skysight-inc/HackerNews huggingface dataset:
As a huge proponent of work sample hiring, if it were at all feasible in the jurisdictions I hire in, paying someone a couple hundred dollars on completion of a take home test, I'd do it.

But the vast majority of the developers I want to hire are encumbered by moonlighting clauses that would likely cause them major personal issues if we violated them. Seems a bad way to get on the appropriate footing with a potential new hire.
Ask HN: Proposal for a Learning area on HN
We are a very highly concentrated source of knowledge on HN.

I feel like we need a LEARN section on HN. It needs to be more categorized though - but there is a ton of information that we all know that should be shared.

I propose we create a section of HN that will help to educate people on literally anything germane to our community and industry.

@Dang - would you support this?
> perhaps you might feel the 3% is not consequential enough to do so

We struggle with it internally, I assure you we doubt ourselves all the time. :-) Some companies have an "informal fun loving" outward appearance, like if you purchase from Zappos they send emails like "the magic elves are making your shoes, we will send them along very soon..." But bankers tend to wear suits and ties and appear "very serious" in their communications even while frittering away your money on sub prime mortgages.

Anyway, the point is I'll forward your note along and heck, maybe next quarter our drive stats blog post will have Amazon links and we'll make a little extra money. :-)
I've never really understood this general complaint about dependencies and go.
Maybe it's my work environment?
Either: i'm writing something quick and/or as a one-off in which case i just 'go get' anything i need.
Or: It's 'full-enterprise' style where each third-party thing that gets used is checked and stored locally. The build is built against these stored versions. If an improvement is made to a 3rd party thing then the changes are reviewed and if suitable that new version is stored locally. If the older go release needs to be rebuilt or investigated it can be rebuilt with the earlier versions by the clean build system.
Anything in-between wouldn't get passed QA.
but obviously ymmv.
I try to use CLI editors for everything (for me it's vim, but lets not make that a big deal :P), but I have never been successful in doing so with java.
Azure container service available today in public preview
I am slightly confused -- who's landlord was illegally discriminating against you? The landlord for the office your company rented? How were they singling you out and discriminating against you?
I hear "Let's use reflection!" as "My language's tools for code reuse are hard to use and ineffective in practice, so I'm going to put annotations everywhere and use reflection instead! It'll be ten times harder to understand the code than it would have been with a little metaprogramming!"

But then, my opinion may be unduly influenced by Java vs Ruby.
Firebase + AngularJS
Using GitHub to Teach Software Engineering: A Hands-On Approach
River opens applications for third ‘Frontier Tech’ accelerator class
From the uClibc commit message of the fix:

For example, the following busybox commands are triggering a segmentation
fault with uClibc 0.9.30.x

- nslookup ipv6.google.com
- ping ipv6.google.com
- wget http//ipv6.google.com/

If this had been the glibc bug, you would have noticed it way earlier.
Why isn't this in a separate branch akin to gh-pages, or a separate repository akin to the wiki data?
Aye Aye API – A Very Small and Easy PHP REST API Framework
Are we sure this isn't a typo? If it were 2510 INR it would make more sense.
What exactly is wrong with writing to /usr/local? It seems to fall in line with the FHS standard, at least as far as I can tell.

Sometimes older versions of different packages may be dependencies of newer packages. This is a thing that happens with software. When it's not a problem, `brew cleanup` gets rid of old versions.

Most of the time brew does install binaries, they're called Bottles. When it can't find a binary, it compiles locally. Yes this is sometimes annoying but it's not a deal breaker, at least not for me.

I'm not sure what you mean by "Breaking when the Apple devs wonder if it would be fun to switch things up a bit under the hood without telling anyone." This has never happened to me or anyone I know and furthermore Brew is a Unix compliant tool and OS X is a SUS compliant operating system.

