skysight-inc/HackerNews huggingface dataset:
ThreatMark | Full-Stack Engineer, Machine Learning | Remote | Czech Republic

When someone steals your credentials, whether it is bank, crypto account or email, it is unpleasant experience.

Our goal is to remove fraud and simplify authentication in online world.

We develop threat detection (malware, phishing) with behaviour biometry which recognizes
returning users by their mouse movements, keystroke timings and sensoric data.
We manage dozens of TB of data and provide realtime scoring in milliseconds driving authentication flow (log in / 2nd factor).

Stack: python, sklearn, javascript, kotlin, cassandra, redis, docker, openstack, kubernetes, prometheus, grafana
Data stuff: Random forests, gradient boosting, markov chains....

We developed in-house:

- Device fingerprint recognizing returning devices without any persistence

- Behavioral biometry

- Dynamic JS obfuscator

We are three years on market, backed by two VCs and we are going to have about 2M$ revenue this year.
Even that we work with top EU banks and goverment agencies we are NOT a corporate ourselves.
I still code with the team, we just have fun, solve hard problems and get stuff done !

Are you tech/security enthusiast ? Do you often live "in the flow" and loose track of time ?
You know what happens, when EIP register points to address with 0xCC ? Could you implement O(n*log(n)) sort ?
We are looking for bright minds to join our engineering and data science team.

We are looking for positions:

- Software engineer

- Data scientist

If you are interested, please email me @ krystof.hilar@threatmark.com with subject "HN Who's Hiring October 2018"

Krystof, Co-Founder & CTO
Blue Canvas | Sr. Engineer | San Francisco or Remote | ~$100-120k + equity

Blue Canvas (https://bluecanvas.io/) is a source control product for the Salesforce developer ecosystem.

We've built a hosted service with automatic source control that "just works", and modern tools to review and deploy updates. We are in a growing, opportunity-rich enterprise market: For every $1 paid to Salesforce, $3 more are spent on customizing it.

Looking for a Python, Go or Node developer to join our 3 person team.

So far we have hired slowly because we believe in maintaining high-revenue per employee. We admire companies like Basecamp, Mailchimp and Atlassian. We are funded by customer revenue and Indie.vc (http://www.indie.vc/).

Our stack is primarily Python and Go (Node.js developers interested in learning Go should also apply). You’ll get to work directly with the CTO on important technology decisions.

Email team@bluecanvas.io if you're interested. No recruiters please.
If he wanted to have a conversation about there being a better method than quotas for overcoming these social problems, I wouldn't have a problem. But that's not what he said, he tried to make the argument that women are worse at physics than men, which is not only patently false, but (I should think) understandably offensive to all the women physicists who do excellent work in the field.
"From the op article"
It’d be nice if you could have the equivalent of a docker image for your phone.
We wanted to switch to a Linux-based NAS. There was a major issue though: EXT4 does not support long enough directory / file names (or paths). As a result of our extensive folder structure and file naming scheme, we ran into all sorts of issues. In the end, we made the jump to Google Drive where security is probably better anyway in comparison to a local NAS.

(Your mileage may vary as usual.)
So a TV version of RPGs? If it proves to be a success, I wonder if they'll make the beginning and middle interactive as well? Then why watch TV when RPGs are so much better?
They haven't used mac servers in more than a decade long before they discontinued Xserve.
Affirm - San Francisco, CA - ONSITE

Sales Engineers, Solutions Engineers, Partner Engineers

We're hiring for a wide variety of customer facing technical roles at Affirm on our Partner Engineering team. Affirm has found great product-market fit for our ML based credit underwriting algorithm.

These are enterprise roles where you would be working with Fortune 100 companies to help them implement our vision of providing honest and transparent financial products.

Sales Engineer: https://jobs.lever.co/affirm/78a70280-f8ff-4619-aa3b-7238952...
Solutions Engineer: https://jobs.lever.co/affirm/4ae56cb5-6d3a-424f-b6df-7dc7a95...

