skysight-inc/HackerNews huggingface dataset:
They claim that only US cars are affected. Is this because liability costs are much higher in the US or is there really a different software used in the rest of the world?
I don't know anything about the French constitution, but many constitutions contain very vague or general language and some are very old. Courts often have to rule based on analogies, especially where new technologies are involved.
This also seems to be the motivation behind the already available Titan X with its 12GB of RAM. Some of the gaming hardware reviewers are scratching their heads as to why anyone would need 12GB attached to one die. I chuckled when I saw those reviews that were totally oblivious to the deep learning applications.
Thanks! I'll keep that in mind for when I run out of choices and have to upgrade :).
I agree 100%. I'm just observing that it is one of the few external sources of influence I see change organizational behavior. Business people FEAR google's impact on their success.
Some well-run startups make arrangements for this when raising a round. The VC will agree to buy into the round at X dollars per share. They'll also agree to buy up to Y dollars worth of stock from employees who want to sell. VC gets more ownership of the company, and the company doesn't have to give up more ownership. It's overall a good situation. I know that Cloudflare and a few other companies offer this.
I think the article is making out trace compilers to be far more limited than they actually are.

> Consider these optimization tips: Avoid nested loops.

I don't think this is true at all. The article is arguing that because a trace only contains one loop, that nested loops can't be trace-compiled.

As I understand it, nested loops are totally possible to trace-compile by having multiple traces that link to each other. See what Mike Pall wrote about LuaJIT (http://www.freelists.org/post/luajit/How-does-LuaJITs-trace-...):

"If the inner loop has a low iteration count, it'll be
unrolled and inlined. For most loop nestings there'll be a single
trace for the outer loop that goes 'around' the inner loop and
joins its exit with its entry. Otherwise traces link to each other
in linear pieces."

I would take what this article says with a heavy grain of salt. I don't think that tracing JITs are at all like "programming in a straight jacket."

Look at the LuaJIT performance optimization guide. There is nothing in there about avoiding nested loops, avoiding tiny loops, or avoiding loops with unpredictable iteration counts. It does however recommend reducing unpredictable branches: http://wiki.luajit.org/Numerical-Computing-Performance-Guide
Holy cow... honestly, I'm not even that interested in getting better at JS, but this game looks like so much fun. If I ever find a game like this for traffic-light simulation, that's the last day I leave the house.
That's an extremely interesting and helpful point, and makes me actually more sympathetic to her. Thanks for that.

Unless it also makes you more sympathetic to the Bill O'Reillys of the world and all the "problematic" blowhards on twitter, you're just falling victim to a convenient narrative.
Yes, I will definitely release the code and the dataset required to bootstrap the rest. It takes a long long time to run and you'll need a good bit of bandwidth. I won't be releasing the raw data because there is simply too much of it.
I think what's challenging in the current environment is that the most vested employees came on to a set of implicit promises made in the early stages of the company about long-term exit strategies. A decade ago the idea of a unicorn was unheard of so the equity grants seemed to have a closer date of execution than it was in reality.
This sounds crazy, but I'd have a small worry that giving out your CEO's personal phone number exposes potential attacks against other services that use the phone number as a token. Like:

(1) Do you have a store-loyalty program at CVS? Can I use your number when I buy stuff and get your coupons?

(2) Can I re-set your Amazon.com password using live chat with customer support by convincing them that I know your name and phone number and must therefore be you? Or can I at least have some of your recent orders declared missing and re-delivered to my house?

(3) Can I use your phone number in spoof caller ID then call an airline who auto-recognizes the incoming phone number and reveals info about the traveler's flights?

(4) Can I reorder prescriptions or learn about prescription drugs using your name and phone number?

Just some thoughts. Because a personal phone number is often not common knowledge outside of one's friends and acquaintances, third parties sometimes give it unreasonable importance.
The link doesn't include the word "glitch" anywhere. It was added by the HN submitter.

Edit: looks like the HN title was updated to remove the term as I wrote this.
It /should/ be an opportunity to reflect on your weaknesses, I don't think I've ever met a manager who would do anything but laugh at all-tens in a self-review, but I have been able to keep annual review conversations short and comfortable by expressing self-knowledge and making it clear that we both wanted me to improve in the same ways, but also that there are simply some areas I'm not as strong in as others, and I should be deployed as such.
Ah, thanks for pointing out my error. My point still stands, though with a little less rhetorical flourish.
If you're going to post an opinion that's a long way from other people's you need to step it out slowly and provide evidence for each mental leap.

If you don't do that you tend not to win many converts to your way of thinking.

A few examples:

So then women are the ones who need to follow that advice.

This is just confrontational, and seems to show resentment towards women. Women are the group you want to convince people to stop feeling sorry for, but you haven't done that yet. Peoples' backs are now up. You've already lost your audience.

