skysight-inc/HackerNews huggingface dataset:
Web Developer | Budapest, Hungary | Full time | ONSITE

Opp.io - Meetings. Followed. Up.

We are looking for a Web Developer to join our team in Budapest. We are working on a world-class productivity software to help teams and businesses collaborate more effectively. The candidate will take part in designing system architecture and coding the implementation.

Responsibilities
- Take active part in software architecture planning and specification sessions.
- Implement the front end part of the agreed tasks using Javascript, Backbone.js and React.js. This includes modifying and refactoring parts of the existing software architecture and also implementing new parts and modules.
- Regular communication with team members.

Requirements
- candidate must have understanding of the needs to build a secure and fast single page web application
- deep understanding and hands on experience with web applications
- experience in Javascript, object-oriented design
- proficiency in HTML5, CSS3, responsive design
- understanding of security principles
- comfort with collaboration and open communication
- fluency in English

What we offer
- the challenge to build a world-class software product
- the opportunity of working in a team driven by cultural values
- an environment that supports education and learning
- agile, never-boring development
- employee stock options

jobs@opp.io | https://opp.io/jobs
Learn enough to be well rounded, and to not seem naive. I've met front end coders who can't perform "git clone's" without a GUI. I've met very experienced programmers who can't setup a basic ssh tunnel. I lose respect for anyone who says "this is my domain, and I don't leave it" - not matter what domain that is. Learn basic devops, and agile, and front end, and back end, and data analysis, etc. It's all fun.
Since NoScript is open source, I assume that people are keeping a closer eye on the code after these incidents. The author has to be aware that if he tries something like this again, people could fork the code and move on without him (like what Adblock Edge did to Adblock Plus).
The APIC's registers are an unusual form of per core black magic. As far as I know, no other memory addresses behave in the same way -- visible and reacting only to that specific core. It's unsurprising that Intel initially didn't catch this case.

Fortunately, it's `just` a root => SMM escalation, which are already more common than anyone would really like to admit.
http://www.forentrepreneurs.com/saas-metrics-2/ and http://businessofsoftware.org/2013/02/gail-goodman-constant-...
The Easiest Hard Problem (2002)
> That 'fix' is going to break a lot of other stuff.

True, but a short-term replacement along the lines of:

#!/bin/sh
unset DYLD_PRINT_TO_FILE

# Cleanse the sudo arguments here...

# Check MD5 of /etc/sudoers against known good
# value here...

exec /usr/bin/the-renamed-sudo "$@"

Would do the trick when put in the place of /usr/bin/sudo

EDIT: Added the comments regarding sanity checks.
What I'm Reading this Week (8/5)
Sure, the [unordered-containers](https://github.com/tibbe/unordered-containers) library is based on that IIRC, as is the [hash map in Clojure](https://github.com/clojure/clojure/blob/master/src/jvm/cloju...).
True. That makes everything hard.
Tax deduction is #S * (SP - Sale Stock Price).

This is equivalent to the standard: (Cost Basis - Sale Proceeds) calculation in a standard stock transaction.

Depending on whether this is a short term or long term loss, the following happens (taken from [1])

Short-term losses counterbalance those expensive short-term gains. What's left at the end of Part I of Form 8949 is the net short-term capital gain or loss. If there were no gains, then obviously the net would equal the total loss.
Long-term losses are applied to long-term gains. The result, at the end of Part II of Form 8949, is the net long-term capital gain or loss. Again, if you only have a loss, then the net is a negative number.
Next, you combine the short-term and long-term results on Schedule D. At this point, a loss in one section can offset a gain in the other section. For example, if you have a net short-term loss of $1,000 and a net long-term gain of $1,200, then you'll pay tax on only $200.
If there's still a loss, you can deduct up to $3,000 from other income.
If you had a really bad year and ended up with a net loss of more than $3,000, you can carry forward the leftover portion to next year's taxes. The unused loss can be applied to next year's gains, as well as up to $3,000 of earned income. A big loss can be used as a deduction indefinitely -- another important reason to keep good records.