Even if you don't think you are a perfect fit, but are interested in customer facing technical roles in general, please apply to one of the above, and note it in your cover letter / other information field. Mention Hacker News for sure.
Can you specify an appropriate forum in which he could have presented his findings to the public without upsetting anyone?
Cloudflare | Austin, TX | Full-Time

I'm looking for a:

* Product Manager to work on Spectrum (proxy all traffic on the internet, not just HTTP)

* Engineering Manager to work on Cloudflare Applications (allow users to install applications backed by Workers on any of Cloudflare's 9 million sites).

* Engineering Manager to work on Storage (extend our recent KV offering that was featured on Hacker News and do something way more ambitious)

At Cloudflare our Engineering Managers and Product Managers are very technical. They work with small teams that have a large impact on the company and the web.

For the Engineering Manager positions, email me directly at joaquin at Cloudflare. For the Product Manager, apply directly at https://boards.greenhouse.io/cloudflare/jobs/1117489?gh_jid=....

--

Joaquin
Engineering Director @ Cloudflare
You are correct. I've simplified a bit: I boot from a 50GB decoy root partition that also has a 450GB decoy data partition along side it, both encrypted with the same weak password. This is a standard configuration and the machine works perfectly fine, you can write inside the decoy root as much as you want, as Linux would do when it boots. The data partition is largely empty and you haven't written large files there for some time, but that should not be suspicious by itself.

In the free space of the large data partition there lives the sensitive hidden root. It's maybe 250GB, with a 100GB offset from the start of the decoy data, and 50GB guard space at the back, where ext4 writes all sorts of crap. So you get to use about 50% of your raw disk capacity inside the sensitive environment, as a single encrypted root.
It's the 21st century, so maybe you should upgrade from 1992 to 2018! That's 26 years!

You really want a heavy weight like ZFS (which is a total memory hog, btw., I use it in my server) on Amiga hardware from 1992?

You should be happy, that there is such an update to AmigaOS at all !

I understand the enthusiasm. I used an A4000/Cyberstorm060/CyberGfx64 exclusively till 2001. I did not care, that each reboot would take 6 minutes (with starting all the background stuff) and that my system was runtime memory patched into oblivion, and no memory protection in the system. That it crashed 10 times a day (multiply this with boot times, HO HO!). But one day a day has come and one needs to realize: Reality!
Senior Frontend and Backend Engineers | Traclabs | Procedure Automation | Houston, TX | Full-time | Remote or Onsite | traclabs.com/join/

Traclabs is a dynamic and rapidly growing software company that is currently seeking Frontend and Backend Software Developers to join our team. The stack is Node - Java - MySQL - Redis - Vue.js - AWS. Our software helps humans execute procedures on complicated hardware - from spaceships to assembly lines. If interested apply at traclabs.com/join/ or email me at scott@traclabs.com
Because white men constitute a large portion of the population, the working class, and the educated. I'm sure many would agree that that itself presents a bias of "if you're not a white man you're not competent" but I disagree that making it easier for outsiders to become educated or start in the field produces the best outcome for the field.
What about "probable cause" or "innocent until proven guilty"? Why would I have to accept being strip searched without a warrant?
Fetch | Full Stack Engineer | Atlanta | Onsite | Full-time

Fetch is a YC and VC-backed transportation startup that provides an automated, self-service marketplace for renting trucks. We recently launched in several new cities and are seeking to add another engineer to our team.

We're hiring a full-stack developer to help us launch new version of our web app, a new native mobile app and integrations with our vehicle hardware. (+ helping us define a software development process.)

Some of the tools we use include:

Python
AngularJS
PostgreSQL
C++
Bootstrap
GIT

This is a great opportunity for someone that wants to be involved in an early-stage company and also get experience with software and hardware.

Apply here: https://fetchtruck.com/jobs/
I love this book so much. It is a treasure. You can tell from the text the Remzi and Andrea are natural educators, and their sense of humor makes you want to read more.

Years ago when I used this book, I was blown away by the clarity and concision of their explanations for non-trivial technical content. In particular, their treatment of scheduling stuck out to me. To my knowledge, no other OS textbook explains scheduling in such an intuitive way -- the typical treatment is more like "meh, here's the zoo of scheduling algorithms". In this book, they start with a long list of workload assumptions, and discuss the optimal scheduling policies under these assumptions. As they relax assumptions, the optimal scheduling policy changes.

