skysight-inc/HackerNews huggingface dataset:
The responses on this thread seem to prove that Apple knows what it is doing with its security strategy. The fact that people blindly disable protections and end up causing massive malware outbreaks is exactly the reason they are introducing things like Gatekeeper and Rootless. Arguably, this incident is evidence in favor of them locking down Gatekeeper further.
Is that true? Don't people who drink regularly build up alcohol tolerance? I concede that might not make you healthier, though.
I will forever take this into account the next time I tune my guitar using harmonics by ear. Very interesting!
How do you know about actual need? They offer free DNS + CDN + SSL + bandwidth + security/DDOS which alone can save lots of cost and speed up plenty of sites. Doesn't sound "hipster" to me.

Yes there are always issues with a single company being such a big part of the internet but this applies to many other large tech companies as well in all layers, many that are quite invisible to most online users.
Good discussion of tinygrams, nagle delays, and the role restricted MTUs play in them on StackOverflow too: http://stackoverflow.com/questions/2421107/how-does-sending-...
The Bonsai Kid
This seems to just seems to be replicating the functionality of C++ in C. The only reason he gives for not using C++ is lack of C++ compilers for embedded CPUs. I think a better approach for the long term would be to use a C++ -> C transpiler (as much as I hate that word).
I think you and many other posters or readers are missing the point of this photo editorial. This isn't the disaster olympics. There are people who still live here, and thousands of people who used to live here who were largely farmers and forced to find new homes.

The reason this will be discussed 10 years from now is because there will still be people actively affected 10 years from now. And probably just papers from Tohoku anyway.

And finally, the reason you don't hear issues from China being discussed all that often is because of their national policy and attitudes.
Backblaze generally does this very well with their product offerings and white papers. Would that the rest of the self-absorbed tech community do the same...
Google charges for YouTube ads even when viewed by robots
And a link to the study directly http://arxiv.org/pdf/1507.08874v1.pdf
South African Cybercrime Bill Would Throw the Book at Copyright Infringers
As someone who grew up in Florida, I would never want to live live anywhere near the beach, and frankly, I never had much sympathy for those who lost their beachfront houses to hurricanes, especially when they rebuilt them in the same spot just afterwards.
You measure with an IQ test. They work very well.

The longevity-IQ correlation is robust.
On top of that Google can unilaterally upgrade the servers that serve the most popular site on the internet and ~40% of all browsers at the same time.
http://www.gocomics.com/frazz/2013/04/10/
You absolutely can strengthen your body against a hangover; it's called alcohol tolerance and it works quite similarly to exercise! It's why a casual drinker will get drunk/hungover from a couple wine coolers and Grandpa Willie can down a 5th of Jack nightly and barely feel it.

How something feels is not a reliable indicator of how good it is for you. Exercise often feels terrible, but is good for you. Pizza and chocolate often feels great, but is terrible for you.
I think that technical hiring managers tend to get obsessed with finding the "ultimate" interview question as a short-cut for evaluating candidates.

The problem is that such a question doesn't exist, or rather, that it may very well be a different question for every possible combination of interviewer and interviewee. The OP and those who take his advice are going to get lost in the weeds if they try to read too much into the answer to this "super question". Just pay attention to what the candidate is saying, their background, their responses to behavioral questions, their personality and their aptitudes. There's no shortcuts and there's a huge heap of subjectivity required to assess somebody for "fit".

Modern organizations have been hiring people for decades. If there were actually a "best way" to hire/evaluate people, everyone would be using it.
Hi!
1/ TLS
2/ Not for now, but definitely the roadmap
3/ Not in a near futur sorry :)
Yeah, good to know.
I think this question is good precisely for the same reason a lot of people are saying it's bad; it's really easy to give a bad answer, especially if the job isn't close to your ideal job.
The article talks about waiting as long as it takes to get the best candidate, and in that regard, this question is perfect. Sure some people will do a good job at gaming question but if a candidate clears this hurdle, they are more likely to enjoy their role and therefore perform better.
These are explicit overrides programmed into Gatekeeper to deal with weak Xcode signatures during the transition time to stronger signatures. They're not a danger. Of course, Apple will tell you that you should use newer devtools than that. :-)
There's a schizoid perspective in this article that arises a lot with these kinds of things.

