skysight-inc/HackerNews huggingface dataset:
I agree. As someone who has done mathematics research, and studied on the purest end of the math spectrum, it's so aggravating to hear engineers who "took BOTH differential equations classes" explain how math should be when they clearly don't know what they're talking about.
Your comment looks pretty innocuous to me. Only thing I can think of is that it doesn't add much to the conversation. Members may have downvoted for lack of substance. Adding reasons you found it interesting, pointing out things in particular would make a good contribution to the discussion. It's speculation, but I hope it helps.
I know about Chaum, but I was off on when Cryptonomicon was written.
Democracy.com | New York, NY | CTO | Full-time | Onsite
Democracy.com is a marketplace platform designed to connect citizens with candidates, elected officials and issue organizations.

More than ever, citizens across the ideological spectrum are engaging, organizing and making their voices heard on the issues and elections that matter to them. But there’s a problem. The number one reason people give for not getting involved in an issue or election is that it’s too hard to find out what they can do that will actually make a difference.
Democracy.com solves this problem by making it incredibly easy for citizens to find the right action to take any issue or election.

We are looking for a hands-on Chief of Technology to lead the company’s technology efforts. You will define, establish, and lead all technology related activities. You will be responsible for building a top-level tech team from the ground up and for developing strong code discipline and best practices. As a C-team leader playing an integral role in the strategy and execution of the business, you will have a substantial equity position.

Existing codebase built using Node, Express, React, Relay, Redux, Flow, Elasticsearch, RethinkDB. Your call on what you want to keep and which direction you want to take the technology!

If interested, please contact jobs@democracy.com.
Become a AWS Certification from OnlineITGuru
Worked out pretty well for SpaceX.

At what point do you say "he's made so much money for us that we'll give him at least one major fuckup before we start trying to reign him in."?
I've heard good things about funding sage
'Find cheap land and exploit it' has a long if not exactly distinguished history.
Luminar Technologies | Palo Alto, CA & Orlando, FL | https://www.luminartech.com/
Our advanced LiDAR efforts just came out of stealth and we are hiring across the board for hardware (Opto, EE, FPGA, MechE, etc), software (CV/ML, robotics, simulation, core sw, data eng), vehicle integration, and manufacturing. Technically challenging and impactful work.
Apply here: https://www.luminartech.com/careers/index.html
> It seems that for network management vPro needs a compatible CPU, motherboard chipset, and a Intel ethernet controller. So in theory Macs are safe from remote exploitation?

If that's the case, that sounds to me like there is special code in the Intel NIC firmware to allow/forward/do things with these packets?
Show HN: DialogueWise – Cloud based headless CMS with programmable content
Tujia, Airbnb's Rival in China, Seeking to Raise $300M
.youtube	generic	Charleston Road Registry Inc.

Is Google OK with that?
Has anyone tried to use headless chrome to detect insecure content on what you hope is a secure page? I've only looked into it a bit, and so far failed. I'd like to know if a visitor to https://example.com/foo.html in chrome will get a warning about insecure content. I'm looking for a browser because in some cases the insecure content is loaded by javascript from a 3rd party. I don't know a way to do that besides fire it up in a browser and let it go.

Is there a way to get the secure/insecure status from headless chrome?
Since Kryptonite is available for Android phones, it's a point at least worth highlighting.

One might think that anyone savvy enough to want an app to manage his ssh private keys would also think about his phone's security. In practice, from my observation, a lot of people who have to use ssh keys don't really understand them and would not think twice about loading an app like this onto their Android phones, alongside all manner of ad-laden apps of unknown quality or provenance.

I myself use an Android phone. But I assume it's not secure.
Some people might love a place with a different sort of attitude from SF/NYC, so I point that out. Others (you?) will be horrified. They can choose a more-familiar style of place: Arlington or Austin or Maryland. We have options.
Hi HN,

This project was started 6 months back. Though there are a few minor things to be ironed out, it’s in a pretty good shape.

