skysight-inc/HackerNews huggingface dataset:
I used aspera for a while, but plain old HTTP over commodity networks works fine if you balance your transfers over many TCP connections.
This is ancient -- see the modern site at https://www.urbit.org.
Yup... should be on my list soon.

Glad you like it :)
Explosions also combine several of these.
NATFA? How would that apply? Uber (the US company) isn't selling any product at below cost, Uber Canada is. Why wouldn't they simply apply their internal anti-dumping laws?
> Cheating on taxes is quite literally stealing from every other person in the country.

Does Sweden use some sort of flat fee tax system -- e.g. take the total annual expenses and divide by the population and everyone pays the same amount? If not, then I'd ask whether it's stealing for a person to make less than another person and therefore pay less taxes.
This is a bizarre sentiment (to me). Success should never act as some sort of temporary shield to criticism.
Prediction: they aren't going to do the decent thing and open-source the whole thing when they stop it.
> I am sure tons of applications that use gettimeofday() to keep track of time can break in subtle ways when seeing 59 twice.

gettimeofday doesn't return hour/minute/second divisions; it just returns seconds/microseconds since the epoch. Functions like strftime and gmtime handle the components of time. And leap seconds don't make applications see 59 twice; they make them see 60 once (58, 59, 60, 0, 1, ...).

Quoting the manpages for gmtime and strftime:

> tm_sec The number of seconds after the minute, normally in the range 0 to 59, but can be up to 60 to allow for leap seconds.

> %S The second as a decimal number (range 00 to 60). (The range is up to 60 to allow for occasional leap seconds.) (Calculated from tm_sec.)
Eric Schmidt-backed data science startup Civis Analytics raises $22M
128 High Converting Growth Hacks
Sweet game! Congrats on the launch. I'll definitely be playing more.

Would love to get a writeup about the tech and the game design decisions/tradeoffs you've made along the way.
Loc: San Francisco, CA

Remote: For right position

Willing to relocate: No

Technologies: Go, Python, Javascript, Java, Mongo, MySQL, Postgres, Google Cloud, AWS, BigTable, BigQuery, Cassandra, Docker, Typescript, Angular 1 and 2 - AND ANYTHING ELSE I NEED TO LEARN

Resume: 7 years as early employee at multiple startups. Leadership experience, team building, company building, product building. Email me for LinkedIn.

Email: jobseeker072016@gmail.com

I am currently employed at a company of Hacker News readers so posting this anonymously.

I am looking for senior, director, lead, exec level engineer position. Would love to find another early stage startup with a small team but am open to larger companies.
The AV could do things better even without hooks. I don't know about ALSR, however dropping privileges when scanning a file that the user opened is pretty much a given in a security system.

The browser does this, the AV does not, so yeah, no AV devs seems to know about security.
It appears there is some history with this Vess character being wrong and particularly obstinate about his position too. So while we all jumped into this conversation without that background, I'm not surprised that these developers are being harsh with him. He seems to have made a long-term habit of ignoring the crux of their argument (which is a super strong argument IMO) and continues to put forth his own ignorant views.
This author doesn't understand basic economics. He is negating all sorts of feedback loops that keep things in check. He is also completely ignoring root causes or attempting to address this issue at large.

Is there an app that makes me aware of articles I'm reading by authors I've flagged as incompetent? Seriously.
>> "The site is successful"

In what way? It has taken investment so it needs to eventually make money. How is going to monetise? Also, there is a limited audience for it so it's growth potential isn't great. Even as someone involved in tech and interested in startups I don't get much use out of it as most of the products aren't interesting or useful.
Very nice page! Thanks for sharing!
So many responses here, but mostly: "Most software doesn't run with full system privileges", "For most people, yes it does."

