skysight-inc/HackerNews huggingface dataset:
They shouldn't have been allowed to get as big as they are in the first place. Where has the DoJ been on anti-trust/anti-monopoly laws? I'm guessing going through the revolving door. That's why those laws are there, because busting up a monopoly after the fact is much harder than preventing it from merger and acquisitioning it's way to that monopoly in the first place.
Yeah it's a bullshit argument. 2FA is a very cheap solution to a problem that could end up very expensive. If you can afford to (securely!) store account information and have a login infrastructure, 2FA is a minimal amount of effort to implement. You could add 2FA from scratch in less than 50 lines of code and one extra column in your account DB. There's no excuses.
Broadway Technology | Consulting, Software Engineering, Trading Application Support, Product Management, Project Management

Austin, London, New York, Toronto, Waterloo | ONSITE, FULL TIME, VISA

Broadway Technology develops high-performance distributed trading systems for leading financial institutions. Primary development languages are C++ (especially for latency-sensitive components), Python, and C#. Compensation and benefits are competitive, including the non-financial side: https://www.broadwaytechnology.com/careers#life-at-broadway

Visit http://careers.broadwaytechnology.com for formal job descriptions and to apply, or email jcowans@broadwaytechnology.com and mention Hacker News!
Hexagon Technologies | Senior Software Engineer - Full time or Part time / Software Development Interns / Co-ops | Remote / Boston, MA

Hexagon Technologies is an early-stage start-up focused on developing software for the financial services industry and is looking for a self-driven, full-stack JavaScript engineer to join our team. This position provides the candidate the opportunity to work in a fast-paced environment with a firm that values a work-life balance (and no commute!), as well as a chance to work with modern toolsets and technologies. We are seeking someone with the following skills:
Front end JavaScript skillset and a handle on contemporary (ES2015) language features are a must. Back end / Node.js history is not necessarily mandatory if you have similar experience with other comparable web backends from different language ecosystems.
Experience with modern web technologies like grid layouts, reactive frameworks, and graphql is preferred.
Relevant degree or minimum 2-4 years’ work experience ideal for full time applicants.
Although we are primarily focused on JavaScript, experience across a variety of programming paradigms and different levels of abstraction is highly valued.
As this is a remote position, being a self-driven self-learner is essential. Position will require comfortability with picking up new technologies and an ability to work on the command line in a Linux environment.
Responsibilities will not only include working on core application code but also on infrastructure and independent research of new topics as is needed. Day-to-day projects may include working with relational or non-relational data, consuming and developing web APIs, UX design, containers and VMs, shell scripts, realtime web services and backend system services.
A highly organized and motivated approach to membership of a remote development team and ability to communicate, collaborate, and meet deadlines in a flexible environment.

Market compensation and benefits - submit resumes and inquiries to hncareers@hexagontech.com
Legally, it is hacking.

I remember a story about someone getting an absurdly long prison sentence for guessing a simple password to a secure system.

Hacking only specifies the knowing and intentional circumvention of an authorization system. It doesn't place a value on how easy it was to do it.
> A Nest spokesperson responded to our request for comment and issued this statement:

> "We have seen instances where a small number of Nest customers have re-used passwords that were previously exposed through breaches on other websites, and made public. None of these breaches involved Nest.

It's surprising how many people reuse their password or use unsafe passwords. Including my own family.
> But what happens with the GDPR if I, a European citizen in Europe, access this website (blocking EU IP addresses) using a VPN?

WDAF Kansas City, is a Fox affiliate located out of Missouri state.

GDPR is an EU regulation, not a global regulation, nor a US regulation. The EU and GDPR has no legal standing over most media companies in the US and very few US Web sites, because they do no business in the EU and are not bound by EU laws. It does not matter if you're an European citizen in Europe or not, if GDPR does not apply to the owner of the server you're accessing.

