skysight-inc/HackerNews huggingface dataset:
They only have to be accessed using a secure computer once to get the public keys for verification, right? Isn't that the whole point of public key crypto?

This can be done using some ultra-slow homebrew whatever-level-you're-willing-to-trust custom hardware is necessary to satisfy the associated degree of paranoia.
I think the key is not looking at how well humans perform, but how badly they make mistakes. For example, over the halloween period we interpret 2 flashing LEDs as scary cat eyes. We might not do the same taken out of the temporal context. How we "fail" is a possible indicator to how we succeed.
Linus calls out the fact that there are some times in which breakage is unavoidable, but that should only be after trying very hard to avoid breakage.
> The term virtual machine stands in distinction to real machine

Right: virtual machine = software implementation of what could be a real machine.

The simplest interpreters execute directly from the AST, but if there's a pass that reduces this to an abstract machine with an ISA, I think it's fair to classify that as a VM.
Well, please enlighten us then!
If an attacker controls your computer, there is always the possibility of a man in the middle, even if you use a Yubikey. The attacker could simply wait for a request to the HSM and intercept the response.
Interesting.

>
Behavioral changes happen, and maybe we don't even support some
feature any more. There's a number of fields in /proc/<pid>/stat that
are printed out as zeroes, simply because they don't even exist in
the kernel any more, or because showing them was a mistake (typically
an information leak). But the numbers got replaced by zeroes, so that
the code that used to parse the fields still works. The user might not
see everything they used to see, and so behavior is clearly different,
but things still _work_, even if they might no longer show sensitive
(or no longer relevant) information.

I'm not sure I prefer the described result. If my application depends on some of those zero'd fields, it seems like that has potential to cause serious debugging problems, as opposed to just causing an error on the parse.
It seems that to train this, you need to input precise masks.

I'm wondering if one day it would be possible to train a network without masks (just a classifier), and it will figure out the masks by itself.
I use DarkSiteFinder [1], to find dark spots for astronomical viewing. It's really depressing how far I have to go in the Midwest! to get to a "dark" sky. Depressing!

[1]: http://darksitefinder.com/maps/world.html
This is they type of figureheadism that I absolutely do not understand and which makes me very nervous about the future of a company.

Great, the boss is in house...now I spend more of my time telling the boss why it isn't fixed yet and less of my time actually fixing it. I'm not saying those things are inherently at odds but they are definitely in tension with each other.
History of Hamburger and Menu
Leap Motion | San Francisco, CA, London, UK, and Shanghai, China | Onsite | http://leapmotion.com

The greatest limit of technology is no longer size, cost, or speed. It's how we interact with it. At Leap Motion, our mission is to break down this barrier and bridge the gap between reality and imagination. Our tracking software lets you reach into virtual and augmented reality to interact with new worlds. From our newly upgraded offices in San Francisco, London, and Shanghai, we're currently partnering with major VR manufacturers to embed Leap Motion technology into mobile VR/AR headsets.

Openings: https://www.leapmotion.com/careers
Yeah that happened to a lot of people, myself included.
wehkamp | Multiple Roles | Zwolle, Netherlands | Onsite

Wehkamp is one of the oldest players in the online retail market in The Netherlands. Our catalog contains lots of fashion items, but we also sell consoles and even furniture. Every family in Holland knows our brand.

Our microservices and microsites are hosted on Mesos (AWS) and we have been running docker in production for over 2 years. The tech-stack is able to host Java, Scala, DotNetCore and Node applications with ease. Prometheus metrics are everywhere - something the SRE team is extremely happy with.

We're just looking for passionate engineers and developers that want to join us in our adventures :)

A warm welcome to anyone that speaks either TCP/IP or Scala, has React for lunch or dines with Bash. And who dreams of Terraform or wakes up with Lua.

