skysight-inc/HackerNews huggingface dataset:
Snapsheet | Fullstack/Data/Mobile Developers and UI/UX/Product Designers | Full-time | ONSITE | Chicago, IL
At Snapsheet, we work with the auto insurance industry to provide a better claims process for drivers, repair shops, and carriers. If you've seen a commercial where someone takes out their phone and opens an app after a car accident, they're probably one of our clients. Many of our clients are fortune 500 companies, but we're still relatively small with around 300 employees, half of which work at our office in downtown Chicago.

In 2018, our goal is to build new products and make our existing products better. To do that, we need engineers of all backgrounds and experience levels to join our team.

Our core stack is React+Rails hosted on AWS/Heroku, but there are other projects in various languages. Our primary product is an internal CRM, which is supported by tools we've created for body shops or car rental services and of course our mobile apps.

Worth highlighting: We have bi-weekly hack days, where we actually produce new products - nothing is left sitting on a local branch gathering dust. We have good benefits/pay, unlimited PTO, and a team of smart people that genuinely enjoy each other.

For more information email me directly robert.goetz@snapsheet.me. You can also check out our company or see/apply to open positions at www.snapsheetapp.com.
The Intel chip is definitely along the biggest line items on a Mac. Apple can cut that cost by 70-80%.
I expected down votes, of course :)

But the lack of explanation for how and why FB should be held accountable for history is a bit disappointing.
We are not Equifaxes customers. We are Panera Bread's customers. There is some risk if you directly expose the customers. There is less risk if you lose a third parties data.
Just to clarify, the STEPS Project has ended (Oct 2012). HN had a discussion on their final report not too long ago: https://news.ycombinator.com/item?id=11686325
I still don't get it. How do other frameworks help on the frontend side? On Rails you're on your own, frontend-wise.
I use dead Austrian economists: "mises", "menger", "hayek", "lachmann", "kirzner".
> Then publish your damn results in a damn open journal, dammit.

Discoverability is hard. I mean, forget academic papers, take a look at just the web, and how many years it took Google to create a search engine that made discoverability easy, and that exploited (originally) the graph structure of the web. Papers do cite other papers, but how do you check a paper's relevance? Moreover, papers often describe something very specific, a specific approach, and searching for that approach is a lot harder than looking for a page that is "Haskell tutorial".

An open journal isn't the answer here (it is the answer for other things though imo) and I'm not sure why you're getting so angry.
Editing iPhone Footage in Sony Vegas Pro
Being charitable, I think the more likely explanation is that CTOs/CFOs do not understand how easily these things can happen, and how much data can be exposed by a "small" mistake.

One line of code can expose 30,000,000 records. That's hard to get your head around if you are not a programmer.
SemiAccurate has reported this all the way back in 2012 that they had a ten year plan to switch to ARM. I’m not surprised.
I've heard some prominent academics speak to the same end, or farther, in the rare access I've had. (Yet with displaying no less passion for their chosen subjects. Who would have guessed!)
Forget complicated questions about corporate policy, the costs of verifying security, the limited negative impact that companies seemingly face when problems like this happen. Those questions are definitely interesting, but they're hard questions and I'm not in the mood for hard thinking right this second.

What blows my mind here is the actions of a single person. The Security Director got an email about a dead simple vulnerability in his company's website/api. All he had to do was paste a single link into a browser to verify that there was a big big problem. And he did nothing?

I simply can't understand that.

What was this guy doing every day? Did he have any sense of professional self respect at all? Did he think it would just....go away? It's so confusing.

Do you think he....didn't know how to decrypt the PGP encrypted description? And that he was too embarrassed to say so? In a weird way that's my most charitable explanation.
See RFC 2100 for additional commentary on naming host:

https://tools.ietf.org/html/rfc2100
Deploying a Node.js application to Azure
OK. I don't think this is the solution you're after if your problem includes "crowd sourced video".

Nudity detection though - I'd probably at least try doing something like "Check every 50+rand(100) frames, and only examine more carefully if you get hits on that sampling". Sure - that's "game-able" - but subliminal nudity isn't something I'd expect trolls or griefers to expend too much effort to slide past your filters...
The annoying thing is we seem to be getting fatter and no one seems to be able to nail it down.
freedom.
> While her article complains about the results of machine learning algorithms, and how horrible they are, she said nothing that showed an understanding of how they actually work.

This is from the article:

> In this case, the clicks of users, coupled with the commercial processes that allow paid advertising to be prioritized in search results, mean that representations of women are ranked on a search engine page in ways that underscore women’s historical and contemporary lack of status in society — a direct mapping of old media traditions into new media architecture.

or as you put it:

> The actual problem is in the data available to Google of what people click on.

