skysight-inc/HackerNews huggingface dataset:
Location: Oregon/South Dakota

Remote: Yes

Willing to relocate: No; willing to travel

Technologies: OpenID Connect, JWT, OAuth, SSO, LDAP, SAML, FIDO, RBAC, ABAC

Résumé/CV: https://www.linkedin.com/in/christianmsmith | https://github.com/christiansmith | https://github.com/anvilresearch

Email: smith@anvil.io

We've been working on identity and access management infrastructure software for a few years now. We're committed to keeping our projects free and open source (MIT), and we've been fortunate to sustain the effort by working for users that need specific features implemented or help with integration. Our primary project is an authorization server called Anvil Connect:

https://github.com/anvilresearch/connect

There's an explosion of change happening in this field right now, both from within and from new frontiers like IoT and blockchain. We have plans for things we'd like to build, and we're looking for forward thinking users that need them built.
Netanel Rubin's Perl Jam Circus
And many countries have never had the the culture of changing family names on marriage.
Moving away from obsolete crap isn't the solution, it's the definition of the problem.

One could argue that the CA/Browser forum has achieved some success with moving away from SHA-1. As a spectator, I don't understand why this process is not repeated for similar obsolete primitives or standards.
Straight from our lawyer: SendGrid offers EU Model Clauses upon request.

My email's in my profile - let me know if you need the details.
> Where, in any of my day-to-day job duties, am I going to need to find the kth permutation of a set of numbers?

People who don't know algorithms and data structures tend not to see them where they exist, so it becomes a subjectively self-fulfilling prophecy. You may not need to clone a graph in your day to day work, but seeing graphs where graphs exist can lead you to better solutions in a way that might seem "magical" to others. Even if it isn't too significant, that small edge can make a difference sometimes. Employers rightly want that.
> Just stick the question and it's answer in the notes section of your password manager.

Since security questions are typically used for things like password recovery, you probably shouldn't manage them with the same tool you use to manage passwords. After all, if you need them, it is likely to indicate a critical failure of your access to (or your data held in) that tool.
FWIW, that is a fairly known frontend issue :) . One cannot rely on that returning any data.
Generally computer busses are designed to operate without impact from external interference, bc there is so much of it around us all the time. You might be able to tip the scales though in some sensitive areas. Microphone input would be one, by influencing any high-impedance parts. Radio systems might be vulnerable... although typically they're designed so you don't get access to the baseband signal. For the most part, you'd be limited to up/down state. Coupling noise onto a USB cable though would require lots and lots power. I wonder if DRAM could be influenced? Hmmm....
> It doesn't fit on credit cards either, making the name field of web payment forms a best guess (I usually put my full name regardless of what is actually on my card).

The name you enter for web payment doesn't matter; it's not part of the payment authorization process. Also, the street name doesn't matter either.
Driving 101. In the US, the car to the right has the right of way.
Yeah, I think a more meaningful critique here would be "Google should draw more visual attention to certain dangerous permissions like these, over less impactful ones."

Also, it's easy for users to click buttons and go "ohhhh, wait, no!" and there ideally should be something to account for this case too.
Interesting that my mandrill dashboard shows I can send 62000 emails "absolutely free".
I'm on the free tier.
Martin Hellman explains what he plans to do with his share of the Turing Award money:

https://nuclearrisk.wordpress.com/2016/03/01/the-turing-awar...
Why? I suspect that just means that they keep the various versions of your hashed password. Some regulatory requirements mandate that passwords not be re-used for a period of time; that would be enforced the same way.
I think you're underestimating. An app is a common term for a mobile or web app, should be known by most people using the app in the first place. Permissions is a common term to signify what you just gave the new app you approved, also nothing really crazy. You want to remove or revoke what you just gave the app, so that term is obvious. And the service you approved it with is Google, so add that in.

