skysight-inc/HackerNews huggingface dataset:
Traffic in general can be (roughly) summarized as application, infrastructure, and signaling. On top of this, it's clear that different address space is used by different organizations for different purposes. Classify the traffic based on these differences and carve up address space to suit the differences, and perhaps differences in the transport protocols that match the practical differences in how the traffic is used.

For example, bgp traffic shouldn't work on non-routers. Certain signaling (icmp and udp traffic flags for non-peer traffic) isn't needed by most customer equipment. And it's stupid that IP spoofing works at all, much less on robust servers on internet backbones. It's clear there is traffic allowed on parts of the internet it shouldn't be allowed on. Changes could be made to correct this, and no, they are not political.
Defending the Copycat
Google "block-this". First result: "Block This - Open Source Ad Blocker".
How do you respond to investors who push back on your company for being remote?

I've had dozens of institutional VCs say that they wont invest in us because we're a 100% remote company.
Location: Ottawa, ON

Remote: Yes

Willing to relocate: No

Linkedin: https://ca.linkedin.com/in/nicholasbsavage

Email: nicholas.b.savage@gmail.com

I am graduating at the end of the year with a Bachelor's of Commerce in Accounting. I am looking to pursue my CPA Designation when I am done. I am looking for exciting and challenging work in the tech industry in an entry level position for something related to accounting, bookkeeping, accounts payable/receivable or finance. I'm a nerd at heart and dabble in programming and self host my own Debian server. I'm looking to work for a company making something outstanding and get experience in the field and in accounting.
Is not the 2nd Law of Thermodynamics always circumvented on Earth? We absorb more energy in the form of light from the sun than we emit.
If anyone needs Linux support, IMO the only horse in the race is Dell's "developer" line: http://www.dell.com/developer

A couple different Lenovo sales reps have told my team they won't support Linux. We'd have to wipe back to Windows.

While it's been a few years, HP said effectively the same thing.

The Dell line has options for 4k, up to 64G RAM. 17" screen if you want to lug around a cinder block (ok they're not that heavy).

Arch runs with minimal twiddling, like installing Broadcom drivers.

We're done fiddling with Linux on "Windows" laptops thanks to the Dell line.
Panasonic Toughbooks have superior build quality compared to Apple. I also love that mine has a hardware on/off wireless switch, plus a removable battery and hard drive and a 3 foot drop rating. Runs Arch like a dream.

And if you're willing to spend the big bucks, Panasonic offers some pretty rad premium options like 1000 Nit daylight readable display, built-in GPS and 4G wireless.

If you're on a budget, look for used models on Ebay that are being dumped for cheap after a corporate lease runs out.

Source: have owned both brands for many years
I'm a freelance iOS developer located in San Francisco. I've got 8 years experience with iOS and 11 years in mobile. I'm willing to work onsite in SF or remote. You can find out more at: http://www.13bit.io/.
Please feel free to email me tyler(at)13bit(dot)io. Thanks!
One easy thing I've found was to simply charge less. if you substract all your expenses - commute, office, lunch and coffee money, you can get away with charging a lot less.
That way you can target a wider range of roles (roles that would pay too little for onsite work) and clients can justify your remote demands - they pay less than for onsite work.
Guess I've got some reading ahead of me. Thanks!
Cirrus earns Vision Jet certification
Software Engineer | Scalable Press | San Francisco, CA | Salary range: $105k+ depending on experience + options | Onsite | No resume needed

Hey HN, Eric Zhang here, formerly YC W11, current CTO @ Scalable Press. I’m posting because we are bootstrapped and profitable, and we’re hiring software engineers (with 1+ year of industry experience). To give you an idea of what you’d do, one engineer on our team wrote an API that helps print over 10,000 shirts a day. Our stack is node, react, angular, and mongo.

We may have already answered your questions about us on http://scalable.press/software-engineer/. It covers hiring process, engineering culture, past projects, and future projects you might work on with us.

Interested? Email me and mention you’re from HN. No need to send a resume—I’d like to hear about what you’ve been working on lately, and feel free to include any relevant project links.

ericzhang@scalablepress.com

http://scalable.press/software-engineer/

PS We're also hiring a UI designer and a graphic designer. If either sounds like you, definitely reach out.

