skysight-inc/HackerNews huggingface dataset:
Oh, I agree. I don't mean that the weakness created the vulnerability entirely, thank you for clarifying. I appreciate the excellent research and security investigation done here. It was excellently articulated and presented, and we need to keep improving our publicly available tools and finding these issues.

What I mean is that, today, many many years since the creation of the suite, the single-target cost has dropped to 'only' $440 per target for non-weakened ciphers. I love the money-to-execute-attack metric.

That's still high enough to slow down the viability of broad attacks for most attackers. What about in the past? How much was that back when the suite was created? Much higher. How much sooner did the weakened version make the attack efficient?

I don't mean that the government is the source of all crypto flaws, I mean that we have a specific example of a government mandated crypto 'back door' weakness causing a specific harm, making exploitation of a security flaw substantially easier. This is direct evidence of the harm caused by undermining security, which the government is currently adamant can be done "safely". The security and hacker communities know that this is not true, and this is a timely counter-factual example.

This is direct evidence that weakening cryptography, including back-doors, and special "one time" access fundamentally cause harm by undermining the security of cryptography for everyone.
+1 for mailgun. Their API is awesome and they even offer things click tracking (also in their API).
This.

Extreme example: a 1000 ton freight train "hitting" you at 0.1km/h it's not doing the same damage as a 1000kg car hitting you at 100km/h.
It's a death of device freedom that is on-track to have over 2 billion adopters this year.

Sounds a lot like "device freedom" isn't a feature people actually want.
Implementing GJK
Spiceworks | Austin | Full time | Onsite with relocation assistance available

Spiceworks helps millions of IT pros do their jobs with free tools and connect through our online community. Come help us transform IT. We are looking for the following:

- Test Engineers

- Data Engineers

- Software Engineers (front-end, back-end or full-stack)

We have an awesome culture with full benefits, an onsite gym, free drinks & snacks (with breakfast tacos on Monday and bagels on Friday), a weekly development lunch-n-learn and more. We're also ranked as one of the best places to work by Fortune (http://fortune.com/best-medium-workplaces-in-technology/), Glassdoor (http://www.glassdoor.com/Best-Small-and-Medium-Companies-to-...) and have been ranked at a top work place by the Austin American-Statesman six years running (http://www.topworkplaces.com/frontend.php/regional-list/comp...).

Find out more about Spiceworks and see the current openings at http://www.spiceworks.com/jobs
Recent review: http://spectrum.ieee.org/consumer-electronics/audiovideo/til...
I'm really not sure what you mean. wxWidgets is a wrapper around the underlying GUI framework.

AFAICT, all of those screenshots are using the standard wxWidgets UI elements, with the obvious exceptions of the audio waveform, the on-screen keyboard, and the 3D graphics widget, which will not be standard components in any GUI toolkit.

The variation is due to the users taking the screenshots using different themes or styles in Gtk, KDE, Windows, etc..
I'm guaranteeing you supply of labor is not the dominant factor in China's economic climate. The rigged economics of their core competencies has a much larger impact than the availability of cheap workers - labor markets can adjust seamlessly and effectively to less available labor by having the most valuable work done and less valuable work gets delayed. To some degree you have a cutoff valuation where less valuable work is not worth doing - in the west we call it minimum wage. I highly doubt China's economy is anywhere near that threshold yet.
Voodoo Manufacturing | Brooklyn, NY | https://voodoomfg.com/

- Marketing Director

- Manufacturing Director

Voodoo Manufacturing is a young startup on a big mission to change the way things are manufactured. With our 128-desktop 3D printer factory, we help companies bridge the gap between their first prototype and their first high volume production run (10,000+ units). We’ve worked with companies including Intel, Universal Studios, SyFy Channel, Autodesk, Viacom, Mattel, and a few more we can’t even talk about! We’ve unlocked an entirely new market in the world of manufacturing -- affordable high-volume 3D printing.

Email jobs@voodoomfg.com for more info.
2 Reasons and 3 Ways to Ditch Bitcoin Online Exchanges
415 - Amsterdam, The Netherlands - EU VISA + ONSITE - Ruby developer

415 is looking for a Ruby back-end developer with an interest in front-end to help us develop a new event management platform. We're a new startup in the music and event-industry looking for a software developer who is curious, proactive and on the forefront of new technologies.

