skysight-inc/HackerNews huggingface dataset:
Bugcrowd | San Francisco | Full-Time | Onsite

Are you a Rails engineer but don't know what XSS, SQLi or mass assignment is? SHAME!

Just kidding! Come work for Bugcrowd, build some cool stuff and get your security on.

What we do: Our revolutionary approach to cybersecurity brings together the world’s largest crowd of independent security researchers to the most innovative companies. We bring thousands of good hackers to the fight, helping companies even the odds and find bugs before the bad guys do. Don't be a hack, come learn to hack!

We're a 50-ish person company based in San Francisco, down on the Embarcadero. We have an awesome team and a great office! We do cool stuff like host engineering team offsites, attend conferences (including Defcon), speak at meetups and just overall have a swell time.

We also do a lot of company-wide activities, most recently bowling in the mission. My goal is to get us all over to Australia but there are no promises (but I'm working on it)

Looking to fill the following positions:

* Senior software engineers (extensive Rails experience, security experience a major plus)

* Engineers with a strong DevOps background (containers, terraform, vault, AWS)

* Data scientists (machine learning: random forest, deep learning, Python)

* Designers (because we like to discover through design!!)

Email: damien@bugcrowd.com
At some point in history, plugs in the wall became so ubiquitous that you could simply buy a product and plug it in. Everything could depend on some standard voltage and current.

IoT devices need this kind of layer, frankly. The choice shouldn’t be between “connect to my router and do whatever the hell you want” or “nothing”; there should be a relatively simple and sane layer that is vigorously standardized and enforced.

For example: maybe every IoT device has to go through a sanitized DNS that allows only “.device” domains, and data is limited to some number of bytes per second, and power dissipation is limited, and there is a precise protocol for software updates that can be governed by an equally-standard protocol to control when updates may occur, etc.

We have a long way to go but it is possible.
I've been a fitbit user for a little over 2 years and have had two different devices from them(flex then charge HR). I like that it does one thing well. Keep me accountable for staying active, and i only have to charge it once every 4 days.
We use it for GitLab.com and love Sentry.
How to Improve Your de Facto Hourly Rate
CoverHound | San Francisco, CA | Full-Time | UX / UI Designer

We are modernizing the way people shop for auto, renters, and home insurance by providing accurate, transparent choice and competitive rates. We emphasize innovation, engagement, and education in designing our products to effectively reach and expand our target market. The Product team is currently looking for a talented UX / UI Designer who is passionate about shaping people’s perception and experience for insurance shopping through exceptional design.

Apply via listing: https://coverhound.com/job_detail/23
Or Email: andrew _at_ coverhound.com
> All philosophizing about UBI is superfluous because it is impossible to set the level of this "income".

I disagree that that the difficulty in reaching consensus on the ideal standard of living UBI should provide makes philosophizing about UBI superfluous (in fact, I think that observation is a key part of the philosophizing about UBI, and among the reasons that it should not target a particular living standard; rather, it should be tied to a particular revenue source or set of revenue sources (whether that's a resource extraction charge, a tax on capital income, a land value tax, or some combination thereof), and then simply redistributes the value of that revenue stream among the citizenry on an equal basis. It should be the kind of revenue stream such that the expectation is that with continued technological and economic development, the value (and thus the standard of living it supports) will usually increase over time.
I hate to be that guy, but you're paying $70 for that? What does that offer over, say SourceTree, Atlassian's free offering. From a quick glance, they look pretty similar to me.
Founded in 1999, SurveyMonkey is valued at $2 billion

Given the stated revenue of $200M and the recent atmosphere around SaaS multiples, is a 10x valuation realistic here? (I'm not throwing shade - genuine semi-naïve question.)
I'd say first and foremost it's exciting as a (purely virtual) software developer to actually do things in the real world through devices. Excitement drives hype, and so on.

For the usage side, i think the actual useful stuff is when many of these devices are capable of interacting intelligently. For example take room air management:

I want to sleep in cool conditions, wake up warmth, save energy while I'm at work, come home into a acceptable warm temperature, and whenever I'm home I also want to breath fresh air.