[1] http://www.bankrate.com/finance/taxes/capital-losses-can-hel...
Lisp?
When people designing real spaceships say "deep space" they mean "beyond Earth orbit", but usually not past Mars.

In sci-fi deep space, yes, you'd have next to no solar power. (In fact, it's minimally useful in the solar system past Jupiter.) But if you can get there at all, you're probably not worried about that.
Well, I mean, there were consequences--as the article said, there's now malware out there that uses the exploit this guy publicized.
Our old infosec guy at work used the icefloor PF management tool at work. It seemed interesting, and I mention it in the vein of the venerable Little Snitch.

http://www.hanynet.com/icefloor/
In other words regular expressions are equivalent to regular grammars [1]. (Except "modern regular expressions" support some construct that make them match some non-regular grammars. [2])

[1] https://en.wikipedia.org/wiki/Regular_grammar

[2] https://en.wikipedia.org/wiki/Regular_expression#Patterns_fo...
I'm definitely not "qualified" and I'm not an "expert" (or even vaguely
informed), but after reading four of other papers from Jeremy Bailenson,
I can tell you this much; he tends to write in an easily readable and
approachable style, and gives solid support both through his own data
and prior research references.

The phase "source monitoring" is a term of the (academic) trade, and as
far as I know, it roughly means, being aware (monitoring) of how our
experiences are occurring and have occurred in the past (i.e. from
various sources). For example, did you read it in a book? Or read it in
an article? Or see it happen live? Or see it in a movie? Or hear it
happen live? Or hear it told to you second-hand? Or are you remembering
it from a dream you had? Or ... The methods by which our experiences
occur has an impact on how they are perceived, and an impact on how they
are later remembered.

Though "false memories" sure seems like bad linkbait phrase to use in a
title, it's also a term of the academic trade. It means you're unable to
differentiate between memories of actual "live" experiences you've had
in real life, and memories of perceived or "make believe" experiences.

The paper cites previous work showing how children are more susceptible
to false memories in general than adults, and then goes on to show how
children are especially susceptible to false memories induced through
immersive virtual reality.

If I'm _really_ lucky, maybe someone from the Stanford Virtual Human
Interaction Lab (VHIL) will show up and correct me where I'm wrong, but
the above is the best I can give you.
I don't understand why these studies never seem to control for height.
You're the first startup employee I've encountered in recent times who doesn't have ISOs. Are you a contractor / consultant who doesn't qualify for ISOs?
How do you deal with failure or stuck episodes?
If it's a "token amount", then that's probably unlikely unless you have other large deductions (ex: mortgage, property tax)
I fondly remember interning at major freight forwarder during university. The main input interface was paper which was them keyed into the mainframe application. Only the biggest partners have been integrated via EDI. So just putting sensible API in front of all this sounds like good idea.

I have been working on operations data mart most of the time (and saving cca 30 000 dollars on carrier volume discount on shipped containers) but I always felt my most appreciated contribution was stitching together few Excel macros to make Request For Quotation evaluation easier.

So here are my two free ocean freight startup ideas:

- precise container reporting for carrier disputes (10 FCL 40 footers from HKG to HAM), including error detection when port is incorrectly filled in just because it has similar code

- RFQ evaluator - as simple and accessible as excel, but capturing the specifics of ocean freight (tens of port pairs, container specifications, splitting price to freight, terminal and surcharges etc).

Did you know you could have your container shipped for free - only for cost of terminal handling (on certain routes, at certain times)? Fascinating industry.
Previous discussion: https://news.ycombinator.com/item?id=9663249
Uber doesn't allow secondary sales to 3rd party but will repurchase your shares at their previous fundraising round price.

That's their current policy.
The whole "ring-2" thing is misleading. Root to SMM doesn't imply a VM escape.

Most hypervisors don't even implement APIC relocation properly (I believe KVM fixes it to 0xfee00000).

