skysight-inc/HackerNews huggingface dataset:
Red Balloon Security (http://www.redballoonsecurity.com) | NYC | Systems Software Engineer | Full Time

About:

We at Red Balloon are working on all new cyber security for the rapidly growing embedded device market. What we do is incredibly difficult but incredibly rewarding. What we believe in is all embedded devices will need host-based defenses in order to ward off malware and intrusions. As part of the work we do, you will be getting your hands into the latest security research, hardware tear down, experiment with offensive and defensive research on a variety of embedded systems.

Our founder: https://www.youtube.com/watch?v=8Q4JKMZN9LQ

We are looking for someone to:

* Design and implement host-based defense software for black-box embedded devices.
* Design and implement automated hardware/software testing infrastructure.
* Conduct offensive and defensive research on embedded hardware and software.
* Contribute to the FRAK (Firmware Reverse Analysis Konsole) framework.
* Perform hardware and software reverse engineering on embedded devices.
* Automate vulnerability identification for embedded software.

Job Page: https://angel.co/red-balloon-security/jobs/48286-systems-sof...

Apply: jobs@redballoonsecurity.com
That's a great point! Right now we're manually following up with users if there's any problem, but I'll add better form validation to our roadmap. Thanks!
Yo sysprog: Cobol lives on in Visual Studio 2015
Animating React: Velocity, from Twitter
How about landlord negotiations? When your landlord tries to raise your rent to above-market rates, it's a pain to look up what the fair rate is and then draft a competent counteroffer letter.
To co-opt and mimic is completely normal human behavior that cuts across all cultures, nations, sub-groups, etc. The article even acknowledges this right up front, "It’s a truth only selectively acknowledged that all cultures are mongrel". The premise smells like just another manifestation of outrage-culture to drive clicks. Don't let your humanity be redirected into anger, downvotes, etc.
The Fourth Quadrant: A map of the limits of statistics
Cultural appropriation is just the outcome of cultures mixing. It's been a part of cultural intermingling for at least the last thousand years, and probably since forever.

The problem with modern cultural appropriation is anemic cultural identities coupled with one-directional appropriation. But that's only a problem for some cultures.
I like periscope.io myself, although I haven't done an in-depth comparison between the current options.
This reminds me a lot of pyspread - http://manns.github.io/pyspread/
Cool idea! Your CSS/layout needs some love though, it's broken in FF (works better in Chrome).
actually, just update your hosts file with something like this:
http://someonewhocares.org/hosts/
I'm American but have Aussie PR and very familiar w/ the culture ... I agree, the cultural cringe in Australia is still really bad. I spend a lot of time online and in-person convincing Australians that whatever they happen to be whinging about Australia is actually far better than most anywhere else in the world.

Americans are the complete opposite, we refuse to accept that we aren't the greatest country in the world, an exceptional people guided by God himself to greatness (imagine that).

Two extremes. Both have their downsides and upsides, though.
Pentaho, Saiku, or plain D3.js on the front end with your own middle layer
This is a tough question. I'm American but living in Germany, and it's quite confusing to me when I look at local jobs and see how much lower the pay is, when compared to the US. I don't really get it.

But, I think most professional jobs are like that. Lawyers and Doctors also make far less in Europe than in the US.

I think that overall in Europe, there is a much less steep income curve as you advance your career, skills, or education. This is good for the majority of people, but bad for your typical HN'er.

The US really has no equal if all you care about is making a shitload of money.
I'm a big fan of GCC, but this just isn't true that nothing matched it. It may be true that nothing "free" matched it.'

Where performance mattered we always used the commercial, proprietary, Intel compilers and/or the Microsoft compilers.
I think the difference between true appropriation and cultural borrowing is the level of inherent abuse - whether purposeful or not. And then it's more a matter of degree than black/white.

So, wearing a native american headdress as a fashion accessory is more probably wrong; wearing cornrows as a fashion choice is not really all that wrong (at least, I haven't heard of cornrows being an actual cultural symbol, I just always thought it was a hairstyle); and a more recent example, yuppies drinking out of mason jars is very probably not a "wrong" appropriation of "poor" culture.

