too many versions ahead can produce a similar experience).
The Uber Economy Worries Hillary Clinton
LispWorks has CAPI which is an incredible cross-platform GUI library which compiles down to the native GUI tookit of the host. It's fantastic!

http://www.lispworks.com/documentation/lw70/CAPI-M/html/capi...
This is about Apple's massive profit margins, not some vendors inferior ecosystem which still does a decent job of making billions.

North America is accustomed to overpaying for their mobile phones and services so much that they can get the most expensive device for next to nothing because they sign a 2 year contract with a telecommunications provider who's plans are nothing short of gouging.

Now the real question is, how come no one is competing with iPhone dollar wise? I would love to see someone come out with a top-end $900 Android phone that is as stunning as an iPhone. It seems Android hardware vendors are more tuned in to bloating the OS with gimmicky features rather than creating tier 1 hardware.
You tell us: http://www.hplovecraft.com/writings/texts/fiction/src.aspx
I disagree that there should be libraries for GUI components. As soon as you try that, you end up compromising the UX with either non-native UI components, or lowest common denominator APIs that try to bridge iOS/Android. Write your models/controllers and other logic in Go, but keep your views native and use go's bind tool.

Sidenote: You can write OpenGL ES apps in Go (aka games). These typically don't use native UI controls so that's a great use case for go mobile.
Actually, it's access to "Your accounts" that Firefox for Android now wants. That's for "Sync", or so they say.

A browser shouldn't have access to your accounts. That opens up a big attack surface.
SYN floods are pretty easy to defend against. Most devices do SYN cookies in hardware at line rate. We run midrange devices that have thwarted 40M PPS SYN floods without a problem. I'm not bragging or anything, just offering a datapoint that SYN floods are easy to stop.
In a situation like this though, it can probably be thrown out for lack of consideration. You'd also probably have a decent suit for damages as well: if a company hires you with a non-compete and then dumps you on the street because it can no longer meet it's contractual obligations to you, but still prevents you from earning a wage through an onerous contract (which they unilaterally terminated) causing real damages to your lifetime earnings.
I don't particularly enjoy online courses. The density of technical information is very low. I prefer reading papers and then doing a nose dive on related papers to fill in the knowledge gaps. Papers are like nodes of knowledge with edges to relevant information (references). For things usually not covered in universities, papers are pretty much crucial. For example, I found it a lot more useful to read the original or early b-tree and octree papers as opposed to looking them up in text books. And these directly affected my code. The DynamoDB paper was another one that affected my work thinking, even though we don't do a lot of distributed systems.

There are many famous papers out there (search on HN, the topic gets posted frequently). I highly recommend you choose a topic, and just look up the important papers in that topic (google scholar is a great tool for checking citation numbers).
Apocalyptic narrative is as old as writing. Human understanding also grows with technology - the British Empire only banned slavery around 200 years ago.

Dystopian stuff has the same problem for me as horror. All I see is Joe Flaherty as Count Floyd saying "Oooh, scary!"

The only horror movie I ever liked was "Alien". Because it was credible.

So meh.
Less actually.

It will loose tracking on a duck dive and on wipe outs. It even has 'barrel mode' so that the camera will keep tracking on your vector should the signal cut out while you're shielded by the wave lip. Haven't had much use for that feature :(
Still using Java in 2015 – A disaster in the making
'All the data' most of the time are references to all the data.

Also, I would not reallocate, but allocate at max size or, possibly, half size and grow if needed.

With that change, once you access the array, you likely have all pointers to shift in your level 1 cache.

Because of that, I expect it to be plenty fast enough.

(Hm, are there CPUs that have instructions for shifting parts of cache lines around?)
Uber Drivers Nabbed in LAPD Sting Call Their Arrests Entrapment
Nah, it doesn't use "gibbous", "squamous" or even "rugose" at all. Null points, 0xdeadbeefbabe, null points.

Parody sites like http://thedoomthatcametopuppet.tumblr.com/ actually give a pretty good sense of his signature style.
AFAIK there aren't other ways to get the performance required to be competitive in the financial space. People that are using these libraries don't want to use undocumented, Unsafe code. However, their hands are forced given the races they are competing in. They could switch to C++ but that's not really a great option for firms that have java code bases going back 10+ years.

