skysight-inc/HackerNews huggingface dataset:
Ask HN: Why are software engineering salaries in the U.K. so low?
According to glassdoor, salaries are typically in the £30-40k per year range for software engineers. This is obviously very low by US standards, where the average is closer to $100k (£80k).

Does anyone have any insight as to why this is?
"NoSQL means Not-injectable, right?" makes no sense for me. It doesnt matter which type of database technology you are using. As any other database there are security roles. No mongodb query should be executed as an admin. You can restrict that up to document level. You can even create read-only views. You should always validate you payload. Use e.g Joi https://github.com/hapijs/joi. Someone who doesn't validate his payload and pass it up to the driver should not be surprised.
As another poster replied: Yes, validation is one method to reduce the methods of attacking. Client side is essentially useless in these cases, since they can just bypass the gui by sending HTTP requests (which can then contain the db methods) from the command line.

What is needed is server side validation. Pretty much the same as client side, but most of the time a bit more robust. The problem is validating ALL the input. Like, creating this comment. Validation is really easy for this comment.

But what about something where you upload images? PDFs are well known attack vectors. So are SVGs. How can you be sure there's nothing hiding in those? It's possible. It just becomes increasingly difficult to cover each case.
Here's something I created for my personal projects. It's an Ansible playbook that gets just a domain and a Node.js project repository and creates a DigitalOcean droplet with LetsEncrypt certificate included. It needs a bit tweaking from your side but it's a great starting point to go from zero to an online project. It doesn't contain a database setup step but we can include it in a later release if you think it will be suitable for your needs.

https://github.com/kbariotis/ansible-nodejs-digitalocean

I also published a guide today and the reasons behind this projects.

https://kostasbariotis.com/deploying-nodejs-applications-dig...
Show HN: GPU-backed Linux desktops in the cloud
Perhaps you should ponder the meaning of "I wonder if" and contrast with your attempt to interpret this statement as an unequivocal assignment of blame.
> If you force them to actively install a backdoor then you increase the costs of attacking greatly.

I think that it's my fault, but I can't understand this sentence. Doesn't forcing someone to install a backdoor decrease security? The only reading that makes sense to me is "If you make it so that it's user action, rather than inaction, that results in the installation of a backdoor …"?

(For what it's worth, although I disagree with you, I respect your dedication to arguing this determinedly but civilly.)
Introducing VR and 360° Content for All WordPress.com Sites
I've been using QOwnNotes [0] for a while now, and while it's not quite a drop-in replacement for Evernote yet (there's no web clipper and the mobile apps are a bit rubbish), the pace of development is really impressive.

[0] http://www.qownnotes.org/
Here's something that I've learned: The VPNs that say they are the “Fastest VPN” on their website might be embarrassed by this. ExpressVPN, PureVPN and VyprVPN... I’m thinking of you.
Is Java really dead?
Top Interveiw Questions
If it had been brutal, they wouldn't still be so ridiculously expensive compared to dedicated.

They do what I wish I had done in my first startup: Realise that when your margins are massive and your main competition aren't dropping prices drastically, you don't rock the boat. You'll take your turn and drop your price a bit, and then let them take their turn and drop the price a bit, and you keep playing that game or as long as you can get away with it. (instead we went straight for the throat of our competition with much lower prices - two days later they decided to us the war-chest they'd built up over years to undercut us; nobody made any money in our market for the next several years)

If they were fighting a price war, Amazon, Google and Microsoft would have issued multiple profit warnings over it.

