skysight-inc/HackerNews huggingface dataset:
SVMs project the data into a higher dimensional space, not lower. A mixed blob of dots on a plane can't be cleanly separated by a line into two colors, but if you blow them out into a cube by some arbitrary projection, a plane will be able to separate them cleanly.
Why Is an Icicle Shaped Like an Icicle?
Can someone explain how this is similar/different from the default ways Ruby on Rails stores sessions?

I know they're encrypted and signed, and all the session data is stored in the cookie. This seems to work great, what is the downside of just doing this method (for say, bigger sites)?
The problem, as the linked 'Slightly Sarcastic Flowchart' says, is: how do you handle the invalidation server going down? If you just assume that tokens are valid in this case, then an attacker just has to kill the server and they're back to being impossible to invalidate. If you assume they're invalid, you're back to having centralised state, which mostly defeats the purpose.
Tech is still in wild-west mode. I can buy food and eat it without testing it for poisons first. I can put my money in a bank without doing my own routine audits of their security. Like nutritional labels on food or a "Schumer box" on a credit card app, maybe we could list some risks and mitigations that the user needs to keep in mind when using the product.
TSM (Team SoloMid) | Los Angeles | Onsite, relocation offered | Full-Time

We're hiring frontend (React), backend (Elixir, Cassandra, Postgres), and computer vision (OpenCV) engineers to help build the future for gaming.

TSM is one of the most recognizable brands in Esports. We started out as a tech company by writing guides on our own website, then automating the process with probuilds.net. Later, we found success in Esports as one of the pioneers in the industry. We're looking to create software that helps push competitive gaming one step further. More specifically we're looking for 1-2 more engineers to join our engineering team in Los Angeles, where we're developing a desktop and mobile app that uses computer vision and data-driven insights to help gamers across all platforms to better their in-game performance. We plan to make this tool for every game - starting with the major ones as a benchmark: League of Legends, Fortnite, COD4, CS:GO, Hearthstone, Dota.

More details on the positions here:

https://tsm.gg/news/hiring-front-end-dev

https://tsm.gg/news/hiring-back-end-dev

https://tsm.gg/news/hiring-computer-vision-engineer

If interested, please email adil@solomid.net. For more questions you can reach out on Twitter as well @officiadil.
A camera pointing at your face should be assumed to be turned on and recording you.

A camera pointing at your face hooked up to the Internet should be assumed to be broadcasting that information to the world.

We know this intuitively. Humans dislike eye contact from strangers because of what it implies. Cameras don't hit the same basic reflexes (likely because we've optimized them that way).

If we haven't done a good enough job of educating users on that, we need to address it. The UK Government run cybersecurity adverts occasionally. I don't think they go far enough.

I tell everyone I encounter to assume the worst case unless proven otherwise.

The purveyors of a commercial product aren't going to detail these things unless forced. See 'everything else ever' - food, drink, medicine, ...
Good job! I really like the idea and the current implementation of it.

I once started implementing exactly something like this (with two panels "Cons" and "Pros"), but then as it is usually with my side projects, I abandoned it...

I still have some ideas you might like. Feel free to PM me if you are interested.
I suggest anyone with a weak stomach not start down this rabbit hole. As someone probably more in the know than most, this is extremely common. There exist tons of videos, typically shared on Facebook, from Saudi Arabia, Kuwait, and other likeminded places of owners beating, abusing, raping, and even killing their housemaids, often it seems just for fun. These 'housemaids' often come from India, the Philippines, Indonesia, and other countries in the area. (Housemaid in quotes, since many times they are legitimately slaves due to owners stealing their passports).

Why there isn't absolute outrage, embargo, or even war over this is beyond me...
I'm not sure that this is a necessary distinction.

I don't see anything about a semantic graph database that would prevent it from being built on top of a graph database like Neo4j (and we are doing kind of that at my current company).
Location: Shanghai, China

Remote: No

Willing to relocate: Only Shanghai.

