skysight-inc/HackerNews huggingface dataset:
> ... I think we should all agree it's longer than that.

Yeah, we all don't.

Some opt for full public disclosure 100% of the time (usually with a good reason), some opt for full public disclosure in some cases (such as this one), and others opt only for "responsible" disclosure.

Honestly, it depends on your viewpoints and beliefs and, just like politics, abortions, and gun control, we all have our own opinions and no one is "right" all of the time.

As someone responsible for I-don't-know-how-many servers and network devices servicing thousands of customers, it certainly makes my life easier if I don't have to sit around worrying while I wait for patches for 0-day vulnerabilities. I've been on both sides of it, though, and I can understand why some people go the "full public disclosure" route (and I've done it myself at times).
Voltaiq - SF Bay Area - Full Time - Onsite - http://voltaiq.com

Data Engineering / Full Stack

“The battery is the technology of our time.” -The Economist, January 16, 2016

Powering applications from consumer electronics to the IoT, EVs, medical, aerospace, and grid storage, batteries enable our modern world. However battery performance remains the key bottleneck impeding adoption of these technologies. Voltaiq is changing that, using software.

Voltaiq is developing a powerful cloud-based platform for data analytics, machine learning, and visualization to enable better, safer, and more reliable batteries and battery-powered products. We have customers, recurring revenue, and funding, and we’re growing our team (currently 8) to meet customer demand. We look for product-focused developers who have a passion for shipping well-crafted software.

At present we’re hiring for a senior developer position for data engineering, with some full-stack inclination as a bonus.

Candidates should have:

* 5+ years experience engineering large-scale data systems including database scaling, distributed systems, and ETL pipelines from multiple different data sources

* Strong coding skills in one or more of: Python, Javascript, Java, C/C++, Go

* Experience with Git, development on Linux/nix, SQL and relational databases

A degree in CS, Physics, Math, Engineering, or related, and interest in energy and solving hard science problems using data

* US Citizenship

Experience with the following would be a plus:

* Web framework (eg Django) and deployment stack (cookies, sessions, websockets)

* Asynchronous messaging (eg ZeroMQ)

* Webserver deployment: AWS, Salt, Fabric, Nginx, uWSGI

Competitive salary plus equity and full benefits.

Send a resume to jobs@voltaiq.com

Thanks, HN!
> timestamps, the user making the request, unique request ID […] keep them for as long as you can

That's a sure way to go to jail.

Don't store which IP requested what for more than necessary — in many countries, there are limits if a few months on how long you may store metadata.
I've written a follow up piece covering the hearings held today before the house judicial committee which may be of interest to those reading this thread

http://www.infoq.com/news/2016/03/apple-fbi-congress
Yes, this is common. Google Capital claims that they operate wholly independently from the rest of the business to avoid these conflicts of interest.
Has the transaction rate surpassed what you can get out of Postgres? If not, what is the necessity for the change? Just curious. Thanks for any insight.
> you can 100% deduct any foreign taxes paid.

That's not correct, actually. It's 100% up to some number that's fairly high for a European salary.

And like you say, it's a big hassle.
You should see what the Nylas team does on here, or the ABP guys.

Lots of spam, never announcing they're promoting their own product (until you call them out on it, then they admit it, at least), and both like to lie.
> Let's take this on face value. He's suggesting POTUS would fire him for not fighting for backdoors, when POTUS has publicly come out against backdoors. So what is going on here?

Some people (Comey) believe that what is said in public has no value?
Or that those same people might instead believe that the POTUS is not their boss...
The parent comment was not making that comparison. They were not trying to imply that the FBI is a combatant on a battlefield. It was meant to be an example of friction caused by multi-directional pressure (in the FBI's case, to strictly obey the law and yet to be aggressive in solving crimes by any means within the law).
Are you thinking of the Foreign Earned Income Exclusion? That one lets you exclude foreign income up to $100k from even being computed for U.S. income purposes. But the Foreign Tax Credit, which lets you take a 1-for-1 credit of foreign taxes actually paid against U.S. taxes owed, has no maximum. The distinction only really matters if you're in a country which has lower taxes than your U.S. federal tax rate. If, like me, you're in a country with higher taxes, the Foreign Tax Credit completely wipes out your U.S. tax liability with no maximum.
How Switching from Dev to QA Automation Changed the Way I Work
>Also please re-read my post carefully. The details are there