That's not even a little true. Even inexperienced Windows users have to click that little "permission to make changes" button, and sometimes "run as administrator". Winamp, Solitaire, and all your other random not-totally-secure programs don't offer kernel access to whoever compromises them. AV is a singularly good source of privilege escalation attacks for exactly that reason.
I really like the fact that "Apparent Vulnerability" also works here ;-)
Good question! It turns out that 64 bit arithmetic does not overflow (I explain this in a comment in the source code [1]) up to the shift. The shift amount must then be large enough to fit the result in 32 (or actually, 24 or usually 16) bits. For a valid FLAC file this will be the case. For an invalid FLAC file it might truncate, but an invalid file cannot be decoded properly anyway. The shift amount is a 5 bit signed number [2], so it is never possible to shift by the integer width or more.

[1]: https://github.com/ruuda/claxon/blob/91b6af9/src/subframe.rs...
[2]: https://github.com/ruuda/claxon/blob/91b6af9/src/subframe.rs...
Thank you for that link. That study period of 5 weeks is not nearly enough to evaluate high versus low glycemic index diets upon metabolic syndrome. All the study showed was no acute impacts (good to know, but not conclusive enough for prescriptive direction). After finding that out from the study linked to, I tried to find a study that tracked glycemic index in meals of participants over 1-5 years, but couldn't come up with any, so if you know of any to link to, I would really appreciate it.
>"India was the third top coal producer in 2015 with 283.9 Mtoe (7.4% global share)."

And the US was the second top coal producer, at 50% more coal produced and while also using 96% of the coal that India used in the same time.

>"Nearly 80% of total electricity generated (utility and captive) in India is from coal."

If 80% of the electricity in India is generated from coal and America used 96% of the coal of India in the same time period, and America generates 22% of energy from coal and 71% from all fossil fuels[1] why is this hype?

The plant is far more effective to reduce India's use of fossil fuels than any solar plant that has been installed in the United States.

[1] https://en.wikipedia.org/wiki/Energy_in_the_United_States
Amazon OpsWorks Server for Chef Automation
It's the same as the reason why people like Pat Flynn make 25x more from affiliate fees than from any of their actual businesses. There are a lot more people who want to "make money" than there are people who want to "start and grow a business."

PF makes money selling tools that help people make money online (doing anything - read some of his article on "article spinning" and how he defends it and it will make you want to vomit). Darren Rowse makes money selling tools that help people make money blogging. Even Nathan Barry (who I'm a big fan of) made a lot more money from Authority than he ever did from his design books. ConvertKit was just a shift from product to service.

Along the same vein, a lot of people in Amway want to "make money" and not very many want to "start and grow an MLM business." Selling $40 CDs and lecturing your down-line about buying non-Alticor products is just the best way to do it.
Europols christmas calendar with Europe's most wanted
It's actually 67% more chocolate: 1.67 * 0.6 = 1.
While this is hilarious, it doesn't seem like a huge achievement to me.

The only thing (kind of) working well is feature/topic detection in the image (tree, christmas etc.), but that isn't really cutting edge.

The core part, learning and creating music, only produced melody and lyrics that seem not much different from accumulating random sentence and chordal fragments.
The Largest Google Account Breach Ever – Gooligan
Cockroach Labs | New York, NY | Full-time | Onsite | $100-150k

Cockroach Labs is the company behind CockroachDB, an open-source, distributed relational database written in Go.

CockroachDB is scalable, survivable, and strongly consistent - hence the name. The company was founded in 2015 with a mission to Make Data Easy.

Check out the product on Github and speak to our engineers at https://github.com/cockroachdb.

Roles:

-- Full Stack Engineer (DETAILS ABOUT THE STACK Client: React.js, Redux, Typescript; Server: Go)

-- Site Reliability Engineer (Some of this is more SRE work, a lot of it is plain SWE but again, close to production)

All positions offer $110-150k base, equity and comprehensive benefits. Learn more at https://www.cockroachlabs.com/careers.

Interested in chatting? Email jobs@cockroachlabs.com.
PRIVATE INTERNET ACCESS | https://www.privateinternetaccess.com/ | Developers, DevOps, Marketing, Tech Support | Denver, CO | Onsite [Remote to qualified applicants] | Full-Time

PRIVATE INTERNET ACCESS is fighting the good fight against censorship, surveillance, and overall evil.

Please e-mail jobs@privateinternetaccess.com to APPLY. Please make sure to send a resume, cover letter, links to anything worth seeing, etc.

