skysight-inc/HackerNews huggingface dataset:
I understand that people who buy into a neighborhood want that neighborhood to freeze in time and maintain for all eternity whatever character it had on the day they bought.

But we should be wholly unsympathetic to that view. It's a reasonable thing to wish for, but it's not a reasonable demand to give in to.
Is there any indication they're suffering actual discrimination? Pay gaps, harassment, disproportionately not-hired or fired?
Well, there is an issue for that[0]. Also, as of today[1], all shared Runners on GitLab.com are each on their own VM inside Docker containers, so that message does not apply for sure.

[0] https://gitlab.com/gitlab-org/gitlab-ce/issues/14732
[1] https://about.gitlab.com/2016/04/05/shared-runners/
Ah, okay. That can work.
I think this is a reasonable analysis. I would refine it this way (examples are only for illustrative purposes):

Tier 1 secure messengers: all possible tradeoffs in favor of security made; use for worst-case adversaries:

- Signal/TextSecure
- Pond
- PGP†
- OTR

Tier 2 secure messengers: serious secure messaging protocols that make some tradeoffs in favor of adoption and usability; use for normal messages of low sensitivity:

- WhatsApp
- iMessage

Tier 3 secure messengers: secure messaging protocols with flaws, limited cryptanalysis, only content-controlled browser clients, &c

- Redacted to avoid flamewars.

Everything else: insecure; use only to bootstrap conversations to a Tier 2 protocol (knowing that if you're a state-level target, you're exposed even after you "upgrade")

- Google Talk
- Facebook Messenger
- AIM

I think WhatsApp would like to be a tier 1 secure messenger (they'd be the first mainstream tier 1 secure messenger!) and they have a shot at being that, but they're probably some years away from it.

† (I know PGP and OTR are cryptographically limited compared to Signal Protocol, but from an OPSEC perspective they're still a tier above iMessage.)
At the past two office I've worked at, sliding a belt through the glass door to activate the motion sensor works pretty well for when you leave your badge at your desk. ;)
Shameless plug.. I think our app hyperPad fits the list
https://www.hyperpad.com

Great for mobile games and other interactive apps. Also awesome for prototyping UI and animations. :)
Vim is actually a relatively bad filter (some reasons are mentioned in the caveats section of the article). I explicitly designed my vis editor[1] in such a way that it can be used as an interactive filter. The following works as expected, use :wq to write to stdout:

printf "foo\nbar\nbaz\n" | vis - | sort

dvtm uses this mechanism to implement its copy mode.

I also recently integrated sam's structural regular expression based command language into the editor. This might be useful for people who want the power of stream editors but with instant visual feedback.

However keep in mind that this feature is relatively new thus likely still contains some bugs ...

[1] https://github.com/martanne/vis
To be honest, some of this seems like a pretty fun working environment. I don't see anything egregious about these work conditions, other than the terrible work life balance, the worthless stock options and below market rate salaries. If you can find a better salary elsewhere with good work/life balance, then do it. Just because people choose to work in these environments doesn't mean they've been duped. As for the stock options, generally speaking, you shouldn't expect too much value out of those.
Oops, thanks for the feedback. Fixed :)
> When asked about the lack of Americans in the original release, the German newspaper’s editor responded mysteriously: "Just wait for what is coming next."

We may see something eventually. But it has also been pointed out that U.S. laws give wealthy individuals fewer reasons to form companies in Panama. It is possible to form entities with secret owners under U.S. law, with a little effort. So the primary reason for Americans to go offshore may be tax-related, for which Panama would not normally be the jurisdiction of choice.