Clearly there is something wrong with your project that you aren't mentioning. Plenty of other projects do flags without problems. Your team has issues.
I believe that's exactly what they were doing with the StorePointer/LoadPointer primitives. However it is generally agreed in the Go community that the sync/atomic is to be avoided in favor of the sync/mutex for this type of problem. The RWMutex is designed for a 1 writer/N readers scenario. The code is more readable and you don't offload any work to the GC.
Shameless plug, but my co-founder and I are about to launch our powerful logging service this month. One of our features is session-specific logs and the ability to send alerts at user-defined thresholds.

We'd love to get some feedback on our product when we launch to beta, so if you're interested, please sign up for our email list at http://logdebug.com
http://GetLighthouse.com | San Francisco | Full Time | On Site

#### Looking for: Product Engineer

Lighthouse helps people managers with the essential soft skills needed to lead, motivate, and retain their teams. If you've ever worked at a dysfunctional, hyper-growth startup, or a big company wrecked by politics, you've experienced how bad management can make work miserable. We're changing that by helping managers with the fundamentals of good management.

We're a bootstrapped, profitable, and growing B2B SaaS product. Looking to transition from offshore development to someone I can work with locally to move fast and build a product customers love.

#### Tech stack includes:

Rails, Capistrano, haml/scss, bootstrap, jQuery, Postgres, Stripe, GCal API

If you're looking for the chance to build an awesome product and grow a team with the processes and systems you feel are best, this is a big opportunity, with the salary + equity/upside to match.

#### Full Description at:

http://www.jsco.re/7gln

* Apply there or email Jason at GetLighthouse dot com mentioning Hacker News in the subject line.
> stupid laws that make drugs like alcohol and tobacco legal, but make drugs like marijuana illegal

> I explained that almost everyone breaks the law now and then, on purpose.

Forget the Hitler thing, which doesn't really affect your judgement. I'm surprised the prosecution didn't dismiss you for statements like these. While you did say you'd convict based on the law, you're clearly sympathetic to people being tried for bullshit - which the prosecution obviously doesn't want.

Either way, no jury for you. :)
React-Redux Tutorial Ported to Python Kivy
Vulkan is much lower level than OpenGL but that's not very relevant - you can easily have a layer that sits on top and provides higher level utilities - the advantage over OpenGL being that your layer is transparent and a part of your code base/environment which you can debug and modify - not some BLOB driver.

Realistically the reason why Vulkan is not that interesting outside of AAA games is that OpenGL ES 2 became ubiquitous only recently and it took years for stuff like web browsers to implement it and then there's all the mobile fragmentation, and finally there's Apple with their own standards and API.

OpenGL ES3 is not even close yet and it's exposing tech that's been available for close to a decade now on desktop.

Best case scenario for Vulkan adoption is someone comes up with a really good OpenGL OSS/Apache licensed (no patents or copyleft) implementation on top of it, everyone agrees it's a good implementation and just ships that on top of native Vulkan drivers.
This is true for regular income tax etc but you can still get stung on capital gains. See, e.g http://m.taxesforexpats.com/articles/expat-tax-rules/capital...

I'm not an ex pat, but I have dual citizenship. I've never lived or earned money in the US but I still have to offer my income and declare my bank balances to the IRS every year - the principle is enough to make me want to return my passport, never mind the paperwork.
Ah, right. See, it's not all that simple, and like you write elsewhere, you need a competent accountant.

