skysight-inc/HackerNews huggingface dataset:
I just read the paper. Good data, great analysis; there will be lessons learned from this. Some quick thoughts:

- Header fatigue. For many people, CSP is 'yet another damn header' [1][2][3] we have to add to our websites. Although it's supposed to require careful thought and be tailored to the need of the particular resource being loaded, the typical programming model of the web separates payloads from headers, and therefore proper use of CSP needs a hook in your HTTP-server that calculates the correct header based off of a bunch of rules you set ahead of time and the URL (and maybe payload) of the resource. This integration typically isn't nicely present in HTTP-servers or web frameworks, so people hardcode headers and move on. (Maybe try a meta http-equiv instead??)

- The nonce approach proposed for CSP is essentially CSRF tokens all over again. I get why it works, but it's ridiculous that the server has to quasi-cryptographically pass tokens around inside the HTML that a third-party wouldn't have... the weakness of the protocol itself is showing; there has to be a better way to communicate cross-domain resource trust.

- Completely unrealistic thought experiment: block ALL cross-domain requests in a browser. Only allow <a> tags. Everything else has to be hosted on the same domain and proxied over. The incentives re-align; all the responsibility and blame will fall squarely on website operators to get their sites right.

[1] https://www.owasp.org/index.php/OWASP_Secure_Headers_Project...

[2] https://securityheaders.io/

[3] https://observatory.mozilla.org/
Youtube isn't prohibiting the discussion of these subjects, they're just not allowing those videos to be monetized.

Partners exist to make money for Google, on Google's terms, and in Google's best interests. Monetizing videos is a service Google provides for their advertisers and licensed content owners first, content creators last.
What's your industry? How does it motivate people, and how do companies compete for talent?
Next Century Corporation|www.nextcentury.com|Full-time|Onsite @ Annapolis Junction, MD| Software Developer

The primary responsibility for this role would be for the design, implementation, integration and customization of various data-driven web applications to provide rapid insight to end users and decision makers. You would be utilizing front end development using Angular.JS, jQuery, and Bootstrap while still utilizing backend development utilizing Java, Spring, and JavaScript.

Perhaps you’re more of a Front End Developer instead of a Full Stack Developer. Have no fear; we have several opportunities for individuals with your caliber.

A bit about who we are-

We were founded as a direct result of the 9/11 attacks and provide solutions that integrate situational awareness, at a glance analysis, decision support, collaboration, and other core capabilities utilizing our expertise in data visualization, user interface design, GIS, image exploitation, and mobile computing.

Who We Are Seeking
•At Next Century, we are committed to growing our team of high performers to accomplish our mission of saving lives and protecting our country.
•We are not a body shop; we avoid staff augmentation, and we are totally committed to excellence in all that we do.
•Joining our team is not just a position, but a journey with a team of world class software engineers who share a passion for using their skills and experience to make a difference.
•We are seeking those that hold these traits and beliefs:
o Passionate about protecting our country and saving lives.
o Aware of the concept of a high-performance organization and is committed to achieving them.
o Engineers that desire to work closely with end users to identify the most critical information.
o Demonstrated passion for learning and curiosity of the world.

Common Technology- Java, Swing, Unit testing, OpenGL, Spring, Groovy, Maven, Hudson/Jenkins, GIS applications, NoSQL, Mongo DB, and AngularJS

Required education: * Bachelor's You must be eligible and willing to obtain a security clearance.
This sounds fascinating. I'd also like to be in the beta. Thanks.
Cyndx Networks | Santa Monica, CA | full-time | On-site | http://cyndx.net

At Cyndx Networks we're re-thinking the Capital raising process using a data-driven model to both recommend investors as well as reach out to them and power your fundraise.

Our clients range from Huge Investment Banks (You've heard of them) to growth stage startups that you may already know or have yet to hear of.

We operate with a completely flat structure, where independence and automony is the norm.

We take an open and collaborative approach to solving massive problems. Everyone has a voice.

We truly care about work/life balance. You won’t be chained to your desk. We are a Slack driven culture, no emails (except for your lunch orders), or useless meetings.

