skysight-inc/HackerNews huggingface dataset:
It really depends, common stack don't mean that much. Depend what app is doing, how much dependencies it has, with what external services it talks, etc. Also 5k, 10k - this would price per day. And then you hire guy/company for day. It depends from app, but it might take some time.

Security is not cheap.

Disclaimer: worked for such company.
How to get `create-react-app` to work with your API
I'd be more willing to call it genius if it weren't so popular with sites that can't deliver. Forcing people to click "I don't want to get rich" when your site is pushing crappy stock tips just seems like a way to make users hate you.
Great story, thanks for the different perspective on things. I did giggle at the title here on HN though.

"... That cannot be bought."

I guess MM, being an acquired CEO could be considered bought. It just didn't give the result they wanted..
Algorithmic Trading System Design Opening Range Breakout
>introducing other employee-unfriendly policies like banning remote work

I heard for friends working at yahoo that this was perceived as positive by a lot of employees at yahoo.

for years yahoo was so directionless that there were a lots of people who were simply slacking off using wfh as an excuse. This was breeding a lot of resentment among people who were actually doing work.

Sure it might have hurt honest wfh workers but saying all companies regardless of their situation should allow wfh is not fair.
What Travis learned about CI from analyzing 2+ million builds
I love Donald Trump voters
> wether the ASLR is worth much in first place, given there were successful bruteforce (and other) cracking reports for other platforms proud ASLR implementations.

That is because ASLR, by itself, is almost totally worthless, and is meant as a stop-gap to stop certain direct code attacks (vs "data only" attacks). It is a stop-gap because most modern systems are completely riddled with things like infoleaks, and you only need to leak one pointer to actually defeat the setup completely.

The real vector that's sitting around to be killed is control-flow based exploits (e.g. ROP, simple stack smashing, vtable ptr overwrites, all those de jour exploit techniques). You need a powerful form of control-flow integrity to stop this at the software level. You also need a method to actually help mitigate information leaks so they can do less damage, and increase attacker cost (e.g. "execute only pages" are worthless if all users have the same kernel image. I can just download your GENERIC kernel elf image, and just find the opcodes to do e.g. a ROP attack anyway. grsecurity uses compiler plugins that randomize kernel stacks and the compilation method with a particular private seed, at compile-time, so every compiled grsecurity kernel is different from the last one).

TBQH: FreeBSD is probably better off copying the other twenty gazillion exploit mitigation features from grsecurity that can reasonably stop exploits, even by themselves, dead in their tracks - like UDEREF, KERNEXEC, refcount overflows, triggering the kernel on unmarked signed overflow, the compiler plugin features, etc. Those will actually ban classes of exploits outright, every time, and always work, without wasting time through lots of wincing over the finer details, like ASLR.

You won't get to parade "look at our weak ASLR implementation!" (thankfully), but I feel we already have enough of that going around.
Maybe they are starting a new service to spin up engineers on demand as part of AWS.
What kind of person assaults their manager because a company has to downsize?
> Okay so a deploy to prod should be able to require a stockholder voter?

Well, every deploy to production in any company is the result of a shareholder vote — it's just made obvious.

By using delegation and certificates, an employee who is delegated authority to deploy to production can do so without requiring a majority of shareholders to actually vote on that particular deploy.

That's pretty awesome.

> This sounds like a Utopian paradise not the realities of IT in 2016.

We've had the ability to do this for almost twenty years: it was made possible by RFCs 2692 & 2693 in 1999. The necessary processing could be performed in a split second.
It really depends on the individual situation.

The biggest cost variance is in housing. In the Midwest, you can get a 2,500 sq ft home for ~1.3k +/- $350. [0] Under normal leasing standards (no more than 1/3rd your income to rent), you can pay that if you have a job in the $50k-$60k range. And that's almost the standard -- big houses and big yards for everyone.

In LA or SEA, you're looking at 2.5x-4x that, which is at least $3500/mo. [1] Under normal leasing income standards, you'd have to have a salary of $140k+ to barely meet the minimum requirements, and that's for a "cheap" rental home. The other option is to live way out in the burbs, where prices are probably closer to 1.5x-2.5x, and spend 2.5 hours commuting every work day.

