skysight-inc/HackerNews huggingface dataset:
It is one. I've heard oral history from Larry Nichols of Devon Energy talking about how examples like that were used by Devon to avoid disaster in acquisitions they'd made in Canada. He's on the Tulsa University Oral History "Voices of Oklahoma" website.

I was in a a startup acquired by a Canadian company and we had the converse problem - the technology was rejected like an organ transplant by the engineering staff. Bizarre, because the whole idea was to generate revenue to support their other development efforts. Didn't matter - not invented here.
This depends on the country. For example, Belgium has a statute of limitations of 3 years on taxes, unless you're committing fraud, then it can be extended to 7. There would be no way to recover those taxes within the current Belgian framework without introducing new laws (retroactively). But retroactively introducing a tax law is generally prohibited by the constitution..
Correction, he wasted my time, but interviewing for a position he wasn't remotely qualified to perform. Honestly is the most important trait in any team member. How do you not see this?
What the Conservancy is "interested in" is a different thing than what interaction with them causes.

Enforcers often are (or claim to be) interested only in compliance. Their efforts to secure compliance where they believe compliance is lacking incur costs that would not otherwise exist, even where compliance already exists.
Second Spectrum | Los Angeles, Lausanne, Shanghai | Full-time | On Site

We create products that fuse cutting-edge design with spatiotemporal pattern recognition, machine learning, and computer vision to enable the next generation of sports insights and experiences. We aim to transform the way people play, coach and watch sports.

You can find out more about the company from our CEO's TED Talk: https://www.ted.com/talks/rajiv_maheswaran_the_math_behind_b...

As well as our other videos: http://www.secondspectrum.com/videos/

Engineering roles:

IT / Hardware / Systems Technician, Video Systems Engineer, Mid/Sr Full-Stack Engineer, Sr UI/UX Engineers, DevOps Engineer, Machine Learning Software Engineer (a strong SE fundamentals and experience (as a generalization, not a pure data scientist))

Creative roles:

Creative Director, UI / UX Designer, Motion Designer, Animator, Producer/Editor

You can apply through email at work@secondspectrum.com. Happy to answer any questions you might have: karl@secondspectrum.com
It didn't come across in my comment – my amazement was regarding WordPress, etc. websites being run on commodity hardware without proper backups. E.g., get that ludicrous 128GB machine and run Apache on it with a single website for years. What could possibly go wrong?

The most recent issue we had with Hetzner was when we requested a LARA remote console to connect to a failing machine. The standard keyboard on the remote is German and much of the non-Latin keys are remapped. It was impossible to log in to a shell. All we got from support was "This is a standard Generic 104 key layout". That was it.

Before that Hetzner rebooted a whole raft of machines and on one of them this corrupted ext2. We asked what prompted the reboot (not bothered by the dead server) and we got (as above) "Unfortunately we can not help you here".

There were many more incidents before that and at the end it was just too much to swallow so we moved away.

Just out of interest, what's your use case for Hetzner?
Trussle (https://trussle.com) are looking for Full-Time Software Engineers in London, UK

Come and work with me! I'm Jonny and I'm a software engineer at Trussle. We've just moved to some cool new offices and we've now got room to expand our team of 4 software engineers.

Trussle aims to make getting a mortgage hassle-free. We're doing that by bringing the process online and focussing on the customer. Finding out how much you can afford and applying for your mortgage can now be done in minutes, rather than hours. Even if you don't want to work with us, give us a whirl at our website: https://trussle.com/

We're looking for enthusiastic jacks-and-jills-of-all-trades to make our team more awesome. If you want to really make a difference with a young start-up we'd love to hear from you. More inspirational words about the job are available here: http://trussle.github.io/jobs/developer

If you are interested, drop me an e-mail (jonny.arnold@trussle.com), mention this Hacker News post, tell me a little bit about you and ask any questions you have. From there, we can get the ball rolling!
Is there any way to pay for upgrades with duet? I purchased a license last time this came up on HN (when it was on codecanyon?) then forgot about it for a bit, didn't download the source in time and lost the ability to access the code.
DefenseStorm | Seattle, WA | Software Engineer/Security Researcher | ONSITE

We're a cybersecurity startup that helps banks and other financial institutions manage the deluge of security data that they produce. We take all of the security critical information and then alert on what's important, generate reports, and show cool dashboards.