See: http://fusion.net/story/287671/americans-panama-papers-trove...
Medium lures the Awl and other publishers to go all-in on its platform
People find religion useful

Ideas can be useful even if they're not scientifically valid nuggets of fact

There are 7 billion unique people on the planet, all in unique situations, if you reduce the ideas you find help to those with scientific basis that apply in all 7 billion cases, you're left with a pretty small reservoir of ideas

I've found that a lot of self help books provide useful frame in which thinking about how to approach different challenges in life

I found a fair amount of good food for thought

how much is that worth? I've found a good rule of thumbs is that if I can invest a trip to the library, or a few minutes of my time while I drink a coffee in Barnes & Noble, or 5 or 6 dollars for a used copy on Amazon, I have good return on my investment

if I have to drop several hundred dollars to attend a seminar, I'm less impressed with my return on investment, to the point that I'm probably not going to go down that road

I think its helpful to be open to ideas wherever you can find them, then use the supercomputer on top of your shoulders to decide if that helps you find a useful solution to whatever problems you are going through in life
> As of today, the integration is fully complete. Users running the most recent versions of WhatsApp on any platform now get full end to end encryption for every message they send and every WhatsApp call they make when communicating with each other

Emphasizing "running the most recent versions of WhatsApp", does this mean the fancy new protocol can still be downgraded to the old one by an older client? I'd save the fanfare for a few more months yet
Yep, PayPal is awesome at this. I originally intended to go on a long tirade about how PayPal had dealt with this, but cut it out as the post was starting to get a bit long.

---

Peter Thiel on PayPal: "In mid-2000, we had survived the dot-com crash and we were growing fast, but we faced one huge problem: we were losing upwards of $10 million to credit card fraud every month. Since we were processing hundreds or even thousands of transactions per minute, we couldn't possibly review each one - no human quality control team could work that fast.

So we did what any group of engineers would do: we tried to automate a solution. First, Max Levchin assembled an elite team of mathematicians to study the fraudulent transfers in detail. Then we took what we learned and wrote software to automatically identify and cancel bogus transactions in real time. But it quickly became clear that this approach wouldn't work either: after an hour or two, the thieves would catch on and change their tactics. We were dealing with an adaptive enemy, and our software couldn't adapt in response."

They ended up going with a hybrid approach where their algorithm would flag suspicious transactions, which would then be manually reviewed.
jekyll plugins are disabled for a good reason, otherwise you could basically execute anything you want on their server.
Somewhat agreed - but I also think a lot of it was Nixon knew he was checkmated, and it was less propriety, and more just plain ol' shame and knowing he had no recourse. I imagine he was not alone in his deliberations, though, and that his advisers - particularly his legal advisers - agreed.

I recently read "The Brethren" by Bob Woodward and and Scott Armstrong (http://www.amazon.com/The-Brethren-Inside-Supreme-Court/dp/0...), about the Supreme Court from 1969 to 1975. Watergate is a major episode, and it shows that Nixon knew that if they lost their Supreme Court appeal (https://en.wikipedia.org/wiki/United_States_v._Nixon), there was little recourse left.
I was just about to start looking into some http load testing tools, so I am glad to see this come up. Do people recommend this tool? What are some competitors? Can you produce enough load from your average laptop to effectively load test a web server?
Here is the link to demo video of how to use it:

https://fallible.co/blog//2016/03/13/Automating-data-leak-de...

It also explains how we developed the tool.
I don't buy this at all. The original Java whitepaper from 1995 mentions both multithreading and JIT compilation: http://www.cs.dartmouth.edu/~mckeeman/cs118/references/Origi...

It even says that the byte-code format was specifically designed with JIT compilation in mind:

> The byte code can be
translated on the fly (at runtime) into machine code for the particular CPU the
application is running on. For those used to the normal design of a compiler
and dynamic loader, this is somewhat like putting the final machine code
generator in the dynamic loader.

> The byte code format was designed with this in mind, so the actual process of
generating machine code is generally simple. Reasonably good code is
produced: it does automatic register allocation and the compiler does some
optimization when it produces the bytecode.

