skysight-inc/HackerNews huggingface dataset:
Ask HN: Dropbox passowrd resets this morning?
I and more friends than normal got password reset emails from Dropbox this morning. Something related to the Dropbox hack a couple months ago maybe?
Indeed, the concept of justice is strikingly lacking from these discussions.
Loved the Expanse. Read the first few books, need to get back to it. It feels like our future world more and more.
" Ok, I am aware of how it works, but I'm not talking pentests or hardening. I'm talking simple, cheap design choices in this case, that could've eliminated the whole Mirai debauchery."

Then you are not talking about the security industry or its failure to work are you? Its a failure in the development industry to have basic security awareness.

If you don't engage the security industry for pentests or consulting. You can't go any blame them when you get hacked.
I set up academic.bio to try to make it easy for academics to have a website without needing to learn anything new (html, Jekyll, github, etc) and without the complexity of WordPress et al.

I want to keep it all open though so you still 'own' your website, with the option to host at academic.bio (simple s3 static site), download the compiled html/CSS to host yourself, or use the Jekyll theme directly (github.com/academicbio/academic-minima) depending on the level you're comfortable at.

Thoughts and feedback welcome!

PS the next step is allowing quick import of publications. Where would people like to import from? Bibtex? ResearchGate?
Give People Erections, You're the Devil. Give People Cancer, You're a Hero
Viking Education | Lead Instructor + Curriculum Architect | Onsite(SF) or Remote | http://www.vikingcodeschool.com

Viking Code School is a 100% online development bootcamp driven by the mission of launching a million high-growth careers around the world. Our core program is an immersive where students only pay tuition when they get a job and we're scaling to offer more flexible programs based on strong demand.

We are looking for an experienced and opinionated full stack web developer who will lead instruction in the Immersive program and spearhead the ongoing development of our curriculum. You will work with students and assistant instructors to manage the Immersive Program while architecting changes to the curriculum and supporting materials which are used by all of our programs.

Because we are 100% online, this is a REMOTE OK position which allows for a high degree of lifestyle flexibility while giving you a chance to potentially affect millions of lives with the lessons, demos, projects and posts you create.

As the leader of the Immersive Program, you will also be eligible for incentive-based compensation when the students are successful in their job search.

Requirements:

* 5+ years team-based development experience, 3+ in JavaScript and relevant frameworks (e.g. Angular, React...). Strong CS, testing and data fundamentals. Passion for exploring, learning and teaching new and current technologies.

* Significant experience with writing, sharing and educating (e.g. blogging, delivering conference talks, podcasting, teaching, or committing to OSS). Great communication is prized over specific teaching experience.

* Experience building and running a team

* A legitimate passion for education and, preferably, also a quirky weird sense of fun.

Apply with your CV, a description of why you are a good fit, and any relevant links to Github, conference talks, blog posts etc. to careers@vikingcodeschool.com
Location: Massachusetts

Remote: Sure

Willing to Relocate: Yes

Technologies: JS, Scala, Java, HTML, CSS

Resume/cv: (website with resume) cs.umass.edu/~jktangen

Email: jtangen@umass.edu

I'm a student and looking for tech internships. I love back-end projects.
Location: UK

Remote: Yes

Willing to relocate: Despite Brexit, no

Technologies: JavaScript, jQuery, React, CSS3, HTML5, XHTML, Perl (CGI::App, Dancer), C#/VB.NET, Node.js (Express.js), nginx, HAproxy, Apache2, Caddy, RESTful/SOAP web services, Redis, MySQL, MSSQL, DB2, Wordpress/Ghost, static site generators

Résumé/CV: https://amdouglas.com

Email: me@amdouglas.com
Hedge fund raided by the FBI? There's an app for that
You're comparing "America First" to North Korean isolationism? That's not what he's saying. He's saying we need to be smart in our treaties and stop being the country that pays for everyone else. We have 20TRILLION in debt.
Somebody below posted https://brain.fm/app?v=0000#!/trial

That link gets you straight to music.
Subform – User Interface Prototyping
I don't think that's quite it. All of the comments in their user profile are marked dead back a few hundred days.