This needs a interaction between the air conditionier, heater and windows, plus my smartphone to enable them learning my daily routine: wake up times through the week/weekend, when I leave, when I start to return home, when I arrive at home, when I go to sleep, and this cycles optimized through the seasons and outside weather conditions. Also I want to "fine-tune" this orchestrated system easily with my phone, not controlling every single device on its own. And finally: save energy whenever possible. Add in more family members ad their schedules.

So basically we need a myriad of ensors/devices, plus some machinelearning that runs on dirt-cheap hardware, plus some kind of local cloud hub, which itself can be securely accessed remotely. I hope you get the idea
No fix for this yet... great :/
Yosemite dispute prompts bill to ban name trademarks at California parks
Yet you can extract the embedded app.asar and get the source code if you so please. There may be native libraries that are closed source.

This is another Electron app after all.
I generally agree. I mean you possibly could do it. One could live on a pretty small sum in a non-luxury area of the country. (Forget about the Bay area. Think Detroit.) But it's going to be a pretty minimalist existence and you're probably not going to find a lot of supplemental jobs in such an area.
The research findings aren't "little-known"; I recall learning about them in grad school.

But this is the first I've seen his notebook sketches, which, if you don't mind me saying... make my spine tingle, a little bit.
Our preferred deployment method at Honeybadger is to (almost) always merge to master before deploying. We will deploy a feature branch when we want it to be a little easier to rollback to a known good state (by deploying master) for changes that we are nervous about. Those deployments are rare, though, as we have an almost-production environment (it talks to all the production services, but no customers use it) for doing one last smoke test before unleashing code on customers. :)
It's not like this is a new question as e-bikes and electric golf carts have been around for decades.

Here's the EU definition for pedal assistance, from https://en.wikipedia.org/wiki/Electric_bicycle_laws#European... :

"Cycles with pedal assistance which are equipped with an auxiliary electric motor having a maximum continuous rated power of 0.25 kW, of which the output is progressively reduced and finally cut off as the vehicle reaches a speed of 25 km/h (16 mph) or if the cyclist stops pedaling."

If it goes "just as fast as a car" then it requires a licensed driver, and it is not permitted on the bicycle lanes any more than an electric motorcycle would be.

The FAQ on the Organic Transit site points out that while it's a motor assisted bicycle under federal laws, some states classify it as a moped or motorized bicycle.

The boundaries for what counts as a "bike" will necessarily require an arbitrary definition, just like the boundary between different classes of moped and motorcycles. Here in Sweden, for example, a class 2 moped (the smallest type) is designed for a top speed of 25 km/h, has an engine with maximum 1.0 kW, and unless marked otherwise can go on bike lanes, while the heavier class 1 moped (maximum speed of 45 km/h) requires a license and registration plates.

The vehicle you pointed to can go 20 mph using the electric motor, so in Sweden would be a type of moped.
Integration with host systemd/machinectl is nice, but it requires modification of host setup, while my solution can be run on unmodified docker, i.e. it is universal. I will manage my containers using Kubernetes, so integration with host systemd is useless for me.

I sent email to Dan.
Why should they write it in JavaScript and C++ when they can write it in one language instead?
The US sets a record for issuing passports every year. Logically, the number not renewed ("dumped") would be higher every year.
More importantly, once "GovtOS" (as Apple's filing calls it) is developed -- even if the government is billed $800K for the privilege -- each subsequent writ will be much less expensive to fulfill, creating a tidal wave of LEO requests to unlock phones. So Apple wants to head this off right now, because otherwise the floodgates will open.
The Day Google Translate Thought Russia Was Mordor
You're right and actually the CEO reached out and clarified this. I have updated my post to try and better reflect the problem.
Dont be afraid to be hype #js dev with #reactjs #babel #webpack and #webpackserver
there are two solutions for reducing deployment/build time. First is to use distcc on all machines (so when idle, they contribute to the building of any packages). Second solution is to build one master image, quickpkg it, and then deploy the binaries. I use a combination of both; all binaries are compiled for sandy bay architechture, so I get most of the benefits (though haswell/broadwell gets faster VLC/ffmpeg if I recompile), and they build at night when nobody's around.
I don't think it's correct to say the US is operating under martial law.