We work with a lot of modern tools common to Ruby in combination with Rails, Grape, etc. We're also keen to extend our knowledge in the very near future with technologies with Elixir, Rust, Docker, and anything else that sounds promising. We're a small team now, but always growing.

For more information go to: http://415.amsterdam/ruby.html or contact us directly at jobs@415.network
It's way worse than just the TOS change. Mandrill has a lot of advanced features (webhooks, reporting, AB testing, templates, etc). Some companies may be able to switch to SES or mailgun in a day, but more advanced integrations could take weeks. We're stuck with either pulling people off critical project in order to meet their ridiculously short deadline, or pay insane bills (the new price is over 4x the price we signed up for).

I emailed their founders and never received a reply.

Lesson learned: do not take a dependancy on MailChimp for any reason.
How This Developer Beat Out Facebook on GitHub's Top Trending List
Top Tips for Aspiring Filmmakers
Medfusion | medfusion.com | Cary, NC (USA) | Full Time | ONSITE

=== Who we are ===

We are mid-sized, innovative healthcare SaaS company. We design and deliver solutions that enhance the patient's experience. Our platforms include the Medfusion Plus mobile app, Patient Portal, and Pay Suite.

=== Who we are looking for ===

UI Engineer - mid to senior level front end (or full stack) developer with ample angular experience.

Mobile Engineer - mid to senior level hybrid mobile developer (phonegap, ionic, ...etc) with some native experience (Java, Objective-C)

=== Why us ===

We have an awesome culture and flexible work life balance. We also have tons of free food :)

=== Interested? ===

Email omeky@medfusion.com for immediate consideration!
Location: Philadelphia, PA

Remote: Required

Willing to relocate: no

Technologies: Ruby on Rails 1.2, 2.3, 3.2, 4.2

Description:
I've developed a system and tooling that helps us upgrade old rails apps. This is our only focus and it lets us be more efficient than generalized developers.

We've got a low-priced "upgrade track" that enters your app into our development pool of our semi-automated upgrades. All code delivered by pull requests, with no writes to your codebase.

http://www.railsasaservice.com/

Email: nhance@buildbettersoftware.com
Segovia | www.thesegovia.com | NY, NY | SF, CA | ONSITE | FULLTIME | Enterprise software to fight extreme poverty.

Segovia makes it possible to identify, verify, and deliver cash to people who lack access to banking. Over a billion people worldwide receive social protection or economic aid, but NGOs and governments operate anti-poverty programs without modern enterprise tools, resulting in significant fraud, waste, and delay. Our beneficiary enrollment and payment products dramatically improve the distribution of essential resources to those who are hardest to reach.

Segovia is a venture-backed, mission-driven, for-profit company, and we are hiring exceptional full-stack software engineers who share in our vision. Our team includes the founders of cash transfer charity GiveDirectly and early engineers from Facebook and Foursquare. Our investors include Reid Hoffman, Omidyar Network, and Global Innovation Fund.

In the press:

http://tcrn.ch/1LUe5s1

http://bloom.bg/1MsHwT3

http://bit.ly/1Q7dMh2

Apply:
https://thesegovia.recruiterbox.com/jobs/fk0hqg5/
Honestly it was quite hard to actually find them, weather that means I over-estimated the amount or that they have simply failed I don't know. I think a bit of both.

Maybe this [0] and this [1] fits the bill, both of them have very few users.

I still don't see how mobile will make it work, you will still have no idea if there is something going into the button and as I said if you go there to read something you will never ever find another comment because of the massiveness of the web. Even if you write a review, who is it for? The chance of someone reading this review, on this app, on the specific page for a product they want is so small it is not even funny. And writing a review usually means you do it for either the "stats" of writing reviews which you now don't get, or for others to read, which they just won't.

Don't get me wrong, I'd love for something like this to succeed and thrive. I just don't see it happening right now.

[0] https://chrome.google.com/webstore/detail/dropchat/eaejhpdja...

