skysight-inc/HackerNews huggingface dataset:
Ask HN: Good gap year activities?
I’m a US high school senior going to college next year, and am currently looking into gap year programs. I’m open to working, but I figure I have my whole life to work, so I’d like to do some _cool_ work overseas.

Any thoughts or suggestions? Some info about me is on my site in my bio
I won't use them after I tried one of their 'free delivery' codes and then the next time I went to place the same order it came out to the exact same price with delivery included, they seemed to have increased the price of the food to cover it the previous time.
TLS = encryption
TLS = authentication
TLS = tamper proof
9 personal injury landing pages for capturing leads
Dreck does not mean shitty. It means garbage.
I did not went out my way to find a job in the US (I live in Spain, Barcelona) but rather that's just where the project I want to work on happen to be (Protocol Labs/IPFS). I work remote as well, so no move needed (I love my Catalunya!).

Rather than finding a specific location to move to, why don't find a project that aligns with you, and then move wherever they are? (after investigating the location of course)
SEEKING WORK Remote
(I'm based in Baltimore. Limited availability through Q3 but I'm posting this anyway because it helps to plan in advance.)

I help B2B startups exceed their growth goals.

My mission is to help the leaders of world-changing companies achieve their mission faster, smarter, and beyond anyone’s expectation.

Everything I do serves that mission: Whether it’s helping AT&T bring new IoT solutions to market, turning a data science platform into a market leader, or accelerating the growth and revenue for Clubhouse, Crew, Etleap, Inkling, Netlify, Scalyr, Singular, and many other B2B startups.

Founders, CEOs, CMOs, VPs, and even VCs partner with me because:

1. They understand that growth comes from action, not talk. They rely on me not just to provide guidance but to execute—to make decisions, implement systems, lead teams, push code, talk to users, launch campaigns, analyze data, and do whatever else it takes to get results.

2. They want to get the right skills and insights on their side. Having worked with dozens of B2B tech companies—from seed-funded startups to the world’s largest telecom company—and having tested hundreds of strategies, tactics, and tools, I know what works, what doesn’t, and how to do things right.

Send me an email (greg[at]gkogan.co) or read more at https://www.gkogan.co.
Because the Winnie the Pooh meme is about Xi's relationship with Obama and the USA. It comes from photos of them walking together a few years ago. It's not a flattering depiction. More because it was seen as Xi being a little too friendly and kowtowing to Obama. Since then Winnie the Pooh images have been repeatedly banned at politically sensitive times.

[*] https://www.cnn.com/2017/07/18/asia/china-pooh-censor-trnd/i...
Jellyfish | Data Scientists, Software Engineers | Boston, MA | Full-Time | ONSITE

== ABOUT JELLYFISH ===========================================================
Jellyfish is an early-stage funded startup creating a platform that will
change the way organizations connect their development teams to the
business. We're hoping to find a data/feature engineer to grow our 6-person
founding team here in Boston, MA. Full-time only candidates please.

== JOB DESCRIPTION ===========================================================
Currently we are working closely with our customers to rapidly prototype,
build, and refine the Jellyfish platform. We are using a Django stack (Python
3, Django, Postgres) hosted on AWS, so experience with these technologies is a
plus. We are also seeking to augment the team with a more experienced ML
engineer.

== ABOUT YOU =================================================================
Ideal candidates will have two or more years experience building software, and
a bachelor's degree in a computer-science-adjacent field. We will also
consider equivalent experience in lieu of a degree.

Exceptionally interesting candidates will have a background in ML feature
development or django architecture.

== TECH STACK ================================================================
Python (Django, NumPy), PostgreSQL, AWS, Nginx

== COMPENSATION =============================================================
Competitive salary plus equity grant

Email resumes to jobs [at] jelly.ai or you can contact me directly asm [at] jelly.ai with questions.
But to say something was ahead of something else implies a clear path. I think these are separate spheres of thought that make similar claims, the difference is that they make it on different bases.
99 Percent Pay Parity Is Far from Perfect
All of those programs have context-sensitive ribbons?
> The Japanese haven't displayed any aggressive policies since 1945.

