skysight-inc/HackerNews huggingface dataset:
Maybe we need liability for software vendors?

That's a common suggestion, but since no-one knows how to make completely secure systems yet, I don't think it's that simple.

If you're talking about a general presumption that anyone selling software that has a security vulnerability becomes liable for any consequential losses, then it seems likely to result in only large businesses with the war chest to fight a liability action being able to make any sort of remotely risky software and/or in a new insurance industry popping up so that the problem reduces to money and the cost is ultimately passed on to software users in higher prices. While there might be some pressure to improve security as a result, the negative side effects could be far worse for the software industry as a whole.

The next logical step is some sort of penalty for gross negligence or a repeated pattern of failures, where a supplier making reasonable efforts and following generally good security practices isn't at risk of being sent under instantly because of some new type of 0-day that no-one had seen before. But then you have to figure out what constitutes good practice and paying due care and attention, and that in itself is not an easy issue.

With exemption for those who provide full source code.

I don't see why that should make any difference. Having access to a huge amount of source code is only a benefit for security if you have the skill and resources to perform a detailed audit of your own, and if it's practical to spend that kind of time and money, and if you also have the authority to do something useful about any vulnerabilities you do find.

If someone is giving software away for free as a kind gesture, that's one thing, but I don't see why anyone supplying software on a commercial basis should get out of jail free on security just because they provided source code access. The FOSS world provides ample evidence that many eyes do not, in fact, make all bugs shallow.
Where to find good resources for “deciphering” a HTTP response message
I am using an HTTP REST API what upon requests returns a response message with the following level 1 properties:

[ '_readableState',
'readable',
'domain',
'_events',
'_eventsCount',
'_maxListeners',
'socket',
'connection',
'httpVersionMajor',
'httpVersionMinor',
'httpVersion',
'complete',
'headers',
'rawHeaders',
'trailers',
'rawTrailers',
'upgrade',
'url',
'method',
'statusCode',
'statusMessage',
'client',
'_consuming',
'_dumped',
'req' ]

This structure also contains a lot of nested properties. I would like to go through the entire structure - property for property - to understand each of them.

I am able to find general resources on the HTTP protocol but I have been unable to find resources that allow me to work "backwards" from the content of the response object to more general explanations of how each property takes its place in the standards of the HTTP protocol (to the extent a property does not deviate from the standards or constitute a property special to a given web service).

Does such a resource exist - partially or wholly? Any suggestions would be greatly appreciated. TIA!
Realistic alternatives to Apple computers
have you used them all? I get the feeling you just assume they're unusable. I used a macbook for years and happily switched to a HP Spectre, the different trackpad was never an issue. You could also just get a USB mouse, better than
any trackpad (in my opinion).
What's special about FYN? I search for round-trip flights from IAD and had no trouble. The standard route seems to be IAD-PEK-URC-FYN.
Houston, TX | GoCo, Inc. | http://www.goco.io | Onsite

Software Developer - React.js, Redux, Relay, GraphQL, Ruby on Rails

GoCo is growing rapidly and looking for awesome developers to join our team. Our tech stack is React.js, Redux and Relay in a Single Page App coupled with a GraphQL Server powered by Ruby on Rails. We've got a talented team and foster a fun, transparent and collaborative environment.

== About the company ==

GoCo was founded in 2015 by a group of serial tech founders with multiple startup successes. We're building a simple and free HR platform that helps businesses manage their employees, payroll, and benefits from a single location. Our goal is to make life at work awesome for both the business owners and the employees. Over the last 18 months, we’ve proven a product market fit by signing up 1000s of companies. We are now well capitalized and looking to scale the team.

Learn more: https://www.goco.io

== Apply ==

Email me directly: jason (at) goco.io

Apply online:
https://angel.co/goco/jobs/176358-lead-ui-engineer-react-js
Hammer Lab | New York, NY (NYC) | Full-time, onsite

We’re a team of software developers and data scientists working to understand and improve how the immune system battles cancer. We're looking for (1) a senior machine learning specialist and (2) a senior development operations engineer.

