skysight-inc/HackerNews huggingface dataset:
Terminal 1 | Hong Kong | Full-time (relocation OK) | apply now at https//www.tty1.co/#/companies/tty1 | 6+ openings!

Asia is on the rise, as everyone says. Number of startups has grown substantially with huge amount of capital and talent swimming around. While VC and different entities are actively helping promising startups to secure sourcing, nothing much has been done on the human capital side. That's where we come into play! If you are interested in helping our awesome clients (including GoGoVan, a post series C startup) to help them strengthen their winning team through machine learning technologies, let's have a chat.

Visit us and check out our clients on https://www.tty1.co/#/companies/tty1 https://www.tty1.co/#/companies/gogovan
Just to extend on what jon-wood said, that's definitely the other way around: U2F is an open standard and the intelligence lives on the USB/NFC device. Any browser which implements that standard[1] can login and, especially nice for security, the browser never gets access to the keys or, with devices like the YubiKeys which require you to touch a button for each request, even the ability to authenticate without user approval.

1. Currently Chrome has this, Firefox is close (50.1 shipped it but it only works in the e10s mode), and there are extensions for Safari and older versions of Firefox.
In production deployments, unsecured remote connections might be fine, because security would be handled at the network layer (e.g. by deploying MongoDB on a VLAN which only was accessible by your MongoDB clients which were on separate servers).
Seconded on the Chromebook. Another option is a secondhand netbook, like an Acer Aspire One - very small and easy to throw into a bag, very cheap since they never really caught on and vry good battery life. You might have to relax your HiDPI requirement for a cheap machine though - you're not going to get a fantastic screen AND a low price.
True. I would like to listen to music when I like to, not when I have to. Anyway noise is not everything. It is so easy to be disrupted by people walking around.
I find it interesting that there's no firewall with a default deny rule between these exposed mongodb installs and the Internet. All I can think is that most of them are on cloud services which are directly exposed. It reminds me of the fiasco with all of the directly-connected vulnerable network cameras on the Internet.
Bitdefender Total Security 2017 Crack Plus License Key
Or use Bootstrap 3's SASS port, and

.my-login-box {
@extend .col-md-4;
background-color: fuchsia;
}

or whatever, and don't touch the markup to add any BS-specific classes.

And don't use fuchsia. ;)
How to Start a Successful Freelance Business as a Software Developer
Everyday Docker Hacks
Microsoft took a rash of shit some time ago (15 years?) for shipping MS Proxy Server with every port open by default. From the POV of employee-at-the-time, it took them a disappointingly long time for them to not do that anymore.

Since then, I've learned to not assume that products are secure-by-default. At the same time, I kind of thought we learned our lesson and cut that shit out low these many years later. Add a line to a text config file that's probably buried eight directories down in a hierarchy that's owned by root? (I'm just hyperbolically guessing for effect; I generally avoid Mongo.) Do it, or you're hacked? And it's been this way for years? Come on.
GitHub Pages. The only real downside I can think of is it doesn't provide SSL encryption for your own second-level domain. Other than that it's perfect for that use case.
Are we sure this is for Zuckerberg himself? The visit 50 states makes me think yes, but still I always thought Sheryl Sandberg would make the better politician.
If you're looking for true beauty, look no further than negabinary. (http://mathworld.wolfram.com/Negabinary.html)

E.g.

3 = (-2)^2 + (-2)^1 + (-2)^0 = 0110_-2
-3 = (-2)^3 + (-2)^2 + (-2)^0 = 1101_-2

There is no signed bit, you don't have to worry about sign; everything just works like "normal" numbers because that in fact is what it is.

A pity it was never used except a few times in early computing. I'm never sure why 2's-complement won.
Isn't that true with most languages though, I mean look at C++.
Webassembly and Servo might big boost when available.
Do you have a "shut up" rule, though? I have to endure shared music, discussions about sportsball or TV shows, people making calls, etc. while trying to use a debugger a meter away (pack 'em in!). I could possibly tolerate on-topic discussions, but off-topic stuff belongs in a break room.
I'd love to use SUI with effects written in plain javascript sans gigantic dependencies.

Replacing a 100KB jQuery dependency with a 500KB React dependency I'd hardly call a solution. What happens when the next big thing hits JS land? As it stands the SUI author refuses to refactor out the jQuery dependency due to the amount of work involved.
Deploy Docker Compose (v3) to Swarm (mode) Cluster
Why should they? There's a paywall, it's no secret.
oh, do I have to post with the exact title?
No.
Stop putting people in boxes.
People don't fit into boxes.
They're people, not rats.
I work at a company that considers itself a startup -- we're seven years old and completely bootstrapped. I've had many people tell me that we're not a "startup," we're just a "normal company." Usually this comes down to people saying that unless our priority is maximizing growth in the short term, we're not a startup. (We are obviously still focused on growth, just not at the expense of our stability, our product, or our company culture.)