We've had a lot of success growing our team from HN's hiring thread and hope to continue!
If you need a solution that works with your existing load-balancer/proxy/L7 router/nodejs server/microservice architecture, I built ten-ply-crest [0]. It's express middleware that is fully automatic to register new domains, when used with Consul and an L7 router (Fabio, Traefik, Envoy, HAProxy) to route to .well-known/.

Ten-ply-crest can run as a standalone microservice or on top of any existing express app. It supports pluggable backends for storage, and doesn't rely on the local filesystem.

It's really short on docs, but "release early and often!". It has been running all my sites since the beginning of the year, Feel free to open issues with any questions and I'll help you get running.

If you need a complete client lib for the LetsEncrypt API in JS, that's included too [1].

[0]: https://github.com/nextorigin/ten-ply-crest

[1]: https://github.com/nextorigin/ten-ply-crest/blob/master/src/...
Some of the timestamps I saw (I only looked at a few of the files) were as far back as 2001. Linux servers are obviously extremely popular on the Internet nowadays but I can remember "back in the day" when Solaris/SunOS was the popular platform (and, to a lesser extent, the others mentioned) and one of the primary targets. There were lots of exploits for {sendmail, BIND, the NFS server, ...} running on Solaris -- which was a PITA to keep up-to-date.
I've been googling about them the moment I heard about such laptops. I don't care about the brutal build, the hardware is interesting. According to this Reddit thread they have serious problems with Linux (even though they have Ubuntu installed by default).

https://www.reddit.com/r/linux/comments/48y2db/system76_lapt...
I think the very last paragraph summarizes it a bit better (and more concisely):

"Relentlessly prune bullshit, don't wait to do things that matter, and savor the time you have. That's what you do when life is short."
I'm not moving the goalposts at all. I told you several posts upthread what the word "rigged" meant to me. (That was your word, but you didn't define it, so I did, because I suspected that we didn't share the same definition. So if I'm moving the goalposts, I did it then, and it's taken you until now to notice :-)
Apple | Cupertino, CA | Data Engineer |Full time | Onsite

Apple is a technology company headquartered in Cupertino, California, that designs, develops, and sells consumer electronics, computer software, and online services.

Apple's ■■■■■■ team is looking for both junior and experienced engineers to work on big data, machine learning and high-scale, low-latency distributed systems. As a part of this team you will use machine learning at very large scale to build ■■■■■■■■ systems.

Requirements:

required:

- Ability to code in any statically typed language, excellent understanding of Datastructure and Algorithm (We will train you on rest of the stack). Fresh college graduate welcomed

nice to have:

- Hand on experience with Spark/Spark streaming/Kafka.

- Functional programming experience in Scala (using monoids/semigroups etc in large distributed systems)

if interested send your resume to mansur.ashraf@apple.com
The Extinction of the Dodos (Erlang/OTP Style)
Lots of people seem to be complaining about the lack of a RAM upgrade to more than 16gb, and lack of an nvidia GPU for cuda.
Is fragmentation really an issue on SSD? Isn't access essentially O(1)?
Scott Sullivan

Location: Boulder/Denver, CO

Remote: ok

Willing to relocate: Depends on the location

Technologies:

- Languages: Java, C, MATLAB, Mathematica, Python, Ruby, OCaml, Lisp, Haskell, Octave
- Software: Unix, Linux/Ubuntu, LaTeX, Microsoft Excel, Django, Postgresql
- Skills: math, ML, data science

Resume/CV:
https://drive.google.com/open?id=0B8XBeyOkf1TIZlhUZ29hMEtsa1...

Cover letter:
https://docs.google.com/document/d/1D5SLszzsvR0R8iUoiTMzcyJe...

Email: scottmsul at gmail.com

Recently graduated from CU Boulder with a Masters in physics. Passionate about data science, machine learning, and web development. Highly motivated self-learner. Strong communication skills, especially with technical details - was a physics TA for several years, written technical papers for graduate school, given technical powerpoint talks.

Some examples of my work:

Predicting electric vehicle ownership / charging times given household power consumption:
https://drive.google.com/open?id=0B8XBeyOkf1TIN1lLakludEtIV0....

Predicting the California Democratic primaries using Twitter data:
https://drive.google.com/open?id=0B8XBeyOkf1TINFBkT1RhYkRqUV...
You're kidding, right?

There's a reason why the entire political infrastructure of United States can only produce 2 competitive candidates, both of whom are fully in support of global neoliberalism. Yes, if my politics had to be constrained by a system that is specifically interested in denying me alternatives that would challenge its hegemony, then I would pick Clinton over Trump.

