skysight-inc/HackerNews huggingface dataset:
Strategic Blue | Clojure, Java, Ruby | London | Full-time | ONSITE | https://strategic-blue.com

Strategic Blue are a small company (11 staff, tech team of 4) working in financing for cloud compute: currently re-selling, but we are getting enough customers now to start spec trading, which is where things get interesting.

Looking to hire one or two experienced devs, not necessarily with any Clojure experience, but decent general development ability, and some exposure to XP practices.

We have a decent package to offer, and you will have plenty of opportunity to influence the business.

Contact t.denley@strategic-blue.com
So it seems that the nest itself was secured with a repeated password, and there was no 2FA on their account (which they could, and were encouraged, to add).

On one hand, it's easy to dismiss this as the nest owners being naive with internet security. This is incident was easily avoidable if the owners had put in the tiniest more effort. I think it's _fair_ to expect people who own these devices to know the basics about how to not get exploited from it.

On the flip side, although I think that knowing the basics is a _fair_ expectation, I don't think it's _pragmatic_. These devices are only going to get more powerful in their abilities, only going to get more ubiquitous in their distribution, and only going to get more opaque as to their inner workings. I don't think it's unreasonable that manufactures _force_ a higher level of security on such devices.
I mean... the parent post is right, the site I linked seems to be calculating CA state tax incorrectly.

But: 42% is the effective tax rate (not marginal, average). And this is pretty close to 45%. For a hypothetical person making $500k or more as regular income in CA (as many of the posted salaries above would be), they would indeed pay about $210k in taxes plus Medicare plus Social Security.
Oscar Health is a startup using technology, data & design to change the way people find and access care. We are disrupting the healthcare industry by putting people first, not business and cost. We also just received $375 million from Alphabet in August - come join the family!

https://www.hioscar.com

We're currently hiring for a variety of full-time/onsite roles in our New York City office and now our new Engineering outpost in Los Angeles (Culver City):

Director of Infrastructure Engineering: https://grnh.se/5363f6b61
Junior Software Engineer: Data/Systems (NYC): https://grnh.se/db1fe84f1
Junior Software Engineer: Web & Mobile (NYC): https://grnh.se/df42e0021
Software Engineer: Data/Systems (NYC): https://grnh.se/d7514f0c1
Software Engineer: Product Infrastructure (NYC): https://grnh.se/d7ca9c1f1
Software Engineer: Web (LA): https://grnh.se/5ced83341
Software Engineer: Web & Mobile (NYC): https://grnh.se/1d737c291
Senior Software Engineer: Data/Systems (LA): https://grnh.se/196c74d81
Senior Software Engineer: Data/Systems (NYC): https://grnh.se/6c2ba6b11
Senior Software Engineer: Web (LA): https://grnh.se/04c41e691
Senior Software Engineer: Web & Mobile (NYC): https://grnh.se/a4c0a8731

Additionally, check our our internships and 2019 new grad roles below!
Software Engineer: Intern 2019 - Data/Systems (NYC): https://grnh.se/b5ecadee1
Software Engineer: Intern 2019 - Web & Mobile (NYC): https://grnh.se/b81179c61
Software Engineer: New Grad 2019 - Data/Systems (NYC): https://grnh.se/d9fcb9091
Software Engineer: New Grad 2019 - Data/Systems (LA): https://grnh.se/f4ff6f211
Software Engineer: New Grad 2019 - Web & Mobile (NYC): https://grnh.se/ecdf5dc51
Software Engineer: New Grad 2019 - Web & Mobile (LA): https://grnh.se/76d86deb1
Envoy and gRPC-Web: a fresh new alternative to REST
I must have missed the part in the Nest manual where they told you to expect complete strangers to be able to watch you and speak to you through it.
Existing lie detectors use a bunch of information like pulse, and galvanic skin response. Presumably this device is not hooked up to people enough to do that, so I don't think it's using the exact same metrics. Also, polygraphs work decently well actually. Just not well enough to be used as evidence in court.
It's no harder than having Debian for x86, x64, arm, arm64, etc.
The delta between an iPad and a $5000 server is zero, but the iPad is $700 and draws only a dozen watts! That's why Google is throwing out all their servers and filling their datacenters with iPads.