"Startup" is a nebulous term with no firm definition, so these kinds of arguments are bound to happen. Some people still say Facebook is a "startup" because it has the fast-paced environment with the normal superficial cultural trappings of a tech startup (food perks, no dress code, casual interpersonal culture, etc. etc.).

Ultimately it's probably just a dumb semantic argument that's best avoided.
HTTP URLs redirect to HTTPS, done. That's a basic step of turning on HTTPS
HTTP URLs redirect to HTTPS
Based on the article at least 30.000 internet-accessible installations.
I hadn't heard of Duo. Just looked briefly at the site. Does anyone have a TL;DR on that? Why would one use that rather than the native 2FA?
The same people that run an unsecured database that's accessible over the internet.
> If they don't understand what they're selling (and I'm sure they don't)

Moreover, why would they even want to understand? The loan disbursement will be going directly into to their pockets. The incentives are shockingly perverse all around.
In practice what I've seen is a "music clique" develops. If I went to put on some ambient Eno or whatever (because it's the closest to "no music"), it would probably be weird because I'm not in the music clique. I'm not really sure how you get to be in it, it would feel weird to me to put on music, effectively saying "everyone else, you must listen to what I choose". Just so rude, I feel.
The formatters have command line programs that return error codes if a file requires fixing so you can require not getting an error from that in your testing or building process.
Velocity? How is that a software term?
Bingo. They know it reduces productivity but apparently the productivity hit is worth the cost savings. And frankly, from a business perspective, they could be right. Just don't tell me its "to enhance collaboration" [don't pee on my leg and tell me it's raining].

Perhaps I was too harsh, there probably are some businesses that actually don't know that developers are much different from customers support, accountants or typists when it comes to the need for sustained concentration and focus.

(I mean no disrespect to customer support, accountants or typists.)
> Unless Google does actually use the language to the point a few well known companies think it is valuable to use in their own products and talk about it

https://www.dartlang.org/community/who-uses-dart
The Deep State Goes to War with President-Elect, Using Unverified Claims
You may want to have a read at Redux (http://redux.js.org) or any Flux type of container.

Basically, you don't propagate directly to your parent. In React there should be only one source of truth. So in your case, the event in a low level component should emit an action that will modify data in your Store/Container/Model. Then this change will be passed down (with the correct setup) as props to all of your components.

>React best practises question - At what level should event handlers be installed? At lowest level components or the highest level?

I personnally prefer when the handlers are close to the associated JSX. I doubt there is any requirement on this other than maintainability.
> They previously had a deadline for apps to have 64-bit version submitted, but backed off the ultimatum for now.

Apps have had to support 64-bit since June 2015 (February 2015 for new apps), and Apple hasn't backed off that deadline. But there are still 32-bit apps on the store that haven't received an 64-bit update, and I don't think Apple has ever stated what it is going to do about them (other than showing the warning).
So when are you and your fellow investors gonna stick to being human beings? This game has gone on long enough. We're talking about peoples' lives. We're talking about an entire generation of people who can't afford to buy houses because the generation before them gave in to bad credit. We're talking about entire generations of people who are going into a personal debt based economy of fear and coercion. Is that the kind of legacy you want to leave?
The takeaway for me is that it costs roughly $15-20 of hardware parts to have a stand-alone status indicator. That's pretty cheap, but not "no brainer" cheap.

I start asking myself what are the status indicators we really need? That people would pay $50 for?
If only people listen, think and then decide whether a technology really works for them rather than trying to catch up to some "current" thing due to some sort of a FOMO experience!

On the other hand, you get to meet people all over the industry who were asked to deliver a simple Frontend app but built a new trending framework not because they had to solve a nontrivial problem but because they projected too much into the future that they thought that introducing some meta gymnastics will solve a probable UX scenario in the next 2-3 years down the product line!!!
In no industry to loyal customers get loss-leader pricing indefinitely.

If you've ever gotten the discount once, you aren't treated worse than new customers.
I don't really get this article. He wishes as a teenager he had spent more time reading serious works of history, but that's just not really what teenagers do. He talks about how most Fantasy novels are just escapism, but so are more novels period along with sports, reality TV, sitcoms, and scripted drama. Basically he's saying it would be nice if we didn't have to relax at all and spent all of our time consuming educational media but that's not what most people want to do to unwind.
> Saying that people intended to default however, is not true.

