skysight-inc/HackerNews huggingface dataset:
You can't miss random days for no real reason. "I worked until 2am" isn't really a good reason... you're paid to come into work. Not to fuck about at home.
Musk made money on Paypal before he started Tesla and SpaceX.

Bezos made money on Amazon before he started Blue Origin.

Plus Bezos doesn't have an obsessive internet cult worshipping him.
Championing novel ideas and values that go against the grain
Not conspiratorial, but the government picking winners and losers is certainly ripe for abuse. The government's job is certainly not to use taxpayer's money to support businesses who made poor decisions (started with LTCM' bailout in 1997). The justification is always one of "saving the financial system from collapse", yet nothing was done since 2008 to break up the "too big to fail" entities.
Security professionals should try to practice avoiding the use of the word "no". Instead, help to explain what controls can be implemented to help reduce risk. Encourage a sense of camaraderie with system owners and develop powerful communication skills with everyone.

Help them to be excited to work with you, rather than to turn the other way when they see you in the hallway.

The mentioned topic of "Recalibrate 'urgent'" is a great message. We're rapidly approaching a desensitized feeling of security risk within organizations and in the general public. As breaches/incidents continue to rise we'll approach a "who cares?" level from the public.

What can they do? Steal my CC? Already been stolen. Steal my SSN? Already done.

What's left to fear when privacy is gone?

What really keeps me up at night is when security incidents are measured in lives. Scary...
I brought my daughter to work with me once when she was three years old. She managed to turn off our main UPS, back before everything was virtualized. Restarting 30+ physical servers while everyone else was losing their minds was a learning experience.

I can't say I blame my employer for instituting a strict "children are not welcome" policy after that, but I'm still rather annoyed.
Its click bait plus some useful info.
The point of the article is that the relationship between "amount of exercise you do" and "calories you burn" is probably not linear, as has traditionally been believed.

According to the scientist's theory, you get diminishing returns, where you have to do ever more and more exercise to burn the same number of calories.
https://news.ycombinator.com/item?id=11378278
Compassion comes from people in the same position as you, not from the people above.
https://en.wikipedia.org/wiki/Traffic_wave

Tailgating is often the _cause_ of the jam.
> most developers would love to have the time to make sure their code is secure and well tested

I'm suspect not.

No matter how much time you have, it's more exciting to work on something new than going through testing. Time is not all equal. Even if you have an unlimited supply of time (everlasting life), you cannot somehow use a time block that occurs 1000 years from now, in order to displace the boredom you feel from what you're doing now.

If anything, unlimited time will increase procrastination. "If this isn't debugged for another 500 years, that's okay; I will live long enough to see it debugged.".

Thus, I suspect, most developers would actually love to have a vast army of other people with unlimited time to do the QA to make sure their code is secure and well-tested. :)
The FBI wanted this for the reason that it's often very difficult to figure out where something or someone on the Internet is physically located.
According to every HR person I've talked about it with, it does happen often enough.

The brainteasers won't reduce what fraction of hires would be litigious. But they will reduce how many people you need to fire right away, which reduces your exposure to that kind of litigation.

Also note that company's unwillingness to tell you WHY they didn't hire you is another HR recommendation for avoiding lawsuits. The problem is that the more you say, the easier it is for it to be quoted out of context and made to look like you're biased against people based on age/gender/religion/etc, which could be grounds for a lawsuit. A lawsuit that doesn't even have to be winnable if it would cost more to win than to settle out of court...
Another developer with rose tinted glasses that expected too much from an employer and got burned for it.

This is seen all the time, starting with expecting to have the interview process tailored to their whims to expecting their feedback to be immediately implemented and taken as near gospel.

This is a more tragic case of a person not versed in the specifics of contract employment thinking he is owed more for providing more than was originally asked.
Supposedly, I/you should be able to access your keybase private key via an API call. Unfortunately, they don't have documentation for this, hence to build this prototype I had to ask for it in clear text.

I recognize it's never a good idea to just copy & paste your private key. Use a throw away private key if you wish, the idea is simply start somewhere and make it easier to encrypt/decrypt messages.

Github Repo: https://github.com/lettergram/AnyCrypt
I've noticed in some cases that exercise can actually stave off hunger pangs - both while doing it and afterward for a while (you want water more than food) - and in this manner it can act as an appetite suppressant.

As long as you ignore the body's impulse to eat more than usual when you finally do sit down for a meal, it can very much work in your favor. There's also a phenomenon people refer to as "shrinking stomach" (that I've observed first hand) where your body adapts to feeling more full on less food. I don't know if your stomach actually shrinks, but it feels like it.

If you don't sufficiently often resist the urge to eat more than you need, your body will adapt to that intake level and there will most likely be a rough patch when you try to change the trend. I believe most people can push past this uncomfortable period and stop feeling deprived after a while.
Tribalism is really hurting the progress that security folks could be making. Development and operations are starting to collaborate and make huge gains in productivity. Rebranding security as a component of quality can help.

