skysight-inc/HackerNews huggingface dataset:
Bungalo | Senior Full Stack Developer, Full Stack Developer, Data Engineer | Austin, TX | Full time | ONSITE | https://bungalohomes.com

http://careers.bungalohomes.com/

Bungalo is looking for Full Stack Developers to help build the Bungalo website, backend, and mobile apps. You will work on creating new features for https://bungalohomes.com and other internal applications that make Bungalo go. We are also building mobile apps using React Native. You will work with our design, product, and marketing teams to architect, implement, and ship high quality products.

We are also looking for a Data Engineer to tackle complex business problems by collecting raw data and converting it into meaningful and actionable insights. You will work to build our data warehouse and pipelines and use BI tools to create reports and visualizations. You will collaborate with all departments to architectect, implement, and ship high quality data products.

Bungalo is a new venture that provides consumers with an all-in-one home buying experience, guiding them through every step of the process. We are building a consumer brand whose goal is to change the way homes are bought and sold. Bungalo Engineering is doing some interesting stuff. We are building a modern backend on cloud infrastructure. The website and other internal tools are built with React.js, REST APIs, and document databases. Our iOS and Android apps will be the command center for customer’s home shopping experience. And finally, our BI and data science team will work to optimize every step of the Bungalo home buying and selling process.

We are a small, fast growing team and you’ll have the opportunity to help shape the culture and how we build software. We are looking for engineers that like to move fast and work with a sense of urgency. We take pride in our team and our work.

Senior Full Stack Developer http://careers.bungalohomes.com/p/1256c764e513-senior-full-s...
Full Stack Developer http://careers.bungalohomes.com/p/8f0be63b18d8-full-stack-de...
Data Engineer http://careers.bungalohomes.com/p/fb5d039e961f-data-engineer
SmugMug allows a custom domain. I'd argue that it's more private / less community oriented than SmugMug. Depends on what you want I guess; I've read about many people using 500px to upload some of their best shots as a portfolio & using smugmug for the rest.
Relicensing is still very much possible with DCO. You just put contributions under the license they were originally submitted and use whatever license you want for owned code. Essentially providing a separate license(s) for contributions.
The point is that JWTs are irrelevant to this discussion. How you pass data between client and server can be cookies, or another header. How you encode that data can be JWTs or your own format. It is not either/or.

Whether you manage state 100% on client or share it between client and server is an entirely separate topic.
I have a lot of pretty small pictures from a trail cam on Flickr so going only by number of pictures hurts me.
I just want to express my gratitude for finally, fully embracing wider gamuts. I've been eagerly awaiting this day (and have a group all set up to show them off - https://www.flickr.com/groups/2234658@N22/).

Questions:

1. To the extent reprocessing is necessary, will that be done automatically (e.g. as it is for photos originally uploaded at full resolution, and now being displayed at 5K)?

2. Do all mobile OSs provide the color profile management necessary for the app to properly display photos? I know this was a challenge in the past.

3. Will there be any indication a photo is outside of sRGB, aside from EXIF?

P.S. - I'm sure you're aware, but there's a (closed) group of alpha/beta users (https://www.flickr.com/groups/flickrbeta/) always eager to help provide feedback.
Ever been on the Eurostar? The experience is spectacularly good when compared to driving or flying...
Fluidly | London, UK | ONSITE | Senior and Mid-Level Full Stack Engineers and Senior Data Engineer

We want to solve the biggest problem facing businesses – poor cashflow. We use technology to provide real-time cashflow forecasting and automated credit control. This year we were chosen as one of Wired's hottest European startups and have received numerous industry awards.

We've got an amazing team and great technology stack, mostly running on GCP. It's a great opportunity to scale and build an exciting data-intensive product with machine learning at its core.

