skysight-inc/HackerNews huggingface dataset:
I found a job before I moved. I simply searched for jobs in Bend and was lucky enough to find an advertised job on indeed.com that matched my skills.
The benefit of finding a job beforehand is you may receive a relocation package to help with the move. I think your current living situation is only a hindrance if you're unable to travel for an interview.
> I also see "Usage" quite a lot on GitHub Readme pages, where I think "Use" would suffice.

Traditional Unix 'man(1)' pages are against you.

(And those were by the famously concise /usr, /bin and 'creat()' guys, though that last one was later regretted in a moment of weakness ;-)
Startup idea: make same app controlled by voice and sell to tech & consulting businesses as a whiteboard that you talk to.

Over time it learns not about your business and it's processes so can correct itself & so on.
Good on Facebook for being so quick to reward Anand and fix the issue.
> I bet you won't be carrying your laptop, enslaved by the physical keyboard, which is necessary for traditional 'coding' with you in 2030.

I disagree. I wouldn't have thought that Microsoft, author of Visual Basic, would be basically forced in 2015 to add improvements to their console system -- but here we are. If anything text-based programming is more prominent now than in the last 10 years.

> You would be dragging and dropping stuff, perhaps in Virtual reality headset or through voice or gesture to build what you want, just like you would author in a visual platform like Adobe illustrator or in a 3d authoring tool.

Your arms will get very tired.

> but authoring business logic is highly effective in Visual programming.

I disagree. We have one giant visual-programmed workflow solution and it's a very modern and powerful system but it's also insane to work with. You can describe the problem in text with much clearer than trying to follow a diagram that won't fit on a dozen screens in either direction.

> Reason - Visual authoring tools are highly expensive and hence are confined to fortune 500 companies.

They are snake-oil; nearly something you can only sell for millions of dollars to people who make billions of dollars. You need a team of highly paid expert consultants to make changes because nobody else knows these systems or wants to know them. It's like going back 30 years in terms of expressive power.
I tend to do a little bit of both; everything in good measure. In my opinion, the combination of IF and something akin to Keto approach to food composition(low carb, high fat, low-medium protein) is only improving my recovery and performance. If the idea is that our body actually uses fat as it should, as an active source of energy instead of a battery that keeps sitting around, things should work at the very least equally as well if not better. This is a very personal experience, of course.
I see Defender as a symptom - as it monitors the files, it only checks files that some other process opens. Go solve a problem of second process regularly accessing files on idle PC.
Sorry, I was going off the transcript, not the video. In the transcript he talks specifically about the benefit of the domestication of dogs for old world peoples[1], while ignoring the fact that new world peoples also had domesticated dogs.

1: "With dogs, herding sheep and cattle is easier. Now humans have a buddy to keep an eye on the clothing factory, and the milk and cheeseburger machine, and the plow-puller."
Early April 2015 - Torvalds makes this comment.

October 2015 - "The SHAppening" takes place, which is what the author uses as evidence that Torvalds is a moron.

Great argument.
It has less visibility than those because there were no western nations (and hence western media) involved with boots on the ground. Or planes in the air, for that matter. The other thing is that the bulk of deaths were knock-on deaths from things like famine and disease rather than military violence.

However, it is still a good indication of just how little attention we pay to Africa here in the west, that people in general don't even know that it existed.
No. They revoked that single developer's certificate. I think you're referring to an Apple certificate that simply expired and invalidated many App Store signatures.
"whose" sounds about right.
"The fact Snowden was able to do what he did is proof they aren't competent enough to be trusted with that pot of gold."

This is the most compelling reason of all.
Director Robert Hannigan dispels some myths about encryption in MIT speech
I understood you correctly you're asking what is miner's incentive to process a tx if the tx does not involve transfer of funds.

There's nothing preventing the same tx fee system bitcoin is using from being implemented even if the blockchain itself is not used to transfer value. So now it is a can of worms, no doubt, as the system would have to have a way of attaching the fee to a "real world" value - along the lines of how Ether/Gas relationship works in Ethereum, but it can be done.

Another thing to keep in mind is blockchains the author is talking about in the article aren't necessarily public - with a private blockchain the nodes are paid for by the organization using it in some way shape or form.
Seeing as it's a brute-force per-account attack, a more accurate title would have been "How I could have hacked any Facebook account". Hacking "all of Facebook" would have been prohibitively resource-intensive for the hacker, and would likely have been caught and shut down before any real damage to the platform was done.
They've probably addressed it officially by now, but the malware was only included in v2.9.0 downloaded from the web page directly. It wasn't included if the update was performed through the Transmission client. That would seem to suggest it was the web server that was compromised.
Wow, maybe he didn't mean to do this, but this is quite an indictment against the current Mozilla management team!
Have you ever minimized a horrific experience? Putting an innocent metaphoric hyperbole on the same level as denying the holocaust makes you literally Hitler.
The wording is a bit confusing - IIRC it was a way to bypass the restrictor (which all cars were fitted with) to sneak more air into the engine.
I brought it up because equating technology to living standards is a common strawman to convince people that inequality is worth having, because technology improves our lives.