[1] https://chrome.google.com/webstore/detail/retort/ianfcbdiagd...
Interesting! Some questions:

* Is the role more geared towards development or operations?

* You say that there are three "high-profile" projects: at what frequency do projects hit scale and over what time duration?

* Do these projects fund themselves or will infrastructure costs come from Harvard?
Mediaburst | http://www.mediaburst.co.uk | Manchester UK | Fulltime | Preferably onsite but possibly remote.

We're an SMS company: We have an API (https://www.clockworksms.com/), an online texting app (https://www.textburst.com) and we also provide an SMS based telehealth service (https://www.getflorence.co.uk/).

We're constantly trying to improve our products and need bright minds to do so - we've got a mature tech stack so there's no firefighting. We're just trying to make nice SMS apps that people enjoy using and do some good in the telehealth sector too. We're not a startup, we're a small, agile team without layers of fluff and responsibility.

We need a .NET dev and a Designer: https://www.mediaburst.co.uk/jobs/

We've got loads of plans for our stack, loads of ways of improving the apps and new apps (https://www.surveymill.co.uk) in the pipeline.

the current stack: C#.NET, Perl, Angular, ReactJS, MySQL, CentOS, HAProxy.

Fancy a chat about it? https://www.mediaburst.co.uk/jobs/
So, I moved to SF in 1994 in my early 20's, which means my bona fides are longer than the OP, but still not native. However, from the greater baseline I can say a few things that won't be easily available to someone having lived in SF for a year:

1) public transit has sucked since well before the tech boom. When I moved to SF Oracle was probably the northernmost tech company of note (not counting Autodesk in San Rafael!) and the center of mass was decidedly in Mountain View. Today center mass is probably Foster City or perhaps Burlingame. Also, because the commute was only slightly less bad (CalTrain in particular hasn't improved much over the intervening 22 years) and there was no shuttle system, very few people chose to live in SF and commute south. And yet Muni was awful -- I worked in "Multimedia Gulch" (what the area around South Park used to be called) -- and typically if I wanted to get to work in any reasonable amount of time I had to take a cab. Today you'd take Uber, but same story.

2) Homelessness / dirtiness were just as present, if not worse. The Mission corridor was much worse, and parts of the Tenderloin have made huge improvements. Not to mention the tent cities around Rincon, the dramatic difference in the Embarcadero, Hayes Valley, and the Presidio. The Sunset and Richmond are mostly unchanged, and Visitacion Valley is still a part of town no one you work with goes to. :)

3) Housing prices -- ok, this is the one place where things truly have gotten incredibly, insanely worse. My efficiency in the city cost $600/month in October 1994. An equivalent space today costs $2100/month. There's a lot of things contributing to this, but I honestly think the shuttles are a huge part of the demand side of the problem. And of course the supply side has many well-documented shortcomings.

3) The number of silly companies getting started? Well, companies are just people, and honestly the number of silly people with crazy ideas in SF feels mostly unchanged. Their motivations are dramatically different, though. Today many of the most silly ones are simply in it for the money. Back in the mid-90's the people with rich fantasy life were all artists of the starving type. ;)
A friendly reminder.
The items listed here are available on the map on https://whoishiring.io

Direct link to "Who is hiring? (March 2016)"

https://whoishiring.io/#!/search/37.324741343923954/-28.6523...

Also, feedback is welcome.
SiteDocs is hiring junior and senior programmers to join our REMOTE team, working on web and mobile applications for the construction industry. (SiteDocs headquarters are near Vancouver, but our dev team is spread throughout Canada and North America.)

We're a growing B2B start-up with dozens of employees, thousands of users, and real revenue. Our mobile applications are built with Xamarin, and our web app is built with React, but we don't necessarily care if you've worked with either before as long as you're a good programmer who's interested in (and reasonably good at) learning new things.

A job at SiteDocs means:

* Being responsible for your own piece of the product. We're a relatively small team, and our product is relatively young, so the features and components you build will have a meaningful impact on our users' experiences.

* The opportunity to teach (for senior developers) and to learn (for junior developers). Our company values continuous learning, and as a dev team we are more than happy to hire and train programmers right out of university (or self taught, etc).

