skysight-inc/HackerNews huggingface dataset:
There's occasionally the standout who really impresses me, but then I think they're never going to want to stick around at my place

This is the paradox of hiring today, and why tech hiring is broken. In fact, there's a story right now titled "Hiring Is Broken" on the HN front page, not far below the OP. So it's getting harder to recruit people who do make the cut technically and communications-wise, while at the same time it's getting harder to retain them because let's face it—so many startups don't have a compelling value proposition or profit model.
Instead of being dishearted, propose a solution to enable the ability to make a living. First thing that popped into my head was some sort of support model. CentOS vs RHEL. Give the farm away for free but consult how to run the farm...
I don't know what "security expert" means, but I do believe that you can't secure software if you can't code, and I do believe most real-world security jobs require you to secure software.
That's irrelevant since the prohibition came after the addiction was established, not before.
You don't have a visible donation button on the front page.
This is a bit puzzling to me. Isn’t TSA paid for by user fees? If so, why are they being impacted by the Government’s failure to pass a budget?

https://www.tsa.gov/for-industry/security-fees
not to mention these properties need to be occupied and maintained - look at the homes abandoned during the bubble - all manner of ills happened that resulted in all kinds of tear downs...
"NES" is not trademarked, outside of "oils and essential oils". http://tmsearch.uspto.gov/bin/showfield?f=doc&state=4806:hhi...

You're thinking of Nintendo Entertainment System. http://tmsearch.uspto.gov/bin/showfield?f=doc&state=4806:hhi...

Happy to be proven wrong if you can find the matching one.

As for the copyrighted assets… where? In the demo? Those aren't in the code FWICS. (Edit: and as tptacek says, they're not original assets either, which makes this a similar scenario as having a github logo in an icon font)
I don't think a lot of us here realize DDG is Bing. And also that it's heavy on marketing.
How can you be a security expert insofar as the domain is software if you can't code?
Sequel Pro – Open source macOS native MySQL GUI client
For cat sharing startups, maybe, but for a large fraction of real-world apps, not so much: it is better not to be available than to compromise the data of your users.
Wow looks great. I'll be using it in my projects.
I see what you are getting at, but I think what the other comments are saying is that for the third nucleotide position of a given codon, it does not matter which nucleotide this is. The amino acid to be used would only depend on the first two nucleotides, while the third nucleotide can be AUCG.
Did you have something on topic to say?
Nice writeup. I have been using your project piglet for the news suggestions; I should have invested :-)
I don't disagree, but I can empathize with the pressure they put themselves under
That's deprecation, and it's super fast in things like cars and consumer electronics. However, as far as I know, homes do not deprecate rapidly (ie. a "brand new" house doesn't command a significant premium over a comparable 1 year old house)
No. I’d stop voting if it wasn’t anonymous
>You cannot C&D art style.

Sure about that?

https://www.google.com/amp/s/bgr.com/2018/05/24/samsung-appl...
I have asked HR persons (in large corps) and got clear direct answer: you MUST solve two tasks on the interview, it's a necessary condition. If you don't solve within the hour you are rejected. In small companies conditions are much more relaxed, but in large corps where interviewer screens hundreds of applicants he/she just don't want to waste time.

This system is corrupted but looks like it suits big corps just fine. I have never evet been asked about my real experience on large corp interview. They just don't care about your github. Small companies asks about experience, but unfortunately some small companies copy FANG approach to interviews, cargo cult is magnetic.
I'm not sure why you're being downvoted for stating facts and reasonable opinions. I've been on Hacker News long enough I'm allowed to call out increasing the Reddit influence (which is why I visit less and less). It's getting worse. It appears Hacker News is no longer an adult forum to discuss controversial things in a sober manner. The guardrails Paul Graham put in place are beginning to break as Hacker News ages and the immigrants are able to use the downvote button.
A big problem with security is that you don't know what you don't know.

Want to allow users to upload image?