They say that because the average 'poor' person has access to things rich people didn't have access to 100 years ago, that the poor person should accept that they're rich, and not complain.

I'm calling it what it is, a strawman. One that occurs in every discussion of inequality. One that's existed since time immemorial, when slaveowners claimed that their slaves were better off on the plantations than in primitive Africa.

As for why I brought up points that weren't in the parent post, I was agreeing, and then elaborating on the subject because it's an interesting subject.

And of course, inequality is completely relevant in a discussion about millenials relative wealth vs. previous generations.
Anything that uses interoperable technology. Lock-in implies something that you can't replace for no valid reason. Standards are aimed at such interoperaibilty and luckily we have a lot of standard technologies which are interchangeable. It would have been a nightmare, if literally everything would have been locked-in MS style.

I.e. imagine you bought a light bulb and can't use it because it's XYZ lightbulb that can't work with fixture ABC and requires you to rewire the whole house. What a wonderful MS style experience. Luckily it's not the case most of the time.
Frankly I think the amount being award by these companies is minuscule when you compare it to the amount of damage this information could have caused Facebook in the wrong hands.
I don't like Peeple because I believe in personal privacy rights. However, this article went a long way into making me like it. Rather than a rational discussion of privacy rights there was screeching and fear mongering.
How do companies evaluate the severity and impact of the vulnerability? I don't work in security, but it seems like this is worth more than $15,000.
No, it uses an exponential back off.
To "not code in X correctly" is ambiguous, but I assume/hope the parent poster means that someone makes fundamental, non-syntax errors in their code - in C++ this would be something like returning a pointer to an object that's on the local stack.

If you're trying to filter for people can be productive in a particular language from anyone else, that's what you need to look for.

If you let the candidate pick their strongest language and they still make fundamental errors, you know they're not going to be immediately productive in any language.
It's a cheap phone from a couple years ago. This world is moving fast.
FWIW, it's not easy to bypass on devices with TouchID. The Secure Enclave manages the process there, and it's designed to be resistant to tampering so you can't use this trick with it.
It's a shame, since these topics could make for a rich conversational interview that probably has more to do with the actual job than whiteboarding an algorithm. Just taking source control as an example, a hypothetical interview question could be something like:

"You've been assigned to implement feature X in our product. Assume that the specs are clear and you have a pretty good idea what code you are going to write. Also, assume that your teammates Joe and Jane have been assigned features Y and Z respectively with roughly the same due date as your feature. Ideally, describe how you would make your changes, test them and coordinate with your teammates to get all three features merged into the master source code."

Obviously a lot of details are missing, but they can be fleshed out in conversation (during which the interviewer should also describe the current process used on the team the candidate is being hired for). This would give both parties some insight into experience and expectations.
I was thinking the same thing. Who is really going to read these updates? If I was forced to do this at a company, I'd probably automate responses with a bot of my own. I'd call it the schitt-bot.
Very disappointing comment. Completely humorless and extremely preachy.
Crypto configuration scanner
Got 41. The ones over 100 took me quite a bit longer than the sub 100 numbers.
A lot of people still program in Fortran 77.

There's no reason you can't be part of the equivalent population for Python.
About meetings. In two out of three companies I've worked for most of the meetings were basically pointless. That's the type of meeting where people would pull out their phone out of pure boredom. If you're having these kinds of meetings, it's not the screen behavior that is bad. It's just a symptom.
Orange Pi Plus Setup, Benchmarks, and Initial Impressions
Visual communication without language is always much simpler and more abstract than other forms of visual communication. Without invoking a language with syntax, you simply cannot get enough information density to make it useful.

The only time we generally communicate visually is when we want to express something with less detail (e.g. charts, diagrams, graphs, emoji, etc).
The roots of Tim Cook’s activism lie in rural Alabama
Show HN: Ractive.js Bindings for PureScript
The device is evidence, so all of you saying they can just start desoldering things and such need to think about that. What is the first thing a defense attorney would say if the data were to be used in a criminal trial? That's right, "the FBI replaced the memory chip on the phone with one they wrote their own copy of the data to." That is only after they potentially permanently damage the device and data.
I guess it would depend, like brk mentioned, on whether or not the passcode is stored in NAND and only validated against user input. I'm out of my depth here, so I'll gladly defer to the experts.
I wonder why Dropbox is focusing Pyston (https://github.com/dropbox/pyston) only on 2.7 atm. With PyPy supporting 2.7 very well, it'd seem a greater benefit to the community to target 3.