If I - an American citizen - access a server in China, US laws are not what govern what they can do with my information. That is governed by Chinese law.
Oh I'm not aware of the means of using JWT you describe. I think the context of this article is using JWT exclusively, and by the looks of things plenty of people are doing just that.
> If you're using a system that has them built in, lovely, but if you're not, it's a lot of extra work.

They're built in with PHP and most Node.js frameworks I've ever worked with.

I'm not sure about Python, RoR, etc. web frameworks but the engineering overhead for adopting server-side sessions should approximate 0, since they're usually the default.
Maybe these social networks could be manage by the community. A bit like HN. Here if you post crap, people can downvote your crap to the bottom so that no one can see it.

If you want to be seen and red, you need to post quality and gain reputation.
People with bad reputation will slowly lose visibility.

It might not work, but clearly it seems that quality is a prime factor on HN and it's one of the reason why I trust more HN than any other social network.
People seem to have adopted the term "hacking" to imply any and all unwanted access to a device or system. As far as I recall it meant that a device or system was modified in a way that was not originally intended. Logging in with the password is an intended use-case of the device, therefore not hacking in my opinion.
Zzzzzzzz geekbench.
Perhaps they use machine learning for this. Was that used in your project?
DigiFi | Software Engineer | New York City | $80k-$100k + Equity + Benefits | Full-Time, Onsite https://angel.co/digifi/jobs/57845-software-engineer

DigiFi is a SaaS technology company located in New York City that provides software to help businesses make better automated decisions. Our platform lets businesses easily use automated machine learning and rules management to optimize critical decisions with no coding or technical expertise required. https://digifi.io We are looking for experienced software engineers to join our growing team. We use React on the frontend and NodeJS on the backend, along with both SQL and MongoDB. Our applications are hosted in AWS. The ideal candidate will have formal training in programming and professional experience with software development in either enterprise or startup environments. They will be expected to collaborate closely with a small team of engineers and ship code frequently while demonstrating a commitment to developing, testing, implementing and maintaining enterprise-quality software. Apply on using the AngelList link or with resume to info [at] digifi.io
Also you're typically already looking up the user so you can just add a token_version property on the user and increment it when you want to expire tokens for that user. JWT problem solved without any additional work for the db.
I think we’re long past the point where “hacking” in this sense has any sort of connotation of skill (and that is probably for the best). “Hack” is just a more colloquial synonym for “compromise”.
What these reports often seem to ignore is that there is still biodiversity within our cities--sometimes a lot of it. If the default assumption is "city bad, wilderness good", we're never going to make any progress, because short of an apocalyptic event cities are here to stay. What we should be focused on is making the cities we live in more sustainable and integrated with their ecosystems. Green roofs, urban parks, sustainable transportation networks, clean energy--there are plenty of avenues being explored today that are connecting our cities with nature. Cities should be a part of nature rather than apart from nature.
Senior Software Engineer in Test
I mean, Id argue that is exactly the way the system is designed, and it mostly does the job it is designed to do, not just a side effect.

Defining what makes a non-hostile workplace is hard, enforcing it on individuals is harder, so instead delegate that responsibility to each individual company and take action on the company if it does not do that.

In no way is it a perfect system (cue tons of excessively formalized training etc), but it is the best system I know of.

Allowing companies to remove the external force of "If you do not do this, you may face civil action" breaks the model though, so I completely understand why Googlers would like to remove forced arbitration. The risk of that is a contributing factor towards compliance.
Did the evaluation of algorithm's superior performance included both false positives and false negatives?

