skysight-inc/HackerNews huggingface dataset:
When you hear about someone jail breaking an iphone trough the browser, this is how. The fact that the browser works as a window to all tcp-sockets running on a device, it's the perfect way to exploit buffert overflows on a device that lacks a terminal.

Also remember this with all your IoT appliances running on your local network. Even if it has a local IP-address, as long as you have a computer with a browser on the same network, you might as well consider your devices being publicly accessible from the rest of the internet.
Another response to the same article: http://blogs.ams.org/blogonmathblogs/2016/08/29/dont-worry-m...
> don’t follow current review guidelines

Will this culling apply to the Mac App Store? What's going to happen to the many grandfathered non-sandboxed Mac apps?
Paperless Post (Paperlesspost.com ) - Infrastructure Engineer/ New York, NY / Fulltime /Onsite/ Visa

Our tech team is solving complex problems for a network of 100 million engaged users.The technology we’re developing isn’t in support of selling some other product—it is the product. It’s what people pay for, which makes it the core of our business.We pair-program, hold daily standups, conduct postmortems, and host tech talks, hack days, and workshops to encourage collaborative problem-solving every day.

https://www.paperlesspost.com/about/jobs/122813
Phlarp's original comment was about 'a "Range Safety Officer" on the ground whose entire job is to determine if and when to deploy this self destruct system.'

The text I quoted implies there is an onboard flight termination system, even if there is no Range Safety Officer who can send external commands.

FWIW, a part from an exploded rocket, like the engine, could still destroy a school bus filled with children. The odds are very hard to estimate, and made more complicated in that there are few failure modes where a rocket failure halfway across a continent, at supersonic speeds, would reach the ground without breaking long before.
Dunno. Less like a hammer, more like picking up the spare key taped to the wall with a big sign taped to the door that says "key taped to wall".
America’s $18T economy in perspective – comparing state GDPs to countries
Applying to Keen IO (after seeing them on HN) was hands down the worst application process I've experienced in my 10 year career. Despite being personally introduced to the hiring manager at the beginning of the process I was give an unbelievable 'run-around' over the course of many months (I would have an interview, then wait weeks for a response, then have a second interview, got invited for onsite, they didn't follow-up to schedule and ignored my requests to do so). Something is incredibly broken here. Very unresponsive and unprofessional.
Paperless Post (Paperlesspost.com ) - Senior Internationalization Engineer / New York, NY / Fulltime /Onsite/ Visa

Our tech team is solving complex problems for a network of 100 million engaged users.The technology we’re developing isn’t in support of selling some other product—it is the product. It’s what people pay for, which makes it the core of our business.We pair-program, hold daily standups, conduct postmortems, and host tech talks, hack days, and workshops to encourage collaborative problem-solving every day.

https://www.paperlesspost.com/about/jobs/261668
I've had an app in there since there were less than 1,000 apps in the entire store. It still works, but I haven't updated it. Been waiting for Apple to pull it...surprised it's taken this long.
For things like the Mars Rover, they built two so that if something goes wrong, they have one in the warehouse that they can experiment with before they try to remotely repair the one on Mars. I don't know if people do that for Earth-orbit satellites, though.
Oh, okay, that makes sense, then. So it's almost like I've got a computer partner that's also "learning" the syntax with me? That's actually really clever, because it helps me by demonstrating correct characters that I wouldn't have otherwise guessed. Very cool!
Amazon Lab126 (lab126.com) | Sunnyvale, CA | Software Developer, Concept Engineering (ONSITE)

Amazon Lab126 is an inventive research and development company that designs and engineers high-profile consumer electronics. Lab126 began in 2004 as a subsidiary of Amazon.com, Inc., originally creating the best-selling Kindle family of products. Since then, we have produced groundbreaking devices like Fire tablets, Fire TV and Amazon Echo. What will you help us create?

