skysight-inc/HackerNews huggingface dataset:
> It appears that the hacker did not update the MD5 present in the automatic update mechanism. (Sparkle) Thus, when the automatic update mechanism downloaded the hacked version of Transmission, it reported it as a corrupted download

yeah. But not knowing how the attacker got access, we have no idea whether they have changed the current 2.92 binary again, this time remembering to update the hash in the appcast or whether this time around the binary is actually pristine.

The fact that the site was never down between this happening and the red warning text appearing makes me suspect that only a hasty cleanup was performed and that the actual security flaw might still exist.
It includes vesting equity, but not benefits; in other words, it's what shows up on my W2. This is usually what recruiters and employees at AmaGooFaceSoft refer to as "total comp".
I see "Big 4" on r/cscareerquestions a lot. It seems to have been invented by that sub as some kind of mythical club of golden programmer employers.

It came from accounting/consulting where there are four really big consulting giants: (KPMG, Earnst & Young, Pricewaterhouse Coopers, and Deloitte). Interestingly enough, the above aren't known for being particularly nice employers.

On the sub the inclusion in the "big four" varies a bit, Google is the only one who's always in it. Others sometimes included are Microsoft, Facebook, Twitter, Amazon, and Adobe.
I've been segfaulting CPython quite a bit with stack underflows while developing a befunge-to-python-bytecode JIT that uses the python stack as the befunge stack. It has to include instrumentation to track the stack depth so that it substitutes 0 when the user pops a value on an empty stack. Latest issue was this weekend, reducing the bytecode size of `p` by converting a while loop to move the stack into an array for recompilation to use FOR_ITER, it didn't like being called on non iterables

https://github.com/serprex/Befunge/blob/master/funge.py

It'd be neat to see how PyPy handles fuzzing. It uses CPython's bytecode, I was able to get it to run beer6.bf (it was pretty slow, since that's a benchmark that mostly tests recompile speed) but it locked up when testing mandel.bf (odd since mandel.bf doesn't trigger recompilation)
I grew up in Dallas, have lived in other tech hubs, and I've been to Austin many times. When I came back to Texas, I came to Dallas.

Dallas as far as 'start-up numbers' go might not be ahead of Austin (it's really really close now), but the potential and growth rate in Dallas is crazy. It almost seems like everything is aligning to take Dallas to the next level as far as a global player in tech, business, and start-ups.

6 months ago I'd say it wasn't true either, but as of right now, I'd say yes. I just hired a few developers and it was magnitudes easier than it was 1.5 years ago.
This.

I thought I needed time off to focus on building Wormhole[1], but actually I'm needing much more time to talk to customers and on-board them. Apart from documentation and lots of feedback to work with.

Now I need the time to work on that feedback, prioritise backlog, keep bringing in users and finally converting some of the users into customers :)

[1]https://wormhole.network
Google extends right-to-be-forgotten rules to all search sites
Uber Is Installing Breathalysers Around Mumbai to Help Drunk People
> If the DOJ understood the technology and implications of what they were requesting then they would not ask for it.

Oh they understand what they are asking, they just don't care if the average person's data is stolen every once in a while as long as they can get all the information they want when they want it. This is pretty similar to how the NSA can buy zero day exploits and not feel the need to inform the American people.
> If you know this, you can tell them, "if you reduce the bill to $40, I'll pay in cash today." Unfortunately, most people don't know this.

I've often heard this, but have recently been asking for cash prices for some routine services, and the responses I've gotten have been either "um, we don't do that", or just simply referencing their fake inflated prices.

It's probably different if you've already got an unpaid bill in front of you, especially for a larger procedure, and you're dealing with the billing skinjob rather than the receptionist. But that's still quite far from how sane transactions work.
It's a thought question.