I read them over, nothing looked overtly spammy or troll-ey, so I vouched for this comment as it seemed genuine.

I do think it's an anti-spam or anti-troll measure, but it looks like it's a mishit in this case.

That being said, is there anyone where we read up on what vouching/dead/etc... means on HN? Maybe one of the mods or someone can help explain some of it (or let me know that they won't explain it for anti-spam purposes...).
I mean if you want no zoning you can live in Houston or something.
I'm listening mostly this playlist: https://www.youtube.com/playlist?list=PLETGndYxbsUUM0Y_sp1VW...
I'm interested in your iOS role but, y'all only use UpWork? So these are contractor positions?
Terrible hack, or building a solution from parts, i can't really tell the diff.
I'm glad to see this update! It doesn't like a must-update version, unless you're using a production dataset on your local dev database.

I'd also recommend against using a production dataset for your dev database.
I would like to get an email/client signing certificate from LetsEncrypt. Is this on the roadmap?
Could you elaborate on why wildcard certs are a bad idea? I've heard this from several sources, but I haven't read a breakdown of why people think this.

If I'm running a web application, and want to provide an interface where separate teams sign up and access their version of the app at team-name.your-app.com, what's the alternative? Or is it that this is considered unwise, and I should just put team-name in the URL path instead?
Confessions of a Tech Entrepreneur Who Lied to His Investors (podcast)
> Calls to DOM from JS are a lot more expensive than calls inside the engine.

Sort of. Calls to DOM from JS are a few dozen machine instructions for the call itself in modern browsers; a little more if lots of arguments are involved. The slowness is what the DOM implementation actually has to _do_ as a result of the call. If you write a loop in which you repeatedly modify styles and then ask for geometry information, then the only options an implementation has are to provide stale geometry information (the virtual DOM approach!) or end up with that loop being a lot slower than asking for all the geometry information up front and then doing your modifications.

We can have a useful discussion about whether it should be possible to ask for stale geometry information, but that has nothing to do with calls from JS into the DOM per se; a DOM implemented in JS but exposing the same API as the current DOM would have _exactly_ the same problem in that regard.
Why Sum Types Matter in Haskell
If the motivation for ending the death penalty is to avoid taking innocent lives, what about how abortion takes innocent lives?

Regardless of where you stand on either issue, supporting one but not the other seems like hypocrisy.
>What if you write an email to an enemy?

Then I would probably prefer to use <blink> and <marquee>.
Do you honestly think you'll find competent developers for the money you're offering?
3D-printed permanent magnets outperform conventional versions
I wouldn't be surprised if it is real-time. It uses OpenCV, which is heavily optimized and therefore very fast. However, if you ever want to use your own algorithms to do per-pixel processing, instead of relying on the OpenCV library ones, you'd have to write them in C++ instead of Python.
I'm not a New Yorker, so can't say. But I agree. With transit I constantly see Amtrak thrown in the mix. But as I was trying to say it doesn't add up.
Here's a playlist of Chill Hop songs I've found over the year:

https://open.spotify.com/user/iwillscoop/playlist/2kyAGCBe20...
Skydio | Redwood City, CA | ONSITE | iOS / Web

We are building autonomous drones.

Here is a cool drone's-eye view of following a person with full obstacle avoidance and predictive tracking
https://www.youtube.com/watch?v=WL9GpR_QnVM
(this really works)

Here is an article about us in MIT Tech Review
https://www.technologyreview.com/s/600925/daredevil-drone-fl...

Here is a talk by Adam, our CEO, on motion planning
https://www.youtube.com/watch?v=P3E4pl2Weos

We have a great team of roboticists working on advanced perception and planning algorithms, but I am looking for an iOS engineer help change the paradigm for drone interfaces: How would you design a camera app if your camera knew what it was filming and could fly?

If you are passionate about mobile design and want to get into robotics, drop me a line.

http://www.skydio.com/jobs/
Hey all, a friendly reminder. A who is Hiring Android app is available where you can search, filter and track all these positions.

Google Play Link: https://play.google.com/store/apps/details?id=net.symisc.who...
Those are all terrifying.
> And likewise, if someone sabotages your car or has a remote exploit for your computer, I find it hard to dish out blame.