1. Both cancer and the immune system are complex collections of cells whose interactions are difficult to predict. If you have done research in a top deep learning lab and have built and deployed models used in a high-value application, your skills could improve outcomes for patients enrolled in clinical trials of personalized cancer vaccines and combination immunotherapies.

2. The ideal candidate will have installed and serviced server and network hardware in a data center, written software to install, configure, and monitor production services, structured the build and release process of high-quality open source software, and secured and governed petabytes of data. We recognize that it’s rare to find an individual with experience in all four of these domains, however, so we are happy to hear from anyone with strong skills in one or two domains and an interest in learning more about and having responsibility for the rest.

Check out the job descriptions for more information, and send us an email! http://www.hammerlab.org/jobs/
Location: Harrisburg, PA, USA

Remote: Yes

Willing to relocate: No

Technologies: full stack, C#, VB, .NET, JavaScript, PHP
ASP, SQL, ASP.NET MVC, jQuery, Bootstrap, CakePHP

Resume: http://shwuzzle.com/williamdistefano_resume.pdf

Email: wdistefano [at] shwuzzle [dot] com

Website: http://www.shwuzzle.com
https://www.seedrs.com/moley
PrepScholar | Boston, MA | Onsite | Full-time | Full Stack Engineer | $100,000-$180,000

PrepScholar’s mission is to improve education at scale through technology. Our flagship product is an SAT/ACT prep program that automatically learns the strengths and weaknesses of each student and creates an individualized learning program through machine learning. You can think of it as an automated tutor that provides a compelling learning experience at scale. We also have a large web presence with over two million monthly visitors to our free tools and articles.

We believe we have a major advantage over other companies in our space because of our technology-centered and analytical approach to education. We're profitable and bootstrapped, and you'll join as an early engineer working on products that impact millions of students worldwide.

Our stack:

* Sass, JQuery, Backbone

* Django/Python

* MySQL

* AWS/Linux

Requirements:

* Strong foundation in computer science and software engineering, including competencies in data structures, algorithms, databases, software design and dev ops.

* Strong hands-on experience with our core technologies is a big plus. In particular:

----Python and Django

----JavaScript and JavaScript MV* frameworks like AngularJS, Ember, Knockout, or Backbone

Email us at job.engineer+hn@prepscholar.com, and read more at
http://www.prepscholar.com/sat/s/careers.
Definitely — when you see people afraid to do something, that almost always indicates a deeper organization problem.
Thanks for the link. I really liked the music so ended up getting it.
We have always been in a 'post-file-system-compression' world. But people want to do things like fit on an SSD, so compression continues to be useful.

Note though that some controllers do compression to reduce write amplification (e.g. the SandForce controllers used to do this). So, by using filesystem compression, you might be increasing write amplification and shortening the SSD lifetime.
pMD | San Francisco, CA

Software Engineer, and Sales Engineer https://www.pmd.com/careers If you're interested in health care, helping doctors/nurses/staff take better care of their patients and work on the forefront of new healthcare models and the tools they are beginning to need, come join us. We're a profitable small company < 30 people, with double digit annual growth, no VC, and we move very fast with no red-tape. Stack: iOS/Android/Java/MySQL/JS/Backbone.

I actually found my current job on the monthly HN job post a few years ago, and still here :) This is a very unique position given it's a mix of pure engineering, and a significant customer facing role. Some testimonials of the software: https://www.pmd.com/reviews

Contact: careers@pmd.com

*Unfortunately, we are unable to provide visa sponsorship. Candidates must be authorized to work in the U.S. as a precondition of employment.
SEEKING WORK - Remote or based in Belfast, UK

Android Developer with 3+ years experience. Can work with Kotlin or Java. I also have experience with Rails and Django.

Portfolio + Resume: https://dscottpi.github.io/

Contact: dscott304@gmail.com
Newest weapon in U.S. hunt for insider traders paying off
Maybe I am a hold out but I write a lot by hand in my day to day work. I take notes at meetings, when reading documents, and even writing notes to my self. I am also dyslexic. I find that cursive is easier for me to read and write. My print handwriting is sloppy and hard for most people to read. However, my cursive is easier to read. I think this is due to the extra focus that I take when writing in cursive.