We use AngularJS, Typescript, Java 8, PostgreSQL, Elasticsearch, and we're built on AWS.

The engineers we're looking for are serious about security, performance, and UX. We're trying to build a useful, secure app that solves real problems. Read about our engineering culture here: https://www.defensestorm.com/cybermind/engineering-culture/

If you want to know more or apply, contact me directly at sean@defensestorm.com. Thanks!
I've never really had a separate /usr/local partition, but it looks like that might not be such a bad idea given the upgrade guide: https://www.openbsd.org/faq/upgrade60.html
I would be quite surprised if the payload was not insured. Doesn't make it any easier on the people who poured their lives into the effort, but the owner will not be out any substantial investment capitol; just potential earnings until its replacement can be pushed up.
They mention Unbuntu amongst the Chinese, too.

So if it's been de-Buntu'd, I guess it would be .... Debian?
This is a good point. I think it's fair to say that the tiny subset of businesses VCs are interested in investing in are the ones where a well-timed influx of capital has a chance of allowing massive growth.

Any novel business that appears to have those characteristics is ripe for such a speculative investment, but most of the valuations are based on the assumption of massive growth.

As soon as the growth trajectory turns out to be less impressive, the valuation goes through the floor, and usually results in a loss for investors (even if the company can be sold).

But this is by design, since the investment was highly leveraged on the upside, it is also leveraged on the downside and the firm will often simply fail.

Doing a typical startup (less than two years from seed round to massive growth or failure) is a lot more like flipping a house than like starting a business with a proven business model.

This is why there is so much trendiness and so many me-too companies... They are like real estate developers who saw that McMansions sold for 2x investment a mile away and decide to rapidly build nearly identical ones hoping for the quick profit. The goal is entirely in the short term and the long term is irrelevant.

Google found a very powerful way to sell ads, and once it built the infrastructure to do so it was able to massively broaden its product offering and appear to be almost a modern conglomerate. But the fact remains that ad revenue is the vast majority of Google's income, and most of the rest of its businesses are (in comparison) failures that would never have continued to be funded by VC-style investors. Alphabet reflects the investors' realization of this and is a compromise resulting from Sergey and Larry having a lot more control than typical founders.

Github is interesting. I wish I could see its financials! I had hoped for a lot more in the product arena from Github, but who knows, maybe they still have most of the $100M.
On the face, there are dramatic differences between cannabis and cigarette smoke, the most important being that cigarette smoke is highly addictive, the second most important that cigarette smoke has much lower potency.

This is why our smoking/cancer statistics reflect a reality in which it was once extremely common for smokers to be inhaling one or more ounces of burned tobacco per day.

Most people already know that that's a huge amount of weed for an average person. Even out of folks who are getting high every day, almost none are hitting that mark-- the most obvious proof of that being that it would cost them hundreds or thousands of dollars per day. Even if we allow for unfiltered cannabis smoke to be several times more carcinogenic than commercial cigarette smoke, we're not going to get there.

In fact the opposite is true; the average person who develops a serious weed habit (more than a few grams a week) is actively incentivized to try safe methods of consumption like vaporization, extracts, or edibles, if nothing else because they will save a lot of money.

So apples-to-apples, we wind up comparing the habits of generic cigarette smokers to those of drug dealers and very wealthy, very pot-addicted people. I understand the desire not to approve of any amount of smoke inhalation, but the null hypothesis here is not equivalent risk.

Apart from all of that, our generation didn't invent smoking weed, and neither did our parents. If cannabis represents a public health hazard on a similar scale to cigarette smoking, it's hiding pretty well after all this time.
VP, Engineering | WhizKidz Media | Gurgaon, India | Full-time, on-site | Competitive salary + stock options

WhizKidz is implementing learning solutions for children keeping in mind that every kid has a unique set of abilities and learning acumen. We are building a platform that takes this into account and treats each child in a unique way to make learning fun and meaningful.

