skysight-inc/HackerNews huggingface dataset:
The Venn diagram of vulnerability researchers and product developers has only a sliver of overlap. Most researchers are not professional developers.

No vulnerability that anyone knows about has ever been attributed to product sabotage.

If there exists an incentive to sabotage products on behalf of governments or organized crime, that incentive exists with or without formal vulnerability markets.

Markets allow vendors to participate and discover vulnerabilities. They are in that sense a uniquely bad setting for internal saboteurs to sell access to code; there is a non-negligible chance that the organization who ends up with your work will be able to "git blame" you.

I'm not a supporter of vulnerability markets, but this strikes me as a particularly dumb argument against them.
IE10 to send "Do Not Track" DNT header by default
Looking at this again 3 days later, it seems the license has been changed again. The license is now the "Creative Commons Attribution-NonCommercial 3.0 license.", and they're charging for commercial use.
Mountain View, CA - FT + Internships, Product for Mobile + Social @ Travelzoo

Help 25 million subscribers push boundaries on local commerce, deal publishing and media via mobile and new social tools. We're looking for smart, forward-looking entrepreneurs who have a passion for local, traveling and scratching their own itch.

We're a small team (group of folks who previously built/sold companies) where everyone gets their hands dirty in guiding product, solving big problems at scale and makes an impact each quarter for our shareholders (Travelzoo is public on the NASDAQ).

What we offer:

* Top salary
* Great perks, like the Travelzoo Experience (eat your own dogfood on any of our deals published throughout the world!)
* Medical, Dental, Vision
* Excellent career advancement opportunities

If you're interested, drop me a line (dambrose at travelzoo dot com) or apply on our Careers page: http://www.travelzoo.com/jobs/
The 45 minutes aspect is misleading. They haven't been using the room to test that, its just that no-one has spent longer than that so far.
Boulder, Colorado - Full-time Rails, iOS, Android development at Gloo.

Gloo is an exciting platform which changes the way people enrich and strengthen their most important relationships, and allows champions of strong relationships, families, and marriages to deliver their ideas and content to those seeking them.

Looking for skilled developers with an interest in developing an early-stage product. Rails, iOS, or Android experience a large plus. Fun, experienced, small team, both on the business and dev sides, and plenty of opportunities to contribute to open-source and try out cutting-edge technology. We're very modern: iOS 5 app (blocks + GCD! View Controller containment!), IE6-free web frontend using HAML and SASS, Rails 3 + Postgres 9 backend.

Well-funded. Competitive salary, design your own workstation / development setup, fun but heads-down startup environment. Nice office in downtown Boulder (West End of Pearl Street).

Interested? jobs at tangogroup dot com.
Why is that technology hasn't decreased the amount of hours we've worked in a week then?
2nd graders use clothespins to announce learning readiness
Amazing lecture. This is the first time I've heard of anyone solving the problem of avoiding getting stuck at the local maximum.
Salt Lake City, Utah, Full Time Software Engineers at Space Monkey (http://spacemonkey.com)

Space Monkey is changing how the world stores data, forever. Winner of the 2012 Launch Festival (http://techcrunch.com/2012/03/08/space-monkey-launch/)

Some of the deep tech we're working on: immensely distributed systems, p2p (DHTs, NAT traversal, fairness mechanics, etc), distributed filesystems (and local interfaces to them via FUSE et al), hardcore crypto, mobile, web, and much more. We use a lot of python, but also C/C++ and Go.

If you think you might fit in on a team of super bright, hyper-productive folks, please drop us a line at our jobs@ email address.
Wrap in another function.

ETA: I'm amused by how easily the LISP philosophy applies here: any problem can be solved with enough lambdas.
You can hardly blame ColinWright; although his tweak is truly marvelous, it is one which this textfield is too narrow to contain.
It was very fast, and the built-in assembler and easy integration of your code from BASIC, e.g. [.mol% mov r0, #42:mov pc, r14]:PRINT USR mol%, meant there were easy options when it wasn't quite fast enough.

But then you've got to remember that Sophie Wilson wrote the 16KiB 6502 BASIC interpreter for the BBC micro, and the BASIC for the Z80 second processor IIRC, and then brought that experience to bear when designing the ARM instruction set. Having done so, she then wrote BBC BASIC V in ARM; hardly surprising if it knew every little nuance and could wring speed out of it.

In later years, the BBC BASIC code, 6502 and ARM, were good stress tests for emulators because of her wide use of the instruction sets.
A better solution would be to have a way to indicate "this parameter needs to be this type".

params[:id] could be a string, integer, hash, or array when accessed in the controller actions.
MBA startups at Stanford reach all-time high
Cumulonimbus is a whack name yo
Facebook Outage: Wake Up Call For Websites
Does that really change anything, though?

