skysight-inc/HackerNews huggingface dataset:
It has a single stack magazine so it's a thin pistol, which is more amenable to in-waist-band concealed carry than lighter pistols with double stack magazines (i.e glocks). That said, my carry gun is a 3" 1911, primarily because that is most comfortable when driving in cars with bucket type seats. If you are carrying while sitting in a more upright position, a full size 5" 1911 is fine. The weight isn't an issue as mine has aluminum frame, though a traditional 1911 is all steel. Anyway, this is what I carry.

http://www.kimberamerica.com/tactical-ultra-ii

Now a single stack polymer frame would be too small. I'm 6'5", 250 LB, and have big hands. I can't operate the magazine releases on small handguns. My wife carries an HK P2000 sub compact; way too small for my hands. I consider the 1911 the perfect handgun, of course that's a huge argument within the gun culture.
> Ever spent a frustrating hour debugging a broken mouseup event, until you realised that it’s because the user is letting go of the button outside your click target? No? Okay, maybe it’s just me, then.

I hope no one uses this example to make an onClick action that works no matter where the pointer is when the button is released. The correct behavior when this happens is to ignore the click when the user has moved off the click target when the button is released. It's a pretty handy convention, as it's the only way to for a user to "abort" a click once they start it - something I've done a few times myself.

This example pattern could be useful, though, in managing the UI state when something like this occurs.
> My job search lasted a total of 35 days [...]

> I communicated with 23 different companies [...]

> to receive 4 offers to make a single choice

> I was rejected 9 times [...]

I liked the article but with today's hiring procedures I can tell you that these numbers are baby steps. I have spent so much time during the last two months doing technical and non-technical interviews that if I were to write an article like that it would take me days to complete it. To be fair, it gets harder when you are a foreigner trying to apply for a position in a company who wants your skills but that expects you to be 2x smarter to justify the immigration process.

I visit /r/cscareerquestions from time to time and it is sad to read the stories of recent graduates struggling to find their first job or even an internship. If that happens to American citizen with an university degree and fresh knowledge about algorithms and data structures, what can we (non-Americans with rusty algorithmic skills) expect? I would be happy to work remotely if it wasn't because many banks limit the transactions that come from foreign companies or simply don't let you create an account because you are from a risky country.
https://protonmail.com/
Polymer 2.0: Under the Hood (Polymer Summit 2016)
Seriously? There is no mention of either only YC companies or the Bay Area in their FAQ or on their website. Tacky.
Can ZOIE BURGHER Twerk?
Would Waste Management qualify?

https://www.wm.com/enterprise/index.jsp

By which I mean, what's the difference between environmental focus and greenwash? More or less Waste Management is just a company with trucks that hauls trash to the sanitary landfill or incinerator or recycling plant depending solely on what the customer pays them to do.
There are a lot of things that are horrible in these leaks. For example, here are four: http://www.usatoday.com/story/news/politics/onpolitics/2016/...

From those four, the following are "verified" by the OP of this thread.

- 5205: The Clinton's seem to have had access to the questions to a debate.
- 4178: The Clinton's seem to have been advised about the investigation into their emails from someone in the DOJ.

These are two out of 4. I'll edit this if someone links other articles and I'll check them across this link.
But that's my point. Uber and Airbnb and Bitcoin didn't confine themselves to laws in the beginning. They just built something that worked. Yes, now that they are big they are hitting legal obstacles (like NYC's ruling on Airbnb rentals today, a top HN post). But they are also now known, and so users are aware of the potential innovation that the current state of law is inhibiting. And that increased demand for these kinds of inevitable new products and services will lead to faster change over time.
Regarding point 2, I can think of a few ways to utilize that mechanism itself as a way to DDoS something. Sometimes the security mechanisms themselves are the attack vectors.
Interesting.