What they're doing is taking turns buying PR while trying hard not to trigger a price war.
That kind of issue has nothing to do with Mongodb. He could even use RethinkDb.
It's disgusting to me that that much brainpower was/is dedicated to stock trading. All that programming and the only thing we get for it is that we can correctly value a company.
Actually, in LLVM's case it really is just explicitly checking for a few specific bswap patterns rather than doing anything fancy:

https://github.com/llvm-mirror/llvm/blob/master/lib/Transfor...
I'd argue that Postgres doesn't belong just in that sector, then, given that it can be used for many of the roles Mongo/Rethink are used in.
During my onsite they said they had an even bigger percentage.
prvalues are the ones that return a promise about a system's future state which are commonly expected to prove false, right?
Nagios Core 4.2.4 Root PrivEsc Exploit CVE-2016-9566
Venezuelans on the removal of the 100-bolivar note: 'thoughtless, dangerous'
This one is easy: no.
I used to use OVH and most of the time their stuff works but when it doesn't there is very little chance of their tech support figuring out what the problem is and fixing it. They basically deny anything is on their side and you really have to move to a different VPS/Dedicated server or whatever instead of the issue actually being resolved. I use a dedicated server from a place in FL now that is a small shop but I get a real person(with a brain) when something goes wrong and they actually take me seriously and fix their stuff.
You can not just compare raw figures. You have to take into account other expenses such as housing (which can be tremendously high in some US areas such as SF/Bay area), health insurance, retirement plan,...

Once all expenses are taken into account, I think that US salaries are higher but not _that_ higher.
This is good work - choosing a VPN is hard. I'd be interested to see NordVPN included in the results.

Related: For those looking into VPN options I also found this write-up useful: https://torrentfreak.com/vpn-anonymous-review-160220/
It is probably also worth noting that there is a good optimization opportunity when using noexcept move constructors. std::vector::push_back has a strong exception safety guarantee, so the normal behavior when the vector is at capacity is to create a new buffer and copy construct each item in the vector into it. If the copy constructor of any element throws, the original buffer is still in a coherent state.

If the type has a move constructor that is noexcept, then each element can be move-constructed without fear of an exception occurring. For many types, this is vastly more efficient.
A recommendation for the book 1491 (http://www.goodreads.com/book/show/39020.1491). It covers a lot of ground in 500 pages but spends at least a chapter on various theories for how the Americas were first populated (and whether they were populated multiple times). Later chapters focus on major New World cultures. I thought I knew a fair bit about the pre-contact Americas but I learned a lot
Things like this are why it takes me 3 months and numerous trips to the bank to get a home equity loan. I also need to provide proof of what I was going to do with the money. On the plus side I got to witness the loan agent having to use a typewriter in 2016.
Transfer.sh was being abused to spread child porn. Have some kittens instead
fair argument. this was in college, so i had a lot of resources available and very particularly picked curricula so i didn't bump into any of the magic methods until i graduated college and used python in production.
If you have a recent smartphone, it is already using both GPS and GLONASS' constellations and maybe it's already compatible with Galileo.
Sounded more like a front to try and explain the money/lifestyle, he didn't seem to be trying earn anything from it.
What about intellectual understanding?
That just highlights you moral bankruptcy if you cooperate with these practices: these people are employable like no one else, and they should have the ability to safe up a very nice cushions rather quickly.
From their F.A.Q:

"What does Gogland mean?

This is a codename and not the final product name. Our inspiration was the name of an island in the Gulf of Finland, not very far from Kotlin. Send us your name ideas and suggestions!"

So a.) it's not final and b.) it has nothing to do with racism, there are lots of words that sound offensive, funny etc. in many languages, please don't think the whole word needs to be vary of our customs, it's at best elitist and at worst the "PC police".

If you feel so strongly about it, you can suggest a new name, but I am saying that they shouldn't have to change it. BTW everybody's fine with 'git' as well, why not this?
The problem with that is a decision today that favors trustworthiness pays off over years, with a negligible positive impact in the short term, while one that favors short-term results pays off, well, on the short-term. There are a lot more structural incentives to maximize next quarter's numbers than the same numbers 5 years down the road.
>> Edge is not even available on 7

Was there any explanation on why this is? It's one of the reasons I upgraded to 10, but wasn't very happy about it.
>Presumably, C-suite people are compensated based on the financial performance of the bank...