Through university, I took all my notes and did all of my hand work, civil engineering major, by hand. I never wanted to carry a laptop with me because it was just extra weight to haul around. Also, to be fair, taking math heavy notes on a laptop would have been hell. Affordable touchscreens/tablets were just coming to market when I was in grad school so...

In the professional world, I run into a lot of people that are amazed I write in cursive. This is probably due to so many engineers using drafting lettering out of conditioning.
Countdown to a sci-fi movie where this idea is only half understood and the "proof of concept" device opens a portal to hell, where we meet the real Maxwell's demon...

Now that I've typed this, I want to see it happen.
Salary will range from $80-120K. (That's like $150-$200K in CA with Idaho cost of living adjustment :) )

It's fine to post the desired salary range for a candidate no matter what that range is, you'll filter out the people who are or are not willing to work for that range, which is fine.

But 80-120 in Idaho is not equiv to 150-200 in CA. Most outfits that I've worked for and spoken with pay based on "fair and equitable" comp and do not attempt to complicate the situation with a "cost of living bonus".

By phrasing it the way you have, it sounds like you're trying to get away with cheaper comp "because of lower cost of living" without actually considering that you're competing against many other companies willing to hire remotely that pay significantly more regardless of locale.
Would it then make sense to join a company that is mostly composed by remote workers?

Not sure how easy that would be in case of ML. But in other areas it's not impossible. E.g. GitHub.

I'm sure other HN readers will have much more info.
Apple blocks new WoSign certs
I find this baffling. They're disclosing a vulnerability that has no patch, and they're clarifying that their own browser has a workaround. That's not self-promotion. In fact: not clarifying that would have been irresponsible.

3 minutes later, after a second read:

I understand that you're uncomfortable with the idea that for some users, switching to Chrome is the most reasonable workaround for a very serious vulnerability. But it is a factual statement.
BA flies Cape Town -> Heathrow. From there we went on direct to SFO but I'd be surprised if you can't get to SEA from there.
ICE Health Systems | Calgary, AB | Full Time, Onsite | http://icehealthsystems.com/

ICE Health Systems is a software company committed to developing innovative technologies for the healthcare community in order to improve the way healthcare is delivered.

ICE Health Systems initially began as Patient Education software, and has since, expanded its suite of products to include a cloud based, electronic health record system, ICE 5, and an online learning and content management system, ATLAS.

In order to create an effective solution for healthcare providers, we firmly believe that experts in the healthcare communities should be involved in the conceptual development and tangible end product. ICE Health Systems turns to trusted advisors for intellectual contributions to create truly unique systems created for healthcare professionals, by healthcare professionals.

Stack: Java (Spring), Hibernate, MySQL, BackboneJS, ReactJS, TeamCity, BitBucket

Position(s): We are looking to hire two Junior/Intermediate Front End Web Developers to add to our development team.

Job posting: http://icehealthsystems.com/web-application-developer

Contact me directly if you are interested, oconti@icehealthsystems.com.
OpenEye Scientific | Santa Fe, NM | Onsite/Fulltime | http://www.eyesopen.com/careers

OpenEye Scientific Software provides software to the Pharmaceutical Industry for molecular modeling and cheminformatics. It has done so since 1997 in its continuing mission to provide novel software, new science and better business practices to the industry. Central to our approach is the importance of shape and electrostatics as primary variables of molecular description, platform-independent code for high-throughput 2D and 3D modeling, and a preference for the rigorous rather than the ad hoc.

We have three open positions in Santa Fe, NM. Some of the technologies we use are Python, Go, C++, Django, Docker, and AWS. We are growing our small team and looking for talented backend engineers and DevOps engineers.

Santa Fe is a beautiful mountain town with excellent outdoor recreation (hiking, skiing, cycling) as well as art, music & food culture.
The man page for acme-client shows how to automate renewal with cron. It is quite simple.

http://man.openbsd.org/OpenBSD-current/man1/acme-client.1
NYC - Paperless Post (Visa) / Onsite.