Highly appreciate your feedback and suggestions. Thanks in advance.
I think it is the 'rock and roll' narcissism that is making your skin cringe so painfully! Traits include:

Grandiosity with expectations of superior treatment from others

Fixated on fantasies of power, success, intelligence, attractiveness, etc.

Self-perception of being unique, superior and associated with high-status people and institutions

Needing constant admiration from others

Sense of entitlement to special treatment and to obedience from others

Exploitative of others to achieve personal gain

Unwilling to empathize with others' feelings, wishes, or needs

Intensely envious of others and the belief that others are equally envious of them

Signs and symptoms - https://en.wikipedia.org/wiki/Narcissistic_personality_disor...

The same personality defect leads to monumental fails, so people on the project only concern themselves with what they have been hired for, so if you are a writer (e.g.) and hired to be some influencer/journalist then you care about your ego as writer and not care about whether the event is going to be a viable financial concern. So the whole thing suits the build someone up and then discard way these people work.
Theranos reaches settlement with investor Partner Fund Management
it could be that the job needs a security clearance, which effectively makes citizenship a requirement
You can think much faster than you can express yourself. You can express yourself much faster than most people can understand you. You can only have a back and forth communication with a tiny number of people at once.
While I don't doubt that they'll tell you that that was a scaling decision, it actually has more to do with an architectural decision that proved to be difficult to overcome once it's flaw became apparent.

They operated warehouses using a monolithic oracle database, one for each FC. They had hundreds of different services using the same database. Whenever one service wanted to do something new, they had to spend a massive amount of time running their proposed database change past every team on the database. I've seen a single column addition take 9 months and hundreds of engineer hours to get approved.

So once the warehouses got really big, sharding was the obvious answer but they couldn't make sharding work because they couldn't coordinate their way out of their mess they created. They couldn't scale because they engineered themselves into a corner that made it impossible to use normal best practices for scaling SQL databases.

NoSQL has an interesting lack of a feature that solves their problem. Because theyre not relational, they don't really work very well sharing data across services and teams, so they don't get into major coordination tangles on shared databases. Maybe that works for them, but it's more of an indictment of their engineering culture than it is a slight on SQL databases. And it's pretty punitive in a TSA kind of way: We fucked up once so none of you can have nice things anymore.
For example, right now there are 7 jobs displayed in Martinez, CA on the map, but which are really in Mountain View, CA.
This is not accurate, all (modern) AMD processors can work with both ECC and non-ECC ram, and ECC and non-ECC can even fit into the same ram sockets (the keying is different however, but a board can be compatible with both)
The sad thing with that is that

- releasing the source doesn't tell you what's on the chip.

- PSP is kind of "Ring ∞", so there would be no good outcome from providing general-purpose access to it. So, the keys will never be released.

- it's thusly not possible to map the signed (encrypted) firmware to the source.

- even if the source had a clearly documented "master off" in it, you can never know if the firmware's copy reads "master-except-if-A-and-B-say-C off" :(
I wonder if it would be worth modifying state extortion laws to cover this.
> If the OS and apps you needed to run required 4MB RAM, then you really should have at least 4MB RAM. [...] Set your VM page size to only 1MB more than your physical memory size.

ahhh... I'm fond the days from when you could run whole applications in all of 4MiB -- GUIs included.
As far as I understand it, the purpose of bitsig.io is to put any arbitrary text into the blockchain. This makes the statement trivially true, akin to saying that any tweet can be turned into an architecture-related topic by spray-painting it onto the side of a building.
Papertrail (Solarwinds) | Lead Site Reliability Engineer (SRE) | San Francisco | ONSITE

http://bit.ly/2krNaNm
For more information, email dmangot[at]librato[dot]com with the subject line [Hacker News Papertrail Ops]

If your idea of fun is ingesting terabytes and terabytes of data 24 hours a day, then we've got the job for you. Papertrail is looking for a lead SRE to help build, improve, and manage our high performance stream processing pipeline. This is truly one of those jobs where you and your developers/ops friends can use the tool you operate every single day.