Interested? Reach out at apply@wehkamp.nl
omg is this really how amp urls are supposed to be ?!
isn't this crazy? www-wired-com
wtf...
https://www-wired-com.cdn.ampproject.org....
Excellent script. It matches "401k" however, so it might be worth matching against "401k" specifically. Also, I would recommend to others to give the whole thread a once-over after running the script, as it seems I've upvoted a couple of companies that had a big stream of complaints, and personally I do not upvote ads with complaints, even if they do other things (i.e. salary range) right.
Donald Knuth’s Man or Boy Test Is Missing for Rust
#!/bin/bash

#This prints random words from the Linux dictionary.

echo "$(shuf -n 32 /usr/share/dict/words --random-source=/dev/urandom | tr '\n' ' ')"
The tether link was proved wrong.
From the followup message Kalleboo linked to:

> There have been exceptions, but they are few and far between, and they generally have some major and fundamental reasons for having happened, that were basically entirely unavoidable, and people _tried_hard_ to avoid them. Maybe we can't practically support the hardware any more after it is decades old and nobody uses it with modern kernels any more. Maybe there's a serious security issue with how we did things, and people actually depended on that fundamentally broken model. Maybe there was some fundamental other breakage that just _had_ to have a flag day for very core and fundamental reasons.

> And notice that this is very much about breaking peoples environments.

So breaking userland is possible if there is literally no other way, but

1. it's the "nuclear option "of kernel changes

2. it will be acknowledged as breaking users's environments
Can not a database or simply digital signatures do the same thing? Why does Maersk need a trustless system?
Clojure Job Board
someone who is looking through new ideas and suggesting that we try experiments to improve our quality, time to delivery, or the other things our team finds important

So someone who is interested in different software engineering and organization practices? Not the same software engineering and organization practices as the rest of the team?

It sounds like you don't want a culture fit so much as you have a culture in mind that doesn't fit, and you don't want that one. Different culture fine, except from a particular range of damaging cultures.

I would suggest that the very fact this thread (and others nearby) exist indicate that "culture fit" really isn't a good term, given how much extra definition is required.
I bought a Yubico key once. The thing was so cheap that between the time I set it up and the first time I actually had to use it, it had disintegrated just from sitting in my pocket every day on my keychain. The plastic was brittle and fell apart piece by piece until eventually the electronics fell apart too.
Slack (sort of) supports emoji – come join us at the [pizza] Slack
Hypothetically, Bitcoin would have the sum of all these values if there were no fork. But in reality, it's a massive bubble.
Your description makes it seem more nefarious than it is.

This guy runs a blog about companies that he thinks are over-valued, and he shorts their stock. He's transparent about all of this. His readers / investors / the public know that he's likely short these stocks and that he makes a business of both using this investment strategy and blogging about it. They follow his advice at their own risk, with all of the information fully available.

There's a HUGE difference between that and getting into a position that you don't disclose, manipulating a media outlet into running coverage that appears objective but which is actually designed to do nothing but help your position, and then cashing out.
In the mail the quote is from, he lists security issues that can't fixed otherwise as one of the reasons exceptions happen.
The following is just my understanding, correct me if I'm wrong:

People don't connect directly to miners. They connect to nodes (8000+) which forward to miners. Nodes can declare an order is valid or invalid and they can blacklist bad-behaving miners. They can refuse nodes/miners that signal a change they don't agree with.

So I think full nodes are VERY important in the network and their voice counts. That's why I'm running one.
Notice that I didn't say "hack", and much of the news doesn't focus on them "hacking" the election in the sense that they altered the vote to get Trump enough votes to win (I'm sure some have argued it but most sources deny that widespread voter fraud or vote altering happened). By now it's accepted that Trump did not win the popular vote but did win enough states to win the election, just like in 2000. The focus is on disinformation instead, like ads bought on Facebook, Twitter, etc., which has been shown to have happened.
Check out https://github.com/mjhea0/flaskr-tdd
But they don't have the private key, that's the whole point of the hardware device! They can't MITM the encrypted data without it.

plaintext <-> crypto <-> blob <-> *compromised server/anything but quantum computing* <-> blob <-> crypto / YubiHSM

Edit: I'm not talking about this:

*my compromised PC* <-> plaintext <-> crypto <-> blob <-> crypto / Yubikey

In practice, getting anything done involves some CPU doing something useful with plaintext, if that's what you're getting at. As I said, you have to draw the line somewhere. Without sharing where you do this there is little point in talking about it. Personally, I can't see any problem with an Intel CPU (or any other hardware) acquired with cash in person, then never networked and if I wanted to go ultra paranoid: a chain of custody from the time of my acquisition demonstrating continuous physical surveillance.