Also, OSTEP seems to be in a better position to solicit feedback from readers / professors using the book than other operating systems textbooks. Remzi was quite prompt and appreciative when I sent some suggestions.
Hmm, a “digital” search at customs?

When I first read the headline, I thought of something else...
Leif | New York, NY | ONSITE | FULL-TIME | $110k-$150k + equity

We’re looking to hire our third software engineer to tackle the student debt crisis (more than $1.5 trillion in the US!). We leverage technology to provide financing that is aligned with students interests.

Come join us to improve access to quality education. Send me an email at paul (at) leif.org

Python + JS (Vue), tons of unique data, office in Meatpacking. High impact, lean team. Well Funded. 1 to 3+ years of experience.

Front-End and Product experience a plus.
Link: https://jobs.lever.co/leif/58747fbe-21df-4e77-bd89-d8c86ee60...

https://leif.org/
Green Matters | Senior JavaScript Engineer | Remote or NYC | Full-time

Green Matters is a publisher covering important green verticals such as technology, energy, food & parenting. Our headquarters are NYC but we're a remote first engineering team (currently USA & Europe but pretty open to location).

This is a senior role and we're interested in helping you grow into an IC (Independent Contributor) if needed. There is a lot more to our operations than just https://www.greenmatters.com/:

* Help us grow our eCommerce tools.

* Work methodically with monitoring, alerting, logging and analytics.

* Continue to develop on our Content Management System.

We're in a great spot, we won't be throwing you into the fire. We've been growing steadily over the past two years and looking to expand our engineering team with another team player.

Our tech stack includes Node.js, React, Redux, soon to be TypeScript (you can help us), PostgreSQL, Redis, and Docker/Kubernetes. If you love GCP that's a bonus but not required at all.

No recruiters here, email the CTO directly if interested: chris.abrams@greenmatters.com

On a last fun note, while we may be Green-oriented, our team loves fried chicken.
Why 3.1.4 and not 3.9.1 ?
The Reproducibility Crisis among A/B Tests and Web Experiments
Not sure what I wrote that made you think I perceived myself or anyone to be superior or inferior. I hate the caste system unconditionally. I believe everyone should be treated fairly and only on merit at least when it comes to education, science, and healthcare.

That said, I agree that there may be a social imbalance and there exists groups of minorities identified by whatever(financial standing, family background, etc) that have fewer opportunities that are reachable. Example, Someone living at poverty line aspiring to be a doctor. My ask is that the policies should help them with financial incentives and tutoring to compete at the same merit level as everyone and then help them become a good doctor as opposed to saying they only barely need to study to become a doctor.
How it uses windows is orthogonal to whether it’s based upon win32 APIs. The framework may add some of its own controls, but copy+paste and even touch hit testing are win32. This is very unlike say KDE vs Gnome.

I used to work on the office UWP apps, and I’ve seen the underlying code.
Wait until they get more efficient at it. This kind of thing can be highly automated with software that only has to within a tuned degree of certainty determine who else needs additional screening. You can tune this precisely on how many humans you have around at a given time and can facilitate the "Enhanced search" of the devices.
Our SMB design office is media-heavy, with lots of very large raw photo shoots and source video files. We've been using Apple Server for file sharing for a long time (running on Mac minis). All other services have been migrated or abandoned. At some point we need to switch to a Windows or Linux SMB server, cloud storage is still cost-prohibitive with the file sizes we're throwing around.

edit: File sharing was on Server.app, now it's just plain macOS-flavored SMB
> I think it looks way worse to just let it limp along and slowly die. Fail fast, learn your lesson, and move on.

The benefit of limping along and dying slowly is that it can be relatively quiet and uneventful, and at least the project dies with the appearance of dignity, even though it's actually the opposite. Investors applaud "sticking it out" even though the engineers knew it was dead for years. Review sites write poignant eulogies, instead of writing angry rants which they would do if it was cut short.

