skysight-inc/HackerNews huggingface dataset:
How is poor password security "hacking"? If you choose to use the same password on all of your devices then that is solely on you.
WineDirect | Vancouver, British Columbia | Full-Time, Onsite | https://www.winedirect.com

WineDirect offers solutions for managing winery websites including ecommerce, point of sale systems, content management, and customer relationship management. Higher conversion, greater customer insight, an easy yet innovative toolset, and one connected platform allow you to sell the most wine online.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/winedirect

Here are our open roles:

- Junior Developer: https://winedirect.breezy.hr/p/068bfea84b72-junior-developer

- Intermediate Software Engineer: https://winedirect.breezy.hr/p/6bc8535984ba-intermediate-sof...

- Data Migration Specialist: https://winedirect.breezy.hr/p/785e0b13c65a-data-migration-s...

Tech Stack: Languages/Frameworks: Angular, Node, Serverless Lambda, Rails, Coldfusion
Databases: MSSQL, Aurora
Cloud Providers: AWS
For the most part it forms a clear statement that the site operator does not wish to deal with EU clients.

So, yeah, if the odd EU-based client like me decides to VPN/Tor their way in, then legal action against the site operators for not dealing with my data appropriately shouldn't stand up.

Just a guess. IANAL.
You may never be able to run VirtualBox on an iPad Pro but there is a good chance VirtualBox will run on an Apple chip in the near future.
Maxwell Labs | Amsterdam, The Netherlands | Frontend, Backend and more | Onsite | Full-time | Visa | https://maxwell.ai

Maxwell is building the leading conversational commerce platform. Our customers include Takeaway.com, Hellofresh, Catawiki and Heineken. They use our tools to instantly reach & engage customers through chat apps. We think of ourselves as the Sendgrid for today’s preferred ways of customer communication: instant, asynchronous and 24/7 availability.

After completing a seed funding round, we are now looking for developers to join us in creating the next generation of customer communication tools. You’ll be working with an international team of four experienced software developers and a commercial founder. Our team’s experience includes Yahoo, Hellofresh, Tom Tom, Salsify and The Cloakroom. Our beautiful office in Amsterdam is located on the Herengracht in the center of Amsterdam. We have experience with arranging work permits and are open to applications worldwide.

Tech stack: Python 3.7, AMQP, MongoDB, React, Redux, Docker, Bitbucket Pipelines

Frontend: https://angel.co/maxwell-ai/jobs/287296-senior-frontend-deve...

Backend: https://angel.co/maxwell-ai/jobs/269372-senior-software-deve...

We are also hiring for other positions (design, machine learning, UI): https://angel.co/maxwell-ai/jobs

Questions? Want to apply? Talk directly with our founder and mention that you came across this position on Hacker News: asbjorn.jorgensen@maxwell.ai
In this case technology allows those human conditions to breed. Because they remove many restrictions which are pushing people toward sanity.
I would love to do it, but unfortunately most APIs forbid imports and only allow you to store pictures for caching purposes (Flickr [1], Google Photos [2]) and have restrictions / heavy fees for commercial usage.

Dropbox import is planned, I havent looked at SmugMug API's terms yet but will add it to the todolist.

[1] https://www.flickr.com/help/terms/api
[2] https://developers.google.com/photos/library/guides/acceptab...
13.3% Tax? That low? Are there anything other than State Tax?
theMednet | New York City, NY | ML/Backend Engineer | ONSITE

theMednet (YC W17) is hiring employee #2. We are StackOverflow for doctors with a focus on Cancer.

We are looking for a software engineer with strong machine learning skills to join our small team. The role will focus on building tools and products that use internal and 3rd party data to improve user experience, data quality, and operation workflows. This includes:

* Building recommendation systems to improve content recommendations to doctors using theMednet

* Enhancing user profiles by leveraging 3rd party data sets like medical claims data

* Building tools to more accurately label information in our medical knowledge base

* Suggesting product changes to improve data capture for ML purposes. Identifying, transforming and integrating 3rd party data sets

Basic requirements:

* Backend engineer with experience with NLP/ML toolkits

* Driven by a mission to build something that will improve the lives of all cancer patients.