Technologies: C++, Java, SQL, Network

Experience: 2 years Undergraduate Cyber Security Researcher

Languages: English, Chinese

Resume: Available Upon Request

Email: bfalk[at]umich.edu

I will be graduating from University of Michigan 12/15/18
Refusal to do business in the EU certainly is an implementation of GDPR. The GDPR only applies to EU citizens, so not serving them means you meet all the compliance mandates.
Sounds like the Korolev Cross sequence [1] did not go as it should have.

[1] https://en.wikipedia.org/wiki/R-7_(rocket_family)#Korolev_Cr...
your website appears to be down?
strongDM | Engineering and Sales Engineering | Remote (US) | Full-time | https://www.strongdm.com

strongDM is a protocol-aware proxy for managing and auditing access to databases and servers.

We build secure, high-throughput networking systems in Go. If you enjoy writing code that is parsimonious, correct, yet featureful -- you may enjoy coding with us. If you enjoy shipping product that is appreciated by a growing population of happy, paying customers every day -- you may enjoy shipping with us :)

We're a distributed (~UTC -5 to -8), but close-knit team. We have high standards and high levels of respect for each other and our customers.

If this sounds like the type of work and the type of environment that would suit you, send me (Justin, co-founder & CTO) a note: justin@strongdm.com
Mortgage rates slide as echoes of 2006 haunt the housing market
why "directories" were renamed to "folders"

I was just reading about that today. Alan Kay is to blame it seems, as for so much. :-)

"The desktop metaphor was first introduced by Alan Kay at Xerox PARC in 1970 and elaborated in a series of innovative software applications developed by PARC scientists throughout the ensuing decade. The first computer to use an early version of the desktop metaphor was the experimental Xerox Alto"[0]

For the wider context about desktop/folders etc see [1][2]

I found this [3] story linked to a while ago on here fascinating, about all the user testing done for Windows 95. They did a lot of watching people use the file/folder system, change things around etc, repeat etc. It's kind of funny, the problems people had.

[0] https://en.wikipedia.org/wiki/Desktop_metaphor

[1] https://en.wikipedia.org/wiki/Graphical_user_interface

[2] https://en.wikipedia.org/wiki/History_of_the_graphical_user_...

[3] https://socket3.wordpress.com/2018/02/03/designing-windows-9...
We need to start with a revenue neutral carbon tax.
And it could be seen as a perverse incentive for governments to make it too easy for people who are an economic and budgetary burden to end their own lives.
This “user registry” of yours sounds an awful lot like a traditional session table in a central DB.

Could you elaborate a bit on that in terms of horizontal scalability please?
Location: IA

Remote: Preferred

Willing to Relocate: Yes, to Orange County

Technologies: Ruby, Rails, Heroku, etc

email: noah@noahc.net

I'd love to talk to companies that are looking for a Sr. Engineer that has spent the last 6 years writing ruby on rails code. Currently work in a healthy work environment that focuses on code quality, having tests, and practicing agile principles to build software that works for our customers. I'd like to work in a customer focused environment.
> no cubicles

Just FYI there's research showing that open offices lead to more sickness, less interaction and higher turnover.

For example: https://www.ncbi.nlm.nih.gov/pubmed/21528171
Location: Pakistan
Remote: Yes
Willing to relocate: Yes
Technologies: Python [Flask, Web Scraping, SQL], PHP [WordPress]
Résumé/CV: https://www.kashifaziz.me/web-scraping-data-mining-services/
Email: contact@kashifaziz.me

I have experience of PHP (WordPress), Python, SEO and Content Marketing. I am working with Python since last year and am very much interested to have an intermediate level position to further enhance my Pythonic skills.
It's an adjective. An adjective not uncommonly associated with the hues in question. It's also not uncommon as a turn of phrase in english to say, "people are distracted by the newest bright and shiny object." So I took the opportunity.

Is this... a real question? This seems like a fake question.
A few years ago I wanted to make a niche marketplace to sell/trade tabletop miniatures. Instead of actually building the thing, I made a few mockup interfaces pages, and then just made a responsive HTML page. None of the buttons actually worked. I then put a modal that said "launching soon, sign up now for news and a special bonus on launch".

I spent $100 on ads on reddit and targeted forums with the goal to get 100 emails. If I got 100 emails, I would actually try and build the thing.