For instance, part of the US-Italy tax treaty says that as a US person working as an independent contractor in Italy, I needed to pay into Social Security rather than the Italian equivalent. I'm not sure I would have figured that one out on my own.
It looks like there's something called a UDID which is a SHA-1 hash of a bunch of identifying information. So, difficult to fake even if you can twiddle the source values or swap in new chips.

https://www.theiphonewiki.com/wiki/UDID
How to build a software company
Worked there from 2007-2010, through the sale etc. I had no idea they were up to 750 employees, and can't guess why they've gotten so big. There were 10-15 employees, 2 engineers in 2008 and that company was printing its own money, lots of it. I'm sure revenue is much higher today, but that profit amount isn't a big jump from where the company was headed pre-buyout, on momentum alone. Really have to wonder what they are spending it all on (besides payroll tax).
How is rebasing? Can you merge/split/reorder commits easily?
It does not, which is also a dealbreaker for me.
Is there some reason this doesn't work for me?
The mistake was not "all yours", and Fleep (and Google) are failing to disclose how, when, where, and most importantly, why data are being used.

Quite arguably, Fleep gained access to data you held which was not yours to provide -- email content and contact information for those with whom you've corresponded.

This is among the reasons I'm increasingly limiting my use of electronic communications at all. The risks, reality, frequency, control, and disclosure of such cases is simply too high a negative to utilise them.

Yes, this means that I not only don't carry a smartphone, but by and large don't carry a mobile phone at all -- a regression to pre-2000 states of comms.

This is a case of race-to-the-bottom behavior, and bad (or simply grossly incompetent) actor behavior poisoning the well for all.

It's an exceptionally strong argument to replace, as rapidly as possible, the present set of hosted online services with privately provisioned ones. Sandstorm.io, FreedomBox, and similar concepts can't hit prime time too soon.

If Google knows what's good for it, it should support this as well. Its choices are having some access to user time and committment, or none.

(Google's previous behaviors mean I've largely left it behind for its namesake service. I interact with it principally through pseudonymous accounts, though I'm aware these offer fairly thin protections against a determined actor.)

As Cory Doctorow has said, data are the radioactive waste of the current age. My formulation is that data are liability.

Overreaching privacy-invading tools are bad news waiting to happen.
Thanks for hunting our blog post!
If you read the article, one of the main reason for switching isn't tax return complexity, but because oversea banks ditch US clients out of fear of US fines. It's difficult in these days and age to live in a country without access to banking.
Sure, I'm aware of that process, but that's not really what I'm asking. Thirty years ago, were I feeling skeptical about programmable thermostats, I could have asked why such a thing would be worthwhile, and someone could have explained how I could save money on heating by having my house cool down while I was asleep and then warm up again before I got up in the morning. We could then have a reasonable conversation about the risks and benefits of the new technology, about whether this new ability justified the increased cost and decreased reliability implied by the added automation.

With this IoT stuff, though, I feel like someone is trying to sell me glow-in-the-dark sunglasses, or an electric belt buckle. Okay, so you can embed a TCP stack and a terrible web interface in this gadget, that's great, but so what? What problem is it supposed to solve?

I can't even have the conversation about whether this technology is worth its extra cost, because nobody within my filter-bubble is explaining what the potential benefit is supposed to be. I'm commenting about it here because I hope somebody can point me to wherever it is that people are talking about the potential benefits of IOT devices, which might even theoretically justify them, because right now all I see are lots of really obvious downsides.
Medallia - Palo Alto, CA - http://engineering.medallia.com

For those interested in Big Data and/or Machine Learning ...

If you only want to experiment with the latest ML models and spend months tuning features and hyperparameters until model A outperforms model B, then applied research may be a better fit.

However, if you want the full responsibility of building out a product which uses machine learning to provide key customer insights to over 250 multi-billion dollar corporations across the world, then consider joining Medallia's text analytics team.

What we're actually working on:

- debugging performance bottlenecks in distributed data set clustering algorithms

- building clean data model abstractions to support an interactive topic modeling application

- gauging per-client user-impact when changing various pieces of our text processing stack

- breaking a monolithic architecture into microservices to handle new exciting use cases!