But I don't have to. I can say that the whole thing is a rotten mess. Because it is. Eating shit because the chef only serves shit and worse shit isn't rational or realistic. It's just eating shit.

And there will be people who continue to die in order to uphold this hegemony, and so long as they are unimportant people that can be written off as statistical inevitabilities of rational decision-making by the people who benefit from their suffering, I suppose the system will continue receiving the support of people like you?

The thing that puts me off most about mainstream politics is how easily everyone who accepts the system (that includes liberals and conservatives and a whole spectrum of people who accept the basic tenets of the system) writes off the deaths of others. Just what makes you so qualified to rationally decide which deaths are acceptable and which aren't?
I'd listen to this for sure. Is following on Twitter the best way to stay updated on the podcast?
> or at least 18 months from when the Google Store last sold the device, whichever is longer.

Which is illegal, EU law demands 24 months from when it was lost sold anyway.

> they are not promising major updates

That’s another issue, many security features are only added in major updates (sandboxing Mediaserver, etc).

So you only get hotfixes, and not long-term fixes.
Name: Maurice Tollmien

Location: Hamburg, Germany

Remote: Yes, but rather relocate.

Willing to relocate: Yes, absolutely, definitely!

Technologies: C, C++, OpenGL, GLSL, Python, Golang, Shader, Math, Physics, Simulation, Computergraphics, Open Source, Linux

Résumé/CV: https://github.com/MauriceGit/Organisation/blob/master/Mauri...

Email: maurice.tollmien@gmail.com

I just finished my Masters Degree in Computer Science, have lots of smaller Open Source projects and am looking for a job in the Computergraphics area.
Qualcomm aquires NXP
Location: Earth

Remote: -

Willing to relocate: YES

Technologies:
Spark (PySpark & SparkR)
, AWS Redshift
, Python
, R
, ElasticSearch
, PHP
, MySQL
, Postgres
, Linux
, Redis
, some C and Java

Résumé/CV: http://s3.amazonaws.com/amirbehzad/pro_resume.pdf

Email: hello@behzad.email
There is a free PDF on the nature site, but the paper is also available on arxiv (https://arxiv.org/abs/1407.4437), the first version on the arxiv dates back to 2014. It's strange, but I find the arxiv version much more readable in terms of typesetting than the polished version in nature. Also there are additional appendices in the arxiv version.
Certainly MBV is one of my favourites in that genre, yes. Slowdive, Lush, Mazzy Star... that kind of thing is my "night programming" playlist.
This article seems a little light on details, and the original paper (not behind a paywall!) is quite dense, but some of my favorite paper's on Maxwell's demon are:

http://www2.pitt.edu/~jdnorton/papers/ExorcistXIV/Exorcist1....

http://www2.pitt.edu/~jdnorton/papers/ExorcistXIV/Exorcist2....

...and to ease into things, an article by one of the authors:

"The Simplest Exorcism of Maxwell's Demon -- No Information Needed"

https://web.archive.org/web/20140309110028/http://www.pitt.e...
It's like politics, it becomes an echo chamber every fall when the big players make their announcements (aka marketing).
dupe https://news.ycombinator.com/item?id=12841860
Building Facebook Chatbots with Python
From his own blog: "Since 1920, the vast increase in welfare beneficiaries and the extension of the franchise to women — two constituencies that are notoriously tough for libertarians — have rendered the notion of “capitalist democracy” into an oxymoron."

He's mad that women can vote because they don't vote libertarian.
We definitely are doing interesting things here, and across a wide range of different projects too!
We are looking worldwide for people to join our team as we big growth plans here in Edinburgh, so no real preference on current location.
The Disclosure Indicator
These files are not often written to, and almost never randomly written to, so it's a bit of a premature optimization. Same with the text log files that I have compressed. And it negates part of the speed benefit of having less data to read.

Causing fragmentation to avoid fragmentation is a bit silly, especially when it means that none of the space saved is contiguous, leading to other files fragmenting too.
Smarkets | Full Time | ONSITE (London, UK)

We're a modern betting exchange, going technology first to enable proper price competition in a field of fat commissions. Join a small, agile, and fast-growing team, in our beautiful office in St. Katharine Docks.