My point is that I could securely "crypto" from my academic-dreamland/whatever secure computer through any transport to a YubiHSM connected to a compromised PC, if I trust Yubico (and the supply chain delivering their hardware) and the YubiHSM's initial/one-time setup.
John Johansen will survive. Linus has made it incredibly damn clear what "no user space regressions ever" mean. See f.e the similar rant from 2012: https://lkml.org/lkml/2012/12/23/75 And it is his kernel so it is his rules. John Johansen admitted he messed up (http://lkml.iu.edu/hypermail/linux/kernel/1710.3/02539.html) and promised to handle things better in the future so all is well.
Honest question: Why would you ask this when the ad specifically says "ONSITE"?
During the conference call, Musk himself said that CapEx in Q4 could be as high as in Q3.
I thought Hassabis was in charge there?
It's laid out further in the thread [1]. The key quote comes from Thorsten:

> All that afaics doesn't matter. If a new kernel breaks things for people
> (that especially includes people that do not update their userland)
> then it's a kernel regression, even if the root of the problem is in
> usersland. Linus (CCed) said that often enough

[1] http://lkml.iu.edu/hypermail/linux/kernel/1710.3/02487.html
Shame, the "" (pizza emoji) won't work in HN titles. (Makes sense though...)
Oh it also doesn't work in comments :')
the engagement on these posts is insane relative to everything else on here. Seems without heavy moderation Hn would be Crypto-News.

Everyone is afraid to say what they think. The core concept of BTC is fundamentally flawed and unbelievably naive. The value is rising based on hype and speculation alone, no value is being generated in-fact it's being consumed to 'mine' and transact the coins. Those claiming they're spending their BTC on regular purchases are either not being honest or beyond stupid.
possible sure! likely or useful or effective...probably not
As a customer, I love TransferWise. The banks charge outrageous rates and fees. The competing money transfer/currency services promise the best rates, but make you sign up before telling you. Then you get constant calls from your "personal currency advisor". In the end you find out their rates are higher, and now you're on call with a sales person. This includes companies HN posters in a previous thread were recommending. TransferWise is upfront and self-service. The one time I had to email support they were great too.

On the business side, TransferWise tells an interesting story about peer-to-peer currency exchange, but I think that's a media play. In practice most transfers will not immediately match with reverse flow. TransferWise have to keep a buffer of each currency and trade on the open market, just like the banks do. That in turn exposes them to currency risks, and it wouldn't surprise me if they lost a lot of money on 24 June 2016. As a VC funded startup they could eat that as a learning cost.
Ideally Monero would replace Bitcoin when buying things. Monero is more like cash than Bitcoin is. Unlike Bitcoin, paying with Monero doesn't immediately give away your balance and transaction history. Monero would also be better suited because it has lower fees that will get even lower as the dynamic block size increases. And because of the dynamic blocksize, you won't have to wait forever to confirm that you sent payment for a cup of coffee or whatever.

If you're interested in adopting Monero, but still need to be able to pay in Bitcoin occasionally, you can use a service like www.XMR.to
> But if a woman has been raped, who’s to tell her she has no right to scream his name from the rooftops?

Three little things: Presumption of innocence[1], Separation of powers[2] and Right to a fair trial[3]. The first tells us that every person is innocent until proven guilty, the second mandates that the ones with the power of proving guilty are not the same with the power of arresting or writing the laws, the third says that, to be proven guilty, one has to undergo a fair trial, and that, among the other things, the accusers can't be the judges.