* 5+ years experience and history of shipping product (preferably with at least 2 of those years at a funded startup)

Apply at jobs@themednet.org
I honestly think they are going in the right direction and are purposely taking their time to perfect each development before over complicating iOS. They have an opportunity with iOS to start from scratch and develop new ways of using and interacting with a computer and have decided not to rush it.

My iPad Pro wish list:

- A “Proper” file system

- Ability to run my own code written on it (and leave it running in background, e.g. a development web server)

- Terminal access

- A detachable keyboard with touchpad (far better ergonomics than a touch screen when typing at a desk)

- Support for a mouse (less important)

Steve Jobs said they would never do a stylus, now they have one. Just wait to see what they do next.
https://benchmarking.nodejs.org/
Buoyant | San Francisco | Full Time | https://jobs.lever.co/buoyant

Buoyant builds open source, mission critical service mesh software (e.g. https://linkerd.io) that powers the production infra of companies around the world. Our mission is to democratize reliability and security in an increasingly complex system infrastructure landscape, by giving everyone the power to write safe, reliable software--not just the big tech companies.
We are Series A funded with a small engineering team and a modern tech stack (Go, Rust, Scala, React, Kubernetes, etc). We have strong values, a dynamic, diverse team, and awesome investors (Benchmark, SV Angel). Come help us build a company we can be proud of!

Positions:

Sr. Software Engineer, Full Stack - https://jobs.lever.co/buoyant/7e3b072c-1204-4e5f-ae57-100892...

Sr. Software Engineer, Tools and Performance - https://jobs.lever.co/buoyant/01011edf-e9c8-446a-9fbe-4a8786...

Sr. Software Engineer, Systems - https://jobs.lever.co/buoyant/7a64f7d1-6fea-40b1-ba52-5ab448...

Software Engineer, Developer Advocate & Evangelist - https://jobs.lever.co/buoyant/2a638b1d-665d-48e8-b0bb-8d661a...
Hungryroot | Software Engineer, Full Stack | New York, NY | ONSITE, FULL-TIME | https://www.hungryroot.com/careers/software-engineer
At Hungryroot, we are building a new way to grocery shop. Rather than browsing an endless selection of items at a traditional grocer, customers can now receive personal deliveries based on their tastes, lifestyle and budget preferences. We learn what customers like and don't like, and we deliver fresh, wholesome foods with simple-to-prepare instructions, making it easier than ever to eat healthy. Our mission is to make healthy living easy. We’re a passionate, fast-paced organization backed by some of the nation’s best venture capital investors.

We’re looking for a highly motivated, problem solving Software Engineer excited to play an integral role in our lean, rapidly growing Technology team. At Hungryroot, we experiment, iterate, learn, and repeat. Most importantly, we build things people love. As a member of the Technology team, you will be responsible for development of the company's customer-facing sites. The ideal candidate is obsessed with delivering the best possible customer experience, values software engineering best practices, and never forgets about scalability and performance when designing code. This is an exciting role for someone who wants to get in at the ground floor of a rapidly growing start-up, and for someone who has established a track record as a dedicated and positive team player, has a passion for health, wellness and craveable food, and is ready for their next challenge.

Tech: Python, Django, MySQL, AWS

If interested please email: careers@hungryroot.com with "Hacker News" somewhere in the subject.
Fiery Eye of Sauron Stares Down San Francisco from Atop Salesforce Tower
Is there a better heuristic they could use? Outside of of using HTML5 Geolocation APIs, there's not much else they could do.
Industry: (aero)space

Location: Earth

Remote: don't care

Willing to relocate: yes

Technologies: programming (C, python, Asm, Rust, ...), sysadmin and tooling (centos and debian, version control git, monitoring prometheus, jenkins, ...), electronics (pcb design, soldering, robotics, ...)

Résumé/CV: https://cv.nodraak.fr/en.pdf

Email: cf resume

---

I am a French engineer, freshly graduated, fascinated by computer science
and electronics. I am looking for an internship or first permanent job starting in April 2019. I can relocate anywhere on Earth, but Europe is preferred.