That is not at all the view of Japan in East Asia. Their neighbors, including S. Korea and China, distrust and even hate Japan to an extreme extent. For example, S. Korea recently negotiated military cooperation with Japan against N. Korea, but had to cancel it due to public outcry against deals with Japan. Japan is not viewed like Germany; Japan is viewed as unrepentant about WWII, unapologetic, and restrained only by the US and the East Asian order that depends (or depended) on the US providing security so that the countries there didn't get caught in an arms race to protect themselves from Japan (and vice versa), and run a high risk of wars due to the high levels of distrust and hostility.

That view has some basis in fact. Germany took full responsibility for its crimes, has major museums and memorials addressing them, outlaws Nazis, teach their children about their evils (AFAIK), transformed their country, is tied tightly in excellent relationships with its neighbors via the EU and NATO, and now feels a responsibility to be a leader in human rights. Japan has made some apologies which their neighbors feel are equivocal (though the neighbors have their own biases), but AFAIK they haven't done much more. Now their textbooks teach a revisionist history that whitewashes the war (based on a few articles I've read) and right-wing nationalists, who deny the crimes and praise the war, are gaining power.

This disruption is greatly magnified by the U.S.'s withdrawal from its security guarantees, China's expansion, and North Korea's nuclear weapons - all giving everyone there existential considerations. Japan's military expansion is a long-predicted step in a process that wiser people have strenuously avoided since WWII; it begins with nationalism, in the US and E. Asia, and ends very badly.

> may even provide deterrence against others' destabilizing moves in the region

This idea seems to be the first mistake everyone makes about international relations. Escalation doesn't deter escalation, it incites more. The other side won't cower, they will react in fear and/or anger to protect themselves. If you bought a knife to protect yourself against your dangerous neighbor and then your neighbor escalated and bought a gun, would you just say 'oh well' and capitulate? In reality, maybe you'd call the police, but there are no international police; maybe you'd move, but countries are stuck with their neighbors forever; so now what? You're stuck next to this armed crazy person. So you buy a gun and both sides become even more scared, inviting yet more escalation and overreactions. The original escalation provided no additional security; it cost both sides money and made the situation even more unstable and dangerous.

The mission of international relations is to not let B-level conflicts turn into A-level conflicts (said some expert whose name I can't remember).
If you know people in China you can host a vpn for their use. Or you can donate to organizations such as https://noisetor.net which will run tor exit nodes. Although from the sounds of it tor is blocked in China?
ROLI UK is hiring!
| London, UK | Full-time positions available | https://roli.com/careers |

We are a team of people from many disciplines who are creating new music-making devices for the digital age.

Our range of hardware and software products has grown since the Seaboard launched in 2013. And everything we make — from our NOISE app to our Equator software — is designed to let music-makers be more expressive.

Our products connect to others in our ecosystem and to many outside of it, because we want music creation to be as conveniently seamless as other digitized areas of life. By inventing new, connected tools we are extending the joy of music-making to everyone.

Want to join out exciting journey?

We're looking for:
- Software QA Team Lead
- Web Developers
- Software Product Designer
- Senior C++ Engineer
- Product Owner
- Data Scientist

Email careers@roli.com for further info.
There is a lot more to the threat model than "will my content be stolen or compromised?"
This all happened AFTER NATO put misssile defences in Turkey, bordering Russia's sphere of influence which they agreed not to do.

If NATO isn't going to maintain the agreement why should Russia?
I interviewed there as an SRE many years ago (early-mid 2000's)
and I was asked about mathematical algorithms, whether I'd published any books in tech, and what open source I contributed to.

I would have needed to study for a year or more of math since I never studied math in college, and I wasn't just out of college. Even someone with a computer science degree, once they've been a professional for a few years, would need to crack open college textbooks again to pass a Google interview.

