skysight-inc/HackerNews huggingface dataset:
I think it makes sense to discount those factors, but ignoring them entirely is disingenuous.

A company offering $100k in salary + $20k in bonuses and $80k in RSUs is paying significantly more than one offering $120k in salary with no bonus or RSUs.

Also, Glassdoor tends to skew low. Here's a more reasonable database of new grad offers which average $109k base for public tech companies. [0]

[0] http://newgradsalaries.com/
I'm not sure its really a case of "like"... or for that matter "hate"..

IBM has a heaping pile of problems, many of which are completely understandable, and in many cases self inflicted due to "poor management". Yet, for many companies/government organizations (particularly large ones with decades of IT systems, frequently tied together with bailing wire from the last merger/spinoff/etc) they remain a choice, simply because buying another zSeries/iSeries/etc is the least expensive/risky proposition. These are companies that have been using IT solutions for decades, and have pretty mature processes, that frequently are damaged by modernization. Its not that these problems couldn't be solved by a modern web stack, or whatever is sexy this decade. It is that there is a working solution, and the companies have a history of trying to replace it, or living through the pain the last time they did. So, they buy a new iSeries every couple years for $250k, when the machine is doing the work of a $5k server from dell, or a couple thousand dollar a year cloud instance. In many cases they buy the new machine/contract/consulting even though there is an in-house project "replacing" it with a java/php/node.js/whatever stack, and the resulting product still isn't done. So, they pay IBM to tweak the current solution a little so it works on an phone browser (or whatever) instead of throwing the whole stack away and struggling with the 1/2 baked replacement. Sometimes they try to pay IBM to replace a solution, and the same thing happens, only its some other consulting company that comes in an quietly buys another iseries/hp nonstop/etc and continues on with business as usual. So, if you have been in IT for any length of time you realize that its not just IBM. The industry is littered with failures, many quietly hidden behind NDAs. In fact there are statistics floating around about modernization projects at large organizations, and they aren't pretty.

All that said, IBM has some really bright people working for it. They produce things like the POWER8 or FS900 which are fantastic pieces of technology. Although having fantastic pieces of technology isn't necessarily by itself a recipe for success. If it were, we would all be using VMS on Alphas. That said, you can frequently see the WTF, in IBMs products. The proprietary DIMMs that were originally used in the "scale out" POWER8's, or the mess that is the firmware on the linux only power machines. Two problems that would have been much better if IBM had just stuck with industry standards and made them work from the beginning (standard DIMMs and UEFI) rather than thinking they were special snowflakes and creating further barriers to the use of their technology. They like all the other really big tech companies, drink far to much of their own cool aid. Particularly when they are slowly declining.
well, most people check craigslist, no matter what their station in life/career.
I seriously think that to get a CS or EE degree (or similar) B.Sci degree, you should be required to take at least one full term length ethics course. Same idea as the ethics courses taught to junior law students.

The internet is already fucked up enough with governments and rogue corporations messing with its AS-adjacency topology in non-free ways at OSI layers 1-3 , before you even get into stuff like writing backdoors at layer 4+ to pass all email to the NSA.
Some folks in the commercial world pull all the commits from upstream all the time in order to not fall too far behind. It's a pay-me-now-or-pay-me-later kinda thing. Forces you to take the interface breakage seriously lest it cause other commits to queue up while you let it linger.
You don't have to, but we did to get W2 payroll for principals.
CIA said something that makes Trump look unfavorable hence they are obviously trying to f;ck Trump. Makes sense to me./s
Orienteering is a way to combine running (or walking) with thinking.
Installing tern-mode from MELPA makes M-. for JS work in Emacs.
Rural jobs are dying, kinda of sad, really.
It started to go downhill long before that change. I think they shifted the instant they decided to require acceptance of Paypal as a payment. They bought Paypal, wanted to force sellers to pay the extra fees, and they made it against the rules to say you would only accept Paypal if it was the no-fee bank-funded variation. At the time, you could have a non-business account, accept no-fee bank-funded payments from buyers. But if you wanted to accept credit-cards at all, you had to switch your Paypal to a business membership and then pay fees on every transaction regardless of funding source. So, they said "you can't sell without accepting Paypal, you can't limit the payment options, therefore you can't sell on eBay without a business level PayPal account and pay the fees that go with it".