Smarkets develops a reliable, low-latency, highly concurrent betting exchange based on trading exchange designs. We're also building a fast, modern web interface to allow for a smoother experience. Servicing our users is top priority.

The Smarkets platform is written predominantly on Python and Erlang, and relies heavily on asynchronous programming techniques. We use REST where we can. Life at Smarkets circles around people, version control, configuration management and automation. We can - and do - deploy to production several times a day.

We are looking for:

* Infrastructure Engineers, both junior and senior (think midway between SRE and devops; security background is a bonus)

* An Infrastructure Lead Engineer

* Software Engineers

* Web Engineers

* Security Engineers (job ad not up yet, feel free to mail me directly if interested)

If you like the idea of flat structure and practical engineering approach, see our jobs at https://smarkets.com/about/jobs/ . (A while back I wrote an overview about our engineering challenges, which you can find at https://smarketshq.com/the-challenges-of-running-a-betting-e... .)

P.S. We trust our employees to be responsible in all things. In that vein, you also get to set your own salary.
Prenups for Ideas Are All the Rage with Millennials
flatfox.ch | Switzerland, on site | Full-time, all levels

flatfox is a proptech startup building a next generation SaaS for landlords. We are looking for devs with high ownership who like to move fast and have an impact with our customers. We're small, you're going to be one of the very early hires, so, lots of opportunity to make a dent.

We need:

* Full-Stack Engineer (django/kubernetes)

* Mobile Engineer (Android/iOS, react native)

Apply here if interested: https://flatfox.ch/en/jobs/ or questions to jobs@flatfox.ch
I’m going to say no to the new MacBook Pro
Let's Encrypt worked well for me the other day, except that I hit a firewall problem. I firewall all "new connection" outbound traffic, so that if a web app gets compromised, it can't start sending spam or try to spread a compromise to other sites.

This caused Let's Encrypt to fail.

I worked around this by temporarily allowing outbound connections, but I wonder whether this needs to be fixed more generally? It seems reasonable to me to block all outbound connections on a web server that isn't expected to need any. But Let's Encrypt's (perfectly reasonable) need to renew certificates breaks this assumption. Unfortunately, it doesn't seem easy to set up an exception on an IP-based firewall to allow Let's Encrypt outbound connections only. This makes automated renewals hard.
REMOTE Software Engineer Position
We are looking Software Engineer to work in a small Agile team building large scale Single Page Applications.
You’ll work with the latest client-side technologies including: JavaScript, Angular 2, TypeScript, Knockout, Gulp.JS, Ionic and Xamarin.
You’ll work with server-side technologies including: C#, ASP.NET MVC and SQL Server.
You’ll have access to the latest tools including: Visual Studio 2015, Visual Studio Code, TFS 2015, GIT and Octopus Deploy.of operational data.
Apply online at: http://www.cartegraph.com/careers/
Positions:

JavaScript Developer (Knockout) - Montreal (ONSITE)
Front-end Developer (HTML5, CSS) - Montreal (ONSITE)
Rails Application Developer (Ruby, PostgreSQL) - Montreal (ONSITE)
SRE - Montreal (ONSITE, REMOTE)
Back-end Developer (Erlang, C, C++) - Montreal (ONSITE)
Analytics Developer (Hadoop, Spark, Cassandra, Vertica, Kafka) - Montreal (ONSITE)
Technical Product Manager - Montreal (ONSITE)

AdGear is a digital advertising technology company providing platforms and services for digital media innovators such as publishers, advertisers and media agencies. We operate a full-stack advertising platform enabling our customers to innovate with formats, audience data, reporting, pricing and distribution strategies.

For more information, complete description of roles, and details on applying, please see http://jobs.adgear.com/

Please make sure to CC lp at adgear.com with your email to jobs at adgear.com so we know you're from HN :)
or that face time replaces lack of tl;dr in the "long commit report" ?
Pathgather - http://pathgather.com - ONSITE - New York, NY (NYC)

At Pathgather, we believe that learning matters and that modern companies can't afford to provide the same tired, low-quality experiences they've been using for the last few decades. Our enterprise learning platform is used by some of the largest companies in the world (Qualcomm, Walmart, HP, Visa, Twitter, etc.) to help their employees find great learning content from any source, share knowledge with their peers, and track their progress towards career goals - and we've wrapped it all up into an experience that employees actually love to use.