Bagels used to be better, and there were tons of people making them! But there weren't enough bagels, because not enough people were making them!

Hand-rolled bagels taste so much better! But Americans like the texture and flavor of the machine-rolled ones better!

You used to only be able to get authentic hand-rolled bagels in cities with a large Jewish population, which was exclusive and cool! But now, you can only get authentic hand-rolled bagels in cities with a large Jewish population, which is awful!

Bagel hipsters.
I believe most AV vendors, if/when persuaded by powerful agencies, won't need to introduce an specially crafted backdoor.

An average antivirus software has everything necessary already. Personal licenses as a way to identify the specific machine or person, automatic streaming software updates as a way to deliver the payload and almost unrestricted privileges on the target system enough to infiltrate and stay concealed.
Me and a couple friends do random programming challenges once a month. Last month we had to build an app in 30 minutes or less based on a randomly picked subject.

I got entertainment as the subject and decided to build a pastebin-like website for spoilers.

The idea is to enable users to be able share spoilers easily without the worry of someone accidentally clicking on the link. If you do accidentally click on a link, don't worry as you won't see the spoiler until you say "show me the spoiler".

I am not sure if there is any demand for this at all, but my friend suggested I put it online as it may be useful to others.

Let me know what you think, I know its super simple right now but if there is demand I can add more features.
Suggesting that Google's allies want to keep the word on state-sponsored malware at a minimum?
some quotes from the snake oil salesman

Groupon May Be Fastest-Growing Company Ever

http://www.cnbc.com/id/40454493

Groupon is going to be wildly profitable.

-Eric Lefkofsky

http://www.bloomberg.com/news/articles/2011-06-05/groupon-ch...

Is Andrew Mason still a YC part-time partner?
EFnet's infamous Zhivago (from #c) has a great article about OOP in C - http://www6.uniovi.es/cscene/CS1/CS1-02.html
Design your dream job? That sort of question is code for: you aren't in the running. It is a stock question, something asked of all the candidates. Very very few people who are asked such questions are ever hired imho.

An interviewer who thinks you have any hope of landing the job should (a) already have read your resume and (b) be under instructions from someone above them regarding your application. A good interview is one where the interviewer is vetting a candidate, not trying to find a candidate. There should be a discussion of the problems/tasks for which you are to be hired. Whether or not you will turn out to be a "good fit" will come from that discussion, not stock questions.

A job is about pay for work. The only honest answer to "what is your dream job?" is "You give me 1,000,000$ and I go home at 9:30." Everything short of that is a lie. So an answering candidate must create in their mind some parameters to bookend their dream job. They try to figure out what the interviewer wants to hear and form a lie based on those expectations. The real meet of the question is therefore "What do you think I want to hear?" The winning candidate ends up being the one who best knew the interviewer's expectations and crafts the best lie. Unless you are hiring people for a improv comedy team, that knowledgeable liar is isn't the candidate you want. It's a toxic process best avoided.
This looks like an open question to get to know the candidate but in fact it's another way to fit the candidate in a box. Distinctions like leader/follower don't always make sense, they are not opposites. Programming languages, specific percentages spent coding/managing. Just a basic skill grid. The recruiter also need to see the future to decide based on a single answer if a candidate would be able to be CEO of Google. It's not clear why he would not.

The question is also incredibly oriented towards the recruiter's point of view, for example why exclude the salary discussion? It seems it should be one of the major discussion points when applying for a job. Maybe I'm mistaken but I think people work for a company and not for their toy projects because of money.

Focusing on starting next Monday isn't a particularly good idea either, good candidates can learn quickly and what they can't do on Monday they could probably do in a month.