> Not knowing better or being too busy is not an excuse to be a party to a DDoS attack.

I feel you contradicted yourself here. In one way you excuse it, but you also claim users should know better. When it comes to having a strong password, I feel this is where it's acceptable to place blame. When, for example, they went to their favorite website which has a malicious ad that takes advantage of the latest exploit. Can they really be blamed? Average end users expect their smart thermostat to give them capabilities advertised. Some can't even imagine that it's basically a small computer.

> that violate the contract you signed with your ISP

How many people really read these agreements? It's assumed that if your computer works it's in spec. Whatever arbitrary clause they came up with to allow them to legally track your every move is a different conversation.

I won't divulge into throwing analogies back and forth. I'll just say this, I know plenty of Dr's, people who are much smarter than me that don't know a thing about networking. They're running their own practice and stay concerned about being up to date and not getting sued. That's their job. Building software that is easy enough to use while keeping people secure is ours. There's no excuse, it's hard and it's yet another aspect programmers need to learn. But it rests on our shoulders.
there's no indication of foreign government involvement thus I am inclined to believe it was more likely someone on the inside trying to expose corruption, get revenge, or both
I just wanted to say Im really excited about this project. I hope it will come together and make software universal as the web we have today (if I understand it right).
Anyways, how can I contribute?
Yes, dispense with the pretty pictures, and things like an inane plan to turn the BQE into an autonomous self powered three lane Uber funded artisanal pod racing track or whatever that part said and build some fucking trains.

Not supertrains or hyperloop trains or complicated bullshit, straightforward European style trains that go from place to place fast and on time that we as a species figured out how to make work at least 20 years ago. Maybe 80 years ago.

Not fucking hanging trams across the Verazzano bridge. A train, on the ground or in a tunnel, with rails, and a place to sit, that goes fast, like every other fucking advanced country. An express train from the central business district to the airport. Seriously how fucking hard is this.

Here in NYC people actually like trains and will use them, they'll increase property values and bring more commerce and better quality of life. It's just an abject failure of our political system that we can't figure out how to build them in this region.
Thinkful Inc. Seeks Devs to Mentor Fledgling Devs
tltr: Mentor devs. Remote, flexible hours, join community of 300 mentors. https://www.thinkful.com/apply/

READ ALL ABOUT IT!

https://www.thinkful.com/mentors/

Thinkful offers an online program in web development where each student works 1-on-1 with a mentor We help students land their first job in web development, and we’re recently ranked the best coding bootcamp by Course Report, the industry’s leading publication. While we claimed the top spot in all five of their categories, what excites me most is that we have the #1 instructor team. A team comprised of 300 programmers, designers and data scientists in over 35 countries.

Join them and you can mentor students as they learn their way through a project heavy FEWD (html, css, vanilla js, jquery), Node.JS and React/Redux. Interested? Have questions? Then email bena@thinkful.com or apply.

https://www.thinkful.com/apply/

-Ben Aronowicz
Mentor Manager @ Thinkful
hmu: bena@thinkful.com
So it's like a human-powered spider to Pinterest?
Looks pretty great - why stop at academia? Many devs would love a quick, good looking resume or github page.
Less insane when you consider the DDOS attacks from GSM connected IOT devices should be less bad than UMTS/LTE connected ones :) .
Quartzy (YC S11)- Accelerating Science in Palo Alto, CA (www.quartzy.com) - Full time (ONSITE)

Researchers in the life sciences make discoveries that impact the way we understand our world, but are stuck using post-it notes and excel to keep track of it all. At Quartzy we are building the software infrastructure for researchers manage their labs more efficiently and help accelerate the pace of scientific discovery.

With 1/10 scientists in the US using Quartzy already, we are well on our way to becoming the de-facto global standard for lab management and change the way a $100B industry does business.

Tech we work with: PHP/HHVM, Laravel, MySQL, Ember.js, Redis, Elasticsearch, beanstalkd, nginx, Ansible, Vagrant and more.

