skysight-inc/HackerNews huggingface dataset:
> No one criticizes openPGP on the crypto point of view.

Hm?

Of course PGP is criticized for that, just less vocally.

- Authentication is off by default in GPG

- Even so, it's very complex, and most of the protocol isn't authenticated

[ This is problematic, because ciphers tend to be more or less easily malleable, so non-signed messages can be tampered with; this is also an issue for encrypting files symmetrically ]

(- Compression is on by default and makes everything super-slow for no good reason)

- Widely used defaults for encryption and key derivation are rather arcane (eg. CAST5)

- PGP signatures, by principle, are non-repudiatiable, unlike most modern encrypted chat applications, so they prove to _anyone_ _forever_ that your key signed that message.

- PGP format announces all recipients to the world

- No forward secrecy possible

- ...
DataCentred | http://www.datacentred.co.uk | Manchester, UK | Cloud System Engineers | Full-time, onsite but remote considered

DataCentred operate a public cloud platform based on OpenStack and Ceph, as well as datacentre colocation based at a facility in MediaCity, Manchester UK.

We're recruiting for a couple of positions, both of which will centre around developing and maintaining the cloud platform using tools such as Puppet, Ansible, Docker, Jenkins, InfluxDB, and so on.

If you're passionate about open source software, have production experience of OpenStack, and are interested in helping deliver a best-of-breed cloud platform using technologies such as these then we'd love to hear from you.

More details here: http://www.datacentred.co.uk/senior-cloud-systems-engineer/
Both opt-in and opt-out offer you the same degree of choice; neither is a step towards mandatory organ donation.
I would assume the balance is less ideal than US. Then again people from US compare to EU while in EU you get pension, insurance, and generally a social system to protect the weak (which might be you one day).

Quite frankly I wouldn't mind not having much money to live on. My living standard doesn't evolve around e.g. eating out. I want my own apartment (for two), a cheap car, a good laptop, a reasonable good smartphone, and some interior stuff (the usual plus some expensive kitchen equipment as outlier). That's pretty much it. You don't need a high income for all of that. The only expensive one is the car and that's something you save up for (long term investment).

Health is the most important to me; from which everything sprouts. I've been in Switzerland a couple of times. The air in Switzerland is night and day compared to where I live (NL), and I don't even live in a big city.

If enough IT people move to Switzerland (I know some known figures who have) something nice can brew there. For example, Google has a lab there.

Even if you can't get an IT job there's non IT jobs available, including low wage / low education. Perhaps Norway is a better country in that regard. Postal service delivery, for example, earns a lot compared to NL. The weather is Scandinavian, but due to the Mexican Gulf temperature near coast is higher than Sweden and Finland (this also keeps fishing trade alive in winter). Relatively clean air, and they're also neutral (tho less than Switzerland).

Obviously it'd be a backup plan. I don't think you can get a visa for that anyway. Another option could be remote work.
That's really not a spoiler. It's apparent as soon as the character is introduced and the plot takes off in the beginning.
> And customers love those services.

Until they die in a fire in a building that doesn't follow fire code; or are seriously injured in a possibly uninsured Uber[1] car.

[1] Uber provides insurance to US drivers. I don't think they provide it anywhere else.
SEC | Frontend Engineer | NYC $120,000 - $180,000 | ONSITE

We're building the US Securities & Exchange Commission’s next generation analytics platforms to keep our markets safe, effective, and trusted. Come build awesome tools to analyze big data. We do quantitative analysis, machine learning, plus good old fashioned product development. At the end of the day we are creating modern, elegant applications that help our government be more awesome. Join a small team of talented developers, capable researchers, and former finance people that saw the light.

We use a modern stack of JS, React, Python, pandas, Flask, C++, kdb+/q. It doesn't matter if you know our stack or not, if you love to learn you'll fit right in.

If you're interested please reach out to careers@aretecinc.com
is your wife's family in the same location as yours? if not, how did you select?
Does the company provide stock refreshers? If not, joining fang is worth significantly more than 260k you have been offered.

