skysight-inc/HackerNews huggingface dataset:
Submittable (YC S12) | Engineering, Product, and Design | Missoula, MT | ONSITE | Full-Time | https://www.submittable.com

Submittable streamlines the submission and application process for magazines, literary journals, conferences, film festivals, grants, and scholarships.
We could use your help as we modernize our application using React, Redux, and a serverless backend built on AWS. Code you write will be used by millions of people the day after it's merged.

We are based in Missoula, Montana which is often ranked as one of the best places to live. Many of our employees own their own houses, bike to work, and visit the wilderness on weekdays.

We are hosting a hiring event in Seattle on August 8th and 9th. Later in the month, we'll be in San Francisco. These are great opportunities to meet in person and ask questions. Email me if you're interested: lance at submittable.

Apply at https://resume.submittable.com/submit
The Universal Law That Aims Time’s Arrow
Browser vendors effectively are the ruling party of the Internet at the moment. And Mozilla can mostly only follow Google's lead, as Chrome is (basically) everyone's browser. It doesn't matter what you put on your server if Chrome, Firefox, and Safari refuse to accept it. Whether it's the trusted certificates list, or features of HTML and JavaScript, or decisions about what sort of web content will trigger the browser to block parts of your site, browser developers determine what the public will see.

The best part here too is that Mozilla's link on revocation basically says "we understand sometimes it's more risky to revoke according to our policy than to take a little longer, we just don't care and will utter our disappointment in you either way".
> nobody is MITMing https?

How about my company?
This then just pushes the layer of trust to the developers of the installers.

The OPs point is, at some point in the chain you have to trust someone and in his opinion coffee shops are less likely to want to do bad things with your WiFi connection than VPN providers et al. Which I think is a fair point when you look at the costs of scale. ie it’s easier and cheaper to set up a rogue VPN provider or boobytrapped installer than it is a coffee shop.

Personally though, the reason I don’t connect to random WiFi networks is most of the ones in the UK ask you for your email address. I’d rather rag my mobile data allowance than hand my email address over to 3rd parties.
Messari | New York, NY (NYC) | Onsite or Remote

We surface actionable info about blockchains via an API (time series, current, and real time via WebSockets) and a React web app. This currently includes market data, on-chain data, and qualitative information (Twitter, Github)... but we want to expand into a lot more (layer 2 networks, non-crypto, and metrics that are a function of other metrics)

example: how long does it take for a new version of a bitcoin client to propagate through the network? (implication: knowing how frequently members of a network update their client software reveals how quickly the network can adapt to new features or security fixes)

Stack: Kubernetes, Postgres, InfluxDB, Golang, Node.js, React/Typescript

Looking for people who are skeptical about crypto, have good OPSEC, and like to learn new things.

For backend people, we care about clean and performant APIs. You can choose to focus on on-chain data, ingestion infrastructure, or jump around across the backend.

For frontend/React people, we care about lightweight JavaScript payloads, fast renders, and minimal CPU usage (great client experience).

https://messari.io/careers

or email me and Qiao: jonathan@messari.io, qiao@messari.io
Would you mind naming a "mainstream" application that does not use TLS by default?
The Philadelphia version of "joan" in the 80s/90s was "bust"....now it's "bid". Philadelphians no longer "bust on people" they "bid on people". It's really interesting how these things evolve. DC kids probably have an new entirely unrelated word that essentially means joan now
I disagree strongly here. We should be encouraging users to take responsibility and agency for their actions. As admins and tech-aware people in our circles, we should be constantly encouraging better habits like typing URIs manually, decreasing the use of search engines for non-search purposes, and trying to spread literacy.

Besides, it's not like we should ever trust a search engine as an authority on anything but the results that bring the host company more money.
Architect, Principal Engineer | Seed stage startup | San Francisco, Bangalore, Gurgaon. ONSITE -

We’re building Cloud Native Dataflows on Spark and Kubernetes to replace ETL.