Unless they did math as a hobby, which I will refrain from commenting on at this time.
Also, that script was running as root

https://mobile.twitter.com/taviso/status/969230138956136448
Intercom | Product Engineers & Designers | San Francisco | Full time

Intercom is a creative company genuinely fixing how internet businesses connect with their customers for more human conversation. Our teams are made up of ambitious people who take a humble approach to work. We solve problems, celebrate successes, and learn. Together.

At six years old, we have built our organization on a solid foundation with no plans to sell out. But in those years, our processes have often been, and sometimes continue to be, unstructured. We are both well established and a work in progress.

We want you to know, whether you build, market, sell or support product, that if you aren’t afraid to be a little scrappy and make a real mark in this industry with us, we want you, too.

Product Engineer, SF -- http://grnh.se/4vldoi1

Senior Product Engineer, SF -- https://grnh.se/7d8kpd5k1

Senior Product Designer, SF -- http://grnh.se/87f0vu1
Your comment comes across as pretty hostile, e.g. that I personally am someone that cannot "simply disagree", that I'd rather "escalate quickly to aggression and personal attacks", etc. You're not attacking me personally; you're attacking everyone (indirectly).

I hope you can surround yourself with better people!
Capsule8 | Front-end Developer, Full-Stack Developer | Node, Javascript, CSS | ONSITE: Brooklyn, NY | Full Time

Capsule8 is building the industry’s only real-time attack disruption platform purpose built for the cloud-native world of Linux, containers and microservices. Capsule8 automates the detection, isolation, and shut down of attacks in the instant they happen.

Check out our recent posts using our open source tools to detect Meltdown and Spectre abuse! [0][1]

The job is onsite in Brooklyn. Ideal candidates have 2-4 years of professional experience (with React or Angular for frontend candidates) and know how to apply engineering techniques and discipline to Javascript and CSS.

I lead the app team; email me at phil@capsule8.com if you'd like to chat!

[0] https://capsule8.com/blog/detecting-meltdown-using-capsule8/

[1] https://capsule8.com/blog/detecting-meltdown-spectre-detecti...
It seems to be the mentality lately that nobody wants to fix existing stuff and make it better. They want to launch their own disruptive startup, library, whatever. It's true in job boards, it's true in code libraries and tools as well.
That seems like a very engineering-skewed perspective on knowledge. I'm not sure how that advice could apply to a philosophy or sociology student. If doing means writing research papers, then that is going to be a hugely inefficient way to learn all the things they need to learn. They won't have the resources to write a paper on everything they read. Some of it needs to just go down the subconscious, rapidly and in large quantity, for quick reference later on.
Social Prescribing has only ever had a negative outcome on me, as well as most medications. Zoloft made me extremely suicidal, Lamotrigine for mood stabilization made me lose my hair. The only medication that's ever worked for me is addictive, and prone to abuse. It helps with my severe social anxiety, and prevents rumination. Because of the addictive nature of it, I do not take it.

I understand that things such as "social prescribing" may help some, but it is detrimental to me. I have no desire to be forced around a group of people that I have no known common interests, and may have none.

I feel that reading the majority of discussions to treat depression fall short in my case, as a lot of them involve other people or outdoor activity. My general disregard for other people and existence as a whole tends to be an issue.

I'm sure this can help some, but it seems to just be what most people understand already.
> become petty and take everything personally because they think they can afford to do that.

Not just dictators but also, as we've seen recently, US presidents too.
> HTTP is generally secure

This statement is wholly incorrect. HTTP is not generally secure.

> for publishing

When I publish something I do not intend for third parties to interfere with the delivery of what I publish.

> and has the added advantage of being cacheable by proxies

If you trust your proxy, you can still have cached data at your proxy. If you don't trust your proxy, then why are you proxying through it?
Trustico Code Injection as root
You did not do any research at all?
It's sarcasm. Note the last element in the list.
Freemake Video Converter 4.1.10.54 Crack and Serial Key Free
DuckDuckGo | Frontend Engineer | Paoli PA | REMOTE, VISA

DuckDuckGo | Backend Engineer | Paoli PA | REMOTE, VISA

DuckDuckGo | Frontend Engineering Team Lead | Paoli PA | REMOTE, VISA

We're looking for candidates that are excited to join us in raising the standard of trust online.