We are looking for someone with leadership skills and experience in designing technical architectures to fill our VP, Engineering position. As the VP, you’d be responsible for hiring and mentoring the engineering team and laying the groundwork for the company’s technical stack and the product development cycle.

While not strictly required, experience in the following skills is a big plus:

Backend: Python, postgres/mysql

Frontend: ECMAScript 6 (latest version of Javascript), modern frameworks like ReactJS

Mobile development: Android, Kotlin

Developer tools / services: git, AWS, heroku, github

Modern software engineering best practices

If you are interested, please send in your resume and github handle (if you don’t have one, make sure to include past projects in the resume) to one of the following people:

Contact :

Diwank (+91 8127943793, diwank.singh@gmail.com)

Amit (+91 9999300413, amit@whizkidzmedia.com)
Atomic Object | Software Consultancy | Ann Arbor, MI | Onsite/Fulltime

https://atomicobject.com/careers/ann-arbor-software-develope...

---
Work with smart, passionate people. Make cool stuff. Learn every day.
---

Atomic is growing a diverse and inclusive team of curious, creative people who love creating great software for our clients.

THE POSITION

Atomic Object is a consultancy that creates custom software products. We work across web, mobile, desktop, and embedded product development—helping our clients innovate and grow by doing what they do better.

Atomic makers work on self-managed teams of 2-10 designers, developers, and testers—collaborating to create products for our clients, from the idea phase through launch and beyond.

WHY ATOMIC?

Atomic is a great place to do awesome work. As an Atom, you'll:
Join a tight-knit group of makers working in an atmosphere of friendship, exploration, and respect.

Work on a variety of projects and help make pipelines safer, cities greener, healthcare smarter, and old products new again.
Be part of a transparent, employee-owned company that's active in making the software community stronger, smarter, and more diverse.

Receive great benefits, including support for professional development, schedule flexibility, employee ownership, 401(k) contributions, and generous vacation time.

INTERESTED?

If you'd like to find out more about Atomic or this position, don't hesitate to check out our current open position:

Experienced Software Developer: https://atomicobject.com/careers/ann-arbor-software-develope...
I agree I think the comparison has to be organic tobacco like pouch tobacco or American Spirits which don't have all the additives such as saltpeter, bromine and chlorine. Its hard to believe though that ingesting one type of smoke vs another is any better for you.
> They do the tests to validate that this rocket won't turn into a cruise missile, headed for the nearest residential area.

In that case the rocket has a flight-termination system, though, which should activate as soon as it veers too far outside the planned/expected parameters of the flight.
Troops (VC-backed, seed stage) | New York - NYC - Manhattan | Full-Time | Onsite | VISA

We make AI-powered bots for the enterprise are backed by some of the best VCs in the country. We are building an elite Scala team in NYC and have a couple spots left on the roster.

If you want to work on greenfield projects and large distributed systems with really smart coworkers using Scala, or just curious to learn more, please apply below.

Functional programming experience is preferred!

You can find more info on the team, investors etc here: https://troops.ai/team
* Please Apply Here * http://bit.ly/2afEWPq
A little about Troops: * We use technologies like Scala, ReactJS, Postgres and the AWS stack * Competitive comp, work/life balance, and a challenging/fun work environment are all really important to us * Our first product is built on top of the Slack platform... we're really excited about AI and bots! * Troops was recently named one of the 100 most exciting companies in New York Tech (http://bit.ly/22KCmqG) * Business Insider wrote a nice article about our vision: http://read.bi/1Oo4k3a * We're backed by some of the top investors/angels in NYC: First Round Capital and Founder Collective - full investor list at bottom here (https://troops.ai/team). * We're a B2B company solving a pain 10's of millions of people experience daily ... this means customers & revenue & scale * I think we're a fun bunch! :-) (https://troops.ai/careers)
The entire solar city enterprise is based on "sophisticated financial engineeriing." They push solar lease and PPA deals on customers which are then securitized and sold to investors. Both sides of these deals (solar customers and abs investors) accept terms that benefit solar city at their expense. If it's not subprime 2.0 then it's subprime 3.0.
Yea, and that's a problem in itself.
I don't understand what the quote has to do with this at all. It's neither a government payload, nor AFAIK do they have a second satellite.