We’re looking for Software Development Engineers with broad experience and interests who thrive in fast paced start-up like environments. In this role, you will be a part of the Concept Engineering team that brings in new ideas and delivers high-fidelity proof of concepts. Responsibilities include:

* Actively participate and lead concept development and design ideation as part of a small team

* Rapidly build and iterate on polished, high-fidelity prototypes that express design intent, using the best and most appropriate tools and techniques for the task

* Develop functional prototypes to prove and sell concepts to development teams and senior leadership

* Partner with other teams to ensure that our techniques and technologies translate through to shipping products and services

* Be able to work creatively through and around perceived limitations and/or challenges imposed to create delightful experiences for customers

Please email sjambula@amazon.com if you’re interested!
10 things new startup design leaders should do
Have you run into any of the issues mentioned of the article? Some of them are regressions, which version of Spark were you running?

Out of the linked issues these all seem like they would be "easy" to hit given enough data:

https://issues.apache.org/jira/browse/SPARK-13279

https://issues.apache.org/jira/browse/SPARK-13850

https://issues.apache.org/jira/browse/SPARK-13958

https://issues.apache.org/jira/browse/SPARK-14363
Location: Russia/Belarus

Remote: no

Willing to relocate: yes

Technologies: Java, JavaScript, SQL

GitHub: https://github.com/atomashpolskiy

LinkedIn: https://www.linkedin.com/in/tomashpolsky

Résumé/CV: https://drive.google.com/file/d/0B2STtRYWQ-uzeFNhQnd2b0JiN0U...

Email: nordmann89@gmail.com

Passionate Java developer with 6+ years of experience. Currently employed by the US National Hockey League and delivering awesome open-source technologies (check out my github!) Eager to move and relocate, please contact me with any questions! Cheers :)
> but how hard will it be to just fly a drone there with some kind of projectile?

It's a massive long metal tube full of extremely flammable things...what seems more likely: drone with projectile entering a highly restricted piece of airspace, or as rockets are want to do, it blew up by itself.
Previous discussion: https://news.ycombinator.com/item?id=12405006
Guess now they'll have to settle for just "Candy Soul Saga Crush Game Match Three Slots FTW"
Yes! For instance stealing all your SSH keys and shell history, eg. by some node module down the dependency tree.
I've never understood why AWS charges so much for network traffic, especially considering their connectivity and peering.
From TFA:

"computer scientists have developed a significantly more refined Rowhammer technique they call Flip Feng Shui. It manipulates deduplication operations that many cloud hosts use to save memory resources by sharing identical chunks of data used by two or more virtual machines. Just as traditional Feng Shui aims to create alignment or harmony in a home or office, Flip Feng Shui can massage physical memory in a way that causes crypto keys and other sensitive data to be stored in locations known to be susceptible to Rowhammer."
Am I seriously the only person on HN who doesn't know x86 backwards and forwards? Because it seems from the comments like I'm the only one here that didn't know this.

This was a good article, though.
> We're using these things and we're not even sure how they work. Love it.

Similar to the human brain in that respect. Ironic that the human brain used itself without understanding how it works to eventually create something it uses without understanding how it works.
Potato are hiring front end web (often using AngularJS) & Python (mainly Django) developers plus UX designers & project managers ONSITE across our offices. VISA potentially available for working in the USA for British passport holders. Freelance & fulltime available.

We're a 6yr old, 110 person agency based in London, UK with offices in Bristol, UK & San Francisco Bay Area. Our clients include Google, PayPal, Skype, and a number of startups. We're part of the AKQA network.

Our work spans (and sometimes defies) categorisation and is used by over a billions people a year. Recent interesting projects include tracking an Antarctic expedition, organising the world's artworks, mapping DDoS attacks and Syrian regime defections, and aiding rapid collaboration inside companies.

https://p.ota.to/jobs/

Production Manager (Bristol): https://p.ota.to/jobs/production-manager-bristol/

Director Of Business Development (London): https://p.ota.to/jobs/director-of-business-development-londo...
MongoDB | New York, NY | Software Engineer, Cloud | Full-Time

We are looking for a server-side engineer that will work on core functionality for all of our cloud products, writing code that will help store petabytes of data in MongoDB all over the world, touching millions of users.

