skysight-inc/HackerNews huggingface dataset:
So you were part of the group of schools that refused to agree to a transparency initiative (https://news.ycombinator.com/item?id=11872261) but you think self-publishing your own methodology with zero breakdown of what your categories mean is just as good?

Like, where are all of the grads employed by Hack Reactor to pad the numbers accounted for? What percentage of your students already have a CS degree when they walk in the door? Why is the size of the average class increasing at the same time the price is going up? Most importantly, why do some big name companies effectively blacklist your graduates now, and what are you doing about it?

Your "towering accomplishment of staggering magnitude" looks like marketing hype and a lack of transparency.
That's been brought up a few times in this thread. I don't think it's a fair comparison at all. You can borrow student loans for college, but the $20k comes out of pocket.
I have to imagine there's a giant pile of (criminal) laws they could use to prosecute someone who's trying to defraud the government. But your point is still well-taken, and it's kind of academic anyway - it's an incredibly valuable (and lucrative) tool for the government, of course they're not going to give it up.
I think this is something very unsafe to preach to people.

I'm not sure if this is a joke, or if this person and other comment authors are serious. The idea of Security-by-Obscurity is flawed inherently.

Let me first start by defining security: "the state of being free from danger or threat." Now this is definitely not the best definition, it's just the one that came up when I googled the word and so this will work for now.

The only way for security by obscurity to work, is for you to be able to design a system that is impossible to figure out or comprehend.

Let's assume that one was able to design a system that is incomprehensible to anyone. Let's initially ignore the fact that if the system is not understandable to the user, it couldn't have been invented in the first place.

I'll pose these questions:

- If the system is so obscure to foreign users, how will it be maintained
- If someone who knows the secrets of how this system is fired, what happens if they sell of their knowledge?
- What would happen if there turns out to be a bug in this massive amorphous blob of crap that no one understands? How do you start debugging it without invalidating it's "security"

I'll never use security-by-obscurity as a model. This is mainly due to one of my core beliefs: there are much smarter people out in the world then you. If you think "this is un-guessable" or "this is unbreakable" when slapping a bitshift on a stream of data and calling it "encryption" you need to understand that there are people smart enough in this world that can smell that from a mile away.

I've worked with some of these people, and before then I may have said "yea security by obscurity" is fine; but having worked along side people who are FAR more intelligent then I am. Anything I can think of to circumvent their actions can be trivially figured out by someone out there who is smarter then I am.
Personal attacks aren't allowed on Hacker News. We ban accounts that do this, so please don't. Instead, find a civil, substantive way to make your point.

We detached this comment from https://news.ycombinator.com/item?id=11871902 and marked it off-topic.
I think this is a popular opinion that's just not realistic. There is a >0% of the population (much greater IMO) that is more productive learning in a structured environment. For those people there is an amount >0$ that they would be willing to pay for that structured environment. To say otherwise is basically just a glib, "Well I did it so why can't you?"
As an employer I'd look at bootcamp participation as a sign that the applicant doesn't know how to program. Just like all of Sun's nee Oracle's and MS's (well, and Oracle's) cert programs 15 years ago.

If you truly don't know how to program but want a coding job, then here's a $0 class. Start with JavaScript. Why? The entire internet is based on JavaScript, it can do anything, it runs on any OS, and it's easy to learn.

Google how to write a "hello world" web server program in node.js. (js stands for JavaScript. node.js is the most popular way to write web server in JavaScript). Follow that tutorial through.

Next, update it to make it tell the current time, updating once per second. Make a client-side and a server-side version of the app. Client-side means your code is in the HTML page and gets executed by the browser. Server-side means the code is on the web server, and your browser pings the server once per second for the correct time. Server-side is a bit more complex. Google is your friend in this.
stackoverflow.com is a great community and resource to learn from (but search for existing answers before asking questions!).

