skysight-inc/HackerNews huggingface dataset:
With a few companies working on global, fast, low-latency satellite internet it seems that censorship will get much harder. I'd guess the place to stop people would be in preventing them from paying for the service. Are there still ways to control this form of internet access? If not, satellite internet development seem worth it even if only as a humanitarian effort.
SSL/TLS are just protocols, they aren't infrastructure. There's a lot of moving parts in the infrastructure that are not these protocols. The protocols work pretty well.
> “I do think we’re less than 10 years away from making research-grade gametes,” she says

> Even then, same-sex reproduction will face one more biological hurdle: scientists would need to somehow make a cell derived from a woman, who has two X chromosomes, into a sperm cell with one X and one Y chromosome, and do the reverse, turning an XY male cell into an XX female egg cell

So no time soon.

I'm still only just getting used to the whole surrogacy thing (not related to the same-sex procedure described in the latter section of the article) that gay couples use today. When I grew up, none of my friends were from gay parents that had the child through a surrogate mother. It's becoming more and more common now. There are even books aimed at explaining gay relationships - http://www.gayrva.com/arts-culture/the-most-amazing-german-c...

Not that I'm against it or for it. Just observing that it was not something I had to understand while growing up.
You might enjoy this crazy 1998 paper, which I just found, which adds a bit of heft to the the "not much" guess above.

It seeks to examine gravitatonal waves shed by a 2-galaxy cluster.

"pessimistic point of view justified by the combination of great numerical difficulties (three-dimensional calculations) together with very disappointing small values expected for the gravitational-wave luminosity, the amplitude, etc"

"In brief, our simulated cluster produces changes in the relative distance of the order of 10-22—detectable with current technology—in a short period of 4 days."

(LIGO 2015 was about the same relative length change (h), but with a frequency of 35 - 250 Hz. I'm not sure how catching part of a gravitational wave of ~ 10^-17 Hz could be caught by a LIGO-like detector, since only higher derivatives of h are useful for identifying gravitational radiation).

http://iopscience.iop.org/article/10.1086/311446/fulltext/98...

(but of course for cooling we're more interested in the luminosity, which is small compared to that of an ordinary galaxy, but a bit more interesting compared to the blackbody radiation of a galactic-mass diffuse cloud of atomic hydrogen, although that's only considering the normal-matter member of the binary, rather than the total energy leaving the region of spacetime the binary is in.)
Raising the Floor | Developer | REMOTE | Earth | full-time (12 months)

We're looking for a developer good with node.js, .NET, Windows (client) and Linux (server) to work on our Installation on Demand project.

WHO WE ARE

Anytime, Anywhere, Any Computer Access. At Raising the Floor, we’re an international coalition of individuals and organizations dedicated to ensuring that the Internet, and everything available through it, is accessible to people with accessibility barriers due to disability, literacy, digital literacy, or aging, and regardless of their economic resources. Our vision is to revolutionize the landscape of assistive technology by creating an infrastructure to facilitate the development, distribution, and support of a wide range of affordable accessibility solutions around the world. That is, the Global Public Inclusive Infrastructure (GPII) - https://gpii.net/

THE POSITION

You will help a team of bright and talented developers located across continents who are passionate about our vision, that of radically improving the access to technology. How? By helping to develop associated system that can cause ICT to instantly change into a form that each individual can understand and use. We are looking for a talented software engineer to lead and develop one of the associated systems of GPII called Installation on Demand (IoD). This system will allow GPII to install and use Assistive Technology (AT) software on demand, whenever required by a user.

WHAT YOU WILL DO

- Become a member of a small development team building applications and tools around GPII.

- Develop an Installation on Demand (IoD) system that stores and provisions Assistive Technology and other software on Windows computers.

- Integrate IoD with mainstream open source software distribution systems (Nuget, Chocolatey, etc.), developing a Windows service and Linux server/repository.

- Work in and contribute to an open source project (https://github.com/GPII).

- Be involved in all of the phases of the IoD project, from project inception to release phase.