Sorry if I'm sounding harsh, it just sounds a little like you're a Linux user who doesn't or possibly hasn't ever used OS X. Brew is not a panacea but it's honestly pretty good. There's also MacPorts if you're used to more old-style tools and a couple other package managers as well. You can even use Nix on OS X.
I've heard this before, and as far as I can tell it isn't true. There is an option buried in Device Management that claims to turn on Google Now for Android users but the service it enables is a subset of the full capability of the product. Namely, you get no cards based off of your email inbox. No flight notifications, package tracking, and similar things.
I love interviewing. Like, I'd do it as a hobby if I could. That said, my own preferences are not likely to be salient to the greater community of potential hires. So, I have to put them aside when designing hiring pipelines.

Having given this problem a lot of thought and experimentation, I've come to realize that designing good work sample based hiring pipelines is very difficult. Designing hiring pipelines based on something else is impossible.
> The situation we have now is fucked.

This situation should have ended 20 years ago with the first round of the crypto wars. /sigh/

> Anyone that stands up to the police-state-mentality is honorable.

Exactly. They aren't alone, either - with Apple taking first-mover risk, it should be easier for others to stand up together.

It's important to realize that there isn't much neutral ground here. Now that the line has been drawn, you're either helping implement backdoors or you are making a stand, potentially at personal risk. Collaborators will not find much cover if they attempt to hide behind a Nuremberg Defense.

I strongly recommend that everybody watch Quinn Norton and Elanor Saitta's amazing talk from 30c3, "No Neutral Ground in a Burning World"[1]. Most people didn't ask for the responsibility, but it's irresponsible to avoid it by pretending that technology is somehow external to politics. Everything we implement has political consequences, and we (the people implementing all of modern technology) need to start thinking about those consequences.

[1] https://media.ccc.de/v/30C3_-_5491_-_en_-_saal_1_-_201312272...
I think a hidden folder is a decent compromise.

>If you're worried about the added clutter in the root directory of your project, we also added support for a .github/ folder. You can put CONTRIBUTING.md, ISSUE_TEMPLATE.md, and PULL_REQUEST_TEMPLATE.md files in .github/ and everything will work as expected.
I would say that he still glosses over some stuff. Like the fact that Bison have been domesticated now.
I believe you are correct with it being possible on a median wage (with a great deal of scrimping and saving at that level for a decent period of time) but half of people make much less than that. So it isn't really possible for 150 million Americans or so.
I enjoyed using gin at first, but eventually felt the need to rip it out and replace it with mostly the stdlib. :(

My previous job did a PHP -> go transition. I felt like it went well.
<spoon feed>
At this point it is very important to mention that the recovered iPhone is a 5C. The 5C model iPhone lacks TouchID and, therefore, lacks the single most important security feature produced by Apple: the Secure Enclave.

In these older devices, there are still caveats and a customized version of iOS will not immediately yield access to the phone passcode. Devices with A6 processors, such as the iPhone 5C, also contain a hardware key that cannot ever be read and also “tangle” this hardware key with the phone passcode. However, there is nothing stopping iOS from querying this hardware key as fast as it can. Without the Secure Enclave to play gatekeeper, this means iOS can guess one passcode every 80ms.
</spoon feed>

And even if it did have a Secure Enclave, from page 5 of your link:

When an iOS device is turned on, its application processor immediately executes code
from read-only memory known as the Boot ROM. This immutable code, known as the
hardware root of trust, is laid down during chip fabrication, and is implicitly trusted.
The Boot ROM code contains the Apple Root CA public key, which is used to verify that
the Low-Level Bootloader (LLB) is signed by Apple before allowing it to load. This is
the first step in the chain of trust where each step ensures that the next is signed by
Apple. When the LLB finishes its tasks, it verifies and runs the next-stage bootloader,
iBoot, which in turn verifies and runs the iOS kernel.

So the LLB is run first, and could be used to contact the Secure Enclave and guess passwords.
And from the article:

At this point you might ask, “Why not simply update the firmware of the Secure Enclave too? That way, Apple could disable the protections in iOS and the Secure Enclave at the same time.” (crossed out)Although it is not described in Apple iOS Security Guide, it is believed that updates to the Secure Enclave wipe all existing keys stored within it. An update to the Secure Enclave is therefore equivalent to erasing the device.(/crossed out) I initially speculated that the private data stored within the SE was erased on update but I now believe this is not true. After all, Apple has updated the SE with increased delays between passcode attempts and no phones were wiped. In all honestly, only Apple knows the exact details.