* Make sure submitted files are actually images
* Limit file size to prevent denial of service
* Normalize the filename to prevent directory traversal
* Add a randomized component to filenames to prevent users from overwriting each other's files
* Serve file with the proper content type
* HTML encode filename for display

Then, oops, you didn't know SVGs allowed JavaScript, so now you have stored XSS.

I don't think that's negligence, it's just not something you'd necessarily know until you saw it. And this doesn't even consider language quirks and gotchas that are even more esoteric.
Let's say 1,000 sq ft a home

and $100 a sq ft

That's $100k a house.

Multiplied by 50m homes

is $5 Trillion dollars of inventory.

US GDP is ~$20Tr, for context.

Monetary policy matters. A pause in the Fed tightening instantly flows through to impact the market price for $5tr USD of speculative real estate, a half a world away.
If you don't know security best practices then learning them on the fly isn't particularly helpful, simply because you don't even know what you don't know. It's much better to accept your ignorance and defer to someone who does know security.
The problem with this logic is that the risk of "shutting the server down" is almost always financial loss to the software firm, and the risk of "leaving it up" is often harm to end-users, who are an externality in the equation you're describing.
It's probably easier to say that when your hands aren't literally saving lives on a regular basis. There must be a certain level of guilt that sets in when you take time to relax. I'm not saying doctors shouldn't take it easy, just that it's human nature for them not to want to.
The answer for that would ideally be all? We, as developers should be aware and ready to learn and build the experience around security , but a different thing are focus and ownership. You still want experts to drive specialized fields. I run all my architecture reviews by the security team and ask them to comment- internal RFCs. Very similar approach as with infrastructure/devops. Except the gap between dev and security is wither than between dev and ops.
I recognize that is very dependent on both organizations and individuals but I shy away from hiring people that at don’t have at the very minimum the interest or awareness in security. I also shy away from business that see security as an afterthought
One reason why training is out of fashion is because of poaching. Companies don't want to invest a lot of money in training their employees only to have their closest competitors become the beneficiaries. That is a myopic view, to be sure, but it's a common one.
Don't tell me; tell the folks on Twitter. I was surprised as well. Quite a few of them took the "You don't need to code" side.
I mostly agree with you. However, I wrote it (and we released it) while I was working full time at a large Canadian cancer centre (and we really needed it!). I have stayed involved with it as a "hobby" for the last few years with the goal of being able to eventually generate enough income from the project to support myself full time.
Honestly, I have no clue. That's a question for the security experts on Twitter.
i have a prototype of that same idea working w/ seastar.
An introduction to XAML Studio
All the parent wrote was:

> The TSA has never found a bomb.

Perhaps I'm missing something, but I don't understand how that supports your statement.
Frankly if your paid-tier is so underwhelming that people would 'bunk off' and keep renewing free trials then I think your offering sucks.

If you've never run a business in this sort of industry, you would be truly amazed at the lengths some people will go to just to save a few bucks.

At an early stage of one of my businesses, the founders were literally sleeping in shifts because a small group of people was creating new accounts 24/7 and trying to scrape our entire offering piece by piece to work around the caps on individual accounts. So apparently our offering was good enough for them to try to clone all of it and presumably set up a copycat site, yet by your argument it was also "underwhelming" because they didn't want to pay anything for it.
MNT Reform – Open Source DIY Laptop: Assembling Beta Units, Feedback, 35c3, Etc.
Elixir has a very similar function, IO.inspect(..), which prints a debug version of its argument and then returns it, very similar to dbg! here. Coupled with Elixir's pipeline operator `|>` which passes the output into the first argument of the next function, it's pretty handy: foo() |> IO.inspect |> bar()
My family (parents, sister, some cousins) "replaced" Facebook with iCloud. Shared photo albums with comments and iMessage covers pretty much everything.
That's the main difference between police officers and highway patrol in my area: police go to the driver side window, highway patrol go to the passenger side.

