skysight-inc/HackerNews huggingface dataset:
It's required by my employer. Almost all email I get is encrypted and/or signed.

For services we have running that send email but don't know how to encrypt (like Redmine and Jenkins), I wrote a little smtp proxy that all it does is look at the from and to addresses, select appropriate keys, construct a new encrypted email and forward it to the real smtp server. It's written in Python and is super-simple but has worked for years now.
The general anger I'm feeling this morning over all the think-they-are-funny programmers / tech people who spread pain and suffering expecting everyone to knows its April 1st and they should expect things to work differently so they should ignore their muscle memory. I really cannot think of another term that would correctly fit. Beer swilling, hey watch me program this, juvenile foolishness.
We detached this comment from https://news.ycombinator.com/item?id=11405761 and marked it off-topic.
UserIQ | Back End Engineer | Atlanta | Full time | jobs@useriq.com

UserIQ is looking for a back end engineer who is passionate about query and algorithmic efficiency that facilitate amazing user experiences. The ideal candidate will have deep experience with SQL and an object oriented language. Ruby on Rails and Postgres is a plus.

If you love learning, creating great experiences for customers, and solving tough engineering problems, then we want to talk to you.

Benefits: In addition to a very competitive startup salary with equity, we offer a full range of benefits including: Medical / Dental / Vision / Life / HSA / 401k.

Email us at jobs@useriq.com and let us know why you'd make a great fit.
Just run your own ircd, then you can set whatever security policies you want.

Edit: downvoters, where am I wrong?
They also protect against ddos, sqli, overuse, bots etc. so comment spam is only one problem and get requests are not always safe.

You'd think they could be far more sophisticated about reputation though and adjust it in realtime so that ips are by default trusted and are marked down temporarily for bad behaviour.
I think that's a matter of perspective isn't it? :-)
Of course you can visit it for hours, because you are most likely one of very few people who are accessing the CloudFlare netrwork from that IP. If you were to go through a public VPN, then the chance of captcha will also go up. The issue is that with higher traffic out of a single IP, there is a much higher likelihood of malicious activity.

A blacklist would do nothing to solve this, since the fundamental problem is the way Tor and VPNs work, by aggregating traffic into exit nodes at specific IPs.

Edit: And upon further thought, it most likely is a blacklist. A bunch of malicious requests go out from one IP, so that IP is blocked. Because it's an exit node, it also blocks a bunch of other legitimate people.
But you could possibly re-do the proof of work every page load without the cognitive load of multiple captchas.

It still isn't ideal for mobile or low-end clients, but its something.
Its one of the most popular mic drop gifs, so it was probably easy to get.
I was just about to pull the plug on an E64XX laptop on eBay. Thanks for the tip about Dell Outlet.
Yeah it needs to give admins the right to enforce two step authentication on all users.
The left-pad debacle is not an indictment of small dependencies. The problem would have still happened even if left-pad were a 10,000-line dependency, if that 10,000-line left-pad was as popular as the 10-line left-pad was.

The issue was that authors in the npm ecosystem could pull their packages and cause havoc. Copying code is a partial workaround for this problem for small dependencies only, but the problem should be solved at the npm level--and once it's solved there, the virtues of copying code go away.
Could be. But that requires strong leadership, because you have to effectively say (probably at a very late stage, like launch review) "this joke is crap and will hurt people, not gonna happen" and burn the work of the team that did it (and I am sure there were at least two people involved here).

That's what should have happened because the nature of an April Fools joke is that it bypasses the pre-testing, canarying, "go back to the drawing board", staged rollouts etc that most features would go through on their way to exposure to hundreds of millions of people. You can't do a 10% rollout on a joke that's meant to last one day.