Well, that's a pretty bad question.
Troubleshooting a Slow RDS Connection: Server Resources
It's a pretty different world now, both price and speed-wise.
Wouldn't the best way to create an empty map be to use `Collections.emptyMap()`?
My personal laptop, my servers, and my Linux-running home networking equipment are fairly resistant to attack. ;)

It's true that the consumer electronics security situation is a sad joke, but PCs have generally been becoming harder targets for quite some time now.

> ...or that it can use your network to get anybody else.

I assume that by this you mean "Can't use your Internet link to launch attacks against other networks."? If you do, then it is my somewhat-informed opinion that maintaining a default-deny policy for outbound communication on a home LAN is far too much trouble than it's worth. I suspect that -on most home LANs- you could probably get away with denying all outbound TCP other than to port 80 and 443, and allowing all outbound UDP. [0]

However, if your attacker is somewhat determined and even a little bit clever, he will use the Universal Firewall Bypass Protocol [1] to talk to his C&C system(s) or other malicious devices or whatever. In this situation, you will have spent more than 0 minutes on managing your firewall rules and gained nothing from the work.

[0] So that most multiplayer video games, and Bittorrent-over-UDP work just fine.

[1] That is, HTTP(S).
The salary isn't the point:

> I immediately exclude discussion of company, title, and salary, because these are the things people think they want but can't really affect my decision.

> So by stating that these three things, company, title, and salary, are already taken care of, it frees candidates to think about what really matters to them.
> Once the paper has been completely coded for type casting, it looks like a roll of Morris code, or a Western Union telegram from someone who couldn’t stop talking.

Morris code? Morris code‽ I'm pretty sure that he means Morse code!
Making their software safer, that'll learn 'em.
Who is "they?" Tavis Ormandy is a respected security researcher who often makes the news. Hell, not too long ago he found exploits in Sophos and Symantec products. He likes to target AV. Sophos, a UK product, was embarrassed internationally by the exploits he found. He is not playing any favors here. We need more people like him. AV has gotten a free pass for far too long.

If you're attacking Ormandy's character, I'd appreciate some proof over the usual conspirtard stuff that often gets upvoted uncritically on sites like reddit and HN. As far as I can tell, he is certainly one of the good guys and we are lucky to have him in such a high profile position at Google.

>Kaspersky released information about state-sponsored malware.

Kaspersky acutally is the dirtiest of the bunch with ties to Russian KGB/FSB. I suggest you rethink who your heroes are.

http://www.bloomberg.com/news/articles/2015-03-19/cybersecur...

http://www.wired.com/2012/07/ff_kaspersky/
I find it astonishing how many people's snarky responses here would actually be astonishingly useful to an interviewer. Not as a disqualifier even. The person who wants to spend all day building robots to feed the poor, and the person who wants to spend all day writing are probably not going to both be happy in the same job. And the person who "I just want to be a developer, I love doing business development" is going to always tell you yes regardless of the situation. And the person who sits and thinks for 5 minutes ... probably needed some more encouragement from the interviewer.
That makes sense, release and iterate!

Personally I'd like to use some access management, and there's one case that I've not seen solved particularly well (though would appreciate anyone chiming in with things I've missed):

Distinct write and create permissions.

I'd like to be able to grant someone permission to create files but not allow them to modify or delete them later. I end up generally adding this externally.

I think B2 is really close to this, as you've got the file ids for multiple versions, so I can effectively ignore the filenames and use the file ids instead. It'd need a difference between "upload new version" and "delete version" though.
Bodies are pretty complex systems to diagnose. We ask programmers to work in pairs to reduce mistakes and then trust our lives to a single opinion. Buyer beware if you're not getting second opinions.
You're insinuating that Google is gunning for Kaspersky at the bidding of their NSA masters (or something)?