Personally, I don't like the concept of deploying algorithms for which we don't understand how they work, in scenarios of high health or social impact. It's cute to deploy DNNs to classify cat pictures, as when - not if - it spectacularly fails, nothing of value is lost. But if you can't point at the verified model the algorithm follows, or at least trace the algorithm after the fact, understanding and assessing every step it took, then that algorithm has no place in making decisions about people's lives.
Angaza | San Francisco | ONSITE | https://www.angaza.com/contact-page/#careers

Angaza enables financing of solar energy systems and other life-changing products in off-grid regions across Africa and Asia, reaching more than a million people who now have electricity in their homes for the first time:

- https://youtu.be/2EvEeAs_9R4 and https://youtu.be/onMT6_Yv67I

- https://blog.angaza.com/illuminate-angaza-511cd41ce130

The technology you build will help reach millions more. We are hiring multiple roles, including software engineers and engineering management, in both San Francisco and Nairobi:

- https://www.angaza.com/contact-page/#careers
“Many” seems unwarranted (especially when it comes to prosecution of a charge rather than entry of a complaint or pursuit of an indictment), but, yes, that was an overgeneralization. But, it is by far the dominant rule.
It's also $$$
TradeMachines | NodeJS Developer | Full-Time On-Site | Berlin, Germany

At TradeMachines our mission is to make the machine business smart. We connect machines buyers and sellers all over the world and provide them with insights into
the market.

As part of our small engineering team, you will work closely with other members to create and run our different services in production. We are working on a big variety of technical challenges (marketplace, data pipeline, data science, scraping ...) based on a modern architecture.

Technical Environment: Microservices / AWS / NodeJS & Typescript / Docker / Terraform

Requirements:

- Love for continuous improvement and learning
- Comfortable with NodeJS

Unfortunately, no visa support is available at the moment.

Send me an email at fbr@trademachines.com
Don't all those things on your wish list just make it like every existing OS/machine?
A ARM Macbook will, soon. That is what I'm reading from this story.
SCRUFF | React Developers & Ruby Developers | New York, NY | Part/full-time | On-site | https://www.scruff.com

SCRUFF, one of the largest global gay social networks worldwide, has an opening for a part-time React Native developer in our New York office. Ideal candidates have at least one year of React/React Native programming experience. You will be responsible for developing, maintaining and delivering React Native templates and apps. To start, we anticipate this role requiring 15-20 hours of work per week for 2-3 months, with additional hours to be determined as our needs evolve. New engineers and bootcamp graduates may apply, but please review our job requirements first.

We also have a full-time opening for an experienced Ruby Engineer. Ideal candidates have 3+ years of server-side software development experience, in languages like Ruby, Python, Java or Perl, and 5+ years working in command-line unix/linux development environments. Candidates should have experience working with large, 24/7 consumer software applications with demanding uptime requirements. SCRUFF is among the largest customers of numerous Amazon Web Services, so experience with the AWS stack in particular or distributed systems in general is a plus. Testing is essential to ensure our 24/7 service is always running smoothly, so experience with testing frameworks or test-driven design is highly desirable. The SCRUFF server stack is implemented in Ruby (Sinatra, not Rails), so past Ruby experience is a plus.

https://www.scruff.com/en/careers
> The basis of that entire argument is based on a false understanding of what JWTs are and how HTTP state transfer works.

I don't even see why you believe this to be the case. The article (and the follow-up) are both pretty clear about what the actual issue is.

Did you read them or just react to the headline?
With jwt you have a standarized way to get
the data on the client side for example.
So, you don't like for the term "open source" to include anti lock-in conditions to protect users freedoms and only ok with it if the license permits lock-in exploitation of users via hosted services? That's the kind of open source definition I strongly disagree with.
CADRE | New York, NY & Toronto, ON| Onsite | Experienced Engineers | We are a well-funded startup (Series C | Total Funding $135M) at the intersection of technology and investing. Our mission is to provide direct access to the world’s best investments. We are building the digital stock market for the once exclusive Commercial Real estate industry. Open Positions: https://cadre.com/careers
Site Reliability Engineer (NYC)- https://cadre.com/careers/apply?gh_jid=1130468

Senior Software Engineer (NYC)- https://cadre.com/careers/apply?gh_jid=75123

Data Engineer (NYC)- https://cadre.com/careers/apply?gh_jid=1185373
And also, don't forget to register yourself on the voter lists for the EU's 2019 election!

