skysight-inc/HackerNews huggingface dataset:
I was probably thinking of Guinness as Charles I in Cromwell.
Though I agree with you, and really admire what you're trying to do. I find most security researchers admire too much their "rock star" status to care about the rest of the industry.

Maybe a good starting point would be an attitude change?
Shift Technology | Paris, France and Singapore | FULL-TIME | ONSITE | Sysadmin, frontend and backend developers

We're a start-up that provides a SaaS solution to insurers to automate fraud detection. We've raised €10m from Accel and other investors and already have clients in 7 countries.

Our main challenges are making sense of a lot of heterogeneous data, analysing it accurately and efficiently and presenting the results to the user in an intuitive way.

Tech: Windows, .NET (C#), SQL Server, JavaScript, React, d3.js, VMware, Azure, Git

We're looking for a lead systems administrator, web developers (including lead) and backend developers in Paris as well as a backend developer in Singapore.

More details at http://www.shift-technology.com/jobs/
Contact hnjobs at shift-technology dot com
I think the parent's comment was more along the lines of: just because an embedded device _can_ run a Unix doesn't mean it should have to adopt the semantics and history of the *Unix environment that POSIX mandates. In particular the model of TTYs, filesystems, Unix-style file/IO, Unix-style virtual memory / mmap, etc. It's not that this stuff is expensive on modern embedded systems (which as pointed out often have the hardware capacity of high end systems from 20 years ago), it's that these capabilities are either not needed, or impose a conceptual model of what a computer and operating system have to be that don't match up to what the machine is designed for.
Could have sworn that one of the tricky things about that law was that while it may appear that you are decreasing entropy locally, you are just increasing it somewhere else, thus entropy still increased in aggregate.
So... have you read any? Clarkesworld has been putting out a lot recently, it doesn't take that long to check out a Chinese short story.
I'm going to vote for Trump but not for any of these reasons. I'm doing it because I think he's a nice man who got himself in a difficult position.
Missed that, thanks
The World's First Home Robotic Chef Can Cook Over 100 Meals
> if you bring up the idea of a way of speaking being "better" or "worse" to a modern linguist, trust, me: you will understand why the author uses "wildly offended" instead of just "offended".

Not all modern linguists are descriptivists; some are in fact prescriptivists. It is a pretty fundamental personality divide: some people take the world as it is, others as it could be (or ought to be).
> The reasoning is: the code as written makes no sense; therefore it's incomplete. Obviously, then, it's not intended to be read literally, and is just an abbreviated portion of the real code. The first line just declares p as a pointer. The second line dereferences the pointer. The pointer assignment has been elided for brevity and is not relevant to this question.

No. The pointer assignment has been elided to see if anyone clues in that the pointer is, in fact, uninitialized.

The correct answer is "the pointer is uninitialized. Writing to it will result in undefined behavior, possibly even a SEGV."
I'm aware - but other than for some extreme party loyalists - no one cares. I think the platform is bullshit.
Don't get me started on homogenous!
It's even more slimey in the enterprise space.

I'd like to think that the majority of people involved with the industry in some way have good intentions, but once you start involving, sales, marketing, and certain executives...
the bird is the word (y)
My son has attention issues and his handwriting is atrocious. Strays off the lines, regularly forgets letters and punctuation, lots of errors.

We've discovered that making him write his homework in cursive slows his mental processes down enough that his accuracy and concentration are easily an order of magnitude higher than if he was printing.

Cursive has a highly practical value for some people.
Chatroulette for voice debates. Support Trump or Clinton. Watch how others do
Wellframe | Healthcare | Boston, Ma | Onsite/Fulltime

At Wellframe, we are building an intelligent care-management platform that allows health plans and care-delivery organizations to better manage large populations of complex patients. Because the most clinically complicated cases in a patient population tend to drive a majority of the costs, even seemingly small improvements in these patients’ well-being have dramatic benefits for the care provider. Wellframe focuses on improving patient health by providing personalized and adaptive care programs for people trying to recover from or manage serious health problems. We use the health data we collect in order to intelligently allot care resources to the specific needs of patients, paying special attention to the most-critical patients. Through clinical studies and working with large healthcare payers, we have seen that our platform improves patient outcomes, increases the capacity of care management teams and reduces costs of the care provider.