The thing about software (and probably most kinds of products) is that there's always someone who relies on it, no matter how dumb of an idea the product is, and usually that group is larger than you expect or seems reasonable. Those people are often the ones who yell the loudest when you inconvenience them, which is why Apple has to pander to them by torturing macOS Server to death instead of euthanizing it.

> They are APPLE, they have ridiculous cash.

They have always acted like a start-up that's strapped for cash. I've known many Apple employees and it's just been part of the culture, that if you work at Apple, you're going to wear many hats and they're going to utilize every second of yours to 200%. It was especially so this in the days of Jobs, and I doubt it's changed much in the past decade.
Being that it's a country, I'd guess they'd be fully within their rights to deny entry on the suspicion that you are withholding your password.

It's not really seen as a 'punishment', since no one has the 'right' to visit New Zealand who isn't a citizen.
Aptitive | Data & Analytics Consultant | Chicago, IL | ONSITE | Full-time

Aptitive is a Chicago-based data & analytics consulting firm. We were founded in 2013 with ~30 full time employees today. We are a tech-agnostic firm and work primarily with mid-size to large enterprises to provide business-driven, technical solutions.

Given the right experience level and fit, we're also looking to hire to lead practice areas and strategic partnerships.

* All experience levels are welcome, but ideally at least one year in development role

* Prior experience in consulting or customer-facing roles is preferred, but not required

* Understanding of the data and analytics ecosystem and design practices for data integration and data warehousing, including SQL development knowledge (and/or Python & .NET)

* Experience in Azure and/or AWS data platforms is preferred but not required

* Experience with ML algorithms and Python-based development for predictive models is a plus

Our work and technology stack varies by client, but we typically engage in project-oriented work (not contractor/staff aug models). We take a small team approach to project delivery, with a focus on quick deliverables and constant client feedback. Our work spans across technologies, but is usually a combination of data management, front-end analytics, custom data engineering, and data science solutions.

Apply here: http://www.aptitive.com/careers/
At the end of the day, you know your customer base better than anyone on HN, so you are the best-placed to do this research. I will say that in SaaS, unless you're extremely enterprise, a several-years-worth LTV is very rare. If you are in enterprise, you might gain customers by having annual billing at all.

If you're unsure then I second the other commenters' opinions, do 12 months at full price. If you want to try a discount for some time to see if it helps conversion, that gives you a comparison point. There are advantages in annual billing beyond "it's cheaper", so you can't compare directly to monthly billing.
US Govt Forecast 7°F increase by 2100
Teachable | New York, NY, USA | Full-Time | Onsite | https://teachable.com/careers

We provide a platform that lets anyone create, host and sell courses online, we have over 8 million students and well over 100k instructors on the platform. We had over $90m in courses sold last year, up from $30m in 2017, with this year trending for closer to $200 million. We are a team of 80 with an Eng/Product org of 30. We are hiring across the board:

Senior Frontend Engineers (React/Typescript) : https://teachable.com/job-posting?id=430bf544-d9ba-4978-b764...

Senior Backend Engineers (Ruby on Rails) : https://teachable.com/job-posting?id=5fe8bb3d-a307-4429-8ee8...

Lead QA Automation Engineer (Cucumber exp strongly preferred): https://teachable.com/job-posting?id=841211cf-5410-476f-b2a7...

I can honestly say it’s the best place I’ve ever worked. I’m the CTO here, hit me up at noahp@teachable.com if you have any questions or head to https://teachable.com/careers/

Check out our stack and a bit about what it’s like to work here on this post about how we work: https://medium.com/teachable/how-we-code-at-teachable-ff4285...
Fully driverless Waymo taxis are due out this year, alarming critics
how do you ensure this? afaik ext4 scatters its allocations across the partition, so it's only a matter of time before an allocation for a syslog entry wipes your .ssh/id_rsa
Under US law you can be compelled by a court to unlock (provide passwords / decrypt) a device if the contents of the device are known (the helpful search term for this is forgone conclusion). Otherwise it should be covered under the 5th. As for "forgetting" a password in this case, you will be held in contempt of court if they don't believe you, which can mean indefinite detention.
> HN has the distinct privilege of not giving a single iota about traffic.

If that was true, HN wouldn't exist.

