skysight-inc/HackerNews huggingface dataset:
> All the same things that are difficult to get right in any other chunk of code that handles arbitrary input from across the internet.

That's about as unspecific as you can be, isn't it? So, let me give the equally uninformative answer: All of those are either easy to prevent, or they lead to a DoS, which isn't a big concern for a personal email server.

> "The Art of Software Security Assessment" is 1200 pages long

Haven't read it, but by its TOC, it's mostly irrelevant to the given problem (except maybe that it teaches you to not write you personal mail server in C, who would have thought ...).

> "The Web Application Hacker's Handbook" is another 900 pages.

Didn't I say something about avoiding complexity? No, you should not build your mail server as a web application, in case that wasn't clear.

> Nobody has solved all the issues discussed in those (and many other) books in such a way that makes this no longer "hard".

Well, how about you give an example of one problem that you think is still hard enough to be a major obstacle to implementing you own secure personal mail server?

> [...] that I personally don't think it's worth the effort to run network-connected services unless they're for a business that I'm hoping will pay for my time and effort somehow.

How is it that you suddenly switched to "services"? I thought we were talking about "network software"? Am I supposed to believe that you are not running a web browser unless it's for a business that you're hoping will pay for your time and effort somehow? How about web applications? Or what is your justification for a distinction between "services" and "network software", as far as possible security impact is concerned?
Samsung Stops Galaxy Note 7 Smartphone Shipments as Safety Suspicions Spread
React Could Love Web Components
UbeR: A Package for the Uber API
I would say that most harm caused by any crime is incalculable.
There's one where you put six relatively small guys on motorcycles inside a spherical metal cage. They drive around in circles but can't for the life of them get any mobile phone signal while inside.
Trying and failing is one thing. Trying, announcing, telling everyone it's the next big thing and then failing is quite another.
You and me both. Yeesh!
Customer Life Time Value. It's the average amount of revenue he can expect from a particular type of customer (trial users) over some time window (X months from signup, typically 12-36)
[this will be a dead post because dang is a bitch]

Ignoring that Android has been replacing ChromeOS rather than the other way around (the PixelC, and now the Android runtime on Chromebooks), your conspiracy about Fuschia is hilarious garbage. Fuschia is essentially vaporware intended for extremely small scale IoT products. It isn't replacing Android, however much Android haters might wish and dream it.
Amazon Prime Now | Software Engineer, Front End | Relocation Assistance | Full Time | Seattle

Prime Now provides Amazon Prime members unparalleled convenience and ease of mind by offering one-hour, ultra fast delivery as well as two-hour scheduled delivery of tens and thousands of essential products. Check out the Prime Now video at https://www.youtube.com/watch?v=rhdgfULOufc.

We are seeking talented developers to join us to build the most intuitive user experiences on mobile, tablets and desktops. Prime Now is an early stage initiative with a fast paced, highly collaborative start-up like environment inside Amazon.

You will implement the features and user interfaces of Amazon Prime Now to deliver compelling user-facing products. When you're not working on customer facing features, you will be architecting efficient and reusable front-end systems that drive complex web applications capable of performing at scale.

If this sounds interesting, we'd love to hear from you. Email us at primenow-hiring@ (amazon.com) with your resume and a brief introduction.
What overhead is there from linux? Most of it seems to come from there own API's.
I never saw the potential of this project given how slim the phones are getting and how the hardware is literally attached to screen. The design and aesthetic would have to be compromised for these modular phones. The two places where this would have been useful are camera and battery but there is literally no innovation happening in these two departments so expect for the next 2-3 years, our batteries and camera specs will not significantly change due to technology limitations and size constraints.
In retrospect I regret bringing up the Phenom because my argument could've stood without it, and I could realistically argue either way.

But my original intention was pointing out that the failure mode of the Phenom was such that it wasn't exploitable for anything other than potentially denial-of-service; it was just inconvenient, and only affected a subsystem of the CPU which worked fine without it using a firmware workaround.