One only needs to look at CDC studies to see the socially wide
preferential treatment they receive to see how great...

Here you're not properly identifying your new topic, but more importantly you're treating your conclusion as if it were so obvious it's not even worth explaining. This just makes you sound like someone suffering from confirmation bias.

Oh, it is called 'beneficial sexism' in an attempt to paint it
as bad, but when you take a look at society as a whole, it is
clear which group is actually better off.

I had to Google this, I assume you mean 'benevolent sexism', which I now understand to be the assumption that (for example) women need to be protected by men. Again, you jump straight to the conclusion without stopping to reason, which is the same symptom of confirmation bias as above.

Hope some of this helps.
That's not quite correct.

I've had good success in architecting/designing classical web-app (MVC-ish as overall architecture and minimum JS on front-end).

I can write unit-test with mocking and integration-test with in-memory database as part of my build/compile loop.

But I struggled a lot with front-end.
Python didn't used to have such flexible classes. It has migrated that way over time. So 'dick move' doesn't seem to be a valid criticism, to me.

That said, Python is a hybrid under the hood. It has become more prototypal over time, but still enforces the distinctions between classes and instances.

I personally think that the opportunity to fundamentally open Python to a better object model was missed when Metaclasses were added. I like Metaclasses in Python, I think they need to be there, and help all kinds of tasks. But it might have been better still to support full prototypal inheritance at that point.

The complaint I'm making is definitely true of Python though, because it dresses its objects in the outfit of classes and instances, few programmers end up understanding the underlying model and how it can be used to improve their code. And, because of that, it is unwise to use those techniques in code that will be written and maintained by a team. I tend to get nervous of code that uses custom Metaclasses, for example, because of the burden of education is imposes on a project.

I'd prefer a situation where Prototypal inheritance was actually taught as the Javascript approach. But perhaps that is utopian and naive.
It could also be related to the cell network used.
It had been brewing a while, in my opinion. What I was seeing happening was, reasonable people would point out flaws in the article, then a moderator would jump in and argue with the person like they were a child and their points were stupid, escalating the situation and probably now pissing off more people than just the original complainer. I stopped reading their comments because of the moderators. Moderators should be seen and not heard.
One difference is that Kotlin's types are non-nullable by default http://kotlinlang.org/docs/reference/null-safety.html

Another is that there are no primitive types.
Engineering Your Organization
I have no issue with drinking, but the idea that I need to "go out" with my work peers is annoying. I already spend too much time at work for my liking. I don't want to add on top of it schmoozing time I'm not getting paid for. I recognize the reality of social promotion and I know I'm paying some networking fee for not attending such events, but I still don't want to go.

I resist the idea that not going is "lazy", however. "Lazy" is spending the work day reading Randall Munroe's "What if?" instead of working on the outstanding task list (I'll accept guilt on this one). Lazy should not be considered not attending extracurricular work activities.
Play Half Life on Android Wear
> even bypassing ROT13 "encryption" is criminal under the DMCA.

Is it? I thought the encryption has to be "effective", which would not be the case for ROT13. I would even argue that ROT13 is merely an encoding.
HowTo: Build an Instagram Printing App in Node.js
Distressed Denim: Levi’s Tries to Adapt to the Yoga Pants Era
Archie Bunker wasn't being "ironically racist".
Yeah, it really sucks to be forced to act like a grown-up, real company spending money on oversight and compliance. Much more fun to just buy pingpong tables and keep the beer kegs full.
Can Desalination Counter the Drought?
It's more than just overhead - going public forces you to think in terms of quarterly earnings reports.

It's very hard for a tech company to thrive in that kind of environment - capital expenditures required to develop new products or enter new markets will often not be profitable for several years, and getting the public market to understand that is impossible.
That's one of the things I'm considering right now. To re-write the top 1000 or so with annotations and then to sort them by category as well as an example of a site that is 'clean' in the same category.

There are a ton of offenders and some of them are very well known.

One of the interesting things you find when you look at this data is that the bigger sites really do have their stuff set up better (for instance, by using in-house analytics) but there are lots and lots of exceptions and some of them are quite shocking. For instance, I've found two major car brands that include evercookies on their corporate websites in Eastern Europe, a thing that no respectable company should ever do. I suspect an ad agency is the cause of this so I'm still digging away at that.
Interesting that they chose to go with GORM for their orm layer. I feel like there is still no de facto winner in the SQL abstraction space for golang yet.
They don't readily advertise it, but the cost appears to be $15 per month (per number ?).
Even that rebuttal is too specific. The article is mainly unsupported assertions of the correctness of the author's opinions, interspersed with whining about issues that are totally orthogonal to REST.
You are very correct. =c) This is why I won't be using that line as a security number in any case (but you can have my coupons, sure, I don't mind). I have another line for that. I'm glad someone else also thought of that.
Which costs less in the long run, a potential class action lawsuit and loss of consumer confidence, or better system security?