- porting word2vec to java

If this sounds like fun, then please send an email to wko@medallia.com
Always Encrypted – SQL Server transparent encryption with keys only on client
Mobile Business Apps? It’s Easy If You Do It Smart
Is it 20% to generate something like this, which balances parentheses without syntax? If so that is seriously surprising.

function getBalance (parenStr) {
var count = 0;
for (var i = 0; i < parenStr.length; i++) {
if (parenStr[i] === '(') { count++; }
else if (parenStr[i] === ')') { count--; }
}
return count === 0;
}
I can see you just signed up for Hacker News.

Welcome!

It's pretty hard to answer an open ended question like this. It would help if you mentioned what city are you looking in?
Zynga CEO Mark Pincus to step down (again)
Nothing beats Everything.
I don't think I've learned anything from this article. It's interesting how quickly the keywords pick up on HN (Uber and Go).

More than 3 years ago we've implemented a reverse geocoder web-service that indexed complete Census TIGER dataset. The service handled over 15K reqs/sec on a 2011 macbook, doing exact in polygon search(no approximations). We implemented an optimized (for in polygon search) R-tree data structure for the lookups.

Assuming Uber's geofence lookups would rely on a much smaller dataset than TIGER, I think you could have come up with a much more efficient implementation requiring a fraction of the resources.

And again, use of Go; irrelevant.
Google Play Developer Policy Center Gets Revamped Today
Comment not good enough. I am elitist god and down-vote you now!
Thanks for reaching out! I'm specifically looking for certain events. For example, I use Answers to send a custom event each time a user does XYZ within the app. I'd love to be able to see those charts and high level figures from the app.
The conjecture by CNN that it is primarily about taxes is not only unfounded but absurd.

Far more Americans immigrate to feel freer, safer, better protected, for a higher quality of life or for a richer culture. Anecdotally, I alone know four Americans who permanently immigrated to Europe. None for tax reasons.
Good point. She seemed to have a lot of things happen that required her to be late, take time off, etc. Her manager may have been frustrated by the constant issues and didn't fully believe her reason now. Sad as it is, I've had more than one employee lie about illnesses, deaths, childcare situations and the like for numerous reasons, including to work elsewhere on short-term projects.
Poor comment. I am smarter than you and down-vote with multiple accounts!
I knew I was going to get flak for this, butnit has inspired me to dig into it further and I plan to come back with stronger points... Or perhaps Ill realize I was wrong and change my mind. Thanks for all the responses though, I have some reading and thinking to do.
I appreciate your perspective, but would like to add a few quibbles:

I'm a big fan of the strict coding style. It enforces a consistency that I think has real value at only a temporary cost in adjusting your coding habits, which quickly (in my experience) becomes second nature. That said, I understand opinions can differ on this.

Readability is not required to submit code. It's nice to have it, of course, but it's not a blocker to productivity.

One of my favorite things about Google is their, still legitimate in my eyes, sincere desire to defeat bureaucracy as much as humanly possible for a company that is obviously at this point so big and complex. They have multiple initiatives on this front with decent exposure and I think the success on these fronts is palpable. But obviously it isn't and can't be the same as a startup in this regard.
I wouldn't describe Nagios a 'nice' option. Every time I have to install or reconfigure it, it opens the wounds afresh (and I only have a relatively small deployment) :)
Twitter Has Become a Park Filled with Bats and Perverts
i'm not surprised
Judging from the article, the cuts were mostly in B2B sales. I could definitely see sales bloating up a SaaS company's headcount very fast. (That's something I'm having to watch out for in my current company.)
Google gives the Play Developer Policy Center a makeover and updates its rules
I don't have a problem with the FBI making a request that is in accordance with their jobs. Let the courts sort it out.

What I do have a problem with is this little fucking PR parade Comey's going on to try to lobby the public against Apple in particular, and privacy and cryptography in general. He's been completely rhetorical this whole time, ignoring the fact that what he's asked for is a huge fucking deal, and forcefeeding "terrorism", "public safety" and other trigger words to get the public to rally behind something they couldn't possibly understand.

