skysight-inc/HackerNews huggingface dataset:
CrowdStrike|Sr. Software Engineer-Cloud| Remote
About CrowdStrike
CrowdStrike is the leader in cloud-delivered next-generation endpoint protection, threat intelligence, and pre- and post-incident response services. With the ability to collect and process over 100 billion events a day, CrowdStrike has revolutionized endpoint protection by being the first and only company to unify next-generation antivirus (AV), endpoint detection and response (EDR), and a 24/7 managed hunting service — all delivered via a single lightweight agent. We are one of the World's Most 50 Innovative Companies according to MIT, and one of Forbes Most Promising Companies. Our growth and innovation are driven by incredible employees who deliver unmatched customer success.

We have received a number of exciting awards including:
•October 2018: 100 Best Medium Workplaces Second Year in a Row by Fortune magazine.
•June 2018: Closed over $200 million, led by General Atlantic, Accel and IVP, with participation from March Capital and CapitalG (Google), achieving a valuation of more than $3 billion.
•April 2018: CrowdStrike Wins SC Award for Best Security Company Second Year in a Row.

We’re building the next-generation infrastructure and security platform for CrowdStrike which include an application and service delivery platform, massively scalable distributed data storage and replication systems, and a cutting-edge search and distributed graph system. Help us scale CrowdStrike’s infrastructure and products to handle massive growth in traffic and data as we continue to experience dramatic growth in the usage of our products.

Apply Here: https://app.jobvite.com/j?cj=oyX65fwq&s=Hacker_News
Thanks so much for being a customer and for the vote of confidence. We should figure out something for Flickr + SmugMug, pricing wise. Any ideas?
ODYN | Somerville/Cambridge/Boston ONSITE (our office is in Davis) | DevOps Engineer

https://angel.co/odyn/jobs/241401-devops-engineer (or email techjobs@odyn.ai)

ODYN is modernizing the world of logistics. We provide visualization and analytics of the movement of goods in the global supply chain by analyzing data streams from container vessels, airplanes, and our proprietary tracking devices. Our technology gives our customers x-ray like visibility into global logistics and enables significant reduction in operating capital (read: saves a lot of money).

This is one of the few massive industries ($4T) left that are left to be digitized and completely optimized with technology. We have some funding, customers, interesting strategic partners, and are growing fairly quickly.

Come solve hard problems with us.
Make no mistake, if you weren’t already convinced of it, the end game of the NYT narrative here is censorship. Doesn’t matter if it’s real people expressing real views anymore (goal posts notably move from ‘fake’ entities and troll farms) if it’s feasible you are within several degrees of Putin you are culpable in defrauding the United States if US citizens are unwittingly exposed to your message.

Of course, the NYT and others continue to oppose stronger libel laws even amidst this national crisis.
.Net Framework? JRE? Flash?
How is two-factor authentication not a prerequisite for using Nest in the first place?

I know we've moved as a society fairly quickly from expecting users to generate entropy to something that is actually secure. So it's understandable that some companies lag behind.

But Google is attempting to connect everything they can to the internet. If the bar for them isn't to at least prevent the easiest, most obvious hack from causing catastrophes then we're living in an idiocracy.

A user reusing passwords is bad. But in a civilized technological society the consequences for doing that cannot be a disembodied voice appearing communicating with one's child to give them nightmares.

Google's security teams surely know you can't "educate the user" to stop reusing passwords. If their official response is, "We did the right thing by suggesting two-factor authentication," then it doesn't matter how many engineers they throw at the problem.

Evil is afoot.
In the US, many types of sexual harassment are also crimes, but sexual harassment, per se, is a particular civil wrong, not a crime.
I don't understand what the paradox in the water/wine paradox is, after checking out its PDF (linked in the article, https://www.researchgate.net/publication/252476141_The_WineW...).

The problem is defined without giving the distribution(s). Specifying a distribution makes the problem mathematically solvable.