(In SF or NYC, you probably can't obtain a comparable living situation, but a 2500 sq ft apartment apparently runs around $15k/mo, meaning you'd have to make almost $1M/yr to barely afford one)

If you're a single person or just have a partner, you can probably take a hit and go from a $800/mo 2-bedroom apartment @ $55k to a downsized $1600/mo apartment @ $110k and still make a lot more money than you did in the place with a lower CoL (even after calculating a 30-50% increase in the cost of some goods, like utilities, gas, and food).

However, if you have kids, this quickly becomes impractical, because it's way harder to jump from a $1300/mo home @ 60k to a $3500/mo home @ 115k.

For extra credit calculate the change to net pay based on differing tax laws. This is especially large if you're coming to CA, which has the highest state income tax in the nation at 13.3%. Most Midwestern states have tax rates between 4 and 7 percent. Some of the most populous "flyover" states (Texas and Florida) have a 0% tax rate (and to Amazon's credit, WA does too). [2]

[0] http://archive.is/OKMTb

[1] http://archive.is/8R5aI

[2] http://taxfoundation.org/sites/taxfoundation.org/files/docs/...
Results of the grand C++ error explosion competition (2014)
Everyone's mileage may vary. I've been at Amazon for 3 years in 2 different offices on two different orgs (Vancouver-AWS, Europe-Retail).

I love it, and I don't know anyone that left disgruntled or unhappy due to being burnt out. (A couple of people I know left because they didn't want to do any oncall at all anymore, but noone was misled, and as far as I know they are not bitter about it)

But, the key is that there is no one "Amazon". A lot of freedom is given to each individual team and org, and as a result wild variations in work culture and expectations. I know teams that are great, and I know teams that are tougher. But, my reasoning for why those teams might be difficult to work with is because they are working on new bleeding-edge services (AWS, Echo/Alexa), and as a result there is a lot of pressure to stay ahead of our competitors. Which is completely understandable when Google and Microsoft are either just behind or just ahead on everything.

Maybe I've just been lucky? But I work with a lot of teams in a lot of countries, and generally by and large people are challenged and content.

I'm not saying there are no problems. And I'm sure all the people in the NYT article are not lying. But at a huge company of 200,000 employees, there's always going to be some unhappy and disgruntled people.

I don't think I'll be able to convince you otherwise - I am a city-dweller through and through, so I sense we have probably quite different personalities.

edit: I should acknowledge that I don't have direct experience with American work culture. Y'all work way too many hours, but that's not just at Amazon. And Silicon Valley is even worse.
That could explain the anti work from home policy but what about buying that pre-teens app for like $15M. What did that accomplish?
That's a bit cynical, but even it's true, it has no explanatory power. Specifically, that's not a reason for MS to put time and money into making a feature worse.
I'm at a new job where the "old team" of two developers is being replaced by 5 devs... the old team had ~15 years of experience and can't code their way out of a wet paper bag.

Not saying anything about YOU... experience is important... but 15 years experience doesn't mean 15 years of good experience or lack of bad habits.
Not defending it, but when you and your fellow engineers are spending a majority of the time interviewing instead of programming, such a system is certainly tempting.
Internal Amazon recruiters don't make commission. The likely scenario is that candidate was initially tagged for a senior position, but during the interview only qualified for a lower band offer.
We announced yesterday that our team joined Google, and as a result we've open sourced pretty much our whole codebase. This also includes our in-app user analytics platform, https://launchkit.io/users/ -- as well as the more popular web-based tools. An overview of how it works appears in the README as well as a how-to guide for easily spinning up an instance with Vagrant/Ansible.
> I was expected to be on webcam the entire time to verify identity and prevent cheating. No joke about the entire time part - there was a reminder to get any water or office supplies I would need before sitting down, because the interview would be terminated if I left the frame of the cam.

That's new and stupid.