Given the company looks like a unicorn, i assume there wont be much difference between this and a fang company in terms of interesting stuff to do.
Sites understandably don't want to mess with what works. We won't see a switchover unless and until not being HTTPS becomes something that hurts their bottom line.
Abine (http://abine.com) Online Privacy & Identity| Software Engineers | Boston MA or Remote | Part or Full-time, REMOTE, ONSITE,

Abine builds consumer privacy / security software for everyday web and mobile users. If you're interested in affecting change here, speak up: jobs at abine dotcom.
AKA regulatory arbitrage--profit from not obeying the same laws as your competitors.
SEEKING WORK - Remote, short/medium term projects

Location: Oakland, CA

8 years experience with Rails. Mostly backend focused.

Skills: Ruby/Rails, Javascript, MySQL, Hadoop, Solr, CoreOS, Docker, Golang

Email: pcunnane@gmail.com
What's with this point of view when questions/solutions/hypotheses like the parent comment suggest?

When I propose this idea the usual reaction is: "Are you the next Hitler? Do you want to kill everybody? Maybe you should kill yourself first!".

It's proposal not to proliferate ourselves to extinction, no one is proposing any mass genocide. IMHO [0], we are 2-3 generations from catastrophic survival problems (unfathomable problems due to climate change, lack of resources like drinkable water, etc.).

[0] completely pulling this out of my a, though I think it's reasonable scenario with current increasing rate of consuming ourselves to death.
It is related to AirBnB because there is an argument that the tax is unfair to consumers to begin with.

It is designed to screw over foreigners.
Mixmax | Full-Stack Engineer or intern | On-site San Francisco or Remote (experienced) | https://mixmax.com/careers

We're a growing, fast-moving team looking for all types of engineers: full-stack, backend, site reliability, data, integration.

Mixmax's mission is to reinvent the way professionals communicate for work. We're building the impossible: a rich communications platform that brings the power of the web to everyday communication. This includes easily scheduling meetings, completing surveys, making purchases, signing documents, and even interacting with apps. We’re fully integrated with Gmail and Google Inbox, and even have a Electron-based native desktop application. Already, we’re seeing phenomenal growth, with customers from Uber, Airbnb, and tens of thousands of more businesses depending on us for their daily communications.

Check out our engineering blog series last month to see what we've been working on: https://mixmax.com/engineering

We’re well-funded with an A++ list of investors who previously backed companies like Twitter, Heroku, Lyft, and Square. We have big plans ahead. Come do the impossible with us.

Our stack: Node, Mongo, Elasticsearch, AWS, Redis, Electron (full stack: http://stackshare.io/mixmax/mixmax-for-web)
Our engineering blog: https://mixmax.com/engineering
Email careers@mixmax.com and let’s chat!
Did lenovo get rid of the ThinkLight? (The keyboard illumination from above)
How could you gather this data, and who could publish the study and be trusted by the public?
Ask HN: Knowledge transfer within your  company?
I'm looking to implement a StackOverflow style QA web-app for a client. They are a medium sized enterprise software company with knowledgeable people across support, professional services, sales, and development. Each department has deep knowledge across all the verticals into which we sell, but that information is relatively silo-ed.

I can see in our internal communications all of the knowledge that is lost or hidden because it cannot be easily found when needed.

There are lots of products out there (open source and otherwise). I'm looking at a few.

* https://marketplace.atlassian.com/plugins/com.atlassian.confluence.plugins.confluence-questions/cloud/overview

* http://meta.stackexchange.com/a/37953

My question to the HN community here is:

Have you implemented one of these systems before? If so can you share any tip or pitfalls to avoid?

How did you sell this up the chain of command? Or did it come from upon high? (This is a bottom-up initiative)

Thanks!
Yet another Snapchat clone from Facebook
Various | Social Nature | Vancouver, BC (onsite) | www.socialnature.com

Social Nature is making waves with our people-powered marketing vision (people trust friends not ads) and commitment to only promoting brands with natural products. We are a small and mighty team where everything you do will have an immediate impact on those around you. You'll get to work closely with our customers, invent new ways to integrate with social channels, and wrangle extremely big data as we build and grow our intelligent platform.