It's not like this is using any real technical terms that a common 21st century computer/phone user might not know, and the only real difficult one is probably "permissions" which you can probably either guess or eventually get to with synonyms; totally possible given it's a common English word.
This is how we got sound to play on the TI graphing calculators. It sounded bad and drained the batteries but it was fun. Another fun thing was getting grayscale graphics on those screens. They had only black and white pixels but flipping them on and off at different frequencies made them gray.
I do not believe I have had potato foam. My comment was more about automated plating composition, than a particular preparation technique, or recipe.
Geocoding big places is no small feat
So when you want to look up an old email, you have to remember which three month period it was in and which email address that corresponds to? When you have conversation that spans multiple periods, you have to do this multiple times? This cure is worse than the disease.
Ah, but how many?
If you consider Coinbase a "bank" for Bitcoin, then they have implemented OAuth, quite nicely. Users can review permissions and revoke access in their Coinbase account. The link shortener I run relies on it to transact with my users (https://credhot.com). I also use it for logging in, but that will go away soon in favor of social logins.
Reading the title I thought it was about the GMail address which you can't change afterwards. I regret not getting my real name in my early twenties.
Thanks for the heads up. When I looked years ago I had trouble finding a suitably priced company with an available API. This looks like a serious contender.
Carbon monoxide spike over the US West Coast
Wize Services | Software Engineer | http://wizeservices.com | Guadalajara, México | Onsite/Remote

Wize Services is Wizeline's new arm of business, starting operations in Mexico this July. As a service company, we will own major initiatives for News Corp, the largest media company in the world. We need a world class team who can own this project and make major architectural and UX choices based on their skills and experience. This is an unique opportunity to join a newborn company, founded by a management team with proven success leading start­ups. Want to be part of the thrill?

We are hiring for the following positions:
+ Software Engineer
+ iOS Developer
+ Test Engineer
+ UX Designer
+ DevOps

Salaries depends on aptitudes and abilities. Apply today! alejandro@wizeservices.com
What is an example of a "cure-all massive policy"? When I think through the list of common welfare state components, none of them appear to be intended as cure-alls, but rather solutions to specific problems.
This is the CRAZIEST part of the banking system. The information to withdraw money from your account is on the bottom of the paper checks that you freely give out. Anyone with the routing number and account number can drain the entire account.

ACH fraud in the US is in the ballpark of $100M / year.

This is why I think we're only in the opening days of the FinTech shift. There's a lot to be done and a lot to fix.
> No remote unfortunately

This is an interesting line. If its unfortunate you do not allow remote, why not offer it?
He goes off on a tangent on the theory of the mind and saying that a computer might think a cloud is a truck.

In order to get an AI to think a cloud is a truck, you'd have to somehow reinforce the negative numerous times, essentially brain-wash the AI into thinking a cloud was a truck. Guess what else can be brain washed?

The author holds humans in far too high of regard here. Clearly given the number of accidents and road deaths a year, humans aren't very good at intuiting others' actions.
Out of the Neurosis joke area and in line with your hobbyist radio operator comment, probably the person who most know about how to perform radio transmissions using a component by re-purposing them are those who work shielding sensible components away from it.

For example power bricks that contains every day more and more circuitry could implement a protocol of communication by de-modulating a message sent by AC and then sending via radio to the computer the message; process that's even easier with power cables with data lines.... like the usb cable.
Taking advantage of end user provided permissions seems to be the norm instead of the exception.

A few scandals have risen because of it. I remember a popular "free" calculator app that was sending GPS data.

Oddly, most people don't seem to care. They'd rather give up their entire picture collection than spend $2 on a permissions restricted app.

Having more fine-grained restrictions than we already do won't solve the problem. Most people will simply accept the default "give this application permissions to do everything" right out of the gate. I'd be surprised if even close to 5% of the people on facebook have reviewed the applications they've given permission to in the last 12 months.
What we do: The Peek platform combines Peek.com, a one-stop shop for the best activities, with Peek Pro, award-winning software for activity operators. We are a product-first company and we have a stellar engineering team.