Though you don't expect your CPU to halt and lock up, I believe it's far more insidious when you feed a device inputs and get the wrong output without any obvious indication that something went wrong, like in the case of rowhammer-vulnerable memory and FDIV.
> which can be restored in a matter of minutes or hours.

In theory. More realistically, most don't take DR very seriously and it would be more in the days to weeks range.

For example- that backup you have- is it in any way hardware or base OS image dependent? Are you absolutely sure of that? Do you have unused backup hardware offsite with the OS on it and ready to go in case there is a fire in the rack at the server farm?
I'm not surprised. I can't think of any way for it to actually be better for day to day use than a monolithic smartphone.

My biggest surprise is that it was still chugging along until now.
Replying here to grobbles dead comment: I don't care one way or another. I'm simply repeating what an engineer on the project told me. There are more constructive ways to make a point/learn info from others...
Sales and marketing expenses. Cut those and SCTY is cash flow positive.
And are TVs and monitors really different these days other than inclusion of the tuner?
No, I meant in nature. In all of the natural world. Physics through economics and everything in between including technology. (Hint: nothing is exponential -- it always levels off. Otherwise we would have been consumed by it.) I would be genuinely surprised and extremely curious to see any natural phenomenon that maintains exponential growth.

I guess compound interest could be considered indefinitely exponential, but you eventually reach a barrier in what's insured and it is a relatively small exponent. Also, is it still savings if you never spend it? I wonder what is the longest continuous account in banking that has never been touched.

Anyway, that is a tangent and a somewhat artificial scenario. Can you name a naturally occurring scenario? I would accept technology if you could show that it isn't going to level out like all other natural phenomenon.
When I go to Korean BBQ with my colleagues, we use the chopped onion to clean the grill.
The lady doth protest too much, methinks.
Roger Tsien’s legacy: The creations that lit up biology
It’s just surprising when more than two thirds of all the comments you ever made were somehow telling people to use it.

That just creates a wrong impression.
To be fair, this is a definitely a cultural thing, not "people are bad thing". I personally tend to walk a hurried pace when alone even when in no rush, but I think that's atypical.
Next up on terrible ideas: CableCARD slots on TVs!
The 747 is an amazing engineering achievement. Even more than that, it's an amazing business achievement. The 747 was an "all in", "bet the company" program for Boeing. It took many, many years for the company to break even on its investment, but after that the 747 was a money-making machine for Boeing and for the airlines. When I worked at Boeing in the early 80's, every time a 747 rolled off the assembly line a gigantic paycheck went into the company. (Just walking down the assembly line in the Everett plant was more fun (for me, as an aero nerd) than an E-ticket ride.)

Airlines loved the 747, because it was a money-making machine for them, too. Nobody could compete with the 747 for decades.

The 747 provided the technology and the money to develop the 757, 767, etc.
Fat Diminisher Pdf Download: You're yet to Know This
You could argue that they pay every employee not to leave.

Like any other business.
Lots of people watching jonathan strange and mr. norrel on netflix.
Another reason to vote Johnson/Weld for US President this November.

“Would the world be better off if all drugs were legal? Yes. The world would be better off, that 90 percent of the drug problem is prohibition-related, not use related,” he said. “But what I’ve said is, look, let’s legalize marijuana first and when we do that, I think the whole country takes a quantum leap toward understanding substance abuse.”

http://observer.com/2016/02/this-presidential-candidate-thin...
Love how the 747-400 has a max cruising speed of mach .761 (939km/h). That is fast.
Thanks for the detailed answer, going to check those tools out no doubt.
OpenID was a solution for that, but it got turned into this horrible thing that is OAuth2.

Mozilla Persona could have been another solution – just log in with your browser account – but that got killed.

And in the current web, I’m not sure something like that will ever happen, as the web is moving even more away from universal standards, and towards more and more closed walled gardens.
You're hand-waving a real problem by asserting rather misanthropic ideas with scant justification.

Show some child a cat and ask why it's not a crocodile. They will be able to explain it through the differences in shape, color, behavior and other features of those animals. Whether you consider it post-hoc is unimportant. The explanation is still real and relevant.