By allowing public firings and spreadsheets of "guilty people", we're actually allowing bypassing all of these three points. People are accused, trialled and condemned by enraged crowds, without even being able to defend themselves in a legal seat. And if you try to underline this point, you're treated as a monster. Good job on restoring mob justice and making it pass as "normal".

[1] https://en.wikipedia.org/wiki/Presumption_of_innocence

[2] https://en.wikipedia.org/wiki/Separation_of_powers

[3] https://en.wikipedia.org/wiki/Right_to_a_fair_trial
Creaking floorboards can be solved by attaching the floors more securely. Just screw them down. Usually it is caused by wood moving against nails.
This hack is exactly what I needed 2 days ago while working on a browser-based terminal app. My site will be secured with SSL/TLS, but I needed a way to make a content-editable span mask input like a password field. I already implemented it with a password input, but it doesn't wrap inline like a span does. It will be much cleaner to just add a class that masks the font.
Tesla's profit margins are fine, this is all a question of ramping up to cover demand. Which tends to be much simpler when you are already a huge company.

Their real risk is if the Model 3's reliability is bad or they need a recall thus reducing their profits significantly.
Someone bought fidget spinners with their life savings and was looking to sell them quick:

https://i.imgur.com/V0u1KHG.jpg
Does that mean the kernel is not allowed to change version number anymore because I could write an app that segfaults if it sees Linux >= 4.14?
That's one of the specific exceptions he mentions.

Behavioral changes happen, and maybe we don't even support some
feature any more. There's a number of fields in /proc/<pid>/stat that
are printed out as zeroes, simply because they don't even *exist* in
the kernel any more, or because showing them was a mistake (typically
an information leak). But the numbers got replaced by zeroes, so that
the code that used to parse the fields still works.

i.e. the kernel may not do what it did before but your tool shouldn't crash. It may not have all the info you used to see though ...

Edit: fix styling
I think you're confusing the present state of cryptocurrency as being its conclusion. Yes, Bitcoin was the first mover, and Bitcoin has the most buy-in. But cryptocurrency in general does not have global buy-in as a way to buy and sell stuff.

A) Barriers to initially acquiring crypto coins remain a bit high. B) Expense of transactions remains way too high, C) Transactions are way too slow, and D) For Bitcoin in particular, the hoarders make it politically difficult for Bitcoin to move to an algorithm that can produce faster transactions and therefore serve as a better means of payment.

All the major blockchains in the cryptocurrency ecosystem, right now, are too slow and expensive to be of much use as a currency to the global economy. It stands to reason that if one of them, unburdened with Bitcoin-holder demands for ever-increasing scarcity, solves that problem (Proof of Stake?), then Bitcoin will be supplanted by a cryptocurrency that improves the currency experience. Several are in the process of fixing that, while Bitcoin is not.

No cryptocurrency's competition is Bitcoin. The competition is old school means of payment. If your currency becomes closer than Bitcoin to being as useful as traditional money, your currency will have an advantage over Bitcoin.

Imagine you sell a phone on Craigslist, for crypto. You and the buyer can either deal with a $10 fee and 30 minutes to an hour of sitting in a Starbucks to complete your transaction, or you can give up, swap cash for goods, and walk away. Which one do you choose? Time is expensive, too.
Have you bought some BTC, I made a killing on it, it's free money, get some now because after the fork you'll be able to bank at least 20% of your initial sum, ...

The peons in pyramid schemese usually aren't committing fraud, they don't realise that they're in a scheme, they're not lying, they are really convinced that they found the money tree and if only people buy in it will bear fruit forever.

I still think the analogy is useful.
I sold my 200 at 40. Something for nothing, right?

/facepalm
I'm glad Linus has this attitude and it is unfortunate it's not present in some other places

Though it is annoying if you're at the receiving end of it, own up (the opposite of what the patch author was doing)
I'm not parent, but the biggest advantage I can think of is that Gitlab is open source.
Foodchain | Backend Engineer | London | ON-SITE or REMOTE | https://www.joinfoodchain.com/

Foodchain is on a mission to build the most efficient food supply chain, ensuring high quality, fresh, affordable food for everyone. Our aim isn’t to reinvent the supply chain, but instead to make it as efficient and sustainable as possible.