We're looking for a full stack developer who is comfortable working on a product that is consumer-facing in the front while integration and data-heavy on the back. A basic grasp of UX and UI design principles will come in handy along with a solid foundation in algorithms, data structures and design patterns. More than anything we want people who love what they do, have opinions and get excited about software.

Bonus points for experience with any or all of the tools in our stack: Angular.js, ASP.NET MVC, Node.js, SASS, Foundation, jQuery, PostgreSQL, AWS+ElasticBeanstalk.

Check us out and apply:

Lead Developer - https://www.socialnature.com/careers?job=lead-developer

Full Stack Developer - https://www.socialnature.com/careers?job=full-stack-develope...

Intermediate JavaScript Developer - https://www.socialnature.com/careers?job=intermediate-javasc...

Server/Backend Developer - https://www.socialnature.com/careers?job=serverbackend-devel...
After testing some static site generators I've settled with Hugo and never looked back. I like especially the fact that I only have a single static file with no further dependencies. And the speed is fantastic. Hot reloading is very useful.
Even if they did that, some important games would be missing due to licensing issues (e.g. Goldeneye on the N64). Unless you mean a console that could fit all the original cartridges, not just play downloaded copies of them.
The original Wii also had this AFAIR (I own a Wii but I never played it much but I recall the commercials)
Are there any good sources for Uber's unit costs versus prices? I would be surprised if all rides in all markets are subsidized by VC money. I would expect most of the VC money is being spent on expansion (more cities and more drivers) and that Uber service is actually profitable in mature markets. There are several articles claiming that Uber is profitable in the US.
If you don't want a thief to steal your TV, marking the 'Don't Rob Me' box on your Driver's License is not a useful protection.
I have been using OpenPGP for years without problems. Key transition / exchange / verification can be a bit painful, but actually it is not that hard.

Also the longer you use OpenPGP, the less keys need to be verified. The start is very hard, since you start with no trusted keys at all. The longer you use it, the more fluent usage becomes.

Have been using GPG Suite on macOS and the only problem is, you may not get support for the new macOS on day 1 since apple provides no API for Mail.app. And then again, giving Apple some time to figure out their bugs of the intial major release isn't a bad idea.
No. Escalate.

If your employer wants you to use some specific technical tools, they need to provide those tools. Be respectful, but firm.

I would recommend simply leaving your laptop at home.
Taxing the hospitality industry is a way for a municipality to shift the tax burden from residents to visitors.
Location: Fort Lauderdale, FL

Remote: No preference

Willing to relocate: Yes, advance necessary.

Technologies: .NET, python, DML, DDL, SCMs, XML, Web, CLI

Resume: Email for resume, can be reached on linkedin as well.

Email: michael x estrada at gma1l (dot) com (.=)
Because we live in a first world country. Taxes pay for that. That include hotel and taxi taxes.
"TLS has exactly one performance problem: it is not used widely enough"

https://istlsfastyet.com/
Its more of we are running out of cheap helium as the US has been selling off its massive stockpile and its nearly depleted.
Slippery-slope fallacy. Revising regulation to strike a balance between no regulation and existing regulations to allow services like AirBnB and Uber does not have a causative link to creating a contract-for-hire market for killers...
On emotionally intelligent machines
You can ask any number of people who have chosen not to have kids - or any number of gay people, or people who were born sterile, or have otherwise lost the ability to have kids - this question. For many of them, the answer is "to enjoy it, and to be a positive influence in the lives of others".
But we are doing more and more things going against our biological instincts, especially in the last century; So I don't know if I would qualify the current human a successful species. We are destroying our habitat
Most cool. I totally wasn't ridiculing you. I apologize profusely if that's how it came off. I would never make fun of anyone's English, and I didn't find yours defective anyway. I was sincerely trying to wonder how a leather docking station would work. Also, I haven't seen docking stations around in ages.
When I'm on the highway during my commute I use cruise control. I've noticed that it helps tremendously in letting me focus more on other things, like other drivers, road conditions, etc. Because I'm not having to make small adjustments to me speed or constantly check my speedometer.

