skysight-inc/HackerNews huggingface dataset:
Very cool writeup.

Also thanks for the reminder of how awesome my life is now that I'm out from under capital A Agile.
Serious question: Could a user of such a device, wear some sort of protective hat for situations like this? Since you can't really fully predict where interference can occur, and otherwise avoiding it could cause you not to be able to have anything resembling a normal life.
I would unfollow an artist that was reposting too much.
That must've been an interesting calculation. Now they're paying dozens of employees that literally aren't able to work three months worth of salary.
Ask for a sabbatical.

Take a month (or better yet, three). It will benefit both you and the company. Discuss options here, and whether or not it's paid (or paid partially).

It's a hard ask and a really hard conversation to start, but it sounds like you need the time.
Government == Initiation of Force, or threat of same.

So yeah, I'd say that historically, many (albeit not all) hackers have felt like we can do better than a system built on force/violence.

The problem is, too many people assume that seeking such a model rules out any kind of collective / communal action or coordination. That's just a strawman though. People can, and do, collaborate on a voluntary basis all the time. What is needed is to encourage and facilitate more of that, not seek more application of Ultimate State powers.

And I would think that somebody who considers themselves a hacker would look at a problem like that and think "Yeah, let's get too it and find a way to do this", not think "meh, let's just put up some huge State apparatus and call it good".
Yes, the real security hole was 'operations' not sufficiently validating credentials and being a proper gatekeeper.
Depends on the company. I've been at places that separates them and places that don't. Before our acquisition we had 20 PTO and 10 sick days and after the acquisition we are at 25 PTO days with sick time included in that. My previous employer had unlimited sick time that was completely separate from PTO.
The article explains, albeit it's maybe not very obvious if you aren't acquanited with metrology.

> So in 2014, at the quadrennial General Conference on Weights and Measures (yep, that's a thing), the scientific community resolved to redefine the kilogram based on Planck's constant, a value from quantum mechanics that describes the packets energy comes in. If physicists could get a good enough measure of Planck's constant, the committee would calculate a kilogram from that value.

> “But it's a very difficult constant to measure,” Pratt said. He would know: He and his colleagues at NIST have spent much of the past few years trying to come up with a number accurate and precise enough to please the finicky physics community.

Basically, it was hard to measure Planck's constant precisely enough to be as precise as the old standard. For compatibility reasons, the way this usually works is that they will measure Planck's constant and then define the kilogram so that `(k * Planck's constant) = (old mass of the kilogram)`, where `k` is whatever constant that makes this work out. To do this properly, you need to be able to measure Planck's constant with the same level of precision (and accuracy) as the old mass of the kilogram was known. Apparently this wasn't easy, presumably because Planck's constant is very small.
It's also possible that while dave is great, your team doesn't need a dave regardless of how good he is.
There's a difference-- point-to-point encryption is what you're talking about. Anytime a message is transferred, it's done via TLS, but you can't be guaranteed that at any one point the message is kept encrypted. You can have this today -- just about any MTA has a configuration to only allow TLS connections, and then you can set up an IMAP server to only allow encrypted connections.

End-to-end encryption is the system whereby the moment the message leaves the sender's hands (phone, desktop, whatever) it's encrypted until it gets into the receiver's hands. This is your OpenPGP/etc. You could think of that as "Signal for email". This is apparently not what Magma is doing.

Here's the relevant line from Github:

https://github.com/lavabit/magma/blob/develop/src/providers/...

You can see that Magma is writing the email message to a file and instructing ClamAV to scan the file. This is actually worse than writing to a clamd socket, since (imho) it would be easier for someone to monitor a directory in a filesystem on a compromised Magma server.