The countries in which the pilot takes place were mainly EPP (odd correlation...?)

By the way, direct links to newpress release and project page, which lists involved countries :

- http://ec.europa.eu/research/infocentre/article_en.cfm?artid...

- https://cordis.europa.eu/project/rcn/202703_en.html
For one example the notion of a generalized inner product and its induced norm is important for the derivation of conjugate gradient algorithm. My smarter friends have told me that anything involving cost functions and covariance matrices (as might arise in a log likelihood thing for a multivariate normal random variable) will probably end up with weighted norms as well, but I have likely mangled this. So to mangle things further I think that this is very important to many fields eg control or statistics
Can vouch. If talking in music scenes, NI is Native Instruments.
It's the opposite of surprising, that's exactly how most accounts get compromised.
a recent change in California law: Governor Brown recently signed Senate Bill 820 which prohibits secret settlements and non-disclosure agreements in sexual harassment cases.

in other words, if a private settlement is agreed to, the victim's name may be kept confidential, but not the perpetrator’s.
Static websites are the way to go, and as for hosting, I personally find Netlify to be awesome, and well fit for static websites (my blog is built with a custom SSG, run by Netlify on every commit).

You can simply use git for versioning, FrontMatter for article metadata (like title, published status etc.), reStructuredText or Markdown for writeup, and whichever tool you may see fit.

If you don't want to build your own, Hexo, Hugo or Jekyll are well-known, but if you want something a bit more "fit" for you, I'd recommend checking out Metalsmith.

As for the website hosting, you have a lot of available options due to the simplicity of hosting some dumb HTML pages and medias.

- Git hosts, like Github, Gitlab (my favourite), Bitbucket

- Netlify, Surge

- Some shared web hosting, like the base offers at OVH: When you buy a domain name, you have, for free, 10MB of space for a shared web hosting, which can easily serve HTML files. Buy a .xyz domain for less than 3€/year and have free hosting.
If Vint Cerf had said this as a Google guy, it would be a bit more news worthy.
A major difference is in sustained performance, not peak performance. Mobile CPUs often have cores these days that are comparable to desktop/server CPU cores but they lack the cooling to sustain peak performance for very long. They're thermally throttled very rapidly.

That being said you could take such a CPU and given it desktop-like power and cooling and it could perform like a desktop chip.
Magicleap | Digital Health Cloud Software Engineer | Fort Lauderdale, FL | ONSITE | https://www.magicleap.com

We are building the future or VR/AR: Mixed Reality! Magicleap is probably the hottest and most well-funded startup out there.

Those positions are to build a Cloud dedicated to the healthcare aspect of the device.

Tech: Golang, Docker, k8s and all the good stuff :)

ping me directly gcharmes+hnjobs@magicleap.com or check out our career page: https://www.magicleap.com/careers
id love to see a "what percent of devices are sold to developers" statistic. youre not their target market.

you can already run VMs on azure or aws and access them with rdp.
Kind of related: Although not a real mouse, if you are on the latest iOS you can hold down the spacebar while using the keyboard and get a mousepad/cursor which is convenient for selecting text.
ORIS Intelligence | https://www.orisintel.com/about-us/join-us/ | Columbus, OH | Full time | REMOTE

ORIS monitors ecommerce sites for some of the biggest brand manufacturers in the world. Many of the brands you use everyday choose ORIS to ensure retailers adhere to their minimum advertised price (MAP) policy.

We have three engineering teams that work closely together to keep our systems humming and we're looking for our next teammates.

We value transparency, motivation, customer focus, simplicity, and grit.

We are looking for:

- PHP Software Engineer - This role helps to build our best-in-class SaaS product called PROWL. We run Laravel 5.7, PHP 7.2, MySQL 5.7, Nginx, React, RabbitMQ, Redis.

- Data Quality Engineer - This role is half data analysis, half software engineering. We use SQL, R, Python. This is a small team that makes a BIG impact.