It was so obviously corrupt and bullshit and undermining their basic platform function of connecting buyers and sellers. I refused to accept the shift, it felt so shitty. I stopped using it immediately and scoured online for alternatives and eventually just gave up and resorted to the limited local audience of Craigslist.

I bought things on eBay BECAUSE I felt it would be easy to sell them again on eBay if I changed my mind. It was superb. NOTHING has replaced it. Craigslist is local only, nothing else has brought back the eBay that once was, and now I buy less PERIOD on ALL platforms because I have no good way to sell things I later decide to pass on…
Good point. I don't know if they do know that for sure.
My direct experience is that the companies that cover cleared engineers pay slightly below average salaries and jack shit for variable compensation (bonuses, stock, and such). Plus, you can't talk about all the best work you did when you interview elsewhere, so you sound like a faker to interviewers. I'm glad to be free of the shackle of my clearance.
It is possible to hire a buyer's agent, but I don't know anyone who has. Everyone is on an equal footing, sellers just want to sell to the highest paying buyer.

The most common way of selling is via public auction. Each weekend for 6-8 weeks beforehand there's an hour long "open house" where the sales agent shows people through. Then on auction day, interested parties bid in public. I don't see how a buyer's agent would help change an auction's outcome.

Sometimes sellers elect to sell by other methods; best offer, best offer by set date, sales agent to negotiate with interested parties, etc. I suppose in those flavours a buyer's agent might be of some assistance.

I can only assume in the US that there's more risk of something going wrong - do buyers drop out frequently after making an offer or something like that? How else are the fees anywhere near justified for a simple transfer of property?
> The gamble I mention is that Uber and Tesla are putting too many machines on the road at once without having good priors for their current level of competence.

And from whom do you expect this data will come from? How many is too many? Why?

As far as I'm concerned as long as a human can take control at a seconds notice, the risk here is very much overblown.

I haven't seen an instance where a company wasn't taking reasonable precautions and was acting foolishly. I'd love to be proven otherwise...

There's a reason why companies waited until 2016 to start putting these on public roads. And even then they are usually limited like Teslas. They are taking it slowly like responsible engineers...

Now that full data capture and machine learning is being added pretty much every ride is contributing to the quality of these systems.
Do people really find Tesla cars attractive? I get a solid 'engineered, not designed' vibe from them. I don't think in 20 years time they'll be considered classics. This thing is pretty nice looking, but it's not fair to judge a real car vs. photos.
> Which one should show up as bold? What about italic?

Markdown has no notion of italic and bold styling, only semantics for emphasis and strong emphasis.
Not sure how to feel about this one. On one hand the people who end up with the gifts will be grateful I'm sure. On the other hand it was at the expense of the employees, who had no say in it. Maybe they should have been given the option to donate or receive on a person-to-person basis?
Running has served me as an early warning of health problems.
If you evaluate Uber like that, why do you take Uber rides?
To add to your point, also with ballot system it's very hard to change results. You can by a few votes, though it's a drop in the water compared how much you can buy and how many vote. If you want to change the outcome of the vote - you need to have a lot of resources (look at Crimea's occupation by Russia). Where's with e-voting, there could be few north koreans who would be able to compromise e-voting system in the country, which is on the other side of the world, just for the kicks.
This is far from true. There are reports of incidents, but many people have been allowed to leave.