> That’s one of the things I like most about the site, a complete lack of monetization.

But jobs are advertised here.

> It’s pure in this sense.

It's better than most, but it certainly isn't pure.
What is this actually addressing? Why are digital devices being searched? What are they looking for? What has the world come to that this is a thing?
Some of the best textbooks in statistics and machine learning:

Applied
-------

Hosmer et al., Applied Logistic Regression. An exhaustive guide to the perils and pitfalls of logistic regression. Logistic regression is the power tool of interpretable statistical models, but if you don't understand it, it will take your foot off (concretely, your inferences will be wrong and your peers will laugh at you.) This book is essential. Graduate level, or perhaps advanced undergraduate, intended for STEM and social science grad students.

https://www.amazon.com/Applied-Logistic-Regression-Probabili...

Peter Christen's Data Matching. Record Linkage is a relatively niche concept, so Christen's book has no right to be as good as it is. But it covers every relevant topic in a clear, even-handed way. If you are working on a record linkage system, then there's nothing in this book you can afford not to know. Undergraduate level, but intended for industry practitioners.

https://www.amazon.com/Data-Matching-Techniques-Data-Centric...

Max Kuhn's Applied Predictive Modeling. Even if you don't use R, this is an incredibly good introduction to how predictive modeling is done in practice. Early undergraduate level.

http://appliedpredictivemodeling.com/

Theoretical
-----------

The Elements of Statistical Learning. Probably the single most respected book in machine learning. Exhaustive and essential. Advanced undergraduate level.

https://www.amazon.com/Elements-Statistical-Learning-Predict...

Kevin Murphy's Machine Learning: A Probabilistic Perspective. Covers lots of the same ground as Elements but is a little easier. Undergraduate level.

https://www.amazon.com/Machine-Learning-Probabilistic-Perspe...

Taboga's Lectures on Probability Theory and Mathematical Statistics. Has the distinction of being available for free in web-friendly format at https://www.statlect.com/ . Undergraduate level for math majors.

https://www.amazon.com/Lectures-Probability-Theory-Mathemati...
I get your point....but a similar and more worrying thing is happening at the Canadian/US border right now.

Entry to the US can be denied (for life even) if the customs agent suspects the traveler has involvement with Cannabis.

That includes having investments in Cannabis companies.

So if the take my phone and find any information on it connected to Cannabis I could be barred FOR LIFE from entry into the US.

That means that I am leaving a country where that is legal, and entering into a state that it is also legal some border gaourd can ban me for life - even if all I did was search for "Cannibis legal in Canada".

Where does it end?
I wish them much good luck with my elderly dumbphone, it has extremely little on it that wasn't there when it rolled out of the factory. Besides that, way to go to ruin your international reputation (not that anybody cares). Paying $5000 to be allowed to break the law is interesting too: so it's about the money? Or do you get fined and then you still have to cough up the contents of your devices?
John Krafcik Comments on Waymo Michigan Depot, Pays Respect to Sergio Marchionne
It's a lot easier to manage now. If you just need those features, you no longer need to install macOS server. Just toggle a switch in the Sharing preferences.
I was in Wellington during the GDPR protests. Instead of arrested and fining those who illegally searched and handed over Kim Dotcom's servers, they just changed the law to make it all retroactively legal; making spying legal on all citizens.

At least they banned software patents.
My suitcase doesn't contain:

+ Communications with my lawyer

+ My private health information

+ My detailed financial information

+ My communications with significant others which may be of various degrees of sfw

+ My work files, including proprietary or secret information

Any of those things would absolutely require a warrant, and may even require a specialized warrant in some cases (communications with my lawyer, health information).
Are there currently safer chemicals available for semiconductor fabrication?

The dangerous part is stripping the oxide layer off the wafer. That's currently done with fluorides, which are really nasty to work with.
The 100 Best Christmas Movies of All Time – 2018
There is a digital diplomatic pouch though, it's called "the cloud". Anyone that wants to smuggle illegal bits and bytes into a country can simply do it over the Internet.

The reality is, nothing on your phone can cause actual danger to anyone in the way that guns or a bomb can.