skysight-inc/HackerNews huggingface dataset:
SEEKING WORK (West Hollywood, CA) && (Los Angeles || Remote)

Senior Engineer / Software & Systems Architecture

Python, Flask, Scala, JS, Node, React, Apache NiFi, AWS

20 years experience

Front-End development & architecture

Micro-services development and architecture

Data pipelines & toolchain design and development

Management experience & strong people skills

Decentralized networks & social network development

michael@chisari.us
Because VLA are considered a design mistake, which made C even more insecure, and as such have been made optional in C11.

Additionally gcc and clang are probably the only C compilers that ever bothered to support it.
Ask HN: Why isn't Tumblr using HTTPS by default
It's 2018 and a lot of Tumblr blogs are still HTTP-only. Does anyone have any insight information on why that's so?

I found this article from 2014 and it's puzzling that HTTPS by default isn't still the case. Are they facing any technical difficulties enabling it? Is it even in the radar?

https://www.cnet.com/news/tumblr-activates-ssl-but-with-a-catch/
I just want the major cellphone companies numbers to show up correctly and everything else can be ???. That does not require fixing all these other systems.
They are between 50k and 55k, exactly according to the guidance from the last call. Yes, 1-2 years ago they were to optimistic about mass production of cars.

> Musk's "genius" plan to deal with this is to spend a few million dollars and few months to build a new fleet of trailers, rather than simply work with existing companies to ship existing products to existing customers within the next month.

Tesla is using a new type of sale and delivery system compared to pretty much all existing companies. That has advantages and disadvantages.

I'm not sure what you are referring to with 'existing companies', you don't just have to deliver. You have to deliver, do paperwork, show cars feature and give the costumer the opportunity to point out quality problems. What existing companies could possibly do that?

We will see in the longrun if location based are vehice based delivery is better.
They can do whatever they want; I signed up for the trial, but bullet points 3 and 4 are why I would be extremely hesitant to pay a dime for it today.

In contrast, I made a Steam account back in 2003, right when they launched. In college and grad school, I fell out of gaming, but when I came back in around 2012 with a brand new computer, all my old games were still available in my account, ready to be downloaded.
Hmm, thanks for the tip, and thanks for testing that out so I don't have to! It hadn't occurred to me that that would be the case, but it makes some sense after reading through https://stackoverflow.com/q/38124361/459881. I'll go ahead and open an issue with emscripten about this.
Culture Foundry | https://www.culturefoundry.com | REMOTE | Developers | Full time employees

We are recruiting for a number of developer roles at Culture Foundry. We are a 100% remote digital agency. We connect the world through beautiful technology. We work in php, rails, javascript and golang. Profitable, small teams, flexible. The role is remote, but you need to have significant time overlap with US based teammates.

More details on specific roles here: https://www.culturefoundry.com/careers/

FYI, the start dates displayed are just best guesses, and can be shifted for the right candidate.
You are basically criticizing people for wanting money and not wanting to do unnecessary work for it.

You might as well criticize human nature.

99% of people pick the best path they can see towards an easier life that gives them the most suitable work/money trade-off they are able to tolerate. If MBA grads aren't good at what they do, that's the fault of MBA programs. MBA grads just want to get credentials and training and make money, just like almost every person in the world. I tend to shy away from personal statements, but your use of "roaches" makes me think that some of what you say bleeds from personal wounds.
Yeah, factoring in activities certainly gives us the advantage. I suspect most people have an idea of success more along the lines of mass of other species consumed. That seems unfair to plants though.

I feel some measure of chemical impact of the species to be the most level playing field, and that relative total energy consumption is close to the core of the question.
AutoGravity | Automative FinTech | Irvine, CA | FULL-TIME ONSITE | Software Engineer (React)

Who We Are: https://www.autogravity.com/about

What We Offer:

- Competitive salary

- 100% paid health/vision/dental insurance for employee and eligible dependents

- Discretionary, unlimited PTO

- 401k w/ 6% match

- Company-provided MacBook Pro

- $5k educational reimbursement + $5k for a single domestic conference a year

Technologies You Will Use: React, Redux, Jest, Enzyme, Next, Emotion, Node, Webpack, Sass, Cypress, and Sentry.

Postings:

Senior - https://boards.greenhouse.io/autogravitycorporation/jobs/131...

Mid-Level - https://boards.greenhouse.io/autogravitycorporation/jobs/131...
DevOps and testing Software Architecture
Software Engineering Institute (SEI) | Compiler Researcher | Pittsburgh, PA, USA | ONSITE

Our team is developing techniques for automatically repairing C source code to remove memory-safety vulnerabilities. The ultimate goal is to enable a proof of some or all aspects of memory safety of the repaired program. By repairing at the level of source code (as opposed to a compiler pass, like AddressSanitizer or SoftBound+CETS), the user isn’t tied to a particular build chain. Furthermore, although the goal is to as automatic as possible, nevertheless it is likely that the developer will need to manually tune performance-critical sections of the codebase, which is facilitated by doing the repair at the source-code level.