But yeah, it seems like an unnecessary risk for police to go to the driver's side. I always try to give them space, but quite a few drivers don't.
Yes quite sure. Design and art style are not the same thing. That is why your website using material design is safe, but you just might be c&d'd if your interface exactly replicates gmail 1:1.
Statistics?
Someone should make a twitter clone in this NES style. Might be more peaceful and fun to read. Good exercise for a CS student just starting out.
> rather expensive at $199

Compared to a six-figure salary? Developers tools are a bargain for what we get out of them.
This is going to be an unpopular observation, but most people that are charged are guilty. This is actually why the presumption of innocence is so important! If most people charged were actually innocent then there would be no need to explicitly presume innocence. Prosecutors generally don't bring a case to court unless there is sufficient evidence.
I think a crucial piece of information missing (maybe you have it) is the age/condition of those homes. The US has a lot of vacant homes in low-opportunity areas that are reaching the end of their first usable life and need a lot of money out into them to bring them up to standards. I’ve heard that China has been building a lot of new property that isn’t being inhabited. Those two cases are a bit different.

https://www.theamericanconservative.com/urbs/what-it-actuall...

As that notes, there are significant deficiencies in a lot of the cheap housing stock in lower-opportunity areas that need money to fix. Those properties going unoccupied can still be an issue, but it’s different from speculation on new property. Vacancy rates in high-opportunity US cities are very low.

From what I’ve heard, the situation in China sounds like speculation on new properties, rather than aging housing stock that requires significant reinvestment.
Laptop batteries are something like 100 food calories.

So if your converter was anything but awful, it probably wouldn't be a big deal.
Microsoft Launches Azure DevOps Bounty Program
>Most of the nVidia tech gimmicks usually suck and are uninteresting (HairWorks, physx, realtime ray tracing)

This isn't even a gimmick though. This is the future, because our current way of doing shadows and lights will keep increasing in complexity, but will never be good enough. Whether nvidia's solution will work is a different matter, but this most certainly is not a gimmick.
This would certainly eliminate the rental market altogether, if that was your goal.
I just want the standard to be coherent. If it's "you have to know everything", then fine, let's say that. But saying things like "at least they should know the OWASP Top 10" doesn't make much sense to me.
Easy solution, the Dems can help fund the wall and the shutdown is over. Why not? They've repeatedly says walls don't work anyway, and the cost of the wall is a rounding error in the federal budget.
Most of our users automate it. When you register, you are given access to the repository file for your preferred distribution. Once you have the repo, you can just apt-get it into every one of your nodes.

Also Scylla provides non-gated access for AWS users with ready-to-consume AMIs
Most frameworks have an easy way to offload user authentication to third parties like Facebook, Amazon, Twitter, Google, etc. I would trust any of them to get it “right” before I would trust most developers.

If you need authentication for an internal corporate app, there is always authentication with the corporate directory services or something like Okta.
Just finished building that set with my son. It was a really fun one to build. Printed lettering on the pieces versus the usual stickers was a nice touch.
I hate namecheap. I suck it up and pay for Google domains as registrar and dns. Lightning fast and like 45 minutes for propagation.
This. The JetBrains licensing model is great. Subscribe to get updates, with a perpetual fallback license for the last version when your subscription lapsed. Their old versions also continue to work across OS upgrades, etc. If you subscribe, the annual fee decreases substantially for the first few years. This is nothing like Adobe's Creative Cloud.
I'm not familiar with it, but is an almost user-proof interface the same as having dialed the accessibility down to zero? or does it mean really good and the user can hardly make a mistake?
Long Range RFID Sensors Based on the Modulated Scattering Technique
This. I've always wondered why sites like GitHub/GitLab won't allow issues to have a bounty. It seems to me like its the obvious solution to crowdfunding OSS.

