skysight-inc/HackerNews huggingface dataset:
Ask HN: Can someone please review my code?
I recently did a work sample in Rails for a company which I will not name. I felt pretty good about it when submitting it, but I was ultimately rejected.
They did not provide any feedback because they wanted to keep the hiring process under wraps, and I respect that. The problem still remains that I have no idea what I did wrong or what I need to do to improve.

So I want to ask you to review the code and let me know what you think. I will not post this work on a public site, because I want to respect the wishes of the company.

So my idea is to post it on bitbucket in a private repo and if you wish to review it, I will add you to the repo. I understand this is a lot to ask for when asking for feedback on the internet, and if there is a more straight forward way I have overlooked, please let me know.

My goal here is to understand what I did wrong and improve while still respecting the wish for secrecy by the original company.

Thanks a lot in advance

[edit]

I posted this request here and on reddit and I got same feedback - post the code on github. So I have done so. It can be found here https://github.com/saq7/rails-work-sample/
Try Reddit.
Ask Peter Thiel to fund his litigation against the state and to put up his living expenses until he wins.
No. Not without a massive shitstorm.

The Queen is tolerated because she's seen as an almost entirely symbolic figurehead without any actual power, and because the alternative would mean a President Blair or President Boris or something equally terrible.
Create Your Website Today with These Powerful Website Builders
[Web Developers] a guide to setting up a killer front end workflow with Gulp
Sounds great. Anybody want to give Peter a heads up? :)
The glow of outward success may very well be a lagging indicator of eventual failure, if not the cause. Companies, nation states of years past can also follow this rough pattern.

http://www.historyguide.org/europe/kennan.html

> This phenomenon brings to mind a comparison used by Thomas Mann in his great novel Buddenbrooks. Observing that human institutions often show the greatest outward brilliance at a moment when inner decay is in reality farthest advanced, he compared one of those stars whose light shines most brightly on this world when in reality it has long since ceased to exist.
That's all relative. For me, I could go home and retire off of 500K, just drawing off the dividends, but I'm from an area that is exceptionally cheap in the US.
> I'm not a lawyer, but no one here has satisfactorily explained why this group running a fake NRA ad is a different animal from SNL running a fake McDonald's ad.

Maybe because:

> Saturday Night Live has been running parody advertising purporting to originate from real organizations for decades.
FYI: you can reply to any comment by clicking on the n [minutes/hours/days] ago link.
I was referring the SS reference.
Yeah, IMO it would have been entirely reasonable for StartCom to revoke the cert for free and cancel the account.

Also, the flip side of this is that occasionally (but very rarely), people want their private key to be a publicly accessible. See http://readme.localtest.me/, where everything else .localtest.me resolves to 127.0.0.1, and they tried to post a wildcard, but it got revoked.
Makbara مقبرة الفايسبوك qiwdz – ضحاياك
I think you have to sue them. My understanding is if you don't defend it you lose it.
Weird. Not anything I can see immediately. However this is an ATI 6970 I EFI flashed to work on a 2008 MacPro.
I'm using the assumption that intelligence is a linear relationship to the quantity of intellectual phlogiston in the skull.
That's a great thought.

Do you know of any online Christian outlets or forums that might be open to promoting Ray's GoFundMe?
I'm gonna disagree with you. I've run my own mail server for my primary email for years and very rarely have any issues.
Meaning if he ran cat5 cables for the Army he can run cat5 cables for anyone else.

Unfortunately I can't imagine many private companies are in need to of the skills one learns in the infantry.
Convicted persons are usually referred to by full name for specificity, to distinguish them from others who might have similar names.
Police reports and other legal/municipal documents usually contain middle names, so that's why we often know famous criminals (e.g. Lee Harvey Oswald) by their full names.
Just going off the public numbers for one of google's ASNs[0], with the amount of public peers they have (and likely far more private peers, and I'm just assuming google doesn't buy transit and ignoring that), it's unlikely that a DDoS would ever cause an outage for more than a small subset of people. You may be able to saturate a link or two, but that's not difficult to route around generally.

That is of course only for network saturation DDoS, I'm sure there are ways google could be ddosed at the application or server level, but they likely have enough infra in place to be able to eat the attack without anyone outside of google noticing.

[0] https://www.peeringdb.com/net/433
Open basedir config, separate /tmp, insecure function blacklisting... tons of stuff, php-fpm is the starting point - yes.