Need expertise in one or more of Programming Languages/Compilers, Distributed Systems, Distributed Database Internals.

Stack is React, Scala

Contact me (Founder) raj dot bains at simpledatalabs dot com
Sounds like Osama Bin Laden, he was trying to get US military bases off of "sacred religious land" in Saudi Arabia.

Primary reason for 9/11, he stated.
Learning Day
The point is that the police wouldn't have the "it's too hard" excuse with a face database.
I don’t know if you are right, it depends on whether your word “typo” is a typo - itself a very meta thing!

“You typo an address” — well, then, sure. But how did you manage to typo an address that’s exactly where the attacker put their stuff, and the bank didn’t catch them?

Now, if you meant “type”, then NO. Unless the browser includes a certificate authority that gave out a certificate to the attacker for that domain, the browser will flag this “valid” SSL cert.
Samsara | Hundreds of Roles | San Francisco, San Jose, Atlanta, and London

#16 Top Start Up according to LinkedIn [1]

Top CEO in 2018 According to Glassdoor and 4.5 Glassdoor Rating [2]

All funding rounds led by Andreessen Horowitz [3]

Feel free to contact me, if you have any questions [4]

>>> I’d be happy to personally submit you, just fill out this form: https://bit.ly/2KaOakW

1. https://www.linkedin.com/pulse/linkedin-top-startups-2018-50...

2. https://www.glassdoor.com/Award/Top-CEOs-at-SMBs-2018-LST_KQ...

3. https://www.crunchbase.com/organization/samsara-2

4. My profiler has instructions to find contact information.
Other people may click on email attachments and install random exes, so that's a lost cause anyway.
CAs are held to a strict security standard. Nobody is forcing any entity to act as a CA - if you don’t want that kind of responsibility, you don’t have to be a CA. But if this stuff isn’t taken seriously, the padlock icon means absolutely nothing.
Elixir – Dealing with mocking, behaviours and boilerplate
Yes, Gates has done many good things, but the foundation makes a lot of calls, many of them bad. I don’t know why there’s an attitude of “Its philanthropic! It’s good!” Some of it is not. He’s older and kinder than he was before, but he still has many of the imperialist values that let him turn Microsoft into an empire.
Location: Nashville, TN or Los Angeles, CA

Remote: Sure

Willing to relocate: Nashville or Los Angeles are my two current options.

Technologies: Non-technical! I've experience in more support and success oriented roles. Currently learning SQL now as well. Open to any opportunities.

Résumé/CV: Shoot me an email at...

Email: bernstein.ian@gmail.com

Thanks!
Because the alternative is no wifi. Give me a more secure option, I'd take that. Otherwise, I'm gonna trust TLS does it's job. I know there could be a "heartbleed" zero-day out there, but beats no internet at all.
UBI has to be universal in order to avoid it being stigmatized as a "poor people thing".
What I would love is for you to through the music through SampleCNN to reduce it to a vector representation, and then use that for smoothing. This could help smooth the cold start problem.
He has said before "The only way that I can see to deploy this much financial resource is by converting my Amazon winnings into space travel. That is basically it."

Now, in-context (https://www.businessinsider.com/jeff-bezos-interview-axel-sp...), he is saying that with an implicit "usefully", and I don't want to pretend he was saying what I am about to say, but it does sum it up very well.

He has so much money he doesn't even know how he can spend it, it is simply the last option left of a thing to buy that no one else can. It is a vanity project.

If he really wanted to cause positive change in the world, he could start by making Amazon less anti-consumer and anti-worker. It is well documented how bad Amazon is in those aspects, and the fact he has such insane wealth proves it doesn't have to be.