In one case the great new idea is a new product, in the other case the great new idea is how to be better than the competition.
I suspect Peter Thiel would likely say something along the lines of pursue the thing you know you're right about and which everyone else insists you're wrong...

Which boils down to either extreme failure or extreme success and little in-between...
"Your approach sounds like you should have stored procs instead."
Not necessarily. As one moves towards stored procs, it becomes more common to place business logic in said stored procs. This tends to go against MVC and also limits some scaling options (as your business logic then is executing in your DB). They also often will tie you to a singular DB...making moving DBs more painful.

"Using prepared statements or variable binding to fight SQL injections is not the best idea, although its widespread."
I read it not as _the_ best idea, but as yet another layer to potentially catch something. Belt _and_ suspenders if you will.

Don't get me wrong. I'm not saying prepared statements are the greatest thing since sliced bread; however, in oracle or postgresql backed apps, they're a best practice to investigate.
I've had it recommend two things that aren't streaming so far, so it definitely isn't accurate.
Show HN: movies.io — torrent search like it should be
If the software would let me, I would spend all my karma points to upvote this post.

I recently (yesterday) suffered the loss of a loved one, and reading Feynman's letter to his late wife is one of the few things giving me comfort right now.
That's a strawman in that 9/11 isn't the only terrorist attack to happen in the 21st century.
You really need some sort of privacy policy (or at least some way to contact you) if you are really want people to get personal on your site.

If you're interested I've written some basics on creating a policy on my blog here: http://jnorthrop.me/2012/04/3/getting-your-privacy-policy-gr....

I hope the link helps, and feel free to ask any questions (my email is in my profile).
This seems like a measurement you have to be careful with. It's measuring completed products shipped only, as far as I can tell. So the fact that Apple is selling hot products which can't stay on shelves (alternative: selling products with such high value that customers demand doesn't drop when they have to order them) counts as "good supply chain management" when it's really a reflection of the desirability.

If Apple was, say, sitting on a warehouse of unsold A5's, it wouldn't count against them. And if their battery supplier goofed and they ended up with a million incomplete iPads, they'd still be "selling" all the inventory they had.
Obnam, a snapshotting, de-duplicating, encrypting backup program
At least it sounds like the interviewer was just focusing on the next question and not putting you down for using Python.
They're also state-funded media outlets.

RT by Putin's political structure, Al Jazeera by the Qatari Monarchy.
I'm very impressed with Apple's ability to turn over inventory, it seems to be an extremely well oiled machine.

But... I have to wonder if these optimizations work against Apple if there is a sudden significant downturn in demand. Since Apple pumps so much money into the supply chain to keep it consistently rolling at a high level, would it hemorrhage cash at epic proportions if a significant drop in demand occurred?

If I draw a parallel to the 80's video game crash, the big players were the ones that seemed to take the biggest hit while the significantly smaller players did not have to shift their operations so drastically to survive. They were able to sustain themselves on crumbs. Right now we're seeing largish companies like Palm and Rim try to live off of crumbs and it's not going too well.
SEEKING WORK - Remote, freelance (NYC)

Expert Ruby on Rails
Expert JavaScript (Backbone.JS, jQuery, Ember.JS, ExtJS and others)

Mobile: Sencha Touch, iOS

Extensive portfolio and references available

victor@innergysoftware.com
I'm sick and tired hearing about these settlements. Wasn't that land captured after Israel's neighbors attempted to destroy it? Isn't Israel respectful to the 20% of it's population who are Arab? Hasn't Israel attempted to give a lot of that land back to the Palestinians:

The Clinton Parameters proposed a Palestinians state comprising between 94-96% of the West Bank and the entire Gaza Strip, with Israel annexing the remaining land, which would include almost all Israeli settlements, containing 80% of the settler population.

http://en.wikipedia.org/wiki/The_Clinton_Parameters

Things could be a lot better for Palestinians today, but a remarkable olive branch was shredded up by Yasser Arafat. The "International Community" continues his legacy by vilifying Israel every single day.
> unhealthy manner

Evidence required.
> a nice checklist of things that will cause the function to fail

Should these be assert()s? ;)
Quick bit of design feedback, in general I love the cute quirky illustrated nature of the site. However examples like the "?" for the upcoming socks just don't work. The thinness of the line just make it seem amateurish. When doing this kind of style make sure you use a thick enough line so it feels like a cartoon.
You'd be surprised how many brilliant hackers are working in department stores for very low wages, just doing tech support or some other job.
Excellent idea, needs more info. Pictures, at the least!
I know there is a lot of literature, which I'm unfortunately less familiar with than I'd like to be.

Here is the specific problem that I am interested in.

Suppose we have a multi-armed bandit where the probability of reward are different on every pull. The distribution of rewards are not known. It is known that there is one arm which, on every pull, has a minimum percentage chance by which it is more likely to produce a reward if pulled than any other arm. Which arm this is is unknown, as is the minimum percentage.