They're not calling it "Safe Harbor" anymore, but "Privacy Shield".
</nitpicks>
https://www.youtube.com/watch?v=aSVrFphqmqk
Not really, that doesn't make sense. It's "0.5x the speed of b". Saying "faster" when it's really actually slower is just confusing and ungrammatical. Likewise saying "1x faster" when it's actually the same speed is gratuitously confusing.
StitchFix | San Francisco, CA | [REMOTE OK] [ONSITE IS MORE FUN] | Full-Stack Rails Engineer (All Levels) | Other roles: QA Engineer, VP Engineering, Director of IT, Front End Email Developer, UX Designer, many others (see below)

New: StitchFix for Men is coming: (https://recode.net/2016/02/24/stitch-fix-the-online-personal... - This is what I've been working on, I can finally share!)

,---. Before reading on, search Instagram for #stitchfix,
.((___)) which will tell you a whole lot about us. How much
,' `---' `. our customers love us and you'll get an idea of our
/ |========| \ business.
/ |/\/\/\/\| \
/ /|/\/\/\/\|\ \ Come back when you're done.
/__/ |========| \__\
//// |________| \\\\ Hi, welcome back. So we're growing really fast and
""' [||||||||] `"" hiring for UX Designer, Customer Service, operation /
`""""""""' warehouse, Personal Stylists, Photographer, Comp
Managers and lots of others. We're growing at a
dizzying pace.

We're growing at a dizzying pace. I'm dizzy just thinking about it. The business is Women's (now Men's too) Fashion e-commerce / subscription service, every few weeks, chosen by personal stylists and our algorithms. The personal stylists choose the perfect outfit for our customers, and the customers love it. Our referral to friend statistic is pretty great, and its a big part of our "growth engine" (Lean Startup term).

We do not have formal Product Managers, instead that responsibility is shared between Engineers, UX and the business stakeholder. It works really well, and as an engineer you get a deeper insight into the problems you're solving.

Its nice for a change to be part of a successful, growing company after working for too many failed startups.

I'm working with some of the smartest, most driven but nicest people and you'll be doing yourself a disservice if you don't at least consider it. Everyone cares about the craft of Software Engineering. Our interview process is geared towards that, and not towards solving useless puzzles. (You know who you are, companies that do this.)

Contact:

"Multithreaded" Tech Jobs blog & site: http://technology.stitchfix.com

Styling Jobs: https://www.stitchfix.com/careers/styling

Overall Jobs: https://www.stitchfix.com/careers.

email: tech-jobs@stitchfix.com

I'm @galori on twitter if you want to reach out...but the above email is the most direct route to the right people.
Once you've changed the device id check code, you'd still need to sign it again if you wanted to distribute it widely
Makes sense! It's definitely a compelling story to offer the same abstractions that exist in other languages, but with static guarantees of correctness. A mutex that you can't mess up, that's a great thing.
Spire Global - http://www.spire.com | Locations: Glasgow; San Francisco; Singapore; Boulder | Onsite only

Spacecraft Operations Engineer | Platform Engineer

We have several positions open in Software, Hardware and Operations. Please visit our careers page to learn more:
http://www.spire.com/careers

Keywords: Satellites, Space, Linux, C, Python, embedded systems, RTOS, microcontrollers, AWS, electronics and hardware, distributed systems and networking, EE, PCBs, etc.

Overview: Spire is a nano-satellite powered data platform. We build and launch small remote-sensing cubesats to capture valuable data for weather prediction and Maritime domain awareness.

We are a fast moving, energetic start-up applying agile development principles to a traditionally sluggish and overly-burdened industry (and having fun doing it).

You will never be bored at Spire!