Maybe I'm overthinking your comment.
Muster | Richmond, Va | Full Time | On Site

https://muster.workable.com/

http://www.muster.com/home

About Muster

Muster is an advocacy platform that enables professional associations and nonprofits to engage their membership in the legislative process. By providing simple and intelligent solutions to communicate with lawmakers, client organizations are able to easily influence public policy and advance their cause. Muster has a proven track record in powering the campaigns behind legislative victories and increasing membership-driven advocacy.

Job Description:

Skills & Requirements While we are seeking someone who covers all the requirements below we would also like to speak with anyone who has a nice combination of the below skill set even if you are missing one or two items.

* Experience with Python/Django

* Experience with ReactJS or other single page application frameworks

* Experience with AWS, Heroku or other cloud-based infrastructure providers

* Experience with git and Github

* Experience with Docker or other containerization software

* Experience developing REST APIs

Junior - Senior Level

Competitive salary based on experience

Work with an exciting and energetic team in an attractive downtown RVA office space [with free parking!]

Stock options for employees

Paid holidays and vacation
SEEKING WORK

Location: NYC or remote.

Website: http://qureshimedia.com/

email: contact@qureshimedia.com

A Tiny Product Design consultancy. Small team BIG talent. UX/UI mobile apps. Responsive web. Our design demonstrates simplicity and value. Technology should Beautiful, Useful and invisible. Our new new thing is a product design sprint. Using the http://www.gv.com/sprint/ sprint model.

Ask for work samples.
No, in this field sometimes stuff blows up unexpectedly and it's part of the cost of doing business. It's like feeling bad for a life insurance company when someone dies.
I wish I could buy a Nokia phone now. But I'm one of those for whom the cult of personality surrounding Jobs was too much to take.
I've been using the network (Jio) for about a month now. The service is great, but the paranoid in me is genuinely worried about Jio ending up having a Verizon-NSA like partnership with the Indian Govt. (they probably already have).

No one will dare question it because we have idiots for politicians and we are nowhere close to having a privacy law for our citizens.

Is VPN, Whonix, Tor (in essence compartmentalization) a good combination to escape their monitoring capabilities?
On the other hand my general view is that I will always prefer the system install of a language environment, because I know the distro is going to take care of ensuring it works with the distro config, updating it with security bugs and making sure it doesn't break when I update the distro in future. In fact "doesn't exist in distros yet" is one of the major reasons I haven't got round to investigating Rust yet.

And the distro themselves will want to be using their own packaged version of the language to build any other programs that are written in that language, for reproducibility reasons.
"This project was built for revenge, over a three-day sleepless marathon fueled by my hatred."

"Cool, so what does it do?"

"It prints Jacob is a loser nerd in large ASCII art characters, over and over again."

"..."

"The message is hard-coded for now, but I'm planning to make it customizable next time I get angry at someone."
On the other hand my general view is that I will always prefer the system install of a language environment, because I know the distro is going to take care of ensuring it works with the distro config, updating it with security bugs and making sure it doesn't break when I update the distro in future. In fact "doesn't exist in distros yet" is one of the major reasons I haven't got round to investigating Rust yet.
Have a friend who has family working there. Said the accident was caused by a static fire test and the rocket and payload were lost.

Absolute huge bummer.
Every rocket is test fired before launch. SpaceX does do many things that might be considered "testing in production", but this isn't one of them.
Fastly | https://fastly.com/ | TLS/Go/API Developer | San Francisco, CA | ONSITE if in SF, REMOTE otherwise

• Apply: http://grnh.se/4v1ojg or contact me here, at carlisia@fastly.com, or on Gophers Slack.

My team is looking for a developer with experience in communications security. We’re building an innovative CDN that automates the delivery of secure content in near realtime, and we are giving clients control over how it's done.