The level of abuse can definitely be ignorant rather than purposeful - for instance, there might be good points about why a white person wearing cornrows might actually be wrong.

The baldest examples of wrong appropriation have been the attempts to take meaningful cultural symbols and then deliberately pervert their meaning as a weapon. Possible examples are the pagan symbols of christmas, or the swastika - although it's unclear to me whether the nazi appropriation of that was a direct purposeful attack on the meaning of the eastern symbol.
Shoot! I'll take a look right now! Thanks for letting us know.
IIRC, Signal/RedPhone takes a (truncated) SHA-512 hash of your phone number/email after verification of your account and sends that to the server, and does the same for your contacts. If there are matching keys, it does the exchange for you quickly and easily, and this is basically all the server does for 'user management' I think. So your friend can have their phone/email intercepted, but the central server isn't going to reveal much data or anything at least.

Second, you can verify fingerprints manually if you're in person. The biggest draw is there is no distinction between a user who you've simply exchanged keys with vs a user who's fingerprint you've verified. This is something the Threema messenger gets right. Trying to explain capabilities of the attacker and how you could be MITM'd to some random user is totally pointless and will just scare them, it's detrimental to adoption. It's far better to have a visual indication of how much relative 'trust' you have with your individual contacts, rather than write a novel implying there could be G-Men on the other side of the line.

Finally, for phone calling capability, the loop can be 'closed' through a second level of verification, because RedPhone/Signal give you a (matching) set of random words upon connection establishment, and each party says the secure words to each other before anything else. This was an idea taken from SilentCircle, I believe.

The idea here is that it is easy for a human to verify they're talking to someone they know simply if they hear their voice verify the words they're seeing, while it's probably going to be difficult for an attacker to imitate arbitrary voices on demand in real time to 'spoof' a human.
You work with the vector map of the world that you got.
GitHub AppSec: Keeping up with 111 prolific engineers
So it's up to the inner circle of the DNC to decide which candidates aren't a "waste of time"? I thought that was up to the primary voters.

The worst that could be said is that perhaps a one-issue candidate isn't a viable contender for the presidency, but that should be up to the voters, not up to a small group of political insiders to decide who our choices for the nomination are. That's kind of the idea behind his entire campaign.
That, and the income tax rate/whatever other country's equivalents are. A high salary doesn't mean a whole lot if your gross is less than half (well, maybe only to some people).
If he did that in Australia he would open the company up for civil action.
Купить квартиру в Кривом Роге,
I don't think there's any particular issue (as such) with things being TC. I mean, we've been doing TC DSLs and EDSLs for ages now. As you note, I think the key here is to be disciplined about it. Even though it can be hard, I would probably advocate a sort of gradual approach, but with full-on rewrites/finding a new host language when deemed necessary.

Oh, and I just have to put this in here, because it's so deserving of a meme of its own... Edwin Brady of dependently-typed Idris fame(?) advocates a different and more, IMO, useful term: Pacman Completeness. If you can implement Pacman in $LANGUAGE, it's Turing Complete enough.
if you're looking for something like an iPython notebook, check out tonicdev.com
I see. So this is a "fast javascript implementation to retrieve size of {image, pdf}"
And since process is a small task with many calls, it would be costly to call an external process (imagemagik) using native code.
I like this idea. Good job!! When will other services be added?
More idiomatic version is more readable but also more verbose:

cutoff_date = datetime.now() - timedelta(days=7)
for basepath,_,files in os.walk('/tmp'):
for filename in files:
filepath = os.path.join(basepath, filename)
if datetime.fromtimestamp(os.stat(filepath).st_mtime) < cutoff_date:
os.unlink(filepath)

Python is not really that great when forced to oneliner format, and I'm not really a good code golfer anyways.
find . -name '*.orig' -delete
Harlem Bicyclist Sues UPS for Repeatedly Blocking Bike Lanes
Yeah so let's limit the discussion to "modern" appropriation.

Is it fair for any culture to complain about this?

