skysight-inc/HackerNews huggingface dataset:
It's worth pointing out that this is an effort to secure government sites: "A Policy to Require Secure Connections across Federal Websites and Web Services"

Which makes sense to a degree and on the surface.

But it doesn't actually make sense. From an individual standpoint of "my personal government held information should be secure" it certainly does. From the standpoint that the government should provide easy and open access to data it does not. And let's face it - browser warnings about bad certificates are generally ignored, and the fact that they haven't presented one provides no real confidence that a connection is in fact secure.

Should I really have to pay someone to find out if a car has been used as a rental car or in an accident? Is there a real benefit to that data being transmitted via an https session vs. a http session?

If I'm looking at a congressman's voting history, is there a real benefit to that data being transmitted via an https session vs. http?

What's the drawback?

There's a layer of complexity in the way that isn't necessary or helpful. Anybody who has done web based automation has run into plenty of issues with expired / incorrect / insecure / misconfigured ssl certificates. And we've all seen trusted certificate authorities compromised. Heck, some of us compromise secure http ourselves pretty regularly as part of the development and testing cycle. What happens when we're accessing data from a custom device with minimal resources? Text processing and network connectivity is one thing. Adding in encryption support and maintaining SSL is a whole different problem to deal with.

And what happens when a guy working a low level office wants to expose a web service for something like viewing an event calendar? There's additional work to be done to obtain certificates and configure his web server to use them. So now maybe he doesn't do it because the bureaucracy in place is too painful.

---

I'm not a fan of making blanket decisions based on flimsy logic. I find it ironic that their first reason for doing this points to a TAG finding that not only points out several drawbacks, but lays out that one of the primary reasons for preferring secure communication would be to minimize pervasive government monitoring.
Appcues | Frontend and Full-stack Engineers | Boston | ONSITE http://appcues.com

Appcues makes B2B software that lets you create and deploy product without writing code. We help growth teams quickly iterate on ideas and scale their businesses without adding the technical debt of temporary code.

You can see our software on the websites of companies like Teespring, Canva, Amplitude, and Indiegogo.

We're a 15-person team helping businesses scale up and grow. We're seeking strong software engineers to create a product viewed and consumed by hundreds of thousands of people daily. We're looking for both frontend and full-stack engineers, and our stack is React/Redux + Elixir/Phoenix.

We're located in the heart of Fenway, Boston, but looking for excellent candidates regardless of location.

Email pete@appcues.com, and check out our postings on Breezy:

https://appcues.breezy.hr/p/6b9ca5952dd4-full-stack-engineer

https://appcues.breezy.hr/p/cd84559f4941-frontend-engineer
Machine Learning and Cyber Security Resources
And thanks for presenting it as an exploration and not the, "I am a real carpenter, so I don't use a hammer, I just pound in nails with my dick!" inanity a lot of these articles are.
"I don't even care why you would want to keep all your organs after death"

I don't, but I also want every measure to be taken to ensure I survive. With the corruption and dishonesty we've seen from the police all the way to the highest levels of government, I no longer believe my best interests will be honored. I used to be a donor, but I've lost faith in our institutions, especially when it comes to Healthcare. Do you trust insurance companies? If so, why?
Great. Something else to be stressed about.

Kidding aside, stress is a deadly serious thing. I never took it seriously until it nearly did me in. I can also attest to the memory and other cognitive issues. It can take quite a while to recover.

The most stressful situations are where you are expected to perform, but have little or no control. This could be a job situation or some other situation. Find a new situation or a way to establish more control. Better to lose that job than your ability to work at any job.

The last thing you want to do if you're constantly stressed is to just suck it up. It's one thing to do that for a limited duration to achieve something specific, it's another thing to do that indefinitely with no end in sight.
Location: Cleveland, Ohio

Remote: Yes

Willing to relocate: Yes, definitely

Technologies: Java, Javascript, Python, Bash, SQL, REST, Webdev

Résumé/CV: https://drive.google.com/open?id=0B4LVaiM_PK4oMk9uUWJCY29NaG...

Email: pimlottc at gmail

Senior Java developer with extensive experience in web applications, including front-end code. Quicker learner with a fondness for open source tools and the unix philosphy. Interested in user-focused design with a strong attention to detail. Available for both contract and full-time work.
Location; Germany, cologne
Remote: yes
Willing to relocate: yes
Technologies: Windows server,networks, VMware, docker etc, right now Specialized in API Management,API security, network security, encryption, oauth, openid etc. Datapower gateway from IBM and the API suite from Axway.
Resume on request.
Email: tesion@gmx.de
Twine Labs | Engineering (multiple) | Philadelphia, New York City | INTERNS, REMOTE

https://www.twinelabs.com/

Twine builds software that matches employees with the right new roles inside their companies - we help Fortune 1000 firms retain top talent and save millions on hiring and training. Powering our software is a suite of matching algorithms that improve over time using statistical learning. We just signed up our first few corporate clients and are growing fast.