It takes much more manual work to set everything correctly than running a python application.
In the onboarding, you can see that the idea is to teach about the basics of ciphers. ie "early ciphers shifted the letters of the alphabet". So this is for lay users who haven't been exposed to the basics.
Can you expound a little on what makes if difficult to recover the funds? What hoops must one jump through that wouldn't be plainly evident in RLJ's particular situation?
Eek, went through the same thing except we did it for a whole year. Skillset or not, sharing core values/beliefs is most important. Because when shit goes south, if you have someone who is just as committed as you are (for the right reasons), there is nothing you can't overcome when the core values align.

Although this is really hard because people show their truest faces when shit goes south. So you won't know for sure unless this is someone who you've spent and enjoyed spending lots of time with for a while.

After spending time thinking critically about the past year, here are some rough open-ended questions I've come up with that I think would shed light into one's core values.

How do you approach solving a problem (any size, scope)? What locus of control do you believe in? Is there value in rolling up your sleeves?
Etcd v3: increased scale and new APIs
Agreed, and the reason I am sitting here in Upstate New York, making way more(cost of living) adjusted than I would there. Though it can be argued you're paying the experience tax working for big names there. But it doesn't interest me.
If that doesn't work, maybe Thiel has an extra pair of bootstraps to loan the young man.
Have you tried contacting a social worker in their locality?
Is this real sms or smtp sms?
We are referring to Social Security type programs, not private pensions.

I'm 32 have little doubt that my private retirement accounts will be seized through taxes by the time I retire, but that's a different issue.
Thanks! Let me know if you find any issues.
Yep, Soylent has helped me get better about this, and having the will / foresight to not bring unhealthy things into my house makes unhealthy late-night snacking more involved than going to the kitchen, so I'm less likely to do it.
Building a sampling profiler with 30-year-old technology
We've already got plenty of bandwidth for remote desktop, latency is usually the remaining problem.
What happens when the author chooses not to take the money? Does the "organizer" get to pocket it?
The cost of CPU and bandwidth to process 160 byte messages is a rounding error compared to the fees from the mobile networks.
The Side-Hustle into Venture
Thank you for publishing the results of this survey. It has inspired a similar survey for the Nim programming language[1] that is still open, so please take a look if you have a spare couple of minutes.

It will be very interesting to see how the results differ between Rust and Nim.

1 - http://nim-lang.org/news/2016_06_23_launching_the_2016_nim_c...
No offense, but your original statement on this matter was very misleading to say the least.
The irony of course is that jihadists seeking to burn down libraries will unwittingly desecrate copies of the Quran.
So lobbying is the equivalent of murder.. but the party accepting the bribe.. that was entrusted to protect you from murderers.. should not go to prison?

Frankly, in this picture you've painted, I'm not sure what the point of this bribe accepting party is. This is like having a body guard that might shoot you if there's a higher bidder. The whole point of the body guard is to protect you from killers, but now he's shopping around for contracts on your head. It's almost like the State having a monopoly on violence is paradoxical to it's alleged end goal.
You may do that? You absolutely should. You're promoting his cause. See if you can have space in the program to talk about his transition and the financial assistance campaign in particular.
Are there any job boards for businesses that would consider hiring felons (or innocent folks waiting for record to clear)?

I had no luck finding legit sites with a quick Google search, but maybe others are aware of something?

If nothing exists, that sounds like an interesting development opportunity.
Hmmm....That's basically where I am now. I look at what my superiors are doing and it's just constant meetings with the occasional writing up tasks and doing code reviews, pretty much nothing else. I'm not sure I want to get promoted into that role.

I've had project management roles before, but the meetings were minimal and I still got to code at least 40% of the time.
Don't discount M2M either, all four carriers have a lot of M2M lines that likely get counted in this.
The CA determines "permission of Google" by "can put something on a web page at google.com". This is well-accepted, and as long as the CA's own connection to the internets is hard to MITM, it's pretty reasonable for what domain-validated SSL does. (If you want more security than that, try EV, or something other than SSL.)

Usually, "a web page at google.com" means to put a specific, CA-picked string at a specific, CA-picked URL. The ACME protocol has you put it under /.well-known/, which is reserved for this sort of thing. Other CAs will give you a randomly-generated filename. The intention is that you shouldn't be able to, say, upload a file to GitHub or some forum and claim control of it; you actually have to operate the site.

StartEncrypt neglected to enforce that check.

For google.com in particular, when you click "Sign in with Google" to a third-party service, it sends you to a URL on google.com, and google.com will redirect you back to the third-party site when it's done. What the attacker does is they set up their own website and enable Google sign-in on it (which anyone can do without Google's permission). Then they sign in, and save the URL that's redirecting them back, and send that URL to StartEncrypt. StartEncrypt dutifully follows the redirect when fetching content from google.com, and tricks itself into thinking the file was actually at google.com.
You'd think so (I know I did!), but I was floored the first time I started up Xombrero and saw that with only one tab, it used less than a sixth of the memory that Chromium uses. Xombrero has quickly become my favorite browser, though I only used it in the first place because I couldn't get any other browser that both 1) was not sludge on the Raspberry Pi, and 2) supports the modern Web (HTML5, CSS3, JS, ...).