So people can explain their deliberate reasoning. Also, reason about reasoning. If they truly can't, it's called gut feeling and no one rational trusts those for solving complex problems with important outcomes. Especially at scale.

Neural networks, at least right now, have no capabilities of this sort. There are some attempts at visualization, but they are inherently limited, because they must make assumptions about the domain of the problem.
Please keep your rant to the other subthread. I was addressing aab0's point.
Generally, the concept is that they're paying for the work you do for them, not that they're paying for the privilege of saying you're on the payroll.
Depth Security | Kansas City, MO | ONSITE | FULL-TIME

We are looking for Pentesters! Have fun breaking things and then help fix them. Work with smart people in a smaller security shop (no project managers or suits!). While we are currently looking for web app testers, Depth conducts a wide range of assessments that you will be able to rotate in on or work with someone experienced to learn new things. One of my personal favorite things is being able to learn from the guys that focus on mobile and internal pens, you can grow your skillset and career here!

Interview Process: We just want to talk shop!

Looking to switch into Security?

We talk to quite a few candidates that are looking into a career in infosec and it makes us happy to see the growing interest in the field. The best thing you can do prior to making the switch is get hacking! Play CTFs, build a home pentest lab, turn in bug bounties, or get yourself a certification that means something. (Hint: Not one of those multiple choice exams! Check out the OSCP or WAPTX) Learning opportunities in penetration testing have never been more accessible, with plenty of sites offering courses for free.
While penetration testing is a continuous learning experience with new attacks and techniques coming out daily, we look for candidates that have taken steps to start learning on their own.

Benefits

* Performance bonuses

* 100% company-paid insurance premiums (individual and family)

* 401k

* Low-deductible medical insurance

* Dental and Vision insurance

* Generous research hardware/software budget

* Relocation assistance available

* Lunches paid for by company (employee's choice of restaurant)

Email: rpreston (at) depthsecurity.com with your resume and we can set something up.
We are passionate about security and hope you are too!
I learned much of the basic things in about couple of days using their tutorials and quick start. Then spend ~1 week to learn advanced stuff and dig through undocumented features. I'm now able to build functional drone simulator is pretty cool looking world :). Sure, there are tons of videos but they are pain to watch than just reading a doc with screenshots.

Quick Start
https://docs.unrealengine.com/latest/INT/Programming/QuickSt...

C++ Tutorials
https://docs.unrealengine.com/latest/INT/Programming/Tutoria...
Is it?

If they intentionally failed, I would agree, but I have seen no proof of that. Many ventures fail, regardless of resources and best intentions.
QuickTime for Windows 10 Download and Install Guide
True. However, the design is anything but original. It does not look like IBM desig at all. I don't even know what IBM design looks like. Its always been a bland brand in my mind.
Previous discussion: https://news.ycombinator.com/item?id=12366140 (6 days ago, 30 comments)
Check this out -- https://lowendbox.com/blog/is-it-possible-to-use-your-vps-as... -- it's pretty much exactly what you'd like to accomplish.
Certain types of products need by-in from 3rd parties to make them work. I could see Ara being in this camp, so it's better to control the message about it, instead of some 3rd party leaking details. May also help to get those 3rd party companies to reach out to you.
I am not sure I understand your point.

Who says it needs to be exponential forever?
Google has gotten worse and worse at this. It used to be that they would launch something right when they announced it. Then they would launch something invite-only when they announced it. Now they announce things without even having a clear idea of when or how those things will launch.
Official response from AH:
http://a16z.com/2016/09/01/marks-offmark/
Nexhealth - Nexhealth.com | So-Ho, NY | ONSITE | full-time | Backend, Dev-Ops and Frontend roles | VC funded

The final startup that will take care of a doctor's appointment booking needs and pain points with huge plans for healthcare: Connect people with their doctors and become the number one name people think of when they want to connect to their doctors.

Hiring process: phone screen, coding assignment, in-person interview

Product: Web app dashboard for staff members at a clinic to manage appointments, check-ins, payments, and messages. Mobile app for patients. Automated appointment reminders, recalls, recare, and invites to get the app. Product is integrated with staff workflow / Electronic medical record system.

