skysight-inc/HackerNews huggingface dataset:
You can get around UEFI Secure Boot by installing an old signed bootloader with known exploits (if I understand correctly this is why the "Secure Golden Key Boot" exploit of last year[1] cannot be patched without changing public keys in the UEFI firmware). Not only that, the code that is shared by most UEFI implementations is garbage[2] with a large attack surface; exploits against the firmware is a possibility.

The primary function of UEFI Secure Boot is for Microsoft to prevent other operating systems from being installed on as many systems as they can get away with (right now there is no provision that end users should be allowed to disable Secure Boot on ARM devices, for example). The "security" functionality is an unworkable side-effect that provides a convenient fiction to accomplish that goal.

[1] https://www.reddit.com/r/netsec/comments/4wybax/writeup_of_s...
[2] https://www.youtube.com/watch?v=V2aq5M3Q76U
the original question was

> How is investing in the stock market not a gamble?

The companies that make stock market in aggregate make money.
Milwaukee couple suffers sticker shock after $898 Uber ride
Snapdocs | Rails Engineers & Data Scientists & Product Managers | San Francisco, CA | ONSITE | https://www.snapdocs.com

Snapdocs (YC W14, SV Angel) is an early stage, rapidly growing company looking to fill a variety of roles. (Growth, amiright?) We're a small team tackling the absolutely massive mortgage market. We're bringing modern, elegant software to a field that still relies on fax machines and manilla envelopes. We bring security, efficiency and joy to a paper-based pillar of the US economy.

The type of problems we're tackling involve workflow, product design, data, and computer vision for mortgage documents. For data, it decides everything we do. We won't start work on a new feature until we can point to the numbers we hope to move. Snapdocs' culture is one that trusts its team members to make smart decisions. This means we value both independent work as well as seeking collaboration. We're becoming ubiquitous in one segment of the market and we're looking to expand further.

Skills & Requirements Regardless of Role:

* Being the 12th member of on a fast-growing technical team (and 30th employee overall). This means helping to form a healthy and happy culture. We strive to be respectful of each other's time and point of view. We're learning how to do this together. We want to create a place where it's OK to fail, and that you know the team has your back the whole way through.

* Self-motivated. To us that means when you get an interesting problem, you will rip into it until you understand its nuances and perhaps have a glimpse of the solution.

* Empathy. We work closely with our customers, meaning phone calls, emails, and sometimes lunch. It is important in this job to listen to them so that we can build what they need and want.

Apply at https://jobs.lever.co/snapdocs
As a newbie to how diff-ing is done in production, does git use vanilla edit-distance diffing too?
The irony of this article being behind a paywall.
Credit Karma | San Francisco, Charlotte, LA | Full Time, ONSITE | https://creditkarma.com

Credit Karma's mission is to make financial progress possible for everyone. We have over 70 million US members and are a true mission-oriented business, a rare case where our incentives are aligned with our users - we succeed by helping our members attain financial progress.

We're growing very rapidly right now, and have tons of opportunities for people to solve hard problems while helping people grow their financial progress. Let's unpack that:

Opportunities: On the backend, we're transitioning to a microservice based environment based on Scala/JVM, using Twitter-born libraries such as Finagle. We're also unifying our data model into GraphQL to help bring separate but related services and verticals together. On the frontend, we're rebuilding our various components in React using modern web technologies while still keeping an emphasis on stability. We also have data teams using BigQuery and Kafka to injest and understand. We're also hiring security engineering, test engineering, machine learning engineering and basically any other position you might expect to find at an optimistically growing company. All of that combined means that whatever your technical passion, we probably have a spot for you to contribute!

Financial Progress: Honestly, this is the best part. I know working at every company has its ups and downs, but at the end of the day, being able to say "My work helps people. When they thrive, so do we." is fantastic. When our users grow financially, they start migrating to better financial products to suit their new needs, and we want to be there the whole way to guide them.

