skysight-inc/HackerNews huggingface dataset:
And that's a good part of the reasons I'm categorically against any 'rider' computers next to the one that I control. It's hard enough to keep a regular system secure, if you have to factor in ghost computers that are effectively running with a privilege level above your local root then the situation becomes untenable. Intel really should allow for a simple way to turn off all this bull-shit without any way for it to be remotely re-enabled. And without any crippling effects on clock frequency or power management or networking.

Otherwise we don't really own our computers.
That sounds more like a flawed phone.
hi @arwineap, you are right in saying that Clarity is using chrome webdriver + xvfb. That's for the css regression testing, which we haven't looked into moving to use headless Chrome. We've switched our unit tests to use the headless Chrome: https://github.com/vmware/clarity/blob/master/build/karma.co...
I don't know whether to be happy or sad that Umberto Eco didn't live to see that.
Yup!

http://invisiblethingslab.com/resources/bh09usa/Ring%20-3%20...
Nectar financials | Backend-Engineer, Devops | Altendorf, Switzerland | Salary: 90k-120k CHF | Remote or onsite

Based on NodeJS and Angular we are building a CRM system for wealth management companies. The product is rather young and the codebase small. Remote work is okay. We have employees in Switzerland, the US and Slovenia.

Our hiring process:

1) Resume / code-check

2) Phone call (getting to know each other, technical interview)

3) Onsite (half a day)

Send a mail with a short intro about yourself (video or written) OR a Github-link OR a resume to:

hiring+hn@nectar-financials.tech
LuaJIT is such an amazing piece of software - apparently to such an extent that only Mike Pall fully understands some of its internals. Besides being much faster than the official Lua VM, it offers extended features like the FFI library [1].

Kong[2] uses it extensively, by leveraging the underlying OpenResty[3] framework.

[1] http://luajit.org/ext_ffi.html

[2] https://github.com/Mashape/kong

[3] https://github.com/openresty/lua-nginx-module
I think he had a reasonable point, though.

If you predict that X will happen, and it eventually does, then sure, you were right about that. But if you take an action that will cause you to profit if X happens within 5 years and to lose money otherwise, you're effectively predicting that X will happen within 5 years. If X happens after 10 years, then to say that you were right, just too early, is misleading: in fact you were right that X would happen, but wrong about when it would happen, and you chose to bet on both of those things.

Maybe this is a bit pedantic, but surely it's at least correct.
From the Intel advisory:

> There is an escalation of privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain control of the manageability features provided by these products. This vulnerability does not exist on Intel-based consumer PCs.

If in doubt, you can check your CPUs here:

https://ark.intel.com/#@Processors
I agree, it's hard to split squat and deadlifts in terms of how good they are. Do them both! And yes, overhead press is fantastic - it's a great way of engaging the whole body too. I need to be doing chin ups more, however just a bit too fat to do them in numbers; have just been hanging off the bar to stretch my spine out.
Were you lifting too heavy for your form? It happened to me, see my other reply just above. Nothing technically wrong with my lift, I believe, except it was too heavy for my overall strength. That lead to eating the humble pie for me.
Pepsi Gravitational Field (2008) [pdf]
Hey there, my company already solves the "known vulnerabilities" problem and lets you either "accept" the vulnerability or patch it.

I'd love to get your feedback on our product and how you'd imagine an integration with other features you described.

Can we DM on Twitter? (@maximeae)
Decoding and encoding are separately licensed, right?
PharmGKB.org @ Stanford University | Software Developer, Web Developer | Stanford, CA | ONSITE | Fulltime | https://www.pharmgkb.org/

Come help advance science and medicine!

PharmGKB.org is a leader in the field of pharmacogenomics and precision medicine. We combine our curators’ scientific expertise with our developers’ coding expertise to catalog and deliver valuable knowledge to our users and collaborators. Our coders gather data from many sources and deliver knowledge to our users via web applications, REST APIs, and desktop applications.

Applicants are not required to have biological or medical background. The best applicants will have a clear and working understanding of how to build modern web sites and services while taking the lead on projects in a small team of other developers. A good candidate will be comfortable working with server-side code like Java & Python and web frameworks like Reactjs, Ampersandjs, and all sorts of other ES6 modules.

Since we are part of academia our work/life balance is excellent. Plus, we are housed right on the beautiful new Stanford Engineering Quad. We are a small team so you could have a big impact in this very exciting field.

We are working on posting the positions to our job portal so if you're interested just drop us a line at feedback@pharmgkb.org and we'll make sure you get more information from us.
There should be a category for analogy based languages. Rail or the Billiard Ball Machine, which looks like Feynman diagrams on a pool table, are examples of this.

https://esolangs.org/wiki/Rail
https://esolangs.org/wiki/Billiard_ball_machine
>Revenue in the business rose 5 percent to $391 million, but came in below analysts' average estimate of $442.1 million, according to financial data and analytics firm FactSet.