For more info and to apply see AngelList: https://angel.co/fluidly/jobs

If you have any questions feel free to email me at tom.phillips@fluidly.com.
Ok, given your replies I can only conclude that I should never use an analogy in a reply to you ever again. You've read everything literally and run away with it. The only thing I was attempting to say is that the random mutation phase is a part of evolution and that can't have a success prerequisite. This was intended to say that one can't require previous success to be a prerequisite to political and economic ideas.
Smugmug allows custom domains, including support for https. It also allows for custom branding and layout design (your name here, powered by Smugmug).

I wasn't able to get a bare domain (e.g. domainname.tld) to work directly, so i set up a redirect to www.domainname.tld from there and it's been good for me. I don't know if that has changed since I set it up.
Tiney.co | Full-time | Remote or London | NodeJS + React

tiney.co is a new B-Corp startup from an experienced founding team building a new community in the Early Years education and childcare sector. We've recently closed a £1m angel funding round and are looking for NodeJS and React/React Native developers to join the team and help build out our initial platform.

Apply here:
https://workinstartups.com/job-board/job/73786/lead-engineer...
and
https://workinstartups.com/job-board/job/71567/reactreact-na... or email jobs@tiney.co
I guess that depends on the application. So long as you can guarantee that it happens within a given time frame that might very well be good enough.

That said, I don't think a lot of people really take this into consideration when they use a stateless JWTs, or the computation required to issue really short lived tokens.

Aaaand now I have to check my fire extinguisher.
I didn't live in Amsterdam. Unfortunately that site doesn't let me take the average for the Netherlands. Amsterdam is the capital, perhaps fairer to compare it with New York. If you compare Eindhoven with Portland, the numbers seem more in support of what I was saying. But I should have specified that better. Nice site, I'll be using that in the future. "Anecdotally", it's attractive to compare Eindhoven and Portland, because they're both "small big cities" (relevant in their own right, without being the large token cities that define their respective countries).
I am talking about out west. I hadn't thought of the bison angle, but thats a good point. (I'm a geek, not a rancher, so my knowledge on these things is anecdotal from listening to the old timers)
Problem is, there is no way to compare creativity between the founders of 2 different genres. Is Tolkien more creative than Allan Poe? That would be a very pretentious question.

I am not sure why the grand OP claim that Jin Yong's work are retelling of history. It uses history as its background, but one of his most important contributions is to create Jiang Hu(江湖), a society that is beyond the realm of moral governmental, that is Chao Ting(朝廷), which usually represents the account of history.
Ooh, I found it! If you visit someone's else's About page (like mine: https://www.flickr.com/people/donmacaskill/ ) and click on my join date, you'll see the calendar interface. Presumably, you want to be able to do this on your own photos? I'm not sure why you can't, but I'm finding out. :)
A bit harsh, but... yeah, companies need to make money, and it seems like flickr is going about that in the right way here.
Certainly you would want a more abstract follow up for many cases. Even engineering or computer science students may have to learn about e.g. inner product spaces and orthogonal polynomials for their numerics class.
Article text:

LONG ISLAND, N.Y. -- A mother in Long Island says a stranger hacked her family’s Nest camera and tried having a conversation with her five-year-old son, according to WPIX.

Nest ads will show you beautiful images of mother nature captured on their outdoor cameras, life’s silly moments and even those moments when your child is up to no good. But for this Long Island mother, the Nest cam she and her husband set up around their home to act as a nanny cam became a full-on nightmare.

“My son came running out of the playroom and found me in the kitchen and said 'it’s not daddy talking to me. It’s not daddy.'”

Nearly every day, after school, this mother, who asked PIX11 to hide her identity, said her 5-year-old son chats with her husband through the Nest cam, a home monitoring system users can connect through their cell phones. This time, however, it was a complete stranger on the other end.

“He asked my son if he took the school bus home and he was asking him about the toys he was playing with and when my son said 'mommy, mommy,' he told him to shut up,” she recalled.

When she walked into her child’s playroom, the ominous voice addressed her directly.