That said, I'm sure there are specific things Dropbox needs to solve for 2.7 which PyPy doesn't do.
It certainly would be worth more to some people.
Yes, it was a mechanical valve built into the area. If you've never had a turbocharger in your hand it might be tricky to picture it in your head.
No, because

> for a given level of performance on our credential-blind screen
Problem is, that there just isn't enough time to evaluate everyone who applies.

In my last job, I was a Director of Engineering at Box. Every job post we put up, had hundreds of applicants (thanks to job-boards which let candidates apply to jobs like putting in a shopping cart). What do you think we, as hiring managers, are going to do at that point? We'll have to start forming biases. And if we have to start forming one, it's better to start with good schools and good companies. (I'm sure VCs have a more severe problem).

Problem gets worse when you're hiring at scale, and you want to hire before the holiday season nears, because if you miss the season, the company is doomed. At that point, there is almost panic. A resume with brand names on it, naturally gets higher preference.

Homework projects could work well if the hiring requirements are small, but won't work well when a company has to hire say 25 engineers a quarter, which we had to. At that point, the process becomes too long, and it's easy to lose good candidates to a long process.

This method of interviewing has been around ever since, and is going to be around for the foreseeable future. Nobody loves it, including the interviewers, but there just isn't a better way to do it at any sort of scale. Especially when there are much bigger problems to solve when you're running a business.

It's best to take the bull by the horns. I run http://InterviewKickstart.com, which is a bootcamp for preparing for such technical interviews. We do almost exactly what is in the blog post. It works. Spectacularly.
I suspect most whitehat researchers would be happier to report this vulnerability and make a nice legal reward, then delve into a black hat market for selling a vulnerability. Seems pretty win-win in this case.
Highly quick-and-dirty:

$ git log origin/release_37..origin/release_38 --no-merges -i --grep \
'ppc\|power pc' --pretty='%ae' | grep --only-matching '@.*' | sort | \
uniq -c | sort -rn
16 @anl.gov
11 @gmail.com
7 @linux.vnet.ibm.com
4 @iteratee.net
3 @ca.ibm.com
2 @hanshq.net
2 @de.ibm.com
2 @apple.com
1 @samsung.com
1 @linaro.org
1 @imgtec.com
1 @googlemail.com
1 @codeaurora.org

You'd have to look at the individual addresses to disambiguate who @gmail.com and @googlemail.com are; at least 5 are from a Googler. @iteratee.net is also a Googler.
Show HN: Snake Dots[Android]-I made a game(even too hard for me)
It literally says she was riding it. It doesn't say she is going to ride it.
They should re-do it in the Urbit language/thing
I think you just blindly champion Vulkan, an unproven and not read for primetime technology.

The two largest platforms, MS and Apple have their own stacks, Metal and DX12. And they have been maintaining those from years, especially DX12 which comes from decades of DX development.

They should throw all this away (and lose any competitive advantage for their platform in the process) just because there's finally a competent new stack (that's not even ready yet)?

>Let's not try pretending that MS and Apple do it for any technical reasons. There are none.

Would wanting to offer the best possible experience for your platform, to control how and when any new feature is implemented according to your long term plans, and to not mess with lower-common-denominator cross-platform design-by-committee APIs counts as a "technical reason"?

Let's not pretend you ask for this for any technical reason. It's all about developer convenience at best.
Can't the same be said for when law enforcement takes images of hard drives? That happens all the time. There are procedures for maintaining chain of custody that are required to verify these things.
I was on the "Python 3000" mailing list while it was being planned, and the prevailing attitude seemed to be "it'll probably take 5 years before the community moves to Python 3". (That's paraphrased and not a direct quote, though I saw people say that sort of thing almost word for word a few times.)

This was optimistic, but at least we see that the community is indeed gradually moving to Python 3, even if it's taking a few more years.
PIN number analysis
People need widgets. People are willing to work to make widgets in order to get widgets. No one has come up with a perfect solution to this problem.
Which is why you get only upper class people funding upper class people

In my experience it's even narrower than that. In many cases, there is a pre-existing relationship between the investor/founders.

I once met (in a restaurant, because we had kids the same age that were making eyes at each other!) a serial entrepreneur. When we got to know each other he confided that his investors were friends from school (some Ivy league school, don't remember which) that would give him money for some idea, he'd start the company then they'd find a buyer. He'd done this 3-4 times already, and he was about 40.

I know this example is one data point, but I've run across it in other situations, too.
Gradient descent seeks the lowest prediction error when compared with the training answer.

A 1D line generally has an easy gradient downhill. (x is input, y is error).

Each input is a dimension.