Compare this to how SpamAssassin communicates with ClamAV-- it streams to either the port or socket:

https://wiki.apache.org/spamassassin/ClamAVPlugin
The article is about someone whose brain implant failed, and concludes that the problem was caused by electromagnetic interference. But this is pure guesswork; no measurements were taken, no tests were performed and no electrical engineers were consulted.
Bandcamp (a competing music platform) only has 47 employees: https://bandcamp.com/about
Depends on what you mean. Government defines property so just by how you define property you can change what "natural" means.

Controlling supply or distribution, network effects are natural ways to get to a monopoly.
That's a really good point thanks! I guess the right observation to make there is having a fully integrated distributed database behind the knowledge base, which hopefully could unlock some applications scenarios from which Prolog is usually excluded.
SYS 64738... that will forever be burned in my brain. Loved the C-64. Awesome article too.
Exploiting a Heap Overflow in VMware
Ha! Trump just deregulated a whole bunch of things. What makes you think this is not possible in Trump's America where more than half of Congress is made up of Billionaires or people strongly funded by Billionaires?
RED is making a $1,200 smartphone with a ‘holographic display’
Encryption was mentioned as a possible fix, which made me go WTF.

Am I misunderstanding this, or do these devices not do even the most rudimentary false-input rejection? EMI is one thing, but it sounds more like their radio is accepting random noise as valid commands.
re the underlying jab at post-modernism, post-modernism has gone beyond using aestheticism as a way of evoking emotions and simply gone ahead to evoke emotions directly (starting with expressionist art evolving out of impressionist art). the ultimate "deconstruction" of art is when evocation of emotion transcends medium - when "art" makes you feel a certain way without the bias of being a physical object, or anything at all.

contemporary art is the current physical limitation of this logical extreme. art today is about trying different media through which they can get a reaction out of you.
Yup. We use a lot of Let's Encrypt certs with domain validation via http-01 where our internal API can handle all the requests and validation without the end user requiring any technical knowledge.

It seems they will evaluate other options, but it's hard to imagine they would use something as convenient as http-01 for wildcards as then it opens up the platform to major abuse.
Ask HN: How to improve at programming when you are the best in your company?
Hi hackers,

I have the following question:

How can I improve my code at programming when all my colleagues are very bad at it?

I worked alone on all my projects for more than a decade and I think I need to be in a company where my coworkers are 10000 timer better than me to improve. The problem is that I can't get there because my code doesn't have the quality they expect.

For example, I applied for a Frontend developer position using React recently, and it was a Senior position there but they asked for me to code an exercise and the quality was for mid-level programmer. Bear in mind that I just started web-development in a year and half, coding a fairly complicated SPA in Angular v1 and I just started React Native development in about 4 months ago. ( All the other projects in my career were backend or desktop applications. )

How can I learn to program higher quality code?
Do you guys have any ideas on how can I do that?

Thanks and don't be harsh, please :)
Personally love SoundCloud and use it as my primary source for discovering music. I'm a software engineer at 10x Genomics, a Bay Area biotech startup, and we're hiring all sorts of engineers. If anyone is looking to move into a different industry and want to develop technologies that enable discoveries in the fight against cancer, feel free to reach out: kevin.wu@10xgenomics.com.
What verification strategy are they using to determine when a wildcard cert can be created? I see the discussion on https://github.com/letsencrypt/acme-spec/issues/64 suggesting that they validate a sampling of randomly-generated subdomains, but it's unclear if that's actually the strategy they're using (and an obvious downside with that strategy is it won't work for a client that wants a wildcard cert for whatever reason but hasn't configured DNS to handle arbitrary subdomains, though you could of course argue that these clients don't actually need wildcard certs).
Because it was easier to produce prototype of a bigger unit? And easier to measure it with lower error margin?
In my experience there is a lot of variance between research fields and even very specific adjacent subfields in how abrasive and star-focussed the process is.
Unless you're telling me Elixir has static analysis that can tell me that `right_age(18) == true` then I'm not sure how that competes with types much less is so different from any other runtime conditional.
Welcome to Detroit City
> Pretty meaningless when, thanks to capitalism, all new cars will be electric long before that date arrives.