Now she is frightened and wonders how long a complete stranger was watching her family. Since this frightening violation, this mother called police, who, while sympathetic, said there was little they could do.

As for Nest? She was simply told to change her password and switch to a two-factor verification when logging on, but for this mom it’s not enough. She wants to speak out to warn others about this potential danger lurking in their home.

A Nest spokesperson responded to our request for comment and issued this statement:

"We have seen instances where a small number of Nest customers have re-used passwords that were previously exposed through breaches on other websites, and made public. None of these breaches involved Nest. This exposes these customers to other people using the credentials to log into their Nest account. We are proactively alerting affected customers to reset their passwords and set up two-factor authentication, which adds another layer of account security. Customers can reach out to Nest customer support with questions or report anything suspicious to security@nest.com."
Thanks, this is exactly why we started working on Talegraph :)
I use JWT for authentication on my current project. And I eventually ended up having to check the user's 'role' in the database for authorization before I let them do anything anyway (and consequently, revoking someone's user role or suspending their account has immediate effect).

I saw many examples on the net of people putting role/authorization and various other types of session information within the JWT and it just looked insane to me.

Ultimately, I think what I ended up with is only a minor win over just generating random tokens and maintaining a "sessions" table. Probably not worth the effort and likely won't use JWT again.
Or just a couple of smart, dedicated people in a garage
For what it's worth there are some corporations I'd trust a lot more than the government.
It's got a niche audience, albeit a dedicated one. Wuxia didn't make it into the mainstream past Crouching Tiger.
Really simple applications, maybe. But SharePoint can't scale well in terms of features and cross-table-relations if and when the application needs to expand. It may save you up front, but bottle you in down the road. (I don't have enough experience with Salesforce to comment on it.)
I'm not going to complain about a company refocusing their profitability and adjusting things - good for them.

but i think this was horrible messaging. I would have much rather appreciated a more straightforward approach, instead of trying to get me to be excited for being limited to 1,000 images and video. I think it shows flickr still has a ways to go in building trust - because being disingenuous in messaging doesn't build it.
dang: please add (2013) to the title.
I tend to use Outline.com whenever I can't access an article because of a region-lock/paywall.

https://outline.com/https://fox4kc.com/2018/10/31/family-tra...
Kickbox | Software Engineer | Dallas TX | ONSITE | https://kickbox.com

At Kickbox, we build APIs and platforms that ensure email deliverability for both email marketers and developers. Since our founding in 2014, Kickbox has been integrated into many of the internet's largest brands. Our goal is to ensure customers with opt-in contacts get their message to the inbox, and to prevent all the rest from hitting ‘Send’. We're a small team, growing quickly, and focused on building a world-class company.

Tech we use: JavaScript, Node.js, Angular, MySQL, Redis, AWS, Docker, Ansible, and more.

We are committed to building a culturally diverse company and STRONGLY encourage applications from female and minority candidates.

Apply Here: https://kickbox.workable.com
Friendship paradox
Perhaps, but what they actually are is a standard way to encode some data. Whether that's a single number or entire user session state is up to you. And how you pass that data back and forth is up to you.

There are some common usage conventions but the limits described in this article are completely arbitrary.
Broad Institute of MIT and Harvard | Cambridge/Boston, MA | Software Engineer | INTERNS, ONSITE, VISA

We're a small team of software engineers, computational biologists, clinicians, and geneticists building cutting-edge tools and methods for interpreting some of the largest genomic datasets in the world (~500,000,000 genetic variants in ~200,000 human genomes/exomes). We aim to determine how genetic variation alters our proteins, biochemical pathways, cells, tissues, physiology, and traits/susceptibility to disease.

This position involves developing a React component library for visualizing genomic data. We are looking for friendly people with demonstrated experience in web tech, an eye for design, and genuine excitement to learn new things. Experience building performant React web applications preferred. In your email, please link to an online portfolio/github repo, and bonus points if you've built a nontrivial data visualization app. Technologies we use: React, Redux, D3, SVG, Python, GraphQL, nodejs, Docker, Kubernetes, Google Cloud Platform.