I assumed that this

> chatting with other women about coding in Swift.

meant that it wasn't just a matter of learning Swift (I honestly don't know why anyone would learn a language via a meetup rather than using one of the many great resources online ) but developing relationships with women who share her interest.

A related concern could be that it's often difficult to talk about the side projects you're engaging in if they're focused on more stereotypically female concerns when men are about. The vast majority of time when I discuss my side projects, guys are downright rude about them because their target market isn't male and that often marks the idea as silly or insipid to a fair amount of people right out of the gate.

Add in that it's the rare guy who can interact with women without treating them differently which for many women automatically makes them ACT differently (for me, I go into a social, people pleasing mode) and I can see why limiting the group might be beneficial.
"Don't be evil" ... ?

It's not about developers being perfectly pure and moral, it's about an organisation holding themselves up to a standard that they have set themselves.

And a standard which I expect them to meet and exceed.
It is actually counter to house owners' interests to block further development.

1. Their children won't be able to continue to live in the area once they become adults (unless they get lucky with a high-income job).

2. If they ever want to down-size and move into a smaller house or apartment after retirement, it won't be economically viable since the smaller place will still be expensive. The only way to adjust to a fixed income is to relocate.

Most communities don't do this. It's endemic to California due to the legislation noted in the article. It's rational for Mountain View to restrict housing and promote office space because it's the only way it can afford to keep tax revenue high enough to provide public services.
Great comment. And I want to point out that no matter how privileged you are in America, Government pretty much has the final say.
That's unfair. It's as likely that she was uncomfortable and this was a way to mitigate her concerns. I was very uncomfortable going to my first meetups around tech and most of those concerns turned out to be valid, so I can't really hold it against them.
TV Go Home (2003)
We detached this subthread from https://news.ycombinator.com/item?id=12762753 and marked it off-topic.
Magritte in the age of Augmented Reality
+1 on the approach - I've been in situations where I wasted my time when later it became clear they were looking for an "under-represented" candidate.

This is very visible in large companies where sometimes trying to move within the company you get blocked by the invisible HR quotas.
Everyone knows who applied where and what kind of skills they have so it's very hard to hide, but still they won't admit this straight up.

That said though - the very openness with which this institutionalized discrimination is taking place is more than a little annoying. Imagine if they went the other way around :)
There was also an Outer Limits episode with a similar theme if I recall correctly. There is a lot of cross-pollination of ideas, and I think that's a good thing.
This one has you covered ;)

https://github.com/liftoff/HumanInput

Wrote it myself.
How long could this go on for?
Just like you do with ssh: you ask the site administrator.

How?

CAs give a false sense of security. We need to move off this model.

Maybe, but not by adopting the politician's syllogism. We should only move to a better model. As easy as it may be, it's still slightly harder to get a CA to sign a cert for a domain you don't control than it is to sign them yourself, and that shouldn't be dismissed.
Some projects, such as Gentoo, use multiple hashing algorithms in parallel to protect against potential collision attacks while verifying package sources. Adding Streebog for diversity may be a good idea.
The initial "deep dreaming" images were far scarier. Nothing compares to animal faces literally popping out of the woodwork, as if on LSD.

Automated generation of synthetic, photorealistic human faces was mildly terrifying as well.

Still, this is a cute Halloween project.
I haven't tested it on that particular hardware but I think it might be feasible. Some modem profiles are more computationally expensive than others, and receiving is more expensive than transmitting.

At some point I'd like to try it on an RPi across a piezo and a cheap mic
We should have a conversation of where short term rentals are appropriate. Maybe they are not appropriate in apartment buildings, but banning them in all of New York state is draconian.
Seconding this. There are boardgames that are simple enough for small children, but are still interesting enough for adults. You can find casual games that you can play in five minutes while waiting for the bus, or you can find a game that'll occupy your family for an entire extended weekend.