It is a mad world in which "not enough profit" equates to failure. They made a profit, gained market share, started something new. Still, hedge fund managers and investors are selling their shares.

People want to make money for its own sake, no matter what gets exploited. Being a middle performer is no longer acceptable, but no one seems to stop and think WHY.

In just 20 years they will be spending their money on canned fresh air. There is a moral in that somewhere.
I agree. All of this may appear incredibly douchy, but they had a viable business model. Now that they are most certainly finished, there should be plenty of opportunity for someone else to totally steal the idea. Hopefully not someone as incompetent and lazy.
Well, that's the problem isn't it? All you have are confirmation and survivor biases to work with. You're going to get a lousy outcome.

Someone with far more practical experience than you might sound paranoid about some things you don't even think about, and blasé about others (because they have ways to mitigate the problem if it actually happens). You won't know enough to realize why they aren't on board with your priorities, and you will make conclusions that have no basis in reality.

You've only known this person for 45 minutes. You've known yourself for decades. Which one are you going to assume is the idiot in this situation? How often are you going to be wrong? And how would you ever know if you were wrong? You just kicked this person out of your life because you didn't like their answer. If they become lead developer at your biggest competitor, are you even going to remember their name?
Easier path: https://ark.intel.com/#@Processors

When I've purchased VirtualBox hosts, I've deliberately avoided stuff with vPro.
I would like to see a deep analysis of it written by the Timecube guy.
For a moment I thought I saw "Angel List" and I thought: IAC? What the...
The Difference Between BDD and TDD Testing Methodologies
Jovio | Sr. Software Engineer | Austin, TX | ONSITE | FULLTIME | Jovio.com

Jovio is a new real estate company on a mission to build a platform to modernize the way homes are sold. Using an interactive AI-driven interface, an innovative home valuation model and a library of refreshingly simple forms, we're redefining homeownership and inventing a few words along the way.

We’re looking for a Full Stack Software Engineer, one of the first to join the Jovio engineering team in Austin, TX. As a necessarily impactful contributor to the successful launch of the MVP, ideal candidates will have at least a few years’ professional experience developing responsive, end-to-end web applications with Ruby on Rails, using a relational database like MySQL or PostgreSQL, and exposure to front-end JavaScript web technology like React (what we’re using). We integrate with various RESTful APIs and plan to augment our data with bulk data delivery from industry partners.

You’ll collaborate with the founding CEO, our Technical Lead, and an accomplished technical advisor with 30+ years’ experience. We have been working with a software development firm to build out the MVP (they’ve done this for other successful venture-backed US companies), and you will collaborate with them as we transition ownership of the code to you and the in-house team in Austin.

In sum, this is a unique opportunity to join an early stage, well-funded tech-centric company and learn a massive amount while accelerating your career in a high-stakes industry where you are directly participating in ensuring the rewards outweigh the risks.

Contact: devin@jovio.com
Software patents aren't particularly useful for making money with software. Hackers produce code, which is protected by copyright, and that's how the law protects them from having their work stolen. Patents are a bad match for software, and are mainly used for two things:

1. Trolls use them to seek rent from independent creations.

2. Companies that are not purely trolls but need a vector to attack another company sometimes use them in the same way trolls do.

3. Entities that actually make software use them as a deterrent against patent claims.

Nobody actually depends on them for the profitability of software they've made, and nobody actually benefits from the disclosures in expired patents. Software patents are purely weapons. The hypothetical genius you're talking about would not be harmed at all if they went away, and would be better off because they'd be spared the vicissitudes of patent trolls' attention.
Gevent is just a little too good at what it does; the fact that it's performant and lightweight and easy to pick up and start moving on but still scales well... just makes it hard for asyncio to disrupt, especially when greenlets beat them to the table by a pretty huge margin.
They're probably referring to which chipset is on the motherboard. AMT is not supposed to be enabled on Z series chipsets but is on Q series, for example. But even on a Z chipset board, you still have Intel Management Engine (ME) firmware.
Ah, saw your note after making the same exact comment here on HN.
I quit reading at "because nest."
Cicada – Decentralized Application and Direct Democracy Platform
LuaJIT powers OpenResty[1] which powers my web framework Lapis[2] which powers my company itch.io[3]! (wow that's a mouthful)

Anyway, it's a stack I'm really happy to be using. Asynchronous IO without any code nesting. I wrote more about the benefits here: http://leafo.net/posts/itchio-and-coroutines.html

[1] https://openresty.org/en/

[2] http://leafo.net/lapis/

[3] https://itch.io/

I also made web server infrastructure for the Lua package manager LuaRocks in the same stack: https://luarocks.org Source is on github: https://github.com/luarocks/luarocks-site

Lua (especially with LuaJIT) is a great choice for web development.
Not an app, but a browser extension that adds an anonymous posting board to your facebook news feed. Currently debating on weather to make it local (you only see posts from people in your immediate friend group) or to keep it global (anyone with the plugin can see all the posts). Check it out my early version at http://switchfeed.net
Unfortunately, Security Advisories are formatted according to the Vendor wills and needs.