Coming into meetings with other teams with a list of (often unfounded) assumptions does not help anyone. I wrote about this a bit last year: https://blog.conjur.net/devops-and-security-the-five-monkeys
One of the previously male-dominated field that the article mentions is computer programming. There is no other field in the article that has undergone such a fundamental shift from when women used to dominate the field. There were virtually no barriers to entry to the field back then either in the form of requiring a degree or societal norms ingrained from childhood.

Other fields mentioned either require longer hours or were simply more demanding. We can get into what are reasonable hours or demands in a separate conversation but all things equal, employers are going to pay more for someone who works longer and puts up with more demands.

For everything else, when you introduce half the working population to a field that they were once closed off to, wages are going to drop. I am not pretending that it's the only factor but a huge over supply of labor will cause wages to drop; all things equal.
> One problem is that everyone re-routes around you, and you induce road rage and traffic weaving

Probably a good indicator you are going too slow.

Which is okay, just please, please, PLEASE stay in the right lane.
Yeah, I've wondered the same.

I recall another study -- no idea where I'd find it now -- which did body scans of runners. They found that runners which averaged 11mi/wk had substantial interior fat deposits. Runners that averaged 17mi/wk had very little.

Actually, did a bit of Googling, looks like it might have been a study by Dr. Uwe Schütz published in 2009, found a mention of it here: http://www.runnersworld.co.uk/weight-loss/running-the-life-s...
I think to accurately display the relative effectiveness of diet and exercise for weight loss is something like this:

diet & exercise >> diet >>>>>>>> exercise

I like this quote: "You work hard on that machine for an hour, and that work can be erased with five minutes of eating afterward"
The constrained model doesn't contradict cals in/cals out. All it says that the calories out will be sublinear in the amount of exercise added.

Furthermore, the graph of energy expenditure over time (in section 10) directly agrees with what calories in/calories out predicts. See, for example, how perfectly the "very low calorie diet" agrees with the exponential decay predicted by theory.

https://www.chrisstucchio.com/blog/2011/weight_stability.htm...
It would be pretty hard to use the API if you couldn't test your code on localhost :P
Even of you're a poor programmer, there are technical skills of benefit to you. Knowing enough about the way the technology works to know what you and others can and cannot deliver. CAP and its friends are sort of thing that I'm talking about.
Banks Assert Constitutional Right to Billions in Subsidies
"one might feel the only reason to do something is to have more than other people"

Are you saying you do ascribe to this position, that your only motivation to work is to get more money (and by extension luxuries) than everyone else has?

My plan, which I haven't mentioned is to guard against my own tendency towards greed and basically follow Ghandi's maxim of "being the change you want to see in the world". Do you have specific objections to that plan?
The theory says that as you do additional exercise, you get diminishing returns in terms of the number of calories you burn. As your exercise level increases, you have to do ever more exercise to burn the same number of calories, because the body has various compensatory mechanisms designed to avoid weight loss.

The traditional model proposes a much simpler linear relationship: do an additional unit of exercise and you will burn X more calories, forever. He says that is incorrect and you actually get diminishing returns, where additional units of exercise burn ever fewer calories rather than just a constant.
A shy guys guide to networking
My impression was that this was a project contract. There would be no obligation to make paid appearances in this case.
> not enough room that some fucker will pull in front of you.

why does it matter, most of the time?
Google patents device that you inject into your eyeball
That's hardly the case. A lot of what passes for software engineering also passes for other engineering.

What we actually see is a lot of apologizing, recalls and class-action suit settlements, and nobody actually seems to go to jail.

Not all engineering is about bridges not collapsing; conversely, there is some software that is equally safety-critical and carefully developed.

There is also "everyday engineering", like in consumer products. That's a category that fails miserably. Put simply, shit breaks. Past the one year warranty? Too bad!
But that person had a choice, and the warrant was probably issued locally.
That's another issue entirely. Also you need to take into account things like maternity leave as well as women who man chose not to work full time, that bring that number down as well.
Not my experience on OS X.
"Instagram was not an already established word as far as I'm aware and was developed purely as a brand name for a photo-sharing app"

INSTAnt teleGRAM

Looks like a mashup of two words...
Had a good friend and colleague who made an interesting point about how/why a security role can get depressing.

What happens if your security program is really really really effective?

Answer: Nothing
Yes, it is very unfortunate. This first started happening yesterday (for me), and I was kind of bummed that it didn't open in Firefox like it used to. It is stuff like this that lends credence to the EU's issues with Google. I am not sure why they feel it is worth it to just put stumbling blocks to user choice like this at every possible chance.
> The whole point of the article is that the traditional "calories in/calories out" model is wrong.