It's not perfect by any means, but it is now my favorite :)
Besides the US no other country is so picky about "sexist" comments. This is a completely normal attitude in other cultures and not sexist at all (for them, might still be sexist for you).
I believe you miss the small detail that "El Pais" and other Spanish newspapers and media are technically bankrupt because of Google.

Google and Facebook grew their profits by advertisements, traditional media (that did not innovate anything) lost all this revenue.

So they(traditional media) are terribly biassed against Google and make everything they can to harm the company. They destroyed Google News for example.
>It's important to note this is not just controversial content, it's outright libel claiming false official sponsorship from real organizations.

Are you a lawyer?
Not much, since this is just an alpha to see if the concept interests someone. I am using it for many things, nothing very important, and I recommend it for this kind of uses, currently.

Later, if more people start using it, I'll enhance reliability.

---

I don't know how reliable Zapier and IFTTT are. I've had problems with Zapier failing silently in the past and I guess they have many hidden bugs in that mixed bed of integrations they keep.

As RequestHub is simpler, with a few tweaks has the potential for being much more reliable.
It seems you could just use PNG, but swap out the deflate step with Brotli.
The common market has four freedoms: Freedom of goods, services, capital, and movement. They come as a package. You don't get access to the common market without accepting freedom of movement. EU countries said that before Brexit, and they're saying it after Brexit.

So, we either accept freedom of movement and get access to the common market. That will be deeply unpopular with the people who voted to "take back control of our immigration".

Or we reject freedom of movement, and accept that our trade deals are going to be hobbled.

People seem to think that the EU would never do that because capitalism. You only have to look at stupid shit like wine lakes, butter mountains, cheese mountains, milk lakes, etc etc (Holland even had a shit lake in the 80s [1]) to see that the EU is more than capable of doing sub-optimal stuff.

[1] http://articles.chicagotribune.com/1987-10-18/business/87031...
If a device doesn't work for the purpose for which you built it, then you built it wrong. I can't help with that. What I can potentially help with is finding the purposes for which the EM drive mechanism can be useful, but I'm not there yet: The phenomenon is not yet understood well enough to determine those purposes.
A third and equally useful possibility is that we might learn to correctly and productively apply the current theory in a situation and configuration where previously we did not know how to do so.
Has he expressed what kind of work he would like to do if he could?
Sure. There are two primary issues.

First, the standard for being compensated is higher than the one for being let out of prison. Ray is free right now because the state has admitted that it no longer has confidence in his conviction.

However, it has not affirmatively conceded his innocence. That may sound pedantic. It let him out of prison and admits he isn't the target of the ongoing investigation. But from a legal perspective, it makes all the difference in regards to whether he is actually entitled to compensation.

Second, even if the State agrees that someone is theoretically entitled to compensation, there are significant budgetary delays. State law requires public hearings before funds can be appropriated, so sometimes you have to wait months upon months for the funds to be allocated... much less actually delivered.
Language is a lossy codec for thought.
(Six hours later correction: I should have said when the fuel is not in the vehicle.)
One reason, perhaps, is that too many "differences between genders" discussions (whether it's from one side or the other) devolve into unhelpful discussions about confirmation-bias style "superiority" or "discrimination" and the like. Discussions that try to honestly determine more fact-based reasons for the differences (whether it be biological reasons or social constructs) are rather rare.

In this case, that observation was part of a "I have strong hacking skills" boast. So more "oof" for the awful overall tone.

I personally suspect a bit of Dunning–Kruger here. My hunch is, while it is true that women in infosec are rare, there probably are women in infosec that have quite a bit stronger skillset than this guy.
Do you have a link to anything more concrete about that?
Rust Community Team here.

Yeah that was a mistake. We were trying to cut out redundant questions, but it would have been so easy just to split this into three answers. We might be able to split this out based on secondary information, but we didn't finish that analysis in time for this post. Maybe we can get it into a future post if we trust our result.
Are disabled people "under represented in technology"? Just a question... I have fused wrists from a motorcylce accident. It's inconvenient and I cannot drive or play most sports, but I don't consider myself disabled. Am I under-represented? Do I self-identify as disabled? No. Would others in my position? Maybe... I guess that's a question about disabled threshold...