So, it may be that Apple does have a backdoor to upgrade the SE. Only Apple (and maybe other state actors) really know this. So, it certainly isn't as cut and dried as you imply, if the device did have a Secure Enclave.

But, in this case, the device does not have a SE, so it is clear that with Apple's keys the device could be, with a practical amount of effort, be hacked.
As zenlikethat points out, "goimports" works around this weakness. For Atom, this package works great [1].

It's so damn arbitrary, though; it refuses to let you have unused imports (which is not a source of bugs) but will happily allow you to shadow variables (which is a serious source of bugs) without even warning you. Super weird.

[1] https://github.com/abiosoft/atom-go-imports
How do you propose this would work? Its a very vague suggestion and to me it conjures the idea of something like wikipedia or stack overflow, not a news feed...
Explain.

Include in the explanation how removing code makes the prior state insecure.
> > The counter from the governmental side is "we will give your company massive fines until and unless your company complies".

> At which point is becomes worth it for Apple to pay an engineer to do the job. I doubt it wouldn't take much of a bonus to get someone to do it.

What happens if Apple says they aren't paying these unjust fines? Theoretically, court order, law, or what-have-you, Apple can just straight refuse to participate (and hopefully other big tech companies would follow suit).

Sure the gov't can make arrests, threats, seize assets -- but in the end, the gov't still don't get what they want (but they do get a ton of very, very bad PR in the process). At a point, the gov't would have to stop -- destroying the world's most valuable company, and one of America's sweetheart companies, all over this... wouldn't play out well.
I would pay money to read this amazing book !
3 of the top 5 stories ever on HN are associated with Apple
Google Sides with Apple in Protesting Government Decryption
If you live in a home you own I think your rent can be thought of as the amount you could have made had you rented it out to someone else. It's not completely equal because there are burdens to being a landlord but from that perspective you're always a renter.
Is X-Pack going to be a subscription based service?
I think the `_TEMPLATE` is unnecessary and the `.github` folder a good compromise. However I'll take github listening to the community regardless. +1
Acceptance of FIDO 2.0 accelerates the movement to end passwords
Because it would leak information about the length of the password (and would require length limitations on passwords if the encrypted password is stored in a database). More importantly, I don't see what benefit you get from encrypting your password (read: slow and causes the above issues) rather than using hashing algorithms. If you use the crypt standard for storing your hashes, you can also update the hashes on login when migrating to a new algorithm. Unix systems have solved the "storing passwords" problem. We just need to keep iterating on "what hashing algorithm is trending on HN this week".
> It's impossible to control the temperatures when they roast these large quantity of beans with much precision

You're trolling, right?
of course that is why... how could they provide these features otherwise...
Why Front Moved Its Entire Team from Europe to the U.S
If thats pretty much all your server does then you can use whatever you like - most of the time I'd want the "hard crunching" stuff tucked away way in another service to call.
A sim card gets to send messages to the baseband in response to requests from the baseband. It doesn't have arbitrary memory access unless the baseband has really nasty bugs.
I'm confused about the last statement. Are you implying that your landlord is renting to you and it is costing him money?
Within the developer options, consider enabling 'Force GPU rendering', followed by a restart. On my Nexus 6P, this significantly improved UI responsiveness, bringing it closer to that of the iPhone 6s. Scrolling, zooming, and app switching are now silky, or "buttery", smooth. My friend with a Nexus 5X, however, noted only a marginal improvement; so your mileage may vary.
> that's of the main points of columnar data formats such as Parquet and ORC, I'm not sure that I understand the main point of in-memory columnar data formats.

ORC has had its own in-memory columnar data-format for the last couple of years - VectorizedRowBatch.

This doesn't use any Unsafe access, but uses pure JVM arrays for layout since it allows the Java JIT to unroll a lot of loops internally.