Problem: Patients call to book appointments, forget about their appointments, overall clumsy way to communicate in 2016. Providers find it hard to manage patients and get them back into the clinic.

The big plan: Going all the way - build out a network of providers and make healthcare truly interoperable.

Demand: We're hiring because we can't keep up with customer demand. Investors and healthcare big-shots both see the value in what we are trying to build.

We're looking for mid-level to senior engineers who want to own the product from inside out.

Backend: Looking to port over monolithic REST Ruby on Rails API app into microservices. Currently looking into new languages to use especially functional languages like Scala, Haskell etc. You should have experience building out backend service API's and writing all types of test code. Should be able to read and understand Ruby.

Frontend: Currently AngularJS, looking to rewrite entire frontend in your choice of technology (React.js?)

Dev-ops: Looking to migrate from PaaS Aptible to AWS. Should have knowledge of ECS, ELB, RDS, ElasticCache, VPC, CloudFormation, CloudSearch.

Extra points if you have experience with NLP, Search or Machine Learning. Also If you have deal with HL7 before.

contact waleed@nexhealth.com to apply.

Waleed CTO & Co-founder
I use one of these bristle brushes because I didn't know better, I've also even seen a few bristles fall out before & had me a bit concerned.

However I always end up microwaving for 30 seconds after, because by the time I've let the meat rest and turned off the grill my food isn't as warm as I want it.

So maybe I've been lucky, as I figure there would have been a reaction if there was metal in the microwave.

Anyways now I'm looking for an alternative, I'm thinking of using a large wooden spatula and let it conform to the grill overtime.
Government protecting the interests of big business? Seems like there's a lot of profitable legal drug related business to be lost if kratom use was to become widespread. It smells a bit like the history of kratom in the country where it used to originate, Thailand. There it became a threat to the government sponsored opium trade and was made illegal many years ago [1]

[1] http://entheology.com/news-articles/why-kratom-was-banned-in...
Your email address is awesome. :)
It would be nice if the EU would do something useful like require all sites to hash salted passwords and prohibit the use of weak hashes for new accounts. Instead we get the ridiculous cookie nag.
Like Project Vault that was made public at IO in 2015. It looked very promising. From an outsider's perspective, it looks like Mudge left Google a month later, then the project died. I hope there's more to the story because what kind of organization has a product's success completely reliant on one person?
Green Party is also an option if you want to protest vote. A problem, for some, with supporting libertarian candidates is that they (voters) may not be as fond of the low-hanging fruit policies most likely to get implemented (e.g. defunding many agencies, removing environmental protections) as the moonshot policies they also promote (e.g. ending the war on drugs and reducing the military-industrial-natsec complex). Even though neither 3rd party will ever win, the votes do send a message about which way policy adjustments should be made, so it's still worth some thought about what message you really want to send.
Hmm, I used to use last.fm, better change my password. Hmm, 1Password shows I was using a generated unique password, so that's good, though it wasn't as long and complicated as the ones I use now. And this password was generated June 7, 2012. Wait, when was the hack again? March 22, 2012.

Ah, looks like I was covered. But hey, now it's an even longer password with even higher entropy, so that's not a bad thing.
It's no faster at that either. You need to be doing something more interesting like prefix scanning for these instructions to be beneficial.
Don't dismiss that thought so quickly. 2-3 years ago all indications were that they wanted to merge Android into ChromeOS (based on statements Sundar made at the time) which went nowhere. Over the last 1 1/2 years or so it seems like they sorted out which end is the tail and which end is the dog and have flipped the strategy around accordingly.
Lots of places don't have formal categories. Canonical, the place I work now, just has "Software Engineer". Job titles are dumb. So, I have a different name beside my picture in the company directory? Great. Does that help me pay my mortgage? Does it make the people who work with me every day respect me any more or less? Nope.
Apollo 13 also came a few seconds away from blowing up during launch. The second stage center engine began a pogo oscillation that at its peak was vibrating the engine at 16Hz with an amplitude of about three inches. By luck, the intense vibration tripped a fuel sensor and caused the computer to shut the engine down just before it would have ripped the whole thing to pieces.
When they launched a bikeshare program in LA, the local weekly welcomed it with a cartoon where the aspiring biker is welcomed with "Here's your metro card, here's your bike, and here's 50 pounds of protective gear you better have on you when biking in LA".
O I C.
Chromebook was a Google IO announcement, and I'm sure there are others that have succeeded.
Seeking: job as Full Stack Developer,SRE,or Backend Engineer