We have a very unique opportunity to tackle the massive industry of investment banking.

Right now we're filling positions for software engineers, but particular interested in people who are more senior so I'll post that description here - Others will be up on our site soon as well so feel free to reach out if this sounds interesting to you!

http://cyndx.net/jobs or jobs@cyndx.net
I would like A flag that tells me whether the app contains ads or not.

It really sucks to download and install an app just to find out that it displays ads. I don't use apps that have ads.
Although the satellite itself had a lot of hydrazine on board. That's probably what caused the smaller second explosion when the fairing fell off and hit the ground.
AFter reading other comments here, I realized I've sort of been doing this at work for work related stuff in emacs with org-mode for years. I kind of like the idea of a paper-and-pen version that I carry with me. I mean, I'd rather type it, but not on a phone keyboard, and so the next best portable thing seems like paper and pen.
If you've downloaded it, it's still going to be available to you. It's just not going to be listed in the store for others who haven't downloaded it.
Location: London(UK)

Remote: Yes

Willing to relocate: Yes. If accommodation provided.

Technologies: Full Stack - Linux, Python, Django, (Postgre)SQL, etc +Business skills

Résumé/CV: Technical Support and Account Manager for a London startup

Email: jj306 (at) yahoo.com

-I started in 2014 to learn the technologies I mentioned and to create a prototype website, which I plan to deploy in 2016.

-Previously I worked with Flash, Fireworks, Illustrator, SEO, etc

-I can start as an intern in Programming or as Technical Support and advance to a role with higher responsibilities.
More specifically, <select> will no longer work.

This may already be the case for Firefox on mobile.
Of course it's not covered by launch insurance - it happened during the pre-launch stage. It was covered by marine cargo insurance.
That sounds like a ShowHN would be a better fit than a comment.
"Contrary to the more fantastic predictions for AI in the popular press, the Study Panel found no cause for concern that AI is an imminent threat to humankind"
-- Stanford Study Panel, comprised of seventeen experts in AI from academia, corporate laboratories and industry, and AI-savvy scholars in law, political science, policy, and economics
Efficient Bazaar | Gurgaon (Gurugram), India | Full-time | ONSITE | INR400k-INR1500k

We at Efficient Bazaar are building a B2B marketplace servicing the hospitality industry for their procurement needs. We are currently live in 3 cities across India and are scaling up our technology team to match our business capacity.

We are looking for

1. Senior Full Stack Developers: 2-5 years: PHP, Magento, MySQL

2. Senior/Junior Full Stack Developers: 0 to 5 years: Python, Django, Postgres

3. Senior QA Automation Engineer: Python, Javascript, SQL, Selenium and other fancy tools

Developer roles are not limited to these technologies. We believe in using right tool for the job. There are enough use cases on our product and technologies roadmap to make use of fancy Javascript libraries, react.js, Golang, elastic search, redis, few of aws offerrings and more. We are looking forward to a service based architecture.
There will be many external service integrations in our pipeline.

We make use of git, jira, trello, slack in daily workflows.

Our interview process is:

- screening call. get to know each other, discuss your past tech experience

- a small technical challenge to evaluate your skills* You can do this at your convenience and it won't take more than 45-60 minutes. (developers only)

- in depth technical interview. discuss your solution and many other technical questions. We don't ask to solve puzzles on whiteboard. Questions will be more about problems we face day to day, OOP, platform specific topics etc.
It will be face2face for local candidates and on phone for long distance candidates.

- talk to our ceo

Process should take less than 2 weeks (after screening) if you have time.
We provide relocation support within India. We can't offer vi$@, remo4e opportunities right now.

reach Rohit Gehe at his @gmail.com address "gehe05". It'd help if you could put [HN] in subject line.

* This can also be skipped if you have good github repositories of your own. However, note that we'd like to know how you can structure your code, think through and come up with a scalable, extendable solution. If your code doesn't help us with this, we'll ask you to take our test.