Any interest? Please reach out to me at JC@mongodb.com or apply here http://grnh.se/8thc6r
Hi, I'm the developer of the script. The algorithm used by Deepart.io differs in two crucial ways : It uses Markov Random Field Regularization from the CNNMRF paper, as well as Image Analogy loss from the Image Analogies" paper.

The output is far more precise, although it requires far more time to process the image, as well as requires a 1000 iterations.

Of course on powerful GPU's this is not a big problem. However on a desktop gpu or laptop gpu for home use, it is simply not worth it to use several hours to develop a single image.

On the plus side, there is a second script called INetwork.py which uses several improvements from a recent paper "Improving the Neural Algorithm of Artistic Style" which takes slightly more time, but produces good results in under 100 iterations and far less time than with MRF loss.
Alluxio can cache objects in memory that are used downstream in other steps or even other jobs.

In Spark, the biggest performance gains are realized when all data stays in memory. But, the Spark memory architecture is kind of opaque. It's pretty well documented, and there are some good blogs out there, but there are a lot of factors in play.

For example, let's say we start with 1 TB of compressed data and take a guess that it will uncompress to 10 TB. So, we do a naive calculation and guess that we'll need 20 nodes, each with 500 GB of memory.

For our example, Spark will be managed by Yarn. Yarn is going to take a portion of each node's memory. I forget how much, but let's say 10%. Then, depending on how many executors we have per node, each will also have memory overhead. Again, I don't know exactly, but let's just say another 10%. Then, some memory will be dedicated to system processes, etc. Then there's the Spark driver. So, after all of that, let's say 25-30% of memory is used outside of the executor. So, that leaves us with 10 executors per node, each with ~35 GB of memory. For maximum performance, we have to ensure that all 10 TB fits across all executors. So, we may actually need 29 nodes, or a lot of data is going to spill to disk.

Then, let's say that our processing job doesn't evenly distribute data across partitions. Some partitions get 5x as much data as other partitions. Again, data spills to disk - or the VM runs out of heap. Or, maybe our 10% compression estimate is off by 5% - more spills to disk.
I'm going to post this here so I can show you're being read and noticed. I hope this will encourage people, that would otherwise believe no one cares about their problems, to share their bad experiences.
8 Ways to Read 60 Books a Year
> Like, this is as good as it gets, guys. This is it.

Pretty sure they reference both Sequoia and Benchmarks as having 8x and 11x returns. So not sure this is really as good as it gets. I think it more points to the over hype of certain firms vs the ones who can actually deliver on investor money.
They probably brainstorm through all the possible scenarios that could have caused a particular condition and then see if the data matches and they can prove it as best they can.
The complete history of Reddit
Amazon peers extensively, so they don't even pay for (most of) the traffic!

(Not on a recurring basis anyways -- yes, there's the one-time capital costs and such.)
"...the kern.usermount sysctl is also no more. Administrators who want to let users mount devices will need to configure doas(1) for that task."

For convenient laptop use I prefer allowing my user account to mount USB drives and have that done by mouseclicks in some way.

Antoine Jacoutot's toad package is not in the 6.0 packages collection, but xfce4-mount is, so I assume I can set up the appropriate doas rule for a user and then configure xfce4-mount to ignore the local drive. I shall have a play on Sunday.
Neat! How is it predicting the next character?
If anyone wants a succinct example of how misguided this is, https://www.youtube.com/user/Kurzgesagt is an amazing channel filled with thoughtful and well researched videos, but their Twitter account reported last night that their second video discussing nuclear power ran afoul of the "content guidelines" and was de-monetized.

I can't imagine an educational channel deserving this treatment - it makes me so sad for everyone involved.
Yes, looks like.
Sorry. You are correct, sir.
what speed do you get ? where are you located at ?
> U.S. District Judge James C. Cacheris of Alexandria imposed a 52 month sentence, saying a tough penalty was needed to deter future hacking.

> “This epidemic must stop,” Cacheris said.