As for the "Her diagnosis is that Google is a racist and sexist company" and "literally get a requirement to hire politically correct thought police", I'm curious how you arrive from that article at these conclusions.
I'm all the way over zealous rationalism.
"Hey @panerabread : before making half-baked statements..."
Because an unhinged Twitter addict with access to nuclear weapons is bad for business?

More seriously, there's a lot of uncertainty affecting the US political and economic prime movers that's not priced into the market, for reasons I don't understand. You could have knocked me over with a feather when a con man with his own private parking spot at bankruptcy court won the Presidential election and markets went up.
I've found some people who run OpenBSD tend to quite like Arch-Linux style systems, there are similarities in terms of minimalism, it's probably the most Arch like of the BSDs. The install process is similarly more hands on also... unlike say FreeBSD's installer which you can almost just keep pressing the return key on.
Why would nVidia want to do that in the first place?
Ah, thanks for the tip. Fixed now.
Google Image Search Broken with TypeErrors
Planning to write a blog post soon! :)
Of course.

I've met the ex-Chief Judge of the federal circuit, Randall Rader, a number of times (he also taught a class i took in law school at GWU).

He's definitely not stupid, is cognizant of how people view his decisions (he said "they loved me when i wrote nintendo vs. atari and hated me when i wrote other things"), and really did believe he is making things better.

Of course, i strongly disagree, but like i said, it's not like he doesn't understand the issues.
Location: San Francisco
Remote: Yes
Willing to relocate: Possibly
Technologies: JavaScript, React, node.js, css, Python
Résumé/CV: https://www.dropbox.com/s/w9qm7df5gxcyog0/charles_lawrence_resume.pdf?dl=0
Email: charles@geuis.com
What would you automate first?
Hey guys what would you automate first online if you were given advanced work automation tool?
"No, Panera Bread Doesn’t Take Security Seriously"

I didn't expect this to be an actual description of a security event, but just a rhetorical observation: of course Panera Bread doesn't take security seriously. There's no "security" in the name of their company. They are not in the security business. I think they do actually take bread seriously. And store location, and customer service, and stuff like that, because that's the kind of business they are.

Because of PCI you can expect they probably do handle your credit card (except apparently the last 4) reasonably well. Because of other regulations you can expect they take food safety seriously. They take basic business operations seriously because there's a bunch of professional business-runners, and they know they really have to.
Facebook is in trouble because it sold political influence at a price that previously non-mainstream actors could afford

I’m curious exactly what you mean by this. If you’re saying that their paid ads system works well, that isn’t specific to political influence. Further, the recent scandal was over data abuse by third parties, and the reported effects of that have been proven to be dramatically overblown [1], so I assume that isn’t what you’re referring to. Finally, the notion that enough votes to change the election results were suppressed/changed by some Russian fake news articles mostly written in broken English is laughable.

So what exactly are you referring to here?

[1] http://www.businessinsider.com/cambridge-analytica-facebook-...
Obvs he's complaining that the video didn't cite his work. :) One of the differences between researchers and tinkerers unmentioned in the article: vanity.
Those are certainly downsides, and that's fair enough. The last Dell tower that I used was from about 2008 (Precision T-something). I remember adding a hard drive and RAM to it without trouble, but I can't talk about their non-business line, or larger modifications like replacing an expansion card or power supply.
Because it's not possible to predict who is next and the market hates uncertainty.

So it's not just Amazon but any potential future target that may take a hit.
As written, the code in the blogpost is good for IO limited things. But as it notes, if you replace 'ThreadPoolExecutor' with 'ProcessPoolExecutor' then you get actual multiprocessing, and you may be able to get speedup on compute bound tasks.

The linked repo looks like some nice wrappers/decorators around the 'old' multiprocessing library to make it really easy to parallelize a bunch of function calls within a blocking function.
Interesting - the author, Don Libes, is also known for Expect:

https://en.wikipedia.org/wiki/Don_Libes
Elon Musk just took charge of Model 3 production
Can confirm. Have that same router; same issue. 1.0.0.1 works fine, though.
Atleast their bread is better then their security...
Going three years uninterrupted free credit monitoring now. I'm so glad my run will get extended courtesy of Panera.
>Further, the recent scandal was over data abuse by third parties

The most recent wave of Facebook's ongoing scandal revealed that data abuse by third parties was one implementation detail of Facebook's complicity in Trump's election. Facebook's troubles (calls for breakup, regulation, etc) started over its crime of making political influence too readily available to extremist ideologies.
https://news.ycombinator.com/item?id=16727869

https://news.ycombinator.com/item?id=16732820
that only matters for large data centers and mobile. for laptops and desktops raw power matters.
Please don't include ASCII art in your posting.
The title is a retort to a statement they made about "we take data security very seriously" while lying about solving the problem.
This does not hold at 10nm and below.
Street Fighter II: AR gives new life to video game
Its better than nothing, but you still have added extra risk by doing it this way:

Are all the VM's exactly the same

Can you 100% prove that the vm behaves identically on all the varied hardware.