I think Google should give up on April Fools jokes. Some of them have become so elaborate (like the Maps one last year) that it's obvious they have too many staff and not enough to do.
It Costs Money to Sell a Lot of Bonds
Reddit goes open source
PayPal | San Jose, CA | Onsite (relocation available) | Hiring Javascript Application Engineers

PayPal is looking for JavaScript engineers who want to work both in the browser and on the server-side in Node.js. Over the past couple of years, we've worked hard to migrate our entire web application stack to Node and powerful client-side apps and we're looking to turn the dial towards product experimentation and innovation. We need your engineering ability and your desire to be a part of the whole product!

I personally lead the Online Checkout (exactly what it sounds like, "Pay with PayPal") engineering team and I'm happy to talk with you directly. You can reach out to me at my HN username at paypal.com or nodejs@paypal.com. We're looking for experienced JavaScript developers. My team is currently working primarily with Angular on the client and Kraken on Node. If you've got experience with React, we're actively exploring doing an inside-out migration of our application and could use your expertise. As most Node shops go, we're leveraging a whole lot of other open source tools as well and we're very supportive of open source activities for our people.

We have several openings within my team as well as within other teams--so drop me a line even if my particular opening doesn't sound interesting and I'll help you find the right place!

Please note; due to US Government deadlines, we are not able to apply for new Visas at this time. If you have a current US Visa, we are able to sponsor a transfer.
I'd shorten that to:

> Contrary to what this VC believes, it is NOT okay to expect someone to "work 60 hours a week at Facebook"

Let's get one of these already https://en.wikipedia.org/wiki/Working_Time_Directive
Wish | SF (Financial District) | Full-time | Fullstack, Backend, Frontend web development

Come help an exploding e-commerce platform scale. Our platform helps tens of thousands of stores sell on Wish and handles millions of orders daily.

Wish is changing the way people shop by making it more convenient and accessible to everyone on a global scale. We are passionate about connecting relevant products to relevant people.

We're a small team working at a very massive scale. If you're interested in building tools for customer support, content management or account managers then apply! If you're interested in mobile apps for businesses, apply! If you're excited about helping build tools to power tens of thousands of businesses apply! If you love pouring over data, building data pipelines, apply! If you're passionate about APIs and integrations, apply!

If you're interested, shoot me an email: josh `at` wish `dot` com.
What a crock of shit. People installing an addon to comment on your content "silences writers" by making their readers actually think about the crap they write? God forbid people actually think. I'm so sick of this anti-commenting drivel promoting mindless belief. If you can't stand being questioned, please stop posting on the internet.
It's not like I'm in a position to do so anyway, but I would never consider implementing some kind of prank into a vital service that hundreds of millions of people use on a daily basis. Let alone a prank that could be so easily mistaken for a core function of the service.

Words can't even begin to describe how arrogant/stupid this was, and now users are paying the price.
What security features are you looking for? It's like any other SaaS, isn't it?
Thanks for the link. The protestations are a little silly from what I gather.

So this is the crux of it: Genius allows people to comment on stuff that people write - like an improved comment section. Occasionally these comments suck and are offensive.

From the blog post: "News Genius adds one more way for people on the Internet to be made unsafe." and "A tool that allows my abusive ex-boyfriend to interact with me and my content is a tool that should not exist."

The solipsism is laughable. The Internet will forever provide an infinite supply of trolls but when you publish on a public platform as opposed to behind a password protected blog or via email, people will talk about what you write (if you're lucky. many people publish in obscurity) and it just so happens that you may not always agree with what they say.

The reflex to shut down rather than, say, ignore dissenting opinion is an odd but increasingly more common one.
Show HN: Fatigue – A feature-complete frontend framework
Any word on if they had any employee liquidity in the round?
That's fair.

It's also incredibly depressing.
Absolutely, especially in the case of ATC. Now, the punishment is often "merely" decertification to work their position and re-training (with pay) until they're fully certified to work their position again, but it's still a pretty big deal to the ATCers I know.

Maintenance personnel can also have their certificates suspended, though that tends to be more rare than being sued. (ATC is prevented from being sued in almost all circumstances, so that doesn't apply to them.) You can be sure that most fatal crashes result in at least an investigation of logbooks, who signed off the aircraft and for what, and some utterly absurd civil cases, many of which are settled without regard to the facts of the case but based on the perceived depth of pocket of the defendant.
CloseCSS World's least accurate CSS preprocessor
Tell HN: Comments and submissions with replies can no longer be deleted
Even within the 2 hour window.