If necessary, consider that security is a feature you can sell, when your competitors are following the path of least resistance and paying out their settlements.
There is in practical terms no such thing as "draining a secure random number generator".

Most RNGs are at bottom stream ciphers. The stream cipher problem of stretching a small key into a very large keystream is fundamental to cryptography, and RNGs are an instance of that problem in the most favorable setting: no message boundaries and no coordinated state.

You don't in practice worry about AES-CTR "running out of key", and so you shouldn't worry about urandom "running out of entropy".

It's understandable why so many people believe this: the Linux urandom man page invents a whole parallel universe in which this is not only a live issue, but one with applications to specific kinds of cryptography! Until we find the appropriate incantations to shut down that particular portal to the world of the Elder Things, it's best just not to look at it.
IANAL, but I think that's what's sticky about equal pay, or one thing.

For a given job, not all _people_ will get the same pay, and as individuals, a particular man and a particular woman may not make the same, but across an organization we should find some balance, there should be women who make more than some men, etc..

I don't think anyone wants a situation where granting any individual a raise means that everyone with similar responsibilities (no two people 'do the same job') gets the same raise.

But as I type this, it's clear how all of this grey area can (and surely IS) be leaned upon to maintain the status quo.
give them definitive statements

Concise, confident: "This book focuses on the best testing tools and frameworks."
Not entirely true. IPO as a process exists to allow companies to raise money from the public, especially when private funding is not available. Overhead, requirements and legalities are a side effect, and if you have any money in a public market (like 401(k) in US), you absolutely want that. I do.

When private funding is available, IPO is not needed by definition. And since comp structures are set up with the expectation of IPO or exit, it's employees who are affected.

If you are negotiating an offer with a private company, you should attempt to price the risk of having to forfeit your stock comp. This risk has increased recently (that's what this story is about) but most people still under-negotiate it in their offers.
It's due to the SEC. The SEC places restrictions on who can buy shares in the private startups -- eg. you need to be an "accredited investor" to purchase them (>$1M liquid assets or >$200k/yr earnings). The SEC also places limits on the number of shareholders a company can have without (effectively) going public... which creates an incentive for startups to disallow current/former employees from selling their shares on the semi-private market.
My point is that the "values" attributed to them are not necessarily intrinsic in the eyes of the subjects of the experiment, regardless of whether they've been designed to be so (based on rewards, etc.).
Best PSA in a while. I left a job once largely out of friction with the top decision-maker (not actually the CTO, a director-level, but functionally the same thing) where there was tons of fear around well-established technologies that the decision-maker had never gotten around to learning and pretty obviously didn't trust that we had a handle on it. The visible lack of trust led to defensiveness all around (us because we weren't feeling trusted, him because he thought we thought he was dumb), and nobody who championed those ideas were there six months later and the company's tech-debt hole had only grown deeper.
The messenger did some stunt hacking on a highway to promote their talk, and didn't follow any guidelines of responsible disclosure to the company so they could less drastic steps to fix the problem or have some time and perhaps do it in a way that isn't quite so expensive or rushed.

Should they be criminally charged, no, not for the hack itself, perhaps for the highway theatrics. But they deserve to sweat and hire some lawyers, and perhaps face a civil case for the irresponsible way they disclosed it.

The surest way to get legislative pressure put forward to regulate the info sec industry and put red tape that hampers or outright outlaws security research and activity is to have guys like this being so irresponsible with research that affects people's lives as to give them cause to.
> This is why companies with skyrocketing valuations are particularly dangerous for employees. Shelling out tens or hundreds of thousands of dollars is hard enough for most. You can imagine needing to pay millions of dollars to acquire your options when you don’t have it.

Huh? The exercise price for options is established when employees are granted stock options, which almost always occurs at the beginning of employment. Employees can calculate the total cost of exercise based on the information contained in the Notice of Stock Option Grant. You can and should ask for this information before you join a company.

If you are granted 100,000 options with an exercise price of $0.20, you know that the total cost of exercise (assuming full vesting) will be $20,000. The company's valuation could increase fifty-fold and it wouldn't affect the cost of exercise.

Companies with skyrocketing valuations can be precarious for employees who join late, but here too employees can calculate everything up front and they should take into concern liquidity risk when evaluating what their options are really worth.
My new favorite is soda water with a splash of bitters. Gives you an effectively-nonalcoholic drink that's more interesting looking than pretty much anyone else's at the table.