How deep does the rabbit hole go?
Another 0.9% ($939 max) for CA SDI, $250 workers comp, and the employer probably has some sort of life & disability of their own as well, call it another $500. Payroll & benefits admin for $500. $12k health insurance contribution seems low, but I suppose population skews to 20s and single.

I do think 70% is about the best you can really do ($142k), but I agree 50% would be lavish. Throw in a regular dinner program, or some regular offsite meals & entertainment doesn't hurt. Since 274(e) expenses are fully deductible, IRS is basically paying for 35-40% of that annual picnic, holiday dinner, Caribbean retreat, etc. so it's smart for companies to shell out some real money for these outings.
Rigetti Computing Is Hiring an RF/Microwave PCB Design Engineer
Violating it? When did they ever do that, or get attacked for it?

They got complaints for just having code-dumps (or WebCore/JavaScriptCore) alongside releases, which made it hard to have any sort of individual patches. They were still in no way obliged to move to developing it in public, nor were they obliged to release WebKit.
You did? I didn't see it...
Banks haven't proven too skilled in estimating risk (see 2007). The average Lending Club lender is surely worse than the banks, but the best ones are surely better.

Net it all out and hopefully we get a Darwinian marketplace for lenders, lenders who don't need acres of employees preparing powerpoints for each other in class A office space.

Of course, the true measure of estimating risk is hidden until a crisis occurs. Interesting to see where it all ends up.
I wonder if this is at all related to the targeted attack Kaspersky suffered a few months back?

http://www.kaspersky.com/about/news/virus/2015/Duqu-is-back

Maybe someone was exploring the possibility that these vulnerabilities are features.
I did the math properly once, the S3 costs still didn't work out by far. I have a server here at home and an external hard drive for it, so I know how much power it draws. Bandwidth is free, but in the calculation I did assume I would pay for bandwidth.

All in all, it's by far the cheapest option to store it at a friend's. Storage providers could also cheapen things a whole lot by offering reduced redundancy and whatever else it is they do to make it so expensive (glacier storage is also more expensive than the price I got). It's a backup after all, I don't need my backup to have five copies on spinning (versus offline, non-powered) disks. If my backup dies, I'll upload it again...
It's so clearly not about the future, since it's about the very next Monday.

The question is a positive way of asking, "What would be the best position and environment for you, right now", so the interviewer can see if they fit the actual position without negative questions.
Tagging on to this, I assume we can't use all of ES2015 classes with react and meteor, as the mongo bit requires mixins.

Is there a fix in the works for this?
But it's absolutely worth mentioning.

Ahmed Mohammed mentioned his "invention" several times in his initial viral video, and again in interviews.

His "invention" always looked suspicious to me, in that it was an unlikely hobby electronics build, what with mains power and far from hobbyist looking circuit boards.

At 14, fibs like this are not cool. Fair enough his arrest was over the top, but this new information shouldn't be swept under the carpet just because it makes everyone from NASA to Obama look potentially foolish pandering to a fibber.

Also, I couldn't help but notice his (re)-tweet thanking Allah for the opportunity to visit the white house and all the other places.
The 21 Crucial Steps of Starting a Tech Company
Yeah, the hangovers move way down deeper, like into your soul.
French thought once dazzled the world. Where did it go wrong?
I guess it would be more correct to speak of hidden or embedded biases or conflicts of interest.
Half of Groupon's failure is the email spam model, another half is the business partners. If you signed up for a service where you give discounts and got any less than a shining smiling face when I come in with one, guess what - I'm not coming back to you. Groupon should have screened businesses the same way Apple screens apps, very carefully.
Accepted my xxxx.yyyy@gmail.com just fine, unless they just fixed it.
Freetown I believe is the capital of Sierra Leone.
There is something which Akamai does and CloudFlare doesn't want to (at the moment): pay big sums to those big ISPs which refuse to peer and want to sell very expensive direct connections.
Prakrit is not one language. I was careful to use it as 'Prakrits'. Given the formality of Sanskrit, I seriously doubt Prakrits can be considered its dialects. In fact, the relationship probably goes the other way- Sanskrit is a formalized version of the Prakrits that people spoke. In fact, the names are descriptive and are indicative of the relationship: Prakrit has the same root as 'prakriti' = 'nature', Sanskrit means 'refined'.