I think what they mean by this is that the "calories out" portion is what is mostly wrong (or at least, misunderstood ), not that "calories in" are probably the most significant factor when it comes to fat loss. They don't seem to dispute this.
The jam might not necessarily occur in the first place if Everyone leaves three car lengths in front of them while in motion. Packing together at super slow or standstill traffic is okay. The goal is that traffic continues to flow at a reasonable pace; space between cars doesn't necessarily matter when determining how long it takes to get from point A to point B.
>The spinning instructor was echoing a message we've been getting for years: As long as you get on that bike or treadmill, you can keep indulging — and still lose weight

Who is saying this? Anyone who has spent an hour educating themselves on the subject knows that it's all about calories in v calories out. That can be accomplished via the gym and the kitchen, or the kitchen alone.

Exercise provides additional benefits; higher caloric deficit assuming the same diet, muscle tone (appearance and burns more calories when you're doing nothing), and general cardiovascular health.
We've been on that list for a few years now, this is not exactly new (the list is updated every year). We like our sensible laws, like allowing people to make backup copies of their media and not going after people that merely download stuff. How could you know it's an illegal or legal source anyways when clicking on a link? Uploading/distributing is still illegal here, and you can absolutely get in trouble for that if you do it on a large/commercial scale.

Also it should be said that due to the very high purchasing power and small wage gap people do in fact buy their movies/music/etc and you won't find fakes of physical items in stores (unlike other countries).

Is it going to change in the future? Probably. It's very possible that the we'll be strong armed into changing the laws as part of some related or unrelated trade negotiations with the US.

If the US had their way, they'd open up an law enforcement branch in every country and prosecute the people right there and then. I for one am happy that hasn't happened yet.
> I try driving up to the client site to remedy the situation, and I am rejected from entering the property. Brandt enters the hallway, puffs up his chest and proceeds to lay into me so hard I thought I was in the Marine Corps.

Yes because at that point, you're trespassing.

You have NO legitimate reason to be on the customer's site. Further, you probably signed something saying that you wouldn't contact (or maybe just solicit) Pillar's customers for N months.

If you ever get fired by one of these groups, cut off all contact with the customer immediately. You might still try to smooth things over with the contracting company but even that is a bad idea the day it happened.
What's wrong with conferences and how to fix them
It's your privacy not theirs. And they have to pay the increased costs for HTTPS including complexity (key management, etc).
So from your post history, how does this relate to the present situation?

> kitanata 905 days ago | parent | on: Silk Road 2.0 Launches

> There are kits you can buy to test the purity of drugs you buy: http://dancesafe.org/products/testing-kits
Google probably needs algorithmically savvy people, but that is surely not the case with most of the companies asking similar questions. If a company developing CRUD apps asks me to reverse a linked list, it is a sign to me that they are clueless.

The amusing thing about this is, from what I can tell, Google actually only needs a small number of people with the deep knowledge. Much of the work there still involves things like "developing CRUD apps", just on top of the platforms and infrastructure the smaller group developed for it.

Which led to a characterization I once heard from an ex-Googler of the company as a place where "they hire top CS Ph.Ds to do incredibly boring code-monkey work".
C'mon. You assume they are/will when you hire them. When/if you discover they are not, you don't cut their pay, you fire them.

It seems you're trying to angle for some defense of Peter earning more than Paul because the former contributed "more". Contributing to a team isn't a metric that should be set by an overachiever. Everyone—especially every overachiever (including myself)—should disabuse themselves of the notion that others aren't contributing equally when they're really just not over-contributing. And evaluating contributions is already a difficult and subjective task.

A better approach is offer the over-achievers a promotion. New position, new responsibilities perhaps, and a new salary. Attainable equally by anyone else who wants it.
Power lifting can quickly become anaerobic, when you run out of oxygen. But, weightlifting is used for more than just peak power. Many activity's benefit from pure strength, but most people are trying to improve both power and endurance.

Longer cool down periods (3-5 min) helps build strength faster and let's each set be more anaerobic and higher weight, but short cool down periods and slightly lower weight adds endurance and strength, plus more repetition.

The other benefit of aerobic weightlifting is you can better learn to minimize anaerobic activity. Full power all the time seems great, but being dead on your feet in 30 minutes is rarely useful.
This is really interesting - and extremely ambitious. Having played with the CVE database, I'd caution you that it was surprisingly difficult (for me) to parse. The content is mildly unstructured, so that would be one of the first things I would look to figure out before building the retrieval system for the affected code.
I (despite the article) am mostly in agreement with you, but I think that calories out is a very complex subject. For example, when I calculated how many calories I was burning on my longer runs, it ended up being around 3000 calories/week. However, as I said before, my intake went up. Way up. I ate like an idiot. Donuts? Yeah. Cheeseburgers? Sometimes ordered two. Dr. Pepper? Bring the two liter! I absolutely added more than 3000 calories to my diet after I started running. And yet despite all that, I just kept dropping weight.