I got ~57.

You can market very far without anything that works. This is the "growth hack/MVP" mindset. I saved myself weeks of programming which would have been fun, but arguably a waste to building that specific business.
In a certain sense this existed with the `<keygen>` element (https://developer.mozilla.org/en-US/docs/Web/HTML/Element/ke...) which is unfortunately deprecated. But you still have all the same issues of moving and safeguarding key material.

These days with browser/mobile sync, maybe it's actually possible. But like a synced password manager, it makes a primary account breach that much more devastating.
It's key-lookup syntax, like for a dict (map or hashmap in other languages). A Pandas DataFrame can be thought of as a dict of columns.
Wouldn't it be easier to add the touch screen to an existing form factor and OS than to add all those things to an iPad?
i mean, probably the sexiest application of linear algebra is machine learning and different exotic norms are very important there. sometimes you even have to learn a norm from data (metric learning).

at the very least i feel like it’s important to understand 0, 1, 2, and infinity norm.
I spend a lot of time reading stuff, but I'm starting to think that what I really need is just confidence and persistence.

I'm learning more and more that with many things in life, everything is a gray area. Trying to distill something as complex as success into a ruleset is impossible.

Your story about the MVP is what makes me nervous; it's good to hear that there is some wiggle room when it comes to the MVP impressing or flopping.
> you could say on the server side all tokens created before Time.Now() no longer accept as valid

But that's not anywhere near "invalidate individual JWT tokens" - you're invalidating -every- token before `Time.Now()`. Unless you store a different "valid after" time per user and then you're back to storing sessions in the DB, aren't you?
Well the google logo is a bright colorful child's toy, as opposed to ... well... look it up. Powerset has branding so bad I didn't wanna see it either.
The Icicle Atlas
Medical technology: pacemakers, drug infusion pumps, digital x-ray and MRI systems ("nope, no lesions on your lungs").

Industrial materials fab: change raw materials in critical alloy mixtures; mess with annealing time/temperature recipes; dial down forces in component proof tests ("oops! Why did that turbine rotor blade separate?").

Lots of opportunities for malware to be nasty outside of weapons systems.
Social media isn't faster or more efficient than email though. In fact it might be slower due to the amount of clutter and ads encountered when using facebook. The comparison between phones and post doesn't really hold up.
Horizon: Open source reinforcement learning platform
Engineer #1 | Stealth stage analytics company | NYC/Remote

Stealth stage analytics company is looking to bring on Engineer #1. I’ve bootstrapped this business over the last two years and just hit a $1MM run rate.

This is a hands-on role and will allow you to basically own the technology stack and build out the technology team.

A few of the projects you’ll be leading:

- A streaming data pipeline on Kafka handling millions of events a day.

- An open source data integration library that connects data to/from over 75+ of the most common data sources companies rely upon

-A scheduler that deploys thousands of containers a day into Kubernetes clusters, efficiently migrating our customers’ data between systems.

- An open source JavaScript event tracking library

The technology stack is mostly JVM (Java and Scala) with some Python and ES6/React/Redux on the frontend. Everything is containerized and runs on Heroku and Kubernetes.

Candidates should have a mastery of at least one language, and ideally have experience with the following: Docker/Kubernetes, SQL, Kafka, JavaScript, data warehouses (Redshift, Snowflake, BigQuery), ETL, data pipelines. Bonus points if you have experience managing engineering teams.

This is a very early position so compensation can be whatever blend of salary/equity you prefer.

Send me an email at slapshothn@gmail.com with a bit about who you are and what you’ve built. If I think there’s a fit, I’ll schedule a Skype/Hangout with you and tell you about the business and discuss the role in more depth.
The select boxes could do with fixing.

When you open it up the options aren't visible, as though the text is white on white background.

Image here:
https://imgur.com/a/YDzZvsf
Internet-based digital currency from 2001
Governments will need to learn the cost of doing business with US corporations or their subsidiaries. They will need to learn that their information kept with any US is no longer secure due to US law. Merely having it accessible to a US corporation is enough.
> No it's not. Same torque on a single cylinder engine going up to 5000 rpm is a drastically different thing than on a 8 cylinders engine going up to 18000 rpm, and this makes your reasoning pointless.