Even if APIC were relocatable in a guest, Host SMM runs outside of the hypervisor, and wouldn't be influenced by the guest (the guest's APIC MMIO accesses are all virtualized: either converted into VMEXITs on sandybridge and earlier, or potentially passed through to the APIC access page.)
If I understand the question correctly, and it's about what to do when leaving the company, 83(b) is unnecessary. An 83(b) election says that you are choosing to recognize paper gains today that the IRS would normally require you to recognize when they are no longer subject to a substantial risk of forfeiture. If he's leaving, he must be exercising vested options, so there is no risk of forfeiture, so no need for 83(b).

An 83(b) election is critical for unvested stock, i.e. "early exercise".
Some banks will give you a loan with the private shares as collateral. However, you may have a margin call on your hands if Uber has a downround.

If you were an early employee, you may have had the option to exercise your options early (while being an employee. Only being able to exercise your options when you leave is a myth -- one that I used to believe myself).
Parsers are easy. It's the grammars that are complicated.

Seriously: seemingly simple things designed and described informally, in prose, can easily be incredibly complex when you expand all their details. That says a lot about those things, a little bit about the process and mindset that went into them and virtually nothing about parsing in general.
More anecdata... I was never afraid of snakes as a child (much to the dismay of my mother) nor am I now, but the times I've heard the rattle of a rattlesnake caused me to react in a way that was undeniably involuntary. Seemed pretty primal.
So my Ford Model T won't be able to read it?

(That is my humorous way of saying that Python 2.3 is rather old and therefore HIGHEST_PROTOCOL seems like it would be a desirable trade off for most.)
What’s So Great About Manufacturing?
>The gif is sped up.

was considerably more impressive at snake speed!
Commenty – What's new in ios 9 beta 5 – settings – imthemobile.guru
Jon Stewart Signs Off from ‘Daily Show’ with Wit and Sincerity
The Curious Case of Europe's Peat Bog Bodies
More like previous guessing and hypothesizing. The details weren't known at that time.
They are damn good bullets. Just not silver bullets.

Restricting mutability would help somewhat. (Another bullet.)
Very cool discussion regarding higher-kinded programming and FP concepts in general. One thing I don't get is when the author writes:

Personally, I try to avoid using the word "monad"
on this site and focus on the bind function
instead, as part of a toolkit of functions for
solving problems rather than an abstract concept.

That's pretty much the definition of "monad."[1] Why shrink from it? Unless the author for some reason is worried that their content will be shunned due to using the proper terms for concepts being discussed.

1 - Yes, the existence of a bind operator is not required for satisfying the Monad laws. Which is why I said "pretty much."
"Well, if that is true, then why are Germany and Japan statistically the countries with the highest average age in the world, even though both countries' food is quite bland?"

FTFY
Negative income != negative cash flow
Seems I might be the only one confused about your wording, do you mean the top 10 articles on the front page, or top 10 comments within an article?

In answer to both questions, I do both. I usually go through the articles from #1 to ~#120, reading articles I find interesting, and usually reading all the HN comments for that article too (you can learn a ton from reading more than just the top couple of comments).

Sounds like this approach would suck up a lot of time, but HN submission topics are often pretty narrow, and my interests are somewhat narrow too, so I usually only end up reading only 4-5 HN articles or less a day.
I'd be interested to read a more detailed write up of the process.
Ok so you can deduct as much as you want from any 'capital gains' you might have but only are allowed to deduct a max of $3000 per year from regular income, and the leftover capital loss just keeps on rolling over perpetually until you die?

Also the other thing that's screwed up about this is you pay taxes when you exercise the options at the normal income tax rate. But when you want to apply the tax deduction in the event of a loss, you're only allowed to do it on 'capital gains' for an unlimited amount and a max of $3000 on normal income. In fact it might be preferable to deduct it against normal income and keep rolling it over and just pay normal capital gains taxes (which is much lower than your income tax rate typically).
Mars Direct uses suspiciously low boil-off rates for LH2. Certainly well past current state of the art. Best achievable (not flown, but could be) is 0.1%/day, and Mars Direct wants 0.1%/month. You don't lose a lot at 0.1%/day, but it adds up.
Re: last point. I did not know that. Could you provide some more information?
Maybe twitter?
Are you kidding ? I am not korean and I do not represent koreans as a nation.

Just take a look at a korean newspapers from that time. The koreans felt satisfied with the bombing. And there were a lot of them.