Please email Darin@spire.com if you are interested in learning more. Previous work in satellites not required.
This is talking about giving up your citizenship, not about passport renewal.
Philosophically, its kind of hard to justify a harm based charge (which is what Paine suggest) if you accept otherwise the principles of a free-exchange, market-based economy. It would be just as justifiable to demand a benefit based charge based on what the beneficiaries receive beyond what they would receive in the state of nature, and obviously a fair charge would be somewhere in between those values, such that both those who lose (directly) to privatization of property and those who (directly) gain from it are net winners.
Neuroscience says these five rituals will help your brain stay in peak condition
That's almost certainly not the point being made. Building a workflow around non-free development tools means that eventually you're going to find support for your favored tool evaporating.
FYI, searching the R-tree also has runtime complexity of O(N) in the worst case. I believe there is some R-tree variant which actually provides asymptotically better performance than the naive case, but it is very complicated and tends to perform worse on average in practice.

Source: just spent two months implementing R-trees in Rust
Don't start with a full stack, it can be overwhelming. Start with a minimal toolkit and only add stuff when you actually run into pain points that it can solve. This guide is a good one:

https://github.com/petehunt/react-howto
Can you explain how that would be implemented cryptographically? Doesn't seem like an obvious feature to have included to me.
This confused the heck out of me as a kid. Saying something is 50% faster means the same as being 150% faster. Or 100% faster could also be 200%, depending on subtle language choices.

Very unintuitive.
That link shows that the "share of mortgages backed by the government" dropped during the bubble and fell as low as (about) 38%, and it didn't increase until after housing prices peaked.

I think you've misinterpreted the statistic you quoted.

During the bubble, lenders found easy money for mortgages from private markets, and it was after the bubble ended that the government stepped in to prop up prices.
Hey there! I am a robotics grad student looking for an intership, do you think interships could be available?
4 Lessons of a ‘Silver Lining Startup’
> "I reported this one on February 24th, and on February 26th, in response to a different inquiry of mine, I was told that any reports submitted from there on had to wait until the next release. This one apparently didn’t make the cut. I respect the fact that the OpenSSL team has to conform to deadlines and schedules."

> "However, I’ve decided to publicly disclose this one because I think it’s not necessarily more secure to have vulnerable code running on servers for a month of more while attackers, if any (for this vulnerability), are not bound to release cycles and have the advantage of time."

So he's publicly disclosing this even though it's not patched in the latest version, and he only notified the OpenSSL team less than a week ago? That's irresponsible! There's room to debate how long you have to wait before disclosing an unpatched vulnerability to the public, but I think we should all agree it's longer than that.
In N.A. generally that is referred to as an "engine dyno", and what's known in the UK and other colonies as a "rolling road" is a "chassis dyno".
I think it's the influence of the web that has allowed these deviations from standard to flourish in a way that they couldn't have 20 years ago. When every widget on a web page is new and unknown, you just learn to deal with it. Certainly you can find bad design both on native apps and on the web.
You shouldn't have thrown up in that Uber car. :p
4,279 out of ~319,000,000 may be a "record number", but its so small as to be negligible.
What do you mean you interview for fun as a habit?
I don't know either; it came with the house. It hasn't proven to be error-prone, though, probably because devices like it have been available off-the-shelf for thirty years.
The vast majority of dual-citizens owe 0 in additional tax.

That's not the point. It's about all the paperwork you have to do. I live in the US, but I am not sure I would want to become a US citizen for this reason.
I was at a junction in Spain and I had no idea what to do. It was the most hectic thing in the world, you just sort of went and hoped.

I guess its simialr to some roundabouts in London.

I have no idea how an AV would handle that(unless they were all AVs at the junction)
3 days to do a bank transfer, ouch, that's a blast from the past. Sounds like you desperately need the Faster Payments system we have in the UK - allows you to transfer money between accounts (at different banks) instantly. Other than collections at church and the occasional business that doesn't take card, I hardly ever use cash these days.
Is it possible to change a phone's device id to match the initial target, though?
Shut up Brezhnev. Everybody on planet America knows that 2x faster is 100% faster. Whose side are you on.
How to have sex
Short answer:

- rent is a bit higher than other high-profile cities, but significantly less (by a third, some say) than SF

- other costs vary widely, but depend on how "sweet" you want your lifestyle to be (just like anywhere else).