I'd tell them to get fucked.
I remember that is was usually claimed that Yahoo's valuation (net of Alibaba's stake) was either zero or negative.

She was able to sell it for $5B.

That sounds like an amazing success story.
The Microsoft offer was for $45B: http://news.microsoft.com/2008/02/01/microsoft-proposes-acqu...

The market cap of Yahoo was still around half that when Mayer was appointed. But that was all from their stake in Alibaba, which has already been spun off. The rest of Yahoo had a negative value, I think. So it's gone from 0 (conservatively) to $5B.
I think that's easier said than done when a company is going down, as we've witnessed through Yahoo. That's exactly what she tried to do by hiring bunch of startups but failed, probably because the board became impatient. I know people criticize her saying she did a half assed job of dealing with acquired companies but I'll bet that it's not entirely because of her decisions but because of lack of support from the board.
I've never understood why Oracle was so highly valued by Wall St. Databases have always had FLOSS alternatives. So how did an expensive proprietary solution (with lots of closed and open competitors) become so all-powerful and valuable?

On a related note: anybody on here want to work on some kind of innovative enterprise database startup? (I don't have any ideas, I just want to work on one because I see a lot of potential).
If you can take a job somewhere with more than double your after-tax salary(what you would have to do to go from $50k after tax to $100k after tax) and only double your living expenses, of course you will come out ahead. I don't think that is a common situation for a family unless you either downgrade your standard of housing(smaller, add roommates, less desirable area, increase commute, etc) or are seriously underpaid. For single people it might be more commonly possible. Probably explains why a lot of people seem to come to my relatively high CoL area straight out of school and move away as soon as they start a family.
Ask HN: Which language/framework to learn in 2016? Python, Ruby, or JS/Node?
I'm a frontend developer who is looking to get into server side programming. I have some experience with PHP, but am looking to get more serious about learning a language/framework/stack for the backend stuff.

I've done a lot of googling, and am trying to decide what the best language/framework would be for the following criteria:
- Potential salary
- Job prospects, both now and in the future
- Ease of learning/amount of time it would take

So far, the results of my research have been mixed. Node seems like the hot new thing, while Python returns the most search results by far on any job listing site. Forum posts say that Rails seems to be dying off, but I see a lot of job listings for that as well.

I've always wondered, what stacks do the people making crazy salaries out in Silicon Valley use? I'm willing to learn whatever is best for my career.

Any advice would be highly appreciated.
And facemasks which are very popular in some places.
The superstructure of a house usually doesn't take long. It's all the fiddly bits with site work, foundations, finishes and furnishings that takes most of the construction schedule.
OK, my bad, I got confused with the numbers :)
Heh, I remember Jelena from discussion on devel-random. I would like to correct (mildly) a couple of anecdotes in her article, because I was there and closer.

> A friend relayed this story: The Sunnyvale campus had a building with redundant turnstiles, which required a badge scan seconds after employees had scanned their badges to open the main doors. People complained about it when the building was remodeled years before, and kept complaining through several CEOs. After Marissa read an email griping about the turnstiles, they were gone the next day.

I remember it a little differently. This was Building D, where the executives sit. Before Marissa got there, there were plans to put an additional set of card-activated turnstiles inside the door. (This building is also where the Yahoo store is, and the main reception desk). Yahoo was plagued with leaks, and some people thought that adding an additional turnstile will keep people from tailgating in.

When Marissa got there, she took one look at the turnstiles and said, "this is stupid", and ordered them removed. Not only that: there were card-activated gates in the parking lots, and those were gone too immediately. She didn't want barriers to coming in to work.

And about devel-random, or "d-r": I was pretty active on that. No one told Marissa about d-r, but just a couple of days after she got there, on a Saturday IIRC, she responded to someone on d-r. This sent shockwaves throughout the upper echelons, and soon senior management were clamoring to get on d-r. Most of them dropped out, exhausted by the volume; but she stuck around.

Also: she used to use pine(1) to read her emails. That increased her stature in my eyes, and those of quite a few other engineers.