They were. Many of their performance incentives would have also been tied to WF stock values, which were greatly inflated due to WF's higher than industry average cross sell metrics. Although as you observed many of the accounts were no-fee the company's stock benefitted from these non-revenue improvements
I'm starting to become skeptical of our understanding of quantum mechanics because we completely discredited a common theory with only one experiment over a hundred years ago:

https://en.wikipedia.org/wiki/Michelson%E2%80%93Morley_exper...

We never recreated the experiment again until Ernest Wilbur Silvertooth did about one-hundred years later in the 1980s. He found a possible connection to the Ether, but by this point every scientist in the world committed to thinking the opposite; they didn't care for his findings.

People say GR works, but they keep running into weird situations where they have to keep fudging their mathematical models -- none of the equations work together, i.e. no unified field theory, -- and everyone is too afraid to suggest we've been approaching it all wrong.

God, I love how political science has become: funding, faith, pride... The world didn't care for Galileo's theories, either: it turned their whole world upside-down.
Having to leave home country, friends, and community is a steep price to pay for ethics. And the dirty work still got done, albeit ineptly. I think you proved my point.

As morgante said below "If you can professionalize a certain set of ethics, you can make it impossible for your employer to find anyone to complete the job."
I've been thinking about applying to their IT / analytics teams in the SLC office. Curious if anyone has any anecdotes about the environment. I've worked in financial institutions before, but curious how it compares to the FANGs. I've met really smart people in both environments.
Yep, and that's the point of storage-optimized :) amazon will happily sell you whatever all day with no claims about fitness for any specific purpose. It typically really pays off to benchmark your actual workloads on different instance types to figure out the best RPS/$ or whatever your metric is.
I'd think of as energy recovery more than energy generation. The analogy would be to regenerative braking on an electric vehicle. Thermodynamics still applies, but the device becomes more energy efficient at the macro scale. Here the relationship to energy recovery seems to be that what is displayed on the screen is related to the amount of swiping.

I'm not sure it's going to change the world, but I'm not certain it isn't worth pursuing either.
Can anyone please explain why this naive pow() implementation is so freaking huge? I lack the chops to figure this out properly https://godbolt.org/g/YFvNWa
Build a Cross-Platform Blog in 4 Steps
How is someone being clearly facetious a perfect example of anything?
Bcrypt spits out a string, that the caller must store, somewhere. I presume the parent post means that Bcrypt "stores" in its output string a value that, for all practical purposes, varies reliably with the same salt but different plaintext.
Conclusion.

In sum, we have shown that subjective understanding
during social interaction can modulate interpersonal attraction. Interestingly, the findings of the current study suggest that the neural mechanisms underlying individual adjustments of interpersonal attraction during social encounters might act through internal reward signals that are partly independent of external feedback, which makes them perhaps less prone to cheating by potential cooperation partners. To investigate the interaction between intrinsic confidence signals and other — honest or manipulative — signals sent back and forth between communication partners and to examine the neural determinants of the dynamics of human social relations in larger groups (“social connectomes”) remain challenging tasks for future studies.
The current study suggests that mutual understanding is an important factor in interpersonal attraction, and that further research into the role of a common neural vocabulary in interpersonal attraction will lead to a better understanding of the neurobiological factors that define human social relations.
I might be wrong, but I believe a fingerprint is equivalent to around 80 bits of entropy which is roughly the strength of a good 13 character password.

A determined adversary can do things like lift a fingerprint from elsewhere and use that, but it's not really something I worry about too much. They could also arrest me and press my finger down on the sensor or beat me and I'll tell them every password I can.

I mostly worry about having strong credentials to remote systems.
Fair to speculate that the other person was the problem. They didn't say it was a certain thing. Some people have blind spots that prevent them from realizing that their actions may not fly with the other person. I can't speak to how objective this poster's self-evaluation was, but I guess they felt they were better able to predict the reactions of the other person, and accordingly, were better able to avoid doing things to irritate others.