I'm not sure if it's what roymurdock meant, but there's a nugget of truth to what he said. People did take on loans that they never planned to pay off personally. They saw the relentlessly upward trajectory of home prices and wanted to benefit. They took on loans with the intention of refinancing or selling the home a few years down the road. It wasn't an intention to defraud anyone, but it was definitely an attempt to get something for nothing. Just because they were trying to copy others who'd made large profits buying and then later selling their homes doesn't make it not greedy behavior.
I stumbled upon this (awesome) article that made me realize tons of things: http://www.ranum.com/security/computer_security/editorials/d...

I'm not a security expert (far from it) but I hope that I understand enough the importance of security to learn a bit about it and implement it as much as I can.

Secure defaults is now maybe the first concept I'm trying to explain to people in my company.
BuiltWith[1] and Wappalyzer[2] offer this as a service.

For software with client-side exposure that can be discovered during scraping, BuiltWith has pretty solid coverage (at least when I used it ~1 year ago).

I don't know if those services do it, but you can also find some really useful intelligence from DNS records. From email and calendar provider data to third party services like analytics trackers and landing page service providers (such as Unbounce). If you have an app that integrates or competes with those services, it can be really useful. If you use a DNS lookup service that provides historical record changes, you can even time your outreach to coincide with their annual renewal period when they're most likely to be entertaining the idea of a switch. Or in the case of an integration, wait until after the renewal period to start outreach since you know they're locked in for another year at least.

You can also use DNS records to link together entity ownership relationships. Say a company has competing product lines and doesn't overtly market them as owned by the same company. If they happen to use Salesforce Communities, the CNAME for the Salesforce community subdomain will be specific to each site but will have the same Salesforce account id in it[3], Now you know that they're operating under the same entity, which itself is useful intelligence, but you also can combine the technology usage you sniffed from both sites together.

[1]https://builtwith.com/
[2]https://wappalyzer.com/
[3]https://help.salesforce.com/articleView?id=000205653&type=1
The pill only works before you're 40 because it's a magic thought experiment.
This could be prevented by using physical keys instead of passwords. People are weak in deciphering URL bar contents.
What? Your prices go up every year? I've never seen that.
1. "If only everyone agreed with me and thought about it the way I do." I'm curious if you think I don't agree with you because I haven't worked through the conversation.

2. No. You didn't. And no, it isn't quite that.

3. Industry security as a holistic vision does indeed seem to be immaterial to this conversation. I talk back against this point in this community because I'd prefer not to see the slashdot-esque "M$" mindset take over the discourse in an industry that sorely needs competition in this space.

4. Since no evidence has been provided either way it doesn't seem safe to assume either way. I'm not sure why the lack of clear policy here is license for you to say "It is not changing."
So if he had simply titled the piece "Types of Software Engineers" you would be happy?
A Dichotomy for Digraph Homomorphism Problems
Then the title should be changed.
Sometimes the most advanced technology in the world is the simplest most childish thing around.
tl;dr Freda uses a modified version of GHC and doesn't have a lot of commonly used extensions.
Have you considered that the team's mood might not actually be as good as you think that it is? It's generally inadvisable to bring up environmental things that are making you unhappy at work, it could mark you as "not a team player" or "not a culture fit". People might be keeping it internal and just waiting it out until they can leave (I'm doing this now, actually).
I was a mechanical engineer for five years, now in software:

The way programmers tend to default "engineer" to meaning "software engineer" bothers me sometimes too. On the other hand, I wouldn't be surprised by a mechanical engineering blog doing the same thing. We all focus on our little corners of the world, and if software has it worse than mechanical it's just because mechanical engineers are forced to work with other disciplines more often. I'm pretty sure I've seen over- and under- engineers in mechanical work too, it's the same all over.

For whatever it's worth re: "engineering discipline", my feeling is that the parts of software engineering that really need to take their work very seriously mostly do. For example, the occasional articles on the NASA software that went into the space shuttle. On the flip side, if the mechanical engineers I worked with could build/test/release new designs the way software engineers can we would have been as sloppy and more. The reason physical things are more carefully designed is just that the edit/compile/test cycle is so much longer and more expensive, not that one is a "serious engineering discipline" and the other isn't.
You might be comparing to the wrong thing. These days, lots of open offices I see do not involve expensive (low) cubicle walls and desks, they're just simple tables. You can't get much cheaper than simple fold-up tables.
That is exactly what is being said.
Apple Designer Matt Casebolt, will now be designing Teslas
It's a pretty well known term in agile software development.
> No offense, but I would suggest that you are highly atypical as a programmer.

This is probably true, but whenever this subject comes up on HN people tend to forget that programmers tend to be fairly atypical people. Many people - mostly not programmers - find that a number of people around them with a shared purpose and even background noise actually helps them concentrate, and find casual conversations with people on adjacent desks motivating as well as useful for conveying work-relevant information. A working environment designed to the preferences of people who like listening to loud techno music is certainly an extreme way of catering for those tastes, but separate offices and silence is also an extreme.