Some vendors give you a lot a details, some are very obscure.

There is a need for a "standard" Security Advisory, on the same base that there is a "standard" emerging from Responsible Disclosure.
Can't we take winamp's initial release from April 21, 1997, add 1 year for late filing, and say anything it did is unencumbered by April 21, 2017? (Let's ignore patents filed before June 8, 1995 and issued later, since we're approaching the end of those, I hope)
The "How I Built This" is an incredibly well done podcast. I know this is a little off topic but it's likely a podcast many at HN would find interesting as it's about how entrepreneurs built their businesses.

I highly recommend!
TIL! I just saw "Laurelai is an independent journalist"
Paraprodoskian
Ok, so you're Intel, and your business customers say they'd like to remotely fix their workstations via IPKVM and other stuff so they don't need to dispatch a tech each time someone wedges their laptop.

Someone suggests adding AMT to certain chips then charging to enable it. You say that's evil. Why and what's your suggestion?

With the details released so far, this isn't remotely exploitable unless your company set the feature up. And if Intel didn't provide this feature, you'd get it from the OEM just like Dell's DRAC or HP iLO.
... Exactly my point?
It's common in the datacenter to come across motherboards with a switched eth0, with the BMC behind one leg and the user system behind another. You don't have to get that creative to get IPMI out of a machine when the OS is hosed -- to be honest, I think that is what you're actually thinking of, because "hook[ing] in on ring 0" is difficult to imagine working. You'd need driver awareness for when the management plane wants to transmit, at the least.
This is slightly misleading considering async funcions are just simply generators and nothing but parsing the keywords is actually implemented in the interpreter. The whole logic is in the asyncio library.

This is a great talk where the presenter goes into how asyncio works in detail and builds a mini version of the asyncio library:

https://youtu.be/M-UcUs7IMIM
I am a full-stack Python developer with 3.5 years experience, looking for full-time work either remotely or in Utah, USA (MDT). I have excellent written and verbal communication skill and enjoy interacting directly and professionally with clients. I have a mind for design and have been trusted to make user interface and experience decisions for products I have worked on. I would love to discuss any open positions or contracts with you.

Thanks!

My Information:

Location: Utah, United States

Remote: Yes

Willing to relocate: Only in Utah, USA.

Technologies: Python, Django, Vue.js, JavaScript, AWS, Git (+Hub/Lab), OSX, Ubuntu, Vagrant

Résumé/CV: https://ridley.xyz/resume.pdf

Email: hello@ridley.xyz
I guess its like 2 factor authentication - I can let a friend use my computer & not worry about them SSHing in to my server. Or I could just create a 2nd account on the computer instead of using Kryptonite (easier in my opinion).

I also have to wonder what kinds of backdoor access the NSA has to my phone.
Airbnb, HomeAway settle SF suit, agree to register all local hosts
Hey HN! I'm an Android engineer on the mobile growth team and we're looking to grow our team with another Android engineer (the second role called out above). Right now there are 4 of us on Android (5 on iOS), working on a variety of projects related to sharing, referrals, push notifications, onboarding, login, signup, internationalization, and more! There's two key things I love about the growth team - First, the ability to experiment on any idea I think might improve our product, and second, the ability to collaborate widely across the company on my projects. Even as a new grad new hire (~9 months on the job and right out of college), I was able to go from proposing an idea, formulating a hypothesis and test plan, to then rolling out the change because I was able to prove out the value with experimentation. And across the different things I've worked on I've gotten to work with our messaging team, trust team, trips team, and search team, to name a few. If you like driving your own projects, and collaborating with incredibly smart people, I want you on my team now!

If you've got any further specific questions about this position or Airbnb generally, feel free to email me (check my profile)!
SEEKING WORK - Remote

Willing to relocate: No

I have a fair amount of free time each week that I could take on freelance work or part-time work. I've been doing full-stack work for the past 6 years, with Python and Django on the back-end and HTML, CSS, JavaScript, and jQuery on the front-end. I've also worked with the Django REST Framework and React.js. I'm intimately familiar with schema and data migrations, including migrations between Django projects. I've worked extensively with startups and with distributed teams and am open to occasional travel.

Résumé: https://drive.google.com/file/d/0B8b4x4qzEFAOS0FFb1NhcDBOVkE....