Next step is to find a TodoMVC tutorial (google again) in node.js, follow it through, and publish to heroku. You probably want to google "node.js todomvc heroku tutorial". (I didn't but I'm sure something would turn up). This will teach you about databases, version control (specifically "git"), hosting, and deployment. At the end of the day you'll have fully functional web app that anyone can use just by knowing the URL! Really once you've worked through that, or, once you're able to do it from scratch without googling much, you're a coder. Rejoice.

At that point put your TodoMVC code on github (google again, but the place people share code via "the git"), and start mucking with it. Whatever suits your fancy: if you're into UX then spend time making the UX cleaner. If you're into databases or programming languages, adapt to different ones. If you're into performance, then blaze that path. Or if you're just not into todo lists, then use your newfound knowledge to start a project WRT something you do like.

Final step, ping potential employers and show off your github account. You'll certainly get a look from SMB owners who are looking for people with some intrinsic motivation. You'll put people who subcontract their drive to bootcamp programs to shame.
To me, paid family leave is about equal opportunity across income and social class to have a child. Currently, the wealthy and those with more flexible jobs are better able to afford time off, which in my opinion is unwise.
You have conflated two technologies - Strict Transport Security, which is a header that tells the browser to stick to TLS connections only. If your admin has deployed a CA that your browser trusts and uses a cert from that CA to MITM your traffic, they will have no problems doing so ;)

Certificate pinning, on the other hand, allows a client to refuse to connect to a TLS service that fails to prevent the correct certificate. This is generally a win, however it still doesn't give you what you want.

Firefox and Chromium (including Chrome) browsers will only validate certificate pins if the presented certificate is a public trust anchor (in otherwords, the certificates deployed by the operating system). If the certificate chains to a private trust anchor (a certificate installed by your admin), Firefox and Chromium based browsers will smile, wink, and play along.

So, yes, in theory these technologies could protect you, but the vendors that implemented Public Key Pinning opted to support the enterprise use case instead of protecting users.
Drills, close quarters, hard work sounds like boot camp. App academy changed my life. "Anyone who tries for 6 months can get a job" really? You think that education is expensive? How much did you spend at college, and what job were you qualified for after that?
Currently you don't have to give up your google voice number. You can even use it as your google fi number if you like, and you can undo that choice and get it back as google voice later.
The problem with your use of "selfish" is that there is nothing forcing human identity to be understood in such a way that the 'self' is only your individual being. Your identity includes a large part of your culture, and your 'self' can include other people in the abstract. It's not black-and-white, nor is it a contradiction. You can be selfish for your tribe or your family, without expecting rewards to your individual being for doing so.
I'm in the interesting position that I've built something that everybody needs, but nobody wants.

I've built a product that manages the compliance process for the Big 5 (i.e. PCI-DSS, SSAE16-SOC2, HIPAA, ISO 27001, and FEDRAMP).

My product, ComplianceChaos[1] competes with RSA Archer, Protiviti, Lockpath, Aruvio, and MetricStream.

From my research, 80% of IT operations around the world can't confidently certify themselves against any of those information security frameworks. When recently talking to Security Directors and above, they claim "I don't need to comply" or "well we may not be the best, but we're not the worst, so compliance just isn't a priority."

We understand that a big business like General Electric will not do business with your company unless you can show some kind of proof that you're compliant with the Big 5. For example, if you're a cloud service provider or SaaS, GE wants you to certify for SOC 2 and ISO 27001.

We also know that if you host on Amazon's FEDRAMP Compliant environment or Catalyze.io's HIPAA compliant environment, it doesn't automatically mean your company is also compliant. Your company still needs to go through the compliance process too."

When I first set off to build this product a couple years ago, the security officers first exclaimed, "We need a compliance tool so that we don't have to deal with scattered documents and long spreadsheets." When I built the MVP and continued iterating on it, security officers again exclaimed, "this is the most beautiful compliance product I've ever seen! Better than RSA Archer."