* Market salary. Honestly, we prefer hiring people in low cost-of-living areas and paying them slightly above-market for their location. But we also have team members who live in Vancouver, so ¯\_(ツ)_/¯

If you'd like to talk, please email dave.noel@sitedocs.com with "HN Hiring" in the subject line.
A book is also an extension of the mind.
> The problem is, the ONLY curves that are supported in practice are NIST P-256 (prime256v1) and P-384 (secp384r1), which aren't considered safe.

I don't believe this is accurate. It is true that there are complaints about the curves' design in parameter transparency and their difficulty to implement them securely. But I don't think people are actually suggesting the curves are not safe to use conceptually.

P-256 facilitated ECDSA should be good to use until the new curves are adopted (which will take a while) as long as you're not writing implementations yourself. It is true that the new curves will be a better alternative once they are available given that they are designed for transparency and ease of implementation.
This page contains many pleasantly-made visualizations, which I always like. The editorial content is a little slim to my tastes. For instance, I have a slightly hard time looking at a graph indicating a mere 7% GDP growth and concluding that an economy is in need of fixing.

In a related fashion, I'm a bit surprised that there is not a dedicated graphic to some sort of private debt. Perhaps this information is simply not known well enough. But it's my [admittedly quite limited] understanding that one of the problems the Chinese economy will soon have to face is rising reliance on individual debt for wealth generation.
Need a good alternative for Atlassian JIRA
I've been using Atlassian JIRA for project management for months now, both in my personal projects and at work. I'm forced to still use it at work but I really want to minimise the need to use it as much as possible.

This is why I'm looking for an alternative to JIRA.

Main features I use :
- Scrum/Agile basics (boards, estimates, sprints)
- The ability to create epics (I really like this)
- Timetracking (timesheets)

I've been using Confluence for wiki pages but seriously I will not miss it one bit. I think any wiki tool is better.

Why I don't like JIRA anymore:

I just think this product is a joke. I mean sure the core features are very good, which is probably why I signed up in the first place but, loading time is still slow. People complained about this few years ago I don't see that anything has changed. I'm on a cloud instance and seriously pages take 8-9 seconds to load.

I was trying to restore my account on a new instance and it doesn't work. I cannot backup again because there is one backup per user every 50 hours.

Atlassian wants to be a solution for all your problems. This is why they have few other products besides JIRA, all of which are horrible. They should really focus only on performance which is making their main product impossible to use.

rant over. If you have suggestions for products that have basic scrum/agile stuff and time tracking I would love to hear about them :)

thank you
In my browser, this gets stuck at the "getting started" stage and never progresses. That seems to be a pretty realistic representation of his current chances in the primaries.
The NIST curves also have constants which may or may not be manipulated.

Bruce Schneier recommends against using them.
<Company I work for> | Bangalore | Full-Time | On-Site

We are a company into core product development for large reputed cloud providers and fastest growing company out of Pittsburg.

What you get:

-------------

+ Mac book pro

+ Competitive Salary

+ Flexible timing

What's the requirement:

-----------------------

+ Skilled Ruby developer

+ Experience in Ruby on Rails.
I would like to see Babel ES6-to-ES5 converted performance here too, because that's how most real-world ES6 code is going to be run --- there are too many non-ES6-compatible browsers out there.
I've done a whole lot of individual research in the last two months, consulted with two dentists and an endo, gotten opinions from friends and family etc... seeing that any procedure is irreversible, it seems prudent to take the least drastic option first. I don't have a particular concern about recurrent infection in this case, because my diagnosis is about trauma, not decay. What concerns do you have?
Even if that was true, there's more to Europe than the EU.
The thing is, those skulls don't come from WWII, they originate with the napoleonic wars.

https://upload.wikimedia.org/wikipedia/commons/a/a6/John_Eve...
Kids’ Exercise Predicts Adult Income
UX & digital product designer | Míra Podorský

----

I'm looking for new job opportunities!

FULL-TIME or REMOTE

----

http://www.podorsky.cz/
SpotHero | Chicago, IL | http://spothero.com
SpotHero is changing parking, and our tools will redefine the transportation industry. With over a million cars parked, fast growth, and solid funding (https://angel.co/spothero), SpotHero offers countless ways to make an impact on the company and your career.