I imagine this has a similar effect.

The flip side is, I always have my foot resting lightly on the gas, so I'm not really at a disadvantage if I need to brake. Do Tesla drivers using autopilot have their hands hovering over the wheel typically? If not I imagine reaction time could be impacted.
FYI, HN's handy little "web" link, below the title, does exactly that (i.e. Google the headline)
> Most of those regulations were put in place to protect communities and customers

I don't have much of an issue with communities using zoning rules to prevent AirBnBing. That's a separate issue from top-down hotel regulations.

The cost of "protecting" me from hotels is several orders of magnitude higher than the value I get from these "protections". Of course, most of the cost of hotel regulation is hotel taxes (which are big revenue sources for tourist destinations and have nothing to do with hotel safety) and bureaucracy. The claim that all regulations have something to do with safety is popular among proponents of a given regulation, but of course it's manifestly false.

> Safety and health regulations ensure that customers won't get injured or sick during their stay.

I think you're putting a bit too much stock in the effectiveness of regulation; in particular, municipal health authorities taking your money does not make you immune from disease. I'm also quite capable of looking at something and telling if it's dirty, which is the process I use both for my own household and for AirBnBs. It seems to work quite well (and inexpensively).
What portions of that link are relevant? All I see is a link dump. "Signaling"? As in virtue signaling?

Is that your site? I approve of lesswrong, Brookings Institute, the Atlantic... And reviewing your comment history, I'm going to gamble on the hope that you're persuadable. You kinda "sound" like a libertarian, so you might enjoy this publication from criticalthinking.org:

http://atom.curtin.edu.au/SAM_Ed%20Fadsopt.pdf

First hit when I google "fads in education". Result! The intro is better than I could have said it:

"The history of education is also the history of educational panaceas, the comings and goings of quick fixes for deep-seated educational problems. This old problem is dramatically on the increase. The result is intensifying fragmentation of energy and effort in the schools, together with a significant waste of time and money. Many teachers become increasingly cynical and jaded.

It is time to recognize that education will never be improved by educational fads, and that the manner in which educational trends are marketed guarantees that they will be transformed into fads. Fads by their nature are fated to self-destruction. Parents, educators, and citizen activists need to understand the problem of educational fads so that they can effectively distinguish substantive efforts at educational reform from superficial ones. Hence the motivation for this guide."

It includes many fads I hadn't heard of. Its also about 10 years old, and it focuses on the classroom, so it doesn't include more recent nonsense like Common Core, Race to the Top, charter schools, most recent attempts of educational software, computers in the classroom, standardized testing, ranking teachers... Need I go on?

---

What this paper, and many others, leave out is the role of procurement as the engine behind the fads. A lot of money is in play. The best public example I can think of is Dr Richard Feymann's anecdote about buying school books. I'm sure there's similar accounts for every failed fad, if I bothered to look. Especially all this standardized testing, which is the most efficient money extraction scheme cooked up to date.

https://www.washingtonpost.com/opinions/eugene-robinson-the-...

This is surprisingly well sourced:

Standardized Testing: Last Week Tonight with John Oliver (HBO)

https://www.youtube.com/watch?v=J6lyURyVz7k

---

Any way. I'm glad I did this. A trip down memory lane. My boss's boss was Dr John Goodlad. Here's his obit:

https://www.washingtonpost.com/news/answer-sheet/wp/2014/12/...

Dr Goodlad was a great guy, he did great works. Practical, pragmatic, diplomatic, wicked smart, no bullshit. But education reform is like fighting a mob. Everyone's an expert; calm, rational people get shouted down or mowed over.

Oh well. I have many friends who still work in education and reform. The fight goes on.
You should read the rest of the article; the history involved does a pretty good job of explaining what happened and why:

"ALAN SOKAL: In the spring of 1994, I saw a reference to the book by Paul Gross and Norman Levitt, Higher Superstition: The Academic Left and Its Quarrels With Science. My first thought was, Oh, no, not another one of those right-wing diatribes that tell how the Marxist deconstructionist professors are taking over the universities and brainwashing our children. There had been a whole spate of such books in the early 1990s — Dinesh D’Souza and others.