I love space, and I love seeing advancement in the area—I truly do. However, there comes a point at which you must ask if the investment is justified when compared to what else could be done with that money. I think Bill Gates focuses a lot more on actually helping improve the world (again, not that it justifies the cost of the way that wealth was obtained). The real answer is that it should not be possible to amass such insane wealth—as it simply means too much power in the hands of a few people. It is nice that there has been a spate of the ultra-wealthy trying to do philanthropic things, but it doesn't mean the system is working.
there is zero risk to checking your email over public wifi
Thus, I would at a minimum like to see a clear policy for when it can be used, image retention (if any), image sharing, etc.

This is what's important. There need to be clear legal expectations set about the security of this data. It has legitimate uses, but it should be a pain in the ass to access and share, like HIPAA. You have to really need it and make a case for needing it.
You probably use a different password for every login, but there are a lot of people who don't.
The concern is a public hotspot, not a state actor. Anywhere in such a country is a problem, public wifi or not.
The Mighty | Flutter engineer, Android, iOS | Remote | Full-time

The Mighty is a digital health community created to empower and connect people facing health challenges and disabilities.

We're building our Android app with Flutter. I'm looking for an engineer who has released an Android / iOS app using Flutter.

You can reach me at sandeep at themighty.com
Oil Tankers’ Tracking Signals Are Vanishing in the Strait of Hormuz
Any profiling or identifying should require a warrant or reasonable (and well documented) suspicion.
Probably high-trust, but those who support the Nordic model would argue that this trust is developed. One of the goals is to have cohesion. That is the idea behind for example having universal systems. This trust arguably didn't exist when ~25% of both countries population left the United Kingdoms of Sweden and Norway for the United States.

(I wouldn't be sure Norway could do this today either).
In this example, item, price, order would be predicates.
They're really orthogonal problems, we could absolutely have our cake and eat it too on this front but we just.....don't. We're this tiny dot in the middle of a massive universe of untapped resources and starting that push could open innumerable opportunities for societal advancement. It doesn't even take much wealth to unlock in the grand scheme of things but we've structured a lot of our society to make it as difficult as possible to solve both problems.
Great idea, I think you’re on to something! How do we prevent it from hurting good advertising which informs, such as trailers for good movies which you might not have otherwise known about?
Sonder | San Francisco, CA & Montreal, Canada | Onsite | Full-time | https://www.sonder.com
Sonder is transforming the future of hospitality. We are building the operating system for the future of the hospitality industry. Technology is at the core of powering the platform for the world's first deconstructed hotel and we are the first to do it. We recently raised our Series D at a $1B+ valuation. We are growing rapidly and looking for talented engineers to join us on this journey.

Machine Learning Engineer: https://grnh.se/8ee2652e2

Senior Data Scientist: https://grnh.se/e3e5bc662

Frontend Engineer: https://grnh.se/28006a552

Senior DevOps Engineer: https://grnh.se/e41290792

Engineering Manager (MTL): https://grnh.se/7b36fc272

Reach out at chris.spada@sonder.com with any questions
That "nobody" is wrong. Entire governments are MITM'ing all connections. Businesses are interfering as well. So there is a risk, but you have to question risk/reward rates.
Would like to see the original study for this, because it seems like something is getting lost in translation. The article mentions 4 major prenatal steroid hormones involved, "two known as androgens", but the headline says that estrogen is linked. Colloquially, estrogen is the female sex hormone and androgens (including testosterone) are the male sex hormones. Molecularly, "estrogens" are a family of different steroid hormones (not a single molecule), and androgens are a family of other hormones, and both of them occur in both males & females but in different quantities. And to muddy the waters further, many androgens are metabolic precursors of estrogens, eg. testosterone is synthesized into estradiol. And to muddy them even further, some molecules (eg. DHEA) are both depending upon which biological receptors they bind to.