The idea that JIT compilation was retroactively bolted onto the Java ecosystem is absurd. Perhaps more than any other technology, Java brought JIT compilation into the mainstream, starting more than 20 years ago.
Nope. From the article: "Once a client recognizes a contact as being fully e2e capable, it will not permit transmitting plaintext to that contact, even if that contact were to downgrade to a version of the software that is not fully e2e capable. This prevents the server or a network attacker from being able to perform a downgrade attack."
There's less stuff to manage if you're serving up pages from a selfhosted Gitlab instance than actually serving up the repo directly.
I'm happy with this level of response. It's a little bad in that they essentially coerced password disclosure and I'm guessing they would have acted on any other crime (say copyright violation) they happened to find during search. But, overall this is how Police should work / act. They need to investigate and they should investigate with consideration, care, moderation, and assumption of innocence until actual evidence indicates otherwise, they should ask for cooperation rather than assume hostile/adversarial stance.

They don't need to have SWAT no-knock the place. They don't need to seize and confiscate everything and make it very hard to recover. They don't need to handcuff anyone. They don't need to act like smug assholes. Etc.
GitKraken looks pretty. I haven't used it enough to provide a full on recommendation yet though.

https://www.gitkraken.com/
I agree we should give attribution here and created https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3546 to do so. Edit: this was merged.
1. Requesting pictures of boobs is crass.

2. You can't PM people in HN, so it makes no sense.

I can see I got downvoted for suggesting it but I still stand by what I said. I didn't downvote the poster, I was just suggesting they reconsider.
I'd love for someone to handle all this for me, but so far I haven't found the ideal partner.
I don't understand what you're pushing against. Do you dispute that an engineer's salary goes further in Austin than it does in San Francisco?
https://blog.whatsapp.com/10000618/End-to-end-encryption
Maybe it is feasible, but at the very least I would wait for someone to reverse engineer it and publicly publish its findings. I do not have the skills to do that.

Moreover, if reverse engineering is so easy, why not open-source it from the beginning?
working on a wordpress plugin to create presentations/slides using revealjs. Work in progress. I work a lot with wordpress lately and surprised that there are no good presentation plugins available yet. I like revealjs so decided to use it.
Really? It worked for me. Try https://orchestrahq.com.
So now WhatsApp is finally on par with iMessage and Signal, and shares the same weakness: public key distribution. Key distribution is controlled by a centralized server that could, for malicious or other reasons, send you new fake keys for people you communicate with. For iMessage, this is explained in this 2015 post by Matthew Green:

http://blog.cryptographyengineering.com/2015/09/lets-talk-ab...

At least with Signal you can compile your own client (though that doesn't help if the server is going to send you fake public keys!).
>> "lowest-common-denominator set of phonemes"

They already spent a bunch of time and effort finding these phonemes to build Esperanto, right?
You keep saying "source is a must" but you have yet to explain why that is the case.
You can definitely verify the code without the source. It may often be much harder, but it is not un-verifiable. Please stop spreading misinformation like this.

With all the wonderful reverse-engingeering tools, dissassemblers, debuggers, etc. available, and the numerous massive communities that use them, it seems pretty out-there that you could seriously think such a thing...
> OTOH the Model S is the most well manufactured anything I've ever sat in.

Have tried out a full-option Audi A8 or an S-Class or 7 series? During my time in the US I was shocked by the bad interior quality of GM.

Apart from the actual software running on the cars, I think German manufacturers still have very high quality interior in their flagship models.

RE: Software: Current Audis take ~15 secs to boot up the navigation, and during that period you cannot input anything / the screen just hangs.
This reads like a parody. An actual successful company thought this deserved codifying?
To be pedantic there is no reason to believe increasing the minimum wage to 15 usd will increase prices proportionally to the increase in wages.

Ex. Someone who would be making 9 would see 66% increase in wages but because wage earners as a whole would only be earning a little more so the increase in prices would be proportional to the overall increase not the much larger individual increase.

Suppose that wages earned only increased 6%. The individual would easily see a great increase to his standard of living despite a small bump in price.

Also note there is no reason to believe that costs of businesses that rely on minimum wage work would go through the roof. Imagine 30% of their costs are labor and 2/3 is minimum wage work. 20% of their cost then double it perhaps and their costs increase 20%.

Note we are talking about an atypical service oriented business dominated by minimum wage labor.