EDIT: Applies to submissions too.

This appears to be a new undocumented behavior, likely intended to reduce the occurrences of the [deleted] that has broken discussion threads of old.

The problem is that there is nothing preventing users from just editing the comment to nothing, which achieves the same effect, so the addition of the lack-of-functionality makes no sense.
Not to end up on the same side as the anti-taxation guy, but:

If I go drive 50mph through a 30mph residential street while I'm talking on my cell phone with one hand, eating a cheeseburger with the other, and steering with my knees, I'll get charged with speeding and pay a ~$130 fine.

If I go drive 25mph through a 30mph residential street with both hands on the wheel and my eyes on the road but I've had two glasses of wine, I'll be assessed ~$1k in "administrative penalties". If I've had three glasses of wine, it's $10k just to plead guilty and avoid all the lawyer's fees. That's life-ruining money for a lot of people.

Drive through a stop sign? $220. Stop at a stop sign and proceed when safe to do so, but had three glasses of wine? $10k.

Is driving after a few drinks really something like 50x more dangerous than blowing through a stop sign at speed?

I agree that "let the drunks drive around until they hit someone" isn't necessarily the best solution, but you have to admit that the way we're dealing with it is nonsensical.
You're almost 8 years late bud.
I guess the same thing (or other things you don't like) won't happen if IG is still an independent company.
Eager | Boston/Cambridge, MA/Remote | Full-time/Part-time/Interns

Eager (https://eager.io) is a way for non-technical website owners to use all of the open-source and SaaS tools developers use every day. Think of it like an app store for things which make websites better. For developers, we are the Heroku for code which gets deployed onto websites.

If you like writing JS/CSS and the idea of building reusable open source components is interesting to you...
If you like writing Go and would like to work on the twenty or so microservices which power our infrastructure...
If you are interested in working on Marketing/Growth/BizDev in a growing startup which is aiming to change the way thousands of SaaS companies reach their customers...

Please reach out, I'd love a chance to chat with you about what we're doing and what you're looking for -> zack@eager.io
Npm registry is now fully HTTPS
> I don't see this in any practical fashion.

You don't?

> I can visit a CloudFlare hosted site from the regular internet for hours (even scrape automatically) with no problems

Ah but this is not the same. Try doing so from an IP which is also sending malicious traffic, and you will see the same issue.
This is why it's important to have limits.

As a society, we have laws that make it illegal to cross certain boundaries.

As an individual, I'm free to set my own limits on what I'll do. For one, I don't work at facebook or other adtech companies because I think the world has enough advertising and I don't like how phone-addicted people are.

I just think it's incredibly naive to assume you can have whatever lifestyle you want and be commercially successful. Success is costly ; you have to, almost by definition, be willing to do things other people aren't. I don't know where this idea that you somehow "deserve" to work "only 60 hours per week" comes from -- I just know that there are a lot of incredibly hard-working people in tech, and it's a high-stakes, high-money game, so you're going to get some outliers.
Good idea; I added "lit" to the title.
FBI Probably Won't Tell Apple How It Got into iPhone
You wouldn't call the amount of stars you have on X video game exclusionary. Why this graph?

Everybody doesn't have to live in a bubble-boy world with all their beautiful feelz.
Possible it's tone, but also given the relatively low volume of voting, and it's unclear to me what if any steps HN takes to reduce abuse and fine tune community comment policies, it's very possible that something else is going on. For example, some users appear to have comment histories that are highly irregular; one comment suggesting Snowden should be invited to return to the US without any chance of being behind bars or worst, and in another appearing to state that the US has not overstepped their rights; which is possible, though strikes me as bit odd; 100% sure my comments to some are a bit odd, though do try to respond if a direct statement is expressed.
ShapeBlue | REMOTE | Full Time | Software Engineer

Join us at the intersection of cloud computing, DevOps, and distributed systems to build infrastructure automation and datacenter optimization tools. We actively contribute to the Apache CloudStack Infrastructure-as-a-Service (IaaS) project -- building new features driven by the needs of our customers and the user community. In addition to our open source work, we are developing products atop CloudStack to create a datacenter management platform.