We have a relatively small engineering team at about 10 engineers. What makes us unique is that we have a full time clinical team of doctors that work with us to break down clinical science so that we can build it back up into personalized and adaptive care programs. We're currently looking for several mid/senior engineering positions (android, iOS, frontend, infra/platform, sre) across our engineering team. More descriptions can be found on our jobs page (below). If you're in the area I'd love to just grab coffee regardless of whether or not you're actively looking to move -- I love talking to other passionate, driven people about what they do.

For those interested in some specifics: We have Android, iOS, and web (backbone, react) products. We're currently running most of our API on Rails but heavily migrating toward Scala for most of our backend/data services. Other keywords in case someone is searching: Spark, Spark Streaming, Akka, Python, Mesos.

Jobs: https://www.wellframe.com/jobs Also feel free to reach out to me at jeff@wellframe.com!
> There are no such thing and UL security requirements for IOT device.

UL 2900-1.
I've never seen it advertised, never known anyone get one, and thought it contradicted Microsoft OEM agreements. And as someone said upthread, wouldn't it be more useful to ship with Linux?

I'm not "having a hard time", I'm just curious and applying the usual amount of mild skepticism to the internet.
For the algorithm that was ultimately chosen, the smallest unit of encoding in the compressed stream was the nibble

Feels to me like nobody talks of nibbles anymore, maybe because we have ample memory and storage and can usually afford to waste some bits for the convenience of byte alignment. (It's half a byte, or 4 bits.)

Disk compression is interesting because Microsoft originally included it already in MS-DOS but lost a lawsuit brought by the company behind a popular utility called Stacker:
http://articles.latimes.com/1994-02-24/business/fi-26671_1_s...

That was the first time Microsoft got in hot water for bundling features into DOS/Windows (the web browser would be the straw that broke the camel's back).
The armchair linguistics as I know it: Accents (and languages in general) are typically social, tribal. We use them as one of the markers of "our tribe" versus "not our tribe". Things that sound neutral/unaccented to us are things that sound like they come from "around us", from within our tribe. Things that sound foreign are clearly not from our tribe.

The misguided part here is that thinking because it sounds neutral/unaccented to you means it is the "right" one. That path potentially leads to xenophobia and tribalism.
Life is too short for duplicates, it seems
Especially for seemingly basic image processing. The type of decision making that decides to design new rack mounting options for the worst price to performance hardware available is mind boggling.
Why would that be? An i5/i7 with 16GB of RAM and fast disk IO is likely to be just fine for quite a lot more than 10 people.
It's testing to see if people understand C.

No, it's not omitted for the sake of brevity. The point is that if you can't find bugs in trivial code, you shouldn't call yourself a C programmer.
Glad I'm not the only one...
Approval voting has nice theoretical properties and is simple as dirt to do by hand.
Burning questions on the future of AI
Endpoint security traces back to antivirus and PC security. Firewalls do not --- firewalls trace back to the Unix culture.
Pivotal | ONSITE at many locations worldwide | Engineers, Designers, Product Managers, Pre/Post-Sales Engineers, Ops, Sales, Admin

Pivotal's goal is to change the way the world makes software and we kinda sorta really mean it.

We value aptitude over alma mater, empathy over a list of APIs. It doesn't matter whether your resumé says PHP or PhD: if you're smart, empathetic and know some stuff, we want to work with you.

We have many established offices worldwide (pivotal.io/locations) and more coming.

We're broken into three main divisions: Pivotal Labs (yes, that Pivotal Labs), Cloud R&D and Big Data.

-- Pivotal Labs helps clients to become better at product development. For engineering we are religiously lean and agile. In practice that means we pair program and TDD every line of code from the outside. Our product managers are fantastic at keeping products sharply focused, our designers are masters from users to pixels.