Thanks
So, you mostly use premium/paid apps?
Why git? I can't think why I'd want to "roll back". Does he (assuming he by the name) feel the commit history and portability is worth the overhead?
What's to stop someone from just lying about another offer?
This is false. Pre-launch accidents are covered by marine cargo insurance.
It is not like the doctor can explain in English when you ask him for details. Not all.
You answered your own question - linux is GPLv2 and always will be. It will never be GPLv3; Linus hates GPLv3.

GPLv2 doesn't grant you a right to hack, period.
Tovala - Web app dev / Chicago / Full Time / On Site

We have a countertop smart oven that is paired with an awesome meal delivery service.

We're looking for someone that could build the front-end of our new website and also contribute to our back end web development.

Email me - david@tovala.com
Ha. Yep, I knew that was coming too. They are definitely things I've thought about. I wrote about my thoughts a couple of years ago. You can check it out here: http://www.duetapp.com/blog/is-saas-the-only-business-model-...

But I like the idea of a 1-click Digital Ocean install. I'm going to work on that asap
So how do we get the first sick volunteers for Dr. Neural Network?
True but off-topic is still off-topic. You want to talk about it here? Post a story where it's on-topic, and we'll talk about it there.
>Belief that the Israeli intelligence services are, in the modern era, more likely to engage in certain types of action against particular targets than, say, their French counterparts need not be based in any anti-Jewish sentiment.

You are either giving too much credit to the Israelis, or nearly not enough to the French.

>It can be based, e.g., on the degree to which Israeli intelligence services have been found to be doing certain things (e.g., carrying out operations targeting the US) compared to others.

This is a very flawed estimate, everyone spies.

>One can have an especial distrust of the Israeli government -- on reasonable or unreasonable grounds -- without being anti-Semitic, just as one can have an especial distrust of the US government without that being grounded in antipathy against the dominant racial group in the US.

Then again you do not understand what "anti semitism" is it is the cultural bias the fact that it has a name doesn't make it into something special.

The cultural bias towards constantly distrusting the Israeli government like there is some intrinsic reason to not trust them because they always have a hidden agenda (like every other government) is tied quite strongly to the cultural bias of distrusting the Jewish people at large.

The constant distrust of the US government is also heavily influenced in the cultural bias, much of it american in origin which was exported to the rest of the world via popular culture in the form of TV, movies, books and stories.
Their "lets get started" section is hilarious. Phrases like: Does it look like ibm? Does it feel like ibm? They try and make ibm sound like some avant garde stuff. Really funny.
The whole discussion has been one of the best example of people violently agreeing with each other. Sadly, the article only mention the first few statements and not one of the later done by Greg, which makes it look like a bigger disagreement than it is.

Ok, I'm not saying "never should legal action be taken", but what I am saying is the same thing that Linus said, "only under the most dire circumstances", the nuclear option. - (https://lists.linuxfoundation.org/pipermail/ksummit-discuss/...)

"Lawsuits are always a last resort after nothing else works." - (https://lists.linuxfoundation.org/pipermail/ksummit-discuss/...)

That is a far cry from implied disagreement from the earlier quoted "I do [want companies to comply], but I don't ever think that suing them is the right way to do it". Maybe the Gregs comment is more colorful and has some slight implied differences, but so far I have see little in the discussion to specific when exactly those differences has an practical impact. Both sides seems to be in an agreement (or atleast, not in explicit disagreement) about the status of VMware, as none in the mailinglist (from what I can see) has said that the lawsuit should not exist.

What left is the last paragraph of the article, where at least there is direct conflict. Linus don't trust/like FSF and by extension, SFC. For that, one of the other developers described the situation perfectly. If developers went to SFC instead of the lawyers of LF, maybe Linus should ask why that happened in the first place.
Setting our vision for the 2017 cycle
Honestly I'm working as a full stack developer, mainly node.js/angular here in Austin at a small/medium sized company. The business isn't really tech, but we have a ~10 or so dev/design team. Only paid 55k per year and I feel like I won't ever get to market rate just staying here. I love the company, the culture, and the people, but I just feel way undervalued. I know I'm going to have to look elsewhere, because I need the money, but at the same time I wish I didn't have to. This is my first "real" job out of college.
Another version of the cliff's notes is to buy ETFs instead of index funds. ETFs are more liquid since they trade the same as stocks. As you learn more and accumulate more money, you can also start buying individual stocks.