And no "professional" would consider "Everybody likes something different" is ever valid for a paying job!

No problem if its a hobby project but on a project with even a small number say 5 or 6 the risk isn't worth it.
another factor is that you are very defensive if you spent a bunch of time getting a phd and someone didnt and is still able to do research as well as you. and im sure its not very common, since getting good at something requires lots of time and energy. but i bet it does sometimes, and thats probably one of the reasons why some of the healthy tissue is killed
Islamic laws explicitly allow multiple wives and I know people who have multiple wives. Here in India the top body of Muslims (AIMPLB) is now fighting a revision to the law that delegitimizes it (the right to have four wives).

The strangest thing is that there's a sizable number of women who support the law in its current form. Religion is difficult to comprehend.
I used Linux as my desktop OS for around ten years.

I learned, the hard way, the truth of the cliché: Linux is free only if your time is not worth money.
Not all developers are writing server side software.
What is truly disturbing here... who wrote these firmwares? You'd think something as widely distributed as an Internet gateway for a major ISP would be written by someone who at least know some Internet basics (like which IP ranges are public and which are private). And, how do you test if this can happen. And if they made this mistake then what else is lurking in that particular piece of software?
I don't really like these kinds of articles. It's like "Hey, look, publicly shame this non-technology company that probably never gets bug reports for not jumping to immediately fix my bug report!"

Seems (just a little) like bullying. I'm sure I could do the same to lots of auto shops around my city that have really basic websites and then publicly shame them for not investing enough in security even though security is the biggest money sink ever that never gets fully solved.
The @ symbol reminded me... not sure if it's still true, but about a year ago you could create a password that contained an @ symbol but you couldn't login with it in their mobile app.

Also, sometimes when I give them my phone number for my loyalty card it works, and sometimes it doesn't... an alarming number of times it doesn't work, all of which makes me think they have some questionable IT practices going on. I should have seen this coming.
Yea, food engineering is particularly problematic.

If you are going to scientifically remove all the fiber from a food item, then boost its calorie content even higher with added sugars and oils, don't be surprised when people gain weight.

Fiber is a huge hunger modifier. It's hard to overeat 'bulky' lower calorie foods. The fiber takes longer to digest, and doesn't complete the digestion process until the small intestine giving the feeling of fullness longer than something made out of simple carbohydrates.

But hey, letting Conagra sell bright colored sugar at the lowest subsidized possible price is the American way!
It's 80% there, but for an advanced Excel user, libre office calc feels like Excel from 2005. I'm sure it can do everything advanced users need, but it's slow and clunky at times.
It picked me.
Yeah. He probably googled "How to generate a PGP key", then he generated it, sent it and then he was not able to decrypt it or didn't do it, possibly out of laziness... But also given the current state of the website they probably don't even know how those APIs work either.
This is spot on. These are chaotic systems we're talking about, in our very bodies. Not only that, these systems are literally embedded in our very senses. In many very real ways, they are the medium of our senses.

Because of this, I strongly disagree with the following statement:

> We’re pretty darn sure no one else knows anything about nutrition, either. Please don’t listen to “alternative” nutrition quacks. We’ve been there, and we know.

The reasoning goes like this: "if we can't figure this stuff out, no on can!" That's sheer hubris. These kinds of systems are sometimes best tackled with idiosyncratic methods.

Well, that's false. The reality is that everybody knows about nutrition, otherwise they would die. Nutrition is an evolutionary, messy, irrational art-science.

It's just important to understand that everyone's body is a unique, multifaceted universe of sorts. What two people have in common, nutritionally, could be totally off for a third person.

"And we know from a purely mathematical point of view.... that except for a very very tiny set of special cases, we haven't clue what will happen with the 3 body problem."

Yet there are dancers who perform spectacular 3 person pieces all the time. Go figure! That should be "impossible" but it's not. Because life is infinitely more nuanced and wondrous than closed-minded "scientists" want (you) to believe.
Commenting only on the speed of response (or the glacial interpretation of it in Panera's case):

For companies operating in European Union, the General Data Protection Regulation (GDPR) (1) mandates that such breaches need to be disclosed under 72 hours. The implementation deadline for GDPR is by end of May 2018 (~7 weeks to go).

Underarmor, a US-based sports apparel manufacturer, who operates in EU as well, recently had a breach that affected 150-million users, and went public within 3 days of discovering the breach (2).

I believe UnderArmor's case is the norm we can expect going forward.

(1)https://en.wikipedia.org/wiki/General_Data_Protection_Regula...
(2) http://www.bbc.com/news/technology-43592470
This seems like you are being argumentative for no good reason. You may have misread the above post.

It seems to me that jacobolus was not defending vaping but merely wondering if we're all being a bit over-reactive at this point.