We’re looking to fill the following roles:

- API Engineer

- Full Stack Engineer

- Data Scientist

Stack: Python/Django, Angular, D3, PostgreSQL

You’ll be working directly with the founders and our engineering team.

Email us at team@twinelabs.com with a brief description of your interest and a link to your work.
UC Berkeley | Software Engineer | Berkeley | Full-time, REMOTE, ONSITE, http://berkeley.edu

UC Berkeley is hiring a full-time software engineer to work on a DARPA-funded project to build next-generation methods for social science research [1]. The software engineer will join a team of scientists and engineers building Dallinger [2], an open-source platform that automates the full pipeline of crowd-sourced experimentation, from recruiting participants to managing the resultant data; think lab-on-a-chip or microfluidics, but with people. The position is a 2-year contract, renewable up to 3.5 years, and includes a comprehensive benefits package. The full job ad and instructions for applying can be found at http://bit.ly/2hCqGrj. Remote work is possible.

Our stack is Python, Flask, PostgreSQL, Redis, WebSockets, the SciPy stack, Jupyter notebooks, JavaScript, HTML, CSS, all on Heroku & AWS.

[1] http://www.darpa.mil/news-events/2016-03-04

[2] https://github.com/Dallinger/Dallinger
YMMV but if you're willing to experiment I'd recommend looking into nootropics, specifically Noopept and Pramiracetam helped me.
Regalii, New York Office or Mexico City Office

https://www.regalii.com

We are looking for 2 Ruby on Rails developers to join our development team.

There are tons of startups that focus on making the lives of the top 1% of society better—but how many are focused on improving the lives of the bottom 20%?

Meet Regalii. Regalii is focused on improving the lives of hard working immigrants at the bottom of the economic pyramid. We are revolutionizing the process of sending money abroad to make it instantaneous, safe and completely transparent. We have created the world's best bill payment platform—one that allows customers to track their families finances and make payments to over 500 utility companies in 10 different countries.

To apply, please drop us a line at careers [at] regalii [dot] com.
What specifically happened in the last 2-3 years?
It is equivalent in this case though, as the function body doesn't use any of those features...
. ==================== Notion – San Francisco ====================

"We shape our tools, and thereafter our tools shape us" The goal is to democratize software. Quite a shame that 30 years into personal computing, an average person's interaction still caps at word-processing. We'd like to change that. A beautiful loft/artist office in the Mission. Best investors out there.

You will be part of a small and talented team. You need to be able to make things and think conceptually.

https://notion.so/why
That's not what the debate is. It's about the dark pattern of opt-out in which other people make the choice for you and being forced to opt out of it. Many people, myself included, are for organ donation but oppose opt-out as unethical and dangerous.
Remember, there are no Chinese 401k plans. There is no retirement plan except for what you save and your children provide.

Hang on, you only have one child. And the stock market is just smoke and mirrors and you can't actually own land in China...

This is just a trickle of the money that needs to be invested for retirement or a rainy day. Western economies were left totally flat-footed by this, a combination of greed and incompetence.
Development Initiatives | Python Developer | Bristol UK | ONSITE http://devinit.org/

Development Initiatives is looking to recruit a talented Python developer to work for the International Aid Transparency Initiative. If you want a job that uses your tech skills to make the world a better place – this is something for you.

We’re looking for someone who is passionate about supporting the potential of open data to provide a platform for greater accountability and citizen empowerment in the world of aid and development.

The role is an exciting opportunity to make a real difference to the transparency and accountability of international aid and development, and to play an important role in a leading international open data initiative. In addition to your tech skills, your contributions to team discussions will help shape the future of this prestigious open data standard.

Full details are available at: http://devinit.org/wp-content/uploads/2016/12/IATI-Python-De...
Bitcoin and its flaws are rather well understood at this point but perhaps only by a few. Indeed if you do not understand it, stay out.
Location: Bucharest, Romania

Remote: Yes

Willing to relocate: Switzerland, Spain, US

Technologies: HTML, CSS/SASS, JS/jQuery, React JS, PHP, MySQL, Wordpress, Drupal, product design

Résumé/CV: https://www.linkedin.com/in/alinrauta

Personal Website: http://alinrauta.com/

Email: alin.rauta@thebusinessclub.ro
i think that languages that have a very good REPL make it easier to write tests. Because you play around in the Repl, you automatically write a few tests that you just have to copy. Also, if you design your software repl-friendly, there is a lower overhead for your tests (easier set-up etc.)
Of course it's a 100% Bitbucket issue as seen as a user. I ran into the same issues while having some debug headers set.