We're looking for a skilled Backend Engineer to join the team. Our backend isn't your typical Rails system - we serve up a GraphQL API to power our client apps, which frees our backend team from the tedium of writing a ton of disposable endpoints entangled with view logic... instead, we focus on different tasks: designing our database for performance, integrating with a variety of external services, and architecting our overall platform for security, availability, and all those other good things!

If you're interested, contact neville@pathgather.com, apply to the careers link below, drop a comment here, etc.

BACKEND ENGINEER (Ruby/Postgres/GraphQL), $100-130k, 0.1-0.5%, https://jobs.lever.co/pathgather/e700098b-b552-4b10-a5a5-e0e...
SEEKING WORK | FULL STACK DEVELOPER | REMOTE + EDINBURGH, UK.

Location: Edinburgh

Remote: Yes

Willing to relocate: No

Résumé/CV: See https://www.seanw.org

Email: sw@seanw.org

---

Technologies:

Freelance full stack software developer with over 10 years experience including a PhD in software verification offering:

- Web app development: JavaScript (Node.js, TypeScript, AngularJS, jQuery), Python (Flask), Java, PHP (WordPress)

- Mobile app development: Android, iOS, PhoneGap/Cordova

- Cloud hosting: Creating scalable apps that run on Heroku and AWS

- SEO: On-page audits with the technical expertise to deliver the changes needed

- Code quality: Reducing defects in existing projects by integrating test suites, staging sites, Continuous Integration and code reviews

Portfolio and more information available at https://www.seanw.org. Contact sw@seanw.org for more details.
Nope. Simply installed from a USB drive. Of course, there's a little effort if you want a Windows partition, but that has been documented / blogged about ad nauseam, so shouldn't be too difficult.
Thinkpad X61. Solidly built. Compact. Linux runs out of the box. Currently running Fedora. I honestly never max out the 2 gb memory available - it can take 4gb, but I haven't had the need to upgrade yet. I did need to put an SSD in it.

It's been going for 10 years, and probably has at least another 10 years left.

Cons, does get a little hot on my lap from time to time. The little red joystick thing takes a little getting used to. I'm not much of a mouse user so it isn't too much of a problem, I run the i3 window manager. No space is wasted on a trackpad.
The best way to protect commercial software from piracy is to sell into markets where piracy is against market practice. For example, enterprise and government institutions often have license compliance policies accompanied by audits and trainings and memoranda and scoldings.

Part of that means that the pricing policy should discourage piracy. An institution for which the difference between $50 per seat and $500 per seat is a big deal for a product that provides $10k+ of value is more likely to pirate as a matter of cultural ambiance. And a price of $500 per seat increases the likelihood of having the resources to provide $10k+ of value over the long term. $500 per seat also means that piracy is less likely to take food off the table even if a substantial fraction of use is unlicensed.

Good luck.
Occipital (http://www.occipital.com) | Boulder, CO, San Francisco, CA | ONSITE | Full-time | iOS Engineer, Supply Chain Manager, Computer Vision Engineer, Technical Customer Support Engineer

At Occipital, we’re working on spatial computing - using computer vision to 3D reconstruct and understand your surroundings so that software can operate over real world spaces. We believe it will power the next generation of augmented reality and some of the key parts of virtual reality as well.

http://occipital.com/jobs
If you're talking about the set of unknown size we're calling undisclosed RCEs, then we have two potential decisions which hinge on attack economics whereby an attacker leverages an unknown RCE in tandem with this priv-esc in:

• targeted attacks (much more likely)

• mass campaigns (I'd argue much less likely)

Since Google's disclosure is to everyone, advice which applies to everyone will also cover the set of people who:

• aren't targets of attackers with an unknown RCE, and

• are likely to download attachments w/ the priv-esc alone.

I don't have the stats, but telling everyone to be careful also tells this likely-majority subset of people to be careful, optimistically mitigating the substantially higher risk that they'll be owned by the priv-esc alone. The remaining at-risk set is the population of people for whom attackers may decide that burning an unpublished RCE is a valuable trade.

•••

If you're also talking about known and patched RCEs, then users who are missing those updates have bigger problems.

•••

To quote one of my employees who's got an eye on this thread: "At this point, the argument between the two of you is entirely pedantic in nature." heh
Agreed. The pixel 2015 is my main computer and now with mailine support (since 4.8) it's fairly easy to run linux. I'm using ubuntu stretch and it works great.