Sr. Software Developer - https://www.paperlesspost.com/about/jobs/479639

Paperless Post helps users create custom online and paper stationery through our elegant technologies and powerful design. Our customers pay us directly for a product they love and use for milestone events—like weddings and holidays—which means that we can focus on quality without having to answer to advertisers.
SEEKING WORK

Location: Bangalore, India

Technologies: Frontend: React+Redux, Angular 1, VueJS, BackboneJS, HTML, Javascript, Jquery, CSS, Sass

Backend: PHP, Laravel, Codeigniter, MySQL, Postgresql, Mongodb, Redis, Elasticsearch, BigQuery, Beanstalkd, Supervisord, Gearman, Memcached

Other Skill: Photoshop, Built Wordpress plugins, Chrome Extensions and Atom editor plugins.

Workflow: Webpack/Gulp/Grunt, Git/Subversion, Bower, Composer, NPM

Résumé/CV: https://www.dropbox.com/s/09sjfls4osen8dy/Vivek_Gupta_Resume...

Email: mail+hnfl@vivekgupta.com

P.S. Open for fixed price and hourly price projects
PrepScholar | Boston, MA | Onsite | Full-time | Project Manager | $100,000-$200,000

PrepScholar is also hiring Product Managers!

As a Product Manager, you'll be launching a brand new product for a graduate exam (GRE/GMAT/LSAT/MCAT). You'll oversee the entire go-to-market strategy, including product development, test content, customer development, marketing, and sales. You'll be responsible for your product's P&L and plan to grow it to be the leading product in its category.

Responsibilities

* Build and manage a product roadmap for product launch and iterations

* Interface with engineers and test content developers to create the product

* Develop effective marketing materials for all our online channels

* Manage P&L and develop a strategic business plan to grow your product to a dominant position

Our ideal candidate has:

* Experience developing and shipping products and technologies

* Demonstrated ability working with technical teams to rapidly produce prototypes and iterations

* Understanding of financial and business metrics, including P&L, conversion rates, customer acquisition costs, net promoter score, viral factor

Please send your resume and cover letter to job.pm+hn@prepscholar.com, and read more at

http://www.prepscholar.com
Of course there is, in cases like this anyway. The problem here wasn't weak passwords, it was that all the passwords were the same, so it was trivial to automate the attack (well that and the devices had a command injection vuln.)

That can be fixed by requiring users to set a unique password on setup, or shipping each device with a different password. This exact problem occurred in the UK where ADSL router manufacturers used to ship the same wireless WEP/WPA key on all devices, many got compromised, and now they ship with a unique key per device.
Legal minds of HN: would the Sony vs Hotz case have been thrown out if this provision was in place at the time?
Somehow that just cries UBI to me. But this will always be torpedoed by the naysayers who predict that the majority will then just kick back and play video games all day instead of working to make their visions become reality.
Eden Health | New York, NY | Onsite | Full time | Full Stack Developer

http://getedenhealth.com

Eden Health makes it possible for companies to provide a concierge physician for all of their employees.

We are building consumer-grade software to make it easier for patients to communicate with their doctor and for clinicians to spend time focusing on their patients -- rather than dealing with billing and other administrative work.

We're looking for a full-stack developer who is interested in joining a small team (with big ambitions) to help build our product from the ground up. You will have flexibility and control over our tech stack. You will work closely with our doctors, nurses, patients, and the founding team to develop our technology products that have a direct impact on the health and happiness of our patients and their families.

Current tech stack: Node.js, React.js, Swift, (Java upcoming)

If you're interested or have questions, please email scott@getedenhealth.com

Keywords: JavaScript, fullstack, NYC, iOS, Android, healthcare
Front Row Education -- San Francisco -- https://www.frontrowed.com

* Senior Backend Engineer (ONSITE/REMOTE): https://frontrow.workable.com/jobs/340954

Come change how 5+ million US students learn Math and Language Arts. Use data, advanced type systems, great product design and deep pedagogy to change lives.

World class, tight-knit colocated + distributed engineering team in the continental US.
One of the world's highest traffic Haskell products out there, 100% of backend and tools are in Haskell.

Presence and stewardship of the Open Source community.

Use the best and simplest tools for the job, maintain the no-firefighting culture, sleep soundly at night.