Technologies: JavaScript, React, Python, Django, Django REST Framework, migrations

Email: dustan.bower at gmail
Ah! Great - thank you. Overall, I am amazed at the simplicity of managing keys using this platform.
Python, Go and Ruby do not have the ability to run multiple real OS threads that can run on separate cores and share process memory at the same time.

They might try to work around that, but they will never be able to run one common task to/from many sockets on all cores of one machine at the same time.
Location: Virginia

Remote: Yes

Willing to relocate: No

I have a fair amount of free time each week that I could take on freelance work or part-time work. I've been doing full-stack work for the past 6 years, with Python and Django on the back-end and HTML, CSS, JavaScript, and jQuery on the front-end. I've also worked with the Django REST Framework and React.js. I'm intimately familiar with schema and data migrations, including migrations between Django projects. I've worked extensively with startups and with distributed teams and am open to occasional travel.

Résumé: https://drive.google.com/file/d/0B8b4x4qzEFAOS0FFb1NhcDBOVkE....

Technologies: JavaScript, React, Python, Django, Django REST Framework, migrations

Email: dustan.bower at gmail
Well, LuaJIT will also JIT compile Lua code operating on C structures - so speed could be another big argument.
Hahahah, brilliant! :D
ParaSail[0] is another implicitly parallel language. It has similar goals to Rust and Spark Ada.

[0] https://forge.open-do.org/plugins/moinmoin/parasail/
Do what Whatsapp did, free for the first year, then something really really low, but covers the cost of servers and headcount. Done right, this is probably around 0.50-1 a month for a really high quality service.
Fully homomorphic encryption is also turing complete. Yet it's not possible to understand what such an algorithm is doing by design.
For some extra dependently typed fun, check out ATS and Dafny.

ATS is aimed at system programming, and if you think Idris has a steep learning curve, you'll need belaying for ATS. And, the language is horrible. But it's really mind expanding to see it in action.

Dafny is a really basic language with support for Hoare/Dijkstra verification. It's completely unlike the type system model.
Some terms are useful if they're unique. Which is easier to remember: a uniquely named directory called `Cellar/`? or another `bin/` somewhere in the filesystem?
The docs are pretty. What do you use to generate e.g. https://howl.io/doc/spec/interact_spec.html ?
Ford GT40 reborn
I'm just a small one man operation but since I've been doing this, for about 20 years now, I have always put account ownership of 3rd party services in the client's name and informed them of any updates that needed to be made to that info while I managed those accounts.

The idea behind it is they can fire me anytime they want and not have to worry about me hijacking their data.

As part of this I direct the billing for all 3rd party services to them from the very start. When clients have decided to move on I give them everything they need and ask for, even if they owe me money.

I work with whomever they are using to make it easy for them and try to be as helpful as possible. I won't do their job for them but I will provide with what they need if I have it.

As far as code I write for them, that is owned by those who pay me to write it. Again, I make that clear from the start. Personally, I think it's highly unethical to do otherwise.

If you're offering your software as a service that's a different issue but when you're creating custom apps just for them you need to make it so they can continue on if you get hit by a bus and can't continue on.

I have changed how I create apps over the years to make it easier for clients to move away from me when they want. I have some that have been with me for over 15 years now. Some that have left and come back, and some that never looked back. But none will say I hindered them when they left. They will all say I helped them with whatever they needed and made it as easy as possible.

From a legal standpoint I want to be on solid ground from the beginning. I don't want any client to be able to say I hindered their ability to do business, and none ever has.
Either invent some non-intrusive advertising method or go after CPM. Paying for the social network in 90% will fail in the current environment. If you want some free counselling from marketing veteran, hit me up.
> async funcions are just simply generators and nothing but parsing the keywords is actually implemented in the interpreter.

As I understand it, async functions have an extra flag that ordinary generators don't have, and the interpreter does some different things if that flag is present. But I have not dug deeply into the source code.
True, although perhaps worth noting that the Mac II was developed in secret because its developers knew Jobs would hate it, and indeed Jobs hated its "unnecessary" and supposedly user-unfriendly expansion ports. It ended up being released only after Jobs was fired from Apple.
White paper:
https://github.com/the-laughing-monkey/cicada-platform/blob/...
Cyptyn plynyt here.
> The short average life expectancy of primitive humans is entirely an artifact of high childhood mortality

I am aware of this, but not sure why you think this negates the fact that life expectancy has increased. I would much prefer a drastically higher chance of living passed childhood. And if I somehow managed to live long enough to have children, I'd prefer that my children don't all die at birth, along with their mother. These desires have only been made possible in the last century or two
We're waiting for the manifestation of all manufacturers and cloud service providers, which is equally important at this moment.