Please read this if you haven't already:
http://www.activism.net/cypherpunk/manifesto.html

If you want to help the fight with the company who has donated the most to organizations such as the EFF, FFTF, Creative Commons, Linux Mint, Freenode, etc., then send us an e-mail.

Thank you in advance, and have a wonderful day. We look forward to standing in line with you against draconian injustice.
I will learn about your stupid riddles when its perfectly clear to me what you are doing. You are stealing from me. If I buy I loaf of a bread I am more than happy to pay for it but dont think I am ok with you extorting percentage of my income for it. Fk Off man.
What do you call the team that creates, operates, maintaines, and improves the "sanitised (filtered for sensitive personal information) data and analytics infrastructure"? That feels more like an appropriate fit for the data team moniker, and the "autonomous" team described is something like a BI team. Thoughts?
I used to hate dark chocolate.

I've been on keto (less than 20g of sugar a day) for a few months, and can now appreciate chocolate with 95%+ cocoa. It's crazy how much frequent sugar consumption affects your taste buds.
Betsy DeVos, the incoming Education Secretary for the US, is the daughter-in-law of one of the Amway founders. http://www.forbes.com/sites/chasewithorn/2016/11/23/trump-pi...
Y Combinator is hiring hackers (San Francisco, ONSITE)

YC has a very big vision. This recent article talks about how we plan to invent the future: http://www.newyorker.com/magazine/2016/10/10/sam-altmans-man...

Here's a secret most people don't know: software is at the core of our plans for how to do this.

We're looking for a couple of great hackers to join a small team in San Francisco. It's not a job for everyone, but it would be a good fit for someone who loves startups. Working at YC, you won't just write code, you'll be involved in everything YC does.

Here's an example of something interesting we built recently: http://themacro.com/articles/2016/08/investor-day-software/

If you're a hacker, send us a note here: http://bit.ly/1Od0T2l
Show HN: Minimal Alpine Python images for x64, armhf
Ask HN: How to come up with a domain name if all options are already taken?
I have an internet business idea, but all domains I tried are either taken or cost premium. Does it make sense to go with a random name and then compensate the lack of a good name with heavy SEO/promotion? It's kind of depressing not being able to move past this point.
Redundant Array of Independent Trucks?
Let it live through open source. A donation to Apache?
I work in city technology in the US and the biggest barrier to entry is probably regulation over the technology itself. I suspect that 2017 will result in the tech being tightened up, 2018 will be proving and working through the safety stuff and some talk and early adopter implementation of regulation, in 2019 we'll probably see a few cities implement more autonomous transit solutions and in 2020/2021 I suspect we'll see a pretty wide adoption.
Things About Human UI That Will Change Forever in Self-Driving Cars
Disclaimer: I'm the author of the book and thus pretty biased.

As a matter of fact, I wrote this book specifically for people like you and me: no CS degree, highly interested in interpreters and compilers, but intimidated by the existing literature. (If you studied compilers in college, this book will probably teach you nothing new.) There's a sample on the landingpage that should give you an impression of the difficulty - my guess is, that if you already know how to program and know the basics of Go, you'll get along just fine.
> uses some 20 watts

Daniel Lemire has an observation here: our brains don't use all the connections, all the time (when it does it's called epilepsy); it would be interesting if we built some computers that also worked like that - with only small parts being active at a certain time, but switching quickly from one to another. That would help with the heating problem and it might allow processors a lot more complex than we have now.
Yes, this. Most software is crappy, and much if it is insecure, but most of it adds value somewhere.

If my music player compromises my computer, at least it plays music the rest of the time. If my antivirus compromises my computer... well, adding security was its only job. I'm happy to criticize shoddy code when it causes the product to fail at its sole purpose.
Quixtar is just the US/Canada distributor of Amway. They're literally the same company.