We have a lot to do, and a lot to solve, and we'd like help!
https://www.creditkarma.com/careers
I wish more people were pressuring their local representatives to vote for measures like net metering (allows residents with solar to sell excess kW to the local utility company), rebates, and tax breaks. This would go a long way in increasing solar adoption and deployment.
Isn't California/Silicon Valley really liberal? You'd think this would be one of the places who are the least sexist.
New Circular Innovation Incubator Launched by ASU and the City of Phoenix
Give me a break. First off, it's obvious that "Stop Trump" means "Help reject his odious, revanchist agenda". Secondly, just because someone was "democratically elected" (despite losing the popular vote mind you) doesn't mean you just kowtow to whatever they want to do. That's not how it works. Furthermore, he wasn't elected by a working class movement - the overwhelming majority of Trump voters were middle class Republicans
An individual star at redshift 1.5 extremely magnified by a galaxy-cluster lens
What decentralized applications will benefit from micropayments and blockchain?
What decentralized applications like bittorrent and bitcoin will benefit from micropayments and blockchain?
I'm in no way excusing any of this behavior but I do not see this is particularly an SV problem. I see this as a power corruption problem.

Men (and women) with a lot of power can get into a mindset where they think the rules don't apply to them. I don't think this is unique to SV at all. You see it with powerful politicians and powerful and/or very wealthy individuals across the private sector.

Power corrupts. One of the oldest flaws in human nature.
https://news.ycombinator.com/item?id=14688616
Talking about the problem is healthy and usually a part of a solution. Real-life sexism is definitely worse and times more scary than public attempts to fix it. Bringing more women helps, but if the culture wouldn’t change, they’ll just leave.
Pakistani Man Jailed for Hacking and Fraud of Millions Dollars
Can you provide an example of a policy decision that is (1) correct using sovereign debt analysis but (2) incorrect when using household debt analysis?
Linux 4.12 Released
Call me when its a good as Webstorm.
eero | San Francisco, CA USA | Full-Time | On-Site | https://eero.com/jobs

I'm Josh and I work on the Data team here at eero. We rely on data to inform and drive product decisions, improve network and mesh performance, set marketing strategies, enhance factory testing, provide better customer support and much more.

Our real-time data platform is critical to providing high performance, adaptive networks for our customers and actionable operational insights for the company, requiring a strong and scalable data infrastructure. We are a small company but with a large data challenge! For our data infrastructure we strive to choose technologies that build for our current and future data growth, creating a platform that makes use of technologies such as Kafka, Spark, HBase, and Parquet on AWS S3 as well as our own custom in-house low latency scalable data infrastructure.

We have a ton of open positions right now, but on the data team we're really excited about finding Sr. Data Engineers, Software Engineers with a focus on distributed data systems and infrastructure, and Data Scientists to work with our product and engineering teams.

Full Job list:
https://eero.com/jobs

Keyword soup: Machine Learning, Scala, Spark, Kafka, HBase, Python, Mesh Networks, Go, Kubernetes, Sensor Data, ETL, anomaly detection, Redshift
It was a "good" way to catch a certain class of bugs on X86, while introducing a different class of (arguably) harder to catch bugs.

With VS .NET (VC7.0), the C++ compiler no longer defaulted uninitialized memory in debug builds.

Our software didn't just run on x86 (windows/linux), but also SGI MIPS (Irix), VAX (VMS), DEC Alpha (Tru64), AND PowerPC (VxWorks), so across all those compilers, we ended up having portable and robust code.
It probably will become cheaper, since as volume goes down mines that are only marginally profitable now will close, leaving only the most efficient.
It's not going to do much for targeted attacks, but there are definitely ways to limit the damage for large-scale ransomware attacks. As it is right now, ransomware doesn't even need to bother with privilege escalation because files valuable to users are most likely owned by them. Not to say that all ransomware malware sticks to just user privileges, but it's usually enough do get the job done.

Having a sort of firewall for file systems that's enforced by the system means that in addition to getting code to run with user privileges, the malware authors need to trick the victims into giving the software root (which might be impossible on enterprise networks), or use a privilege escalation vulnerability to do that.