If releasing irresponsibly a vulnerability puts people in real danger, is it worth it to suppress the release of that vulnerability?
I'm not sure you can equate "Big 4" compensation (especially at senior level given responsibilities for sales, market offerings, etc) with engineering roles at software / product companies. The comp structure is much different, and there are a lot of differences in expectations.
I would say even with a PhD you can't make 300k/yr for web or any other development. Top notch developer's salary won't exceed 220k/yr
Raspberry Pi on the ISS
Easier said than done, start with email blocklist variants and spam filters for the deluge that follows.

good luck.
can someone find a job posting with this type of pay scale? I am curious what skills I should develop.

at this point I do not believe this unless you are the lead architect.

for exaple this job posting I cannot see payin more than $165,000 in dc/ny/bay areas... but maybe my previous exposure to the big four has been limited... was anyone able to find a job posting that pays this much?
Hi,

I haven't tested it but I stumbled accross this the other day and it seemed interesting : https://frontapp.com/for-customer-support

It does have slack integration and basically any text based medium integration. Might be a good fit for you.
Exactly this. There are times when people are talking to you but not asking for your personal philosophy. I'm prone to this particular mode of conversation (telling people the "why" or "how" when they asked about the "what"). If it's pertinent to the conversation then share it but don't talk at people about your well reasoned views or you risk being "that guy".
"All we did was change a button."

I doubt it was that simple. The UX flow changes if you can purchase as a guest.

More importantly, I expect when the system was built, the developers asked if all orders had a user, received the answer 'yes', and accordingly built that into the system.

Then one day some consultant comes along and pronounces that 'not all orders have a user now, please implement a guest checkout'.

So the developers probably needed to recode the whole flow, possibly remove some foreign key constraints, allowing a user to only partially exist (which needs to reconcile with a real user later if the email matches an existing user later).

And what if they don't create an account at that time, but they do later, should all orders to a given email then get attached to that account?

Are there privacy issues around this? Can we assume an email address belongs to an individual, I am not sure you can.

All this for a system that is processing millions of dollars in orders. So regression testing and deployment, would have to be done very carefully.

This is all just what I can think of off the top of my head.

So, with respect, you did not just change a fucking button.
Between gmail and sanebox, I don't think about spam.

With 1Password, I don't think about passwords.

With Amex, I don't worry about fraud.

I think more about time. Often I want to find what I'm looking for, pay, and be done. Like running in and out of a shop. Like the article says, I'm not here to start a relationship. I've walked out of B&M stores when they do the survey thing at the register (what's your ZIP? What's your email? Sign up for a credit card?)
This is a fun alternative:

http://watercolorbot.com

There is a retro art movement around x-y desktop plotters. (My first "printer" was a plotter and it was magical (if a bit slow) to program and use.
From your link: "Nuclear construction costs in the US did spiral out of control, especially after the Three Mile Island meltdown in 1979. But this wasn't universal. Countries like France, Japan, and Canada kept costs fairly stable during this period."

Well now Japan had it's own meltdown and keeping the costs stable after seeing it happen in America and, worse, Ukraine, didn't help preventing it.

And I don't know about Canada, but France has some good candidates for the next meltdown all over the place...
It would also be interesting to see if different roasts produce different colours.
Software has bugs. This is normal
The future of chat isn't AI
Verizon fined $1.3M for supercookie header injection [pdf]
> People not reading things properly

I did read the article twice and thoroughly, all I sawmentioned was "Encoding and decoding speeds are acceptable, but should be improved" . That doesn't address the points I raised in my original post if you were to read it properly.
Thanks. That was the info I was looking for. Still a lot to digest but it is going to be really helpful.
I think this is really the Occam's razor answer.
A real computer technician looks and has the personality of Simpsons Comic Book Guy. That's why they are computer technicians not salespeople.

Nobody that sits and writes code and rarely interacts with other employee's is worth $300K.

http://www.amazon.ca/The-Nudist-Late-Shift-Silicon/dp/037550...

The naked guy at night doesn't get $300K. He's just happy to have a job where he can sit naked..
are you working for yourself or another company is compensating that?
> You can actually turn that off

I actually like to see who has looked at me (I guess it is an ego thing), but yes, that's a good point.