In other words payoff percentages change quickly, but the winner is always a winner, and your job is to find it. I have an algorithm that succeeds with only logarithmic regret. I have no idea whether anyone else has come up with the same idea, and there is so much literature (much of which I presume is locked up behind paywalls) that I cannot easily verify whether anyone else has looked at this variant.
Leaving CodePlayers
I won't disagree, but my main point is that everything has a cost. These blog posts often present what your business "needs" to do in a context-free manner.

If you are sitting on your thumbs looking for something to do, then definitely add a dashboard. If you're like me and have a backlog a mile long, maybe a dashboard isn't the best way to spend your time.
The point is that with bandit models, you're placing people in a cohort as a function of the previous conversion rate of your cohorts. That's the dependence.

By contrast, randomly allocating X% of your population to cohort C_i is not a dependence on anything but the free parameter (X).
Nutrivise - Mountain View - (full time, intern, frontend)

We're turning the problems of nutrition, health, and weight-control on their head by inverting the current standard for how software helps people decide what to eat. Current market solutions are broken and tedious and we're building a way for people to be healthy and achieve their goals without preventing people from living their normal
day-to-day lives.

We are an engineering driven company of 5 who are very product driven and love building things that solve peoples' problems. Our stack is Python (Flask) and MongoDB on the backend and we use a modern combination of HTML, CSS, and JavaScript on the frontend. People who have portfolios, interesting projects, or funny little hacks will be noticed the most.

Contact us via chris at nutrivise.com!
ya.. that sounds like a great idea. I'll start checking out stuff on Craigslist.
I want this except with paying to get an actual license.
How do you plan on staying online?
I stopped reading when he recommended if-goto.
Good question but here is my take. Even though technology has not reduced the amount of hours we work in a week (average 40 in the US), it has reduced the elapsed time to finish a certain trivial task. For example, wall street traders still work the same hours per week but they can execute hundreds and thousands of transactions per day with technology. Imagine when trading used to happen without computers.
Isn't it though? Glad I could help.
Anywhere, anywhere.
Fused.com is seeking sysadmins with a hint of dev. (Devops?)

fused.com/careers.php
Equity available, bootstrapped, no desire to exit anytime soon. ~40 hours or less of work per week. Prefer to keep things operating top-notch so you can have hobbies instead of fighting fires? You may fit in well :)
Facebook biggest asset and problem: users
DATA SCIENTIST for hire.

Seeking Consulting Clients. NYC, sometimes SF (and remote ok)

I consult on machine learning (ML), natural language processing (NLP), and predictive analytics, and I have over a decade of expertise on these topics.

I create value by helping organizations transform data into actionable information.

Email address in HN profile.
Well then maybe they should. Vendors are complaining that they aren't getting disclosures for free anymore. maybe they need to start being the highest bidder, so that exploit hunters get paid.
> Rather, I think most people think that "cold war" means heightened political/military tension without overt attacks.

You underestimate 'the populace'. I think most people suspect the 'Cold War' included everything up to outright war. What do you think all the CIA's Memorial Wall [1] signifies anyway? I imagine the Kremlin has something similar.

1. https://en.wikipedia.org/wiki/CIA_Memorial_Wall
Google China Isn't Just Censored, It's Totally Broken
There is something to be said for hard things looking hard. Personally, I'd rather that code be in Haskell than Java, because there are plenty of people with room-temperature IQs who think they can code in Java but would get beaten up and have their lunch money taken by something like Haskell.

I've heard about some really interesting Smalltalk systems, super high-reliability stuff. I'm sure SmallTalk helped some, but what I suspect helped more is that the kind of people who were off-the-beaten-path enough to have years of SmallTalk experience were well above average.
I wish you could adjust for crappy movies also. Sometimes you want to see that universal flop.
Spend this afternoon figuring out GLOBAL and setting up to work with your editor.

http://www.gnu.org/software/global/
Basho is hiring! Many (>20) positions, many locations:

http://bashojobs.theresumator.com/
I'm pretty sure that fluctuations in demand are precisely what Apple is geared for. They discovered that unsold inventory, stuff sitting on the shelves, is what ends up weighing down companies.
I think they are confusing the terms here. What they mean is that the worm itself is 20 mb in size where as average is about 1 mb. So The worm's code is 20x. They probably don't know that worm's size and it's source code are two different things. They are NYT not a tech blog, so i guess this is excusable.
I've always wondered why all torrent sites look like ass. Nice job with this.
Infusing Play into Mundane Tasks
I sure as hell ain't downloading any movies from mystery trackers.
This is something I don't agree with Peter Thiel on - at least for your first startup.

Elon Musk couldn't have started SpaceX and Tesla right out of school, he had to build up skill, credentials, and connections first.