That position is not so much comparable to your referenced four-dog-defense as it is to something like "you've got a better chance of being killed by a lightening bolt than killed in a terrorist attack".

And that is a valid point to make when discussing any issue involving risk. Humans are prone to reacting to perceived risks without considering comparative risks factors.
https://www.schneier.com/blog/archives/2006/11/perceived_ris...
How about: "There is no such thing as a 'Linux container.'"

Followed by: "Now let's talk about namespaces and cgroups."
How far up the chain is Sr Director of Security at Equifax? That sounds 2 or 3 rungs from CEO? Or is it just corporate speak?
The problem is not "had to go copy/paste something from the internet to make it work".

The problem is "didn't work out of the box". Using Linux as a desktop OS can be a death-by-a-thousand-cuts experience. Sure, whatever problem you run into there's probably someone who's figured out how to solve it and posted instructions online. But if the solutions are known, then the operating system shouldn't have those problems out of the box.
I use names from the 2003 Cincinnati Bengals roster.

I can't wait until I need to use t-j-houshmandzadeh.

My cloud hosting account uses players on the active roster; my little hobby home servers use players from the practice squad.

https://en.wikipedia.org/wiki/2003_Cincinnati_Bengals_season...
You would think so.... but I've seen big companies with security type departments, who operate in the tech industry, that have executives that represent them well.... and they spend a lot of time explaining to other executives why they shouldn't sue that security researcher who just did us a favor.... or why engineering really should maybe fix that bug rather than put it off...

Even in companies where good people try to do the right thing security fails not just like this case where they just chose not to act, but also because nobody else at the company cares / is knowledgeable enough to care.
Which Country Handles Student Debt Best?
the only way security will ever be taken seriously us if there are fines for leaking data. $1000 per user per incident. Nothing will ever happen otherwise. There is zero incentive.
You're totally right. If the voice communication was more crucial, I would definitely think twice before going with this scheme.
>>If you are working problem X and people have looked this problem before, you should think doubly or triply before you claim your step-forward is necessary because people as smart as you already tried to think of everything.

> At the same time, such reasoning is used to dismiss or discourage new attempts, often unfairly

Well, if you use such an approach of considering previous work, you will have the tools to show you why your work shouldn't be dismissed (whether you are believed or not is a different matter). If you aren't looking at earlier work, not only do people have good ammunition for dismissing your position but it really is hard to be sure you haven't just repeated something.
Did you notice the part about his previous job as the director of security for Equifax? He is obviously clueless about technology and security.
I use mythological gods when naming my devices. For example: loki, odin, thor, and zeus. I like short and easy to remember names.

What naming conventions do people use for storage devices? I recently created a zfs pool and ended up reusing the computer name, but it becomes a bit awkward to say you're opening foo on foo.
Again, you aren’t explaining your basis for the idea that Facebook actually has political influence to make available to anyone. The idea that CA’s strategies worked to any degree has been disproven.

Also, not to get political, but would you be this upset over it if the other side had won and it turned out that they had employed a similar strategy (even if it had been proven ineffective, as CA’s strategy has)?
All the technology in the world is not going to fix human nature...
No, that is nailed down. We eat more calories and we do less. We eat out more and restaurants are economically motivated to sell larger portions because people feel it is a better value. There are more high calorie snack products available in more places for lower prices than ever.

Education mostly doesn't work. Most people can consume huge amounts of sweet/fat/salty food, far beyond there caloric needs, even when they know it is bad for them. Maybe the small portion of humanity that can execute portion control inherits the Earth. Maybe we lock down businesses freedom to pettle crap foods to addicts. I'm not sure what the answer is.
Captive.apple.com or msftconnecttest.net/redirect
They hired the former head of security for Equifax. You can't get much more serious about security than that.
You think people are going to stop buying Panera Bread because of this?

There are no fines. People don't stop purchasing stuff from them.

The risks of not following security practices are so low that it makes logical business sense to not care much about them.

Now, say if we add fines on these security breaches. Proper fines, say % of global revenue type fines. Then yeah, they'll start caring.

Until then, wait for more of these security breaches.
Agreed. I rented a Model S a few weeks ago and drove it around southern California. The autopilot was a nice gimmick, but I really only used it in the stop-and-go traffic jams SoCal is famous for. There it was a godsend.

The rest of the time, the pleasure of driving such a responsive machine made the autopilot superfluous.
idk, 8 months is a pretty long time not to fix something as egregious as this. This is definitely not "immediate" by anyone's definition.
Eh, Abs are made in the gym. Fat is made in the kitchen. You can be both skinny and not ripped at the same time.
It limits you to 120-odd options, but that information is a quick web search away so I'm not sure the issue you mentioned is a huge restriction. Google provides it in their quick results search for "strontium atomic number".