Isn't it drastically easier for people of more privileged cultures to assume identities of less privileged cultures?

Is that directionality ok?
Startups Compete Against Background Noise
QlikView is similar to Tableau, though more powerful and with a steeper learning curve. But if Tableau is too expensive, likely that QlikView is, too.

Another option is Looker, a relatively new product that relies more heavily on existing transaction/DW infrastructure. Dashboards are not ugly.

You can also look at d3, though by comparison development time will be much slower than the other two I've named.
What an exemplary reply. When we ask people to remain civil and substantive even when someone else has been provocative, this is what we mean. Thanks for making HN better!
I don't know what mathematicians think of it, but I enjoyed "Probability Theory: The Logic of Science".

https://www.google.com/#q=probability+the+logic+of+science
Wasted time with development/test environments. What are your experiences?
I feel like I spend too much time struggling with setting up, configuring or fixing my development environments and also my test environments. Is this a common experience among developers?

What steps can I take or what tools can I take to help with this?
That's disappointing. I actually didn't even check that they used HTTPS, I figured it was safe to assume they do. Guess not.
Saw this on ProductHunt yesterday - Really cool looking service. Not sure booleans as a service is the best way to phrase it though
I did a lot of test plots with several D3-based charting libs, and found weirdness with C3, such as performance degradation over time, and oddities like including the label for the data as the first entry in the array. NVD3 seemed to be the most mature and sensible of all the libs I tried. http://nvd3.org/
As someone who has multiple years of experience maintaining tableau, it is laughably Ops unfriendly.

Want to change the email address that tableau sends reports to? Requires a restart of a Tableau.

Want to update the ssl certs used in tableau? That's a restart.

Want to upgrade tableau to a new veraion? Get ready to uninstall and reinstall the new version.

Of all of the servers and services that I manage, Tableau is my least favorite. However, apparently its incredibly good at what it does. I say apparently because I maintain it but I don't use it in day to day operations.
As fast as we can work out the logistics. Some of these are relatively easy.

"Parking permits" is easier than "tax registration" which is easier than "Chinese visa," but it also super depends on demand.
Yes, but the technology of "storing images" is never going to become the domain of free software. It's a little late for that.

If you're trying to drive widespread adoption of a competing file format, then don't GPL the only code that implements it. Make a brain-dead reference implementation with a license as unencumbered as you can stand. (Then code up an elegant implementation and GPL that.)
https://www.washingtonpost.com/opinions/a-wealthy-oligarchy-...

http://www.nytimes.com/2015/08/02/us/small-pool-of-rich-dono...
I can second this. Qlikview is pretty awesome.

Except when it crashes and loses 5 hours of work, even though I was saving diligently.
> You well and truly are a piece of shit.

You can't comment like this here. We've banned this account.
Rule 110 is so simple that practically everything can represent its rules. You don't need to be Turing complete to do it. Indeed, the rules are even representable in Presburger arithmetic, which, unlike Peano arithmetic, is decidable! You can deduce formulas for every single step of the process, just like with CSS! But I'm sure we can all agree that this is not Turing completeness, otherwise the term itself becomes a farce.
I find the reaction to this app idea a bit confusing and irritating. Clearly the community this app would attract would be toxic, that should be obvious to everyone at this point.

I would make sense to me if the conversation was around "Why build an app specifically to encourage the behaviour we already mostly wish didn't exist on the internet". The fact that people act this way, even with their real names attached on Facebook, makes a story. That someone is trying to focus that aspect of human behaviour and encourage it with an app makes a story. That it's a widely held opinion that this app would immediately become a toxic hellhole of garbage content and trolling makes a story.

Instead, people are pretending that this app adds something new. Twitter is already used, very frequently, to name and shame people or to rate them negatively in some way. And they don't get to "opt out" either. I can't opt out of some blog or Facebook post or mass email saying nasty things about me. There is literally nowhere on earth were this is the case. The concept of being able to opt out of anyone being allowed to mention you in a medium seems to have been invented for this story.