The human body is a very complex, non-linear thing. Discerning operating principles by looking solely at inputs and outputs is a hard problem.
Energy is energy, a calorie is a calorie in gasoline, food or electricity. However when talking about nutrition labels, those are generally an estimate of calories potentially extracted by humans (which I think is what you mean with nutritional calories). I'm not confusing anything. But some people seem convinced that the car analogy is exactly how the human body works - you put food into your mouth and it gets "burned" by exercise or stored (calories in, calories out) and no amount of evidence or science seems to convince them otherwise.
> the whole collection of papers through torrents

yes, although their bandwidth is horrible
There also is this idea: https://www.ecn.nl/news/item/floating-train-at-2000-kmh-set-.... It would store 20 GWh in a maglev train riding at 2000 km/hour on a 15 km circular track. More or less an enormous flywheel.
Btw, this is why I never host regular meetups at my employer's office. If something bad happens in either context, it will spill into the other and make life more difficult than it needs to be.
They be rollin
Seems like an opportune time to link to this: http://lesswrong.com/lw/1eh/hamster_in_tutu_shuts_down_large...

;-)
Yeah - I bought some belkin wemo devices, thinking that I could use their "smart" light switch to control an outlet on the other side of the room which it wasn't wired for.

It ended up working, but because the comms had to go through IFTTT servers, the lag was something like 10-15 seconds, which is awful when you want to just turn on a light.
Supersingular Isogeny Diffie-Hellman: Post-Quantum Curves [pdf]
Swift has this and this is a sensible way to go but not the only one.

I personally would prefer integer overflow resulting in NaN like it does with IEEE floating point operations. Regher has written about this option a bit more in [1].
On the other hand, as long as we have no hardware support this is not going to fly.

If we consider current popular hardware as given, want to be as safe as possible while still retaining performance competitive with C/C++ the solution the Rust community chose is a very good one and one I can live with.

[1] http://blog.regehr.org/archives/641
This and other stories lately are making it clear that the FBI is becoming a military organization instead of a police organization. But the real problem is that their enemy is the American people.
If there's a glut in supply and you reduce the financial incentive shouldn't that lead to a greater proportion of people who are passionate about the work of itself. That clearly doesn't work in all vocations, however.

Can I ask, what motivates you to perform your particular functions in society, is it only the financial reward?
I understand that. My point was that I've never seen a plan where people tell you to eat as much as you want as long as you do x hours of activity per day. The only plans I've seen like that are for strong men competitors or where the Rock ate like $300 worth of food every day and worked out for six hours daily.
This stuff is mindbending, but the paper itself is pretty impressive. Microsoft actually got this working:

We present a full-fledged, high-speed implementation of (unauthenticated)
ephemeral SIDH that currently provides 128 bits of quantum security and 192 bits of classical security.
This implementation uses 48-byte private keys to produce 751-byte ephemeral Diffie-Hellman
public keys, and is currently written almost entirely in C with only a limited set of functions
written in assembly. To our knowledge, our library presents the first SIDH software that
runs in constant-time, i.e., that is designed to resist timing and cache timing attacks.
Why is hiring broken? It starts at the whiteboard
SEO Internacional 4 tips que no te puedes perder
Yes, it's MTBF, which is what the comment I was responding to asked for.

The warranty is 5 years, and from the datasheet the AFR is rated at 0.35%.

http://www.seagate.com/www-content/product-content/enterpris...
Just stop talking.

Like any bad breakup, it's in everyone's best interest to just stay quiet, not take sides, and hope this blows over.

You are digging the hole deeper and have been with every Facebook post, the Medium post, and HN comment.

Stop talking. Take a long weekend. Take a week and go do something else. You're only making it worse.
Except I didn't eat the same as before. I ate more, way, way more.
This is a reaction to my friend's article on his recent frustrations with getting hired, which is discussed here: https://medium.com/@evnowandforever/f-you-i-quit-hiring-is-b...
I didn't see him say that, but that's really not my point. I'm not commenting to criticize him. I'm offering the consulting survival advice, which I'm pretty sure is generally applicable to all contracting gigs: don't work late for clients unless you absolutely have to.
I do not agree with hiring processes many companies are pushing. However, if you do not know what BFS is, I do not know where to begin.
It was super annoying to set up the OnHub. Instead of a standard web interface, they require installation of a mobile app.
Speed is kind of a funny thing with IDEs. All of my typical workflows are faster in Intellij than they were in Eclipse. YMMV if you are hitting different features than I am.
I have seen exactly the opposite effect on myself. After exercise I can (and really want) to eat the world.
One thing that helps a lot in CS is that most authors upload their papers to their personal websites.