Our work involves deep knowledge of hypervisors, storage, and/or networking. We are a polyglot
environment with focus on Java and Python for CloudStack development. We plan to base our products on a functional language such as Clojure, Erlang, or Elixir.

Our team values collaboration, continuous improvement, and the Apache Way [2].

To apply for this position, please send email to jobs@shapeblue.com with the following:

- Cover Letter explaining your interest in the position
- Current resume (PDF preferred, Word accepted)
- Salary expectations
- Skype ID and/or Github URL

If you wish to ask questions about the role, please feel free to email jobs@shapeblue.com.

Please see our careers page [3] for a list of all available positions, as well as, a more in-depth description of this position.

[1]: http://cloudstack.apache.org
[2]: http://theapacheway.com
[3]: http://www.shapeblue.com/careers
I'm not a pilot, but I'd imagine that it's a combination of recognizing and learning from each mistake and a ruthless punishment of severe mistakes.

If you have a culture of reporting each and every mistake, you can receive feedback on what you could have done better in each and every one of those situations. That leads to bad pilots constantly becoming better pilots. Additionally, unlike the doctors in the story, severe mistakes in aviation will result in the death of the pilot, so like those startups that always fire the bottom percentage of their workforce, the really bad pilots will naturally eliminate themselves.

Rockclimbing is similar to flying in their compulsion to study fatal accidents. Climbing magazines will publish fairly in-depth discussions, not out of morbid curiosity but, instead, as a campaign to build awareness among climbers of mistakes that can kill them. This has led to safer gear and practices used in the sport and has undoubtedly saved lives.
Ask HN: Is anyone using a visual programming language?
Lately I've become very interested in visual programming languages. Has anyone had any experience writing applications in a visual language? If so, what did you think of the experience? What different kinds of challenges come up?
Actual title/subtitle:

Thesis Hatement

Getting a literature Ph.D. will turn you into an emotional trainwreck, not a professor

Suggest new HN title: "A literature PhD will turn you into an emotional trainwreck, not a professor"
I was the push behind Opera Softwares 'Face Gestures' April fool. This was concise over a lunch time chat, vetted by my manager and went to production (I would link the video but struggling to copy/paste). I felt it was amusing and some might believe it at the beginning but 99% of people would realise it's a joke by the end of the video. The response was good. It was fun for us to make something different and gave our users a laugh and got a bit of press for the brand. I think this is the goal more than actually fooling large numbers of people. Some harmless fun so to say.

That said over the years we had a few people asking about this feature as a serious option...
The really questionable thing CloudFlare seems to be doing is that they captcha traffic depending on the overall reputation of only the source IP rather than whether the source IP is attacking that specific site or even whether the site is under attack.

What they should do instead is this:

1. If the server is not overloaded, do not captcha any traffic at all

2. If the server starts being overloaded, only captcha traffic from IPs that have been detected as attacking THAT specific site

3. If the server is still overwhelmed, only then switch to captchaing all IPs with "bad reputation"

Most websites are probably almost never under attack, so this would make encountering CloudFlare captcha extremely rare in the wild while still providing DDOS protection.

They could even only do this for Tor exit nodes and other IPs that are known to be used by lots of people.

If a site is being DDOSsed a lot and the slower start up of this technique is a problem, then they can revert for those sites to the current behavior of using reputation.
Slack's one of the many things we use and don't pay for because the free version does exactly everything we need. Asana, NewRelic... a bunch of things are the same way. I worry some day they'll all dump the free plans and we won't be able to afford whatever pricing they come up with. It's not like we can't pay anything, but have so far found no need for the paid plans. I kinda sorta feel like a free loader. So I guess they have a good number of paying customers? At least with that valuation, I'd hope so.
How is that different from C or any other code? Every programmer has had the "what the fuck did I write?" moment at least once in their career...
There is plenty of information to go off of. They just don't want to put in the engineering effort required to utilize it.