Who's got our back: We’ve raised over $10M from some of the best tech and travel investors, including Eric Schmidt, Jack Dorsey, Pete Flint (Trulia), and Carl Sparks (Travelocity). We were named one of Fast Company's 10 Most Innovative Companies in Travel.

Where we’re at: Our team is ~50 people and our business has tripled in size in the last 6 months with activities available in 25+ regions in the US, Mexico, UK, and France.
ZipRecruiter - https://ziprecruiter.com - Santa Monica (LA area) - REMOTE OK for some positions

Our goal is to create the best online services for filling and finding jobs. We bootstrapped for the first four years, growing to 100+ employees. Last August, we raised $63M led by Institutional Venture Partners.

We have a number of open positions:

- Software Engineer (primarily Python) (Santa Monica)
- Software Engineer (primarily Perl) (Santa Monica or remote)
- Mobile Software Engineer (iOS or Android, Santa Monica)

We're growing rapidly and have a large customer base (primarily small and medium sized businesses). We have interesting problems to solve in the areas of search, yield management, analytics, scalability and new product development. If you'd like to learn more, please visit https://www.ziprecruiter.com/hiring/technology or email us at techjobs@ziprecruiter.com
As others have stated, they use Stripe for payment processing.
Honest noob question, what's with all the hype about React?

Edit: Awesome replies, thank you!
Another article from Mercury News.

http://www.mercurynews.com/business/ci_29558045/apple-silent...
"The Price of Dissent"

https://media.ccc.de/v/32c3-7443-the_price_of_dissent

Thus is a talk by Moazzam Begg[1] about the harassment by the UK (with US involvement) of political minorities, and Cerie Bullivant representing Cage[2]. It is a heavy talk, because it is very frank about what all this surveillance technology has been used for. The use of COINTELPRO-style tactics are not hypothetical.

This is the other half of the "snooper's charter" story. As said in the talk, this harassment of minorities is the canary in the coal mine, that hopefu9lly serves as a warning that other groups might be next.

[1] former detainee at Guantanamo

[2] an advocacy group that supports the victims of the War On Terror
You're thinking of the wrong attack vector/issue with this.

Imagine your account was compromised. You reclaim your account. The previous cracker recovers your account from you because they knew your previous password and went through the recovery process.

The above happens more often than you might think.
I'm a big fan of Hayek, however I don't think he ever discussed what I feel is the strongest argument against state-sponsored central planning - contingency planning. When the government decides it needs to be responsible for some basic human need because it is too important to be left up to the free market, such as food security or healthcare, it crowds out alternatives that actually behave as valuable insurance/backups to a primary provider of a given good or service. If/when the government fails at providing something as vital as food or water, there isn't much you can do when the government controls the means of production. If a natural monopoly exists, people are at least free to find alternatives on their own, and thus profit from them, should those managing that natural monopoly fail at their jobs.
How often does it happen, though? You don't need a human on every flight in order to deal with that. Build a few ground-based emergency remote-control centers across the continent, and train the autopilots (or the air traffic controllers) to call them when things get bad.
Nope. First, you said "guess" which is anathema to control. Second, you like to think you have some control but you don't. You don't have control over your own body and you want to tell me that you have control over other people's perception?

Before you tell me that you have control of your body: Make your heartbeat exactly 137 times a minute right now and record it. You don't control you body...

Now, skill in the attempted manipulation of perception is something... but it is hardly a done deal. That is, one can try to manipulate perception but the manipulation is not guaranteed. In many cases, the attempted manipulation will have the opposite effect. See pick-up lines as an example.

I know that I can't control other people's perception. You may or may not come to the same realization some day....
Brazil Facebook head arrested for refusing to share WhatsApp data
Same problem, same sentiment I now have about Mailchimp/mandrill.

Just spent the morning migrating our mailing services to SES.