With a lot of help of public funding for research, development, and adoption.

* https://en.wikipedia.org/wiki/Government_incentives_for_plug...
* http://www.independent.co.uk/news/uk/politics/britain-has-tw...
...
I love my BMW i3. Am I the only one?
I didn't build that. How are you so sure it would have less leaks if it were written in a language like C++? I'd bet it would be worse.
> a platform where recruiters can search and hire teams...

If your team is any good -- you're likely on Talent Acquisition's radar screen already. Relative to an actual platform to enable these deals, it would seem that the enthusiasm for "Aquihires" has piqued >
> https://www.cbinsights.com/blog/acquihire/
My only issue with this is how he seems to lump in the "mental health" days that people without diagnosed mental health disorders face with the stigmatization that the other group feels. I fully support people who need to deal with mental fatigue in these ways, but if just taking time off "cures" your mental health issues, it's a different class of problem from what others are dealing with.

The "still" is incredibly premature when it comes to mental health in the workplace. We're just scratching the surface when it comes to acknowledging, accepting and understanding those with mental health disorders. Depression, ADHD and even Autism Spectrum and OCD are all on the leading edge of disorders that are receiving less stigmatization and more acceptance over time. But there's a lot more in the DSM-V that are completely misunderstood or completely unpublicized. And our workplaces are completely unprepared to deal with them.

I saw this first hand at my previous employer. We had a coworker who had a number of personal disagreements with other coworkers. In discussing it with my mother, a psychologist, she mentioned that much of his behavior sounded, to her, like someone with Borderline Personality Disorder. He was everyone's best friend up until they did anything he interpreted as being against him at which point he'd flip and try to sabotage them at every opportunity, including filing numerous baseless claims with HR. The organization was completely unprepared to deal with an individual like him. Each HR claim he filed was treated seriously, but there was never encouragement or a requirement that he talk to a trained mental health professional who could have been helped guide the company to a productive outcome. Instead, his conflicts with other employees caused at least 3 of them to quit before he was eventually forced out of the company for taking on someone who had too much pull with upper management. I can only imagine the carnage that would have been caused if he had been a she and had been able to abuse the sexual harassment policies.

HR is only trained to help the company avoid getting sued. But there's damage to both the employee and the company that can happen without the lawyers getting involved. The company's HR failed him and the rest of us that had to work with him by not knowing how to deal with that sort of psychological disorder.

Rather than "it's 2017 and mental health is still an issue," I'd say, "it's 2017 and we're finally starting to acknowledge the long road ahead of us."
Because fossil fuel consumption is synonymous to a computer program that heats up server components and gobbles up finite system memory without relinquishing it ever again. Sometimes you do want a sys. admin to put a stop to stuff like that.
EBITDA represents a company’s net earnings before subtracting expenses from interest payments, taxes, depreciation, and amortization.
> Dog breeding is just a euphemism for eugenics.... Give me ~12,000 years and I'm willing to bet I can give you a breed of super intelligent humans (Border Collies) and a breed dumb dumbs (Bulldogs).

Of course it is a euphemism, but 12 millennia is not enough. First of all dogs can breed at about a year while humans need about 12X the time. Though that alone isn't as bad as you might think; most of the modern breeds are very modern -- less than a couple of hundred years old. And even if you look at older photographs of dogs you'll see that they have changed a lot recently.

However that reflects the second, larger problem, which is that Canidae exhibit an extraordinarily high degree of phenotypic plasticity. You would have a hard time adapting any animal to the degree exhibited by dogs. All our modern food and working plants and animals have been subject to human selection but none show anything close to the degree of specialization that dogs do. Not even parasites; the closest I know if is lice (e.g. pediculus humanus capitis vs pthirus pubis) or the influenza virus.
Thanks aaron!