As a user I simply don't care what platform they use.
I agree it's a research project. Who better to perform said project than Tesla? They have 100k+ vehicles on the road being trained by drivers at a rate of over 2 million miles per day.
The pitfalls of Test-Driven Development
> Only from a historian's bird-eye view can you make statements like "the steam engine started the industrial revolution".

I'm always baffled by that example. The Industrial Revolution was already ongoing when the steam engines become practical.
> Frankly I'd be OK with that, even though I'd rather die than have them harvest my organs and desecrate my corpse

I'd love it if you could elaborate on this position. In contrast, I feel like once I'm dead, my body has served its purpose, and if it can do some final good through donation, all the better. It would be interesting to hear more about your perspective.

> I don't think the default should be for people to cut pieces out of someone, and I think most people wouldn't want that.

This doesn't seem to be true, at least in the US and UK (although the US is/was right around 50%):

https://www.organdonor.gov/dtcp/nationalsurveyorgandonation....

http://www.bbc.co.uk/news/uk-wales-politics-17226610
COP21: Arnold Schwarzenegger: 'Go part-time vegetarian to protect the planet'
In my case, it's "I'm not uneasy about thinking about what happens to my body after I'm dead, but I'm uneasy about 'tricking' people who might actually be uneasy about it". Where I think "I'm uneasy" is understating a feeling of which you might not understand the intensity if you're not feeling it that way.
Forget about flying cars, I would kill for a laundry folding machine.
I'm a bit confused... I thought that Django always signed the CSRF tokens with the app's SECRET_KEY

But upon looking at the code, it seems that the SECRET_KEY is only used to reseed the PRNG O_o

https://github.com/django/django/blob/stable/1.10.x/django/u...
Why trolls won in 2016
Hey xando,

Thanks for the awesome website! Could you please add stats for F#? I've seen a few offers using that language but it's not on the Stats page :(

Thanks!
Culture is so blah!
Mediachain Labs | New York City | Blockchain Architect | Remote | http://mediachainlabs.com

We're building http://mediachain.io, a database for building scalable decentralized media applications and rewarding creators.

http://github.com/mediachain

Read more on http://blog.mediachain.io

We've recently raised $1.5M in seed funding from USV and a16z and are actively expanding the engineering team! Anyone interested in contributing should reach out.

Join our Slack: http://slack.mediachain.io

Position: Blockchain Architect

A blockchain superfan with a keen interest in the economic and game theoretic underpinnings of crypto systems. Familiar with smart contracts (solidity/script), general purpose algorithms like PoW, PoS, DPoS, etc as well as specialist approaches like proof of retrievability and proof of custody.

Experience with simulations a plus. Strong relevant coding skills a big plus.

Experience with crypto applications outside of trading extremely highly valued.

Position Details

Location: New York City or Remote

Type: Consultant / Part-Time / Full-Time

Salary: To Be Communicated

Learn more at http://mediachainlabs.com/jobs
I mean, it kinda sounds and looks silly, but if you want to bootstrap security, it should do.

Atleast I can't think of a better way to get time from a server with a cert.
I'm guessing that a Data or HAL would be different than examples of narrow AI.
Enterprise software prototyping: Q&A with project management app Trello
They are using a token, just like everyone else... this is just some added protection on top

Let's not spread FUD :)
> I don't know, but it might be extra responsible of the Redis devs to suggest they shouldn't implement your security for you, and they should stick strictly to databases.

Do you still agree if I change your statement to:

I don't know, but it might be extra responsible of the nginx devs to suggest they shouldn't implement your security for you, and they should stick strictly to HTTP.

I would imagine you would not agree, because it's ridiculous to have a web server only supporting HTTP in 2017. This is exactly my argument about Redis.

I'm not saying Redis should implement their own crypto. I'm saying it's user hostile to say "We don't support security because perimeter security is infallible and plus no one really cares about security anyway" and you should go use another utility to wrap their socket in SSL.

Sure, it's not their job to be security experts, but neither are the:

- PostgreSQL developers

- openLDAP developers

- rsync developers

And yet somehow they manage to support SSL within their application.