- Ruby/Node Sofware Engineer - This role helps aggregate ecommerce data using a variety of web scraping techniques. Ruby & Node are the primary languages used. RabbitMQ, Redis, ElasticSearch are used heavily as well.

Apply by email at careers@orisintel.com w/ the job title in the subject.
You're saying these things won't work because IBM misused the word 'AI'?
Brenger | Senior Frontend Engineer (JS/React) | Amsterdam, The Netherlands | ONSITE | VISA SPONSORSHIP
Brenger is looking for an experienced frontender (JS).
We are a logistics startup (with 2M funding) and quickly on our way to become profitable.

We are in the extending our internal development team (our current platform is build by a digital agency) and migrating to a new better scaleable tech stack. It is an opportunity to become one of the early stage developers of the company and therefore be an important influencer of the product, the technologies we use and the team we are forming. We have a team of 4 and we are now looking for a senior frontender/javascripter to become part of the core development team. We have got a proper plan and budget to build a first-class data-driven product and team and have many interesting technological challenges ahead.

If you're interested, drop me a line: hugojan@brenger.nl

No recruiters/No agencies/No remote
Is there a sensible way to log IoT traffic? I'm paranoid not just of who may be trying to access IP cameras, but what they may be sending back to their manufacturer.
This failure to update 32bit code to 64bit is one of the most common mistakes nowadays still. even more than the occasional off by one error or overflow.

I had to fix perl5 at about 20 places, and most fixes are still not applied upstream.
Farcical
You know what the error rate on these devices is?
My wish list is short:

- Ability to share my iOS software with my own customers without Apple deciding if it's politically correct or benefits Apples profit sheet

I'm not holding my breath on that one
Mason | https://www.trymason.com | San Francisco, CA | SWE, Senior SWE | REMOTE, VISA

Mason provides front-end-as-a-service - we're creating the AWS for front-end software; functional UI components served over API and rendered in your application at runtime. Lots of tough challenges to move the state of user interface software creation and deployment forward. We use Go, React, Redux, Mongo, a bit of Node.

Hiring engineer #1, work directly with myself (CTO) to build out our system. Interesting challenges include WYSIWYG browser-based Builder to allow users to design and configure software components. Mason library distributed via NPM to fetch, render, and make components functional in our customer's application. Golang API to serve component configuration data and track analytics in customer's applications.

Email kareem@trymason.com
What is the difference between your ideal iPad Pro and a normal MBP?
Machine-learning algorithm beats 20 lawyers in NDA legal analysis
Budget of the United States Government, 2016
Yeah, sounds great doesn't it? That great hardware with useful and flexible OS!
Not really. I have unique passwords everywhere, but I basically only have two PINs.
Traversing a list of 100,000 users/sessions in a db to pull up the session is a different beast compared to traversing an in memory list of 10-100 revoked JTIs in redis. It is a lot less data to store and optimize (the full session vs. a small list of revoked JTIs)
It might be a nice Flickr feature -- even if you had no plans of leaving Flickr -- to auto-transfer all of your photos to some other storage service. Even something like Amazon Glacier, which would obviously not be a competitor to Flickr. The user would, of course, be responsible for having, maintaining, paying for, etc., this other storage service.
There was a security breach. The product was operating outside of the behavior range that the parents were told about. If I tell you that my toaster will not catch on fire and then it burns your house down while you use it as instructed, I can't argue that you "didn't understand" its behavior - sure, you didn't predict that it would self-immolate, but is it really your job to reverse-engineer my product to check for poor design?
The arguments here says you can't invalidate a JWT. Exactly!! JWT IS A TOKEN. You can use it for refresh (invalidation & renew) and access (authorization) tokens. There's so much disinformation about JWT. The end result is some not invented here "JWT".
Why is this low quality fear mongering Fox news post on the top page of HN? There is no evidence of "hacking" here, and Nest's official response was that the person had a poor or breached password. I get that this would be a nightmare situation, but it has nothing to do with Nest (at least with the current info)?