The title as written contradicts the article, using the colloquial meaning of the words involved. There's probably a more precise technical meaning where everything makes sense, but the article doesn't really explain it.
I believe you are very much mistaken. The risk/reward profile of both acts are wildly different: the chances of getting caught while operating a honeypot AP in a public environment are vanishingly small, not so with running around brandishing a knife.
Think of it like gas station card skimmers (where the risk is substantially higher than the rogue AP) where the financial motivation is already enough for some people to try it. I might be a tad cynical on this, but since there's money to be made I bet it happens more often than we hear about.
I agree with your general argument - one thing to nitpick. Full time parental leave is not a bad thing in creating social wealth. Domestic labor is often unappreciated - until one has to do it or pay for it. I wouldn't lump those in with what you clearly consider "unproductive" use of human capital and labor. You get the benefit of a meal or a clean house, and if you pay for a maid and a cook, it also shows up on the national statistics for GDP.
FYI this site employs 3 sophisticated ad networks and several other deep tracking scripts.

No reason to expect that the information you fill in here on your actual income, etc doesn't wind up in an leaky ad profile.
That's a bit like not writing any new code unless you fix every single bug in the existing code. The counter-argument being that newer code will improve the design or fix some architectural issues, or handle upcoming feature requests better, etc and indirectly improve upon the flaws in the existing code. Its not always zero-sum.

So, why not do both, and prioritize the money accordingly?
Pexels | Frontend Ruby on Rails Developer | Remote | https://www.pexels.com/

Pexels is one of the biggest, most loved and fastest growing free stock photo sites in the world. We help millions of creators to easily build beautiful products and designs by connecting them with talented photographers. Photos from Pexels were used by companies like Forbes, Buzzfeed, Facebook and many more.

Work on a product that is used by millions of people and have a huge impact on our company, the product and our users!

# Your Profile

* 3+ years of development experience with JavaScript, HTML5, CSS3 and Ruby on Rails

* Good understanding of Rails, best practices and conventions

# Your Tasks

* Build new features for Pexels and take part in product decisions

* Work with our designer to implement new designs

* Build a product with an amazing user experience that makes millions of designers, writers and programmers happy

Please get in touch with us through AngelList (https://angel.co/company/pexels/jobs/406774-remote-frontend-...) and include your CV, Github profile and anything else that helps us understand that you are amazing.
no it is not. in any case it's referring to household incomes and only between people who are 35 to 64. so again, no, 1/20 people are not making that much. again, percentiles do not work in a fashion where you can take one group (35 to 64) and apply it to the entire population.

i repeat, that's not how percentiles work.
I don't want to sound arrogant, but I think you are underestimating how important this topic will be in the coming years, especially if you will be successful and your company will grow significantly.

I know the space really really well, and have worked at AWS from 2008 to 2014. Most large enterprise customers are worried about this, especially because it might mean that the supporting company (MongoDB, Elastic, etc) will not have an easy way to survive in the future.

Right now you are capturing the long tail of the market, and you can grow a lot just with that. But eventually you will need to get enterprise customers, and that's when this topic will surface.

I don't want to be an alarmist, just saying that thinking about this ahead of time might be important for your company.

Tangentially, I am bullish on Elastic, less on MongoDB. My 2 cents.
While I agree that this factor is stupid -- either it wasn't well-thought or it was intended to be a way to avoid fairly compensating victims, whatever.

That said, they are paying a total of about $700M, in fees and compensation and so. The actual amount is probably going to be less -- if every single person took the $125, then the $31M for credit monitoring wouldn't be used at all. But for comparison, in Q2 2019, Equifax report about $900M in revenue. So they lost a full quarter of profit out of this.

Is that fair? Does that actually give sufficient incentive to keep this from happening again, by Equifax, or by TransUnion/Experian? I don't know.

I can say I'm not happy about this, the golden parachutes are bullshit, how they sat on the hack and then tried to scapegoat an engineer over it is infuriating, but I'm sure they are scrambling to lock down their security now, if not before, and I can't realistically see the current CEO letting something like this happen again.