I know I'm being flippant, but I'm sick and tired of talking about Geekbench.
Companies benefit from protections given to them by society. E.g. limited liability, copyright, patents and lots of others. So I think it's prudent to ask ourselves as a society from time to time if these privileges are still useful or maybe should be modified or revoked.

I agree that for a lot of research you need to be of a certain size but I don't think you need to be a multi-hundred-billion dollar company. Apple was pretty innovative in the 2000s when they were much smaller. From casual observation it looks to me that they are doing less innovation now than they did back then.
Nah, Nest could enforce 2FA, just as a basic example of how they could take responsibility for the safety of their consumers.
Most of their diet is fruit/leaves. The rest is squirrels. I don't see many people eating squirrels, but I see a lot of squirrels.
Of course. All i'm saying is that presumably they've at least cross-validated that linear regression.
That might be, but I couldn't have known a few years ago. It was just a free photo hoster back then.

Now I would be "forced" to pay, which in itself wouldn't be all too bad I guess.
I would definitely go with a SSG (static site generator)... sounds like you might just need to do some custom theming. Personally I enjoy coding that sort of thing for myself... but if you didn't feel like doing the work you could grab a theme from themeforest or similar for $10 and put it into your SSG. please update the URL to this post ... I love reading well built academic blogs :)
Hierarchy is created when you start considering whether or not a thing is a part of some other thing. Sexual reproduction forms trees. Causality forms trees along time axis. I think the concept it's pretty fundamental, even if some specific connotations are learned through socialization.
SEEKING WORK | Edinburgh, UK or remote | sw@seanw.org | https://www.seanw.org

Full stack software developer with over 10 years experience including a PhD in software verification offering:

- Web app development: JavaScript (Node, TypeScript, AngularJS, Vue, jQuery), Python (Flask, Django), Java, PHP (WordPress).

- Mobile app development: Android, iOS, PhoneGap/Cordova.

- Cloud hosting: Creating scalable apps that run on Heroku, AWS and Firebase.

- SEO: On-page audits and implementing required changes.

- Code quality: Reducing defects in existing projects by integrating test suites, staging + development environments, Continuous Integration, planning boards and code reviews.

Examples projects independently developed and sold by myself:

- Checkbot for Chrome (https://www.checkbot.io/), tests if your website is following 50+ SEO, speed and security web best practices. Rated 4.9/5 with 15K+ active users and has paying users. Everything was done by myself, including frontend and backend work (TypeScript, Vue, Firebase, Docker, Node, Webpack, Netlify), website and UI design, and the comprehensive best practices guide that goes with the Chrome extension (https://www.checkbot.io/guide/).

- Fresco for Android (https://play.google.com/store/apps/details?id=org.seanw.fres...), easy to use yet feature packed digital painting app for phones and tablets. The app features layers, customisable brushes, image filters and more. Rated 4/5, over 500K free downloads, over 10K copies sold. Implemented with Java and C.

See https://www.seanw.org for more.
I have been; for me flying wins. Compared to driving the Eurostar is indeed far better on those distances.
It's true, maintaining proper password hygiene is easy! See https://jasonlefkowitz.net/2015/09/ask-mr-science-how-to-sec... for details.
A cultural issue perhaps, and one mediated by biology at that. I very much doubt that you go around telling the women in your life that the time they spend outside the office, and lack of vocational ambition, are a social problem that need a political solution.
> Strangely, it does not work using archive.is either.

That’s because archive.is crawlers are hosted in Netherlands, Europe.
How you ENCODE data is different from how you TRANSFER data and neither are related to storing state completely on the client vs the server.

You can pass JWTs as cookie data, and you can store nothing but a single session ID in the JWT itself. They are completely orthogonal and have nothing to do with the actual argument. It's misleading when the title and the entire article talks about JWTs vs session/cookies.
I'm not 100% sold. I think JWT's are fine in some situations as long as you know the limitations.

Regarding session invalidation, I would handle this in two ways.

1. Support a "Log everyone out" function by storing a simple version number in the JWT. If the version constant in your app is different to the number in the JWT, it is invalid.