-- Cloud R&D is where we build the best cloud platform available: We're the majority contributors to the Cloud Foundry project. Our distribution has the fastest-growing sales of any opensource product ever and it's still zooming up and to the right.

Except for upstream code, every line is pair programmed and TDD'd. We dogfood the cutting edge of the technology on our own commercial public cloud (Pivotal Web Services). It works because we took the XP and Lean DNA of Pivotal Labs and scaled it up to build the best cloud platform available.

-- Big Data is our suite of battled-hardened products, now open sourced. Greenplum tackles massive datasets with the comfort of PostgreSQL. Apache HAWQ (incubating) brings Greenplum's distributed query planner to Hadoop. Gemfire, donated as Apache Geode (incubating), is an in-memory distributed grid with years of high performance in high-stakes systems.

-- Generally

At our offices we have free breakfast, weekly tech talks, excellent benefits and competitive pay. Ping pong isn't mandatory, but it's popular. I think west-coast ping pong is harder to beat, but east-coast style is more entertaining to watch. The NYC beer fridge has more IPA than I prefer but I guess that's life in paradise.

Presently we're hiring engineers in Atlanta, Beaverton, Beijing, Boston, Chicago, Dallas, Denver, Detroit, Dublin, London, New York, Palo Alto, Paris, San Francisco, Santa Monica, Seattle, Sydney, Toronto and Washington DC. Most of these are hiring designers and product managers. Other roles are being hired worldwide also.

To see our open jobs and apply directly, follow this referral URL: http://grnh.se/xiy346

You can also email me at jchester+hn-nov16@pivotal.io to answer any questions.

Either of these helps me score one of our referral bonsues (did I mention our generous referral scheme?)

I may not be able to reply immediately, as I am just an engineer here. I won't reply to copypasta.
Looks like the whoishiring bot is broken! Correct link is https://news.ycombinator.com/item?id=12846145
Practical Redux, Part 1: Redux-ORM Basics
Did you actually look at information for either of the countries that you cited? Immigrants make up 20% of Switzerland's population. (https://en.wikipedia.org/wiki/Immigration_to_Switzerland). Japan's economy has been struggling for years now (http://www.wsj.com/articles/why-japans-economy-is-laboring-1...), and their population is aging at a rapid rate, compounding the economic stagnation, something immigration helps to combat (http://qz.com/173379/immigration-is-saving-the-us-from-an-ag...).
MacBook Pro 13“ Function Keys Late 2016 Teardown
"Offer bug bounties based on actual access" why?
Good firewalls can make good security easier.
For the sake of argument, why don't they deserve what happens to them?

Most people don't understand how their car works. But if you own a car and you neglect to change the oil for 50k miles, or you put diesel into your tank and ruin your car, we don't blame the automotive industry for not informing you on proper maintenance. Just like with computers, the information is out there, and it's not the job of the automaker to make sure you know it.

Why are computers different?
How many pennies would've been needed to insert a simple page forcing you to change user/password combo and to choose a reasonably strong password after first boot ?

In the case of Mirai it's not even a cost issue, just lacking good practices.
I actually got closest to my desired state in Linux using the latest Kubuntu precisely because KDE at least provided the interface and facilities to rebind pretty much all the shortcuts... at least in so far as KDE/Qt5 applications were concerned.

The problem that I had was 1) it still wasn't super consistent in operation (due to the layering of control and interaction between shortcuts for the DE and for the WM), and 2) only a subset of the applications were proper KDE/Qt5 ones, and the most commonly used ones (Firefox & Chrome most decidedly didn't conform).

So in the end, while I got to a 70-80% solution, there were still so many irritating exceptions so often that it almost made the situation worse. Because now I could get some applications to behave the way I wanted, but I'd still be stuck with the default shortcuts in some applications, and I ended up having to be extra vigilant of keeping track of which application I was actively using and whether or not I could use my muscle-memory or not.