We are looking to hire someone with experience in static analysis, compiler development, or formal verification. The successful candidate will both work on advanced research projects and work directly with customers to help transition our research into practice. Candidates will be subject to a background check and must be eligible to obtain and maintain a Department of Defense security clearance.

If interested, please email your resume to me at weklieber+hiring@sei(DOT)cmu(DOT)edu.
Blockchain may resolve Irish border Brexit problem: Hammond
Right but there will be just be a law that specifies anyone trying to purposely circumvent the search will be accused of a felony. Of course the vast majority will agree because of "safety" and "if you have nothing to hide...".
Musk isn't a trend, he's a celebrity-cultural-icon data point.
I don't have examples off the top of my head, but I'll tell you how it happens.

* Use of cgo and platform-specific headers / libraries

* Use of golang.org/x/sys/unix, especially ioctl

* References to external utilities and files only typically installed on Linux, especially with os/exec, or use of GNU extensions in system utilities

* Inability to correctly handle paths on Windows (use of "path" instead of "path/filepath")

* Inability to correctly handle case-insensitive file systems

* Creation of paths containing characters illegal on NTFS, or with names that are otherwise illegal on NTFS (through the normal APIs)

* Deleting files or using deleted files in a way that works on POSIX but not Windows, this particular one is especially common because the mandatory file locks on Windows will bite you hard if you are used to the POSIX way of doing things

* Difference in semantics for filesystem change notifications. In JavaScript I can use chokidar and in Golang I can use github.com/fsnotify/fsnotify, but that doesn't change the fact that the underlying notification systems have radically different semantics. You can't really paper over these differences, you have to actually test your code on different platforms and make sure they work correctly on those platforms

Go code doesn't strike me as radically more portable than, say, Java, C#, or JavaScript. The fact that you haven't personally encountered problems often is good, but this isn't an indication that Go "avoids" portability problems. And compiling to machine code is not really a piece of the platform portability puzzle... it just means that you don't have to worry about having a different runtime version on your target.

The bottom line is that while Golang makes portability easier, for anything but relatively trivial programs (and "trivial" is getting larger and larger every day), your program is only portable as far as you have actually tested it on other systems. This is less work in Golang than it is with C++, and I'm really thankful for it, but it's not a radical change and it's not substantially different from the portability story that Node.js has.
> This will launch, putter along for a couple of years and then get shuttered unless it's a surprise success.

You say that like it's a bad thing, but isn't that effectively how Silicon Valley as a whole operates? Most startups putter along for a few years before running out of money and getting shuttered. A couple become surprise successes and take off.

Google is effectively just a single corporation acting like a hive of startups.
Tropy | JS Developer | Full Time | Fairfax, VA or Remote | https://tropy.org

Tropy is a cross-platform desktop application for managing images of research material. Developed by the same lab that produces Zotero, Tropy is open-source software used by humanities scholars worldwide to organize and analyze their source materials, and is recommended by research libraries and archives.

We're looking for someone creative and motivated to join Tropy's small team of six. You'll work on Tropy's Electron app, backend services, and more. You'll be part of a close team producing free and open-source software along with an amazing global community and help make a huge difference in people's ability to manage their research effectively.

More details here: https://tropy.org/jobs
You would either need to massively cut government services, or massively increase tax rates. Since only savings would be taxed, this would increase spending. In fact, you could even get the government to pay you money if you ran up extra expenses using debt and incurred a loss.

There is a reason no country in the world does OP’s proposal, or yours. They would turn things topsy-turvy.
OneSignal | San Mateo, CA | Solution Architect Or Senior Full-stack Developer| Full Time |https://onesignal.com/careers

OneSignal is a YC and SignalFire backed push notification & email platform for mobile apps and websites. Our mission is to democratize access to great messaging tools for all publishers. Over the last three years, we’ve grown to deliver 3.4 billion notifications per day for 200,000 apps and websites.

Our stack includes React+Typescript for our dashboard, Ruby on Rails, Rust (for our delivery system), Spark (for our data projects), and PostgreSQL with 12 first-party mobile SDKs.

Solution Architect - https://onesignal.com/careers#P_AAAAAADAAADK2CWftbrCeH

Senior Full-stack Developer -
https://onesignal.com/careers#P_AAAAAADAAADDfiNRSH2EuL
You can check for errors with alloca. It returns NULL on failure. You have the same problem as with error checking malloc. On platforms with overcommit (any fork-based UNIX, except maybe Solaris) it doesn't fail at allocation time, it fails when you try to access the memory and fail to map a page. But at least on 32-bit systems it can detect when you exhaust your address space (an actual problem for things like web browsers that still commonly ship 32-bit binaries and use lots and lots of threads).