It's also a great drink to have when you're out drinking, if you need to pace or hydrate yourself.
I just can't let this one go by without mention of the "Ballmer Peak" http://www.urbandictionary.com/define.php?term=Ballmer+Peak
and the requisite xkcd
https://xkcd.com/323/

I personally prefer a nice espresso myself :)
Why Waterloo's reputation is growing in Silicon Valley
Isn't that server side?
Much better. Use this!
It's damn near impossible to find a buyer without financials. Unless you work at a unicorn that raises money on hype, you're going to have a really tough time.
I would say this a sample of 1 - and from a biased source, too.

My daughter graduated form high-school last year. Not only had I not heard a single case of girls being refused entry to anything - most of the times it seemed like my daughter and her female friends (most of them straight "A" students in a very competitive high-school in the Boston, MA area) were almost harassed to join the math club, the robotics club, etc.

None of them had any interest - they all found it "boring". The reasons are complex and a another topic, but in short, part of it is biology, part of it pop-culture where "nerd"/"geek" is not something you want to be.
I was under the impression that most insurance companies aren't part of a larger business entity that directly invests their float in other companies.

I'd assume there would be advantages on that closer relationship vs a stand-alone insurance company simply investing in a publicly traded offering.
I think it's a great decision. Vulnerabilities should involve this much pain for the auto companies.

We all acknowledged the issue is architecture, and that can't be fixed by flashing firmware.
Correct. http://www.legifrance.gouv.fr/affichCodeArticle.do?cidTexte=...
Interesting. It's the Blackberry way and generally a good idea.
Sure. My point is more that a fix that eliminates the ability for people to just use the internet to manipulate the vehicles removes a great deal of the urgency for corrections on the vehicle side.
WTO Deal to End Tariffs on More Than 200 Tech Products
Focus on quarterly numbers is a side effect, which is unfortunate. You go public not because you want to report quarterly. You go public because you want public funding and potentially better terms than private funding.
Nope, because my ssh key is on my phone and my tablet, with an ssh client, and I pretty much always have my phone with me.

I do have a USB thumb drive with a bootable standalone system which I could use on a random mmachine --- but even if that solves the problem of exposing my password or ssh keys to a system which has malware on it, I pretty much assume that random machines, especially those at airport lounges or internet cafes, probably have keyboard bugs installed, so I wouldn't really trust my bootable thumb drive on those machines anyway.

I might use the thumb drive on a friend's machine which I really trusted, but most of the time I'd much rather use a trusted machine that I own, such as either my tablet or my laptop, or in the extreme cases, my phone.
Show HN: Article Extractor API – Quickly Extract Articles from URLs
The problem with drinking is the guilt about drinking problems. People are more addicted to shaming themselves for enjoying something, than they are to the thing they wish they wouldn't enjoy.

I put all that down to a hangover ( ... ) from our Western culture's Christian legacy programming. In a climate of pervasive fabricated guilt, people will fabricate the greater guilt of the Other to make themselves feel that little bit better. Hence the obsession with amateurs diagnosing the drinking problems of their peers, to assuage their own unresolved guilt!

Let's drink to that!
Yes, that's exactly what sensible RNG interfaces do, like std::random in C++. If your underlying engine only produces 32 bits at a time, it'll grab two of them when you request a 64-bit type.
Url changed from http://www.inc.com/larry-kim/your-startup-s-pitch-only-needs..., which points to this.
This is news only in that it's "news" - nothing about the decision to do this should surprise anyone. Apple isn't Best Buy - why would they sell a product that doesn't work in their ecosystem. It would be like the Microsoft stores selling controllers for the Playstation.
As a supertaster, I never liked the taste of alcohol, but I can tolerate it in heavily sweetened cocktails. I do drink under very rare circumstances, either when I'm looking for the intoxicating effect, or when the situation strongly call for some amount of conformism (being asked to share a drink with someone who lost a relative, to share a toast at a wedding, etc). I average about two or three drinks a year.

Overall, I have a strong disdain for drinking culture. There is some sort of pride associated with heavy drinking, especially among younger folks, even though there is nothing to be particularly proud of. I think most heavy social drinking is done by weak willed conformists who are looking to fit-in rather than cultivate their own individuality through self-actualization.

As far as the effects go, ethanol is a dumb drug. It can be useful in some circumstances against social anxiety - something I wish I had known earlier in my life - but the level of intoxication conducive to perfect social fluidity is a small peak that is hard to shoot for (no, not Balmer's peak).
That explains it. Thanks !
Expanding on my point a bit, I'm not arguing that in theory GC and memory layout are orthogonal.

Just that in practice you don't see memory layout in languages that are managed. Since I'm usually not in a habit of building a new languages to solve problems it's something worth understanding when making a technical selection on a language.
Another glaring issue that the article doesn't mention is option lifetime. Most options have a lifetime of 7 years from grant. Companies are delaying going public longer and longer. There's a very real chance that early employees can't sell shares, don't have the money to exercise their shares, and will watch their options expire from old age because the company thinks it's cooler to be private. This is a very real scenario; one that I'm about to face.