We’re using a technology driven approach to accomplish this mission.

Our platform connects chefs and restaurants to a wide variety of producers in meat, fish, dairy, produce and dry goods. We’ve cut out the middleman and eradicated the warehouse, to guarantee delivery of the freshest, high quality food at the best prices.

We’re looking for a backend engineer to join us in furthering our mission and help build out the technology platform which will be integral to the long term success of Foodchain.

Foodchain is an early stage startup with a small engineering team. This is an opportunity to play a key role in shaping the vision for the platform and share significant responsibility in the team.

We need someone with hands on experience building backend systems and APIs, preferably in SOA or microservice architectures. Hopefully you’ll have experience in dynamic languages like Python or Javascript but also some strongly typed experience with Go, Java or Scala.

Here’s some of the things we’d like you to work on:

- Own the overall architecture of the event based microservices platform

- Develop the API endpoints for the mobile and frontend apps

- Develop integrations with third party providers e.g logistics and accounting

- Work with the rest of the product team to estimate and plan future features

We're based in London but open to remote work.

Send your CV/LinkedIn/GitHub profile to jobs@joinfoodchain.com if interested
Depending on where you are from there might a better alternative.

In Europe, you have Revolut, N26 and Monzo which gives you a prepaid or debit MasterCard. Instead of the higher foreign transaction bank fees you will get either Mastercard’s or interbank rates, which is so much better than your traditional bank exchange rate.

I have tried to list some options here: https://globalmoneyapp.com
A while back, I remember reading something about how Netflix will periodically re-interview their employees and if they fail, fire them. Is it (still) a thing? Also, what about stories such as this: http://www.npr.org/2015/09/03/437291792/how-the-architect-of...

"Today, Netflix offers unlimited vacation time, high salaries. This company doesn't care how long you're in the office, but they do care about what you produce. And you have to produce. Here's another slide. We are a team, not a family. We are a pro sports team, not a kids recreational team.

Netflix fires people, even hard-working people.

HENN: How many people have you moved on?

MCCORD: Oh, hundreds.

HENN: I talked to a lot of former employees were OK with this deal. I mean, after all, Netflix pays well. But some talked about a culture of fear - always been worried about being fired. Patty says the company's culture is a big reason for its success. She says it keeps Netflix lean and nimble."
Securing computer is lost cause. Thats why HSM exist: a small computer with simple processor, no appstore (only highly tested/secured inbuilt apps), no network access (limited and specific protocol not like IP), very limited functionality. These are what makes HSM very easy to secure.

Any user customization to HSM should be considered unsafe. The new system would be expensive and "brittle".
You could make special apps with a UI made to help with the specific tasks, and with a good bluetooth headset make a nice mobile experience IMO. But yeah currently solid IRL keypads + phone handles are better than mobiles'.
Should be able to try for a refund on a payment until 6 months old.
I'm pretty sure I remember reading that the effects of sitting were not, they believe, offset by physical activity. I can't remember the source, but I'm sure there's stuff out there in Google.
> Well, you’ll probably have to hang on to it for a long time then, because Apple will not bring the headphone jack back.

In the meantime the iPhone SE is a good phone, has a good form-factor and still has a headphone jack.
Thanks Pault for making it clear. That is exactly what am looking for.
What I don't like about the current cryptocurrency climate is that Bitcoin, garbage ICO-s, and BitConnet-like piramid schemes completely distract people's attention from the serious cryptocurrencies that genuinely try to develop a decentralized trustless and efficient payment network, like DASH.

I am betting against the current trend, and holding mostly DASH (and BAT, POWR, RLC and some similar currencies) with practical potential to be used for more than just a store of value like Bitcoin.

Bitcoin has its place and strength, it is the digital gold, but too much bitcoin dominance in the cryptocurrency industry is against innovation and progress.
"Join the Slack workspace at [square for missing symbol]". Meh.