However, when I asked them to use it, for FREE, they would say, "Well it's nice, but compliance just isn't a priority for us because the business has other missions like doing real security work". Explaining to them that compliance frameworks like ISO 27001 and FEDRAMP is real security work was met with deaf ears. In fact, they would retaliate saying, "Compliance like ISO 27001 isn't security. It's a low bar, bare minimal, and not enough."

When I counter with, "But 80% of the industry can't confidently assert that they've done due diligence in meeting the compliance controls. If compliance is so bare minimal, then why do only 20% go all the way to Attestation instead of all 100% of you guys?" That question would again fall on deaf ears.

I've recently pivoted to a services company, no thanks to TrustWave for getting sued for performing subpar security compliance auditing work. I'm specifically looking at you auditors who ask employees to put their passwords in a spreadsheet.

So here I am, having built a product and auditing service that IT Operations do in fact need, but do not want. They don't want the politics behind it nor the emotions behind it, and wish to sweep compliance under the rug.

How do I solve for #1 Make something that people want, when nobody wants compliance, but definitely needs it?

[1]http://www.ComplianceChaos.com

I'm going to sleep now, but I would really appreciate reading your responses in the morning and I'll definitely respond too.
Circa a year ago the remote HR experience was pretty great. While the lectures were pre-recorded (to be expected) we always had Q&A sessions to demystify any remaining questions. And our tech leads were from notable companies.

I figured the remote option was really as great as it gets - the majority of the learning still being applicable (many teams work via repositories rather than shared drives anyways) while getting to do the whole thing with no pants from my room in Arizona (much cheaper living expenses).
there's a very basic and experimental pidgin plugin at https://github.com/matrix-org/purple-matrix, but the impedance mismatch between purple2 and matrix is pretty bad (eg limited support for synchronised conversation history). It needs more features before it can be used in anger - patches welcome ;)
There is no "structured environment" when you get a job in programming. You are given goals and you need to get the result through learning and problem solving and just trying to make the damn thing work.

If the only context in which a person is capable of operating is one in which they are "taught" then they aren't suited to programming.

You have to do it on your own eventually so many as well get started on the task of becoming good at that.
Wonderful Incense for a Casual Outfit – The Emporialist│street Fashion Magazine
Unraveling Möbius strips of edge-case data
I don't believe the impact of changing autocomplete results would sway many peoples votes. It may be unscrupulous by Google, but when most people search, they use autocomplete for convenience and not to look up things they weren't otherwise searching for.
How to get a job in Venture Capital
Right, because you can hire from the graduating class of Stanford, Berkeley, CMU, MIT, etc., and instead you choose a Walgreens Shift Lead from a "coding bootcamp."

Sounds legit.
c'mon, harmless to us Russian folks (=> doesn't count :P ),
AND NO COOKIE BONBS in the list, you are fine, too!
I love the Sweet Valley High series. Glad to see it's enjoying a renaissance of sorts.
I think it was just a corporate firewall issue. That manifests in odd ways that don't always point clearly to the firewall.
https://news.ycombinator.com/item?id=11858962
The attention to detail on the show is amazing. For example, during their move to the new office I noticed that they had Corovan moving boxes. If you don't know Apple uses Corovan exclusively and if you've ever moved offices chances are high that they moved you. Not sure why but it was amazing to me that they bothered with a detail like that.
So I am not alone! Thought this was a satire of sorts at first.
In last Sunday's show they were ramping up to launch a beta of their product and had a closed alpha session where the team could give out access codes to close friends. The three team members, all engineers, got universally positive feedback for how great their user interface was. Well except from Monica, who couldn't quite articulate why it was just off to the casual user [1].

[1]:http://www.piedpiper.com/app/themes/pied-piper/dist/images/i...

