skysight-inc/HackerNews huggingface dataset:
The typical stages of a hiring funnel look like this: new candidate to screen, screen to onsite, onsite to offer, offer to acceptance. The respective ratios for each stage are: 17%, 32%, 31%, and 69%. On average, you'll look at about 88 candidates to make 1 hire. [1]

For CircleCI, their new candidate to screen is 25%. This is higher than the 17% average. Their screen stage looks considerably larger than I've seen at most companies: it's 4 different steps. From the 250 candidates, it looks like 7 go into an onsite. That's about 3% which is significantly below the 32% benchmark. Of those 7, 3 will receive offers (it's not mentioned how many accept those offers). So the onsite to offer is 42%, which is higher than the 31% average. We can't determine the offer acceptance from the data.

I think it's great they're looking at the funnel and conversion rates. Most recruiters aren't able to tell you these figures which is a red flag. The only way to improve those metrics is to know them first and then measure how changes impact each stage.

[1] https://medium.com/@jmtame/surprising-insights-from-talking-...
Sure, but that's not some kind of neutral, organic development. It's something the rich choose to do, in collusion with politicians, to increase their own wealth and power.

Shifting all the "liability" onto workers, creating an economy where everyone but the wealthiest are fungible serfs, is a specific set of values and decisions advanced by these people because it benefits them.
They should release all of their sensor data and logs from the incident, and then some of us could actually answer the question in the headline.

This should be standard procedure for any future incidents.
I think you and me treat email differently than the average person. I saw my friend's email the other day: 26 thousand unopened emails. And he doesn't mind at all. Sometimes he searches through a few days worth to see if there is anything interesting. I think his use of personal email is much more common than my perfectly organized, and usually 0 unread messages inbox.
I mean, having global resource managers is orthogonal to generating the events that cause resource destruction. And you're not 'ripping them out of context's, since the guard objects are still there where you would be doing the resource management manually.

EDIT: and I was the lead for a high availability C++ RTOS. I know that not all patterns fit for writing quality, available code. This fits remarkably well though. Even though we were totally async and didn't rely on the stack for context lifetimes.
>There was an issue with vendors, who were using open source Android (legally), sideloading the proprietary Google play store without permission (illegal) and then selling that to Consumers.

Users are seeing this also with Google's own hardware.

https://forum.xda-developers.com/showpost.php?p=76004552&pos...

The more I read about it, the more I am against Google's actions here.
From @sallykuchar's thread today:

- In the last 30 days, 413 houses sold in SF proper with a median selling price of $1.5MM.

- 33 homes sold in Menlo Park, median $2.59MM.

- Just 20 homes are for sale in Cupertino, with median selling price of $2.3MM.

- Of the 38 homes for sale in Palo Alto, just one, a 1bdr condo, costs less than $1.5MM. 30 day median sale price: $3.08MM.

- 263 houses sold in Oakland. Median: $735k.

I live in a nice, relatively upscale part of Chicagoland, and you could buy 4 of my houses for the median price of a home in San Francisco.

I'm sure it's not the case for all software jobs, but I know it's increasingly the case for security roles: you can get the SF rate even if you don't live in SF. If you have that option, it seems batshit crazy to move to SF. Really, unless you have serious roots in your SFBA community, it seems batshit crazy to stay in SFBA with that opportunity on the table.
Anyone know what those "tweaks" were that helped AirBnB grow?
I feel he leaves out a lot of context and over-simplifies when he says "a few simple tweaks".
When you're living paycheck to paycheck with literally nothing in the bank, being frugal is the difference between a broken washing machine causing debt and life without financial doom from emergencies.
A published library /is/ an interface specification.

Fixing bugs or extending the interface (with additional and possibly corrected parameters) is one thing.

If the interface specification ever needs to have backward incompatible changes, the /library/ needs to be renamed (or at least have a different leading import path).

If something doesn't work, development's answers is always going to be "test it with the latest version" (at least shipped, if not the 'git HEAD').
>By not notifying their users that their data was breached they aren't being honest about how how data is being used.

But they do notify the user unless doing so is illegal (and then, they do so when it becomes legal). You still haven't substantiated this claim of lying, unless you are claiming that "obeying the law" is lying about how data is being used. But again, Google is clear that they will obey court orders.

> They could also set up the system in such a way that their user's data couldn't be mishandled, but they choose not to.

This is also one of those things that appeals to a small group of privacy enthusiasts, but isn't actually a good thing for the average user. The same set of changes that make it impossible to as you describe it "mishandle" data, also make it impossible to recover data in the case of user error. If you're willing to make that tradeoff that's fine, but for most people, the looming spectre of a court order is a much less worrying issue than forgetting one's password.