WHAT WE ARE LOOKING FOR

- Experience in most of these areas: .NET, Windows, node.js, Linux, software installation/packaging.

- Experience in systems programming.

- Experience with software distributions and/or complex software deployment systems.

- Experience working successfully with a remote distributed team.

- Able to work independently to complete tasks on schedule without close supervision.

- Highly motivated, self-directed, and able to thrive in ambiguity.

This is a 12-month Contract Position.

Interested? Send your resume/cv, with a little intro, to jobs at raisingthefloor.org
> How can it be too far to install an anti-missile system on your own territory? That seems eminently reasonable and uncontroversial to me. It's not even a euphemism is it? It literally is purely a defensive system?

This is an old argument that goes back to the cold war. ABM systems were prohibited by treaty because an effective ABM system is not purely a defensive system. It breaks the deadlock described by Mutually-Assured Destruction. MAD means neither side can rationally initiate a first strike because an attack will result in the destruction of both sides. An ABM system that actually works, controlled by only one side, means that side can make a first strike and not be destroyed.

That is not necessarily an argument against developing defensive systems. During the eighties one thing people suggested for addressing this was to essentially give US-developed ABM technology to the USSR, or to jointly develop the technology, etc. The system's deployment would be followed by a gradual reduction in nuclear stockpiles by both sides. The thinking being, if both sides possess the defensive technology the amount of tension involved in reducing nuclear stockpiles and achieving disarmament is reduced. None of that went anywhere.
Flute Mail | Toronto | REMOTE OK (US/UK/Canada only) | Full-time | Full Stack Web Engineer | 15% equity + stipend

At Flute our team of 2 engineers has built a new kind of email API which I think will disrupt a multi-billion $ industry (think SendGrid/Mailgun/Postmark and other transactional APIs). We decouple your email API from from your servers or providers in a load-balanced, failover-native, hot-swappable fashion with full-text Elasticsearch for your data. See flutemail.com

We are very, very new: our website literally went live this week. Still haven’t launched publicly, and the app is buggy (though we have a few customers on our waiting list). However, the company is profitable, due to my previous consulting contracts.

My CTO is leaving to join Google in a couple months, so I need a new CTO/product-engineer to help me deploy and grow this thing. I’m a full stack dev myself and the founder, with strong product management experience.

I’m looking for someone who deeply understands the value of our core idea and is committed to joining a startup in the early stages for significant equity + a small stipend to cover living expenses. I’m a slow, methodical, code-reviewing engineer who loves to create issues and design UI/UX mockups, while you’re the hackathon-move-fast-and-break-things engineer who enjoys crashing through a list of issues, and is excited to learn anything. Be prepared to do everything from DevOps to frontend hotfixes. I prefer that you have real big-company experience (since I don’t).

Stack: NodeJS, Angular 4, Elasticsearch, RabbitMQ, Python integration testing

How to apply: Send me an email (see HN profile) and tell me why you think you might be a fit for this role. I’ll ignore the email if it’s only a resume, please write a bit to explain to me why you want to join a ridiculously early stage startup.

Isa Hassen | Founder & CEO
Flute Systems, Inc.
Symantec is already getting distrusted and the Web PKI community has decided on a plan that minimizes user impact while doing that. It's very doubtful that a company as incompetent as Trustico has the expertise to come up with a more well-informed decision or a better approach. Certainly attempting to get 50,000 certificates revoked immediately without doing any work to reissue those certificates prior to that is a terrible approach.

Considering the fact that they recently switched to a new CA partner, a more likely explanation is that this was a misguided attempt to somehow keep their existing business rather than let DigiCert pick them up somehow. Obviously it failed in a spectacular fashion.
Smarkets | Full Time | ONSITE (London, UK; now also Downtown LA, California)

We're a modern betting exchange, going technology first to enable proper price competition in a field of fat commissions. Join a small, agile, and fast-growing team, in our beautiful office in St. Katharine Docks. If our US location tickles your fancy, you get to help setting up a brand new office too.