Make the request and shut your stupid mouth, Comey.
be sure to wear flowers in your hair
Sad comment. Downvote hell to you!
Good programmers don't need to have 300 algorithms memorized: They need to know if what they are running is computationally expensive, and to e able to go look up an algorithm that might optimize the problem. I don't need to be able to whip up a red black tree implementation: But if I know I could use a tree, and the tree is going to be modified enough that self balancing is important, I can go look for a self balancing tree.

A realistic example was when we were working on speeding up some chart rendering, and we realized that we were wasting a lot of time attempting to render things that were not visible on the screen. We saw it was too slow, and then thought: Is there something out there for occlusion culling? We looked at videogame literature, found quadtrees, and wrote our implementation. But would it make any sense to ask any interviewee about their knowledge of quadtrees? It'd be unfair, as none of us would have passed that interview in the first place.
Oh no, a joke. Downvotes for you now!
San Francisco, my apologies...
60-100% of what?
16 Ideas to Define Your Social Media “Thought Leadership”
> The US "poverty line" is at the ~80th percentile of world income

This figure doesn't matter much, unless a person in the US can decide to buy a loaf of bread from Kyrgystan for 25.86 Som, does it? You'd have to adjust to make a meaningful comparison with the rest of the world.

> Contrast that with really basic costs of food ($1/meal traditional diet, or $12/day Soylent ready-to-drink), housing (one 100 sq ft simple "tiny house" per person, $1-10/day), data service ($1/day), plus other comparably humble-yet-sufficient services add up to something like $5000/yr

$5,000? Come on now. This guy[1] apparently lives on $7,000, but it is quite an extreme lifestyle. And he has an RV, the cost of which he doesn't count in his expenses. And he has a garden in which he grows his own food, which we don't all have a place to put. etc. Combine that with the fact that this lifestyle won't be feasible for everyone -- some of us need more medical insurance than he pays for, for example -- and when the lifestyle fails for people they end up in the ER or prison or otherwise taxing everyone else.

I agree with your general premise, but let's not exaggerate, $5k/yr is not realistic.

[1]: http://earlyretirementextreme.com/how-i-live-on-7000-per-yea...
Hmm havent done any python since I've installed it, have you tried using it in conjuncture with jedi-vim?
Try playing around with Adobe Kuler [1] for a bit and explore some of themes you like on there. The color creator has some of the basic color rules like analogous, complementary, triadic, and so forth so you can experiment to get a feel for how they work.

[1] https://color.adobe.com/create/color-wheel/
I never said a Hungarian or a Polish is not going to be more competitive.

I never said you're not going to factor in your social security costs. I don't know why the conversation is going that way.

My question is still unanswered: why would he pay explicitly their social security costs?

My social security costs are about 225/mo. I mean seriously, even if you wanted to push 225 per month to only a single client, it would be such an inconsequential number that I don't know why we're talking about it. We are still talking about software engineering jobs right?

But from 1700 to 3000 there's a huge gap. Plus, as I previously said, the overhead of having to deal with the Greek social security system is so prohibitively high that I don't understand why someone would go through such trouble.
> There's room to debate how long you have to wait before disclosing an unpatched vulnerability to the public, but I think we should all agree it's longer than that.

I'm fond of immediately, myself. I don't see the point in letting bad agents (many corporations, a variety of seedy open source projects) off the hook. As a consumer of software, I want to know, immediately, when there is a problem. For a variety of systems, I can control the architecture and code myself to mitigate it ASAP.
WW3 GADDAFI'S SON PREDICTION IS Now a FACT
This has been in the pipeline since they bought Screenhero. I think they're just fully integrating it now.
EARNEST | SF, CA | Full Time, ONSITE | Software Engineers (React/Node/PostgreSQL/AWS, Scala/Kubernetes/Docker)

https://www.meetearnest.com/careers/#/engineering/

Earnest: We're building the modern bank for the next generation. Our two products right now are personal loans and student loan refinance. Our mission is to greatly enhance people’s lives by lowering the high costs and barriers to credit faced by millions of financially responsible people.
Tell me about it, I'm trying to get an expense reimbursement from the NL to my personal bank account in the US. No IBAN, only SWIFT - nobody seems to know how to function with out antiquated system of very expensive wire transfers.