The same goes for the "how can we be sure a rating is justified or the rater even knows the ratee?" or any of the other concerns. They all boil down to "anything that lets you publish speech online allows you to libel/slander someone online". Everything I read about this insults my intelligence in a fairly novel way.
Writer, broadcaster, computerguy
This sounds great. There's probably also a fair amount of forms that have to be filed with Tenant boards in various places.

Thanks!
Show HN: Travocado – Simplify camping trip logistics
In my (admittedly limited) experience, you'll probably run into some of the same issues with QlikView being "expensive, ugly, and completely lacking in statistical tools".
Jasperserver with jasper reports has dashboards and is much improved now with visualize js. The dashboarding is only in the free version i think and not sure how the cost compares to tableau. It's much cheaper than business objects or oracle bi publisher etc though.
Local MirageOS Development with Xen and Virtualbox
I honestly think that in the Internet age no one should claim ownership of a particular cultural phenomenon. Cultural identity in the world is the weakest it has ever been, and as we homogenize our upbringings more and more through digital means, culture and ethnicity will matter less and less.
Rich people drinking out of mason jars isn't cultural appropriation of poor class! IDK about your family, but my family is wealthier because we have a long habit of being frugal. There's no need to buy something new if you can use goo-be-gone on the leftover salsa jars. Fuck!
Nihilistic Password Security Questions
It would be useful if the metadata would include hints for responsive downloads. Eg: For 1/4 resolution download the first 10,000 bytes, for 1/2 resolution download the first 25,000 bytes.
Learn Statistics using price of weed – PyCon India 2015 workshop
Thanks

The Amazon UK reviews of Chung's book lead me to A Probability Path by Sidney Resnick which appears to be aimed at non-mathematicians. I have invested (speaking as a renegade physicist lacking a systematic exploration of measure theory).
Don't run SSHD in Docker containers (2014)
National Cyber Security Awareness Month
But how is that different from progressive JPEG?
Mineserver – A $99 Home Minecraft Server
take a look at https://event-fabric.com/ we didn't officially launched the saas version but I can set up an account for you to try it for free of course.
Travocado simplifies planning the logistics of your group camping trip.

- Send invites and collect rsvps.

- Coordinate rides and carpooling.

- Create lists of supplies and figure out who's bringing what.

- Plan meals and schedule of activities.

- Submit expenses and calculate how much each person owes.

- Chat real-time or offline with other trip members.

- Receive regular email updates on recent chat activity, the progress of planning, and your own personal to-do list.

- An email at the end of the trip tells each person how much they owe and the methods by which they can pay the organizer.

- Works for camping trips, Coachella, Burning Man, any type of coordinated group trip!

I'm a solo developer/designer/entrepreneur and this started out as a learning project so I could learn node, react, postgres, isomorphic rendering. It turned out to be a solid idea so I quit my job and have been working on this full-time for the last few months.

We just came out of private beta and now looking for a wider audience to give us feedback and help guide us to be the trip planning tool you've always wanted! (I'm not a designer by trade so I'd love feedback if the UI is confusing anywhere.)
The funny part is that many of the people arrested weren't part of gangs that are even alleged to be involved in criminal activity (until that day). Many of them weren't in the Bandidos and Cossacks, but regular 99% biker clubs. Some of the guys arrested were in the Soldiers for Jesus Christian Motorcycle Club, not some outlaw biker gang.
Wow, okay, this comment and its parent lost me :)
Mockup of a “fat” tweet (greater than 140 chars)
Throwaway for obvious reasons.

This idea already existed.
http://eng.anarchopedia.org/Gossipreport.com

The date is wrong, though. It was more like 2007/08. They had strong PR going, from sheer outrage alone. There was a segment on Dr. Phil, where he proceeded (to his credit) to tear them a new one.