It's the small things that mattered a lot to the battered egos at Yahoo; and Marissa did a lot of good. She was the best CEO of all the ones Yahoo had seen, bar none (OK, I wasn't around during Koogle's tenure).
Books in the 1700s and 1800s are no longer under copyright, they are now in the public domain. Anybody can sell them for whatever the market will bear. Since they are not longer under copyright, there is no longer a copyright holder whose rights they are infringing and thus nobody that can charge them for violating copyright law.

The question with Highsmith is whether she still holds the copyright or whether she put the pictures in the public domain. Answering this could be very interesting.

The other angle that I would expect to see come up is whether Getty can sue (or threaten to sue) over pictures that they clearly do not hold the copyright to. That seems to be a clear violation of racketeering laws. https://en.wikipedia.org/wiki/Racketeering

Ref:

* http://www.copyright.gov/help/faq/faq-duration.html#duration

* https://en.wikipedia.org/wiki/Public_domain "Works in the public domain are those whose exclusive intellectual property rights have expired, have been forfeited, or are inapplicable."
> If you make $80,000 in a small midwestern town, you're coming out ahead of the guy/gal pulling six figures in SF.

Home prices have risen much more quickly out West than they have in the Midwest. If you're in a position to buy a home, I recommend factoring this into the equation and plan as well. It can be a great financial investment to move out west for at least two years, then back to the Midwest after selling or renting the home for some time.
Understanding the feeling and following through with it are two very different things.
Last time I checked, USA was far ahead of the UAE in absolute and relative numbers of regular executions (and we don't count drone strikes now).
My counter arguments are not to defend the UAE, but to widen the perspective and trying to tell you to compare the country more to its neighbours.
It's a pity, of course, that democratic traditions and general acceptance of human rights are not existent in most middle eastern states.
Women in UAE enjoy relative freedom compared to surrounding countries (please pronounce: compared to. Of course it is not western-democratic style). They can wear the hijab or go to the beach in very short bikinis, just as they want (or, to be fair, as their tradition of the family is). In general, I did not feel unfree in the country.
Interesting to see how CloudFlare is generating certificates. I never looked very closely at the certificate for my domains but I see they batch them together with others. This happens to contain all the domains I have registered with my CloudFlare account.

*.cobaltlightning.com
cobaltlightning.com
*.crimsonapparel.com.au
crimsonapparel.com.au
*.davesweboflies.com
davesweboflies.com
*.drjoe.ca
drjoe.ca
*.echointeltech.com
echointeltech.com
*.goel.io
goel.io
*.hodinhvietnam.com
hodinhvietnam.com
*.mior.ca
mior.ca
*.odesaemlak.com
odesaemlak.com
*.ontariogradnet.ca
ontariogradnet.ca
*.personalinjury-solicitorsbirmingham.co.uk
personalinjury-solicitorsbirmingham.co.uk
sni26843.cloudflaressl.com
*.szerverit.hu
szerverit.hu
*.teveo.com.co
teveo.com.co
OK, here's my story: Years ago, I visited Washington DC, and at the bottom of the "Exorcist Stairs" (so named, because they were in the movie...) I found a 15-pound iron barbell. I brought it home in my checked baggage. I think that was the one and only time I've gotten one of those notices that they searched the bag.
I'm no biz-geek, I probably can't name a dozen CEOs. But for years, MM's name was called put in every critical mainstream headline about Yahoo, of which there were many. I do not believe that's an accident. I do not believe a man would have been treated the same way.
Per tenant, or globally? And does it have an SLA around this?

(I've learned not to trust numbers that seem too good to be true unless they're contractually obligated.)
The About page was more informative and engaging than the Home page.
Its a dark pattern that you have to ask specifically to get your money back in the form of currency and not credit. I was actually really surprised about this too when I had to get a trip refund from Uber.
> The rest seems more like a COO would do and not a strategic CEO.

Yeah, which of these are tasks a good CEO should see to, and which would be more appropriate or acceptable to delegate to a COO?
This is kind of like "overdraft protection" used to be before they cracked down on it (somewhat).