We are hiring across the board, from engineering to operations. Check out open positions here: www.quartzy.com/careers

If you’re interested or would like to chat about the positions, shoot me an email - jane.eisenberg@quartzy.com
Ahah, that's why I said "market-like" - the bottom-up urban planning approach has properties that are like free markets, but isn't an actual free market. Zoning still needs to be a thing.

An actual "free market" - i.e., little to no zoning whatsoever - would likely be rather unpleasant. Sorry Houston.

In this school of thought the ideal urban planner sketches out the broad strokes while allowing natural forces to fill in the spaces, but of course, there is considerable disagreement over what exactly the broad strokes entail.
iPython notebooks don't have the functionality of R Notebooks.

R Notebooks allow you to prepare something for presentation, not just for running/testing. I.e.: You can run code and then choose to present the code and the output, just the code, just the output or none of them (for instance just putting a sentence in the presentation where you say you applied some mathematical function to the data, but show the mathematica function (latex) instead of the code.

This is really important to publish and to present data and it's not possible to do in Jupyter/iPhython.

Also, it allows you to export directly to HTML/PDF. Something Jupyter doesn't.
What currency is this? http://www.nrm.org.uk/ourcollection/posters/CollectionItem?o...

gns?
This doesn't really sound like it was their fault.
I don't have hands-on experience with either of these mobile frameworks, however, a simple glance at statistics reveals the internet's interest in RN: https://g.co/trends/K49z5 . Not to mention the fact that Discord, Facebook, Instagram, and Airbnb all run RN, while Native script has a generally unknown/inconsiderable backing (imo).
The source is absolutely available: https://github.com/WhiteWhiskey/rack_app

There is also a link to GitHub on the app.

Learning resources:
https://careerfoundry.com
https://www.railstutorial.org/book
https://learnrubythehardway.org/book/
Browsing GitHub

Books I've bought:
O'Reilly Ruby Cookbook
The Well-Grounded Rubyist
Beginning Ruby
From Novice to Professional Third Edition
Practical Object-Oriented Design in Ruby: An Agile Primer

If you look through the source code I would enjoy feedback good or bad. I have not been able to find any resources that get past 'hello world' with rack. So what I have wrote was learned from those hello world apps combined with browsing GitHub. I have no idea if I am doing things right or not but it works for now.
You beat me to this sentiment. That was my thought exactly, 200K/mo is peanuts for a full time development team. And I am only talking salaries. Not perks, benefits, etc.

Which is why it is disheartening to me to hear anyone gasp at this request from LE. As you said there are many many companies using SSL that are spending truckloads a month on employee salaries, sending a 10,000 dollar check to LE each month for them should be in their own interest.

We are not holding corporations making millions off fundamental pieces of infrastructure like LE and OpenSSH accountable. These corps should really be ashamed and called out publicly for not donating healthy sums each month to these projects. IMO.
The Foldscope: a paper microscope that costs $1
I'm confused about all of this - is WebAssembly related to the Google Native Client stuff they did and are now deprecating? Is there a write-up of how it works?
Well I don't know where you live, but long-distance commuter trains are common enough in US cities (at least in the Northeast corridor) and they don't have people packed in like sardines.
Hi there! Any chance you'd allow folks in Baltimore to avoid two beltways and work remotely the majority of the time?
Perhaps a temporary fix might be to have a on-board verifiable hash map of cell tower addresses by location. Either that, or a way to block 2G on the device.
Mi Partyline Vida Loca: Prank-Calling and Love in Analog East Los Angeles
You are correct that most compression algorithms are slower than their corresponding decompression, which means the writes tend to be a different tradeoff than the reads.

I do not agree with your statement that compress + write is always slower, though. The analysis for cost/benefit of compression is the exact same logic for both reads and writes, but with different formulas based on how fast you can compress/decompress and read/write blocks. Let's imagine that your disk takes 10ms to write 64KB and 20ms to write 256KB. Then if compression of a 256KB block down to 64KB takes 5ms, writing is faster with compression done first. On the other hand, if compressing it takes 50ms, then writing it raw is quicker.
The first Google Tango phone launches with over 35 new apps
I use my phone as my primary music player, too — both at home and when traveling. I have a nice (Mass Fidelity Core) Bluetooth speaker for home, but for travel, I dropped a couple bills on a nice pair of wired noise-isolating earbuds (B&W C5 S2), and having that purchase unilaterally obviated remains a sore spot for me.