They were aiming to become the TMZ, for regular people. The site was real, it existed. I never found anyone I knew on there, but apparently they had real people (in addition to the number of obviously fake profiles to get people to stay and join). Not sure why it was shut down. They were running with a skeleton crew, so I doubt it was lack of funding. Most likely it was the backlash and the realization that it would cost a fortune in legal fees (defamation of character, anyone?)
BTables: A fast, compact format for Machine Learning
I've used Dashing quite a bit, for relatively simple data, demo here: http://dashingdemo.herokuapp.com/sample

official page: http://dashing.io/
You can only eliminate cross-market arbitrage by forcing everyone to trade in one place. Exchange competition lowers costs for everyone so it's not clear that this would improve things. Even on a centralized exchange, near-arbitrage would still exist between very correlated products within it or between similar but not identical products in other places (index futures vs. ETFs, different grades of oil, US treasuries vs. European bomds).

Like you said, if enough people do the arbitrage, it converges to zero very quickly. There's little profit in it and everyone reaps the benefits of near-instantaneous accurate pricing.
Violent overthrow of other people can also be described as "normal human behavior" as is polyamory, and hunting and gathering. Is it ideal behavior? Is it civil?

Your sense of smell smells like another manifestation of privilege. Don't allow yourself to believe you do not operate from a position of extreme privilege. Be human, but not delusional.
How to Get a Company to Implement an Onion Site, I.e. A Tor Hidden Service
Health Benefits of Cold Showers: Reasons Why You Should Take Cool Short Showers
Quick app I made for a friend in a day so that he could remember the people he adds to his contact list.
Can be entertaining trying to get the person to smile.
I want to chime in to say that the lack of a common image format (and displays, for that matter) with true support for high-range photos is really holding back digital photography in my humble opinion.
The Boosting Margin, or Why Boosting Doesn’t Overfit – Math ∩ Programming
Sorry I didn't mean flakey in the sense of the tests themselves, but the algorithm that selects which tests need to be run.
> The police operate on a blank check principle and are held to zero accountability. The taxpayers are the real victims here.

It's the taxpayers that are giving them that blank check in the first place. They're not victims, they're complicit.
The real estate argument is made quite a bit and has some validity, but there are other moving parts. The recruiter is least aligned with the client to some degree, in that the recruiter maximizes their own revenue by increasing the cost to their client (to the benefit of the candidate).
I actually just cancelled my Comcast account yesterday. The process was pain-free and easy, just told them "I'm moving in X days and do not need service at the new address."

Granted, it was true, but if you are having trouble cancelling for low-quality service or any other issue, you may have better luck using that reasoning.
> More simple for whom? Those who'd rather not think about it?

For the people that know that you cannot own a culture and there is no central authority which to determine how it can be used.
Great idea and nice execution. Suggestion: add SSL / HTTPS to your website if you're collecting all this sensitive stuff about me.
Two diesel cars road tested – how clean are they? (3 min video)
Kibana / ElasticSearch? It's limited, but pretty and interactive, and gets you a bunch with very limited up-front work. I'm sure you can find some better demos, but here's one: http://parlement.letemps.ch/

HUE is a similar but different alternative. The "search" tab has some great demos, but appears to be down atm: http://demo.gethue.com/
Tips for the Aspiring Angel Investor
This works great on my Linux machine. On the Mac though I hate that all Mac apps use Command for well, all command-key combinations instead of Ctrl, so I map the Caps-lock to Command instead, but while Karabiner can do the dual "Esc on tap plus other on hold" for Ctrl, Shift and Option keys, it cannot frustratingly do it for the Command key. ITerm can switch caps-lock back to Ctrl, but then I lose the Esc double function. It's maddening.
All those legal services(wills, divorce, immigration, etc etc), of course, though I imagine they're already well picked over. Maybe you can partner?
You can hook it up with R though.
Really like the conversational approach. Nicely done!

It would be good to explain upfront how you actually do the cancelation, in this case sending a physical letter on my behalf. I had to fill out the form to get to that part.
(Not the OP) I've talked to GitHub about this, and they said that granting access to only certain organizations is in the works, but not possible yet.
It's not only that, once you know whether or not something has changed you then need to know what tests need to be run.
How to Stay in Shape at a Desk Job
But the judge set bail at 1 Million dollars for all 177 of them
Soylent Shipping Delay Root Cause Analysis