skysight-inc/HackerNews huggingface dataset:
I think parent is saying you can't have a login system where you store the hashed password locally and then log in by sending the hashed password to the server. The hashing to validate a password has to happen on the server, otherwise anyone could get a copy of your hashed password and submit it as a login.

But as other replies have pointed out, you can generate a login token to offer a "save password" feature without actually saving the password to disk.
It's just a CNAME to an akamai IP:

$ host captcha.nsa.gov
captcha.nsa.gov is an alias for www.nsa.gov.edgekey.net.
www.nsa.gov.edgekey.net is an alias for e6655.dscna.akamaiedge.net.
e6655.dscna.akamaiedge.net has address 104.75.125.118
e6655.dscna.akamaiedge.net has IPv6 address 2600:1406:5800:7b5::19ff
e6655.dscna.akamaiedge.net has IPv6 address 2600:1406:5800:792::19ff

edgekey.net is an akamai thingy, all of nsa.gov seems to go through it

$ host www.nsa.gov
www.nsa.gov is an alias for nsa.gov.edgekey.net.
nsa.gov.edgekey.net is an alias for e16248.dscb.akamaiedge.net.
The issue is that the structures to handle streaming are not often first class (in languages other than Go, Rust, and JavaScript). And when they are, the the third party interfaces are not. Eventually your data will have to reach the DB and it would bottleneck. Nobody wants to use KV storage all the time, SQL systems and ORMs need to step up their concurrency game.
I don't think everyone has to be using car navigation mode. The traffic in my small town is shown on Google Traffic and I doubt locals here need navigation to get back to their home 5km away.
Rebranding won't help, unless IBM actually put in the CapEx behind their cloud:

https://www.platformonomics.com/2018/05/follow-the-capex-sep...
A New Dream of the Old Web
The great thing about exceptions is that they implement both of these behaviors with a single mechanism.

For recoverable errors, you catch.

For unrecoverable ones, you don't. The exception throwing mechanism unwinds the entire stack and crashes the app with a helpful stack trace.
How do you do this if you're storing passwords to send on to another end point.

Never had to store passwords in anything but a hash. My way is just to get the user to enter it again and never store passwords.
Thanks for that, nice to know!
Has anyone had any production experience using Foreign Data Wrappers to combine the performance of different database types into one facade? IE is it actually reasonable (and something people do) to hit bigquery for a large aggregation, Neo4j for a graph query, and Redis for k/v lookup as part of a single query fronted by postgres?
Cover your ass. If you're in a position to spend a lot of money, and you hire IBM, and they mess it up, you get to say "Hey, I did my due diligence by hiring IBM".
According to this website [0] it appears to do so which is interesting.

https://www.comparitech.com/privacy-security-tools/blockedin...
Dave.com | Senior Full Stack & Front end Engineers | Los Angeles, CA | Onsite only, relocation available | Full time

Dave.com is building products banks won't to improve our customers' financial lives. We've built a mobile app that predicts your "lowest balance until payday" and offers a zero-interest paycheck advance as an alternative to paying an overdraft fee.

In the last two years, we've grown from 10,000 users to 5,000,000 and 12 employees to 100 (engineering accounts for about 50%). We're well funded, cash flow positive, and growing quickly.

We're looking for engineers to work on all parts of our stack (buzzwords include: Typescript, Node, React Native, MySQL, and Google Cloud). If you're interested, please email me directly: dick@dave.com
You think the NSA is phishing from a nsa domain?
Bunch.ai | New York, NY & Berlin (Germany) | Various roles | Full-time, ONSITE

Our team is on a mission to make sure everyone has a great manager. The amount of knowledge that exist in psychology research about leadership and teams is mind blowing, but surprisingly enough, almost none of it is used on a daily basis: in your sprints, stand-ups, one-on-ones or performance feedback.

We want to change that.

Here's our open roles:

- Not your typical Engineering job (Berlin): https://angel.co/company/bunch-hq/jobs/338205-not-your-typic...

- Visual Designer (Berlin): https://angel.co/company/bunch-hq/jobs/682927-visual-designe...