Essentially everyone in the engineering team's social circle either were engineers themselves who wouldn't recognize good design if it hit them in the mouth, or intentionally did not give criticism of the product in order to suck up to the promising new startup.
That >$40k+interest in loans still gets paid out of your pocket.
After browsing that user's comment history, it certainly seems like he's trying very hard to have some interesting stories to tell. Make of that what you will.
I quite enjoyed this documentary. It was on Netflix for a time, might still be.
Many moons ago, and it was mostly a developer telling a sysadmin "My code should be working a lot better than this!" and the admin saying something about "I told you, your shitty code isn't taking advantage of the awesomeness in this AMD chip!"

I think it was back in the day of the Pentium III vs some AMD Athlon. I don't remember the conversation verbatim, i was too busy petting my G4.
I had a resurgence of the LAN party while in Iraq (07/08): the internet access was sufficiently slow, so we played C&C Generals quite a bit.
I didn't notice that comment. It's bad because it's a shallow dismissal, but yours were worse because you called names and conducted yourself flamewar-style, and you did it repeatedly in the thread.

I don't think it's hypocritical, for a couple reasons: (1) it's impossible for us to read all the comments, and (2) one bad comment doesn't justify another.

HN is not a good place to "call that person out"—that just causes threads to degenerate nastily. On HN, an appropriate way to respond to such a comment might be to remind the commenter that unsubstantive dismissals aren't helpful, and then point out some relevant good things about the article.
50k to 100k median doesn't seem too far fetched to me. Myself and many people I know were in that range.
https://news.ycombinator.com/item?id=11846626
Yes. Come to Defcon and/or QuakeCon in the US. There are others around the world, but I'm assuming you're in the US. It all still exists and young people are still into it. The tech scene is just huge now so this stuff is kinda considered niche / underground, but it's still definitely a thing.
This isn’t hype: Canadian doctors just reversed severe MS using stem cells
Taking some time to read through that thread, the only conclusion I can come to is there are some anti-Tesla fanatics who are working very hard to find any signs of defects and then fan the flames as much as possible.

Looks like the same troll coming back several times under several different accounts to push the narrative of deadly failings of the Model S.

The sad part is that, while the anecdata are scientifically useless, the effect of reading all that non-sense has succeeded in planting questions in my mind about these components.
https://news.ycombinator.com/item?id=11821654
s/hear/care/

BB users by and large consider government surveillance irrelevant.
My WWDC 2016 Wish List
Yeah, im gonna call bullshit on this one too.

You got into google because google actively recruits military vets, not because of the bootcamp experience, which might have helped get you over the hump, but unlikely caused it.

It took you 3 years between shift lead and google.

~your lovely neighborhood ex-people search engine founder.

P.S. thank you for your navy service (in all seriousness)
We do have a similar equivalent to XEP-0357: http://matrix.org/docs/spec/push_gateway/unstable.html. We can and will make Matrix do smarter than polling though, especially for the case that GCM isn't available. For instance you could use the websocket transport that's available today.

Glad you like Olm :) I think OWS are trying to find a way for their impl to be appstore compatible too, so hopefully the user wins twice over!
For httpuv, author Joe Cheng advised cannot do a websocket-client.
https://stackoverflow.com/questions/28120307/how-to-interact...

Looking forward to the improvements. Appreciate all your work in the field.
Last time I checked, a lot of Android phones in my region (including new ones) were running 2.X versions with some unnamed browsers (probably webkit-based, but not chrome). For me that's much more issue. I can live with Safari, because there are 2 actual versions (iOS 8 & iOS 9) and they are modern enough. But those archaic androids with unnamed browsers are nightmare that I have to support.
I like that each folder displays the kinds of files it contains.
This is pretty horrible. How can this happen.... Taking advantage of poor, the weak, it is just the lowest.
Fair enough, but what happens if I open a page, send an Ajax call to say "add 1 user", then promptly close that page? I don't know what OP is doing to detect that a user is no longer on the site.