More info: https://duckduckgo.com/hiring/

In addition, this position isn't up yet, but is coming:

DuckDuckGo | Legal Advocacy Manager | Paoli PA | REMOTE, VISA

If you think you might be right for the legal advocacy manager position, please feel free to reach out to me directly: yegg at duckduckgo.
Cue the intro to Bohemian Rhapsody. This is a huge WTF. SQL injection? Too basic. We do raw shell injection now. To a CA.

Welcome to the future of computers where security comes secondary to extra profits and marketing.
> TL;DR: Forget your EV or other certs. Just run “Let’s Encrypt”. It gets you a cert, it’s fresh, and it does not make any difference whatsoever. At least not any you or anyone else can check for, or cares for.

Let's Encrypt shut down their new test interface because of a security flaw they found. If this was in a production service, this would have been about as bad of a security flaw as is possible in a PKI system.

Let's not get all high and mighty assuming Let's Encrypt won't get compromised; they probably will. We should be planning for how to deal with that.
> programs like those can be scaled back

"can" does not equal "will"
> but they're covered by the Computing Accreditation Commission which doesn't qualify graduates to sit for the FE exam.

Wait, are you sure about this? When I was in school, they pushed CS/CE students to take the FE Electrical and Computer exam. I never signed up, but why would the school nag students to do something they weren't allowed to do?
Up until a few years ago there was a <keygen> tag which embedded a x509 CSR generator into a regular HTML form. The private key was generated by the browser(1) and was completely inaccessible to the site or any JS running on it. That's the proper way to generate certificates in browsers, but it's been removed since and was never supported in IE.

StartSSL used it, for example, but also allowed you to hand them a CSR of your own making. Although they of course ignored almost everything in the CSR apart from the public key (which is probably a good idea).

(1) IIRC you could even have a smartcard generate the key, at least in theory.
Avoiding premature optimization is one of the most important best practices of modern software development.
These are anti-missile missiles. They can only strike other missiles in the air (unless you know more about the tech than I do). The USSR's missiles in Cuba were missiles to strike land targets.
Grownetics | Application Developer, Platform Engineer, INTERNS | Boulder, CO | Full-Time/Contract | REMOTE

Grownetics is the most advanced cultivation management system for greenhouses and indoor farms. We combine high resolution crop sensing, open automation systems, and individual plant tracking from clone to cure so you can make sure you're growing better every single harvest.

http://grownetics.co/careers/
Forget drugs, I wonder how many people have been killed by the additional emissions from all the extra electricity being generated to power Bitcoin alone.

It's virtually impossible to measure something like that of course, but the WHO estimates about seven million premature deaths occur per year due to air pollution, and certainly some portion of that pollution comes from electricity generation. With the enormous amount of power being sucked up by cryptocurrencies, it's not unreasonable to think that they're directly causing some non-insignificant amount of sickness and death.
Synthetic Topology of Data Types and Classical Spaces [2004][pdf]
Mine is also more than 3 years old. I hesitate to upgrade because I don't want to lose my headphone jack, but also I don't need to upgrade yet because it still runs fine.
The Problem Isn't the Use of Analogies but the Analogies Courts Use
Original (and much more accurate) source: https://www.digicert.com/blog/digicert-statement-trustico-ce...

HN discussion: https://news.ycombinator.com/item?id=16485801
Wow, 1.35Tbps? That's a lot for a DoS attack, right?
It helps Apple by driving the tolerable purchase price (and therefore tolerable profit margins) up.

Put another way, they capture the same share of your computing budget and of the App Store market but build fewer laptops and phones.

Also, Apple is highly diffentiated at the high end (walk in repairs and support, long software compatibility timespans). Driving up expected lifespans makes their offering cheaper than the low end in the long term, allowing them to capture increasing percentages of the total market.