Speaking of ego, one of the developers I worked with recently said, jokingly, that LinkedIn is where she goes when she's feeling down, because she has recruiters contacting her all the time (she has a number of years of Angular experience).
Companies pay profit tax, not income. Since employee compensation is an expense, the tax rate has nothing to do with it. The employees do pay income tax, quite a lot of it.
I'm having flashbacks of undergrad.
there's definitely a migration period where the people who originally held power continue to hold it. One of their tasks is delineate those powers and delegate as appropriate. Certainly a founder or formerly c-level executive will continue to hold lots of power. Holacracy asks/empowers participants to admit that there are informal groups, cliques, cabals, who hold lots of cachet and at least document their existence.

I worked in a partially "holacratic" organization for about six months, and had a lot of good experiences, but remain something of a skeptic. Certainly it's problematic that the companies most likely to adopt it are already in the bad state that necessitates a major shake-up. I think a lot of the criticism of Zappos by outsiders and message-board nerds is misguided or ignorant, but they seem to be in a bad spot no matter what.
>If Hospitals could only charge the actual value for their services, and not the inflated insurance prices, the prices would be much lower.

I don't quite understand how you're arguing using the term "basic economics" that Hospitals en-mass will leave money on the table in a capitalist economy.
From what I remember about my tour of Zappos, those larger open plan areas are primarily for customer support whose staff operate on shifts meaning that not 100% of those desks are filled at any one time (except maybe the busy seasons).
Zero-Configuration React Static Site Generator
> /r/bitcoin has been subject to spam attacks, sockpuppets, brigade voting, and a huge number of manipulations.

How do you know it's "sock puppets" and the like, and not real people who are expressing real opinions?
I spent years working on algorithms for processing 3D scanner data, and the claim that you could get a scan of that resolution and quality - surreptitiously, through a glass enclosure, and with a Kinect - is absurd.

Most likely it's a scan of a replica created under carefully controlled conditions, or they were able to acquire a scan created by the museum.
Ferric chloride solution onto a metal plate could be nice too. I would think they could also play with doing a spiral raster[1] (which the watercolorbot does pretty well).

1: http://paperjs.org/examples/spiral-raster/
In my own lifetime (I'm in my early 50's) the population of my home state of South Carolina has doubled (2.46mm to 4.89mm). Picking Oklahoma so I don't get criticized as cherry-picking the data (it's often described as a "flyover" state and isn't considered a migration destination), they have gone from 2.4mm to 3.8mm people in the same time. So they've grown as well, but not doubled.

So unless you live in an area that is depopulating (Syria? Japan?), I think your assertion is incorrect.
Luckily the copyright on a ancient work of art would have expired long ago.
Total package includes base, stock, bonus. Lower end of that range is attainable for most. Upper-end is also attainable, either joining prior to the IPO and holding on to the stock afterwards, or by delivering outsize impact.
Could you expand on this. If someone is using words not in the top 10,000 words along with words in the top 10,000, and they pick 4-5 words, how is semantic network analysis going to help? You're saying this analysis can reduce the ~10,000 possibilities to something much smaller? And you're reasoning being that people don't actually pick from the top 10,000? How does that work?
I've met Jake and he gives one of the most inspiring and pragmatic pitches about the future of energy I've ever heard. What they're building sounds like magic--massive amounts of energy with incredible safety and portability. Super exciting stuff.
"So you want to learn bookkeeping?" No. No you really shouldn't. This is commodity, undifferentiated work and will potentially cost you hours (or tens of hours) per month. If you are a business making any sort of money you should go hire someone like Bench.co to do this for you.
Very cool idea!

> ... With proper E-Tag checking, Github won't even count repeated API queries against the rate limit ...