2. Support a "I need to logout user X function" by storing a blacklist of tokens in your RDBMS. If your RDBMS goes down, you have much bigger problems. A blacklist will be very short, and often completely empty, so lookups will be significantly faster than checking a session table. You could also use Redis or an application cache for storing the blacklist, with an RDBMS fallback.

Regarding storage, there's nothing stopping you putting your JWT into a cookie with the HTTPonly flag set. So long as you're not storing too much in token, they will be less than 4k and so will fit.
> For example, speech recognition AI is supposedly within fraction of a percent from "average human level", and yet auto-generated captions are awful. They have no punctuation, they don't distinguish between different speakers, they aren't visually grouped, and fail miserably dealing with slang. So turns out researchers are measuring only one aspect of the problem their algorithm is good at and ignoring the rest.

YouTube captioning != SOTA, any more than Google Translate for years and years represented anything close to the NMT SOTA.
Cooklist | Django / CTO | Dallas, TX / Remote | $80K - 120K w/ restricted stock

Cooklist shows you recipes you can cook with the groceries you buy and will allow you to order groceries by choosing recipes you want to cook.

Think Kayak for aggregating all the grocery retailers into one interface and Mint.com for importing all your retail purchase data into a digital pantry.

We just finished the TechStars Retail Program and announced a partnership with Target. We're a small team of experienced startup founders and engineers and are looking for a backend engineer to join our team.

Cooklist can connect directly to 81 grocery chains like Walmart, Safeway, Kroger etc. and automatically download every purchase a user makes in store and online. It uses NLP to match each product purchased to recipe ingredients. Over 1,000,000 products are matched to 1,000,000 recipes.

You can see a demo video and find links to download the app for iOS and Android at https://cooklist.co or email me at daniel@cooklist.co if interested
> Then your application is unavailable, just like it would be if your session table went away?

The author replies: "congratulations, you've just reinvented sessions, with all their problems (like centralized state) and gained nothing in the process", and also with an implementation that is "less battle-tested".

My own opinion: loose consistency can work in some circumstances, but seems a security risk in others.
... but to go really deep, you have to realize that horsepower is just a marketing term that is mostly meaningless. It was used to sell vehicles to Americans all through the 80s and 90s until now.

It's torque you actually want - i.e. turning force.

Horsepower is just torque X rpm.

The best example of how meaningless horsepower is was the original Honda S2000, at the time, the world's highest specific-power engine (horsepower per liter of engine size). It was revvy as hell, and only developed power when really high in the rev range.. i.e. 6k-9k rpm, so many people hated driving it. You had to rev the crap out it to go anywhere.

A few years later, the next revision had a bigger engine, with less horsepower. But it accelerated faster and was way better to drive.

Why? The bigger engine had more torque.

The horsepower figure is mostly irrelevant to drive-ability and acceleration.

Interestingly, a steam locomotive has maximum torque at 0 rpm, a complete contradiction for an internal combustion engine.
Definitely second this. Choices are hard, but decisions are easy. If you make hard rules for yourself and decide to follow them without exception, it is much easier to stick to, at least, that's what i've found for myself as well.
> in the way that a single point can occupy one side of a Venn diagram

I'd say you're a hoot at parties.
Thanks. It's still more than the "be careful of uninformed non-scientist public perception" warning that she should have gotten, but it's probably the least the DA could politically speaking get away with and still save face. Society's reactions to this kind of thing are messed up in a complicated way.

Good interview there.
They can be with proper handling and rotation. They are also vital for grasslands, not just forests. However, industrial raised beef is not good for forests, it's very very bad.
Blackfynn | Multiple Positions | Philadelphia, PA | Full-time, ONSITE | http://blackfynn.com

Do you like brains? We do.

We're a life sciences software startup building a data platform which integrates neuroscience and clinical data to enable therapeutics for neurological disease. We're a driven, curious group wielding data science and building software that meaningfully impacts humans. Our mission is bold, our team is experienced, and our product is ambitious. We're looking for engineers and data scientists to help us bring it to life.