That may not be the case for you, and that's fine. But to say that not doing that is unethical is a stretch. See this thread[1], where a number of security professionals who to my knowledge aren't Google-affiliated (and me, who is neither a security professional, nor independent) discuss this.

It comes down to the average user's threat model not involving state level actors. Designing a broadly appealing service to respond to that threat is a disservice to the average user, because it comes at the cost of other features.

You personally may have a different threat model, and that's ok. But to claim that anyone who does not follow your exact threat model is lying or mishandling data is disingenuous and potentially harmful.

[1]: https://news.ycombinator.com/item?id=15853477
I’m not quite sure, but I know that in the US many companies "forget" about sales tax if they’re located in a state without, without much trouble.

In the EU, VAT compliance can definitely become an issue, especially with small projects.

Not so much an issue for VC startups, but definitely one for bootstrapped ones. The only way to get a large enough market to survive is to sell to the entire EU, but that means much more work with VAT compliance, and translations.
Show HN: Try hands-on Secure Coding Training that is actually fun
I'd argue that the company does get something back, potentially. Many companies will say to come back after 6 or 12 months to re-apply. If they like a candidate well enough to really mean that, wouldn't it help the candidate to learn what they were otherwise weaker with so they can work that out before returning?

But that's a fair point about waivers not being legally binding.
I don't see any problem here. If you use custom ROM you probably don't want to give information about yourself to Google anyway.

It would be even better if Google reviewed ROMs before certification. I have a noname chinese phone that sends data about the phone including a phone number to China (but Google is not much better - every time you enable geolocation it displays an annoying popup asking to agree to send GPS data to Google. Well, at least they ask for permission).
I agree that Cargo is awesome and I would be happy to see Go follow suit, but I interpret "package management is solved" to mean "the industry has standardized on a single scheme". There does seem to be convergence in this space, but it's a relatively new phenomenon.
> I just have to write these {} things all over the place because every other language is a gramatically bloated mess.

In what way are context-free languages "a grammatically bloated mess?" Whitespace delimited languages like Python have context-sensitive grammars. Now that is a mess.
That is a very concise summary! I still think the examples and detail are useful to explain how we do that at Intercom, rather than simply issuing a statement :)
I use a Yubikey NEO myself which is nice but not a heap of services support it.

Probably my favourite feature, which gets very little attention, is that you can store your MFA tokens on your key. Scanning a Yubikey NEO with the Yubikey app open will show your keys. Lost your phone? It's fine because you can just install the app on your new phone and there they are without being tied to a centralised service.

You can also store your GPG key on it but you're forced to only use 2048 bits over the highest setting of 4096. All it means is you need to have your key in to eg; sign commits which is a bit less convenient than reading from disc.

Oh yeah, I use the Windows subsystem for Linux and it doesn't support reading the Yubikey so it renders GPG signing useless for now. There was an update recently that increased USB support but I don't think it applies for USB hardware keys. I haven't tried though.

It's also worth nothing that Google doesn't follow the U2F spec which means that authenticating with their stuff only works inside Chrome. You can just fall back to SMS or MFA.

One thing I notice with Github is that if I don't have my Yubikey nearby, the only other default is MFA but with my tokens on my Yubikey... yeah, you can't just drop back to SMS so you gotta have it on you (for the first time/new browser) haha

tl;dr They're cool for "important" accounts ie Github, Google, GPG key storage is just ok and storing MFA tokens on it is pretty rad
I made a Haskell Postgres library inspired by David Spivak's work: https://github.com/tomjaguarpaw/haskell-opaleye/
Or, they could just make sure to figure out what they really want and say that directly, instead of having a bag of positive attributes they like then picking the ones that give the right amount of a certain demographic that they want to hire.
Adding ERC20 Support to Coinbase
> Same way you go more composition instead of inheritance.

What does that mean?
Besides one in SF (and a couple in Oakland), all the "Superfund" sites in the "Bay Area" are in Santa Clara County. https://epa.maps.arcgis.com/apps/webappviewer/index.html?id=...
Ah, yes. Sorry, I misunderstood your example, but it is clear now. This is indeed a potential issue and it may turn into a real problem.
I think most startups understand this implicitly, and therefore most pitches are lies. Most of the rest of the comments are about "it doesn't have to be this way!", but it's almost an inescapable local max. The previous big breaks in technology were nearly always the 10X in 1 year types, but it's extremely hard to tell who is actually a 10X in 1 year because they are so extremely rare. Probably impossible, since more likely than not, the 10X is pure luck on the part of a competent 1X than any kind of real difference.

So the sensible 10 years for 1X that will make you profit but not overwhelming profit don't get funded, so the 10 years for 1X have no choice but to lie and get the funding they need, and investors get stringed along with all their sunk costs because most of the time that 1X payout is still a lot more than their sunk costs.
Democrats do not all want single payer healthcare. Only the left wing of the party really wants it, although this is slowly changing.