Of course, people could still click through prompts, allow access to all apps due to warning fatigue, etc., but it's an improvement - if done correctly.
Isn't that just a CoW filesystem?

Just use e.g. ZFS and configure it to take regular snapshots (though you may want to be careful, a few years back if a zpool got completely full things got wonky, dunno if they've fixed it, so you may want to keep some disk space outside the zpool just in case, so you can expand the zpool enough to work if it gets completely full)
Your comment is just one big ad hominem so I'm going to guess what your position is: tokens on the blockchain are great to bootstrap users. (correct me if I'm wrong)

Given my assumption, can you explain why I can't do this:

1- Have a great idea for a decentralized marketplace app (think OpenBazaar)

2- Store 21 million BazaarCoin in a MySQL database and give these coins some purpose in my app (eg. used to buy stuff)

3- Setup APIs so people can easily trade them (use public-key crypto to track ownership)

4- Make all my code open source and also provide read-only APIs so anyone anywhere can quickly audit the database of coins.

5- Have various exchanges setup USD/BazaarCoin trading pairs

6- Explain all this in a white paper and organize an initial-bazaarcoin-offering to "bootstrap the network"

Where does the blockchain fit in to add value?
Not necessarily true at all. ICOs can offer revenue pegged tokens against company future revenue - which is then used to buy back the tokens from the investors.
Dave McClure resigns as general partner of 500 Startups
"The rule of thumb" is probably the best-known example in English Common law. The rule held that it was ok for a man to beat his wife with a rod, as long as it was no thicker than his thumb.

(Edit: I'm certain that we can find examples from the legal systems of other countries and cultures, if we bother to look.)
Minted | Senior Data Engineer | San Francisco, CA | Full-time, ONSITE | https://www.minted.com/jobs?p=job%2Foenw4fwV

Minted’s mission is to enable the design independence of both consumers and artists around the world, and the company is a platform for the strongest emerging artists in the world to be seen and discovered. We aim to build a lasting brand representing the most commercially successful design community in the world.

I've been at Minted for four years and this year I've taken responsibility for data engineering at the company. I'm looking to expand my team to help us build real-time pipelines, recommendations, machine vision projects, and more. Reach out to me if you're looking to join a small team at one of the most diverse and surprisingly technical ecommerce companies in the Bay Area.

Responsibilities for the role -

* Design and implement scalable streaming data pipelines processing hundreds of millions of transactions a day

* Architect and build data warehouse providing near real-time data to a variety of client systems

* Implement robust ETL scheduling framework using open-source schedulers and tools

* Lead projects developed in collaboration with other engineers within and outside of Analytics group

* Guide other team members on best practices in Data Warehousing and coding

* Work in a dynamic, agile, startup environment managing multiple high-impact and high-visibility priorities simultaneously

Feel free to email me with questions at tj@minted.com
> Like they did with WPF and Visual Studio

Except Visual Studio isn't using anything newer than WPF yet, is it?
> but I kinda assume that typical jars do not include any bits from standard library, so modularizing standard library wouldn't have any impact on jar size.

That is correct.

> I'd imagine that the effect would be instead visible for self-contained distributions, like e.g. docker containers.

In theory. In practice you need to build a JDK contains only the bits you need. Sounds great in theory, you can get rid of the CORBA and GUI modules, that should save you a lot of disk space. In practice the CORBA module is only 2.7 MB and the desktop module is 14 MB and almost every framework indirectly requires the desktop module because Java Beans are in there.
Thanks for the summary - the slides were a little hard to follow.

In a universe that's practically if not actually infinite in size, it seems to me that no species is ever big or strong enough to be safe from a bigger, stronger one. And thus any rational species interested in self-preservation (I hope this includes us) simply MUST hide. Forever. We're not very quiet but we're also extremely harmless at a galactic scale so I imagine if I were an alien species that noticed us, I'd just leave us alone as bait to reveal any less cautious species.

Following that line of thought, I'd be much happier to believe we're simply alone. :-)
Did they cup them?
not true if the token is an asset pegged token on future revenue.
Software Engineer | Blackbaud | Austin, TX | Onsite (Relocation Available)

--

Solve hard problems that truly matter with a team that's smart, experienced, and kind. What problems? Help kids afford college by making it easier for them to find and receive scholarships.