Plus, personally, and for a lot of others, the jvm plus a dash of sun.misc.Unsafe, is a lot better than going over to C++.

More concretely, Here are two sets of trading libraries that use unsafe for direct memory access:
https://github.com/real-logic/simple-binary-encoding
https://github.com/OpenHFT (various libraries in here use it, once you drink the Unsafe Kool-aid it's hard to turn back from the performance benefits you obtain).

If Oracle just rips off the Unsafe band-aid without a replacement, the business decision for these firms is still sound. They will just stay on 8 and start making migration plans (likely to the C++ bandwagon).

However, It sounds like Oracle plans to give a sane alternative which is good and what everyone using Unsafe would prefer (along with deprecating it the meantime to give them some time to adapt).

One real world example: The CME (Chicago Mercantile Exchange) reworked the entire way they distributed market data (v3 of their Market Data Protocol) to mirror the cutting edge in performance oriented serialization libraries (e.g. Cap'n Proto). They also commissioned an Open Source library for parsing that data (real-logic SBE), it uses unsafe to approach the performance of C++ code.
"niche" as in probably applies to a relatively small percentage of job postings overall.

Objective-C and Swift are obviously big in terms of absolute number of jobs available but I'd suspect still an order of magnitude smaller relative to the other three combined.
Some users do expect arbitrary precision for basic operations (addition, subtraction, multiplication, division) since the Calculator app that comes with Windows does it[0].

[0] http://blog.codinghorror.com/if-you-dont-change-the-ui-nobod...
Neurosci research identifies more effective way to teach abstract math concepts
From the landing page:

Camera: Real-time, Accurate
Break Beam: Anonymous, Accurate
Density: Real-time, Anonymous, Accurate, Cheap
Dave,

Figure out where you want to work the most. Don't be a fence-sitter in this regard. Follow your gut.

Next, let that company know that you have another offer that is better than theirs. Explain that you really want to work with them and ask if they would be willing to match the offer. Negotiate for more vacation time as well, but do it all at once.

If they don't match the offer then see what the best they can do actually is and take it. A few dollars here or there aren't going to change your life in the long run. Go and be happy.
Customer testimony on places like Webhosting Talk have cast all of those numbers into serious doubt. OVH is more likely to nullroute your IPs than it is to fight off a 300gig attack.
Under high loads the site restricts access to non USA/Canada IP ranges
Buy a device with stock Android.

The selection is low, but the Nexus lines have served many well. I'm super excited to see some new phones later this year. (i hope)
A monad wrapping API for Java
I suspect in most of the countries in EU you can go without visa for 3 months - your US passport grants you a tourist visa. When you go to another country, you get a new visa for that country, which means that you could stay in Europe for a while by going to a new country every three months.
As a hobby, I drive racecars. I have been thinking about something like this near the track to video me going by. (Far away vantage points look boring.)

It seems like for much less than $500 you could build an RPI and just track moving objects via optical flow (assuming you are alone on the track.)
Binder was created to solve the same problem (Linux IPC was too slow) but uses somewhat different approaches.
Work at a smaller company. Like 10 people. The smaller the company, the more roles each person does.
Thanks - I was thinking of doing something similar. I think there is value in doing the legwork of organizing all this material into a coherent, step by step type of guide / book. The information obviously exists elsewhere in scattered pieces - but I believe devs would pay to have it curated sanely for them.
XSS?

http://durat.io/?q=%22%20/%3E%3Cscript%3Ealert(1)%3C/script%...
> how can I negotiate a better offer?

Which company most believes you can add real value, create the biggest positive impact, & help generate revenue? Understanding others perceptions is essential to successful negotiation.

Suggest reading Stuart Diamonds brilliant book, Getting More. Here's his presentation @ Google > https://www.youtube.com/watch?v=ZOZo6Lx70ok
Aren't they kind of doomed in the face of contactless phone payments?

I guess I was never in the target market anyway, I've never had more than 2 cards.
A few more details on Reddits recent troubles from ex CEO Yishan
a non-technical cofounder could have a deep understanding of the market dynamics and users the company wishes to serve. This includes pricing tactics as and strategy, channel development, scaling a non technical team.