And the pervasive myth that the only reason anyone would choose to work in an open plan environment is cost-efficiency is rather dented by the number of self-employed people paying (and commuting) to work in shared office space when they could have had more peace and quiet staying at home.
If anyone's interested in learning React, I keep a big list of links to high-quality tutorials and articles on React, Redux, and related topics, at https://github.com/markerikson/react-redux-links . Specifically intended to be a great starting point for anyone trying to learn the ecosystem, as well as a solid source of good info on more advanced topics.
6 AR Innovations CES'17
I like open offices because I want to feel like I'm working with people, not in solitary confinement.

When I'm alone in a private room, I'm usually playing; not working.

I find it incredibly difficult to get into working flow when in a private space.

I'm sure I'm not the only one. That's why people go to cafes to work when they have to work "from home".
Works for me - I'd have no objections if Bootstrap actually did that in their documentation.
As throwaway2016a alludes to, title should be changed to "The Types of Software Engineers"
> I've seen the infrastructure thing come up for awhile now, and it's definitely true.

Sort of. I'm not convinced their infrastructure pricing is accurate at all. I fully believe infrastructure has a higher cost in the suburbs, and that we aren't fully saving for/planning for those costs. But the numbers this article uses are insanely too high, to the point that it feels like an outright lie.

Strongtowns claims it costs more money to maintain the infrastructure for a single-family home (on average), than the average house would cost to build from scratch using retail pricing today (including land + construction of the house, and all of the related road/water/power/sewer infrastructure).

The StrongTown estimate seems to claim it's replacing infrastructure "once a generation" (30 years?), but is charging enough money to rip-and-replace every piece of all infrastructure 6 times per generation. Which is really high -- no one does that, there wouldn't usually be any need to do so.

Or to put it another way, StrongTowns is claiming that infrastructure maintenance alone costs the same as leveling the entire neighborhood and rebuilding it all from scratch at retail pricing every 30 years. Which is just outlandish -- if infrastructure actually was that expensive, 90% of these suburban houses never could have been built in the first place, even if financed using subsidy or debt.
I don't get it. If rats fit into boxes, surely people fit into bigger boxes?

You can certainly categorise people as well as rats. Some are faster / slower, (not-)curious, low/high-energy, ...
Matt Casebolt left for Tesla too

https://9to5mac.com/2017/01/11/matt-casebolt-touchbar-macboo...
I wish they would add some figures. They keep saying "doing you know how much these roads cost?". No I dont. Please tell. But they never do.
Note that other types of engineers write code: CAD, CFD, FEM, etc. We don't develop software products, but we write code to pursue our goals.
Dear security vendors: Other vendors are not the competition
All three of these categories are served by a product team that makes economical constraints explicit.

Too often business comes into the conversation with e.g. "We need a disaster recovery system" and no figures on desired RPO or RTO, no figures for what a minute's worth of business data, or a minute's worth of business activity costs or expected incidence or duration of outages from which even the True Engineer could derive suct figures. Too many organizations, when an individual engineering contributor starts asking questions about these business figures put on a face as if a dog started speaking to them instead of having answers.

It's somehow not seen as inevitable that we, in this vacuum of evidence, reach for all we have -- assumptions based on individual personal prejudice, or just whatever seems easy/fun/cool to implement.

Why should I do the effective thing when I don't get a bonus when the solution works, but I do get overtime pay (or reduced feature load in the sprint) when it fails?

Why should I do the simple thing when I could do the thing that I can put on my resumé and hope I can be a member of a team that either doesn't have a role called "Business Analyst" (because isn't that everyone's job?), or has such a role that actually performs analysis instead of just being a mouthpiece for management.

Sure, a good engineering manager will know this is what has happened, and will push for business to consider the economics of potential solutions and facilitate the decision to implement the solution with the lowest expected costs in the face of risks, but the common level of skill here, and all I've ever been privileged to work with can't process figures like these (everything is either unknown, a feeling, or - rarely - a single precise number, it is literally unthinkable to have a distribution of possible numbers or do maths on such figures), and won't notice their absence or seek them out.
Freudian Slips – Cocaine 1884
at v2.6 the product was only about 4 years old and underwent a lot of change during that time. (For comparison Postgres version 3 was released in 1991)

I think the main guilty parties at mongodb were/are in marketing.

technically sophisticated users understood the immaturity of the product and the tradeoffs that came with its architecture.

however it was sometimes marketed as a general purpose data store, or as an alternative to much more mature relational data stores, which was and still is an unfair comparison.
Using a trusted payment provider with good reputation is the solution to this quagmire... If there is one for your product of interest