Is there really a constant DDoS attack on all of these sites from users with no cookies?
> It seems that as hardware improves, software degenerates.

Spot on. I find myself frequently and increasingly frustrated with how slow most software is nowadays. Every app in my phone takes 2-3 seconds to load. Lots of websites/webapps take several seconds to load before they are readable/usable (Google Sheets is particularly offensive here).

Years ago I had a lot less hardware than today, and the software I use had less features, but I remember response times being much faster. I hope we're able to reverse this situation soon.
Now if only they had an on-premies solution.
It does this.
Yeah, this is beyond just Tor - they're breaking VPN and carrier-grade NAT traffic too. Even if Tor bowed to their demands those would stay broken, and scammers would still fill out the captchas manually. But they seem very set on their chosen solution!
Squash your commits
That's because it's lispy!
Services like CloudFlare are responsible for more and more of the DNS. When they are poor net citizens, they are poor net citizens at a massive scale. Heuristics that end up being equivalent to "Tor users are guilty until proven innocent" can't become the default mode of the Internet. As customers, Tor users, and just people who have a stake in the Internet as a shared resource, we need to demand that they try harder than that.
I guess you are not familiar with the phase "The buck stops here" popularized by Harry S. Truman.
Leftpad all over again.
Atlanta, GA | iOS and Rails Engineers | Contract

http://sideprize.com/

SidePrize handles league finances for fantasy sports. We're backed by the Los Angeles Dodgers and have won several awards including Rookie of the Year from the Fantasy Sports Trade Association. We're looking for someone to lead our mobile development efforts.

Required:

* Experience writing and maintaining iOS/Rails applications.

* Great writing and communication skills. One or more members is often remote, being able to communicate by writing is of critical importance.

* Good requirement-gathering skills. Starting with a problem and working from there to understand how the problem can be solved is a valuable skill.

* A strong interest in sports.

Preferred:

* A strong interest in fantasy sports and sports statistics.

* Experience building fantasy sports or similar applications.

If you're interested, send an email to tareq@sideprize.com.
Not sure being an emotional wreck and being a horrible person are necessarily equivalent...
> Drop back one level of indirection and it looks like houses are more expensive because people want them to be more expensive.

Houses are more expensive because they're built mostly for the people who can afford more house.
Slack reactions for any website
Makes no sense on desktop either.
Those aren't the "aviation" numbers, but rather more likely the "scheduled airlines" numbers.

The fatal rate for all of aviation is well over 4 accidents last year, and there are not flight plans for even half of the general aviation flights.

There were 5 aviation fatals last month in the US: http://www.ntsb.gov/_layouts/ntsb.aviation/month.aspx

For scheduled service, I only see one fatal accident last year in the US, and that was a Cessna 207 (single engine, piston aircraft) that crashed in Alaska, hardly relevant to scheduled airline service in transport category twin-jets.

http://www.ntsb.gov/_layouts/ntsb.aviation/brief.aspx?ev_id=... I suspect that most people would not consider this airline service, though it was operating as scheduled service.

Non-US in 2015 had 4 fatal accidents on scheduled airline service, which is presumably the numerator the article is citing:

GermanWings 9525 (suicidal pilot): https://en.wikipedia.org/wiki/Germanwings_Flight_9525

TransAsia 245 (pilot error subsequent to mechanical failure): https://en.wikipedia.org/wiki/TransAsia_Airways_Flight_235

Triguana 257 (poor weather, unclear pilot contribution): https://en.wikipedia.org/wiki/Trigana_Air_Service_Flight_257

Metrojet 9268 (bomb): https://en.wikipedia.org/wiki/Metrojet_Flight_9268