In this role, you'll receive domain-specific training at a world-class research institute. We're supportive of candidates interested in transitioning to graduate school. Your work will be 100% open source and highly visible in the genetics/genomics community. Our tools are used by tens of thousands of researchers and physicians around the world who cure disease and make biological discoveries. Come help shape the future of human genetic data visualization and discovery!

email: msolomon@broadinstitute.org

---

Broad Institute of MIT and Harvard | Cambridge, MA | Principal Software Engineer | ONSITE

We are looking for a senior-level full-stack but frontend-focused engineer, ideally with React experience, to provide technical leadership for a project supporting the largest research study in the world. We have a progressive, maturing engineering culture with people who care about the world and how we can positively impact it. We believe the treatment of human disease deserves world-class software engineering.

Experience in biology or medicine is not required. A background in Lisps or functional programming will be a good philosophical fit even though we use more mainstream technologies (JavaScript and Java) for most of our work. You can check out my LinkedIn profile [1] for more engineering philosophy.

[1] https://www.linkedin.com/in/davidmohs/

Email: dmohs@broadinstitute.org
Come join us! To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/coinbase!
CPU arch. would be the least of the problems. They can do roughly the same trick they did with the PowerPC -> Intel switch years back.

The problem is that you cannot just put a keyboard/mouse centric on a touch device. The entire UX will crumble down. Same story the other way around.

Small things like buttons and textfields need to be bigger and more spaced out. Entire panels need to be redesigned as the control density is lower. To get the same quality of UX you need to design for both interface methods.

iOS suffers the same when attaching a keyboard to an iPad. A lot of small things like workflow shortcuts and navigating the control space with just a keyboard just don't work (yet). Forcing you in either a touch-only mode or having to switch between keyboard and touch constantly.
I'm on LIGO's side on this one, but I disagree that one must be able to offer an alternative explanation in order to claim a result is bogus. That is, I don't need an alternate theory in order to falsify yours.

Again, to be clear: I think the LIGO results are probably correct. There's a bunch of corroborating evidence, and from the outside it appears they've been acting is very much good faith. I'm just making an epistemology quibble.
It sounds to me like you don't understand what Sven is arguing against in the article.

> JWTs are a encoding format. You can just put a single random unique identifier in there if you want. And you can use "cookies" to transfer JWTs automatically instead of using the Authorization header. Either can be checked on every request by the server.

This is totally irrelevant!

Does your cookie (JWT, PASETO, or whatever) contain more than just a unique identifier?

The argument is: Are you storing things like user_id=13455&is_admin=false in the cookie instead of having that entirely server-side? Don't do that, it's a bad design, store that server-side instead.

That's literally the argument.
They definitely have a process in place (they advertise their process a lot during orientation) but the demands I saw explicitly say they aren't good enough.
"Depends on what you want I guess; I've read about many people using 500px to upload some of their best shots as a portfolio & using smugmug for the rest."

That's what I do. Until now Flickr was my storage for all pictures and 500px only for my best.
>and the performance of Gmail (particularly the features you mention) is fine

>ten seconds to load your inbox

>16 GB, i7, SSD, 100 MB/s internet etc.

>fine
Because the flag algorithm works quite well too. You should flag this one if you think it's not newsworthy.
I can shed a bit of light into this as a Myers-Briggs INTJ (so common in Silicon Valley it's called the "programmer type.")

I'd definitely rather be behind a computer than out talking to people, especially people I don't know.

And I fear rejection--just being brutally honest. (Most people wouldn't admit that this is a core reason they don't like sales.)

I've gotten a ton better since I've run retail stores for the last 3+ years, and that's pushed me out of my comfort zone so frequently that I'm pretty decent at small talk now. (INTJs tend to hate small talk, and sales can be a lot of small talk!)