To be fair, I do see how you could misinterpret this as blaming the other person; but an alternate take is that the person is brainstorming, after reading the article, that the other person was simply less adept at predicting behavior.
Six Sets of Eyes for Innovation
Its insane that you think this is the case.

The markets are an incredibly important part of the economy and this technology does not only simply value a company.
First PDF 4.0 Serial Number and Crack Full Version Free Download
Calorie restriction isn't nearly as effective at weight loss as it "should" be for me, which sucks because I find it fairly easy. Aerobic exercise also isn't very effective, which is fine because I find it incredibly boring unless it's part of a sport.

Strength training, on the other hand, is way MORE effective at cutting fat for me than it "should" be. Go figure.
Ask HN: As a developer, how is your performance measured
Is it measured by how much code you ship,
how many on-call problem you saved,
or how much OT you willing to take?
Setting aside the fact that it's a codename for an EAP product named after an island in a non English-speaking country, Gog could just as well be from Gog and Magog.

As a matter of fact, I don't even know what you're referencing: 'wog'?
Dark Age – Why Johnny can’t dissent (1994)
Desk 3: macOS app for WordPress
OCI and runc were both largely responses to rkt as well, so that is pretty much variations over the same theme.
SUPER MARIO RUN
I'm not so sure. I started (technically) with C++ and Java in miscellaneous summer camps and an independent-study highschool class, but my first serious course in a language (instead of just toy problems + messing around) was in Racket... I got the hang of it during the class, but I couldn't hold onto it the way C-family syntax just stuck, and when I last tried to pick up something Lisp-family a few months ago (Common Lisp) it was like I'd never seen Racket.

Unless that actually is "ingrained habits," I suppose, but in that case I had the habits before I ever hit college or knew that other syntaxes existed.
Debuggers are nice to have; https://atom.io/packages/go-debug is a good plugin that uses the delve debugger to step through code. No Java required.
They specifically mention improving the debugging experience: https://www.jetbrains.com/help/go/1.0/faq.html#d3e52
Deaf children feeling the Christmas songs via a special app for the first time
Yes. I was commenting to what the parent commenter wrote. He/she seems to think strategic defaults are immoral.
> Uber exemplifies the libertarian / anarchist subculture in tech.

You are misusing those terms, as belovedeagle pointed out.

> ... will never be regarded as an engineering profession
> It's like we rebelled against adulthood

Who is "us"? Many, if not most, software engineers would welcome being able to refuse doing anything morally questionable. Many are unhappy about companies disregard for safety, security, privacy, respect for users.

Yet, most are powerless in a world of at-will employment, H1B shackles, NDAs, and lack of professional organizations to protect those who disagree with their employer on ethical grounds.
They probably do it to reduce risk from chargeback fraud. Recurring payments run the risk of reversing multiple payments over a range. If someone files a chargeback dispute, OVH can dispute it by saying the customer authorized each charge.
I'm not sure what your point is. I mean, you're right, but why would I view the standard that way?
> partisan obstructionism

This is just a negatively connoted way of describing one of the most fundamental checks and balances we have. Politicians are supposed to obstruct each other. If it's not a manifestly good idea, it's generally better if they don't do it.
Show HN: Alex Masters SEO (The World's First Children's Book on SEO)
I use IntelliJ with Go plug-ins and it offers really nice autocomplete for functions/types/etc. — Super nice!
Not going to comment specifically on the judgement (I agree in general terms).

However that is a vast mis-understanding of what a lot of the brain power at an investment bank goes towards. It isn't just equities it is fixed-income and economics as well.

But beyond that it isn't just about valuation. It is everything from working on how to actually clear transactions, building dark pools and similar platforms, research and building very real tech on blockchain, building security and infrastructure tooling.