Professional objective: software development or electronic design for space applications (launchers, satellites, spacecrafts, etc).
Nobody uses email any more ...

I mean they use it but it's not a high-engagement medium. I'd guess nearly 90% of emails never get read.
> Javascript ist also required for the vast majority of web-based exploits.

So are browsers...
I mean...me too! But IMO that's not quite the case. I think the argument is the best, most insightful pieces are going to get the most traffic.

But still, I'm still pretty happy about the subscription. He's better than most bloggers out there.
Devoted Health | Boston, MA | Software Engineers, SREs, Designers, Data Scientists, Head of Corp IT | Full Time | ONSITE | https://www.devoted.com/

We're building a better and more human health insurance company to improve the lives of seniors in America

We are guided by a deep belief that every senior should be treated like we would treat a member of our own family: with loving care and a profound commitment to their health and well-being through world-class technology and customer service.

Stack: Go, Python, Postgres, GraphQL, gRPC, React, TypeScript, Docker/Kubernetes, Terraform, AWS
PathAI | Boston, MA | https://pathai.com

PathAI is looking for an Director of Engineering to help lead our work to detect cancer faster and more accurately while paving the way toward personalized medicine. We're also looking for individual contributors to our application engineering, platform engineering, and design engineering (front-end development) teams as well.

We're working with a modern stack using Python/Django/Flask/DRF, alongside a Vue-powered front-end. Services are containerized, and we do our best to have a great engineering environment alongside our regulatory and compliance efforts. We're a technology company working within healthcare, not a healthcare company trying to leverage technology.

This role in particular will be helping build and lead our application engineering team, which works at the python/postgres layer to provide services for software-based medical devices, customers via the front-end, and internal teams. The team is five people today, and expected to grow through the short-to-mid term.

Work alongside a diverse set of expert technologists, computational biologists, and computer vision scientists – if you're intellectually curious, it's an amazing environment to be in. We're well-funded with strong revenue and growth.

Check out our open positions at https://www.pathai.com/careers/.
SEEKING WORK | UK | Remote is ideal

I'm a full stack developer. For the last 3 years I've been working full-time on my one-man startup Saber (https://www.saberfeedback.com) however I'm now looking to get back into freelancing.

I mainly work in Ruby on Rails, EmberJS, Javascript, PHP, WordPress and CodeIgniter.

Drop me an email on matt@mattbearman.com to discuss your project.
Fuze | Multiple positions | Software, Product, Design | Full-time | NYC, SF, Boston, Seattle, Ottawa, European locations | Very flexible remote policies

Fuze is a global cloud communications and collaboration software platform for the enterprise. Through an innovative and consumer-inspired unified experience, Fuze enables seamless transition between voice, video, messaging, and content sharing. Fuze empowers the digital workforce anytime, anywhere, and across any device. Headquartered in Boston, MA, Fuze has additional locations including New York, San Francisco, Seattle, Ottawa, London, Amsterdam, Aveiro (Portugal), Paris, Munich, Zurich, Copenhagen, and Sydney. Our vision is to power every business conversation.

See our openings here: https://grnh.se/bfffe6731
Sorry, I'm going to be a contrarian here. JWTs can be good.

First, cookies-vs-local storage is a non-issue here. If a JWT is small, it can be put in either location.

The only real issue is, should session state be on the client or on the server?

Suppose you have an app with large numbers of users, doing hundreds+ of queries per second across many boxes. If you put session state on the server, then you must either 1) have sticky sessions, which generate problems when a server goes down; 2) have a central session server, which generates scalability and reliability problems; 3) have a Redis-like distributed system, which either a) must do one or more server-to-server round trips on every client call to validate the session, or b) cache session information on a node.

When latency matters, an extra server-to-server round trip is a non-starter. And if you do server-side caching, then cache invalidation and JWT invalidation present similar problems. ("There are only two hard things in Computer Science: cache invalidation and naming things.").