Smarkets develops a reliable, low-latency, highly concurrent betting exchange based on trading exchange designs. We're also building a fast, modern web interface to allow for a smoother experience. Servicing our users is top priority.

The Smarkets platform is written predominantly in Python, Erlang (being replaced with C++) and Javascript for React, relying heavily on asynchronous programming techniques. We use REST where we can. Life at Smarkets circles around people, version control, configuration management and automation. We can - and do - deploy to production several times a day.

Our entire production is in AWS. In fact, Smarkets was the first gambling operator under the Maltese regulator to get permission to run everything in the cloud. We push the envelope where needed and educate auditors when necessary.

We are looking for engineering talent in the following roles:

* Front-end Software Engineer - React (London, LA)
* Senior Front-end Software Engineer - React (London, LA)
* Senior Security Engineer (London)
* Senior Infrastructure Engineer (London)
* Mobile Developer - React Native (London)
* Senior Mobile Developer (LA)
* Senior Backend Engineer, Erlang/C++/Python (London)
* Software Engineer (London, LA)

If you like the idea of flat structure and practical engineering approach, see our jobs at https://smarkets.com/careers/ .
中國
SEEKING WORK | Washington DC or remote

I have a wide variety of experience in multiple areas of the web development lifecycle, including:

- creating, maintaining, and refactoring Django web applications
- writing Python web scraping scripts
- creating or modifying WordPress themes and plugins
- using Ansible to automate systems administration tasks, including provisioning and deploying servers
- using automated testing to debug existing code and prevent future regressions
- running security audits of websites and cloud hosting configurations

I've been busy enough recently (the last time I posted here was about 4 years ago!) that I don't have an up to date portfolio, but the odds are that if you tell me about your project, I've either worked on something similar or can point you towards someone who has.

Email me at martey+hn-2018-03@mobolic.com, but please no spam asking me to join your new cryptocurrency freelance marketplace.
FWIW, Trustico isn't a CA. They're a certificate reseller; all certificate validation is handled by a different company. If Trustico hadn't been generating their customers private keys for them (or if their customers had refused to let them do things that way) they wouldn't have been able to screw things up this badly.
"We haven't finished getting to the bottom of this and don't have the post-mortem yet but this is very bad and you need to revoke all of these ASAP"

"We're not revoking 50k certs without a damn good reason"

"Attached is your reason"
According to [0] that is around 1/400th of total internet traffic per second. This begs the question: who has that kind of botnet at their disposal and why are they targeting Github?

Edit: The attacker didn't need nearly that kind of bandwidth to execute this attack. See [1]

Edit: 1/50th -> 1/400th (bits vs bytes)

[0] http://www.internetlivestats.com/one-second/#traffic-band

[1] https://news.ycombinator.com/item?id=16493497
I wish cats lived as long as people. You would meet your kitten when you were a small child and they would be your companion for life. Ours are 17 now, a good age, I am dreading the day :-/
China is actively using USA as an example to show that Democracy does not work well these days too, for instance it appears gun violence, immigration and race issues can never be fixed here, and the national debt keeps increasing for years and there is no sign to stop. So, whatever their leader does must be better than others nowadays.

Admit or not, the overall impression these days is that China is an uprising power while US is in the decline. At the time they're building the best transportation system and investing heavily into robots and AI, we are here debating gender-less restroom, legalizing marijuana, keeping proving president is tied with Russia,etc.

The tipping point has passed, the gap will keep getting wider, based on history, there is no fix, countries rise and fall cyclically.
Scholastic | Assistant Project Coordinator, Associate Project Manager | New York, NY | Onsite | Full Time

Scholastic is the world's largest children's book publisher. We are looking to fill positions working in product and project management. The currently open one is available for applications here: https://scholastic.referrals.selectminds.com/jobs/assistant-...