- Content Lead (NY): https://angel.co/company/bunch-hq/jobs/694774-content-lead
Hipcamp | San Francisco, CA | Onsite | https://www.hipcamp.com

Hipcamp makes it easy to list, discover, and book campgrounds and accommodations on private and public land. Whether you’re looking for a scenic spot to pitch your tent or planning a nature-filled getaway, Hipcamp is your go-to guide to getting outside. We believe that spending time in nature is essential to a happy and healthy life, and we’re deeply proud that we’re making nature more accessible, providing income to support the protection of private land, and creating community across the urban-rural divide.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/hipcamp

Here are our open roles:

- Senior Full Stack Software Engineer: https://jobs.lever.co/hipcamp/257b07a0-f84d-4afd-a535-ec763e...

- Senior Software Engineer: https://jobs.lever.co/hipcamp/257b07a0-f84d-4afd-a535-ec763e...

- Head of Engineering: https://jobs.lever.co/hipcamp/699d44e1-eece-4b85-8532-942334...

Tech Stack: Ruby on rails, React, Redux, React Native, Sass, Redis, ElasticSearch, Postgres, Heroku, Airflow, Python 3
Postgresql is awesome, but I don't see any advantage when you need to add like 40 aggregations plus joining to 10 tables.. (easy if you denormalize to elastic)
SEEKING WORK - Remote or central Québec, Canada. Seasoned full-stack dev, currently specializing in front-end React (4+ yrs) & GraphQL (2+ yrs) work.

- You're a start-up looking to build your MVP, or just to temporarily fill a skill gap in your team?

- You're a bigger company looking to build a proof-of-concept for an internal tool that your existing dev team can't / won't do?

- You have a team with a lot of juniors that needs mentoring?

If you recognize yourself in one of these, let's talk. Email me at emile.cantin@gmail.com.

LinkedIn: https://www.linkedin.com/in/emilecantin/

Github: https://github.com/emilecantin
GreatFire says it’s unblocked. https://en.greatfire.org/captcha.nsa.gov
I think Ars Technica's take on this makes the most sense. Basically the new architecture might make violating privacy easier but they could do that with the old one too and there are legitimate improvements from the new architecture that are more than enough explanation for the switch.

https://arstechnica.com/information-technology/2016/07/skype...
> Well, that's software developer-led cowboy coding for you: prioritization based on weekend impulses rather than user-driven urgency.

This makes NetBSD a good choice if you intend to have fun developing an OS, but not a very good one if you want to make a living running software on said OS.
Ask HN: Is there an app yet, to translate text into sign language?
If there is, it would encourage public institutions to put more of their content online.
Over-All Principle of Being Remote-First: Interview with Head of Brand at Over
I still have a MIPS-based IBM z50 laptop I got in the late 90's or early 2000's. It runs NetBSD (albeit an ancient version).
Here is my (unpopular? original?) opinion about software engineering: software engineering is more like writing a novel than building a bridge. Bridges are fairly well understood, and the parameters necessary to build them successfully can be approximated very closely once it’s decided what materials to use. Software will surprise you, in the sense of “no battle plan survives contact with the enemy.”

You will have bad data in prod. Users will do unexpected things. You won’t always be able to reach S3. And, this is all true even assuming the software is written perfectly to spec.

Knuth has famously said he thinks reusable code isn’t all it’s cracked up to be. It’s re-editable code that we ought to all be striving for. There are two aspects to this. First, how often do you get to write entirely new code inside a mature software project? Not often, I would wager, so why not make the job as easy on future you as possible? Second, re-editable code needs to be understood before it can be edited to extend it. This means we need to write code for humans to read, and computers, only incidentally, to execute (I think EWD might have said something to that effect).
Compliance is really the biggest source of bullshit jobs. All the paperwork you need to get certified, the manhours spent reviewing it, all for marginal benefits.
Cordial | San Diego, CA | Multiple positions, Especially SRE/DevOps/DBAs skillsets | Full-time | ONSITE

Cordial is the next-generation messaging platform built on real-time data. We empower brands to create rich personalized experiences across multiple message channels and simplify data management for marketers.

Our stack includes a lot of React, Backbone, PHP, MongoDB, Elasticsearch, Docker and Kubernetes, and we work with some of the biggest names in eCommerce.