Will tough sentencing in US courts really dissuade future Romanian/foreign hackers? I mean the US is always giving out tough sentences for everything, you'd basically factor that in already if were to get caught and they put all that effort into extraditing you to the US. Seems like par for the course.

If it wasn't tough sentencing it would be superfluous charges getting tagged on, so any length is justifiable if you have a motivated prosecutor/judge or a politicized case.

Although I may be reading too much into the judges rationalization.
and making sure the VM is not set up as bridged networking, I personally have a pfSense VM and route my computer and all my other VMs to it each on a separate virtual NIC with firewall rules etc.
*1023
At some point, someone is going to write the most popular plug-in ever that rewrites all titles in clear language and does a quick fetch of the page to answer the questions posed by the title. That's the kind of expert system I'm looking for.
Facebook bought the photo-sharing app for $1 billion in 2012, the firm said it made $78 million on a $250,000 investment.

damn....and had Instagram not sold to facebook it would probably be worth $1-1.5 billion
Beyond Labs | London, UK | Full Time | Front End Developer & Full Stack Engineer

We’re looking for a front-end javascript developer to join our London-based team and lead the design of Beyond.

--What we do--

Beyond is an enterprise SaaS platform that’s spearheading a new generation of companies - ones that remain agile as they grow. We do this by transforming the way companies plan their numbers - their budgets.

Ultimately, we believe companies do best when employees are empowered to take initiatives, rather than constrained by outdated budgets.

--About the Role - Front End Developer--

For too long, budgeting has meant monstrous spreadsheets or impenetrable business software - unintelligible to all except a few finance professionals. We need you to help us change this.

You will:

- lead the UX/UI development of Beyond, building off the successes (and failures!) of our MVP. You’ll optimise and streamline core workflows, helping to find elegant ways for our users to visualise and edit large datasets.

- develop beautiful and engaging interfaces that appeal to the many different people that use Beyond: from front-line employees to managers, finance professionals and accountants.

- just as importantly, help bring personality and lovability to Beyond.

Learn more at http://bebeyond.co/jobs/ or drop me an email: james@bebeyond.co

--

We're also hiring for a Full Stack JavaScript Engineer, you can find more details at the link above.
I don't think the meaning of concepts are the types of things studies generally shed light on. It's just a philosophical argument. Feel free to accept it or not.
That means there was an under-reliance on system testing, which I agree with. It doesn't imply there was an over-reliance on unit testing any more than it implies there was an over-reliance on analysis or over-reliance on the expectation of developing bug-free software.
I would be surprised if more than 5% of programmers in the world knew more assemble then 10 instructions. Maybe only 10% know even 1.
> You don't have a right to modify the device you purchased. You don't have a right to manufacture a clone of the device and run your patched code on it.

Yes. In fact, isn't this exactly why GPLv3 has the anti-TiVoization clause? Because TiVo under GPLv2 were entirely in their right to deny user-modified GPL-licensed software from running on their hardware.
Why are you fixated on bonds? My argument is mostly independent of bonds, I only included them because you mentioned them originally.

Your reasoning was:

> The mechanism is much simpler: asset prices of risky assets today will fall because willing buyers demand a higher return for the risk. [...] Investors aren't happy with that, so they refuse to buy the stock until its price falls and its implied return rises.

I showed that this is not a valid argument, because if the market discounts the price of a stock by x% due to higher perceived risk, then it will discount its price by x% ten years later as well (unless there was a major change in the company's fundamentals, which is another story and not relevant here), meaning that the discounting of risk did not result in higher profit (compared to the return on stocks of a company which is deemed less risky).
David | San Francisco, CA | https://www.senddavid.com | Full­time | Onsite
David is a San Francisco-­based software startup that combines technology and legal research to help customers resolve disputes with their cable, internet, or wireless service provider.