A uniform distribution for representing a ratio of 1/3 to 3 between two things does not match reality well because it gives more weight to one than the other, but I don't see why that's a paradox. You could generate random valid wine/water amounts (reject invalid combinations) and measure distribution of many experiments of that? You can define any distribution you want that makes more sense than those uniform ones. Ultimately though something is not specified, the distribution of the water amount and the distribution of the wine amount. Why is that a paradox?

EDIT: the real question is how was the jug filled up. Did someone pour a random amount of water first, and then after that poured a random amount of wine within the allowable limit? Or did they pour the wine first instead? Or did they pour a random amount of both, and discarded it if after that the ratio was not within the 1/3 to 3 limit? Or some other method? That determines the distribution. The distribution of the ratio is more like a derived distribution, derived from the distribution of the wine, the distribution of the water, and how those two distributions depend on each other based on the method used to fill it up.
Do you mean flour?
While it's nowhere near the scale of what China has done and is doing, NSA has engaged in industrial espionage to benefit the US economy as well. Few nations can say their hands are clean when it comes to this stuff.
As an aside, I don't why top-aligned infield form labels[0] aren't more popular. I implement the style whenever possible.

[0]: http://uxmovement.com/forms/why-infield-top-aligned-form-lab...
Apple | Software Engineer/Senior Software Engineer | Vancouver, BC | Onsite

Come help protect Apple and its customers from fraud at our Yaletown office in Vancouver.

Scala/Java. Spark and other big data experience useful.

https://jobs.apple.com/en-ca/details/200004288/software-engi...
Location: Copenhagen, Denmark.

Remote: Would love to.

Willing to relocate: For periods of time, yes.

Technologies: JavaScript, Node, React, React Native, AWS, Azure.

Résumé/CV: https://www.linkedin.com/in/jfsaxberg/

Email: jacob@webcom.dk

I have been part of a few startups, created my own way back, and am currently building a large web application for a client, due soon.
HR is never there for the employee. They exist to protect the Company. They give lip service to protecting and nurturing the employees and our people are our most precious asset BS. The only time HR will go after any of the big boys is when they are on the outs with the board. Example: Mark Hurd when he was forced out at HP.
Coalition | Back-End, Full-Stack, Product Manager, Engineering Manager | San Francisco, CA | Onsite, Full-Time

Coalition is working to solve cyber risk. We are a small team of security experts, insurance professionals, and intelligence community veterans building a better cyber insurance product. Coalition is automating risk assessment to make purchasing insurance easy, and using our knowledge to educate clients and mitigate risk where possible.

We're rapidly growing and scaling our team to accommodate that growth. We are looking to hire engineers, product managers and an engineering manager who can help us maintain a high standard of engineering while increasing the scale and functionality of our products. These roles come with a significant amount of responsibility and autonomy.

Our front-end is in React, our back-end is built with Flask running on Python 3.6, with some services in Node, and our infrastructure is hosted on AWS. We are also always open to new technologies; we believe in using the best tool for the job.

Email jobs@thecoalition.com for more information.
I guess I won't have any option but to pay for Pro but I wish they had am intermediate tier that just gives expanded storage.

I have no interest in their Pro Statistics or the list of 'partner discounts' they bundle into Pro. Nor the ability to upload 10 minute videos.

Strip out that crap and just sell a Flickr Subscriber account for less money, please.
Roostify | Sr Java SWEs and Architect | San Francisco, CA | Onsite, full-time | competitive salary + benefits + equity

Roostify makes the process of getting a home loan easier and drastically more efficient for borrowers and lenders alike. We have an enterprise SaaS product and our customers are financial institutions.

We're looking for senior java engineers, and an experienced software architect to help lead a platform re-factoring.

https://www.roostify.com/jobs/

Please reach out to Scott Leach (sleach@roostify.com) if you're interested or have questions.
Apple will throttle last year's iPhones (including iPhone X)
A Safer RuboCop
> There is a demand for these, even though they become very expensive toys fast.