The Papertrail stack is currently largely Ruby, Java, Scala, and MySQL. Lots and lots of MySQL. This is your opportunity to come in and lead a small SRE team at a company that is growing every month. Plus, with the backing of SolarWinds behind it, there are no worries about running out of VC funding, or where the next round is coming from. We're a small distributed team where everyone writes code, operating an existing successful business and we're looking for the next piece of the puzzle to collaborate in taking our SRE practices to the next level.

If this sounds interesting to you, we'd love to open up a conversation about whether we're a good match, setup some interviews and a coding test. You can find the contact info above.

About the company:
Papertrail manages billions of log messages for operations-savvy companies. Papertrail provides time-saving log tools, flexible system groups, team-wide access, long-term archives, charts and analytics exports, monitoring webhooks, and 45-second setup. It's all your logs in one place, and it "just works". Papertrail is a wholly owned subsidiary of SolarWinds, Inc.
Based on the locations + description I suspect this is for Military/IC-related jobs. Those tend to require citizenship...
"France’s prestigious “Grandes Écoles” — not H.B.S. — appear to have generated a disproportionate number of the financial engineers who unwittingly helped cause the crisis.)".
Wow... just wow.
I don't know about 64-bit but people in prior HN discussions said you can download a free one off their web site. You should be able to extrapolate some things from that.

EDIT: https://kx.com/download/
What about 4: research institute that invents an audio compression method? The work that goes into mp3 isn't just coding the method.
Did this a few months ago, somewhat straightforward. A "generic" recipe for any UNIX-based OS would be:

1 - Create a container (Docker, Jails, maybe even chroot)

2 - Assign an ip to the container, NAT to it

3 - Install firefox on that container

4 - Run a SSHD server, enable X11 forwarding

5 - Mount the relevant container's folders to your root fs (eg: map $CONTAINER/.mozzila and $CONTAINER/Downloads to $HOME/jailed-browser/)

6 - Add an ssh config for quick alias

7 - Run `ssh container firefox` and profit

Here's a nice example using FreeBSD jails (I remember following this tutorial, everything worked out fine):
https://forums.freebsd.org/threads/53362/

My experience with it, though, wasn't great. X11 forwarding through SSH was quite laggy (even after performing some optimizations on the connection). Good luck if you want to set-up audio/mic support. It's a nice solution for a one-time banking login, not for day-to-day use.
Retail POS could be bad news, but it got me to thinking of all the other possibilities too. Could be disastrous, and I wonder who would wear the egg on the face, Intel or the NSA :) Or no-one is my guess, too big to fail!
The Upper West Side: The Latest Battleground for School Integration in New York
This is all speculation of course, and if anybody actually knows that would be awesome. I think it is totally believable and reasonable that Intel would have exclusivity clauses in their contracts with the "big 3" cloud providers.
> which probably means it's possible to use a malformed filesystem to get arbitrary code execution in the kernel.

I'll concede that there are some older vulns allowing that, but if you meant for a reasonably up-to-date Linux or Win7+ system: reference needed.
There's a comma missing after "No" in the title, and it's driving me insane.
That's not at all what the board's block diagram [0] depicts, but apparently they don't care to make that accurate. While the photographs do make it clear that there are three Ethernet ports, it's wrong to say that there are three Ethernet interfaces; the SoC only supports two and it's misleading to count the extra switched ports as extra interfaces because they do not even have the theoretical possibility of contributing to better routing capabilities.

[0] http://espressobin.net/wp-content/uploads/2017/01/ESPRESSObi...
Nope. We qualify for an exemption and in fact are required to require citizenship. You can "file a charge" and have about the same luck you'd get over being declined a job working on orbital rockets, stealth fighters, nukes, submarine propellers, etc.

Even HN darling SpaceX requires US citizenship.