San Francisco / Bay Area:

We're hiring UX Designers and Engineers at Common Networks (building a better ISP).

https://common.net | https://jobs.lever.co/common-networks

Feel free to reach out to ralston [at] common [dot] net
Asocio – Decentralized and free messenger
Two Commits and the User Experience of Git
Adjust is hiring Go developers in Berlin. I'm heading the backend team and you can ping me directly at welle@adjust.com
AWS Cost Calculator has been pretty accurate for me:

https://calculator.s3.amazonaws.com/index.html
Could you put a link back to the original source in the doc? That way you capture the comments & discussion, which has a bunch of useful clarifications.
We're hiring Android engineers in SF at Yup[1]. Reach out to CEO nag@yup.com or CTO vijaykumar@yup.com

[1] https://www.yup.com
I'm not uncomfortable about anything, but this clearly isn't productive.
Thanks for the reply. Could you please elaborate on a couple of things I didn't quite understand?
First, why would I want to start from "2 weeks ago"? Why can't I simply start from the tip of the chain and start "writing history" as I see fit? (in other words: why do I need to start with a handicap?)
Second, you claim that it is incredibly expensive, but have you done the math? As long as the cost is smaller than the market cap, it seems there's a reasonable opportunity for a positive ROI, and I know the market cap is very very large...
For sure there will be some alarm bells that go off at some point, but the question is whether the window between the attack and the "exchanges shutting down" is large enough to have a positive ROI on the cost of the attack.
Please tell me about this method of writing bug-free software and building bug-free hardware that you have; I am very interested.

Can you also detect whether a program will loop forever?
M4 Macros and CSS
Shouldn't vacation days be used to help your mental health? If vacation days are not enough, there might be a more serious problem ...
> What happened to good old fashioned function foo (int bar) :)

It doesn't let you do things like:

"for (int bar) and 0 <= bar <= 3" while the "when" guard construct can do that. Moreover it lets you have multiple function heads as well. So you can defined multiple for (int bar) with different conditions. Or even a "foo" with a string bar.
At my last company, about $30k per month when I took over as director of engineering in 2014, but I was able to reduce it to about $20k while increasing the number of instances using no upfront cost reserved instances. We ran a crawling infrastructure of about 150 instances and we increased to 200 while reducing the cost. We also had 3 of the largest instance types they had for our database, and 8 large instances serving the app, reporting, api, and alert services.
XStation, Mix of Xbox One and PS4
The post I was replying to was talking about us discussing technical limitations, not artificial ones. Whether or not ISPs throttle streaming is an artificial limitation. You're right that the decentralized solution would have censorship resistance so would be free of this limitation. This is the biggest (only?) value in decentralizing a system. However, it still would be less performant than its centralized alternative if you remove the artificial limits.
Uh. I thought it was all about parasitic currents. Strong enough EM fields induce those in the wires, brain gets stimulation and goes into seizure, this sort of stuff.

(Neighbor comment[1] suggests those devices don't have anything like firmware upgrades, so don't see why they need an actual receiver)

___

[1] https://news.ycombinator.com/item?id=14712193
But how about "It's 2017 and 1+1 is still 2?"?
Well, it's true that the initial vector is often third-party software. But once you're able to run arbitrary code in a user-mode process running in a limited security context, you still need to attack some high-privilege component to get full control of the machine. Usually this component is the kernel, so additional kernel mitigations do help protect you.
Spotify looses money because they have to pay massive royalties to the music industry. Hosting content that is not part of that oligopoly should in theory be feasible, but of course it doesn't attract the same amount of attention. I wouldn't say it is a foregone conclusion though.
Python uses reference counting with GC as a fall-back. RAII is basically reference counting with destructors, but it's not very useful if the object lifetimes are not easy to reason about. The optional GC (for circular references) greatly complicates things.

[1] http://arctrix.com/nas/python/gc/
I clicked just because I was curious and then discovered that this company is founded by someone I went to high school with and haven't seen if 13 years. Small world.
I always disable mixed content so I honestly wouldn't know browsers indicate mixed content. I was under the impression that yellow was used. Apologies for the confusion.