Now I'm going to have to rewrite our incoming mail parser, since I hooked into their API's for all that. What a mistake that decision was.
Yeah; I tried to stay away from really low-level aspects (just because they're hard to generalize across languages), and also just because the damn thing was so long already, ha. :)

As far as database migrations are concerned, GitHub (and others, of course) takes the perspective of migrating before the code that uses those migrations go out. In other words, as @herge says in a sibling comment, the code that gets pushed needs to support two branches of code and two branches of data simultaneously. It's certainly some extra work (and can be pretty gnarly depending on the scope of the migration), but once you get to a certain point it's kind of the only way to do no-downtime migrations.

There's many possibilities to help with the actual migration process, depending on what database you're using. With MySQL, for example, you can do something like the process in lhm: https://github.com/soundcloud/lhm

Zero-downtime deploys aren't super difficult in Rubyland anymore (many have written how they achieve it in Unicorn, for example), although I'm not as familiar with how other folk do it across other languages and platforms these days.
The author is complaining that "manage your mail" apparently means "We'll copy all your contacts and mail history of all times into our database". The permission dialog only tells you what Google will allow the requesting app to do, not what that app will do with that.
ZeroCater//San Francisco,CA//On-site//Fulltime//Profitable Startup//

We’ve built the #1 way for companies to feed their people. ZeroCater is a marketplace that connects companies with great local restaurants and caterers. We’re feeding hundreds of companies, ranging from newborn startups, to the Fortune 100.

We’re here to build something people love. We’re a scrappy company that’s scaled to tens of millions in yearly sales on little funding.

We’re based in San Francisco and backed by investors like Y Combinator and the creator of Gmail. We’re looking for people with an ownership mentality who want to work with like-minded folks to build something great.

The roles we're hiring for:

- Full stack engineers
- Front-end developers
- VP of Engineering
- Head of Product

https://zerocater.com/jobs/
From other articles I've seen this is something that's already been dealt with. One of the problems they had early on was all-way stops where human drivers were so aggressive that the self driving car would never get its turn to go, instead getting skipped by humans that just went when it hesitated for an instant.
I got a chance to meet some these guys and they're all great!
The ethicality/morality of a potential supplier is a legitimate consideration for many organisations, and in some cases is written into the organisation's policies.

For example, WWF procurement[1]:

> "We monitor and select goods and services carefully to avoid those that are harmful or damaging to both the user and the environment."

> "we require suppliers to complete an environmental and ethical questionnaire"

Whether you agree with the behaviour, disagree, or even don't care, it's a legitimate question to raise when talking about alternative suppliers.

[1] http://www.wwf.org.uk/about_wwf/other_publications/environme...
I was also thrown off by this movie. I remember watching it in college. It seemed very disjointed, throwing around a bunch of dialogue, vocab, characters, politics, etc. at me that seemed badly translated and only poorly if ever explained or described. Sure, plenty of eye candy and then some somewhat intriguing AI stuff at the end. Recently, I tried watching a couple episodes of SAC, and while it was easier to follow, it felt again like I was only understanding about half the dialogue.

I am also told that it can be a little off-putting or disorienting to some because it is more concept-driven than plot-driven, which, in addition to being an awkward mashing together of the beginning and the end of the manga (manga wrangling seems in some form or other a common source of awkwardness in anime- e.g. Akira), is probably why it was hard for me to follow. To each his own, I suppose, but I think it's cool when you have both a well-told story AND intriguing concepts (e.g. Neuromancer, Gattaca, Blade Runner, etc.)
Paine's arguments, which have been widely expanded on by geolibertarians, are compelling but what he's specifically advocating here is most naturally interpreted as extremely limited compared with what developed world governments offer their populace instead.

Fundamentally, he's arguing that people should be compensated to allow them to reach the same standard of living as would have been possible in the absence of civilization and proposing a subsidy in the region of £1000 per annum in today's sterling to compensate. That's far closer to the Alaska Permanent Fund in both ideological underpinnings and magnitude than it is to being an adequate welfare state replacement[1]. Of course, we could speculate that he'd advocate a much higher subsidy in today's land of relative plenty, but his 1797 argument is quite explicit in suggesting that people are owed no more than the value of the life they could have enjoyed in a Native American "state of nature" and the landed classes owe no more than that.