Do wheelchair bound people identify as "under-represented in technology"? I don't even know. All I know is that some of them may say yes, and some of them may say no. So we don't know who is in the 81%.

Gay - are gay people "under-represented in technology"? Somehow I doubt it. Again same problem. You're gay. You're part of a minority group, definitely. But are you "under-represented in technology"?

Wouldn't it have been better just to spell out the categories and ask people if they are in them? "Are you white", "how old are you?", "black", "gay", "trans", "female", "disabled" etc?
I think sticking with the GoFundMe campaign is probably the best way to go. But since it has stalled, it needs to be reinvigorated through some others means. You need to get the attention of someone in the media who will publish an article on the guy. Multiple articles from different publishers would be ideal. If a few medium to high profile companies put something out there you can definitely meet (and probably exceed) your goal. Think of the influx of donations that would pour in if you made the front page of CNN, MSN, BBC, etc.

If you have social media accounts, post the links to your GoFundMe page and the personal website you have listed above out on Twitter, Facebook, etc. Better yet, include them as responses/messages directly to accounts held my media corporations because someone at that company is reading them to monitor their PR. And I bet most of the employees subscribe/follow that account as well - and they might see it and pick it up. Example - "Hey @MSN, this story needs to be spread. Please help this man get his life back. http://...."

I also just made a modest donation in support of this cause.
If Peter helped this man to get on his feet and find justice, that would be a very noble act. I'm personally willing to donate this exonerated man a computer and teach him how to code user interfaces remotely if he wants. If I could afford to do more, I would. OP Please e-mail me at eddie@trycontractit.com
Woah, thanks to all the HN posters who just started donating money!!! That's REALLY generous of you guys. I appreciate it, and so does Ray.
https://www.reddit.com/r/IAmA/comments/4q0c3k/iama_law_stude...
They don't currently for their attached 4G services (up to 30GB for $120 a month) so there's clearly no reason to expect they would/will for 5G service.
Part of eIDAS is e-signatures for things like documents, the other part is interoperability between the eID systems of the member states so that e.g. Dutch farmers living near the border can use their eHerkenning[1] account to log in to Belgian government services and vice versa.

[1]: https://www.eherkenning.nl/english/how-does-it-work/
Title is a bit misleading, Google is part of a consortium with KDDI, SingTel, China Telecom, China Mobile, and Global Transit. Google owns a single fiber pair in the cable (of 6), so they control their own optical capacity. They have a design capacity of 100x100G currently on their segment.

Google is also the sole owner of the cable segment between Japan and Taiwan, likely connecting to their data center in Changhua County.

This is one of 4 cables Google has invested in in some form, and the 2nd transpacific one. The first being the Unity cable. Google also invested in Monet and Tannat, cables between US/BR and Uruguay.
"one of my greater philanthropic things that I’ve done. I think of it in those terms"
Yeah, latency is the issue.

I have fiber at home. About 50/50 Mbps goodput and 15 ms latency to home VPN using 4G. Remote desktop is pretty fluid. While I can notice the extra latency, it's not a problem in any way. For example Bluetooth mouse latency is worse.

Even full screen WebGL/CSS3/whatever web apps and full screen web video work well.

Some tips: Don't use any TCP based tunneling or VPN solution, like ssh or OpenVPN over TCP. They're bad for interactive use.

Measure, mobile devices have different 4G performance profiles, and that includes latency. You can have up to about 5 ms latency difference between a new flagship model and some low end 4G phone.

Desktop applications other than the browser tend to be less demanding.

Although games are not my thing, playing PS4 games remotely works also very nicely on a Macbook over 4G. Just need to have a PS4 controller and a USB cable. It just works. Very near to local performance. There's some kind of NAT traversal, so you don't necessarily even need to use VPN.
Instead of commercializing it's unique technology, it should cloud host MongoDB because some arbitrary ranking says it's more popular?
That is low. A good formula would be to treat their stay as if it were forced employment. They should be pro rata'ed 3x the annual median household income annually (since it's a 24 hour a day commitment). And pay tax on it. It's still kind of unfair for a rich person but rich people don't usually get caged unfairly. Maybe some danger pay too if that's a factor.
So is the implication is that if $SaturdayNightLiveRipoff that just started filming this year decides to do something similar, they don't get the same leniency simply because they're new?
1. depends on if you need to build custom modules/plugins. Alot of the functionality that you seem to need can be created using already created modules(plus my experience is that if I'm thinking I need to build a module one is already out there.)
2. I've heard they are trying to make this better, but it can be wonky. A lot of times developers will wait 3-4 months to allow modules to catch up to the new version.

Another option may be Backdrop (backdropcms.org). Which is working on maintaining backwards compatibility.