Whether you come from a world of research, engineering, or something else, we'd love to chat :)

Open Positions: Data Scientist, Full-stack Engineer, Product Designer

Languages: Scala, Python, Rust, Javascript, R, Matlab

Apply here! http://www.blackfynn.com/careers/
This story is pretty creepy, but at this point, people need to own up to the idea that weak passwords and passwords that are re-used across sites are going to be compromised at some point [1]. There's nothing Nest can really do about this, other than to mandate two-factor auth, which most people don't seem to like [2].

[1] I'm happy to see in my personal experience that even my non-technical friends are starting to use password managers.
[2] According to https://hackernoon.com/why-do-most-people-ignore-two-factor-..., "less than 10 percent of active Google accounts use two-factor authentication. Furthermore, as per findings of the Pew Research Center, password managers are only used by approximately 12 percent of Americans." If people aren't using 2FA for their gmail account, which is arguably the most important account to protect, then they probably aren't using it anywhere else.
The unionisation of doctors in America is one of the reasons that the American healthcare system is so bad though. Maybe we shouldn't encourage any industry to increase its inefficiency by unionizing, and instead just offer a set of universal regulations that keep workers (both skilled and unskilled alike) from getting shafted?
Yes, obviously I had to go to the site to learn that. I meant, there was no indication on HN. I guess I commented because I was disappointed - I read a lot of stuff from the 16th-19th C, and hadn't heard the title before, so I expected something 'new'.

It's not a fragment, it's someone's selection from Pascal's book, one of the most famous books of aphorisms, if not the most famous. It's not Pascal's title.
If I - an American citizen - access a server in China, US laws are not what govern what they can do with my information. That is governed by Chinese law.

The US government apparently has a different interpretation. For example, they asked Microsoft for the information of a user from the servers in Ireland.
Good article; strikes a nice balance between a loving ode to a grandfather, and exploring how science is much more conservative than one might think.

Reminds me of this article [0], and specifically this passage, which makes the point that one metric of judging “crackpot ideas” that seem to come out of nowhere is by what they enable. Do they lead to the emergence of new results, or allow for the proof of things other than the direct thing that the theorem sets out to prove?

”Usually when there is a breakthrough in mathematics, there is an explosion of new activity when other mathematicians are able to exploit the new ideas to prove new theorems, usually in directions not anticipated by the original discoverer(s). This has manifestly not been the case for ABC, and this fact alone is one of the most compelling reasons why people are suspicious.”

[0] https://galoisrepresentations.wordpress.com/2017/12/17/the-a...
MongoDB | NYC | Golang Engineer | Full-time | Onsite | Visa

If interested, please email: jason.gorsky@mongodb.com
A great MongoDB experience starts with great tools.
The Drivers team builds the libraries and tools that developers use day-to-day working with MongoDB. Our mission is to increase developer adoption, satisfaction and retention by providing a reliable, enjoyable interface for developers and other end-users.
For this role, we're looking for someone who enjoys designing, writing, and supporting Open Source libraries and standalone tools for developers and administrators using MongoDB.
You might be right for this role if you...
Have substantial, demonstrable experience writing high-quality software
Have used Go before or would love to learn it and use it in your day-to-day work
Are fascinated with concurrency, parallelism and distributed systems
Want to participate in Open Source software development and communities
Communicate well, internally and externally, both in writing and face-to-face
Are excited by our mission and values

You'll be on a team responsible for...
The MongoDB Go Driver, currently under active development
The command line utilities that ship with the MongoDB server, including performance optimizations as our customers deal with ever-larger data sets
The mongomirror tool, a utility for migrating data from an existing MongoDB replica set to MongoDB Atlas (our cloud Database-as-a-Service)
Testing, delivering and supporting the above list across multiple operating systems and versions of MongoDB
You'll have responsibilities beyond just code, including...
Working with our Product and Server teams on designs and specifications for new customer-facing MongoDB features
Investigating bugs and support requests from commercial and Open Source customers for the libraries and tools our team maintains
Seeking out speaking or writing opportunities to evangelize to developer communities
Success in this role means...
Within three months, you'll know most of the codebase you are responsible for and will be contributing effectively day-to-day fixing bugs, implementing already-planned features and doing peer code-review
Within six months, you'll have implemented several major, planned new features in the driver or tools; you'll be able to respond effectively to technical support escalations for the codebases you know best; you'll have the trust of the team and our internal customers
Within a year, you'll have delivered several new releases of our software, will have significantly improved the quality, performance and maintainability of our codebase, and will be able to independently scope and design new features of moderate complexity
> Suppose tech companies were no longer legally allowed to use the network effect (i.e. they had to provide open-access to their public data via API).