The real problem with Syria is simply that it got caught in the cross-fire of Russia's attempts to hold on to a semblance of it's prior global power and American Imperialism (call it the "Post-Cold War", if you like). Of course there is a third party, whom I won't name, subtly coaxing both of them on.
In a weak sense. In Signal, every single volley (in the Diffie-Hellman ratchet, at least) is testing the validity of the parties and cycling the ephemerality. Thus the newer notion of "key continuity", that is anchored all the way back to the initial, authenticating handshake. TLS has only the lesser resumptive property that the server got back what it sent some time ago, so this is probably the same thing -- but one can imagine lots of opportunity to monkey.
You're focused on the wrong problem!

Why does someone have an old password in the first place? You should be asking how it got compromised, who knew the credentials, if it was compromised while still active, and if so, how many backdoors were installed, what data/systems were compromised, and how do you prevent this from happening again.

None of the problems could have been avoided if only there was a better password iteration detection algorithm.
And yet you will find many lawyers are raketeers and extortionists.
"My country, right or wrong; if right, to be kept right; and if wrong, to be set right." - Carl Schurz

Also, by that logic, any H1B worker that refuses to spy on his company on behalf of his country of citizenship would be a traitor. Do you really want that to be the operative ethics when most S.V. companies are made from people from all over the world? Because I certainly do not.
Meh, could have been in manual mode.

Which they have stated it would be in downtown driving.
The non-native taskbar drievs me nuts. At least I can turn it off.
When they did the bcrypt(md5(password)) there was no leaks of Yahoo!'s md5'd passwords. That's obviously changed now and thus why the billion passwords were invalidated (I'm one of those folks btw, but I also had TFA on my account and my password had sufficient entropy you won't brute force the md5).
Amazon Lightsail 1GB Is No Match for $10 VPS from Linode, DO
I shared it with folks at Canary Foundation because it also has implications for hunting for biomarkers for cancer.
I played this recently and my strategy was to always steal the most desired gift (if possible). That way someone would almost always take it from me, and then I would have the opportunity to pick the item that was most desirable to ME!
Professor Gelman's preferred term is "PPNAS". You mustn't forget the prestige.
Just to confirm, purple Yahoo! car in YEF spot ;)

As to your question, no, they didn't need to login due to how the hash "upgrade" was done (unlike how Tumblr did it around the same time). I was one of the people in the billion accounts and I definitely have logged in and also changed my password multiple times (also have very high entropy passwords and use TFA).
Holy shit. The idea that I might actually feel good about "Facebook moving into this space" is insane! Shows how horrible eBay is. Gah.
Also, "general intelligence" ("G) is a hypothesized abstract concept, not well-defined. The non-existence of a non-gameable IQ test shows that G is not well defined.
When you get a legally-binding order from the government of the United States of America, and exhaust your legal appeals, you either comply or go to prison. An ethics course won't do you any good.
If you publish their name, they can't come back from it. If you don't publish their name, they can rethink their actions, not do it again and make meaningful scientific contributions in the future. Its like giving the death sentence to someone who stole a car.
12 Solid Rules That Will Increase Your Trading Profits: Part 1
> When did Uber obey the law?

In absolute numbers, their company probably follows more laws than most people on this forum, since they operate in many different jurisdictions. It wouldn't surprise me if the average HN commenter committed more felonies than the average Uber executive, or of Uber as a whole.
So you practice patterns to raise your score.
What do people have to hide. That's irrelevant, ever fucking heard of privacy.
Isn't fingerprint based authentication considered, generally, weaker than that based on a password?
This is a terrifying outlook and an affront to common law stretching back to the Magna Carta. I sincerely hope you never come close to me or my data.
How to create a compelling resume
NYC is much more reasonable than the SF Bay. Manhatten itself is incredibly expensive, but it's fairly easy to live frugally in the NYC area. There's basically nowhere to go "in the bay area" to save much money.

You're not wrong about NYC, but the bay area is really broken.
Rebelliousness, while may be a valuable skill, is different from intelligence.
The Power of Play: A Reading List
I don't know how common this is in general, but an ethics course was a required part of the engineering core curricula at my school (Case Western Reserve).