This means that your taco costs a few more dimes but the dude making it doesn't need food stamps and welfare on your dime.
To be fair, GM builds very few Mars rovers.
Oh, I googled them quickly but misread the results. Thanks for the correction.

But I guess, if you consider them more encyclopedic than entry level, that my question still stands. Do you have any particular recommendation? You seem to be familiar with the field!
Good idea, I made a note in https://gitlab.com/gitlab-com/operations/issues/75#note_4599...
If you don't have the skills to do basic verification of a non-obfuscated binary, you don't have the skills to verify an encrypted messaging protocol implementation from source either: the latter task is harder than the former!

I think the misconception some people here have about the necessity of source code is born out of the idea that a cryptographic backdoor would look something like a mysterious HTTP POST of your key or plaintext to some random endpoint (that POST, by the way, would be trivial to spot in the binary; you wouldn't even need to read assembly).

But real cryptographic backdoors can be extremely difficult to spot. A cryptographic algorithm that uses signatures, for instance, can be fatally compromised by breaking signatures (see: TLS). An injected cryptographic flaw that breaks signatures can be as simple as biasing a single-digit number of bits in a nonce; a bias can be as subtle as generating one less byte of randomness than the protocol requires.
On the western fringes of Iowa in some places, yes. For most of Iowa there is no irrigation.
Neat. I'm taking this for a spin now.
> If you've missed that early validation, it becomes a lot harder to build your inner validation.

That is not true at all. It's a choice, always. Even after not caring for other people's validation or their value judgment, more 'validation' is what you need in order for you to start caring about their validation.

Tell me which one would have a stronger effect upon you to live up to other people's values:

a) tremon I've always seen you happy, and I hope you will keep my daughter always happy

b) tremon you're a loser, you will never be successful in life. My daughter will be so unhappy with you.

If you think the first statement is what will make you not care about your in law's opinions, then you're totally wrong, and it tells me that you have never 'not-cared' for other people's opinion about you.

It's the second statement which makes me wanna work towards my own happiness with my future wife. The first statement pushes me to deny my own feelings because it's only in first case you could disappoint someone else.
The DMV area? Its rents are fairly consistent, gentrification is pretty slow-and-steady, and the only growing pain I see is poor transportation options. But DMV is full of established companies and government work, not trendy startups. If San Francisco's high rents are due to startup culture, you may find more average rents where the tech isn't trendy.
The average price from all the bookings is ~$42k.
Coming from Unix, this seems super unintuitive, but that's probably just my background. Do you find it tough to figure out what you need to do?
The mailman is operating on behalf of the postal service. Since the postal service is basically the government, that's confusing, so let's say that we're talking about a FedEx delivery person delivering content that is inherently illegal. (Perhaps it's a controlled substance with no medical uses, perhaps it's counterfeit money, perhaps it's a chemical weapon, etc.)

It seems to me that it would be patently unreasonable to raid the FedEx employee's home, but it would be perfectly reasonable to hold FedEx the company responsible for not delivering such things. If it happened once, sure, raiding them is excessive. But if the government knew that FedEx, by design, actively did not care what they were delivering and made it hard for themselves to figure that out until it's loaded onto a truck for local delivery, and they had evidence that some drugs or weapons were being delivered, then sure, raiding the local FedEx distribution center and searching it seems within the realm of reasonable actions. Seizing all packages at that distribution center would be unreasonable, but the analog (seizing the computers) didn't happen.
Exactly: I use way2ride all the time to pay, and use it to hail when Uber has surge pricing on. It's especially useful for hailing while still inside your apartment.
skype is encrypted and backdoored. how can you know the same isn't true of whatsapp?
Just FYI -- the "golden rule" was around for thousands of years before Christianity. It is an essential human rule of empathy.

https://en.m.wikipedia.org/wiki/Golden_Rule

(Antiquity section)
How to Re-Create Your Favorite Opt-In or Pop-Up
Thanks :)