To check out why Fastly is a different CDN, I recommend:

• Short promo video: https://vimeo.com/151803793

• Building and Scaling the Fastly Network: https://www.youtube.com/watch?v=_49Q_wDF0zQ

• Fastly Altitude: https://www.fastly.com/altitude

Remote workers are encouraged to apply. Pacific time zone or close to is preferred. I'm remote, my boss is remote, his boss is remote. Most of the team is remote, we are very remote savvy.

100% Go development.
Without this patch, using an information leak to bypass ASLR would be as simple as leaking any address in libc (__libc_start_main is often convenient since it's where main returns to when the progam ends, and hence is already on the stack), subtracting the (fixed, public) offset from the leak to calculate the base address libc was loaded at, and adding the (again fixed and public) offset from libc's base to some useful function (e.g. system(3)).

With this patch, the order of symbols are randomized every boot, so the offsets that were previously fixed and public aren't.

It's probably still possible, if you have multiple adaptive memory reads, to traverse the datastructures that legitimate programs use to find the order of the symbols, but a) not all information leaks can be used to read arbitrary addresses multiple times, and b) the traversal code becomes more complicated for the attacker to {write,maintain} relative to the simple arithmetic that was previously possible.

The above analysis is for remote exploits, local privilege escalation exploits can just read libc to determine the order (since it's re-linked on boot, not per process).
We're happy to answer such questions if you email hn@ycombinator.com, but please don't create distractions in the discussion threads by posting them here.
Thanks for the info! My experience in the past was mainly with large LN2 dewars, with liquid helium refrigerators added to re-condense the N2 gas back to a liquid, limiting the pressure (and limiting how often you needed and LN2 refill!). We had blow-off valves as a fail safe if pressures got too high if the cooling head ever failed. I'm sure working with cryogenic fuels is a whole different world.

As I commented, it's not that there aren't cryogenic temperature pressure relief valves, just that they may not be what you want!
You would be right if nobody besides the affected people would ever know that they are doing this.

But as soon as other people know or hear of it, they will go check the website to "see if they are affected". Even if the website has a huge disclaimer telling people that they could still be affected, the absence of the warning would still suggest that they are not affected, even when they could be.
Pretty sweet! I have a feeling that self-hosting might make a come back

Are your clients mostly tech companies? If not, how do you manage the setup for non-tech companies?
Klaviyo | Boston, MA - Full time ONSITE

Klaviyo is hiring for Site Reliability Engineers (SRE), Python/fullstack engineers, Support Engineers and for Product Designers.

We're one of the best kept tech startup secrets in Boston--we're profitable and are growing very quickly. Plus, even the CEO codes.

Our Tech stack

* Python / Django / Celery

* Cassandra / Aurora / MySQL

* Redis, RabbitMQ

* Amazon Web Services (AWS)

* LESS/SASS, Backbone.js, React, etc.

* Android, iOS apps and API Integrations

We're working hard to make e-mail and other ways ecommerce ships engage with customers incredibly relevant and less spammy. Billions of events processed in real-time monthly. Businesses have lots of data. More than they know. We put it to work.

More details are on www.klaviyo.com or here:

https://angel.co/klaviyo/jobs/162918-site-reliability-engineer

https://angel.co/klaviyo/jobs/84434

Feel free to ping me for details.
Dug in a bit further. On the non-x86 architecture I use, it looks like it's really just straight core performance that explains it. pigz's only advantage there really seems to be the brute force parallelism.

In particular note the huge difference in branches between gzip and zstd on decompress:

8959780663 branches # 143.024 M/sec

2969481781 branches # 64.454 M/sec

and on misses:

542158823 branch-misses # 6.05% of all branches

89060880 branch-misses # 3.00% of all branches
Yes, but isn't it a bad idea to install binary patches from a third party?
There is a mix of imagery in the public domain and available through commercial providers. You can even specify your own WMS source!

Interesting note on the elevation model, if you've got a second, can you open an issue on the github site with a screenshot of what you are seeing?