KDE is by far the most complete architecture for layering in and overriding keyboard shortcuts in a coherent centralized way relative to everything else I could get my hands on. I really wish that the system for doing things like that was actually an interoperability standard vis-a-vis the Freedesktop.org or something.
Smartcar API | Frontend, Backend, Business Development | Mountain View | Onsite | https://smartcar.com

We're a small team (8 people) making a big change in transportation. Technological additions to vehicles are kicking off a new era of better transportation which is affordable, greener, and safer. The automotive industry is undergoing the most disruptive changes since its inception. We believe the future of transportation is Autonomous, Electric, Shared and Connected. Smartcar is building an API platform to solve the "connected" part of it.

We just brought 3 more engineers on the team last month but looking to get 2 more with 2+ years of experience immediately. Our stack is Node.js, Postgres, Redis, Docker, AWS. In addition we are looking to fill a Business Development role.

If you are interested in helping us modernize transportation and enjoy working in a collaborative environment, we'd like to meet you.

$95K to $130K + up to 1.0% equity

If you want to learn more, email me at sanketh@smartcar.com or call me at 530 475 2882. No recruiters.
Location: Portland, OR
Remote: Yes
Willing to relocate: No
Technologies: Bash, C#, CSS (Bootstrap/Foundation/Bourbon Neat), Go, JS (Angular/jQuery/Meteor/React/vanilla), LESS, PHP (WordPress), SASS/SCSS, Scheme, VB.NET
Résumé/CV: http://benaiah.me/resume.pdf
Email: benaiah@mischenko.com
Github: https://github.com/benaiah

http://benaiah.me

Polyglot developer, usually working on web frontends and large WordPress systems (though I'd like to move away from the latter if I get the opportunity). A huge Emacs fan, as you can probably tell by my GitHub, though I use Vim bindings in Emacs and Vim itself for working over SSH. Eager to jump in wherever I'm needed - I have widespread tech experience and I'm very fast at picking up new systems. Remote would be ideal, but I'm happy with an office position. Would strongly prefer not to relocate outside the greater Portland area, but I'll consider it for an exceptional offer. Feel free to send me an email at benaiah@mischenko.com
The problem absolutely is windows 10. From elsewhere in the thread: https://rcpmag.com/articles/2016/08/24/anniversary-update-re...
I know him barely at all. I met him once, at CanSecWest, in 2004. I remember it clearly, though, because he is famous. You basically have to not be in the software security industry to not know who he is.

This isn't some elaborate scheme to hype up Chrome.
I probably know too many folks who don't have that "rock star" attitude to see it as an immediate problem, and therefore am not qualified to provide an informed suggestion here.

But I would agree that, where the attitude does exist, it needs to be changed.

Less rock stars, more janitors/mechanics.
"Seatbelts don't work!" Says widow of man killed in car crash while not wearing a seatbelt.
Here is one of the quoted experts being unhappy with how their words are used to support the article: https://krypt3ia.wordpress.com/2016/11/01/shits-gone-plaid-g...
kindda surprised he wasn't using SES (sendy) for mailing list.. instead mailchimp...
UL isn't a regulatory body. UL testing is voluntary. You may know this, but perhaps many others don't.

I think a UL for internet connected devices is a fantastic idea. Just need to figure out how to get companies to volunteer for such testing. The way it works for UL is that they provide some insulation from litigation. Perhaps if users could litigate IOT manufacturers for inadequate security testing, something similar would materialize for that industry as well?
An attack can be quite effective even if the traffic from a single home is insignificant.

I don't need ISPs to mess with my connection any more than they do already.
Give a guy a break. I did as much as I could and got help too. That's how you learn, right?
Outcomes.com | Berkeley, CA | ONSITE | Technical Co-founder | Full-time