The top Index ETFs that I would recommend (index in parens):

SPY (US S&P 500)
DIA (US DJIA)
BRK-B (Berkshire Hathaway*)
EFA (MSCI EAFE, aka developed countries in Europe and Asia)
EEM (MSCI Emerging Markets, aka China, Korea, Brazil, India, etc)

I would recommend at least 2/3 US indexes and the rest international.
Don't worry too much about international exposure since all US multinationals operate globally; e.g. buying Coca Cola (KO) is actually a bet on economic growth in China.

* While BRK-B is not an index ETF, it's actually the first stock I would recommend for new investors to buy. BRK-B is Warren Buffet's company and has broad exposure to the US market.
The Third Industrial Revolution, and a Zero Marginal Cost Society
Whether or not you decide to follow this advice, its pretty good and based on a lot of lessons learned from dumb things others have done.
> It boggles my mind that there are people supporting Apple in this. There are so many of us that like to cheerfully screw themselves over to protect rich corporations.

Are you staying there isn't a principled stand to take here?

Or that there is reason to object on principle but one shouldn't because it's not self-serving?
So isn't there a lot of money to be made by a firm hiring women? Or an all woman firm?
Energy and Transportation by 2030
Grand Rounds | San Francisco, CA | full-time | https://www.grandrounds.com

Engineer here. We are mid-sized health tech company with ~5 GlassDoor rating and one of the best companies to work for in San Francisco (according to GlassDoor). We connect patients with the right doctors, basically it's where Big Data meets Health Care.

We have multiple openings, you can check them at our website: https://www.grandrounds.com/life-at-grand-rounds/

But Engineering Department needs you: [Senior] Software Engineer with OSS experience (Ruby, Rails). We also have multiple openings for Data Scientists, QAs, DevOps, and Product Designers.

We mostly use Linux and ThinkPad laptops, our code looks good, we have lots of tests (all of them green), and you'll never understand how it is if you won't apply! Interview process looks standard: calls, technical screening, on-site.

Feel free to send me your technical resume and/or reach out if you have any questions: roman.pushkin[at]grandrounds.com
Sounds like a well thought out CQRS system. Thank you for taking the time to reply.
I was also going to mention this (https://doc.pfsense.org/index.php/DNS_Rebinding_Protections has a few notes).

dnsmasq has many other uses like tunneling all your DNS traffic through dnscrypt (https://www.opendns.com/about/innovations/dnscrypt/)
I've been messing a bit with Orgzly and it's cool, but a bit fiddly (having to press the plus sign to add an entry rather than just typing seems to defeat the spirit for me). I'll likely migrate back to paper/pen, but I'd like to limit the number of things I carry in pockets, and I know I'll have my phone.

What I'd like is some sort of Google Now integration with org mode so I can take notes verbally or quickly with my phone, then revisit them in org-mode later.
My outlook client will do that. I assume that scares enough people away.
The GPLv2 has absolutely nothing to do with the EULA for a product.

Your beef is with device vendors, not Linus.
I think primarily the fear that their boss will call their bluff, and they'll be forced to either admit the scam or quit the job and have to scramble for a new one.
Yes, before it raise the ire of Cthulhu.
Trello | New York, NY or REMOTE

Trello ( https://trello.com ) is a visual collaboration tool that creates a shared perspective on any project.

We're a remote-friendly, venture-backed startup headquartered in NYC.

We're growing quickly, not the kind of quickly where you're hiring just for headcount numbers, we're hiring for quality. We're currently 92 employees total. Joining us at this stage empowers you to help define our future processes, what it means to be on the team, and lends itself to lots of exciting career growth.