When I find an issue on GitHub requesting a new feature or reporting a bug that is important to me I should be able to throw down $5+ bucks to incentivize someone to fix it. I also know that I would personally contribute to OSS more if it didn't feel like I was doing community service but rather actually getting paid for my time.
>Not really. For 2560x1440 resolution you don't need so much VRAM (that's what makes Radeon 7 so expensive). So it is an overkill and not very practical for gaming. It's probably a really good 3D rendering card though.

It's overkill, because most GPUs don't have anywhere near that amount of memory and performance, but if they did then games would use up all of it.
I agree with you. But, some security folks still don’t think that’s good enough. These are usually old school on prem security guys who don’t really get cloud.
I'd suggest moving the TED talks to the rubbish category. Seems safer and easier than sifting through the pile of TED talks to find the few good ones.
The last time payment industry tried to do something that resembles an explicit user consent, it resulted in the 3-D Secure system, which is horrendous and not even secure.

Meanwhile, merchants in Europe are looking forward to the new Strong Customer Authentication rules under PSD2 that will come into effect later this year. At least it will be interesting to have hard data on how much damage that causes and whether the damage is worse than the cost of fraud it will supposedly prevent.
If only she’d know it could have covered part of your tuition.
You might well be right but by what basis do you establish this? The percentage that is convicted? This would ignore any bias in the system whatsoever. The presumption of competence? The FBI admitted after decades of relying on hair analysis that it spent decades just lying and actually couldn't tell human hair from dog hair.
> Then, oops, you didn't know SVGs allowed JavaScript, so now you have stored XSS.

Right, but presumably you're using the standard techniques to mitigate XSS, e.g. sanitizing all other text input, using an X-XSS-Protection header, using a CSP that only allows scripts that have been whitelisted, etc.

Even if you don't know that an SVG can contain js, that shouldn't put your users at risk if you're doing everything else correctly. And then when that gets caught in an audit or reported by a user or as part of a bug bounty, you can fix it. (Although if you're going to be serving up a certain UCG file type to users, I don't think it's unreasonable to expect people to Google for vulnerabilities associated with that file type.)

Developers shouldn't be expected to have perfect security knowledge or to never make mistakes, but I think it is reasonable to expect them to not be grossly negligent. I don't want to live in a world where only people wealthy enough to afford full security audits before they get any traction should be allowed to launch products, but I also think developers should be held accountable if they're recklessly endangering people.
Including Google or FB advertising id?
Well, there's Scuttlebutt: http://scuttlebutt.nz

Previous HN Discussion: https://news.ycombinator.com/item?id=16877603
Stack traces and a profiler...this is fantastic.
Integrating bug bounties and donations into GitHub could be one of the best things to happen to Open Source. Funding new features and bug fixes could become seamless, and it would sway more devs to adopt this model for their projects.
Moral relativism is one of the profoundly dumbest ideas ever spawned. For example, Mohammed is a pedophile and pedophiles are bad(thankfully I'm in the US, so typing this can't get me arrested yet). Definitely dumb enough to destroy our nation over the next century. One of those ideas that take several centuries for humanity to say "oops". It ironically reminds me of Christianity in many ways, but probably much worse. Following directly from the statement that moral relativism is incorrect, I don't need to defend my correct statement. Following further, we don't need to spread any more cancer to our youth than there already is to this nation's youth.
My dog was killed on a walk with a walker ordered through Wag
What evidence is there for "enhanced creativity" from taking LSD? I don't think there is any, other than subjective feelings.

People used to think sniffing ether, taking absinthe or breathing nitrous was incredibly profound. Until enough people did it that the evidence was underwhelming.
If the owner-occupier can be taxed for inputed rent, then the owner-occupier should also be able to depreciate and expense every blasted cent put into any expense whatsoever made in connection with the property.
Writing Ruby extensions in rust
And perhaps more safe. Security theater is a real thing and gives people a false sense of security.