And if we're including things like D&D and Pathfinder, that's easily months of entertainment.
It's always been there. The messiness & limitations of analog were actually main the reasons for digital being invented in the first place. Then the digital stuff had issues but way easier to surmount with formal methods. Or just computationally like heuristic placement of parts. Each problem that was found could be dealt with using known algorithms or verification techniques. There's been many correct-by-construction methods to building stuff. So, we just apply that without the weird, over-complicated additions that happened largely for marketing reasons. The result is a highly-correct, reference implementation there for verification or checking the optimized ones.

Now, the analog and RF portions are The Devil. These will be a (censored) to get correct with automated means. Already are with manual methods. There's been some progress in synthesizing and verifying them. Still mostly ad-hoc, manual work. Best bet is analog portions... much as one can use... happen with simple components on as old a process node as you can use. Less design rules, less weird physics, more reliability due to maturity of processes, and more synthesis results. Either whole thing is done on old nodes or we can pull a Tekmos doing old (eg 350nm) for analog with new (eg 90nm) for digital part with careful integration.

EDIT: To address other commenter, put it behind EMSEC shielding to address that. The analog components can also be designed for fault-tolerance against things like cosmic rays or voting configuration used to correct errors.
Where would you go to check for Amazon's fingerprint?
I do not know how it is even slightest relevant here.
Can't recall ever seeing the NY Times embed tweets in a story, is this a first?

edit: apparently it's because I mostly read the site within the app.
Extensive commentary on this topic is in the update from Dyn - https://news.ycombinator.com/item?id=12759697
I learned in my first two jobs (in restaurants) that the way the company treats its prospective hires is strongly correlated with how well the company is organized. I kept that in mind as I went out into the corporate world, and the rule has held (in my experience) for the last ~30 years. Good starts imply good companies and good experiences. Bad starts... can be safely dropped.
No, they do it all the time, especially for politically-related stories.
That's a neat idea. You could imagine doing this in DTMF. The fridge could even place the call!
Yes, yes and no.

I'm btw sure that many Socialists would actually agree that the statement undoubtably displayed hatred and xenophobia. He did argue against allowing people from the outside to come and live in his community because he by default perceives foreigners as not giving "two shits" about the community. This is obviously not true, you can't just declare that all foreigners want to harm your community.
People staying somewhere for only 10 days have less concern about the neighbours, the building and the community.

The father probably wants his children to be able to sleep without interruption at the weekend, but is more likely to clatter up the stairs drunk at 3am during his 10-day business trip.
Actually Gentoo stopped doing that. (Which imho is sane. It's useless overhead for a completely theoretical scenario that will never happen.)
Seems like there is an opportunity for a company to be the certification layer verifying companies do these things and do them in a consistent way.
If these sites hosted with google cloud, would they be less susceptible to ddos attacks?
Dish network owns blockbuster. As I recall through they don't allow you uncapped bandwidth on their network for blockbuster, which I think is by law.
A market-based solution means the quantity of water sold is determined by the market. There's no other way to know what the "correct" quantity is; that is the entire purpose of the market.

What you're describing is a centrally-planned solution, not a market one.

I lost all my respect for carbon tax advocates after realizing that their definition of the appropriate tax was "high enough that people stop doing things I don't like". That's not a market system. It will be a market system if you set a price on the thing you don't like, and people respond to that price. Tweaking your price until you get the outcome you originally wanted is a way to claim the rhetoric of "market policies" without any of the substance.
https://rcpmag.com/articles/2016/08/02/microsoft-behind-aws-...

Azure seems to have higher market share though? In HN I rarely see talk about Azure and I see a lot of Google Cloud. Out there, where I consult with enterprise customers among other things, I see a lot of Azure and almost no Google.

It would seem that Google sells well among startups and in the Bay Area while Microsoft sells a lot to enterprise.
Typical Dark Army
Compared to what?
Do you know how difficult immigration is when you are not an American?
They've done it before, especially for trump: http://www.nytimes.com/2016/10/21/us/politics/trump-apprenti...
Are you aware of any other edtech companies that have built solutions similar to what you're proposing? That's a good place to start.