Goldman literally invented a programming language (although it is showing it's age at this point). They make very robust Open Source contributions: https://github.com/goldmansachs/gs-collections (just an example).

Regardless of if what they do is immoral or silly or both, they are building interesting stuff and solving hard problems.

A better organization to direct a dig like that at would someone like Bridgewater, they really are just trying to value equites, and fixed-income.
Companies like 3DFX (which once one of the best and very notable with their GLIDE API) got bought by nvidia. Imagination Technologies (IMG) left the PC gpu market to focus solely on mobile gpu (Power VR series). on mobile there are still plenty company making gpu's like IMG (Power VR), Qualcomm (Adreno - which originated from ATI mobile division), Nvidia (ULP Geforce), ARM (Mali) and Intel
Super Mario Run on the App Store
I thought it was satire. Although you might make an argument for why reducing time-to-trade from 50ms to 100ms would not be the end of the world
Yep, significant difference. I've seen several stories of people prosecuted for spending improper deposits, but presumably a loan - where risk is implied and defaulting is an understood practice - is a different beast.
Do you know why sites would set a low limit? I can understand limiting to, say, a couple hundred characters, but 16 is ridiculous. These days, all anybody is going to store is a salted hash so the passphrase length should be mostly irrelevant.

Edit: that's a pretty nice slide deck. Thanks for the pointer.
Enter a Yahoo! one. Who cares.
This article covers the essentials of strategic communication. The goal is to explain why it is critical that companies understand strategic messaging and positioning. In addition, we will discuss some practical and actionable approaches to help you design strategic messaging and product positioning.
Python implementation of Dropbox's realistic password strength estimator
In that case write higher level tests. TDD works best and provides most value when you go outside in. So your initial test would just determine that you expect to see "hello world" printed. Maybe on the next level down you now have to do some validation and you have to define how the interface (not used in the Java sense here) of the function or object or whatever looks that does the validation. The key thing here is that you don't need to think about how that will actually work on the inside, but how you want it to be exposed. As you start to TDD that portion of your code that implements that new functionality your tests shouldn't care too much about how the code under test is implemented, only about its outside behavior (this might include calls to other functions though that ideally get mocked). This process makes it easier to many practitioners to increment on functionality that they don't know in advance how to implement. That's why it's called "test driven development" and not"test first development".

All that being said, determining the right amount and granularity of tests is certainly much more of an art than a science and friends on the developer(s), what the system is doing, framework and the language you are using. I definitely write many more tests when I'm writing Ruby code than when I'm writing Rust. I'm also very new to Rust so we will see if that lasts.
Power Couple Blows up the people in the building
I don't know what specifically they used, but I believe it was before Eye-Fi
Kindle version here: https://www.amazon.com/dp/B01NCLWNI0/

Happy to answer any questions! :)
Don't format, overwrite before you sell – Recovering data from 2nd hand HDDs
Just click on "web" under the HN title to bypass the paywall.
The US Government has far more legal leeway to spy in other countries than in its own.
My bike is 'average' height. Lower then some, higher then some. (There is incredible diversity in recumbent designs.)

I am "eyeball-level" with most cars/sedans. I am lower then most mini-vans.

As a general rule-of-thumb 75% of vehicles give me more room then they do when I ride a traditional bike. I would say that the majority of cars give me "half the lane" (which would mean that they pull over far enough that their right-side tires are in the left-side wheel track).

BUT, I still get atleast 1 vehicle a day that drives too close. In some parts of town this is more likely to happen then others, it also depends on road/traffic/other conditions too. When I am areas or during times-of-the-day where it is not as safe for me, I 'Take the Lane' and don't let cars try to drive beside me.

In my city I can either take road (12km route) or dedicated bike paths for most of the trip (20km route). I always prefer the bike paths.
Is there a reason why GPS has an orbital period exactly half of that of a geostationary orbit?