But yeah, the real reason is that MSVC will never implement VLAs.
I'm a Canadian permanent resident and the dozen or so times I've crossed the border into Canada I've never had a negative experience. I've always found the Canadian border agents to be polite and courteous. I cannot say the same for their US counterparts. Not doubting the negative experiences described above just that my personal random sample has been different.
You can also (in Android, at any rate) set it to allow your favourites to by-pass it.
Obligatory: https://www.youtube.com/watch?v=pudsgwjNN64
Credit Union Forms Output Services from Oak Tree Business Systems, Inc
I have the handbook on my desk rn, awesome read, and easy to digest
Ask HN: Does your company renew option grants after initial ones vest?
Just hit four years at a startup and was expecting to receive another options grant to replace my now completed grant, but was disappointed to see it doesn't work that way. What does your company/startup do once your initial option's grant is complete?
The step after is an "express pass" that has you download software that constantly monitors your usage and uploads it to TSA and related. Helpful widgets and dashboards will be available to see at what level of compliance you're at and used like a credit rating for participating in society.
The inconsistency part is the 2nd incompleteness theory.

You don't RAA it because you can't prove the system is consistent (because you can't prove the counterexample)
Amplitude Analytics | San Francisco, CA (SOMA) | https://www.amplitude.com | ONSITE

We help companies build better products by providing analytics for understanding user behavior. We believe that the future of product development is in smart and easy-to-use analytics, not the complex data science stacks or surface-level vanity metrics of today. We're a 180-person company (30 engineers), and we raised our Series C last summer. We've gotten incredible traction helping customers like Square, Capital One, Dropbox, Twitter, Twitch, and Adidas change the way they build products. We were recognized in Wealthfront's 2018 Career-Launching Companies List: https://blog.wealthfront.com/wp-content/uploads/2017/10/2018...

We have many open positions that can be found here (we're growing fast!): https://jobs.lever.co/amplitude. In particular, we're looking to grow out the engineering team with the following positions:

* Director of Quality Engineering

* Senior Growth Engineer

* Senior Product Engineer

* Senior Software Engineer, Backend

* Senior Software Engineer, DevOps

* Senior Software Engineer, DevSecOps

Our tech stack consists of Java, Python, Redis, Kafka, PostgreSQL, Elasticsearch, Docker, SaltStack on the backend and JavaScript, React, Flux, Highcharts, d3 on the frontend. We've got a number of extremely challenging technical problems to solve thanks to being in the analytics space, and we're looking for talented people who are passionate about the intersection of technology and product to help us take the next step. You can find more examples of the work we do on our blog: https://amplitude.engineering/

We only hire the best engineers and pay very competitive salaries. Also, we don't do whiteboard interviews! Bring your laptop, and be prepared to write code the way you expect to on the job -- in a familiar working environment with access to the internet.

If this sounds exciting to you, please reach out to us at careers@amplitude.com or apply directly through https://www.amplitude.com/careers.
TradeRev | Toronto, Ontario, Canada | Onsite full-time

TradeRev is revolutionizing the automotive sales. Our core product is the smartest and fastest way of buying and selling cars. Our ambition is to become the automotive marketplace that everyone can and will use to buy and sell cars.

Open positions:
Data Engineer, DevOps, SRE, Test Engineers, Full-Stack Developers, Salesforce Developers, Product Manager and many more.

Apply here: https://jobs.lever.co/traderev, mention that you saw this post on HN.
Assembly is very readable with enough practice.

Source: I've ported multiple assembly language games from one assembly language to another.
> gravity isn't inherently respectful of charge conservation

It is unless you reject minimal coupling of electromagnetism to curvature. Otherwise where would one insert the metric into the inhomogeneous Maxwell equation dH = J (in arbitrary local coordinates x^i, H = 1/2 H_{ij} dx^i \wedge dx^j) ?
There is also the possibility that a third variable contributes to both. Like maybe a stressful family life or living in a city (louder at night, more access to drugs) causes teens to be more likely to use drugs and to sleep less.
I don't put a lot of stock into TIOBE and similar lists because I'm not really sure how that information helps. It seems to me that these lists are measuring ubiquity rather than popularity, which I define as being well-liked. I guess there is value in that, but I'm far more interested in seeing a ranked list of well-liked languages and the reasoning behind those opinions. Slant isn't perfect, but it offers me the sort of pros vs. cons lists that I find much more valuable when selecting a language.