BTW, these YC guidelines are built on actual experiences from 100+ companies. I wouldn't be so quick to dismiss their hard-earned wisdom.
Hopefully you have a nice SLA with them.
> For non-technical users, ... routers ... packets ... UPnP ... SSH ... tcpdump ... wireshark ... protocol ... telnet ... IRC ... plain text commands ...

I think you unintentionally helped to cement GP's point. There is a huge opportunity for some kind of little box - vetted/certified or even insured - that non-technical users can plug in, click Next > Next > Finish, and be notified when any device on their home network starts acting suspicious.
How about DNS cache poisoning? Serving stale data combined with a DDoS on the root resolver makes DNS cache poisoning more dangerous by prolonging it.
NYC has in the past pushed state laws that just affect NYC. Gun laws in particular I'm more familiar with [state preemption - except for NYC where they can enact their own gun laws], but some taxing is specially allowed for NYC too. It's not unheard of for state-level legislators (from NYC) to push for something to the state either because 1) the state constitution doesn't allow a city to do XYZ, or 2) because the city government doesn't see eye to eye with the state representatives living there
> And a standard which I expect them to meet and exceed

Then you're a fool. If you want to slam people for not meeting standards, they'll have to be objectively defined. There's no sense of "evil" you could ever hope for people to agree on.

Your complaint is similar to the chorus of people complaining that they voted for "hope" and Obama let them down. They should have known that would happen when they saw that his slogan was "hope".
Idea: Chaos Monkey for DNS outages
Nope, which is why I applied.

And I agree in the sense that I believe in YC more than anybody. But I disagree in the sense that no edtech solution to date is dramatically changing the world as much as a Facebook or Uber, so something must not be working. And I'm calling out Coursera, Udacity, Udemy, EdX, Khan Academy, Codecademy, Vidcode, Jumpcut, MakeSchool, AltSchool, HackClub, codings bootcamps and regular school itself. Honestly, the best solutions right now are in fact YouTube, Reddit and Hacker News.
> What if IoT devices were required to continually pass some sort of a health check to make other HTTP requests?

Even better, what if IoT devices were required to pass some health check to operate at all. This could be as simple as a verified boot plus a forcible reboot every now and then.
This particular attack will likely eventually be mitigated (hours? days?). But it seems there is nothing preventing similar attacks from starting at any time, and be less possible to prevent each time.

Personally, I fear we are closer to global-scale, machine-learning-based attacks that find vulnerabilities, exploit them, and change patterns on the fly. We may not have a stable internet any more.

Am I blindly fearmongering? I hope not. But these are new waters. Insecure IoT is growing every hour and there's no clear path to stop it from being exploited more and more.
The global powers are negotiating with themselves, and consolidating state power at home. Proxy wars for the former, and fear mongering at home for the latter.

The players are the 0.001% who control these states and the rest (we) are the captive (and propagandized) audience. They are being super kind as to at least make it entertaining for us.
Interesting. "patents created by their researchers" so if it's a official school project then, and not someone doing it on their own? That would makes since. I don't get why schools need patents in the first place though.
On on the side of, society extends corporations a lot of rights and protection. Stand to reason that demands that they serve the public interest aren't unreasonable. Especially in this case where the claim is corporations are abusing a right; copyright and trademark protection.
> If you do a phone screen with someone in a more or less 1on1 kind of setting and they can't tell you whether you passed that stage within an hour, their organization must be dysfunctional (they have the job of conducting the interview but not the authority to pass/fail you?) and, therefore, absolutely not worth working for.

The university I work for has a fairly standardized process for full time hires. We schedule and sit in on all phone screens, individually evaluate candidates, and then promote some of them on to the next step.