But surprisingly, in terms of food, drink, and cultural offerings, on a day-to-day basis you can actually live in NYC quite cheaply (if you know where to go and what to look for).
are there tools or applicable models out there that do represent the other factors you mention? I've been looking recently at ways to smoke-test my network app (probably separated into parts using docker containers) under adverse network conditions.

There was a nice looking python library that wrapped things that I can't seem to find at the moment. There's https://pypi.python.org/pypi/atcd/0.1.0, but I don't think that's what I was thinking of.
CloudGear (cloudgear.net) | Software/System Engineer | REMOTE

We are looking for a Ruby/Rails developer (60 - 100%) with an interest in Docker and Kubernetes. Technologies used are Rails, PostgreSQL, Redis, Go, Docker, Kubernetes, etcd. You should be an experienced Ruby/Rails programmer with a strong interest in PaaS, DevOps and infrastructure automation. We are working on a product and have interesting challenges ahead. You will work together with the founder: starting with stories, to architecture and the final implementation and with a high impact on the product, too.

Location: remote, but Europe is preferred. Please let me know if you're interested in working with us: georg (at) cloudgear.net - https://www.cloudgear.net
25% of top one million HTTPS domains affected by DROWN Attack
> Make's semantics are to invoke the shell at EVERY LINE. This is slow [...]

I assume you mean commands here? Actually, how slow is it? Ever measured it? I am sure me writing this line took more time than they could save by a rewrite over the course of a few years of using the performance optimized version.

> Shell also has local variables for modularity, and better constructs for conditionals and iterations

And variables in make that you set for a command are only visible to it. Besides - wasn't your point that the OP should not use make because s/he does not use its features?

> 'set -o errexit' makes bash fail on errors

Indeed it does, it was just missing from your better version.

> Another pattern I find useful is to have the actions take more arguments [...] The arguments to Make are actually TARGETS/files and not functions, so I don't think you can do this.

Yes, one communicates with make through variables, not through arguments.

Over the last 20 or so years I've done my fair share of shell scripting and of writing makefiles. Maybe I am just too old and boring to get excited over this, but let me recap: The OP happens to be using make, s/he used an elegant hack to have the file document itself and its usage. S/He wrote about the latter. No, I am not impressed by the post - I used a similar technique in 2003 or 2004 to bootstrap the documentation of a very complex build system - and I'm sure others have before and after me. But I like the concise article.

Debating whether make is "better" than "sh" is completely off-topic here - if there was a universal truth we'd not have seen tools like psh, scsh and the rest of language-specific shell substitutes nor would we have the myriad of language-specific build tools. Back then, when I was young and naive, I've implemented a few of those myself. But now I am not young anymore. And now I naively believe that people should use what they are most productive with. Or everybody come to their senses and just use lisp.
2 Steam Paddlewheel Carriers Sailed Lake Michigan WW2
Less Connectivity Improves Innovation
The other country is Eritrea, actually (neighbors and in a state of frozen conflict with Ethiopia but different country).
It would be nice if we had an effective opposition, but we don't. Not when it comes to security concerns. Corbyn's stance with trident and Stop the War means that no one, and I mean no one, can take any argument he puts forward seriously when it comes to security. The result? The government can get away with anything that has a vaguely plausible sounding justification.

The only thing that can stop them now is the media, but it really is not their job to be the opposition.
No, there is plenty that could be done.
Surprising it took this long. (Especially since, for example, RS and A have had Turing awards for more than a decade)
Circumstances do not permit me to comment, but I would advise the neighbors to stock up on silver bullets and pray that the containment field holds.
10 years ago my buddy thought no one could ever knock Microsoft off their throne. Nobody stays on top forever.
http://codeofmatt.com/2016/02/29/list-of-2016-leap-day-bugs/
Eh, I'll just reply:

I'm a high-energy, dynamic individual who is up-to-date on modern technology who works great on teams. I'm looking for a job!

Easiest match ever.
People say the same thing about OpenBSD (WRT CVS) but, if it works just fine for them, who's to say what they should (or "need") to use.