Server-side sessions don't really buy you much. If you're using a system that has them built in, lovely, but if you're not, it's a lot of extra work.

JWT is a good solution to the problem. You can store small amounts of session state on the client and simplify the whole system. You can avoid having to do lookups to determine state variables. (What database was the user connected to? Is he in mode A or mode B? What timezone? What language?) Put a short expiration on the token (a minute? five minutes?) and force the user to re-validate against some data store after that.

The benefit is that you greatly reduce internal server traffic at the cost of not being able to invalidate a session within your short timeout interval. Depending on your app, letting someone remain an admin for an extra minute is not a big deal.

And if it is a big deal, you can still handle it by sending a message to each node telling it to invalidate that particular user. A pain, yes, but the tradeoffs may be worth it.
Industry Dive | Full Stack Engineer | Washington, DC | ONSITE

Industry Dive is a successful, profitable business journalism company. We report the news and provide analysis to more than one million business leaders in the world's most important industries.

We are seeking a full-stack engineer who is curious and motivated to join our product development team. We use a variety of open-source technology, and our core application is written in Django. More details at https://www.industrydive.com/job-listing/full-stack-engineer...

Applicants with nontraditional backgrounds or who are members of underrepresented groups are strongly encouraged to apply.

Feel free to reach out with any questions, eli-at-industrydive.com
"You cannot invalidate individual JWT tokens"

This is not exactly true. There are lots of things you can do to expire tokens. For instance, every JWT has a creation date stamp so you could say on the server side all tokens created before Time.Now() no longer accept as valid. Allowing users to expire ALL tokens, etc.
The basis of that entire argument is based on a false understanding of what JWTs are and how HTTP state transfer works.

If you want to say that client sessions should not be 100% on the client side and should be split between client/server then just say that. There are pros/cons but at least that is a clear argument instead of misleading about JWTs.
The big takeaway here is that grown humans are mindlessly putting technology they don't understand in front of their children, and then they're blaming the technology for their own ignorance.

Alright, maybe I'm being a little extreme or cynical, and my goal here isn't victim blaming, clearly this sort of thing should not have to be a concern for people, but still... Don't they have a duty to understand what they're exposing their children to? Then again I've been tech savvy since I was like 11 years old (23 now) so maybe it's just easy for me to say. I just can't comprehend simultaneously having children and not understanding technology.
Ask HN: Google Spreadsheet for Basic Startup Accounting?
It there any recommended spreadsheet to handle a small business financial operations?
Is it possible to do indie game dev without building something and throwing it out there?

Small games seem like a market where it's nearly impossible to know what's going to sell ahead of time, because buyers don't know what they want until they see it. Or until a lot of people are telling them it's the Next New Thing.

It's relatively easy to research a market where you're offering a practical solution to a real problem. But entertainment markets - including direct sales of games, music, art, "influencers", and so on - are as much about trend, fashion, and some element of randomness, as about the core features of the product.

Big Game Devs and Entertainment Companies know this, which is why they repeat the same hits over and over, and spend a fortune on direct advertising and influence.

They still get it wrong sometimes, but slightly less often than solo devs.
For the practitioners where you're right, there are plenty of other laws to go after them with. No need for one specific to scams disguised as magic.

For the non-scammy entertainers, no need for a law whether it's real magic of pretend magic.
Box, Inc. | Senior/Staff Software Engineer in Test, Enterprise Governance

Here's the deal: This is NOT your "come-to-work-to-run-some-scripts" kind of job. Box is heavily invested in creating frameworks and infrastructure for automated testing, and becoming an industry leader in software quality and best practices. So far, this responsibility has been directly on the product development engineers. We are now hiring a strong technical leader to define and hands-on spearhead the construction of what automated testing is going to mean for us.

Box has an incredible culture that empowers, allows space for creativity and encourages taking initiative and ownership.

The person we will hire needs to be a strong software engineer with passion for testing and automation. If you think that test frameworks development is second-class coding, I recommend you take a look at the design of libraries like go-vcr. Pure genius.