Does this behavior rely only on the browser side? Did you add something in javascript?
Hours/week for you on average and billing please?
Fair point. How is a compromised package revoked in the Debian case?
I have long term contract with two companies, for one of them I do application security review, I analyze source codes and point out vulnerabilities. For the second one, I do penetration testing, forensics, malware analysis, and... One is paying 230k the other one is paying 190k.
I have other contacts and other offers too, but these two jobs are taking all my time. I can switch and work with a new client anytime.
I think we should clarify on the definition of 'rich' before making that statement. For example, making $200k/year programming (easy for an unusually good engineer with 5 of experience in Seattle) should be able to save >50% of their income. I know more than one person doing exactly that. Do it for 10 years and you're generating 70k in interest every year along with your salary, which is enough for a person to retire on. That is rich, IMHO.
Anecdote: I find raw cacao nibs to be delicious.
Calling someone from Manchester a "Manchesterian" instead of "Mancunian" is not wrong, or even necessarily bad. Rather, it communicates something to the reader. Depending on the context, it could mean this person doesn't know that the correct term is "Mancunian", and did not look it up or even know that it should be looked up, all of which gives me useful info and context about the writer and their education level and the amount of effort they put into the piece and the amount of editing it underwent and so on. At the very least I can surmise that the writer is not a Mancunian. Or, it could mean that the writer is attempting to be clever.

Widespread use of proselint to correct this type of thing wouldn't improve writing. Rather, it would just add another interpretive option to the above range of scenarios, i.e. "ah, I can tell that this writer did or did not run that proselint tool before submission, because their text is or is not littered with boilerplate proselintisms."

The way to improve genuinely bad writing is not with rules and tools -- it's with lots of reading, a little mentorship, and lots and lots and lots of practice.
NairaEx Launches Bitcoin Money Transfer (BETA)
That payscale isn't for "posted" jobs. That payscale is for "poached" jobs (no negativity implied by "poached", I just don't have a better phrase). When companies need someone who is going to cost them $500k a year, they already know who that person is.
It's a devil's bargain. The value is in the network, so the real job of the tool is to be as frictionless and low overhead as possible. Conventional wisdom says you can't build a business model around that, so you get products that become bloated with overhead for the end user.
See Dan Luu's post about working for big corps:

http://danluu.com/startup-tradeoffs/

He describes a boundary around $250k at "senior", and to get above it you'd need to become some kind of principal/lead.
True, but it is if you have to actually create it yourself and if it costs considerable effort and is done with a new technique. As some people have already stated: The detail is much too high to be created as a self-created, new method, production (e.g. scanned with a kinect2 by walking around).

And I also wonder what the effect of tempered glass is on the scan (as most glass will block near uv and ir, since they might want to keep the original in good condition.

-- update to clarify
What the heck is a "cloud computing engineer"? Is that some made-up BS like "customer service engineer"?
I can bear with the bad UI and the dark patterns but I'm more and more baffled by the stream of junk that my news-feed has become. I know that it depends on who I add and who I (un)follow but I have little time to be picky or manually curate content I want to see, like most people on HN I presume, and this gives me a very bad impression of tech recruiters and LinkedIn itself, the same way I've lost hope in getting anything worthwhile from my FB news-feed.
What is your background prior to working in this field?
Interesting how majority of Europe and a few other civilized nations (Russia, China) are still skeptical about the veracity of moon landings. I've worked at a space agency myself, still puzzled how their landing software worked right on the first try, compared to all the development trial and error required for simpler module docking on near orbit objects (e.g. Mir, ISS).

Unfortunately the original film footage of the moon landing was lost somehow.

What puzzles my colleagues is the survival to radiation outside the protective earth shield, reason why other nations are only conducting near-earth missions. Reminds me when Europe first found the new world, only that on this case nobody else is going to the moon for some odd reason.