Location: Washington

DC Remote: Yes Willing to relocate: Yes

Technologies: Python,Blockchain,Cryptocurrency development,DevOps,Flask/Django,AWS,Jenkins,Travis,Puppet,HBase

Résumé/CV: https://aburan.io/resume.pdf

Email: aburan28@gmail.com

LinkedIn: https://www.linkedin.com/in/adam-buran-66277a35

Github: https://github.com/aburan28
Man, I'm getting desensitized to the enormous numbers of accounts whose information gets leaked when a platform gets hacked. 43 million here, 68 million there. I'm semi-joking, but at this point it's almost like I need Facebook or Google level hacks (multiple hundred millions or billions) to actually think, "This is huge."
Data is now the new oil according to reliance. "One company insider said the Jio logo is actually a mirror image of the word ‘oil,’ reflecting in a way Reliance’s journey from oil drilling to data mining"
I have never said anything about experts. I have talked about general consensus which includes experts.

You have provided on example, ONE of someone who believed it would happen.

I have provided one expert plus articles saying it wouldn't happen, plus you can google and find plenty of articles that said we wouldn't get it for a long time.

You cannot find a single example of articles which are claiming that it's was a general consensus we would beat Go.

And so you are the one coming up short not me. My claim is not controversial neither have you shown it is.
CVE-2016-4264 Adobe ColdFusion XXE Exploit / Adobe Critical Hotfix APSB16-30
Okay. What would you pay? $15, $20, $30 per month for a weekly digest?
Where in New Delhi?
So just ask country X for their data?

Except every country is this bad. This is the problem, it's the medical community in general.

Surly a quick online anonymized form, with a $ kickback/punishment for the hospital, which a lacky could fill in, with patient opt out ability could save lives and $$$ for countries.
Humans appear to do quite well on ImageNet (anecdotally, one person got 5.1% error: http://karpathy.github.io/2014/09/02/what-i-learned-from-com...). Of course there are recent deep models that do better than that, but the author opines (and I agree) that an ensemble of trained human annotators would do better than the best deep models.

MNIST is the true toy dataset (doesn't really tell you much about your algorithm's performance) - while there aren't any reported human evaluations of MNIST, LeCun estimates the human error rate is 0.2% - better than any deep models (admittedly without justification: http://yann.lecun.com/exdb/publis/pdf/lecun-95a.pdf).
haters!
I was looking for more. I feel empty now.
Such a 'cooperation' may very well be illegal under antitrust regulation [1].

[1] https://en.wikipedia.org/wiki/High-Tech_Employee_Antitrust_L...
WSJ.com asks to sign in to read full content. Not cool man.
Bangalore, India. Many Positions. Full time.

Some of you might have followed my posts over the last year, and some have asked why I held back on the name of the company.

It is JioMoney, and we are live now.

We launched last week and are the top trending app in the Finance section in play store.

The problem scope is large, complex and fascinating problem to crack. The potential to bring banking to 600 million un/underbanked Indians is what excited me to work on this.

We are looking to hire a good core team of full time math, physics and CS majors, UI UX and product managers, who will work of Bangalore, India.

We are open to hiring people from around the world but they will need to work out of Bangalore.

Looking for full time and in exceptional cases, consultants, welcome.

We also have our payment network baked into banks and mass transit.

In the past I have built both fast-data and big-data companies and have a few patents in this space.

If you are interested, please email me at google's email service - takenottie.