Fortunately today we have new arguments for the economic benefits of universal education and necessity of unemployment insurance in an economy managed to ensure some level of involuntary unemployment persists.

[1]£1k per year for Paine's average 30 year adult remaining lifespan plus £1.5k at 21 is less than my government's investment in my education...
Building Flask-Based Web Apps a Conversation with Miguel Grinberg [audio]
Gears of War, the First DirectX 12 Game, Is Here
What bank allows logging in with a third party app? In the UK they all use secure tokens, SMS codes, etc.
Let natural selection run its course. At some point humans will evolve an instinct to not walk in front of a moving vehicle.
It's like if you've been programming in C all your life and suddenly discover python
Unlike Heartbleed, the actual private key is not leaked to the attacker. Rather, a SSLv2-enabled server allows you to build an oracle with which you can decrypt a TLS connection (modern crypto, secure, etc.) to a server that uses the same key.

With Perfect Forward Secrecy, any DROWN compromise is limited to the period where an attacker is actively running the attack against you. Previous PFS sessions cannot be decrypted. Without PFS, I'm not sure, but my gut feeling is that previous traffic could be decrypted if someone actively attacks you on an unpatched system now.
Lets be fair here:

1: Greenwald is an American so the actions of the US government are relevant to him and his readers.

2: Greenwald is a lawyer, trained in US law, therefore the actions of the US Government vis-a-vis US Law is a suitable topic for him to cover.

3. China and Russia have been oppressing their people and their peoples rights for a long time. Neither have a constitution that is supposed to enshrine the rights of the citizens. SO there isnt much of a story there i.e. russians have no constitutional right to privacy, when that privacy is invaded by the state because the state has enacted laws that allow it to do that, there is no story. Plus even if there were there are probably russina lawyers and journal;ists who would be more knowledgeable on the subject and could bring it to the awareness of their russian readers. I doubt many russian media watchers read a lot of greenwald.

4. The US sells itself as the land of the free, so their hypocrisy makes the story worthwhile/interesting. China and Russia have never really hidden the fact that they will spy on anyone and everyone that they can. US says "we are your friends" and then spies on everyone regardless of their status as friend or foe.

But you know handy to throw in a straw man argument to try and deflect attention away from the US government and make the journalist the bad guy in this situation.
It fundamentally changes the way we think about frontend web development in a very positive way. It makes things more testable, reliable, fast, and easier to write. Combined with things like Redux we also get crazy features like time travel.
New York City, NY (Union Square) | Vettery https://www.vettery.com | ONSITE | Full-time Full Stack Engineer

Here’s the gist:
Vettery is a tech company, but what we ultimately do is help people find their dream job. We are looking for self-starters who care about helping people find a job the love! It’s pretty simple, we are looking for hungry people with an energy to disrupt an ancient industry and at the same time enjoying the perks of a growing startup.

Vettery engineers work across the full stack and are committed to optimizing the experience for our users as well as our employees. A Vettery engineer has input into the whole process of the company from business decisions to where our tech stack is going. You will be involved in all levels of the products we produce. There is a large variety of projects here and we strive to align people with what tech they like to use or want to learn.
See more info and apply here...

https://boards.greenhouse.io/vettery/jobs/118230
PHP, Javascript, Angularjs, MySQL, Python, CSS, Sass, Bootstrap, Grunt, Ubuntu, AWS, Vagrant, D3.js, Apache, Nginx, Git, Protractor/Jasmine

Benefits:
Competitive salary Open vacation & sick time Medical, vision, and dental insurance Vettery Perks: Annual Spotify subscription + Vettery shared Brilliant Bicycles Frequent team outings, lunches, and team building events Lots of free food - stocked kitchen + beverages