In 2, 3, or more dimensions, downhill can be subtle. Calculus is used to find the slope at a multidimensional point.

You descend in the direction the calculus proposes, which is downhill toward the lower error.

The error is a scalar, it is chopped up proportionally by size of contribution.

Each input is weighted, the weights are adjusted downward.

You are trying to minimize the error in input space.

To attribute blame for the error so it can be minimized, the calculus chain rule passes the buck back to the inputs - this is back propagation.

Multilayer networks do this multiple times: pass the error back, chopped up according to which input made the mistake (proportionally).

So the end result is a series of adjustments to all the neural weights which will reduce this error.

Rinse and repeat many many times and you will get close to a generalised solution.

Local minima used to be a worry; but in practice the more dimensions the less local minima differ from the global error minima.
I remember hearing about take-home projects that amounted to free work for a company rather than a test of the programmer's skills, which is pretty smarmy. Anything can be abused or misused. Anyhow, the disincentive would probably be a decrease in applications if they start piling on the homework. Unless you're offering some amazing compensation and perks, or you're hiring for a project that could make a person's career, fewer people will bother when there are so many other companies out there hiring.

Maybe the least worst answer is to have people who have been through the hoops before, and can empathize with candidates, running the hiring processes.
> "Freedom isn't free":

Is the suggested donation a buck oh five?
At the risk of repeating myself what I've said elsewhere on the page:

This method of interviewing has been around ever since, and is going to be around for the foreseeable future. Nobody loves it, including the interviewers, but there just isn't a better way to do it at any sort of scale. Especially when there are much bigger problems to solve when you're running a business. And a lot of other reasons.

It's best to take the bull by the horns. I run http://InterviewKickstart.com, which is a bootcamp for preparing for such technical interviews. We do almost exactly what is in the blog post. It works. Spectacularly well.
It's weird how that works. Like you I never feel the urge to have breakfast. Like, never. Sometimes I'll eat it if its available because I'm a lean guy and it has always been hard for me to put on and retain mass. However more often than not I don't have breakfast on the weekends. And if I'm really engrossed in something, there have definitely been times when I skip lunch too.

I haven't really experimented or tested the impact of this yet, but I wonder how it ties in alertness/energy levels. I'm normally a zombie in the morning and don't get productive till the afternoon and evening.
>In order for cross platform solution to offer value of avoiding duplicate work, it should be really cross platform. MS prevents prevents it by not supporting it on Xbox.

Vulkan doesn't need to be cross platform because there are tools like Unity which abstract away the graphics API and let developers target a number of platforms.

However, you are lodging a complaint against Microsoft that has been the case for every console device since the first ones were released. However, that being said, not supporting Vulkan on the XBox harms Microsoft more than Vulkan since all that means is some games will not be available on the XBox. Just like there are XBox games that are not available on the PS4, the PC, or the Wii U. There's nothing Microsoft is doing that's out of line with the rest of the console makers. It's the console industry in general.
Even after the 'delete everything' ten attempts? In any case, you can just reboot the phone, and if it does write the number of missed attempts to NAND, you were going to revert that anyway.
>>Even better: they are getting basically real world loadtested for free and finding loads of pain points, which may hit paying customers.

I think their point is that it's using the system in a way that isn't intended or desired. How does that count as "real world" load testing?

And by that logic, shouldn't anybody who gets hit with a DoS attack just say "thanks"? It's tons of free load testing on your network infrastructure, and you'll definitely find some pain points.
Ah. I see. Well that's definitely a thing in the US, I have family that are very religious and home-schooled.

I honestly disagree with their lifestyle and subjecting their kids to a lesser education, but that's not my place to decide for them. Nor, as I personally believe, is it my government's job. That's a dangerous road to go down in my opinion.
dutch bike sellers see an increase in sales in hidden motors after an athlete was caught: https://translate.googleusercontent.com/translate_c?depth=1&...
thank you. I just assumed it was configurable, like Android,, but, with the downvotes, I thought I was wrong.

Of course it would take much less time for a 4-digit numeric code -- but AFAIK at this point the length of the password is unknown, so, the ACLU claiming fraud based on the assumption of the length of the password is not correct.

Lets see how many more DVs I can get.
That's why chain of custody is a thing. That argument could be made for anything, even physical objects can be tampered with.
It's interesting you brought up Montreal, since I've been hearing a little amount of buzz about it, at least from this link: https://www.busbud.com/blog/benefits-of-being-a-montreal-sta...

Vancouver is more expensive, and Toronto has more traffic, from what I've heard, but the low salaries in MTL sound like a downer.
I agree. This was basically unrestricted access to any Facebook account. What a MASSIVE flaw.

And who knows if this was already exploited in the wild?

$15k is nothing at all compared to the scale of this issue...