Here's an example of a patch from Intel for unrolling the 64 bit operations into 256 bit operations and allowing the Java code to be auto-vectorized to use ymm<n> registers

https://issues.apache.org/jira/browse/HIVE-10180

Secondly, we maintain isRepeating=true independently for each column, which means that operations for 1024 rows can sometimes be as fast as operations for 1 row.

While in a row-based model, it would have no way of maintaining duplicate information on a column directly.

I have looked at the ValueVectors impl in Drill and Tungsten in Spark - which are more cache efficient than Hive's internal columnar structure. However erasing type information into a byte[] structure prevents the JIT from auto-vectorizing inner loops.
The Shift from Real-Time to Right Time Marketing
Is it missing a "close(fd)" in the "if (address == MAP_FAILED)" case?
Nvidia revenue beat powered by strong demand for GPUs
>If a company that say, committed crimes, financial or criminal, has a warrant served on them, what if the response is, "Hey, we'd love to give you our emails, but all employees use end to end encryption, and every desktop has unbreakable filesystem crypto, and our IT department can't unlock anything, so you must compel the users to hand over keys?"

Are you an American or Foreign? In the American constitution, the 5th amendment, legally protects a party from being forced to incriminate one self. So if you are still alive, and slapped with a warrant, your rights protect you from giving up your private key.
If it's just concurrency and scaling, things are a toss-up. Where Erlang really comes into its own are all the fault tolerant and distributed things that Erlang adds, like the supervision tree.
>Someone built a 30+ person company around animated GIFs.

Its one my main sources of entertainment( imgur). There is an explosion of information/media on the internet and we need new formats, presentation to reign that in and make it palatable. I don't think its as stupid as you are making it out to be. There is huge potential in this space.
Worse case, you disassemble the die and read the bits off with an electron microscope. It's still possible, just expensive, painful, and maybe dangerous if you damage the chip.
>Zoning laws are actually by and large a relatively modern idea, with the oldest zoning regulations in America in place for only 100 years, with the aggressive zoning codes we have in place today generally only stretching back to the 70's and 80's.

Not even close. In most of the developed world, you can't turn a home in a residential neighborhood into a slaughterhouse.

I think you mean "density restrictions", a subset of zoning, not zoning per se. (Though even there I'm suspicious: I can go to a low-density part of Nuremberg and buy 100 contiguous houses and replace them with a skyscraper? I'm thinking "no", regardless of whether they formalize the rejection as "because zoning".)
But depending on your level, you could probably make waaaay more than 30k more being in SF.
Not familiar with the story, but from the text it follows that it was the company's landlord that was discriminating. Typically, in cases like this, conflict revolves around bathroom use and exclusion due to gender assignment/reassignment.
I do it. I have four plugs to connect and disconnect once a day. (i.e. no dock) I don't really mind.
Yup. I've seen candidates talk a deep technical game and turn out unable to write long term sustainable (well-organized) code.

Here's the fundamental asymmetry: what makes a good programmer great is their ability to build a cathedral brick by brick, alongside the architect, the other builders, despite the external circumstances, accounting for complications along the way. Ignoring the connotations of waterfall design that "cathedral" might invoke.

Building a complex system with many components takes weeks, even months, whether or not you're talking about MVP's, or service oriented architectures, and whether or not you're iterating rapidly.

A weak engineer will be fine for a few weeks, but the complexity will catch up to them. A strong engineer pushes that bar much, much further out. Possibly indefinitely.

Problem is, how do you tell that you're talking to that kind of person when you have only a few hours? It's an extremely difficult task because you must evaluate a person for a > 6 month job in under 6 hours. No matter what you do, you're going to have trouble.
interesting. i never saw the sexual connections... but i do feel that the 'exit or go public' endgame for startups is a negative element in the community.

there are a lot of what i would call "VC scams" out there where people want exactly this and do everything it takes to get there without really building a useful enterprise or valuable business, whilst not necessarily succeeding in their personal goal either.
As Instacart users, we've experienced some confusion on this front. They don't make it at all clear to their customers how the pickers are paid or how much they might or might not depend on tips.