'EuroCrack' is the term I've heard bandied about ;)
Interesting to hear from someone involved.

> This is the login page - users are typing in a long term stable identifier already!

There are so many other considerations at work here though, and I can't imagine that they're not obvious to you as well? For starters, we're creatures of convenience, and this makes it significantly inconvenient to block google scripts on other websites even when not signed in. It also guarantees that you have the chance to produce a (likely unique) JS-based fingerprint of every google user that can then be used for correlation and de-anonymization of other data.

But really the most basic point that probably makes folks here suspicious: if this were really only about preventing malicious login attempts by bots, then why not give users a clear, explicitly stated choice: either JS or 2FA.
Well-written product announcement! clear explanation of "bad news" for a lot of users, but encouraging for target customers. I hope when I grow up I too can write something like this. :)
Informations about credit cards, bad-fair credit
Well ghetto school always have that because they get less funding and their is less teacher and more work for teachers (who are already exhausted)! Plus lead and PTSD!
CockroachDB 2.1 – Easier Migrations and a 5x Scalability Improvement
Individuals can and do evolve, and then they pass that on to their children, that's how evolution works. Biological evolution is a very long and slow process, technological evolution is not. That's why our teeth are a poor indication of what we should be eating because of this revolutionary thing called cooking. Our teeth are records of our past evolution, not rules for our future or current evolution. The claim that vegetarians have higher rates of cavities is total bullshit. They actually have better dental hygiene.
It is, but American concepts like those in large part led to the creation of the company that made the website you're on right now.

But this article is about Canada, which is also pretty friendly to free speech, even if it's not to the extent of the US.
I agree that your high-pass filters are an application of masking principles. It would be challenging, especially for an untrained person but even for someone who is trained, to perceive enabling/disabling of those filters in the context of the full mix. Instead we solo to isolate the track being adjusted so the change is easily audible -- i.e. no longer masked by the other tracks -- and adjust the filtering anticipating the counter-intuitive but artistically desirable effect when the filtered track is blended back into the mix.

Despite that, your hostility to the skeptics illustrates that you and I still aren't really on the same page (though I don't doubt you produce compelling art, don't question your techniques, and agree 100% about ensuring that aesthetic gestures survive the transition to imperfect end-user environments).

To me, "objective accuracy" is a worthy and desirable intermediate goal for sound artists, a tool which can be leveraged for creative ends the same as a baker understanding food chemistry or an animator understanding Newtonian physics or a modern origami folder understanding programming. However, chasing "objective accuracy" means understanding the wildly non-linear, even bizarre human perceptual mechanism -- which is more of a pattern recognition machine and definitely not a measurement device -- in addition to all the strangeness of acoustics.

The problem with audiophiles is that their approach to "accuracy" is unscientific and doomed from the start. The skeptics on the other hand, have the right idea -- but those who have not done deep study often fail to appreciate just how difficult the problem is and how far off their intuitions are.

I've had some wonderful conversations with individuals whose perspectives are similar to mine, but it still seems impossible to find a hospitable public forum.
>It's a trade off

But, what are you getting for this added complexity--above and beyond what "traditional" user session management provides?
A huge part of the issue with JWT is that it's often used wrongly.

I'm currently in a project where JWT is used. We have a list of searchable items and each one of them holds a gallery of photos - up to 5MB per photo.

The issue at hand is that these photos are served from a certain endpoint which we eventually want to secure, but the back-end's idea here is for the front-end to download the photos via XHR putting the token in the Authorization header - they refuse to send the JWT via cookie saying that it's "incompatible with JWT".
Duffel | Software Engineers | London, UK / São Paulo, BR | Full-time, on-site | https://duffel.com

We are a stealth startup working to build the next generation of software for the travel industry. You will join a small (but growing) team, work alongside talented and incredibly ambitious people (but who really know how to enjoy their time off), and have the unique opportunity to shape our core platform and tackle some of the most interesting challenges in travel today. If there is one thing we can promise is that you will learn a lot.