It was throwaway at first, but I've grown fond of it.
Completely agree with fweespee_ch. Major CC processors such as Authorize.net, Braintree, etc. offer fraud protection measures but in our experience they do very little to prevent even a remotely-capable fraudster. Typical features offered are IP Velocity & regional IP (useless when the fraudsters spin up thousands of amazon servers), # of transactions per hour (not too helpful when your business already does hundreds/thousands of transactions a day), CVV and AVS credit-card response codes (ends up blocking more legitimate orders than fakes and the fraudsters typically already have this information anyway), etc.
How rural are you? Is biking crappy because of snow & ice? In which case, can you get away with a quad in the winter?
Well that that point it's slower to paint with CSS-in-JS because the browser won't have the CSS until the very last thing (after asset load, after initial paint, after content load, then after script execution).

Now you could extract the CSS with a build step... but at that point you've admitted the solution is poor (and/or you're not good at CSS) and are just mitigating it by producing real CSS by automation.

That's fine, but it's no replacement for general good practice or domain knowledge.
I view it as dangerous actually.

That is corporations with money, power and lawyers determining and overriding voters in yet another way. Doesn't matter how you see this particular issue. The next time it could go in another direction. [1]

[1] Live by the sword, die by the sword.
I pay about that for rent - it's the most I've ever paid for housing by a long shot, and it regularly freaks me out. I just can't get used to it. The thing that gets me is that I'm barely paying the property taxes on the place I rent. The landlord isn't gouging me.

It's just the way it is here. Housing is so expensive because everyone wants to be here, and for good reason. This is the most thriving technical community in the entire world. We live different lifestyles as a result. It's not better or worse, just different.

It seems like there are a fair amount of people who come for 2-3 years and then go back to wherever it is that they came from, but I think the amount of people who actually leave the bay area for tech jobs in Seattle/Portland/LA is pretty slim. I'm sure it happens, but if there's an exodus happening I for one am completely unaware of it.
> You don't have to do this with Github. Just clone directly to your local machine.

If you use this model, your local clone isn't "backedup" by github until the pullrequest is merged, correct?

One reason I like my teammembers to have their own local fork, is so they can have github exist as a backup.
Dealer near me has offers of $50-99 per month pending down payment. The latter being $0 down. If that's not tempting..
Speed is an impressive feature and we're working hard to improve it.
"I saw my elder brother and dad doing stuff, and I wanted to join in and learn."

I think this article is for those who didn't start early, but want to become good at programming or computer science, anyway.

Of course, the same issues would be encountered by a man introduced to programming and CS for the first time at college, but statistically it's probably more likely for a woman to first become interested in these topics later in life.
Segovia | www.thesegovia.com | NY, NY | SF, CA | ONSITE | FULLTIME | Enterprise software to fight extreme poverty.

Segovia makes it possible to identify, verify, and deliver cash to people who lack access to banking. Over a billion people worldwide receive social protection or economic aid, but NGOs and governments operate anti-poverty programs without modern enterprise tools, resulting in significant fraud, waste, and delay. Our beneficiary enrollment and payment products dramatically improve the distribution of essential resources to those who are hardest to reach.

Segovia is a venture-backed, mission-driven, for-profit company, and we are hiring exceptional full-stack software engineers who share in our vision. Our team includes the founders of cash transfer charity GiveDirectly and early engineers from Facebook and Foursquare. Our investors include Reid Hoffman, Omidyar Network, and Global Innovation Fund.

Press | http://tcrn.ch/1LUe5s1 | http://bloom.bg/1MsHwT3 | http://bit.ly/1Q7dMh2

Apply | https://thesegovia.recruiterbox.com/jobs/fk0hqg5/
> From that perspective, I'm still inclined to trust apple's iMessage a bit more especially after recent events.

// edit: got my answer here: https://news.ycombinator.com/item?id=11432629

I'm curious, is that because of what they did in the FBI case, or for technical reasons? IIRC iMessage would allow Apple to add public keys which they (or the FBI/$ADVERSARY) control as a sort-of backdoor as well. I can't say that I've been keeping track of Facebook's position or history on this topic, so it might or might not be fair to say that Apple deserves more trust here, but on a technical level there's not much of a difference.