I want to believe this is something Instacart employees could easily clear up by disseminating some information on the subject rather than hoping that Instacart will handle it.
Adding a means for FBI to input passcodes via Lightening connection instead of the touch screen is certainly a non trivial addition.

Can a court order someone to delete phrases from a letter or book?

Code is protected under copyright law. Code is a form of speech. How is either a court, or law enacted by Congress, telling someone what to write or delete what's already written, not abridging speech? Why is code different?
Yeah, this is not at all the same vulnerability. A segfault in uClibc was fixed 6 years ago. Wasn't the same segfault. Most production C code in the wild has more than one segfault waiting to be found.

The commit message starts out "Fix use-after-free bug in __dns_lookup." First, the glibc thing wasn't a use-after-free; it was all about buffers on the stack. Second, there's no function named __dns_lookup anywhere in glibc, nor any sign that similar code is anywhere to be found:

titan:~/src/libc/glibc geofft$ git grep __dns_lookup
titan:~/src/libc/glibc geofft$ git grep 'a->atype'
titan:~/src/libc/glibc geofft$ git grep '>dotted'
titan:~/src/libc/glibc geofft$
That's not really correct, if you sit at the center of a large object you don't accelerate, but you experience time dilation.

Further, as you dig deeper your acceleration decreases but time dilation continues to increase.
> My idea was a dedicated, battery-backed piece of hardware that reliably stored time plus could sync other machines. Plugs into an interconnect with ultra-low latency. One for each datacenter.

Google have a variant on this, where they use a GPS receiver in each data centre to provide an accurate time source for local machines.
> How is either a court, or law enacted by Congress, telling someone what to write or delete what's already written, not abridging speech?

Abridge means to curtail. Telling someone to create something doesn't curtail anything.
That's not very useful for web programmers that are handling their users' passwords, is it?
I actually prefer this feature, and even searched for a similar option in Firefox. Either way, it can be easily disabled in the Chrome settings by toggling the 'Merge tabs and apps' option.
Coldfusion is a triggering word for me. I wish this headline had a warning.
Living in a boat travelling the world, just the two of you.

vs

Crashing in a van in Palo Alto.

One of those sounds decidely more romantic and fun.
I like you. We should meet up.
Fair points that I concede. I'll note I also forgot the nuance mentioned by morsch (that a canary is compelling a lie, which is potentially different).

On a separate note though, I've always thought it would be interesting to see a member of Congress be issued a NSL and then have them read it on the floor of the House/Senate (since they have parliamentary immunity for anything they say on the floor of the House or Senate).
Huh, interesting. I think I'd just walk if presented with a firm one. I constantly have other things going on, even when FT employed, and honestly no employer is going to pay me enough to constrain my options.
My job is mid web developer salary range. Currently on my second job since we went nomadic. This job was remote from the start though I am the only remote person at this company.

Internet is all cellular connections. Verizon unlimited plan with AT&T on our phones as backup. We use a powered booster with an antenna on the roof. Interstate 40 is ~12 miles away from our current location, so the tower we are on was built to serve the highway.
Devils advocate: if you think it is important, then why don't you want to know when it's fixed?

Starring instead of subscribing is basically the issues equivalent of "Hire, but not for this team". If you limit it to people who care enough to subscribe, you only get the people who actually are invested in it, and avoid the people who think it should be fixed but who don't actually need it to be.
That was quick :)
Trying to order it, but their site is erroring with a 503
By providing a free software, self-hostable version of GMail. It's not going to happen, but that's what they could do to "provide the same features".
Ohh so Naive,

If the government really wanted to Threaten Apple Tim Cook would be visited in the night, and not by someone with a CHP motorcade

This is a Pre-Threat... Threat

Remember this government has no problems killing citizens with drones with out any trial... You do what you are told or you will get a predator missile up your ass
I'm willing to bet a significant number of those were from acquisitions, rather than hiring directly.