You're using examples that barely exist in the real world, so your reasoning is pointless.

a) Show me a single cylinder engine that makes the same torque from idle to 5000rpm. No such thing exists.

b) The only 8 cylinder engine ever made that revved to 18,000rpm was for Formula 1, and they have not used 8 cylinders for many years. I would propose there is not a single 8 cylinder engine being made in the world today that can rev to 18,000rpm.

> Race engines usually deliver most of torque at higher RPMs, and that's just how physics work

Can you link to a torque curve that shows that? I've never seen an engine where torque goes UP with rpm. It always falls off as volumetric (in)efficiency fails to get the air in and out of the cylinder.
The basic idea doesn't sound crackpottish. There is only one correct representation of water to wine ratio, and a uniform distribution over all possible arrangements of water and wine would only give a single answer. Sounds like the problem lies in how the principle of insufficient reason is being applied.
Buy 10 Positive Google Reviews
>2FA is a very cheap solution

If you don't know the technologies the website is built upon or how much it will be impacted by increased barrier of entry for users, this statement is baseless.
Of course they are not going to give specific details about a particular customer's security incidents in a public statement. And of course they can not publicly claim that they've never had a security breach because it's impossible to know that for sure. I'm not sure how they could make the statement any more specific than they already have.
Location: Greater New York

Remote: Yes

Willing to relocate: No

Technologies: .NET Core, C#, Javascript, ReactJs, AWS, Cyber-Security, Asp.Net MVC, Asp.Net WebAPI, GraphQL, NodeJs, SQL

Résumé/CV: https://www.linkedin.com/in/rasikjain/

Email: jainrasik [at] gmail.com
FYI: your GitHub link is broken because of an extra semicolon on the end.

Correct link: https://github.com/evgeniuz
I'm curious if this has anything to do with the Tech Support scams that seem to be commonly based in India. Microsoft would have an interest in helping law enforcement fight those schemes as many purport to be from "Microsoft Support".

Also of note, the Bank of India said they received no requests in 2016 or 2017 from Microsoft but the first paragraph notes the ~4000 requests were made from 2014-2016.
it's a different country, but ... in India in 2013 some types of sexual harassment were deemed criminal and punishable by time in prison.

https://en.wikipedia.org/wiki/Criminal_Law_(Amendment)_Act,_...
ReferenceError: SharedArrayBuffer is not defined

I couldn't get a basic example working because `SharedArrayBuffer` isn't available in node. I wouldn't be surprised if the other bits aren't either.
> I think the solution may lie with changes to, or removal of, Section 230 of the CDA

[...]

> I suspect that forcing those that host 3rd party content/discussion to actually moderate and control the discussion [...]

CDA Section 230 was largely adopted to encourage active moderation, since without it active moderation made a host a “publisher” rather than a mere “distributor”, which triggers strict liability for a number of violations for which a distributor would only have knowledge-based liability.
Shell starts rollout of ultrafast electric car chargers
My beef with Bumble's latest campaign promoting networking
Another thing that occurs to me, especially given recent publicity, is how this affects privacy. There are some/many things that are private and which you do not want the government or corporations to know. It is outside criminal actions and therefore none of their business, but if lie detectors become omnipresent, then it will become more and more tempting to use them everywhere to make things "more efficient" and to start everyone and their dog to asking more and more things that are none of their business.
Previously, https://news.ycombinator.com/item?id=16271434 (9 months ago, 51 comments).
Intel's gross margins are high enough (especially on the higher end chips) that it makes sense for Apple to design their own chips for Macs. Rumors are pointing to 2020 for when it will first happen.

Macs could then be cheaper and better than the competition (or significantly more profitable).
> > You are essentially powerless, and cannot 'kill' a session without building complex (and stateful!) infrastructure to explicitly detect and reject them, defeating the entire point of using stateless JWT tokens to begin with.

I'mnot sure that's entirely true. It's not hard to include an extra static token within the JWT which is delivered to the servers through an alternative method (pushed with production, or manually set), which when it changes forces a re-auth (either just a DB auth session because you've specifically set the conditions such that you only care if PW changed or some other flag set, or a full login procedure).