Email me directly at eddie@box.com with your resume and let's talk!

https://boards.greenhouse.io/boxinc/jobs/1347214
Even if the absolute value of the Geekbench score isn’t useful, the fact that the delta between the MBP Geekbench score and the iPad Geekbench score has narrowed from huge to zero would still be meaningful.
Stopped paying for pro a few years ago because of arrogance and hubris that was common in the web darlings of the last ten years. Couldn't get a simple customer service request answered without snark or condescension. Garbage redesigns of the layout and refusal to listen to feedback meant you were paying for storage and nothing more (pretensions about "community" notwithstanding).

On the other hand, my limited interactions with Smugmug have been stellar. I really like those guys and wish them luck.

The joy of Flickr was exploring the random pictures from ordinary people. I could care less about the heavily Photoshopped "prosumer" stuff that seems to be more popular on the platform. I liked seeing natural skill at composition instead of digital post-processing.

Unfortunately, it looks like SmugMug wants Flickr to be more like SmugMug, so I don't see myself buying back into pro.

Flickr to me was mostly about sharing my photos with friends and family before facebook killed that use case. I don't use facebook much any more, but no one else in my circle uses Flickr either.

Deleting photos over the limit is a bit annoying though. I seem to remember in the past they just made them temporarily inaccessible if you let Pro lapse for a bit (while travelling or whatever).

Time to whip up something that will compare what I have uploaded on flickr (4000+ photos over 12 years) to what's on my local backups so I can download what I have to and forget about the rest.
As a hobbyist photographer 1000 photographs is not a whole lot and I can't justify a pro account when I mostly just use it for storing my edited photos. A terabyte on the other hand is too much to give away to free users.

Then again, from a business standpoint I welcome the decision. I'd rather have a free place to host a 1000 photos than no Flickr at all. I welcome their stance alleged stance of treating users as priority rather than as just advertisement data generators.

I say alleged because I don't know how well these promises of users first are applied in practice but I'm hopeful.

At least they are upfront about it so kudos to Flickr for that.
Not having a nearby sun wild be a challenge too, friending on the mission. Presumably they're looking to Mars first though.
Well raspbian is Debian, so you're right in that it is not Ubuntu. What would you say is the substantial difference between Ubuntu for arm and x86?
> I guess Fox 4 KC didn't want to implement the GDPR

I think the content you're seeing, "Sorry, this content is not available in your region." is an implementation of GDPR compliance, no?
If they think this is scary, wait till they find out what these "hackers" can do with their weak email passwords.
If you're an Amiga user, Google is now dead to you. As far as I can tell, none of the browsers available for the Amiga platform support JavaScript.
I'm not super familiar with big companies, having worked mostly at startups with less structured "levels", but is there a separate scale or set of levels for managers? Or can you be "Senior SWE" and a manager at Google for example?
Applied Research Associates, Inc | Senior Software Engineers, Software Developers, Java, C++ & Python Developers, and more! | Raleigh, NC | ONSITE https://www.ara.com/

Applied Research Associates, Inc. is an employee-owned international research and engineering company recognized for providing technically superior solutions to complex and challenging problems in the physical sciences. The company, founded in Albuquerque, NM, in 1979, currently employs over 1,100 professionals and continues to grow. ARA offices throughout the United States and Canada provide a broad range of technical expertise in defense technologies, civil technologies, computer software and simulation, systems analysis, environmental technologies, and testing and measurement. The corporation also provides sophisticated technical products for environmental site characterization, pavement analysis, and robotics.

At ARA, employees are our greatest assets. The corporation realizes that employee ownership spawns greater creativity and initiative along with higher performance and customer satisfaction levels. ARA gives its employees the tools, training, and opportunities to take more active roles as owners. The culture is challenging; innovation and experimentation are the norm. Employees are eligible for contributions which not only add to the company’s success, but also their own through the Employee Stock Ownership Plan (ESOP). ARA offers competitive salaries (DOE) and a generous benefits package. The motto, “Engineering and Science for Fun and Profit” sums up the ARA experience.

Apply here:

careers.ara.com