Ultimately, though, an ethics course isn't going to make people stand up for their ethics. A professional organization along the lines of the American Medical Association (at least in terms of political strength) that stands up for its members and censures those who behave unethically would do far more for strengthening engineering ethics collectively.

When there are few professional consequences for unethical behavior at the behest of your employer, taking an ethical stand is ineffective and quixotic. You will be fired and another engineer will likely complete the job.
People have the option to quit. The company is legally bound to obey, but individual employees can chose for themselves whether they want to be a party to it.

Yahoo may still be court ordered to implement it, just hopefully not with their best and brightest developers. I also have a theory that a lot of the recent terrible news coming out of Yahoo is due to staff complying with the letter of the legal order but not the entire thorough spirit of it, intentionally doing a quick, shoddy bug ridden job.
I felt the same way after living in SF for 6 years. I moved up to Portland, though they probably find me to be an annoying migrant too :/
It was very intentional. The original developer wanted to create an event loop based system because at the time the C hackers had begun to learn how fast those systems could be for the purpose the parent comment mentioned (io bound, network servers, etc.) and instead of using something like lua he chose javascript to give it wider appeal.
Ask HN: What is a good hosted shopping cart with an API?
I have my own store website with my own "Buy" buttons, and I want those buttons to direct the user to a cart page at another domain where they can either go back or continue to enter their credit card and email. Once they complete the purchase, I should be able to call API endpoints to scan for new purchases.

Have anyone had positive experiences with services like these?
I know this is from October, but it warrants re-reading now.

Today, Yahoo announced a hack of 1B accounts. They say they don't know who it is, but we can conclude it's not the US government because Yahoo is willing and legally able to publicly disclose it.

Previously, Yahoo willingly assisted an attacker in compromising 1B accounts. In this case, they did not disclose the attack publicly, or even to their own chief information security officer, because in that instance the attacker was the US government itself.

US intelligence activities are actively harmful to American commercial interests because they destroy trust, particularly from customers elsewhere in the world.

[1] http://arstechnica.com/tech-policy/2016/10/report-fbi-andor-...
In my case, I was renting in Manhattan. When I've considered moving to SF I found plenty of comparable apartments for around $2.5k/m.
sounds like scam run directly by ebay under the name "eBay U.S. Global Shipping Program"

https://www.youtube.com/watch?v=qZwZgcoc_zw
I would be surprised if anyone was using Yahoo for anything but a spam account when this occurred.

I guess a really good indicator that things were not right was when the CSO left the company with no real reason. He was like I want no part of this shit.
Thomas Frank wrote his latest book about it. https://www.currentaffairs.org/2016/08/review-listen-liberal

>For Frank, the central defining tendency of the modern Democratic Party is its domination by “professionals,” the highly-credentialed, data-driven Best and Brightest that Obama stuffed his cabinet with.
I use 1Password as my 2FA app for Google services. I only set it up relatively recently so maybe support for non-SMS is new. Or region-based?
Here is some news which is probably new. Rambus has an NSA backdoor in their crypto.
You can't guess the XX (anonymized for obvious reasons) key without access to the UDB.
It does, but I didn't want to blindly rephrase the article in some way and then missing the point that was the issue. Thus me asking instead of ignoring it completely. I didn't phrase the question very well though.
yeah. that's the phrase i was grasping at.
If the syntax has so many issues that you can't specify a formal grammar, there's a problem with the spec.
Now I wonder how many people did this and got away with it.

There's a study¹ that determined the fate of 350 manuscripts rejected by the Annals of Internal Medicine. They found that 69% of them were eventually published in another journal. 70% of those were published in more specialized journals with lower impact factor.

It appears the reviewer took a similar approach. The manuscripts were published between 121 and 1792 days after rejection, with a mean of 552 days. The letter to the plagiarist says the article was published "a few months later" so that would be approximately 90 to 120 days?