Sometimes we're in a position where more people "pass" the phone screen than we would want to bring in for onsites. There's an anxiety in immediately failing people we don't bring in, in case the batch we bring onsite does poorly.
NIST usually doesn't standardize algorithms just because. Which is reasonable, because having more algorithms doing the same thing only creates confusion and more sources for error. New algorithms should only be introduced when they serve a need or when the existing algorithms have weaknesses.
The likely next algorithm standardization process NIST is going to start is about Post Quantum cryptography. However NIST has lost a bit of its relevance with the IETF taking over after questions about NSA influence over NIST.

Btw, there is no requirement for NIST algs to be US-based. E.g. AES was developed in Belgium.
...Peeing in a Bombardier snowmobile flying in turbulence?
Gotcha! I figured that might be the case. I'd be very happy to hear more about those table stakes. 100 stakes is a lot tho =)
I honestly haven't tried it on Mac. It also runs on Android and iOS which is great.

I'm in the market for a cheap-ish ultraportable with good battery and I'm considering a second hand Air or MacBook. When it comes to the OS, why would I go back to macOS?

(Note that I would go back if I've found a cheap enough Air ;))
This attack is on the DNS and niṛ in the sites themselves. The sites are working fine. We need better infrastructure for the internet.
Your phone camera has a unique fingerprint
You can't hide your gait or posture.
Gives them time to test the countermeasures before 11/8
The chart you linked to showed one thing very clearly - AWS is kicking everyone's butt. In terms of YoY growth, Google was the biggest at 162%. Microsoft and IBM should be very concerned about that considering all of the new datacenters Google has coming online in 2017.
Unfolding the Mystery of Cerber Ransomware’s Random File Extension
We're aiming to expand to both remote roles and companies based outside of the Bay Area early next year. We've seen a lot of demand for this since we launched, we've been careful about expanding because our focus has been on getting the details of our technical interviewing process correct.
I'm going to disagree here, because this idea took me a long time to develop and has been very helpful.

I spent a long time trying to make myself happier, and I just grew more miserable. I started to work instead on practical goals (I.e fixing the problems i had caused for myself) and found myself to be happier.

Now I think happiness is a natural result of accomplishment things that help you as a person. Pursing happiness directly seems like a category error. It's not a valid goal. The best metaphor I could give you is that "pursuing happiness" is akin to getting in the car and asking your gps "take me to the destination."

It will take you wherever you went last time. Occasionally that may overlap with what's actually good for you, but usually it's wherever you went last time.

"The destination" isn't a meaningful destination. "A gas station", or "a restaurant is."
Now, whenever you start driving, it's true that you are always "headed to the destination" but this is only true in the vacuuous sense of a tautology.

The happiness which results from accomplishing our goals, I now think is a return to a natural baseline state. It's when you don't need anything that you feel happy to just be as you are. Getting to a destination feels good not because "you have arrived", but because you popped the last frame off the goal-seeking stack.
Trying to fight a war purely with defense is usually a dangerous strategy. The only long-term solution is to find the attackers and take them out.
> Qualified people don't have difficulty finding work (by definition - if they're qualified, they will get hired).

I know lots of qualified people who went through one or more stretches where they couldn't find work. Most employers wouldn't know a qualified engineer if they saw one.
I would imagine so, particularly in cryptography, being able to view the source is not the same as being able to (easily) verify it doesn't contain any backdoors. See ECDSA as good example; we can see the entire standard and yet we can't be sure that it hasn't been weakened/backdoored by its creators despite it looking secure on the surface. See the start of [0], the bit about the standard pushing state leaking through secret dependent operations.

[0] https://blog.cr.yp.to/20140323-ecdsa.html

Edit: my point here is that America would have to trust that there was no way that the Russians had added backdoors. Given their history and the current political climate I can't see that trust coming soon.
As someone who has hired, I have Ghosted candidates to my everlasting shame.

It's _a lot_ to keep track of and fire off emails to non-good candidates. Especially if you're having applicants apply to jobs@example.com.

Software can solve this problem....