"My second thought was "academic left and its quarrels with science"? I mean, that’s a little weird. I’m an academic leftist. So I decided to read it. I learned about a corner of the academy where people were employing either deconstructionist literary theory or extreme social constructivist sociology of science to make comments about both the content of science and the philosophy of science, often in gross ignorance of the science. The first thing I wanted to do was go to the library and check out the original works that Gross and Levitt were criticizing to see whether they were being fair. I found that in about 80 percent of the cases, in my judgment, they were."

...

"I thought, well, I could write an article to add to the Gross and Levitt critique, and it would probably disappear into a black hole. So I had the idea of writing an article that would be both a parody and an admittedly uncontrolled experiment: I would submit the article to a trendy journal and see whether it would be accepted."

...

"BARBARA EPSTEIN, professor emerita, history of consciousness department at the University of California at Santa Cruz: A friend of mine at UC-Davis said that she wanted to tell me about something if I would promise absolute secrecy. She said there is a physicist at NYU who has written an article that purports to be by a scientist who has converted to poststructuralism, and actually, it’s a hoax.

"She said he wants to find a humanist who knows something about poststructuralism, can’t stand it, is a leftist and feminist, to work with. He wanted to write a piece outing himself, and explaining why he had done it. I said, "Absolutely. Sign me up.""

...

"EPSTEIN: ...By that time [after the article was published, but before Sokal's second article exposing the hoax], I really was persona non grata. It was very clear that I was a minority in my department, and not only a minority but a target. I had an article in Socialist Review in which I criticized poststructuralism. It had become a crusade and an orthodoxy and a juggernaut, and the more I was part of that culture, the more I disliked it. The emotional atmosphere around this wasn’t that different than the emotional atmosphere around the election right now. People on two sides of the fence were barely talking to each other."
Would the lack of perfect forward secrecy be considered a shortcoming?
No, I think it's reasonable to look at who is benefited and harmed by a regulation. The morality of contract killing is probably not very controversial. The vast majority of people would oppose it even if no laws or government existed.
SEEKING FREELANCER | Washington, DC | REMOTE OKAY

I run a web blog called Scotch.io [1] and a small creative arm of it called Scotch Digital [2].

Scotch Digital builds really fancy (but not necessarily complex) WordPress websites for clients. We deliver fast and super high quality pixel-perfect work. Clients include US presidential campaign races, governor races, non-profits, and a bunch of big companies.

Seeking someone who can slice the Hell out of a website and kills at turning a PSD to a beautiful fully responsive website. Knowing how to integrate into WordPress is a huge plus too. Someone who isn't afraid to go crazy with fancy UX things either. Just really need to know CSS (less / sass) and jQuery.

For a general idea of quality we are seeking here's some projects to check out for desktop and mobile:

* http://www.rcabracebridge.com

* http://aspiringeducators.nea.org

* http://www.barbaraleefoundation.org

* http://barbaralee.com

* http://teamcristinagarcia.com

* http://www.climatehawksvote.com

Feel free to email me if interested with rates, availability, and examples of your work. nick@scotch.io

[1] https://scotch.io

[2] https://digital.scotch.io
Because investment banks are run by sales. Only the people at the bottom actually care about this stuff
I have to agree. A JWT contains within it 'claims' that are the authorization for allowed behaviour against the API. Authentication happens before the JWT is issued.

I think the problem is that it's not about issuing just one JWT, you need a 'refresh' token and a 'security' token. The security token expires quickly, but a new security token can be issues using the refresh token which has a long expiry.

You can even make the refresh token single use with the action of refreshing the security token returning you a new refresh token. This, however, needs to be handled carefully within the UI as two requests using the same refresh token would invalidate the 'session'.

The reasoning is that the api can trust the claims within the security token, but has no need to access external sources to validate the token. The refresh token can have security policies applied to it as well as 'user logged out' checks against the refresh token. This keeps the API requests extremely fast with only an intermittent (once a minute) need to get a new security token.