Good tech in those 60s, kind of bad they don't make it anymore.
Hillary Clinton is Bush III.
I don't believe that at all. That is total nonsense, in fact. My criticism is of this linting tool, not of artificial intelligence. I take it for granted that anything I can do, an AI will eventually be able to do much better. A linting tool is not an AI.
Women-only spaces are a hack
Some people have WAY too much time on their hands...
At a place I worked, our CEO said that most businesses only paid about 60% of list price. The list price was inflated so that the people who were buying would get rewarded by their companies for knocking the price down so much
Gitbook has open sourced their proofreader at https://github.com/GitbookIO/rousseau
If you're interested in feedback, this might make a good "Show HN".
Usually when I hear it people are talking about Google, Facebook, Apple, Amazon [1], but in the last couple years it seems like Microsoft is getting back in gear.

[1] http://www.techrepublic.com/blog/tech-sanity-check/schmidt-c...
> Programming is not the career job that will get you those kind of figures

This is not universally true, but you're correct that merely accepting an advertised programming job expecting to move up to those levels naturally would be naive. One problem to overcome is the proliferation of irrelevant job titles... IIRC John Carmack kept the title of 'programmer' for quite a while.
Many people doing stuff like this are just doing it for shits and giggles. They don't want to deal with the business side of things.
Show HN: The Z3 theorem can now be built using CMake
FUSIO: The smart speaker that selects the right music for you and your friends
I have around 70-80hrs a week. ~40 hrs for each of my clients. It doesn't have to be exact 40, as long as I do what I'm supposed to do, it's fine. It's not like 9-5 job
I agree with this.Paul Graham said almost the same in http://paulgraham.com/wealth.html.
I think this is a great idea, and it looks like a lot of fun, but
unfortunately, it doesn't work for me. Though I'm sure tested this on
"Linux" and "MacOS X" as you said, the real problem you face is most
terminal emulators are not standards compliant (assuming there are
standards for particular behaviors, and often there aren't any). This
means, you got it working on some terminal emulators, but it won't work
on others.

The most standards compliant terminal emulator is actually the original
'xterm' [1] program included as part of X. The xterm FAQ [2] and ncurses
FAQ [3] have lots of useful information. Though getting your code
running in xterm itself will help portability, it won't be the end of
your debugging due to the fact that other terminal emulators have bugs
and of course, they often do things differently. The story about the
color blue [4] in the xterm FAQ should give you an idea of the kinds of
problems you'll face.

[1] http://invisible-island.net/xterm/xterm.html

[2] http://invisible-island.net/xterm/xterm.faq.html

[3] http://invisible-island.net/ncurses/ncurses.faq.html

[4] http://invisible-island.net/xterm/xterm.faq.html#dont_like_b...
In Germany they are, as the country-specific notes on that linked page tell you.
There are many people on HN who agree with you on this. It has a certain appeal to it; I know folks whose sense of justice is offended that some programmers make $30k while other programmers make $300k, even programmers living in the same city.

There exist tens of thousands of engineers at AppAmaGooBookSoft who have pay packages which top $300k. There exist thousands whose pay package approaches $1 million. These are facts about the world you live in.

I urge HNers to incorporate these facts about the world you live in into your career plans, including e.g. a pre-commitment to negotiate all job offers consistent with the knowledge that this is what the market is paying.

You need to get out of the salary game and work for yourself or do consultantcy if you want big bucks

It is possible to beat AppAmaGooBookSoft while working for oneself or running a consultancy. It takes a bit of doing, and isn't quite as straightforward as "get job; execute well at core job function; try to get assigned to really good projects."
Or live below your means, while saving and investing wisely.
Using Twitter API to Beat the [Wall] Street
And first lesson, turn off uptime robot for free heroku dynos or you wake up to h82 "over free dyno limits". Sorry if anyone is trying to use this Monday 3/7 morning, it'll be back online around 11am today
"Stig of the Dump" immediately jumped to my mind looking at that [0].

[0]: https://en.wikipedia.org/wiki/Stig_of_the_Dump
I've had good experience with big "chain" hospitals, be it Apollo, Columbia Asia, Wockhardt, or whatever else. I never found them pushy. One of the docs from there quit and opened his own clinic. He doesn't even charge me for consultation. Don't know why.

Of course, doing your own research is critically important. Many doctors are dangerously ignorant of anything that doesn't come under their specialty.