We’ve got four roles open right now that might be of special interest to the HN crowd:

Site Reliability Engineer – you’ll work on keeping everything running efficiently as we scale the infrastructure supporting over 10 million Trello users on the way to our goal of 100 million users. ( https://trello.com/jobs/site-reliability-engineer )

Developer Advocate – it will be your mission to make it easy and fun to build on top of our API and new Power-Ups platform. ( https://trello.com/jobs/developer-advocate )

Growth Engineer – you'll be working to build features and run experiments to improve acquisition, engagement, retention, revenue, and virality. ( https://trello.com/jobs/growth-engineer )

IT Specialist (NYC) – own and manage our cloud based infrastructure tools for collaboration across the company and support our local and distributed employees for all things IT related. ( https://trello.com/jobs/it-specialist )

Some other jobs and some of our perks can be seen at https://trello.com/jobs .
Oh, hey there! I work at Tailwind.

Thought I'd give you a sense of why it's awesome here.

On a given day you might pair with a teammate on architecting a system to mine interesting insights from millions of hashtags and user interactions.

On another day you might send a few PRs over to our rollback script in light of a recent mishap. (cough)

Or you'll have a video chat with a user to get feedback on the software that you're writing. Really digging in to understand their problems and ways that you might break down barriers.

Or you'll chat with a teammate about the many advantages of unidirectional data flow on the front-end (Do I sound biased? Ok fine I'm biased)

Or you'll explain to the team why some crazy idea that you have might just work.

Or something else! We want you to bring new things to the table!

Anywho, if any of that sounds cool, or you'd just like to chat, you can always shoot me a line at frankie AT tailwindapp DOT com

cheers
It too should work. Just like rockets shouldn't explode while loading fuel before a test firing.

But of all systems I never want to have to test in production, the flight-termination system is at the top of my list.
I find it surprising that they don't mention Numenta's work on Hierarchical Temporal Memory.
Well, aside from the trolling devs. At my company there've been a couple incidents of this where someone jumps on the thread with advice like "Unsubscribe has to be in the title" or "You have to BCC the list!". When that happens... oh dear god.
ethics, and usually they'd ask to see that offer and get the details!
Production doesn't work like this all the time, not everyone is the US government.

Building 2 would cost more than double, or it will take twice as long.

There are huge lead times involved, subcontractors with other commitments and other bottlenecks in the pipeline.
Not to mention that even if you do manage to build 2 in the same time window at only double the cost you still have the issue with the launch window, a launch accident would most likely ground the provider for a very long time which means you have to find another launch provider.

Spacecom had a launch window from spacex, spacex has a queue of 9-10 more launches already set, there will now be a huge delay and possible cancelation even if Spacecom had another unit they couldn't just launch it next month.
Of course you can violate your EULA in your own home and get away with it...but you are still violating your EULA and that has absolutely nothing to do with linux or Linus or the GPLV2 anyway
Fixt | Baltimore, MD | ONSITE | https://www.fixt.co

When your internet connected devices go down, get them back up with the push of a button.

Fixt is a fast growing startup that is focused on making the process of replacing all broken things as reliable as running water, starting with smartphones and tablets. We're backed by an incredible collection of local angels and our most recent fundraising round was led by the Founders of Google Wallet. Our recruiting efforts are focused on identifying only the most talented and passionate individuals that want to contribute to the mini-revolution spawning right here in Baltimore.

Senior Full Stack Engineer - React, React Native, Ruby on Rails
Mid Full Stack Engineer - React, React Native, Ruby on Rails
Junior Full Stack Engineer - React, React Native, Ruby on Rails

https://angel.co/fixt-repairs/jobs

Email me at chris@fixt.co for more information.
Postel's law / the robustness principle is a good way to write robust software, like a TCP implementation or an HTML parser. Most software doesn't need to be robust, though, and failing fast probably leads to less security issues than trying to continue on.
That would work for a LISTSERV -- but this is a special kind of server that does keep the list as an explicit object. If it's a recipients list in a regular email, that would be different.
You've hit the nail on the head. It's poker.
Why isn't your old phone getting Nougat?
> I was just wondering how SpaceX guards their lunch pad from aerial intrusions

Mostly by being on an Air Force base, many miles away from anywhere someone might operate a "drone". Wouldn't help much against a fixed-wing telepresence rig, but not much would.