Yes, I could drop another $40 to get that functionality back, but then I sacrifice simultaneous charging. It's hard not to see this as being pushed around by a bully who's after your lunch money (for arbitrarily large values of "lunch money") sometimes.

I'll stick with a 6S for as long as I can, and hopefully this situation will be resolved somehow before then. Maybe they'll release another SE-like device that has a physical headphone jack again, but I'm not holding my breath.
that's a good reason but not the reason for me, death penalty is wrong period, same reason as torture is wrong.
Don't lots of phones still send SMS & voice calls over GSM/CDMA? I know VoLTE is appearing, but slowly & only on a couple flagship devices, and quality degrades faster with loss of signal...
Ask HN: How did you learn enough dev-ops to deploy portfolio apps?
Hey Hacker News! I am a self-taught engineer and who has hit a bit of a road block. I can't deploy my demo apps to services like Digital Ocean, G Cloud, etc. I have had success with Modulus and Heroku but am wondering how other developers learned to deploy their applications without getting caught in too many rabbit holes (e.g. automated deployment, security, load balancing, etc.)
Ceph LibRBD Rust Bindings
This. Anyone who reads this please flag this article as it confuses developers.
Wait. Aren't the numbers for SSDs, particularly the bus speeds for the SATA connection measured in Gigabits (not bytes)?

Looking at these numbers you linked to (which seem to be in megabytes, it seems to me that decompression speeds could keep up. And I know write speeds on SSDs are a lot slower than the spec'd numbers, so the compression write speeds look plausible to me too.

The general idea is that modern CPUs tend to be instruction starved and sit idle because they are waiting on the slow memory buses that connect everything.

Am I missing something?
A living organism is of course a noble endeavor standing against the tide of entropy. But it can do so only with significant influx of energy extracted from its external environment. The cost of constructing such an elaborate order of matter is paid by disorder elsewhere.

As we know, the living stance can be maintained for only a relatively short time, after which it rapidly decomposes to background entropy.

Interesting to speculate, as living beings we are chock full of "micro-environments", there could be exceptions to the laws of nature as we've understood them that could account for certain mysteries of biological nature.
Works on my phone. Reminds me of phreaking. What other secret codes are there like this? How did you come to learn about this one?
Has anyone done recent engagement statistics on social authentication? Is it still a huge deal to offer it, or are people becoming increasingly wary of places like Facebook, and opting for local auth?
At least in the past anyone with SS7 access could already do that based on either of those identifiers.

Phones, especially smartphones, are pocket spies. If you need privacy, don't take them with you!*

There is no such thing as a privacy smartphone.

* Honestly if you want a private conversation don't have any kind of phone or laptop in the same room.
It's very common to have compressed audio on e.g. Xbox One, and uncompressed audio on PS4 and PC.

While it might make sense for consoles where you need every last ounce of CPU power and have the audio stored on 50GB Blu-Ray, on PC it's usually just a leftover from the console world.
> having some women with kids on staff will cause total mission failure

hyperbole
The basic idea of the state distributing policing to public vendors, who should apply it as they see it fit, after the customer-trader relationship already ended is broken.
Winnie | https://winnie.com | San Francisco, CA | ONSITE | Full-time
Senior Backend engineer: We're hiring a backend engineer to tackle some of the most challenging problems in local knowledge systems — building a reliable, canonical point of interest database, pulling together and sanitizing many disparate data sources, monitoring data quality, and designing processes to ensure that we have the best and most up-to-date directory of information parents need about their world.

We offer flexible hours, amazing work life balance, generous equity and full health and dental. If you are interested in working for Winnie, email your resumé to jobs@winnielabs.com.
Sound effects are almost always streamed in - remember, most of modern games are built for consoles as well, which have significantly less memory storage. Hence lack of compression - it lets you stream in audio from a spinning BR directly without spending more CPU power.