Japanese are very racist to the end of these days if not the most racist nation on earth.
C++ concepts support merged into GCC trunk
What exactly makes the Haskell type system so revered
Microsoft is an Android patent troll. Of course they would have a "Fuck Microsoft" attitude.
Gatekeeper also watches over shell scripts, so when you double click the shell script it will tell you that you can't open it because it is from an unidentified developer.
Commenty – Apple re-tools apple.com mobile – imthemobile.guru
Oil is a portion of the price of every other commodity. They all require energy to extract/produce and transport.
Should have started with a service-oriented architecture, then their civilization would have never collapsed.
Say index funds become illegal, just for the sake of argument. Aren't they replaceable by an algorithm - trading software that balances a portfolio that copies an index per investor? It's less efficient, of course, but it's essentially the same thing. You get millions of tiny, cross-sector owners instead of few big index funds. So in that sense the argument in favor of banning index funds is really pointless. They're just one implementation of a strategy that investors could follow on their own, just less efficiently. Essentially, banning them is just a way of enriching brokers because of the expected rise in transaction fees.
The first few transactions would probably go through, but then some people would notice and report strange transactions. I was told by someone working in that industry that credit card companies would figure out who's the source and cut them off / sue them if it was malicious. I'm not sure if that kind of data mining / correlation is common - I'd really like to hear some details / other confirmations.
Unprotected sex is opium for the poor in India leading to pregnancy/population growth;
WebGL Studio
Add this to self-driving cars, and you have IVES: Inter-Vehicular Energy Sharing. Cars capable of topping each other up while on the freeway.
First video of defcon 23(2015) conferance
To answer both questions in this subthread, I'm a regular W-2 employee. I've been at the company since day 0, and I'm not sure whether all other employees get NSOs or not.

edit: just to make sure I'm not crazy I dug out my option agreement and it's definitely NSO.
Many startups have a clause in their offer letter that promises to "recommend that N options be granted at the next board meeting." It's a formality, but it doesn't always happen. Make sure those options were actually granted before you think about how to exercise them.
There surely were innocent people but most of them were fanatics. Or have not you heard about US para-troopers that got killed by your "innocent" civilians ?

Japan and Germany greatly benefitted from the war. Entire enterprises,zaibatsus were built by the work of slaves.

And the whole world admires the germans and the japanese and forgets the work of millions who had to die.

And americans are the ones to blame that they allowed these countries to exist after WW2 in order to have colonies against USSR. I am not saying kill them all but these countries should not have existed anymore.
> Haskell's type system is not an effect system.

Haskell's type system models effects through things like monads, applicatives, categories. If you don't agree with this then you're going to have to tell me what your definition of "effect system" and "type system" are.

> Something like this -- http://research.microsoft.com/en-us/projects/koka/ -- but with notions of ordering and better composition.

I'll give it a look, thanks,

> It's up there now.

Wow, that was good timing!
The Priceonomics Blog (YC W12) is hiring a fourth writer
Bug in HN or my browser acted funny?
Just now for a few minutes I saw dupes.

http://pasteboard.co/2xaUjWkK.png

I am using Chrome 44 in Windows 7
This project predates Facebook's by about a year and a half.

f.lux appears to predate them both.
Have you considered demanding a correction?

They are putting words in your mouth. Somebody should keep journalist accountable.

A few days ago I tried to follow the source of an article in an online newspaper. The source was another online newspaper , in a different language, and the source for this one another one. Along the way things were added and removed, just like in a crazy telephone game.

It makes you think about the news we read and take for granted.
Ohh I noticed points are different.
I don't see in the article where they all blame the fault on Flash ?
ATTENTION Watch This
That was me making a mistake. Still not sure what I did.
Agreed. It's "funny" how common 1000+ character uncommented oneliner regular expressions are, while in any other programming language even things like `if (flag) return;` would get rejected for being dangerous, unreadable, uncommented, brace style violations and possibly even for being too long if indentation and length of the flag name make this exceed just 80 characters.