Outcomes.com is a digital health startup based out of Berkeley's SkyDeck accelerator. We help healthcare providers close the feedback loop by routinely following up with their patients after major surgeries or treatments using patient-reported outcome surveys and other forms of digital check-ins. We process and visualize the data to help care teams deliver more personalized, proactive and value-driven care. We're in a huge and growing market as reimbursement shifts from doctors getting paid for doing more, to getting paid based on their actual patient outcomes.
We have a launched HIPAA-compliant product with our first paying customers. We're looking for a technical lead (and potential co-founder) to help us take things to the next level, help define our future product and make it happen. In particular we're searching for someone who can work across our JavaScript stack (AWS/Aptible/MongoDB/Node/Angular/React/D3), understands security best practices, has experience in building self-service products, can lay the foundations to grow our team and is motivated to solve some of the toughest challenges in healthcare.
As a bootstrapped company we have a lot of flexibility and aim to raise our first round of funding early next year. As such this is primarily an equity-based proposition but an opportunity to get in at the ground floor of a company that is already up and running.
Interested? Please email me at francis AT outcomes.com (founder and medical doctor) - I look forward to hearing from you!
The second law of thermodynamics just follows from statistics and a large number of interacting particles. It's not actually inviolable as the article says. There are whole books written about far-from-equilibrium thermodynamics, and the fluctuation theorem quantifies the probability of entropy increasing https://en.wikipedia.org/wiki/Fluctuation_theorem
> the purpose of "char * p;" might simply be to indicate the type of p, but not necessarily to indicate that it is uninitialized.

It's C code. Your interpretation is not the one used by the compiler.

The point was to catch trivial bugs in code. In this case, the interview didn't.
I've often tried to find the "canonical" paper to cite for a certain fact, and found that it barely even mentions the relevant fact at all. It just somehow became canonical because everyone needed a citation for the same thing later on.
Don Knuth has said that he prefers writing on paper instead of writing on the computer because he types much faster than he thinks; handwriting is closer to the speed of his thoughts.
c2b2 Consulting | London,UK | Full Time | ONSITE 3 DAYS | Java Middleware Service Engineer |

Oracle SOA Suite (required) - JBoss Fuse - JBoss EAP/Wildfly - Apache Tomcat - GlassFish - Oracle Weblogic

This is a key position within c2b2’s Professional Services team, delivering high-quality on-demand Java middleware support and consultancy services to our growing client-base. Full time and available to commute to client premises in London 3 days a week.

Our support team consists of highly-skilled and experienced middleware specialists dedicated to understanding our clients' business operations and delivering fast-response solutions.

The role will require credible evidence of technical expertise and client service skills within a middleware environment - and at least three years of practical experience across a number of commercial projects.

http://www.c2b2.co.uk/senior_middleware_service_engineer
Uken Games|www.uken.com|Downtown Toronto|Full-time, onsite

Uken is looking for talented developers to help us build amazing mobile games. In particular, we have positions available for:

Backend Developers

Help us scale our backend to enable a million concurrent players by creating the infrastructure and services (SOA) that underly all of our games. Primary tech is Rails and MySQL, but you'll be working with many more such as Docker, Redis, NSQ, websockets, Hadoop, Spark and InfluxDB.

Software Developers

Join one of our game teams to build something that millions of people will play and love. Primary tech is either unity or Javascript (HTML5.

About Uken

We are one of the largest independent game studios in Canada, with hundreds of thousands of players a day across mobile and Facebook.

More info including full job postings at http://uken.com
> I seem to remember that APFS's encryption had a pretty bad reputation in terms of actual security.

Based on what exactly? APFS actually has really good security. You can encrypt on a per-file or per-directory basis. Each per-file key can be encrypted with different levels (the shared key or per-user keys, so permission bypasses are useless).
Zhang Yimou definitely has a type (which Hero conforms to), and his popularity means that he's almost synonymous with "Chinese export film", but I assume others have their own styles.
How to Run Great Board Meetings
I'm starting to believe the base problem is a difference between a software company that has to test the heck out of every patch because of their large customer base (Microsoft) and a company that doesn't have a complete consumer facing experience[1] (Google). Seven days is not enough to patch anything that needs to be tested in the extensive manner required. An update / disable Flash would have been good enough until a proper patch on the day IT has planned (Patch Tuesday) activities around the deployment of patches.

I'm starting to think the ultimate PC OS for IT would be one with a transactional audit trail on all changes to the PC.

1) try calling Google about a problem if you disagree with this statement
Which sell for about the same price as a MacBook Pro. I'm sure the margins are good, but the cost to make a high quality laptop seems to be going up.