We just went through Y Combinator (S18) and recently announced our seed round from top VCs (Index Ventures, Blossom Capital and Kima Ventures).

Our stack: Elixir/Phoenix, Next.js/React, PostgreSQL, Kubernetes, GCP.

Feel free to reach out to me directly at steve@duffel.com if you are interested or have any question.
Apparently he deleted his Twitter account as well. https://twitter.com/rdevaul
Getting started with OKD on your Linux desktop
IANAL, but I guess this comes down to the interpretation of "Required Components".

1.12 "Required Components" means any text, programs, scripts, schema, interface definitions, control files, or other works created by You which are required by a third party of average skill to successfully install and run Licensed Software containing Your Modifications, or to install and run Your Derivative Works.

You have to make the source of the required components available under the RPL (section 6.0-6.1).

Would provisioning software to operationalize a database within a cloud environment be considered a "required component"? Maybe. If the cloud provider made modifications to the db source to get it to run well inside of their cloud environment, and did it in a way that made it impossible to run the modified db outside of their cloud environment, without using their custom provisioning scripts, then I would argue that those provisioning scripts would be considered "required components" under the definition in 1.12. But if they are able to run the db without making modifications to it, so that it is the same as upstream, and a third party developer does not need the provisioning scripts to run the modified db, then the provisioning scripts would not be considered required components.

So, the RPL is perhaps stronger than the AGPL, but not strong enough for MongoDB or Redis Labs.
Inforuptcy | Senior Tesseract & PDF Scraping Developer, Preferably in Perl | REMOTE| Market | Full-time or Part-time | Inforuptcy.com

At Inforuptcy.com, we are building solutions that enable investors and traders in bankruptcy to become more efficient by automating daily tasks. We’re based in Los Angeles but have a remote team worldwide (Canada, Europe, Armenia to name a few).

We’re looking for a senior developer with experience in extracting unstructured data out of PDFs, preferably with Perl.

Testimonial from a team member: “Long story, but I worked there for maybe 6ish months part time a while back. They offered me full time, but I ended up going to a startup because I wanted to learn some specific technologies + up my skills in Data Science. That job was definitely good for some people, but it wasn’t as remote as they advertised it (had me fly in alot), and the team was somewhat difficult to work with ;) I ended up starting my own consulting and at the same time CourtDrive reached back out to me (perfect timing). Point I was trying to make was that I went back to work with them because they were so nice to work with. Not super demanding and very open to listening to ideas/suggestions - just a pleasant environment.”

Job listing and specific skills we are looking for: https://docs.google.com/document/d/14g2cxI0Ci6b9MkucbO2fvcTO...
> Ok, yes, session is a concept. Session state can be stored in its entirety or split between an ID and body.

the storage of session has absolutely nothing to do with the session. I'm not sure why you keep talking about Cookies it has nothing to do with the problem. JWT can be persisted with cookies as well.
---

SEEKING WORK - Remote

Product designer and developer from Iceland.

---

I can help you with:

* UX Design - We will work together to make user flows, wireframes and prototypes that will be easy to use and pleasing to the eye.

* Front-end development - Building a front-end needs attention to details. I got the skills to work with your developers, or on my own, to create a great product.

---

See my previous work at https://gilli.is/

Contact me at gilli@hn.gilli.is

Related links:

* Portfolio: https://gilli.is

* Dribbble: http://dribbble.com/gilli

* Twitter: http://twitter.com/gillisig

* Github: http://github.com/gillisig

---
How long until you have to sign into Google to search?

They already pop up messages trying to trick you into logging in to "adjust your settings" or "improve your privacy" or some such.
PlanetScale | Full Stack Engineer, Site Reliability Engineer (SRE) , Front End/Back End Engineers, Sales Engineers | Mountain View, Ca | Full-Time | https://planetscale.com/careers

PlanetScale is an startup building the worlds most scaleable database systems. We were founded by some of the engineers behind the open source product Vitess ( vitess.io ) and we are building out the ability for anyone to run Vitess clusters at the same scale as YouTube. For any candidates tired of the quizzes and puzzles of traditional interviews ask us about our alternative hiring path. Email careers@planetscale.com or apply online at planetscale.com/careers
You're underestimating how many people are involved in these walkouts. Well over a thousand participated in the NYC office one, for example.