--

The Job: You'll be writing vanilla JS, React, HTML, CSS, and wiring things to Rails on the back-end. More technical details forthcoming—read on.

The Department: We're a 4-member product engineering team within a 13-member engineering department

Technical Details: Rails, React, AWS, Postgres, Elasticsearch, Cassandra, Redis, Memcached, and some internal tooling in Go

The Interview Process: You'll talk to me (Product Engineering Manager), then our CTO, do some remote coding to chat code, come on-site and pair, meet the team, and meet a founder.

--

You're pragmatic, smart, work well with others, and take ownership of features from planning to production. Preferably, you're proficient with some of our technical stack, and you'll make the entire team better as an individual contributor, a teacher, and an occasional foil.

We take a lot of pride in accomplishing disproportionately big tasks, and to do that we treat engineers like professionals with clear expectations and regular feedback. And we're kind, respectful, and obsessed with the customer experience along the way.

--

joshua.cody@blackbaud.me
I had a friend who was obsessed with Smalltalk in college. He enjoyed showing classmates that you could do things like redefine true and false in the language.
you might expect more maturity from hn, but at least its working.
To be fair, regular currency (USD, Euro, etc.) also has zero intrinsic value, and economists like it that way. Currencies that have intrinsic value (gold, copper pennies, cigarettes) tend to get taken out of circulation as they're used for that value, which makes the money supply freeze up when the value of the currency starts rising and people start hoarding it for price appreciation.
Location: Pittsburgh, PA or remote
Remote: Preferred
Willing to relocate: Yes, to PGH
Technologies: DevOps/SRE/SysAdmin: git, ansible/puppet/chef, python, bash, centOS, RHEL; Networking: Cisco, TCP/IP, Traffic analysis, F5 load balancing; Virtualization/Cloud: VMWare, AWS, learning Docker & Kubernetes; Soft skills: Documentation, Team Leading, Requirement distillation, some Project Management; Software Dev: Python (prefer 3), Flask, BeautifulSoup; Some: JS, PHP, HTML/CSS
Résumé/CV: https://jake.achee.com/hn.html
Email: see resume.
GitHub: https://github.com/jachee

As a well-rounded and successful professional with over 18 years of progressive industry experience, I believe that my skillset makes me an excellent candidate for a development-driven engineering/infrastructure position. I'm a highly-motivated, experienced, intuitive Linux Systems Admin with a strong Networking background, solid scripting chops and DevOps/Cloud-facing sensibilities.
I'm currently looking to relocate to Pittsburgh, but I will also consider remote positions, as well.
A repository of Unix history and evolution
> Unlike roads, fixed rail is virtually guaranteed not to be where you are, or to go where you want to go.

For no reason except the political. Go to any country in Europe, and you'll find that even the shopping malls have railway sidings and not just truck loading bays.
I have UK and French accounts with the same bank. Both work fine for making payments in other EU countries. I can transfer money between them whenever I want (or spot a better exchange rate).
Can't they fine the strawberrynet blatant disregard for privacy?, It's based on the UK, you can access personal information of anyone registered in the site with only their email address and they say It's not a big deal.
The 19 sales KPIs of modern sales teams
Re. the link between more data and curing disease being weak, I'd argue that's clearly false at the very least regarding how we evaluate disease treatments.

Imagine being able to have 10x more patients for a drug effectiveness study, or being able to look at the entire patient population for adverse drug reactions/interactions. All the datasets we have for this sort of thing are currently pretty poor. Despite this, the FDA mines datasets like the Adverse Events Reports database [1] to identify drugs that are performing poorly. With better, more complete data, the FDA could far more quickly identify adverse drug interactions and drugs that are harming patients more than they are helping.

Medicine is inherently about rare events. Most of us are mostly healthy most of the time. More data by definition helps you find those rare events when someone is sick or are risk. As we start to ask more difficult questions about co-occurring events, cancer detection or genome associations, our statistical tools become powerless to find the weak signals in the data. The only real solution is vastly more data.