If you're savvy or have had it happen before, you know to avoid it, but otherwise it's a financial landmine ("profit center") waiting to be stepped on.
I thought at first this was for consumer endorsement of the publisher's ads.

There are some times when advertising is uninteresting and intrusive. There are some times when advertising introduces products/services that I wouldn't have known about otherwise.

I wish there were better ways for consumers to encourage the latter.
> has been hacked by employees or contractors several times over the past 10 years

It's simply an overreaction to risk. Just like insisting the company doesn't treat its employees like human beings is also an overreaction (and gross oversimplification of what is actually a complicated topic).
> technically one can claim recompression is transformative

No, because transformative applies to uses of the work, not the work itself. A recompressed image has the same uses as the original image so there's absolutely no scope for considering it to be transformative.

As far as attaching licenses to public domain works goes, you can do what you like. There are no restrictions. However, you can't claim to have an exclusive license, and you certainly can't claim to own any copyright in the work, because none exists.
That was probably some favor to the guy behind the teen, some VC IIRC. They might not be able to give each other money directly, so they use a useless acquisition for money transfer. Probably what Larry did today.
It's not condescending to point out that Amazon is a company that will at times require people to know their CS fundamentals.
Yup, Ted Cruz learned about this the hard way ;-)

http://arstechnica.com/information-technology/2015/03/ted-cr...
French media’s blackout on terrorists’ identities is missing the point
Smart Contract Development Should Be More Like Hardware Development
I think that was the only way at that point to bring in fresh creative talent. No creative person probably wanted to quit their existing job and leave for Yahoo at that point.

And why would they? If you're really talented, you could either go work for Google/Facebook/etc. (if you want a stable life), or start your own company (if you're adventurous). Yahoo was stuck in the purgatory somewhere in between.
$450 is not a de minimus expense on $100k revenue. Keep in mind that they are negotiating the 2 percent credit card fee. $450 is a significant fraction of that $2,000.
While her great experiences illustrate a caring and hard-working person, I still can't forget writeups describing someone who was unable to develop a product strategy / roadmap in a timely manner, resulting in a lot of miscommunication and execs left in limbo (see the Forbes article written in early 2015).

There's no doubt that it was extremely hard to turn that ship around, so I'm not at all attributing the company's failure to her. But as a product person, at the end of the day, my best experiences with CEOs has never been about whether they've rejuvenated a certain company culture but rather their ability to help provide vision and strategy (among other things).

Furthermore:

> But I know that, if I’m ever in a position like Marissa’s, I want to be the kind of CEO who answers emails from strangers six or seven levels down from herself at 1 AM on a Sunday morning, even when she has a new baby in the house. I want to be the kind of person who has time to hear people out, even when they’re saying things that hurt me.

Honestly, I'm happy when my CEO answers e-mails at reasonable hours and has work/life balance (as much as a CEO can get).
"if I’m ever in a position like Marissa’s, I want to be the kind of CEO who answers emails from strangers six or seven levels down from herself at 1 AM on a Sunday morning, even when she has a new baby in the house."

I'm grateful for this article reminding me why I never really will fit in with the techie fanatics. Yesterday I went home at 5p, after a very productive day, and trimmed plants in my garden, not checking my work email until the next day.

(Well maybe for $200M over 5 years you could convince me to do that. But then it's back to books and gardening and developing pictures)

Also oddly reminiscent of this post from yesterday:

https://news.ycombinator.com/item?id=12168718
Yeah I was struggling to understand that one. I don't even think it's bad design.
"One's employer doesn't owe one a job"

That kind of thinking is exactly what breeds this kind of stuff, though.
Don't know why this needs an analogy at all.

Getty [allegedly] took images that didn't necessarily belong to them, charged for them, and also sent copyright notices after anyone that hadn't paid for them.

It's pretty simple. edit: allegedly
GitLab is nowhere near the size and popularity of GitHub.
someone disagrees: https://boingboing.net/2016/07/28/the-ice-bucket-challenge-d...
It also looked like more an insurance nightmare than Uber but it appears that they are partnered with Allianz so I assume they have that figured out.