Also Amway isn't a pyramid scheme. It's stupid and an incredibly risky way to try to make money, but it simply doesn't fit the legal definition of a pyramid scheme. It's pretty easy to dismiss Amway for a whole host of reasons, no reason to do it based on one of the few claims that isn't legitimate.
Why having Windows pre-installed when you are sure you won't use it? More, it is very rarely an option available to not get it: I would find interesting that it could be opted-out so people with low budget could skip it and pay less.
Do you mean reader view (which removes all styling, background images etc.) or something else?
Hi there - the job linked says it is located only in NY but "Remote" is in your post. Would like to learn more if remote is possible.
Not him specifically (covering his actions as matter-of-fact news would be OK IMO) so much as it is the increasing interjection of social and political commentary into their analysis generally. I come to ESPN/Sports as an escape from the real world. I don't want any of that there. Focus on sports: Scores, highlights, coaching and player trades, etc. Period.
True. Both polyphonic C# and JoCaml were lovely projects.
I don't get this outrage over Nestle bottle water. The amount of water that is bottled for human consumption must be minuscule compared with many other usages like household, agricultural and industrial.

Furthermore, it is not like the water is wasted. It is actual consumed by humans who live not too far from the place where the water was bottled.
> Lactobacillus

Chances are, you're already eating them in dairy.

It's not like we understand the 'side effects' of most things we eat. Any plant or fruit or fermented product you eat is made up of thousands of compounds, almost none of which have been tested for their effects in isolation.

(But, you know, I'm pretty confident candy bars are bad for you. This change will not make them any better.)
The problem is there isn't a better way. A browser should be fully secure without needing some specific third party tool watching over its shoulder.

But let's say that you come up with some "deep hook" API that could give AV vendors a better way to look over the browser's shoulder. You can't provide the hook API and magically only hand it to trustworthy AV vendors: a "deep hook" API increases the overall API surface of the application and you have to treat it and secure it and maintain it like any other third-party accessible API, including assuming that it could be misused by untrustworthy third-parties.

A deep hook API would be wonderful for spyware.
I'd forgotten that Solaris was still alive. I wonder to what extent their IP portfolio will linger on, like the zombie corpse that was SCO being used against Linux.
I think you can make it into an oddly useful personality trait, where you can say things that get remembered. Instead of "If we can't get this software to handle the load we'll have to rewrite it," you get to say, "Wall, shucks, if we can't git this mule to cross the river, we gon' have to find us another mule."
With all respect: I completely disagree.
Oh man, as a systems guy, this warms my cold winter morning.
This is really incredible. Something about having a glow behind what I look at changes how I operate. I do print designs out at work to review thoroughly, this is for me.
Second Measure | SF Bay Area (San Mateo, CA) | ONSITE (relo ok) | https://secondmeasure.com

Second Measure analyzes credit card data. We process billions of purchases to help investors (VCs and hedge funds) answer questions like:

- How quickly is Shake Shack growing?
- Is Lyft gaining or losing market share in Boston?
- How does Hilton spending change after a customer's first Airbnb stay?
- (Check out our research blog [1])

We’re an 11-person team comprising mostly engineers and data scientists. 9 of us are technical, and 3 have PhDs. We love solving hard problems with compelling data.

We’re looking for other strong builders, especially those who can grow into leadership roles:

- Data Scientist / Research Scientist (stats; Python/R/Spark helpful; quantitative PhD preferred)
- Data Anthropologist (perform novel research and write about it - see our research blog) (note: no job board post)
- Senior Software Engineer (frontend/backend/full-stack; AWS; Python/JVM; Mesos/Spark/Lambda; D3+ReactJS)
- Product Designer ("full-stack", from research to prototype to mockup to engineer-ready spec)

More detail: https://boards.greenhouse.io/secondmeasure

Competitive salary and substantial equity. We want our early team to have a large stake in our success.

We launched mid-2015 [2] and have phenomenal traction [3]. We're well-funded [4] by Y Combinator, Foundation Capital, Bessemer Venture Partners, Shasta Ventures, Norwest Venture Partners, and other great investors.

We’re in downtown San Mateo, just minutes from Caltrain and 101.

I'm a founder (mike@). Submit via job board and mention HN, or email jobs@ and CC me.

[1] http://blog.secondmeasure.com/

[2] http://techcrunch.com/2015/08/10/second-measure-launches-off...