The $200+ billion legal industry is still stuck in the 20th century: paper-based, error-prone and slow. With rates averaging $300 / hour, only 15% of Americans with serious legal problems even seek the help of a lawyer. For everyday issues like bogus cable bills, fewer than 1 in 1,000,000 of us seek justice, even though monopolists like Comcast rank in the 0th percentile for customer satisfaction. Class actions used to provide the necessary scale to combat certain widespread frauds, but over the past 5 years, the Supreme Court has allowed businesses to eliminate them.

The technical challenges are hard, ranging from automating the monitoring of corporate misconduct to crafting delightful user flows to building the leading database of outcomes in consumer disputes. In parallel with the software development, a team of Yale Law School alums conducts the deep research so that our users finally feel empowered, rather than intimidated, by the law.

We currently have a MVP (https://www.senddavid.com) and are looking for a Senior Engineer as a very early member of the team.

Position: Senior Engineer | Salary: $80­-$125k | Equity: 1.0%-­4.0% | https://angel.co/david-174/jobs/72943-engineer

Contact us via Angel List or talent@senddavid.com
Remember, kids: a firewall is only one layer of your security. Make sure you always implement proper access control and guide users through changing the defaults.
So long as you have a DNS resolver which respects TTLs, you could be behind anything - they're dynamically changing DNS to point at your localhost. It's not the remote server making the connections, it's your web browser. At which point, it can be exfiltrated, thanks for the DNS tricks which get around CORS.
What Not to Wear: A Short History of Regulating Female Dress
I'm looking at replacing a few GSA appliances with either of these for indexing private user content (so users can search their own data). Anyone have experience with this on these and how has it been?
Watch out for Wayfair the company is rising
Vitruvian Networks (vineti.com) - Full Stack Software Engineer / San Francisco, CA / Full Time / On Site

Join our team to build the Software Platform that enables a new generation of Curative Cancer Therapies based on cell engineering to scale from Clinical phase (10s of patients) to Commercial phase (1000s of patients). We have partnered with one of the leading pharmaceuticals in the space to build the first platform product of its kind.

We are an agile product, design and engineering team (XP), who build high quality products (Test Driven, Pair Programming). We encourage learning from other members of the team (industry experts) and work closely with clients and medical institutions.

Backend Technologies - Ruby on Rails, Rspec, PostgreSQL, AWS

Frontend Technologies - React, Jasmine

(https://jobs.lever.co/vineti)
Nobody goes there anymore -- it's too crowded.
CareMessage (YC W14) | QA Automation Engineer | REMOTE | Full Time | http://caremessage.org

CareMessage is looking for a QA Automation Engineer to help with manual and automated quality assurance of the CareMessage web application and API. You will be responsible for entire features and will be a full member of the CareMessage Engineering team. Our team believes in an Agile development environment, test driven development. Our tools of choice are Ruby on Rails, AngularJS, PostgreSQL, and we place an emphasis on open collaboration and ownership. We're using Protractor for automated frontend testing so knowledge in that is a plus. When something isn’t working, we’re not afraid to throw it out and try something new - so if you have exciting ideas about the QA process and how to make your own job even easier, you’ll fit right in. All of our developers and QA engineers are working from a remote location.

Apply here: http://grnh.se/lt3wim
Yes. Answers to the same question are collected in a single place i.e., it provides the best of both worlds:

- it allows to ask the same question using different ways (different people may use different vocabularies to express the exact same problem)

- the answers are not scattered -- they can be updated and improved in a single place.
It might be an unpopular opinion but I still have apps from iOS 4 that works perfectly fine on my iPhone running iOS 9. To me this is a testament of the great engineering that allows this iOS 4 app to be binary compatible with iOS 9. Sure the apps won't use the latest APIs and they look a little blurry (because screens have gotten larger) but they still work fine and I don't want apple to kill them, making a cloud backup restore impossible.
Actually 999 MB is correct. Mega is an SI prefix meaning 10^6.

What you described is a binary prefix mebi, which means 2^20.
Lives were lost, just incrementally; person-hours in building things that will never add value.
The original article seems to be an intentional misunderstanding of what "Math is everywhere" is generally taken to mean.

The way I interpret it, is that if you study how anything works in enough detail, there is almost always a way to understand it mathematically.