The above position is a fairly entry level one managing websites and marketing through a CMS. We also will have an Associate Project Manager position managing development, if you're interested in that feel free to drop a line to gbrown@scholastic.com.
This just went past me on Twitter: https://twitter.com/lynyrd_cohyn/status/968977681210585090

(Malicious ad injection + HTTP = mobile billing)
Amazo lost 16% of its brand. Nothing to worry for Microsoft Apple Facebook Google Uber, yet
I am a python/ML/Data science kind of person who likes to learn a lot. Is there anything for such a profile?
While traveling, I searched for local jobs.
D.C. Public Schools annual graduation rate on track to decline from 73% to 42%
A collection of deep learning resources – updating as I go along
I've never done any contracting, so I don't know how it works. Are you a contractor for the SEC? If so, is this a short-term contract for the SEC project, or is this full-time at "Aretecinc"? If full-time, what happens after the SEC project is done?

Do you guys, by any chance, have relocation reimbursement?
The problem I have with doordash is that though they say the delivery fee is $x, there are a lot of hidden charges. You are actually paying a lot more than that, a markup on food items + a delivery fee + 8% service fee + taxes + 15% tip (optional but selected by default) + a small order fee (if your order is less than a predefined min order value)

For instance, there's a a particular dish served at a local restaurant that I like, and I recently noticed that it is $11.99 at the restaurant but in doordash it's priced $13.99, delivery fee of $4.99, service fees of $1.88 and optional but pre-selected tip of $3.81. And, of course taxes in addition to this. At this point in some cases, its perhaps more economical to take an uber/lyft to the restaurant and back.
> Europe's ePrivacy law is coming next year which enforces all communication to be secure.

Link to Directive please?

(The reason I ask is that news reporting on EU law in English is extremely unreliable, and it's best to go to primary sources)
2 interesting ways:

# Competing in hackathons overseas (I got many job offers this way)

# Getting inside interesting IT, or VC facebook group, many times they offer jobs this way. (I got my current job this way)
Because of utter incompetence.
1) 2/3 of devices Apple has ever sold remain in use today [0]

2) The average lifespan of an Apple device is 4.25 years

That should put to rest the "Apple's planned obsolescence" narrative, but I doubt it will. I think it has always been the case that Apple cares about building really good hardware that lasts. That's not to say that they don't make mistakes (they do), but they care most about making something good, regardless of the "business case."

On the most recent earnings call, several investors had questions about how Apple's new battery replacement program would affect business. For example, would the cost bring down profits, would the replacement prevent upgrades, etc. Tim's response was:

>On the battery, Toni, we did not consider it in any way, shape, or form what it would do to upgrade rates. We did it because we thought it was the right thing to do for our customers. And sitting here today, I don’t know what effect it will have. And again, it was not in our thought process of deciding to do what we’ve done. [1]

[0] - http://www.asymco.com/2018/02/27/the-number/ (this does not include iPods, I don't think)
[1] - https://sixcolors.com/post/2018/02/this-is-tim-transcript-of...
Nathan Barry, Founder of ConvertKit on going from side project to $900k in MRR
Unless the upload signal was somehow ultra-directional like a laser or something, they would detect your upload transmissions and come and arrest you. Same as if you started up a cell phone jammer in the US.
God of War New Tab Page
Spotify’s leadership is doubling down on an unprofitable strategy
I am making a point about the governance of the protocol, not the protocol itself. The apt protocol is centralized, but distributed to attain performance at scale. The governance of the apt protocol could be seen as centralized, because Debian tells you which packages are ok, but it is also easy for individuals to switch to other governors, such as Ubuntu. This might be stretching the definition of 'decentralized', but my point is just that it's not a bad thing or even undesirable.
Yeah. The main problem with keeping a space station at a stable orbit above Earth is friction with the atmosphere.

There might be small adjustments that need to be made where Earth's atmosphere is almost completely negligible but there are fewer forces degrading the orbit and there's no immediate threat of crashing into a planet if the adjustments aren't made in time.
Smarkets|Los Angeles|Onsite, Full-time|Software and Frontend Engineers|Smarkets.com

Why would you need a manager to tell you what to do, when you and your team are the best qualified to make those decisions? At Smarkets we use a self-management structure where trust is the driving force. We believe that people are more motivated when given the freedom to work on what they like as part of a driven neural network.