Job prospects/salary is another ranking I'm interested in. For example, I know I can get a JavaScript job on any corner, but is that ubiquity going to cost me in salary? Can I earn more by mastering something like Rust, Elixir, or Erlang?
A lot of that functionality is already possible through Declarative Content[1] and Optional Permissions[2]. These remove the need for extensions to have permissions to all websites, while enabling them to be given permission to a site after installation. However, these features weren't part of the original APIs, so I think a lot of extension developers aren't familiar with them, don't want to refactor their existing codebases to support these features, or are targeting multiple browsers where other browsers don't support this functionality.

1. https://developer.chrome.com/extensions/declarativeContent
2. https://developer.chrome.com/apps/permissions
Chrome’s auto-update forces you to trust the author of any extension you install for as long as you use the extension. Google’s “Trustworthy by default” effort doesn’t change this model since it still provides no guarantees. This works for some extensions backed by companies (e.g. Adblock), but it doesn’t work for extensions that add simple functionality.

For small extensions that add basic browser functionality (e.g. reorder tabs, enable autocomplete), I wish Google would enable users to verify open-source extensions. I trust the version of the code that I have reviewed on github. I do not trust that the kid who wrote this extension won’t go rogue and upload a malicious version in a future autoupdated release. So the only way I can verify the code that I run is to install it from the Chrome Web Store, copy the code and verify it, uninstall the Chrome Web Store version, and then load the unpacked extension (or even publish my own copy of it to the Chrome Web Store). This is pretty cumbersome.
"satisfied"?
Portugal has radically different drug policy than America and Mexico. What do you think happened to the rates of drug dependency and violent crime?
Oh, yeah, I just didn't want to generalize farther than my own experience.
Because if your connectivity and their servers are able to handle the load, this reduces the need for a gaming PC for a lot of people which in turn makes Android and ChromeOS very attractive. Or, promising the ability to play it within Chrome the browser regardless of platform, this would be the dream of games being truly cross platform. Pay for it on PC, play it on an Android device? Awesome. Release Chrome for PS4 and/or Xbox One and that same game works there? Very, very nice.

Admittedly, there are other people in this space, but I figure they'd find a way to make the incentives pretty hard to pass up.
> some gas stations.

In some cities, most gas stations are forced to buy from them.

> Locals know which of them and who's the owner

Why would they know?
I’m willing to take pull requests if people find issues with the text—I’m not a strong writer.
Why does this have to be with the available info and communication possibilities of the internet? Mixed with a bit of travel for events/conferences?
Secret symbols of the Rialto
One of the desired outputs of an experiment analysis is an estimate of the size of the treatment effect, typically in the form of a confidence interval. Studies which only report statistical significance (and there are many of them) are of limited utility since you can have a tiny effect that is statistically significant, just as you can have a large effect that is not statistically significant!
What do DNA tests of these children typically reveal?
Speculating, but Would fixing that break things like dialing a local number which is answered overseas without a toll charge? Or is that separate?
> Presumably we agree that bad indie games with no marketing will certainly fail.
> It looks like we agree that bad indie games with strong marketing will usually fail, unlike bad AAA games and with a few debatable exceptions. (Mostly, I think, games that preordered well on hype and reputation but crumbled post-release. Clockwork Empires comes to mind.)

Agreed

> For good indie games with poor marketing, I think they'll usually fail, and it sounds like we might disagree? There are exceptions, but I think lots of them are older than the indie boom (e.g. Dwarf Fortress), or followup titles from successful indie devs. This might just be terminology or statistics though, because I agree that a chance favorable RPS writeup could jumpstart a game with no real marketing plan or budget. I guess the question is how often that happens, versus games doing the convention and reviewer circuit to ensure they get seen and written about.

We probably disagree a little here. I think the problem is defining good games and good/poor marketing. I tried to make the point that some games are just so good in general quality/coherence/details or have have a truely unique approach that they would "always" succeed because players will do the marketing by word of mouth. When I say always I don't mean it literally. There are always exceptions :)

> For good indie games with good marketing, I think there's still a decently high chance of failure these days, which might be another disagreement? This probably requires a better definition of 'failure', people definitely bought e.g. Orwell, but if the standard is "makes enough money to release the next similar game" then even Failbetter Games is on the razor's edge, and they're one of the most acclaimed indie studios I know of.

Again slight disagreement with similar reasoning to the last paragraph. Good != unique and there are many levels of good so it's hard to draw a line.

> (On that final point, I think I simply misunderstood you. I was noting that indie games can have any of the failings you mentioned and still succeed, but if your point was just that the specific game in this thread was hampered by those issues then we agree.)

Yep I was referring to the actual game mentioned in the article and what I instantly found problematic for its success.

It was good discussion (the whole thread) but now I need to sleep!
Can't answer whether they will, but in theory they could. Allow devs to upload their source, then using reproducible builds and/or cloud builds, verify that the supplied source compiles down to the submitted binary.
Hidden partition flag, then. Or just dual boot with a secondary system as default; either a live os image (linux) or installed on a vhd (windows).