In addition to competitive salary, healthcare, and equity we offer:

unlimited time off
parking reimbursement
gym reimbursement
phone reimbursement
computer of your choice
cold brew and Kefir Soda on tap w/ free office snacks

We're growing and hiring across our organization (https://cordial.com/careers/). In particular we're looking for Engineering in San Diego, with current top priorities including a Senior Site Reliability Engineer, and a DBA to join our team. If this sounds like a good fit for you please reach out at the job listings on cordial.com or email me directly at tech-jobs@cordial.com.
Gordian Software (YC W19) | Burlingame, CA (SF Bay Area) | Backend Engineer (Python)

What: API for airline industry

Traction: Ctrip, Priceline, Kiwi are already customers

Unique points: Bootstrapped, Profitable

We are looking for a backend engineer to join us. We value attitude (ownership & initiative) rather than a particular stack or experience.

View the position here: https://angel.co/company/gordian-software/jobs
Still some people like me think that checked exception are the damn right way to express the possible outcome of a function.
Every time I need to work with C# / python I need to play "catch" to keep track of all the possible exceptions that could be thrown at any function call...
That's copyright and trademark infringement.
Maybe. But does every teamviewer instance everywhere need to use the SAME AES key?
Dufflebag: Uncovering Secrets in Exposed EBS Volumes
Yes, it's a big difference in price. I backed Pillars of Eternity 2 via fig and IIRC the backer tiers started at $10 whereas investors started at $1000/share.

If memory serves the shares were also just shares (with a copy of the game included obviously). If you spent $1000 as a backer instead of as an investor you got a whole lot more rewards for your money.
Or maybe governments could pay them for the vaccines they order?

Alternatively, the government could hire the expertise to make vaccines.
Location: Brooklyn
Remote: Yes
Willing to relocate: no
Technologies: TypeScript, JavaScript, NodeJS, Ruby, AWS, GraphQL, Serverless, Redis, Postgres
Resume/Email: https://bit.ly/2Sl2bzA
Github: https://github.com/tsiege/

I'm a Senior Full Stack Engineer, with more emphasis in the Back End. I'm coming up on six years of real experience planning, building, deploying, and scaling production level features. Nothing makes me happier than well tested and well written code. I'm actively interviewing and focusing my efforts on a full time remote position.
Here's a website whose handling of private data is so bad that it's literally illegal in large parts of the world.
30 second websearch shows a couple such apps.
SEEKING FREELANCER | SF Bay Area | Remote

We are building a WebKit-based browser for the Apple aco-system. WebKit is the fastest and most energy-efficient browser rendering engine on macOS. There are 140M+ macOS desktops out there, and the only option for a WebKit browser is Safari. We did not want another chrome clone so we are building the first Webkit alternative browser.

Skills (5+ years of experience):

- macOS/iOS

- Swift

- C++

- Javascript

- SQLite

Novel idea, challenging problems. Join us!

Email: vprelovac@gmail.com (send CV / relevant experience / availability / rate)
Processing Tweets Using Natural Language and Create ML on iOS
The speed a witch folks will imply there is a conspiracy at every turn on HN seems to be increasing with time.
In my experience, on the web there are two different kinds of things we might be fetching.

Some things are essential to the page we are rendering, and if they are missing we should 404.

Some things are ancillary, and if they are missing we should render a stub in their place. E.g., saying that a comment is from "deleted user".

Exceptions are a good fit for the former, where we want to unify every failure. They are a poor choice for the other case, where we want to treat each failure special.

Which case a given fetch represents is a choice that should be driven by the fetcher.
It seems like we broke it -- it now refuses to do any searches for me (due to suspicious activity from 'my' ip)
I am not familiar with Team Viewer but you’re correct: any software that allows you to “save passwords for later use” is writing your password to disk/cloud — maybe reversibly encrypted but decipherable all the same, especially if the keys are held locally for offline use.

IIRC Chrome used to do this until 2013, for example, and resisted fixing it saying your OS account should protect you[1]. I suspect these days it’s encrypted to your Google Account as it’s synced, and additionally requires you to re-enter your OS password.