I've heard that the reason we haven't had a major terrorist attack in the US since 9/11 was because of vigilance of the public. If people get lazy and start trusting that the TSA will competently do their job, we're likely to have another. I think it's because the TSA is pretty bad at their jobs that we haven't had anything major attack.
Apple, Amazon called out for 'incorrect' Taiwan, Hong Kong references
Thankfully what I know is all public knowledge, so they can stick to talking to all of his criminal underlings and associates.
HR user here. I'm very satisfied with the functionality, the fact that I can forget about the battery and that it's basically a normal watch with advanced functions. Most of my usage is for notifications and fitness.

What I'm not happy is that the 40 mm version is kinda ugly since the rim is too wide and that there's no two way communication so I can't change a song on my phone or decline a call.
Show HN: 10 year challenge with browser history back button
> The value being created by the software would then be captured by those who would otherwise have had to pay

You mean potentially sick people that might not have access to this diagnosis if the software was not open source? Some times Open Source and co is just to help others! Not everything is profit-motivated :)
"copyvio" A violation of copyright laws: copyright infringement.

Was a new word for me, from Wiktionary
> In the end, force wins.

Thanks for the 2nd Amendment :-) Force doesn't have to be privatized by Governments.
> And San Jose is covering the wages of TSA screeners at Mineta airport during the government shutdown, even though the TSA isn't exactly the most popular agency of Silicon Valley liberals.

I agree with your general point, but I should mention that the Bay Area political climate is pretty sympathetic to government employee unions, such as those that represent TSA workers.
Just some fun website inspired by the 10 year challenge.
Source-Code is available on github https://github.com/tomschwiha/web-archive
The skills learnt should be transferrable to Octave which is Matlab compatible.
Yeah, that's pretty stupid. It should never be cheaper to mail something small, like a gun, than to carry it with you.
The Age of Surveillance Capitalism
Didn't seem to have been a problem in USSR (especially with a brainwashed population) and still isn't a problem in China, Venezuella & others dictatorship.
When I was in China we saw this on many straight stretches of roads. Just watching.
FYI I downloaded and installed your app when I saw it here on HN, didn’t work or I didn’t know how to use it.
Yes this is one of the two obvious potential solutions for that particular project (the other being a hosting service) but transitioning from open source project to open source company can be challenging!
>> So I created a fat glass U column, and packed it with silica gel plus some retardant specified in a thesis. I extracted some marijuana with acetone, filtered, and then rotovapped to get "hash oil". Then I ran that through the GC.

>> Referring to the thesis, I identified the main THC, CBD, etc peaks. And so I captured fractions, using small glass U tubes in liquid nitrogen.

That's pretty fantastic, but I think I'll stick to rollin' j's :)
Many people are apprehensive about being linked to their plates, even going as far as blacking them out in selfies etc. Given this apprehension (founded or unfounded), I doubt the increase in business would be worth the trade off in negative PR. I can't begin to imagine what the Wendy's twitter timeline would look like if the news broke that McD was storing your license plate in a database and correlating it with your income.

Many of the ideas you suggested (recalling past orders, upselling) can easily be accomplished with existing smartphone technology. I've never used the McD app so I don't know if they utilize location tracking but if they do I can almost guarantee they are already checking to see which locations you visit the most, what you order, when you usually come in, whether you use the drive thru or not, etc. Even without location tracking they can still do all of that if you order online.

tl;dr In my opinion they don't do this because they can already collect the data through less invasive means.
Given rising interest rates, this seems like a decent model for encouraging large scale real estate investment, especially when along side existing affordability requirements. Ultimately, it seems like the best way to place these sorts of zones would be in more well off locations in areas zoned for residential, and in poorer areas that are zoned for industrial use.
Life-Changing Magic of Keeping Absolutely Everything
Retirement doesn't necessarily mean you have to stop coding. It means you can stop coding, if you want, or if you need to.
Funny enough that the companies who built a lot of those tools are the first to censor & attempt to control the Internet.