Front Row is venture funded, has a proven business model and is on the road to profitability.
Keywords: Haskell, React.JS, FlowType, Ansible, AWS, PostgreSQL
I'd like some mixed videogame music, like https://www.youtube.com/playlist?list=PLZPilAQ9a3X1m1fivRd6s...

also 8 bit prodigy ain't bad https://www.youtube.com/playlist?list=PLUYvPBhvoPyGwG3fKELVN...

and old chiasm albums as well. anything that 'disconnects' me from the surrounding, as I'm extremely attentive to sounds. traditional concentration music usually makes me focus on the music itself.
Good point. From what I've heard, many hospitals have already gone this route internally with automated drug dispensers. Publicly, this might take a lot longer since there is an ageing population that is simultaneously more reliant on pharmaceuticals and very adverse to change and technology.
Im not a security guru, but I've thought of a couple solutions to the problem of botnets.

1) A consortium of manufacturers of IoT devices banding together and signing an "autopatch" or "autohack" agreement. This would be an open source, public hack-and-patch society that freezes out any manufacturers that don't agree to it. All customers would simply sign in their EULA that their devices are authorized to be "patched" by any means necessary if found to be insecure by the auto-hackers.

2) As botnets at the Mirai scale are now a matter of national security, make the NSA do its job and do roughly what is outlined in 1. Controversial, sure, but you can be damn sure that they already know about these unpatched devices and how to exploit them.
The time I've seen this work well was basically where I and a more junior dev hung out on https://appear.in. Most people don't feel comfortable just being on an hours-long video chat work-along though.
This is the reason Schmidt uses an iPhone
NYC - Paperless Post / Onsite / Visa

Sr. Software Dev - https://www.paperlesspost.com/about/jobs/479639

Paperless Post is seeking software engineers to help build and refine a sophisticated platform with a deep network of over 100 million users. You’ll work on all parts of the development cycle, in many different areas of code, and on constantly releasing features as part of a deeply collaborative team with a robust development process. Working with a cross-disciplinary team, you’ll build and support a reliable, scalable product while balancing requirements and complexity.
This is incorrect. The programmed pinned apps in the current releases of Win10 are only applied to new installs or when upgrading from Win7 or 8.x. They are never applied during Win10 updates (unless there's a bug of course). The entire pinned space is customizable by the user and user customizations are always maintained.
The thing is, that's the opposite of the net neutrality world; it's the telco world, where the monopolist gets to segregate your traffic and charge arbitary prices for it.

I'm old enough to remember when UK modems had to be "BABT approved", adding considerably to the price. See (1993) https://groups.google.com/forum/#!topic/uk.telecom/6j1bVHcq1...
Correlations of stock to candidates’ poll numbers suggest sectors’ preferences
Exactly what is the benefit of them waiting until an official fix is released if they have evidence of actual exploitation? How is anyone better off not knowing the details of a vulnerability that people are exploiting already? I'm having trouble making sense of your arguments on this thread, and I really am trying.
Seneca Systems | Redwood City, CA | ONSITE

If you want to...

* Work on the platform local governments use to manage their city services

* Solve interesting problems that are having a daily impact on the way communities function

* Work at a company dedicated to upholding strong values externally and internally

* Work with team members who personify those values

* Get your own private office because we hate open space set-ups

* Work at a YC company (though this should be the least important thing on this list)

* Have this dog randomly stop by your office to say hello: https://i.imgur.com/kTUBQLD.png

...then we want to talk!

See the positions we're hiring for at http://seneca.systems/careers

View our employee handbook at https://github.com/SenecaSystems/employee_handbook
Pocket Guide to Writing SVG
Scroll down and you'll find Italic, Chancery Italic, and Flourished Italic here: https://imgur.com/a/GezeK
For sure, there's a lot missing, title is probably misleading. Definitely nothing new in terms of the CAD, browser CAD has been well done, just look at professional products like Onshape. Right now it's primitives only for this, one of the next steps is to look at how full meshes can be optimized. A simple example of this could be wings: https://people.eecs.berkeley.edu/~pabbeel/papers/2013_gp_win...
Large international state-funded scientific collaboration?