[1] https://news.ycombinator.com/item?id=6166793

PS. Does anyone know what Firefox does these days with their master password, especially now that they too ship a password manager? Their master password approach was similarly criticised [2].

[2] https://nakedsecurity.sophos.com/2018/03/20/nine-years-on-fi...
Based on an area information lookup, the line likely belongs to Shaw
https://www.ic.gc.ca/app/sitt/bbmap/hm.html?lang=eng
I wholly like the idea and is one that I preach and do my utter best to follow.

As context, my company is 95% remote in engineering (I'm a remote manager with some IC responsibilities). Of course, there is some of that internal pressure of making sure I am able to respond to slack in a timely manner. SO, I continually stress to take the deep work breaks and do everything I can to make sure that my team is protected from meetings or other outside requests.

Some explicit things we do as a team.
- Have 3 standing meetings, M/W/F for 30 minutes each. We are fluid with these times making sure that they work for everyone and are blocked next to other commitments. We also change the context of the "standups" to incorporate planning/retros, etc
- Thursdays are explicit "no meeting days" I fight back hard against anyone who tries to put engineers on my team in a meeting on Thursday. Unfortunately, I as a manager sometimes have no choice but to accept a meeting
- Tuesdays are recommended no meeting days
- It is ok to turn off slack/email. We all have each others phone numbers and will text if it is something actually urgent, which it almost never is.
- Our team is measured by how much we hit our deadlines, which we have input into how those deadlines are set

This is one of the best and most productive work environments I have ever been in -- it would be extremely difficult for me to move back to any office, especially an open one where productivity is proxied by seat time.
Oh, I'm aware. Thanks though. ;-)
Give It Five Minutes
The state of the art in distributed programming is Erlang, which uses functional programming to enable levels of scalability very difficult to achieve with any other development stack.

This also applies specifically to the problem of lacking "infallible" infrastructure. Because of the largely stateless nature of an Erlang process, they can be killed, migrated to other machines, and quickly scaled up and down to meet changing demands.
From the article: "A recent study compared models as old as 1970 with observations made in the decades since. Some models warmed up too much, and some too little, but 14 of 17 past projections turned out to be consistent with the measured path of global average temperatures."

So we actually did an experimental test of the predictions made in 1970, and those predictions turned out to be largely correct.

We should probably halt this experiment on ethical grounds.
Yeah, that was what got me. (But at the same time, I don't think there's a trivial way for teamviewer to securely store that per-install key. "Trivial" meaning "can be implemented with no dev time and work on all versions of Windows")
SEEKING WORK | Remote (based in Tel Aviv) I'm the owner of a boutique Data Engineering shop called Hipposys (www.hipposys.com). We specialize in Python-based data engineering projects, and bring more than 15 years of professional experience in software engineering. Today, our core specialties are: -- Big Data - PySpark, Hadoop and the surrounding ecosystem.
-- Data Pipelines / ETLs / Data Warehousing - utilizing Airflow and working with a variety of SQL databases.

-- AWS/Cloud - Many years of using various AWS services.

We've worked with companies around the world, in education, healthcare, cyber security, factory automation, video processing, etc.

We have dozens of years of experience in a lot of different fields, including a specialization in web applications for many years which comes in handy fairly often in otherwise data-centric projects.

If you have any data engineering needs, please reach out to me at edan@hipposys.com, and we can see if we are a good fit!
Doesn't really make a difference, hg offers similar facilities (formerly the record extension, now hg commit -i). There's no index, but it's essentially the same as git commit -p.
SEEKING WORK
Location: Eindhoven, the Netherlands

Remote is possible.

Full stack development, front end development, data science, data visualization

My focus is on developing web services and complex interactive data visualizations.

Website: https://dialectic.design

Contact: contact@dialectic.design
SEEKING WORK

Location: Las Vegas, NV

Remote: Yes

Technologies: Microsoft C#, .NET, ASP.NET, SQL Server, WPF, Azure, Xamarin

Linked-In: https://www.linkedin.com/in/joemayo/

GitHub: https://github.com/JoeMayo
See which companies target you as a customer specifically via Twitter
> * I'll make that bet every year, and I will come out ahead...*

Good luck with that, but you first asked about one year (next year), which is a different matter altogether.