The fact that the USA has a law which ensures easy foreign access to American trade secrets is... exactly backwards. In any case, it doesn't apply.
The Handmaid’s Tale Is the Most Horrific Thing I Have Ever Seen
I bet walking helped humans solve problems long before distracting gadgets existed.
Say in a trial an expert witness is called -- based on the data, was this fire intentionally set or an accident? That expert might be a poor one, but the other side has the chance to cross examine and expose that expert as being unreliable.

In the case of this software, though, there is no cross examination. Say the secret sauce is simply a data set and Bayesian reasoning. How do we know if the data set is representative? If it is just an opaque box, that is unacceptable.
> Most people only [...] deal with SQL on a very shallow level and
> barely regard it as programming at all.

Fixed that for you.

And now the sentence states why there are so many problems in the world (of software).

;)
They don't have to use your agent to authenticate again. They just feed commands to your SSH client binary that it then sends over the wire in your existing SSH session-context, with the SSH pty temporarily set to not echo input and discard output (or return it over the network to the attacker, but not render it in the local PTY character-buffer.) A hijacked SSH binary can even detect an elevation-requiring command you provided in the terminal and wrap it in a "sudo -c" along with a payload, such that the whole thing happens as one elevated "transaction", only hitting your agent once.

Happily, this won't work if you only ever use SSH with a non-shell command, e.g. as a fancy encrypted netcat(1).
Bitsig.io doesn't put arbitrary text into the blockchain. Given a string, if a Bitcoin address exists with sha256(string) as its private key, bitsig.io will publish the string, address, and first time the address was used. It also has tools for facilitating transactions to such addresses (which should never be used to store money). Hence stuff like this[0] from before bitsig.io existed.

0. https://bitsig.io/?addr=1AJ3vE2NNYW2Jzv3fLwyjKF1LYbZ65Ez64
Right, but Melbourne isn't anything like Miami.
Jet | UX/UI DESIGNER | ON-SITE | NYC (Hoboken, NJ) | Contract | http://www.jet.com

UX/UI designer - Customer experience team:

1-2 years experience with e-commerce website or mobile applications. Must be familiar with Sketch, Principle, Zeplin, Adobe suite.

Great team and atmosphere, you can learn more about the culture here: http://www.jet.com/careers

Send portfolio and resume to Nicholas.braver@jet.com
We Asked 170 Cyber Security Pros About Ransomeware.  What They Had to Say
You can contact the mods via the Contact link in the footer. They can update the title if a correction is needed.
This movie was a classic, but the way it wove tangential topics like Cold War tactics, and Game Theory in to make a substantial story blows my mind even today...

This movie was the first inkling that I can remember as a kid that I needed to put time into nonlinear games and their associated thought processes. Poker, Role-Playing Games, Wargames, etc... Anything and everything that "upped the ante" when it came to strategy, complexity, realism, and paradigm modeling became more interesting to me as time moved on, and it more or less started about the time I first saw this film.

It's amazing to me how well it stands up even after all these years.
For 10k Subs I'll Moon My Ass to the World
FWIW, I never had that issue with my NEO on OSX/macOS. I was using my NEO for git signing, SSH, as well as U2F.
As much as this isn't for me (it was during the celeron 300a era), I really appreciate the detailed writeup and specific workflow example benchmarking.
Much of the world is still using C and C++, where every piece of memory has ownership and lifetime.

Yes, they don't enforce you to properly specify and transfer ownership semantics at compile time with the borrow checker (although you can enforce some of these things with modern C++), but the cognitive overhead is there. And if you make a mistake you don't get a scary compiler error - you just get a hard to find memory leak, an even harder to find data race or a gaping security hole.