Sanskrit and Prakrits are different enough to not be dialects. It is perhaps a relationship more like literary Kannada and Tulu, which are wholly different languages with many similarities. (A relationship also shared by (Kannada, Tamil, Tulu, Telugu, Malayalam) and (Oriya, Bengali, Gujarati, Marathi) which are all wholly different languages belonging to two families (Dravidian former, Indo-Aryan latter), with similar roots, but do not share a 'dialect' relationship between each other or with any other extant languages)

Buddhism definitely had egalitarian pan-caste aspirations compared to Vedic doctrine. It is only natural that Buddha and others preached in colloquial languages, rather than literary. It is true at the same time, that later Buddhist scholars wrote many works in literary Sanskrit.

Edit: Also, I did not claim that Brahmins were not numerous. They were probably the same percentage of the population as today, which is about 5-10%, which is still a 'large section', but far from the majority.
Kaspersky is smart. He enjoys breathing and wants to avoid radioactive tea.
They are using some, but not all, features
supported by Babel to compile ES6/ES2015 syntax to ES5.
Way forward? Stuff like this has existed for years already just not as well marketed maybe.

At my university we typically use a single shared svn repository. Permissions restrict which directories are readable and writeable to students/groups. Performing reviews is a problem but apart from that it works perfectly even in classes with hundreds of students.
Can market networks improve productivity in developing countries
Internet is Broken: iOS 9 ad-blocking reactions and perspectives
If elected president, Jeb Bush will get rid of net neutrality rules
I've heard the same, but the company treating Groupon customers badly is still irrational behavior.

The money being lost on the Groupon is a sunk cost, so you've got:

Option A: Lose money on the customer, treat them like second class citizens, probably lose the customer forever, possibly have the customer tell all of his or her friends how bad they think the business is.

Option B: Lose money on the customer, still treat them just as well as any other customer or even better and try to convert them into a repeat customer and/or organic spokesperson for your business, recoup the lost groupon money over time through repeat business.

I can't speak for everyone but I know that if I'm an option B customer, I'm going to be an enthusiastic spokesperson for the business. Getting a great deal and good service early on is a good way to convert me to be a customer of yours for life (early impressions really stick with you, sort of the reasoning behind buying the first round of drinks, you probably don't need to buy another drink all night because you're the cool guy who bought the first round).

So all-in-all, I don't think all the blame of having Groupon customers treated badly (if this even exists as a real thing and isn't a perceived occurrence that isn't statistically a real thing) can be placed with Groupon.

I suspect at least part of it is likely just the fact that a lot of businesses have terrible customer service these days (probably due to a number of factors including low wages, races to the bottom on margins, etc) and as a customer you would have been treated pretty poorly anyway but the groupon thing gives you something to latch onto as far as reasoning it out.
From my gmail account :/ I'll resend!
Fully agree.

Ended up doing a similar approach when forced to use C instead of C++ for a data structures university project.

Goal achieved, but not an experience to repeat ever again.
Realize that an interview is more like a date, and the question is merely a means to a conversation.

i.e. the interview depends as much on the interviewER, as it does on the interviewEE. Questions matter, but what matters far more, is how the interviewer judges the interviewee.

I've worked with Nicholas Zakas before. He is a sharp and thoughtful person. Plus, he has probably given this question hundreds of times, to have a strong BS detector. And there will be several followup questions he will ask, to separate the wheat from the chaff.

So, is this the only question that can identify great candidates? No. Is this one good one, that fits his evaluation style and his values? Yes, and that's what he is sharing with us.

[About me: I run http://InterviewKickstart.com in the valley. We prepare candidates for technical interviews, and deal with a variety of these situations every day]