My point in my previous comment was that browsers should consider exposing the distinction between EV and DV certs to the user in a way that doesn't break their mental model of how browsers indicate the security of websites. How this is implemented is probably better handled by others more knowledgeable in UI design than I.
Came here to post exactly this. Also, when the hell was this written?
We (Managed by Q) are hiring in NYC, especially Backend Engineers, Engineering Managers and Product Managers - https://www.managedbyq.com/careers. Feel free to drop me a line - eseidohl@<our domain name>
I liked the idea of SoundCloud but it was horribly designed. The app was just so so clunky. I know some producers and they were early adopters on SoundCloud. The community was begging for this and jumped on early. They had the demand, they just failed to execute.
As far as I know Bandcamp is doing better than ever - they are also a completely different service, not very similar to Soundcloud at all. At Bandcamp you buy and truly own your music. While they offer streaming of those purchases, I‘d surprised if the vast majority of Bandcamp users doesn’t maintain and prefer their local music collection, which Bandcamp probably has contributed to a lot.

It‘s my impression that the Bandcamp userbase is very loyal and full of music enthusiasts - at. least I buy there weekly, about 5-10 releases.
The misplaced hype cycle is real.

10gen is not a company dedicated to databases, at least not if the initial code quality of MongoDB is a signal (and it should be, since if you know a thing or two about storage you wouldn't take the compromises it initially did)

Unfortunately, many fresh graduates with no experience in storage decided to evaluate the technology based on its very visible merits, without considering that scalability is not really a top priority even in companies that have to "scale", and that reliability trumps every other metric.

Mongo has failed spectacularly in being a reliable data store, and its scalability is mediocre, given that it's a lot more about query planning, analytics and optimization than having out-of-the-box sharding.

This is one of those areas having some seniority does wonders. Storage concepts are not easy to grasp, and evaluating a database's reliability takes much longer than most product cycles.
How do you get that to work? I'm not on Spotify, but I use YouTube (Red subscriber in fact) and I find the suggestions to be pretty bad. It just seems to suggest random songs in the same genre mixed with stuff I've listened to before.

I generally don't subscribe to channels or upvote/downvote songs. Is that critical to getting good suggestions? I would have thought just listening history would be enough.
Clearly this is all subjective, but Pilot Wave theory (De Broglie & Bohm) is the simplest least "crazy" of all the explanations.

Horribly simplified: Space isn't empty, there is an "ether". Matter moving through the ether interacts with it and produces waves just like a very light boat in a lake - these crests and troughs exactly line up with the magical waveform. All of the quantum behavior we see is explained by the waves in this "ether".

Ie the waveform is no longer this crazy math thing its a real thing. And just like "air" was considered empty until we discovered a vacuum, space itself is considered empty until we fully define the "ether". It matches up with all of the results of Copenhagen, but was dismissed because physicists like "locality" and it gives up locality.

But guess what? The surface of a lake is non-local. Your boat is affected by boats far away via waves, the effect just diminishes over distance.

And the double slit experiment is so straightforward now that it makes Copenhagen and many-worlds look kinda silly.
>> I've never heard of anyone here being asked for a verification, but it would tend to discourage people doing the "sanity day" sort of thing.

I suspect that the lack of trust this indicates on the part of the company (not to mention foster on the part of the employee) is probably a sign that you're past the point of no return. I suspect a company that asked for verification was not doing so to see if you were genuinely ill, they're doing so because it's already a problem and they want a nice paper trail for when they terminate you. Of course if you are abusing it, I think that's totally reasonable.

But I think most of my employers (except for one, where I quit for exactly this kind of disrespect) would have had no problem with me saying, "hey I just need a mental break day in order to keep doing this job - I'm taking one of my sick days". If one significantly exceeds allocated sick days, then the reason starts mattering more.
What caused you to quit SC?