¹ http://dx.doi.org/10.1016/S0002-9343(00)00450-2
The pirate bay isn't a great site, it's a fallback I only use because they have absolutely everything.

Anyone know something as good as Kickass torrents was?
1) The idea that running is bad for your knees and joints is a popular fitness myth. According to several studies runners, even those who have run competitively for many years, do not have an increased prevalence of osteoarthritis.

2) Chronically elevated cortisol levels are result of overtraining. If you do that, you are doing it wrong. Overtraining happens when a person experiences stress and physical trauma from exercise faster than their body can repair it. Overtraining is not same as training a lot. Gradually increasing the running time and having enough rest days prevents that while the running distances grow.

3) You get runners high and it's not boring.

Of course there are people with conditions that get worse with running. Fat people should start slowly.
> I suspect most of them
> would have gotten away
> with it if they changed
> the title a bit

Cosine similarity over a corpus of published papers to find very similar ones would be an interesting exercise
Unless you want/need amazon's other services I completely agree.

Full disclosure: I'm a happy linode customer.
Behind the fat-burning performance meal plan: the keto diet
ah, i see a lot has happened since the last time i looked. Can't wait!
According to the Ubuntu Dependencies[0] it already uses Postgres, it also needs Redis, so with gitlab we are a bit pass the heavy bit.

[0]: http://packages.ubuntu.com/xenial/gitlab
The levels overlap and vary by environment. Your truck can be level 5 on long stretch of highway, but then ring alarm bells and (if necessary, if the driver does not take over) slow down to a graceful stop on the shoulder before exiting the highway or maneuvering through a checkpoint or delivery.
When may tear the camera down to find a hidden SD card, it's even harder to explain your innocence.
Best price on Eclipse Glasses that I've found is these: https://smile.amazon.com/Rainbow-Symphony-Eclipse-Glasses-Vi...
Unfortunately quite over simplified. Some of the news outlets placed toward the middle can be just as bad as those on the fringes, and vice-versa. The truth of a given story depends on the circumstance, subject mater and the agenda of the news organization. For example Natural News can easily have very valid stories on the virtues of canniboids, and yet have very questionable stories on chem-trails or homeopathic medicine. Same goes for alt-right outlets that legitimately report on issues like government overreach, but then blow others, like body bag deliveries and Obama's birth certificate, way out of the rational zone.

(P.S. Please don't harp on these particular examples -- everyone has different opinions about everything, and there are plenty more examples most of us can agree on, even if we don't agree on a few in particular... well, that is if you aren't a complete sheep.)
Publishing something in someones name would probably be possible, but another similarly bad offense. If they knew their name was on that paper, they either knew or had no business having their name on it.
A hidden encrypted disk partition on SD card with sensitive content and a normal partition with tourist content on the same card. It is good?
Worth noticing that VSCode currently have the biggest ever active community on Github https://github.com/Microsoft/vscode/issues/17125

Over 1500 people, monthly, contribute to the project!
> Furthermore I got no email from Yahoo telling me that my account may have been hacked

Then your account was most likely not on the list of accounts compromised.

> By the way I did some PHP dev back in 2011

Well Yahoo is a tad bit older then that, by about 17 years. This is not an excuse, but really comparing your 2011 coding to 1994.... Go ahead and boot up your old 486. I'll get back to you when this page loads up in an hour. :)

Yahoo's code base is old and huge, like billions of lines huge. Yahoo's engineers have modernized it at a massively rapid pace. I'm not sure of current state, but when I left Yahoo finance was written in something like 10 languages including serving pages in C, cause that's all they had back then.

Current tech is NodeJSish and others. They have their own hardened versions. But still migrating millions of lines of C to something other then C isn't a walk in the park.
The people who do this aren't wilful engineers.

Source: I'm a former member of Yahoo's Paranoid team.