Center and center-right Democrats are pretty happy with the ACA as it was intended, although often not as it actually turns out in many states. Unsurprisingly, a lot of them take big contributions from insurers and pharmaceutical companies.

I think if single payer becomes widely accepted within the party, you probably will see the "helping entrepreneurs" angle as a big part of the messaging -- individual candidates do bring it up.
Most startups I know would consider this the primary requirement for new hires.
I think this might partially be related to the move towards streaming applications and microservices. You could create objects for everything you expect to receive/send and then when an API changes you lose the new fields, you get parse errors, etc. If you did it right maybe you can avoid some of those things, but the bottom line is that type safety is a little bit too strong a constraint for these use cases.

Even if I'm getting from a DB which won't be changing out from under me, many times I'd prefer just getting a simple Map rather than spending time creating a "safe" object. Do I create a User and UserWithDetails? Or always return UserWithDetails but sometimes fields are empty because I don't care about them? Dicts are light, objects are cumbersome.
The hardware is either certified or it isn't; the distro (as in custom ROM version) isn't a factor.
> Only because the golang core team seem to insist on reinventing every wheel either without considering prior art, or at least without considering why prior art went with a particular approach.

The popular criticism is that Go isn't reinventing enough; that it's stuck in the 70's and it's not sufficiently innovative.
Samsung patents wireless tech that charges multiple gadgets at the same time
I'd argue that's the point of moving from a 2nd year course to a 3rd year one. You incrementally add more complexity. The ISO C++ spec is a similar heavy tome.
Slightly off-topic, but I see this complaint a lot:

> Android distributions that don't pass Google's compatibility requirements aren't allowed to be called "Android" (which is a registered trademark of Google)

This is supposed to be a straitjacket that prevents everyone except Amazon from deviating from Google's Master Plan.

It reminds me of what happened with personal computers, where, amid a field of slightly different hardware from different manufacturers, devices started to be sold as "IBM PC-compatible", which eventually just shortened to "PC" because nobody cares whether their computer has official IBM branding or not.

What's stopping people from releasing phones with an "Android-compatible" OS? Who would care?
Absolutely love LXQt. Amazingly good desktop. Enlightenment is another fantastic low power high feature desktop environment that suffers from the same lack of devs. Both of these have spurred me a bit further into learning coding myself to help out, but real life works always seems to get in the way.
Ask HN: Successful switch away from SaaS?
What other delivery models have you tried? How were you satisfied with the outcomes? Thanks!
Gradle degraded the dependency experience significantly from maven. Maven had a deterministic, sensible (and selectable) way of dealing with conflicts - gradle just defaults to "largest version wins". Similarly, gradle chucked the whole idea of being able to manage common sets of dependencies across multiple projects easily (the maven super pom). I mean, it's all programmable in gradle, but it pretty much ignored the excellent work maven had done except to use its repos.
I understand they have a disorder, and yeah, it's "not that bad", for SOME. But come on. My son has autism. He is 13, and still cannot speak. He has to have 24 hour care. I understand that autism is a spectrum, but realize that what they're talking about here is much different. It's like saying someone has a paralyzed pinky versus a being a quadriplegic.
I don't know if this is the market reacting to user engagement so much as the perception of potentially increased regulatory scrutiny. If USG was doing it's job properly, Facebook's ability to monetize would be dramatically lower than it has been historically. That's the real 'danger' right now from the investor POV.
Cause they can charge you more for international branded phones.
When a field is already mathematical, category theory can help clarify. When it's not mathematical to start with, category theory won't help.
By paying them for their work if you are asking them to do anything outside of an interview.
> Also, lets back up our AI’s with old school collision avoidance! Intelligence is not the same as perfection, at least for now.

The car was travelling at 38mph and never braked. Even if the collision-avoidance only saw it at the last moment it would still have braked and potentially slowed the car enough so that the woman was injured instead of being killed.

I'm all for self-driving and fully believe it can improve on humans, but I don't see how it's possible for self-driving cars to be on the road if they can't properly detect the most vulnerable users in all conditions.
Spotify Listing Disrupts the IPO but Keeps the Costs
How is that different from the property taxes homeowners pay today?
You forgot the housing/rental situation too. In my area, renting is 33% - 50% of _take home pay_ (after withholding taxes), without utilities or property tax.
"full-stack developer" is fairly norm these days in my experience.
There's definitely legal reasons, however the main reason we don't is people tend to argue. "You don't have enough experience in ___" -> "Here, look at these 4 projects I created! You didn't give me a fair chance by asking about them!". Or "You didn't seem interested enough" -> "I was just tired!"