If you read reports about data breaches lately, it's usually the following pattern:

- Send a phishing email to someone in the org with malware

- Infect their computer

- Pivot inside the network and exfiltrate the goodies

In this scenario, perimeter security is utterly worthless because the attacker has gotten themselves right into your network.

If you have encrypted data between services (e.g. application servers to database, application to redis) then they also have to pop the actual servers to get the data, instead of just sitting on the network and watching traffic go back and forth.

People say "oh it's not a big deal, redis is just storing sessions" until someone grabs a session from the app server to the redis server, and then pops your site as an admin.
7 open source-related legal developments that grabbed headlines in 2016
SEEKING WORK - Europe / Remote.

I'm an experienced Rails and iOS developer (5+ years), and have worked in New York, Amsterdam and Dublin, and have freelanced with a number of companies in San Francisco and across the world.

I'm also experienced in Golang, Haskell, React.js, Docker, AWS etc.

I've freelanced for the last two years or so. I'd love to chat about helping to get your startup off the ground or helping your agency on a project. Feel free to drop me a line with anything you'd like to chat about!

Email: npaterson1@gmail.com

CV: https://angel.co/niall-paterson

Github: https://github.com/paterson (w/ open source contributions)
Amazon New Product Demand Forecasting | Seattle | Full-Time | On-Site ($130-$250+ depending on experience)

Amazon's New Product Demand Forecasting team is responsible for one of the most challenging problems in supply chain optimization: predicting sales for products that have no sales history. This is a uniquely creative space in Forecasting requiring our machine learning models to capture both the nuances of the global consumer marketplace as well as customer behavior on Amazon.

Our team works closely with research scientists to invent new ways to make use of novel data, solve hard engineering problems around scaling and performance in predicting for tens of millions of products, and iterate quickly in order to stay on the cutting edge.
I'm looking for an experienced software developer that is comfortable with big data and machine learning and can:

* Design systems that provide a stable base for innovation in a rapidly changing business

* Improve Forecasting algorithms through data-driven analysis and experimentation in our Scala/Spark environment

* Optimize for scalability and performance of both distributed computations and near-metal C++ code

* Learn quickly and keep up with a rapidly changing machine learning and big data landscape

* Communicate their ideas clearly with all members of a diverse team

If this sounds interesting, as the hiring manager I'd love to chat or buy you coffee. Email me (Stefan) at smai@ (amazon.com) with your resume and a brief introduction. (Interview process is 1 phone screen and onsite interview with whiteboard coding and behavioral questions about your experience.)
Location : Bay Area

Remote: Looking only for remote work

Technologies: Grails

email: grails at jquantum
I'm still using a T61/T60p hybrid I built. Sometimes it's kind of slow, but plenty of new machines still have 8gb of RAM and an SSD just like mine.

After this model, they switched to a keyboard with a skeletonized baseplate instead of solid steel, though I think the old keyboards can be swapped in to slightly newer models. The big thing for me is the screen. 1600x1200 is perfect for two Emacs windows side by side containing code up to 80 characters wide at a comfortable font size. Later "wide" screen resolutions are more likely to be shorter than wider.

I've been hoping for a change to this resolution monoculture, but I think I'm going to have to build something much more custom to replace this.
Miami - only sub-tropical in the US. Not sure why tech and VC scene have been absent.
SOCi | QA Engineer | San Diego | https://www.meetsoci.com

Winner of the San Diego Innovator of the Year (http://on.mktw.net/ZULfCc) and named a San Diego Venture Group 2014 and 2015 COOL Company, SOCi brings Big Brand social media campaign and promotion capabilities to small businesses and their service providers. SOCi, Inc. is based out of downtown San Diego.

Our SaaS platform solves social media management at scale for multi-location brands and marketing agencies who need to manage thousands of social profiles from a single location. We’re looking for a QA Engineer to help us continuously deliver quality, bug free software in a fast-paced startup environment. You will need to have a natural itch to try to find new and innovative ways to break things and test for scenarios others can’t think of. The role is highly technical – you are expected to review code, verify database states, write test automation scripts, manually verify end-to-end functionality and document reproduction steps.

Responsibilities

* Functional testing and code review of all new pull requests

* Working closely with programmers to identify problems in the code / functionality

* Working closely with client support staff to replicate client issues and write JIRA tickets

* Participate in full system testing before and after code pushes to production

* Write test automation scripts, test data generators and other useful test tools

* Have an uncompromising passion for quality and a sense of pride when a job is done right

Requirements

* Ability to read/write JavaScript, PHP and MySQL

* Solid understand of web application stack from client-side to server-side

Send your application and resume to careers@meetsoci.com