The reasons why I used WebSockets are that I get a disconnect event immediately, and I was already using WebSockets for other features on the site
Tensor Flow v0.9.0 Supports iOS
One of my favorite parts of the show is the opening credits. Being an old Netscape employee, I still get a little sad when I see the Netscape logo fall off that building, only to be replaced by Chrome. tears
Buried in the original form thread[1] there are links to two articles[2][3] about drivers who died when they drove off cliffs in their Model S's. These are absolutely chilling to read in light of the potential suspension issues…

1: https://teslamotorsclub.com/tmc/posts/1573665/

2: http://www.dailynews.com/general-news/20150623/man-who-died-...

3: http://www.pressdemocrat.com/news/3318773-181/marin-county-d...
That someone can go from healthy and happy to dead in a few short years is unnerving.

The shorter that transition the better, I always say.
Such disrupt. So convergent. Wow.
If the "victims" don't go to the police, then the alternative is we all slowly devolve into a world of smearing, guilt-upon-accusation, witch hunts, vigilantes, blackmail, shared-make-believe and anarchy.
> Linux would have succeeded with or without Oracle, and I find it sad that you would try to re-write history to the point where it would seem that without Oracle linux would have remained a toy.

Ehhh... I don't see where he claimed anything about that. I see "Linux was a toy. Oracle helped make it not a toy." But, nothing about what would have happened otherwise. Be careful not to get sad over things not said. Principle of Charity and all that...
Do you have a citation for that? (genuinely curious - I tried to find a list of what an 'acceptable period' for lifetime would be but couldn't find one, for any goods). I know Apple products have a 12 month warranty, but are subject to at least a 24 month warranty/guarantee given the 'reasonableness' test. I'd find it hard to believe that a reasonableness test would find that a $500 iPhone is expected to function for 2 years, but a $150,000 luxury vehicle is only expected to function for 12 months.
My pleasure! I appreciate your reading immensely.
Parent is being disingenious. They held 5 positions (plus military reserve) over a period of 4 years between "Walgreens Shift Lead" and "Web Application Developer" at a staffing agency.

I, too, got a six-figure "raise" from middle school to today.
I think programming is more about problem solving than math - now if it is math based problems then math is a desirable skill. But even with dunderhead math skills you can google up most answers and learn solutions. Ive applied and learned more math than I had in school through developing stuff.
There's two parts to Bluray: the storage medium and the specification for the data on the storage medium. You can burn and read bluray disks with a filesystem, and presumably you could use your bluray reader with those kinds of disks. People who don't want to use their bluray reader to watch DRM-encumbered media don't want to pay for a licensed device.
Even if you were ever so slightly indirect, you just literally described Blackberry as equivalent to assisting the Nazis. The apparently intended parallel is that the US government or Canadian government is the same as the Nazis.
> 1) Candidates were gaming the admissions process -> we rewrote it.

Would love to hear a more thorough explanation of this.
Anthropology long ago over turned the "noble savage living in peace" idea that you seem to be promoting here - violence, rape and theft were and are common - even look at chimpanzees our closest cousins. Power law distributions of wealth come from economics, and laws are there to enforce our human understanding of fairness against our human nature of selfishness and greed.
I meant that thiel has over time gone from an ayn-rand style objectivist libertarian to a squishier on "voluntary collectivism" principled stance that aligns with the nap more than less
Thanks so much for the feedback!

The no styling done to the select drop-down is on purpose, as Wing is designed to be a base.

The hero image is not because of Wing, it is just...there. I am working on that ^^

Yeah, including two webfonts is pretty heavyweight, but they don't add too much to the speed of the framework loading. If you don't mind, which one do you prefer, Open Sans or Quicksand? Maybe I can just include 1 webfont :)

Thanks!
Well, I'm not your "friend", pal! But seriously, did you even read the article (or any other ones covering this)? The Iceland corp. also used the technique to remove H2S and other noxious gases released when harvesting the geothermal heat. They decided to study what happened to the CO2 as well and it turned out they came up with something new and interesting.

TL;DR: the only people who see this as a "worthless pursuit" are those too blinded by their own political nonsense to even bother looking at the science.