I doubt I'll ever get to the point where sales is fun for me like it would be for some of the extrovert types. Still, sales is worth doing as a boundary-pushing exercise and a getting-comfortable-with-rejection exercise.
Google Walkout Organizers Explain Their Demands
Like many other articles on JWTs, this one mischaracterizes the trade-offs that exist.

You can invalidate individual JWTs, you simply store the blacklisted token IDs in a table in your database. Implemented naively, this results in a request flow in which the database is still accessed on every request, defeating one primary purpose for using JWTs. However, there are better ways.

Since the blacklist is just a collection of random token IDs, it isn't sensitive. You can store it anywhere, including in memory in your web servers or in a distributed cache. You can wait during blacklist/token invalidation events until the newly blacklisted token has been propagated.

Using the above, JWTs enable a design space trade-offs that doesn't exist with session tokens. You trade slower blacklist requests (logout, one time confirmations, etc) and minor auth complexity for one fewer db access per request, more flexibility, and more uniformity if you use oath or similar.

All of this is around 90 lines of python in my Django site.
- Pensions are going away as states find they're unsustainable. My state (Alaska) has moved into a defined-contribution model, which I believe is like most jobs that offer any retirement benefits.

- Yes, 2-3 month breaks are pretty sweet.

- "Legendary job security." I believe this is going away. I have tenure, and my district still offers it. That's a good thing, I believe, because it allows good teachers to stand up for good educational practices. I am definitely able to support students and new teachers better because I am not in fear of losing my job. I know some states have moved away from tenure; I'm not sure how many.

Are these enough to keep good CS teachers in education? I don't think so. If you're a good software developer, I believe you can manage a career where you take some time between jobs. You can build toward a much earlier retirement than you can as a teacher. You can live a wealthier lifestyle along the way.

Neither career is a rosy field of happiness. But my point is that if you're a good high school CS teacher, you can probably find a much more appealing work situation outside of education. If we want good CS teachers available for high school students, we should probably look at this pretty carefully.
Stryd, Boulder, CO, Techstars Boulder 2015 | Android Developer (who loves running!!) http://www.stryd.com

Stryd is a talented, multidisciplinary team that is enthusiastic about creating the future of wearable technology for runners. Out of this passion, we’ve developed technology for runners that provides insight into their health, technique, and performance. By using Stryd, runners can train effectively, race strategically, and unleash their full potential.

We’re looking for runners who are passionate about creating great Android applications and crafting efficient, high performance, and delightful user experiences. We welcome people of different backgrounds, experiences, abilities, and perspectives.

Our work environment is open, supportive, and fast-paced. There is tremendous room for growth. The Stryd team is full of triathletes, ultra runners, marathoners, and track/cross-country athletes. As a runner, you will never feel alone working here.

Qualifications:

- You absolutely love running. Currently training with a goal in mind.

- Experience developing high performance Java and Kotlin code and view layouts and the ability to diagnose performance bottlenecks.

- A familiarity with the Android tool ecosystem for development, testing, debugging, and performance benchmarking.
An excellent understanding of best practices for concurrency and threading.

- Strong opinions about the product and an appreciation for what makes a great user experience.

Perks:

- Flexible vacation vacation policy so you don’t ever need to worry about work/race conflicts.

- Up to $500 of reimbursement for race entry fees each year.

- Health insurance.

Being able to relocate to Boulder is required. BTW, if you like running, Boulder is pretty much your dream place. You get tons of opportunities to run and train with LOTS of elite athletes who are Stryd ambassadors here.

Salary & equity depends on experience.

If interested, please send an email to kun@stryd.com
Since the topic is authentication, that is an independent concern, right?

Edit: unless you mean something about making the user do something. If it's running a script, it's the same in both ways. Now, if it is about the user retrieving and sending the token, the attacker could still ask the user to manually get the session cookie or the localStorage JWT. The cookies might be protected not to be accessible from JS, but they are still in the browser.
I have never talked about the selective phase.