[3] http://www.economist.com/news/business/21705369-alternative-...

[4] http://www.businessinsider.com/second-measure-is-secret-weap...
In security simpler is almost always better.

Vess is asserting that AV vendors can write their own versions of the most complicated parts of the browser & OS (including parsing & rendering HTTP/HTML/CSS/JS/PNG, JS runtime, etc), then add more code on top of that to detect bad things, and do all of this while adding no significant bugs and with tolerable performance overhead. The reality is that browsers are insanely complicated, the people working on the major browsers are extraordinarily skilled, and there is a mountain of evidence that AV vendors routinely ship software that by design exposes users to huge security risks on top of all of their bugs.

Meanwhile security by isolation is proven effective at protecting users. Two good examples are the process-per-tab isolation in Chrome and the app sandboxing on iOS. Some holes into the sandboxes are necessary (for example you need to get keyboard input in and rendered images out) but every additional hole you open adds significant risk. The downside to this approach is it reduces the market for AV and other third party utilities.

(I used to work in security)
You can work onsite in New York, or work remotely. Both are options that we support! Feel free to PM me (just added email to my profile). Thanks!
AWS CodeBuild – Build and test code with continuous scaling
Two Sigma Unleashes 730,000 Data Scientists in Algorithm Contest
Well, nowadays, you just can't trust a file by its extension, you shouldn't trust it magic header too.
Tower Research Capital LLC | Onsite (New York, Singapore, Gurgaon/New Delhi and London), VISA

Tower Research is a computerized trading firm headquartered in New York City with major offices around the world. Successful electronic trading firms integrate a number of disciplines into order to be successful, including systems engineering, statistics, computer science, finance, and street smarts. Tower Research has assembled a team of outstanding engineers and traders who have built some of the fastest, most intelligent computer systems in the world.

Tower’s high-performance infrastructure is at the heart of what we do, and our Core Engineering team is critical to the continuing success of our business. Software plays a critical role in every part of our business: we consider ourselves a technology company as much as a trading company. The Core Engineering team performs a wide variety of functions, including designing, implementing, and optimizing our trading platform; developing systems that provide easy access to market data and trading simulations; creating tools to analyze data for patterns; and providing real-time trade support and risk management.
You can check out our jobs page for the roles we are currently hiring for.

Technologies: We use C++(11/14) to build our trading systems and much more. Automation is mostly handled through Perl and Python scripts. But that is not a strict requirement if you can churn out good documentation :)

You can either apply to the jobs page (https://www.tower-research.com/open-positions/) directly, or email me at akshaydixi+tower at google's email service with your resume and a small blurb about yourself so I can take advantage of our generous referral programme :)
> The US doesn't actually do anything with natural resources anymore

Per capita, the US manufactures far more goods then it did 40 years ago. It's second only to China.

What that manufacturing does not do is create jobs. Most of it is automated. This is what most people who voted for Trump's economic promises have failed to realize.
Looks like survivorship bias: malware detectable by Windows Defender does not spread so it is not included in comparisons.
Compile India | Software Engineer | Bangalore, India | Full-time, Onsite https://www.compile.com/careers/

Come build [our API](http://v2.compileapi.com/docs/) that will feed the next wave of intelligent software. Work on data, specifically dynamic and contextual business data.

Our product is a Knowledge graph for Organizations and our customers are software vendors and analytic tools who directly integrate our data for their customers to use. We have been self-funded and profitable since our inception. You will get to work with smart people and work on a product that people actually pay for. We won't bullshit you or make promises we have no intention of keeping. You will get freedom to go down paths less travelled and we will work with you to challenge yourself.

Technologies and skills we each use: Django, Django REST framework, Slate, Postgres, AWS, Angular, React, Pandas, Docker, Nightmare js

If this excites you, drop us a line at careers@compile.com
Or I can use the same concentrated chocolate paste for other medicinal purposes. http://www.webmd.com/vitamins-supplements/ingredientmono-812...
Sorry I didn't say this before but: Thank you for creating this. Though I don't completely know what I'm looking at it may push me to learn more about my own setup and consider alternatives.

Good stuff.