They could help develop the long term strategy for the company ...what are the 5,6,20th features the company will sell etc?

edit: also, they can build the skillsite necessary to develop and test business hypothesis. this might be the most important this they do early on.
While interesting, we cannot all be BFEDs. The reason the BFED exists is because the non-BFEDs pushed the envelope years ago to make what the BFED now relies on standard.
That is an amazing revenge story.
If it was split the other way it would be worse, vertical FOV is just as important as horizontal FOV on most of the tracks in MK8. I cannot imagine Rainbow Road with horizontal split, it would be terrible.

They made the right call.
You can make this argument, for sure.
You will almost certainly lose ;)
I've seen cases where wording similar to this has been used.
It was found to cover the pieces that provide the services, exactly because it is worthless as a protection otherwise.
(If I can get an injunction against you stopping you from running a critical piece of your service , you won't be able to provide the service)
Why HR-Led Recruitment Is Killing Your Startup
The Real Threat Posed by Powerful Computers
I kinda recall FPS using the paddle that way. d-pad for position, analog for aiming.
I always pictured him a Peter Capaldi myself.
I can tell you that almost no one uses TCP Fast Open. It's a draft RFC that violates other RFCs. Google has given up on it in favor of QUIC. You should give up on it, too. It's not going to happen. It's a bad idea cooked up by ivory tower researchers who have never run a network.
Firefox is important to the web, and the web is important to our civilization.
Dunning–Kruger effect.
Ask HN: What happened to Dart?
I remember their being a lot of hype around Dart given that it was Google and Chrome and all that jazz, but I don't hear much about it lately.

Their website has been refreshed: https://www.dartlang.org/

Looks like there is a conference coming up too. Just wondering what the general feeling is? Is this the replacement to JS or just another language that some will chose to learn?
> then wouldn't they also be vulnerable to hundreds of other issues fixed in the past few years?

That is a scary thought. I guess this is what happens when you cling to using XP and IE8 after Microsoft has ended support.
Why on Earth is it a big deal that you need to pass a flag to the JVM at startup?

I understand that backwards compatibility is valued, but if I went to my CTO and said "we're gonna drop Java 9 in production, and we're not gonna test beforehand"...the reaction would not be pretty.
This is very similar to what Weev was indicted and convicted for.[0] Simply passing valid requests to a system can by construed as "unauthorized" if it is unexpected by the operator of that system.

[0] https://en.wikipedia.org/wiki/Goatse_Security
I also find this particularly confusing/misleading - since you deal mainly with physical locations (often called sites by owners), using the word "site" instead of "web traffic" seems odd. Also, listing a web based metric as large as 950% without any type of time interval really kills the true significance of that metric.
This is related and unrelated and maybe even meta to some degree:

There are a couple of companies that are guilty of using their free software update mechanism to try and trick people into installing crap they don't want (and might even mess-up their systems): Sun and Adobe.

I almost happened to me last night as I updated Flash on a test system and some bullshit anti-virus crap-ware was going to be installed because I was moving fast and neglected to un-check the check-box on the site. I was able to stop the install process and start over. No harm done.

These companies need public shaming to stop using this bullshit method to make a few more bucks. Are they so hard-up that they need to trick users to install crap to make money? I sure hope not.

Sun, Adobe, please STOP trying to trick users into installing crap-ware they were not looking for in the first place.
Boring has its place, and certainly can add a lot of value to a project. If everyones goals are aligned in creating a rock solid web site or app that never needs refactoring and has 100% legacy browser support, then boring is great.

Some of us are attracted to new technologies, and appreciate learning the lessons of what advantages or disadvantages come from building the same type of site or app with a different framework or technology stack. Especially those of us who aren't yet mature enough to write our own apps without the guidance of frameworks, and have not had a chance to work with all of the different possible approaches.

I think a healthy balance can be struck between the type of stability gained from the 'boring' approach, and the types of gains that can be realized from newer 'non-boring' technologies. Sometimes supporting IE6 is not a concern at all, and learning new language features from ES6 is an attractive proposition.

If doing front-end development were boring, I don't think I'd be as interested in doing it.
So next we need to add some stabilization to this platform and then you can just stick it out on a bouy ^_^
I'm saying that there are many options with non-obvious consequences, so don't try to wing it. Any mistake will cost you orders of magnitude more than a professional advice.
These are givens. You don't create any sort of decision algorithm unless you are trying to ask the computer to discriminate. The question is, do you understand what the political perception of the eventual outcome will be?