And even if this were true, some things are worth taking risks over.
I'm hoping he provided some rationale about why Microsoft, Google, and Apple should be split up. The way the interview is quoting just a couple sentences, it's hard to tell.

If there's nothing besides the quote below, I'd consider this an extremely weird and weak argument:

> What naturally happens is you end up with one company dominating the field so through history there is no alternative to really coming in and breaking things up. There is a danger of concentration.
A pair of new Bluetooth security flaws expose wireless access points to attack
I disagree, if you had the work ethic, you could study for a year on leetcode.com, and have a hell of a good chance at landing a FAANG job.

Just practice those types of problems, apply to a bunch of different companies, do the phone screens, get rejected, practice some more, get through the phone screens to the onsite, get rejected, repeat until you get an offer.
I don't think they are questioning Google's end goal, but more the effectiveness of the current system.
What I am conveying to you is that your misunderstandings of evolution are causing you to say things that are illogical pretzels.

Evolution is such a beautiful, elegant discovery. It underlies so much behaviour in the universe, from biology to politics to economics to culture.

If you insist on calling it an analogy--even though it is in fact the reality of the situation, which is just one more example of you misunderstanding it--your use of it is faulty, and so your "analogy" is failing.

And towards the overall point, there are plenty of competing ideas and executions to the market economy. While I sustain none are succeeding, many adventurers in this field would disagree.

While you just don't seem to know about them, perhaps you could take this conversation as a call to action to go search for the many groups working on testing different economical models and go join them. It could be fun!
SEEKING WORK | Copenhagen, Denmark | Remote works well

Willing to relocate: For periods of time, yes.

Technologies: JavaScript, Node, React, React Native, AWS, Azure.

Résumé/CV: https://www.linkedin.com/in/jfsaxberg/

Email: jacob@webcom.dk

I am a full-stack developer who have been part of a few startups, created my own way back, and am currently building a large web application for a client, due soon.
The patent system needs to be changed in some way. When people talk about monopolies, they seem to rarely mention that the government enforces awful patents. And you don't even need to make the thing, just patent it!

I'm not sure if it's fair to R&D costs to gut patents entirely, but I'd like to see them weakened considerably. Patent trolls should not exist.

Glad to see justice in this case.

Edit: Watched Shenzhen: The Silicon Valley of Hardware, was interesting in regards to loose IP rights.

[1] https://www.youtube.com/watch?v=SGJ5cZnoodY
We tie our users session in the JWT to the session in a central database, this allows us to invalidate individual sessions.

The reason for using JWT is that the UI and backend consume the same session object seamlessly. Before what we got in our PHP session and what state we shared with the UI were manually kept in sync through a API request.
Unfortunately, if you care about animal suffering then Beef starts looking much better than Chicken does and the farms that tend to treat their chickens well also tend to be "organic". So there's certainly a place for this.

And in general most land used for cattle grazing doesn't receive enough rainfall to support forests; or farming without outside water inputs. If we were to eat cattle that were exclusively fed by grazing on semi-arid land then Beef would be pretty environmentally friendly apart from the methane emissions. The problem is that we don't have enough grazing land to do that so most beef if fed with farm-produced plant matter leading to huge inefficiencies.
We should respect his right to privacy, just like he didn’t respect his victim’s right to not be harassed or molested.
Clickbait! Doesn't deserve to be on HN!
Then just store session ID there and get rid of JWT.
Then offer them the courses then! The EU and the US already do this! And besides, what is the benefit of keeping out potential businesspeople(Sergi was a immigrant and Andy Grove was a refugee), doctors, programmers, and more while birth rates and education stagnate?