I've found most of the time, unfortunately there's no good in giving details. I realize people genuinely want to improve, but most of the time the reasons we don't hire someone aren't actionable.
It's not generally a significant effect, unsubscribe rates tend to be well under 1%. Most people just ignore emails they don't want.
I don't mind getting offers every now and then, but every week or every month is just too much. I understand that companies are flooding their customers in the hopes they get that 1 hit every x e-mails (since sending an e-mail is virtually costless) but it's irritating and it's not worth (for me) the trouble of sieving through the endless stream of useless junk.

If they want me to seriously consider their offer as an existing customer they could send me a personal discount and make me feel I'm worth something. But I rarely get discounts besides the generic ones that apply to everyone (which you can get just by visiting their website even if you've never purchased anything from them before). And the auto-generated "relaxed & casual" language just puts me off, it reeks of kitsch and disrespect.

"generalized to the point of uselessness" is a very apt description
Show HN: Streaming Matchmaker – Top Streaming TV Service Based on What You Watch
> but everything else is more expensive

Yes and no. One thing to keep in mind is inflation, so we always need to compare prices to average incomes. A house is listed as being <10k in 1940, but the average yearly salary was also <2k, and the minimum wage was $0.30 per hour.

However, things have genuinely gotten more expensive in some cases usually due not to the economy, but due to safety. That's a good thing - we no longer have asbestos and lead paint, cars are safer, and working fire alarms are a thing. However, those things do cost money. You can no longer buy an all metal box that goes 80mph without seatbelts or airbags.

I find the car claim to be somewhat of a red herring. Yes, you need a car now whereas before a bicycle might of sufficed. However, a decent car can be had for two thousand dollars - not a pretty one, but a functional one. You might be able to go cheaper if you have any mechanical ability, but we'll assume the average person doesn't have that.

In addition now of course you need drivers insurance, and you probably need to take a drivers ed course before getting your license. Those things do add cost, but they also save lives.
> I've found that most larger GNU projects have pretty horrible man pages. Probably due to feature creep in said projects - so the manuals have to be large to cover all the features.

Rather, info manuals are GNU's official (self-invented I think) documentation system. They make manpages only because of their popularity, but they direct you to the info pages for more info. When other projects have too much documentation for a manpage, they split it among several pages, like perl, openssl, zsh, git, borg, btrfs, etc. Personally, I like both, and wouldn't rank one above the other.
Isn't this primarily on Android ? Am quite certain no app can monitor your location in the background on iOS.

Regardless What pisses me off is FB not providing evidence to the contrary, that they don't harvest data in the bqckground. Not providing this evidence makes it quite clear that they do harvest this data. The issue isn't about permissions. 'Sir, may I come inside your house, is fine, but ransacking the house once you get is is douchebaggery.
What can the average person do about this system? It seems like it's only becoming more widespread.
I don't find that attitude to be helpful at all in my case. Everything in the official adult world encouraged me to think there was nothing wrong with me. I had the best grades, my teachers loved how good I was at following rules and completing assignments, I did well at sports, and my parents always told me I was great. I was still miserable. My parents did their best to get me to just see myself as "different," even better, but it never changed how frustrating it was that people just looked baffled or creeped out when I talked, and the other kids laughed, or they avoided me. By the time I was in second grade, I was already wondering what the hell was wrong with me, how to fix it, whether it was even possible to fix it. I was not very socially oriented, but I was painfully aware that when I tried to interact with other people, I did not do it like other people did, and I did not get the reactions that other people got. None of that came from a preconceived notion that different is bad. In fact, I grew up in a household with a counterculture ethic and a strong presumption that different is better. It didn't help. It just prevented my parents from figuring out that I had a real issue that needed addressing.
Cambridge Analytic was named as such because it sounds "official" and it helped when they were eventually were hired by Bannon.
I disagree but still appreciate the comment.
Wouldn't be surprised if it is a newer policy, that they didn't have before. I've worked in departments that had programming tests they give applicants that their early employees never took, and freely admit they probably wouldn't have been able to complete if it was in place when they applied.

Policies tend to just get stricter and stricter over time, especially with every bad experience they have (only takes one or two usually before these people go off the deep end trying to correct for it).
A land value tax is not even needed if land-use planning and related regulation would be relaxed.

It seems that almost everywhere supply of housing is being artifically restricted leading to rising prices. This is also unsurprising. Housing is the biggest investment most people have, so people prefer policies that keep housing prices to be ever increasing.

Sometimes it sort of reminds me of "bitcoin for old people". Why invent new things when you can get decent returns on housing? Of course until the bubble bursts. But if that happens the government tends to intervene to a degree, not so for crypto bubbles.
>Presumably this individual has a lot of experience and domain knowledge in testing self driving car

How do you arrive at this?