Although, as they say, lightning never strikes the same place twice -- they'll lock down these avenues, but what are they going to miss? Can we actually trust them not to leave other vulnerabilities? We don't really have a choice, do we? I can't opt out of their "service."
Location: United States
Remote: Yes (8 years experience)
Willing to relocate: No
Technologies: Ruby on Rails, React, Nodejs, AWS, Docker, Git.. etc
Resume/CV: https://www.linkedin.com/in/tiwatson/
Email: tiwatson@gmail.com

I'm a 20 year full stack open source web developer looking for my next challenge. In the past I have created a niche social network for a political action committee, joined a small startup and rewrote their public transit tracking and prediction app, then worked with another startup to help small car dealerships find their web presence and streamline their backend operations.

I am looking for fast paced small companies or startups. Ruby on Rails/Node.js/React. 8 years remote experience.

A side project of mine: https://reserve.wanderinglabs.com/ https://github.com/tiwatson/reserve.wanderinglabs
Why is typing a URI manually better?

It's undoubtedly less secure and it's upside is...what exactly?
If you have a local Ag Center, may have to travel outside of town, check there as well. Ours has a seed bank and exchange to try in small gardens (not commercial counts...ounces vs lbs of seed).
Many of my 4 year old Spanish Cedar trees (cedros) are already 20cm (8") diameter at chest height and ~15m tall. Planting hardwood trees in the tropics is one of the best long term investments you can make, especially if you plan to have furniture etc made with the wood. Some types of trees are ready to harvest in 5 years, others in 10, others in 20, others in 40+ (for your kids)

I've planted about 30 hectares so far, will do another 15ha this year. To keep maintenance costs down, you can plant them in contour rows along with closely spaced leguminous trees like inga edulus to shade out the weeds below.

Selecting trees that are hardy against insects when they are young is a good way to go (cedros and mahogany are not, need spraying..) I'm not a fan of teak, eucalyptus or pine being planted in the Amazon, I think fast growing native species are best.

If you do the math, the numbers are really good. And it's good for the animals. And climate.
Aula Education | Globally Distributed! | Remote Only | https://aula.education

Aula is a social learning platform built for education. Aula replaces emails and learning management systems (e.g. Moodle, Canvas, Blackboard, D2L) with digital infrastructure designed to encourage conversation and participation. A digital campus that complements an institution’s physical campus, Aula enables new ways to teach, learn, and create community.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/aula-education or our open-sourced handbook called "the Brain": http://bit.ly/Aula-Brain

Here are our open roles:

- Senior Full-stack JavaScript Engineer (React / Node.js): https://www.notion.so/Remote-Senior-Full-stack-JavaScript-En...

- Product Manager: https://www.notion.so/Remote-Product-Manager-Aula-9fe454ed57...

Tech Stack: We use React and React Native for our frontends and Node.js for our backend, which is built around the microservices paradigm. Last months we've invested our time in migrating services to serverless logic, in order to have more concurrent users on Aula simultaneously.

In order to support this architecture, we use Docker and everything is deployed and managed on our AWS infrastructure which is defined by Terraform code. More details here: https://blog.aula.education/bringing-educational-infrastruct...
Functional Programming? Don’t Even Bother
The risk to individuals is vastly overblown, but if 82% of people connect to any free WiFi they find and 1‰ of those are passing credentials insecurely, an attacker needs to sample on average 1220 people. That's about a hit a day at a busy coffee shop.

So y'all and I don't see a risk, but a malicious actor sees a valid strategy.
Good luck removing

2019-05-03 Removed allowSiriServerLogging from the Restrictions Payload.

[0] https://developer.apple.com/business/documentation/Configura...
> Are margins on CPU binning getting smaller?

Very likely so for Intel if their yields are as low as rumoured, and they don't have "a room to manoeuvre" with binning.

In that case, they will struggle to fill even the baseline model, and will be putting most of their output into it.
Highlighting sigil variance was my point, poorly stated.
Law banning salary history will be life-changing for workers