> (edit: do you actually not understand the basics of statistical inference? this is like, middle-level high school math.

I completely understand your point and how you are trying to move the goalpost from an easily refutable argument to something more useful. Perhaps your "professional poker player" mind doesn't understand that recent increases/decreases in temperature averages affect next year's weather, whereas past poker games don't affect your current one.
Putting aside the "functional" bit, for a language to allow user-defined (i.e. not hardcoded into the language itself (which may not necessarily be a bad thing, but that's beside the point here)) optional types, you'd want the ability to say "this variable is either _this_ XOR _this_" (a.k.a. tagged unions/sum types/what Rust calls "enums"), and then in a statically-typed language you'd additionally want generics.
Man creates traffic jam outside Google offices using mobile phones
There are also efforts at ETH to verify Rust using SMT solvers using methods similar to VCC and Dafny, see https://www.pm.inf.ethz.ch/research/prusti.html

Adding verification once you have code is generally more difficult, though in case of VCC it was helpful to have a large example code base to make sure the tool would cover the major patterns, especially relating to concurrency primitives.
Thank you, this makes your intention clearer.

You should know that it is very common to advocate subsetting C++, mostly by people who prefer not to learn anything new. These efforts are always based on the fundamental mistake that old, familiar features are implicitly better than new features, so new features should be treated with especial suspicion. But new features obsolete old ones specifically because we know more today how to write fast and reliable software.

So, if you consider subsetting the language, look at the totality of features, and favor new features over old. C++ inherits a great many design flaws from C, and constructs that depend on those flaws should be the first to go. Constructors, destructors, in-class member initializers, and exceptions are a huge win for reliable code. They have no effect on compile time, vs. dodgy C-like ways to achieve the same ends.

Many of the newest features, particularly those connected to constexpr and concepts, replace dodgy template metaprogramming constructs that are very slow to compile.
Squash: On demand and one-click development environments
Not sure I can explain more simply, just think multi part wizard interfaces or forms with button that open up sub-forms.

I think you get it since you talk about time stamps. Just as you could record all mouse movements and keyboards to get higher fidelity you could break a single record into multiple with times stamps to record each step in a form, then the lack of record would be distinct from a record with all nulls along with time stamps. You could also do a record per field (which I have seen more than once) with metadata per field as other columns.

But without all that a system that supports null and some empty value gives you more fidelity than just null that again in my experience is practical.

Empty string and null work fine with strings for this purpose but for other datatypes you start needing to pick special values like the minimum value for a 32 bit int or 0 date etc.
Is it time for a front-end framework?
The new research cited in the title is the author’s book: https://www.amazon.co.uk/Luck-Business-Idea-Ideas-Management...

The article discusses older research
Udacity | Mountain View, San Francisco, Shanghai, Cairo, New Delhi, REMOTE possible | https://www.udacity.com

Udacity’s mission is to power careers through tech education. We're an immersive online learning platform offering hands-on training in fields such as artificial intelligence, machine learning, data science, autonomous systems, cloud computing, and more. We are backed by some of the best-known investors in the business — Andreessen Horowitz, Charles River Ventures, Bertelsmann and Drive Capital just to name a few.

Focused on self-empowerment through learning, Udacity has the potential to transform the world by providing life-long learners with the chance to skill up in cutting-edge technology and create a meaningful impact in their professional and personal lives. Similarly, we’re helping enterprise companies solve their tech talent shortage issues by being their partner of choice when transforming their workforce.

Tech: Docker/PostgreSQL with Golang, TypeScript, React, Python, Node.js, or Ruby depending on team. Run your preferred OS.

Open positions in Engineering, Infrastructure/DevOps, Content, Data, Design, Marketing, Support, and Sales: https://grnh.se/cuagoq2
Buena suerte bro
make people's lives better

But arguably also making people’s lives worse. Applied mathematicians and physicists have contributed to the development of weapons of war since the time of Archimedes. As a committed and outspoken pacifist, Hardy wanted no part in warfare. This informed a good part of his philosophy, along with aesthetics.

I would hardly call that navel gazing.