Is this because people think of a regex as an atomic blackbox instead of a program or function that can be read and modified? For example when a regex is incorrect, they don't say "This regex is incorrect. How can it be corrected?" like they would for a program or function, but "This is the incorrect regex. Which one is the correct regex."

Free-spacing mode (where you can add whitespace, newlines and comments to a regex) would at least help a little. (Although even then I think a function with early returns is often more appropriate. Possibly using very small regular expressions for some of the individual checks.)
But I rarely even see free-spacing modes mentioned. Maybe because most programmers using regex actually prefer an atomic blackbox?
Adblocks, popup blockers, and my custom filters still aren't able to make news article websites usable, so I just don't even try anymore.
It has an interesting relationship to the moral panic regarding "ritual satanic abuse" and certain trials purporting to discover crimes in repressed memories. Those issues, which had a certain cultural currency at certain times, almost created this particular kind of research on memory which is now decades old.
It's better to see it as a travel agent for cargo. Complexity is that cargo doesn't have legs nor a passport. The scheduling and booking is similar to Uber's dispatching. Value chain is much longer. In short: hard problem
Show HN: A Simple Project Management App with Partial Progress for Tasks
Because population aging is more driven by birth rate and immigration policy than life expectancy.
TXT's interactions with SMM are pretty broken [1]. For example, TXT doesn't (can't) validate SMRAM.

This exploit still requires ring 0, which, hopefully, the code running in TXT doesn't give access too willy nilly.

[1] http://invisiblethingslab.com/resources/bh09dc/Attacking%20I...
How-To Install Jetty 8 on Ubuntu 14.04
> you eat less food when it's particularly spicy

That's unlikely. People will adjust the spiciness before adjusting their usual portions. Don't forget that habitual users will develop tolerance to capsaicin by reducing the number of receptors, so what may seem as a high level to someone may be perceived as normal by someone else.
Hacker Turns Secure Computers into Secret-Spewing Radios
There are many that meet these criteria: Amazon Redshift, Google BigQuery, Microsoft Azure SQL Data Warehouse, Hive, Spark, Greenplum, Vertica, Impala (the list goes on!). The largest technology companies (Amazon, Google, Microsoft) are investing in, and subsidizing, these data warehousing solutions. It’s a crucial component to nearly every business, which naturally draws the attention of the tech titans.

All good and dandy, but I'm curious if there's any research on the perception and the willingness of enterprises about storing strategically insightful data offsite on cloud databases?
How I Managed to Out-Learn the Competition
"Without a doubt, Cui's research is impressive—and terrifying. Because it doesn't rely on networks policed by firewalls, like Bluetooth or Wi-Fi, detecting these transmission is very hard. After all, there's plenty of radio spectrum in which to hide. Cui quipped that with a simple AM radio, he defeated billions of dollars in firewall research."
Free will experiments reveal how little we know about our minds
Ahh! :) Thanks for making it more awesome, cheers!
Germany is nowhere near the top (#19 with 9 other countries) although there's also not much lacking either

https://en.wikipedia.org/wiki/List_of_countries_by_life_expe...
And here's the actual source: http://www.phdcomics.com/comics/archive.php?comicid=1174
Oh, wait. Were you suggesting VPNing into your home connection or similar instead?
I believe the upstream pdf.js fixed this already, https://github.com/mozilla/pdf.js/.
How Science Students Helped End Segregated Blood Banks
Would the statement "Free will is an illusion" be less of a self-contradiction than when stated as a question? Hard to say.
I got a new computer and was browsing around, and it seemed that the entire web suddenly got much slower and ad-ridden. It was horrible, until I remembered I forgot to install Ghostery.

Why do you use both, though? Aren't they pretty much perfectly overlapping?
The hypothesis that the brain imposes constrains on possible languages is trivially true and the alternative that languages can be free-form is a straw man. That's the problem with universal grammar, depending on who you ask, it is either absurd or trivial. Perhaps there are more sensible formulations of the idea but I have yet to see them.
In many cases you don't want "http://foo.bar?q=Spaces should be encoded" to pass. If for example you want to turn URLs in comments to links, then space should just end the URL right there. Otherwise you end up making whole paragraphs as links.