If the same static token is used for all users, all users will need to do this on the next request. If you subdivide your users by some metric (first x characters of username, some modulo of numeric ID) then you can invalidate some subset of the userbase JWT tokens instead.

You've now gained the ability to immediately invalidate a JWT tokens as long as you're okay with forcing extra computation on some larger set of completely valid ones at the same time.

Edit: Changed wording of last sentence to clarify you don't necessarily have to invalidate all sessions just by invalidating all JWT tokens, as outlined in further comments below.
Brain Corporation | San Diego, CA | Onsite Only
Brain Corp is a San Diego-based AI company that specializes in the development of self-driving technology. We are taking our proprietary BrainOS (robot operating system) and putting it on machines to turn them into self-driving, autonomous robots. We have raised $110m from SoftBank and Qualcomm Ventures.

We are hiring across all engineering functions (Research, Software, Firmware, Electrical, Mechanical). Our full job board can be found here: https://braincorporation.applytojob.com/apply/

Highlighted openings:

* Robotics Software Engineers (entry to principal levels)

* Depth Perception Research Scientist

* Application and Tools Developer (Qt)

* Front End Developer

* Site Reliability Engineer

* Software Test Automation Engineer

* Software Engineering Manager

* Hardware Engineering Manager

All of these positions and more are posted on the website.

Typical Interview Process: Code challenge, technical phone/skype screen, onsite, offer.

Contact us at careers@braincorporation.com. If you don't see a role that matches, feel free to send your resume over to us and let us know what you would be interested in.

Thanks! -Rawson https://www.linkedin.com/in/rawsonleavitt/
Good. It's not a useful business model for society.
Orbital Debris Quarterly:

https://orbitaldebris.jsc.nasa.gov/quarterly-news/newsletter...
Busuu | Backend engineer | London UK | onsite only

We are a language learning startup with 80M users, leading the way in EdTech innovation. Our mission is to allow anyone in the world to learn a new language, whether it is for personal development or to improve their life chances (most of our users are from developing countries). We do that through a strong focus on user experience, quality of the educational content, and adaptive learning.

We need talented backend developers to work on APIs, scale our platform, build our machine learning pipeline. We also work on social network features and bot/voice platforms.

Our stack includes Symfony (PHP7), Nodejs, Postgres, Docker, AWS. If you want a fast-paced environment, responsibilities, to work with a fun and very diverse international team, get in touch with us!

https://www.busuu.com/en/jobs
Muck Rack | New York or Remote | https://muckrack.com

Muck Rack is looking for a talented individual to join our fast-growing tech startup in New York. Our mission is to make journalists, PR pros and marketers more successful. Muck Rack offers tools that help media professionals find and contact the most relevant journalists for their stories, and monitor how their stories perform.

You’ll be working alongside the CTO and engineering team, and with product managers and designers, to execute major technical projects on Muck Rack, lead the building of new features, and help shape our engineering culture and processes.

Our tech stack includes Python, Django, Celery, SASS, Redis, Elasticsearch, Rabbitmq, Nginx, Gunicorn, Varnish, and Ansible.

You'll be successful if you:

- Have significant experience working on a complex, high-traffic site, particularly at a startup or software-as-a-service company.

- Have extensive experience with Django, Python, and other software in our tech stack, with a willingness to learn in those areas where you have less experience.

- Enjoy working with and collaborating with designers, UX experts, and product managers to create outstanding features.

- Have experience leading other engineers to ship major features on schedule.

- Enjoy helping others grow as developers and become successful.

- Take pride in the quality of the code you write. Your code is readable, testable, and understandable six months later. You adhere to the Zen of Python.

- Are able to manage complexity in a large project, and incur technical debt only after considering the tradeoffs.

- Work well in a fast-paced development environment with testing, continuous integration and multiple daily deploys.

- Can work well with remote developers.

- Are interested in journalism, news, media or social media.

More info: https://muckrack.com/job/14/senior-software-engineer or email jobs@muckrack.com