Even Go (which usually touted as the perfect alternative to Rust in these conversation), has a lot of cognitive overhead related to ownership. Every time you take a byte slice and pass that forward to another function, you have to know whether that function appends to that slice, in which case your original slice will get overwritten. Case in point:

arr := []byte("Hello World")
b1 := arr[:6]
b2 := append(b1, 'Z')
fmt.Println(string(b2))
fmt.Println(string(arr))

https://play.golang.org/p/QIN5SAIL5M

Many byte manipulation functions in the go std library and ecosystem have append semantics, for instance: https://godoc.org/regexp#Regexp.Expand

Better yet, Go often makes it very hard to notice whether you're copying values or just assigning a reference. On the other hand, some languages like Java don't even let you copy values reliably without special support in the class and in the same time highly encourage doing everything with stateful mutable objects. You can't just go and pass all these neat POJOs and beans around to functions modifying their state if they get used around somewhere else, right? This is exactly what all these rust borrow checker warning are all about!

The only language I can think of which is completely devoid of ownership semantics overhead is Haskell. Everything is immutable, look ma no side effects! So if this is really the only benchmark for productivity, Haskell is the most productive language ever.
I don't doubt that in an organization of thousands of salespeople, some say bad things. But they don't have the ability to act on their threats. That's the point. Salespeople have no ability to influence reviews.

Also, again...nobody offers evidence of these conversations. It's all hearsay. Lots of accusations, but not so much as a link to a profile page to back them up.
Simply Wall St | React developer, UI/UX Developer, PHP Backend, Product Designer, Growth developer | Sydney, Australia | ONSITE, FULL-TIME | https://simplywall.st/

We're a VC backed financial tech company based in Sydney with users all over the world. We help average people become better investors by representing complex public company financial data in a visually appealing and intuitive way. As such we're aggressively hiring the most talented developers and designers to accelerate the platform.

Our mission is to transform the boring and daunting world of investing into an easy, affordable and accessible experience for all with our unique infographics and analysis. So far we have more than 110,000 registered users and are revenue generating through a subscription based monetisation model.

You can find out about our open roles here: https://simplywall.st/careers

We only accept applications for techinical roles via our API, you can find out more by clicking on one of the roles.
The real question is how long until someone kickstarts a fyrefest gone right.
Show HN: Parsing the Entire JDK to TypeScript Definitions
True! Basically 2x the cores Intel will sell you, at the same price. IPC is "only" at broadwell levels but that's still pretty solid.
I think you are confusing the issues. TFA is about the license fees paid to Fraunhofer for the MP3 codec, for which they owned the underlying and now-expired patents.

MP3 is not an encrypted codec, the format itself is quite open and doesn't place any real restrictions on redistributing music -- in fact, most of the original music sharing sites like Napster traded exclusively in MP3. The use of MP3 has no bearing on copyright or music piracy.

The real issue is that software developers had to pay a royalty to Fraunhofer to distribute copies of MP3 players or encoders. That made it impossible to incorporate MP3 into a free (as in speech) OS like GNU/Linux.
I think you're being a bit unfair here.

1. A lot of Intel consumer platforms (which Ryzen is) had early issues with DDR4 on Z170; there's lots of forum posts about that.

2. AMD said it was not going to be validating ECC for consumer processors.

3. Haswell-E you're referencing officially only supports up to DDR4 2133Mhz memory. Depending on your configuration Ryzen officially supports more (2666, 4000)

4. You're comparing a $1200 chip to $500 chip at retail.

5. You're comparing the TDP on processor running at 1 to 1.5GHz more.

6. ES samples tend to run at lower clock speed then official final processors with hopefully lower temperature as well.

This just isn't remotely an apples to apples comparison. I'm curious what the comparison will look like once there's HPED AM4 chips.

On the flip side I personally would not trust a ES chip personally. The chips are know to contain unfixed errata addressed in further versions of the silicone and a lot of motherboard do not contain microcode updates for those.
How bad is that? If I'm actively using one program, and that program is waiting on a page from disk, what useful thing can you do in the meantime?
> Cooling $100 Cooler Master MasterLiquid Pro 280

99% of programmers don't need a machine with liquid cooling. Even if they are targeting high performance hardware, development work can be run from a more modest machine.