Director of Development - http://spothero.com/careers/126707
As the Director of Development, you'll thoughtfully lead our team of engineers in supporting and growing our business. You must enjoy the hands-on work of a day-to-day developer (coding, design, and problem solving), in addition to leading engineers, communicating closely with our executives, and determining the best use of new technologies - all the while nurturing and maintaining a development culture that SpotHero can be proud of.

Lead Software Engineer, iOS/Android - http://spothero.com/careers/108372
No, we don't expect you to build both iOS and Android apps by yourself. BUT, you should know how to!! This role is half managing the iOS & Android apps, and half architecting & developing. You'll have both iOS and Android developers (1 for each platform) on your team, and you should be able to jump back and forth, as needed. If you're a first time manager, no worries; we'll coach you on those skills. Just be sure you're a master of both platforms.

Senior Backend Engineer - http://spothero.com/careers/124847
As a member of our Backend team, you will be responsible for building all things related to the backend horsepower that powers our website, our API, and our native apps!

Software Engineer, Android - http://spothero.com/careers/88317
SpotHero is a mobile product. If you love building Android apps, you'll love what we've got in store. We have an amazing Android app, that we're looking to do a full ground up redesign on. So there is a lot of bluesky work in the very near future.

Summer Software Engineering Intern - http://spothero.com/careers/118124
College interns are as important as Lead Engineers at SpotHero. They are the future of our team, and the future of our industry. You'll be paired with a Senior Engineer from day 1, and solving real problems that make it to production your first week. Buckle up and hold on tight, you're about to learn a crap ton here!!

To apply, please email your resume to jobs@spothero.com. Include any github account, linkedin profile, and any project that you’re particularly proud of. We love seeing work that others loved working on.
> I thought the idea behind Mandrill was to send transactional emails, i.e. not bulk emails.

https://www.mandrill.com/about/

"Use Mandrill to send automated one-to-one email like password resets and welcome messages, as well as marketing emails and customized newsletters."

So, their About page is currently explicitly condoning violating their own Terms of Service.
LibreSSL on OpenBSD isn't affected by the OpenSSL 2016-03-01 patches
Simple typography tips for great user interfaces
Zoona | Cape Town, South Africa | Full-time, onsite, relocation, remote for the right candidate

Zoona provides access to financial services to the unbanked in Africa through a network of entrepreneurs who run agent franchises. We reach over 1m people every 90 days, and have created business and job opportunities for over 3000 people. Zoona was recently chosen to join the Girl Effect Accelerator as one of the top companies taking young women in developing countries out of poverty. On the one hand we are focused on expansion across Africa, and on the other we are testing hypotheses for the next set of services we can offer to our customer base.

We are seeking talented and mission-driven individuals to join the team. We have roles available on frontend, backend, engineering management, data science and product.

Take a look through http://www.ilovezoona.com/video-gallery/ to get a better look at what we do, the impact we're having and how we work. This a terrific opportunity to join a great team and leverage your skills to create real impact.

For more info please feel free to get in touch with me - hans@ilovezoona.com
I would recommend against using them if your adversary is the NSA and your threat model comes wrapped in tin foil (and if I didn't, I'd get ignored anyway).

If so, use NaCl/libsodium at the application layer and don't rely on ECDSA alone.

If your threat model is "criminals", ECDSA is less insane than RSA (provided, once again, you're not implementing it yourself, you're relying on developed by a team of cryptographers and security engineers).
Prologic Technology Systems | Austin | Contract | Part time (~20-30 hrs/wk) | REMOTE ok (in an overlapping timezone)

Need a Angular dev with some experience dealing with a Java/Spring backend.

Pretty straightforward gig but I need someone who can get started quickly.

Get ahold of me at clavalle | at |ptsteams dot com
tl;dr: pretend to be a bot

this looks like a sponsored article
I'd say it's significantly more reliable to assume Hawking knows more than an anonymous internet poster who throws insults around and pretends they're arguments.

All I'm saying is that if you want to go toe to toe with a brilliant and respected man, come to the fight with some real arguments.