[1] https://www.fda.gov/drugs/guidancecomplianceregulatoryinform...
Where does he say Ethereum is valueless? He just explains that ethereum made launching a coin easier (a point you dispute) and, as a result, more crap coins are popping up.

That most alt coins are crap is, I think, common sense. Such agresssive investment into something with such limited present-day value (i.e. The PE ratio, as it were) smells off. If cryptos are like other markets, they'll need to show more short term value soon, or crash.
The main problem and is that the file open dialogue generally runs in the app's memory space, at which point we can't stop the app corrupting it in any way it likes.

I hope we are moving to a world where apps are built of seperate processes, most of which have minimal access. If nothing else, this will make many old buggy C libraries (including code I have written) much less dangerous.
What about the non native farmed plants? And the bees that aren't native are in steeper decline than native ones because they aren't farmed.
TL;DR

dd if=/dev/zero of=/dev/sdX

See also [1] for the non-scientific claim backed-by-bounty.

> It is unlikely that an individual write will be a digital +1.00000 (1). Rather -
there is a set range, a normative confidence interval that the bit will be in [15]. What this means is that there is generally a 95% likelihood that the +1 will exist in the range of (0.95, 1.05) there is then a 99% likelihood that it will exist in the range (0.90, 1.10) for instance. This leaves a negligible probability (1 bit in every 100,000 billion or so) that the actual potential will be less than 60% of the full +1 value. This error is the non-recoverable error rating for a drive using a single pass wipe

It all comes down to -- what is your threat model? Dishonest craigslist scroungers or a well-armed state? The latter just may be able to recover things you'd be astounded of, but if it's easier for them to do it with Van Eck phreaking or a subpoena to the sites you mirror with, they'll just do that.

Note that AFAICT this paper does not discuss NAND or phase-change memory or anything else. Today in 2017 the levels of indirection between you and your actual real NAND cell that you erased and programmed six months ago are significant. You might actually want to take a hammer to your SSD.

[1] http://www.hostjury.com/blog/view/195/the-great-zero-challen...
This is very similar to the stack we use at BDG Media (bustle.com, romper.com, etc) We use Amazon Lambda, GraphQL, a custom model layer with data loader and redis, and preact. We haven't seen a clear benefit from Relay or Apollo with out front end apps (tbd on our admin apps) but we have enjoyed the Relay spec to help set server side conventions.

GraphQL has helped us make an api that is easy to understand, easy to change and and easy to use. We love it.
Imposter syndrome is a problem that did not exist before media said it did. You feel like there is always more to learn because there always is.. get used to it.
We've just tried on our side, works fine. Was it still the same after refreshing?
The Case for Less Solidarity: The surprising effects of reducing empathy
You use MongoDB to handle matters in legal compliance??

I'd stay far, far away from this one.
> There's an entire discipline regarding how and when science switches paradigms, to borrow a Kuhnian word.

Thing that has nothing to do with this bill

> I think the best guard against any of this is the old Feynman test.

And this has nothing to do with this bill.

Theory of Evolution and Climate change has been explained sufficiently in laymen terms to be comprehended by anyone.

What this bill does is trying to negate the science without having anything to do if it has been tested or explained in simple terms
Let's add more people to the job market to push down the rights/value of workers and solidify the destruction of the family unit while we're at it.
Thats how I would envision working as well.

Seems like the classic tradeoff between better security and better UX.

Users would complain, and/or try to disable it.
thank you for a more thoughtful response amid the knee jerking in this thread.

I think it is likely this is the future - and there is little to no mention of "asset backed tokens" which is the core of the ICO offering, essentially buying against future revenue cheaper.
That would be great.

There's been a massive influx of badly motivated people in the last decade. It's changed the culture and the output of SV profoundly.

https://medium.com/@micah/silicon-valley-is-dead-88ed34d943d...
New studies of ancient concrete could teach us to do as the Romans did
How is two or three times a year like UAC?