Facebook and Twitter have public APIs.
I would argue that allowing the police to fire individuals from companies would be an egregious violation of human rights on par with disallowing free speech.
It's not an implementation of GDPR because the website doesn't have the right to exclude you from accessing the content even if you have not opted-in to trackers. It's a refusal to implement GDPR and having any business with European citizens (which for a local network affiliate is not a hard choice to make).
Obviously it was hyperbole, but OP was sloppy when they stated "it is perfectly normal for people to experiment with substances when they come of-age.". What are young people (13 year olds? 18 year olds? 20 year olds?) and what drugs (just weed? any drugs?)? Others chimed it and argued that kids naturally alter their consciousness by spinning around and nobody thought to clarify.

I don't think it's natural for kids to smoke marijuana. It is something that SOME kids do, but it is not natural or inevitable, and it is categorically not good for them (from a brain development, mental health, time-waste and addiction standpoint). There is a tendency for people to minimize marijuana risks and get sloppy around pot usage by kids.
Surely this has to fuel the flames on the "2019 MacPro will be ARM based" fire.

At this point, it seems Apple could pull it off if they wanted to, while thumping Intel in the process.
Tether shows letter from Bahamas bank to prove they are backed by $1.8B deposit
Ah, well, yes, looks like I was right, too, though.

Unless I'm mistaken (and that's possible, I've changed my opinion twice now), my example outlined above is

- conceivable, and

- has 85% accuracy (85 people correctly identified as liars, 85% x 9900 = 8415 correctly identified as non-liars, thus a total of 85+8415=8500 of 10k total "accurately" identified), and

- still only 5% or 6% of flagged liars are actual liars.

EDIT to add:

And if the system is tweaked as you suggest, to very rarely fail to flag a liar:

- suppose it correctly flags all 100 liars as liars

- suppose accuracy is still 85%, thus 8500 people in total classified correctly

- thus 8400 non-liars flagged correctly, and the remaining 1500 non-liars flagged incorrectly

Now still only 6.25% (100 of 1600) of people flagged as liars are actually liars. Thus, even with the tuning you suggest, this remains.

(Note to self: 1. think 2. write)
Hi!

I work at Cloudflare on 1.1.1.1.

1.1.1.1 supports DNS over HTTPS using Cloudflared. https://developers.cloudflare.com/1.1.1.1/dns-over-https/clo...

Our team actively maintains the repo.

Can you share what's been buggy about it?

Would love to share your feedback with the team.

Cheers!
It's already here, for displays. I've seen lots of internet comments claiming I need the >450ppi screen on the new high-end iPhone, not the miserable old cheapo 326ppi one.
My understanding (from working with lawyers in the past) is that it is enforceable in some states and unenforceable in others. I'm not a lawyer, though, and so don't really know first-hand.
ROLI | Multiple Positions | London | ONSITE

ROLI is empowering people of all backgrounds and abilities to make music more expressively. It all started with the Seaboard, ROLI’s reinvention of the piano, which launched in 2013 to worldwide acclaim. Since then ROLI has made its uniquely touch-responsive instruments smaller, more affordable, more compatible, and more approachable. It is creating a platform of hardware and software tools that connect perfectly with each other — and are also compatible with popular music-making programs. From premium instruments like the Seaboard RISE to free apps like NOISE, ROLI provides extraordinary new ways for people to make music.

We're looking for:

Platform Tech Lead
Senior Javascript Developer
Senior C++ Software Engineer

Find out more about these roles and beyond, here: https://roli.com/careers

If you don't immediately see a role that suits your particular skill set please do email careers@roli.com - we're always open to connecting with folks who are interested in working with us in future.