They just need to execute better on the software and industrial design side than they did in 2017. Laptops without usable keyboards, the new busted gesture based iPhone UI, and iOS 11.0 are all bad enough to force long term users to other ecosystems.
> there should probably be a law that says an electronic device has to be supported until at least 80% of the units stop being in use

Maybe not a law, since it seems like a bit of an overreach to force a company to continue working on a product they don't want to, but some sort of incentive program would be interesting.
AFAIK job posts are not paid, they are a benefit to YC companies. I think it is fair to not open them to comments, as it would be a distraction from the main purpose (advertise the company).

They are also not subject to voting, they have a fixed path through the front page.
That’s not censorship. Censorship is when the government restricts speech. The government doesn’t control American news media.

With that said I have no disagreement about the hypocrisy of USA bombing foreign countries.

As for shooting, how would we know if this happened in China since the government does control the media there. They could suppress anything they reflected negatively.
That is a really interesting idea. But if we pick words by randomly pointing at a page in the book we might need take into account how big the words are in addition to how frequent they are.
Oh my. There must be some sort of hall of fame for security vulnerabilities. And this belongs in it.

Perhaps they’re passing this command to a secured container? I shouldn’t make excuses for them, but passing root commands to the shell seems too far out there.
In some countries, simply belonging to the political party not in power is reason enough.
>contribute to or extend

I don't think it's that simple. Sure, I could spend time figuring out the GNU Make source code. I could somehow shove a C preprocessor into it and make it automatically generate dependencies based on include directives. I could make it depend on clang. Will the make maintainers accept my patch if I send it their way, though? Somehow I doubt it. What if I changed the make language to make it easy and unambiguous to write paths with spaces and other problematic characters in them? Do you think the maintainers are going to accept a patch that will most definitely break existing makefiles that work perfectly fine just because I fixed a major limitation of the program? We're talking about a tool whose grammar requires that commands be prefixed with a tab just because the author experimented with that rule and then couldn't change it because about a dozen friends were already using it. Fixing make is simply not possible at this point. If you try, it will just become yet another incompatible tool, some kind of make derivative that will have to be maintained independently. At this point, why limit yourself to make? Might as well rethink the whole thing.

As far as GNU/Linux distributions go, make and autotools are the default. If you're using anything else, it's gonna be a build time dependency that people are going to have to install in order to build your program. So you look at the other tools and you find they don't quite do what you want either. They only do about 80% of what you want, and getting it to do the remaining 20% makes you really wish the tool was an actual programming language instead of a limited build script. Is it any wonder people roll their own?

Also, I believe people should work on what they personally like. There is no obligation to contribute to some project just because it's "standard". It's an interesting problem that's difficult to solve, so it's not weird to see lots of people offering their executable opinions on how things should be done. If programmers don't like what's available out there, they are welcome to try and come up with something better. Who knows what will happen? Maybe the new wheel will turn out to be better than the current one. Maybe it won't. It might introduce new ideas that will influence new designs. These ideas might even make their way into other systems.
Apple, Inc. | Cupertino

-- Siri --
Apple’s Siri is looking for exceptional engineers, designers, and project managers well versed in machine learning, natural language, speech recognition, server automation, and/or mobile software development. Siri is used on countless iOS, tvOS and watchOS devices and handles over a billion requests per week.

If you’re passionate about Music, Natural Language Processing, implementing UX features, or one of a variety of our open positions, you’ll be right at home! We have also begun expanding our team in Ottawa, Canada!

Apply online or send a resume to brittanyd@apple.com.

-- Security Engineering --
Apple’s Security Engineering and Architecture group is looking for senior security engineers and DevOps specialists to help us build systems that protect
customers with leading privacy and security technologies.

Successful candidates will be generalists capable of tackling challenging engineering problems anywhere in the stack, from the kernel and firmware to cloud services and applications.

Apply online or send a resume to nectar@apple.com.