As an overly simplistic example: someone might point out that your algorithm's negative impact applies 75% of the time to racial minorities. There will be a political shit storm if that is the end of the story. But if you can show that the segmentation is actually 99.8% people in prison, you basically prove your algorithm is politically acceptable and pass the buck of outrage on somewhere else.
So imagine a situation where due to actual prejudice (for example, redlining, segregated, inferior schools, employment discrimination), outcomes and circumstances are clearly predictable by race. If you're not careful with your algorithms, your algorithm and see the world 'as it is' and see it 'as it must be' or 'as it should be'.
This was totally inevitable, and I was amazed so many people jumped onto the bandwagon when it was announced. Contactless payments were already a thing, chip and PIN was already announced... it would only ever have a couple of years to live. And then they took 19 months to deliver it.
Related: Fitbit Data Now Being Used In The Courtroom (forbes.com) - https://news.ycombinator.com/item?id=8620721
Just adding another similar/relevant https://dzone.com/links
I'm going off the goalposts in your original question.
This is the problem though. They're pretending that they're all unified, and have built a monetary system on that fantasy, while in fact they are all still independent. It is an inherently unstable situation, and we can expect a steady string of financial crises until something is changed.

The latest Greek bailout is just another example of them kicking the can down the road. No problems were solved, none of the underlying issues were addressed, it's going to be a problem again in a few months. On the other hand, it looks like everybody at the table knows that the current agreement is a joke. Did you see the timetable on the massive reforms Greece is supposed to implement? They've given themselves like 3 days to completely turn their economy around. And on the European side the agreement basically says "We'll maybe consider maybe extending the payback period if you succeed in completely reforming yourself by the end of the week." It's not even a funny joke.
You quite simply have NO option to do on the JVM most of the things people are using unsafe for in Java 9/10 without a migration plan from Oracle.

What Oracle is close to "hey all you performance sensitive folks, we aren't going to support unsafe anymore, can you tell us what you are using it for and how we can migrate to that explicitly?"

It just so happens that one of the leading proposals is "leave in java 9 but make it explicit to turn on". This is probably the right way to do this (in my opinion) but it does have the downside of making neither camp happy (it leaves unsafe so the purists are mad, and it causes headaches for people using unsafe).
Why should third-party libraries pay for Oracle's technical debt?
Yes, will be fixed.
A nice thought, but front-end tools are not really mature enough to be boring, sorry. I mean one could credibly say "oh I'm so boring, I use jQuery everywhere" but... that's not actually going to be a boring development experience. It will be exciting, in the bad way.
Re: C as used/implemented in practice
Agreed. Can we the people also set a date to kill off Facebook? In my opinion they are just as bad as Adobe, not so much on security but privacy.
What day is today
It's X's birthday
What a day for a birthday
Let's all have some cake.

Probably has just as many copyright problems.
If everyone is in the same system from birth, then the risk is evenly distributed when everyone pays the same amount.
The World's First Simulated Smartphone – A Security Blanket
I travelled to Croydon a couple of times recently and it was never just 20 minutes. The trains are hardly ever on time. Also, "quite affordable" still means around £900 for a 1 bed flat + another £110 or so for council tax.
Unless there is some identifier in the data that specifies race and the algorithm discriminates on that, it's racist. If not, then it's not racist. AM I RIGHT?
Yes, you're right. That's why we're primarily targeting a B2B market. Imagine that a gym has machines with our technology embedded. The gym's users would be able to seamlessly track their workout across different machines, just by using them as they normally would, no need for extra weight.

Note that, for continuous ECG monitoring, you need skin contact with 2 electrodes, from different limbs. That's why with Nymi, authentication is performed only once when the user puts it on, with one finger touching the visible electrode (the other electrode is on the underside of the band). In this case, there is no continuous verification of identity, or other parameters.
Android phones for some reason rarely come with enough storage. It's easy to buy 8GB phones, and Android is less space efficient than iOS. The only saving grace is that they often include uSD slots, although convincing your apps to use that space can be difficult sometimes.