To learn more, check us out here: https://smarkets.com/about/

If you are interested in one of our multiple software engineering roles in the LA office you can apply directly on our site or email your resume to hiring@smarkets.com - please make sure to reference which office you are applying to, in this case.
The mobile app is pretty basic and doesn't support offline use. It's okay but I wouldn't rate it as fantastic. Outlook seems much better.
Ah, the classic "Who needs privacy if you've got nothing to hide". I'm just glad most people don't think that way.
Yes but the agreement between the two sides was that they wouldn't put military forces near each other's borders. I think Turkey counts.
>Why not give deference to the accused to set the date and time within a 120 day window?

I definitely agree with this.

>Lack of teaching empathy is an education issue.

I disagree here: we live in a hypercapitalist system. Empathy is a competitive disadvantage. Any company that exercises it is weak, and will be culled eventually by companies that don't. Lack of empathy, brutal selfishness and a willingness to exploit the weak are not a cultural problem, but a natural consequence of an economic structure: we cannot teach our children to be nice and hope that it will go away.
> These convert into more hires.

And more fires. This is why you see more and more Contract-To-Hire and Temp-To-Hire positions being posted.

Recruiters provide bad or inappropriate candidates to the employer. When we go through recruiters we spend a lot of wasted time interviewing candidates that should have never been sent to us.
Vitally (vitally.io) | Growth Marketer/Generalist (first hire) | ONSITE: New York, NY | Full Time

Vitally is an analytics platform that provides B2B startups with metrics and insights to drive their success. We are looking for our first non-technical, growth-focused hire. The goal with this position is to help generate early traction as we go to market next month, which means it will start with a bit of creative marketing efforts and continue through with some Customer Success. We are looking for someone to help out across the board, so you should be a generalist and a bit of a hustler.

We are based in NYC and work out of the Techstars office there (we did Techstars NYC last year). If interested, please reach out to jamie@vitally.io. Thanks!

Detailed job post: https://angel.co/vitally/jobs/323347-growth-marketer-general...
memcached reflection: https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-at...
Asking for a friend. If an American was looking for work in UAE or even SE Asia what are some good tools to facilitate that?
While not a security expert, I frequently refer to TLS as SSL, mostly when I talk about encrypted connections in general rather than specific protocol versions.

It's not quite as bad as calling JS Java or vice versa, it's more like saying Java and then saying Java 1.2 and Java 1.8 and so forth.
Funny Animal Videos_Must See This
Does something about this new app make it less useful as a personal communication tool as opposed to business communication, for the use case of how you communicate with your friends?
Political dissidents are imprisioned, forced into labor, and have their organs harvested so maybe speaking up isn't always prudent for them.

The last time there was a big organized push for democracy was the Student Protests which led to the Tianimen Square massacre "US Government files declassified in 2014 estimated there had been 10,454 deaths and 40,000 injured. This figure was from internal Chinese government files obtained from the Chinese government headquarters in Zhongnanhai."

edit: I am not saying its impossible to fight for individual liberties there but it is definitely nothing like the west.
I would be careful to not confuse the news with the underlying reality of the situation. There are plenty of great things happening in America you don't hear about, and plenty of horrible things in China you don't hear about. Long-run, I'll take democracy personally.
Hacking Facebook Marketing the Right Way
... or they don't have the freedom to say they're not.
You wouldn't trust a chain that long with something that sensitive. WOT gives you the ability to have different tiers of trust. If you verified the identity yourself then you can trust it completely. If you accept people verifiying identities on your behalf then you can choose exactly who you trust (ie. not everyone). It not only makes the delegation explicit, it gives you much more fine grained control about how much you can trust a given identity.

I'm not saying WOT solves all of our problems. It only makes it slightly better than verifying every key yourself. But it's better than the CA model because you can make it work for you.