For your first startup, make something awesome but try to fly people to Mars. A small acquisition or a business with nice revenue might be the better goal.
> Nearly 9 out of 10 downloads of the new version of OpenOffice have been for Windows machines, rather than Linux, according to recently released statistics from Apache.

I'm fairly certain that Linux users install the majority of their software from package repositories rather than downloading and installing from websites.
Nice comic, but, to be fair, the headline cost of Google's Motorola acquisition is misleading. Between Motorola's cash-on-hand and "tax assets" (losses Google can deduct, IIRC) Google should be able to shave several billion off of the headline price (I've seen varying estimates of exactly how much, but it is substantial).

The effective cost of the acquisition is still a lot of money, just not quite as much as most people think.
Google Adds A/B Testing to Google Analytics
I was debating whether to use Office 365 or another Microsoft variant for awhile now, but this update is really snappy. Debate is over.
I believe it.

Back in 2005, I ordered my sister an iPod on apple.com, complete with custom etched message on the back on Monday afternoon. It was shipped from China and arrived in New York on Thursday, not even 70 hours later.

It seems like Apple has figured out what things are really worth spending money on and invested heavily in those those things. Almost as if they had applied the Taguchi method to the enterprise.

Certainly, the speed with which materials and products move through a company is a thing worth optimizing.
We scale up to capacity.
Parse https://parse.com/jobs
But the obfuscation much be done immediately before deployment. obfuscating while writing code does not make much sense.
Look again: there are only magnet links on there.

Trust the DHT :)
>>>I have a minor case of tinnitus which is typically inaudible, but in that space it was like an alarm clock screaming into one ear.

Ah, I was wondering about that. (Now scrolls up to delete question asked elsewhere.)
Liberated Pixel Cup art contest launches
How much would you pay? You'd need to pay close to $3-400 a year to get a weird gadget or a piece of art. Plus shipping. It's a non-starter for most people, unless you make it exclusively for the rich.
Inspirational Quotes from Stanford's Managing Growing Enterprises course
I remember Evan Koslow talking about[1] this back in 2010 at the University of Waterloo. Really thought provoking stuff.

[1]: http://www.youtube.com/watch?v=9RYXqCtsZsc&feature=playe...
"Tend to fail silently" is different from "could fail silently at some point, though it is unlikely." You are correct that RAID controllers shouldn't be the former; however, there is absolutely no way to prevent RAID controllers from being the latter.
Surely stock piling is happening somewhere to cope with Christmas?
We really want, too. We'll try to make it happen. In the meantime, don't dl movies you don't own.

Oh, and the watchlist functionality is pretty cool too.
I love peeking deeper into the hearts and minds of superhuman people and discovering just how human they really are.
I used to work at an Apple retail store, and I'm pretty sure we didn't have turnover every 5 days. Of course this is an average, and I'm not exactly sure what it's measuring, and regardless we definitely got a lot of stuff shipped every day.

From what I hear of my wife's job, though, it sounds like Trader Joe's turns over its inventory every 1-2 days.
Warning to those at work, there's at least one NSFW image in rotation on the landing page.
Welcome to politics. Syria, currently best known for massacring their own citizens, chaired the UN human rights council a few years ago.

International politics is always going to consist of covert actions on one hand coupled with righteous moral statements on the other. See, for example, the USSR talking about protecting the eastern bloc from western imperialist exploitation by, well, dominating and exploiting their countries.

Meanwhile, I'm sure we'll hear from Republicans that this is a case of Obama's flawed moral leadership, in between insisting that we bomb Iran immediately.

At the end of the day, it's about results. The people who released stuxnet presumably think it makes a war less likely by postponing a confrontation with a nuclear Iran. They might be wrong but they were doing what they thought would lead to the best outcome.
- Not based in the US: check

- Not hosting any infringing content: check

- DMCA-compliant: check

- Not selling anything: check

- Not doing ads, not tracking you [1]: check

- Not trying to sell your data elsewhere: check

Lawyers will handle the rest. We're not interested in piracy, just very very good UI/UX. Stay tuned.

[1] We use Gaug.es and Piwik with IP fuzzing. They provide enough high-level metrics so that we can improve the interface while letting you guys off the hook.
Educreations (http://www.educreations.com) - Full Time or Intern in Palo Alto, CA

Want to help solve an important problem? We are looking for extraordinary people who want to make a difference solving immensely challenging problems for an industry in need of innovative solutions. If you’ve ever wanted to use your technical skills and other talents as a force for good, here’s your chance.

We’ve made it extremely easy to teach online. We think that it should take someone five minutes to create a five minute lesson, and it is a principle that has guided us along the way. Teachers and students love what we have built and use our app and website every day. We were part of the first cohort of Imagine K12 and are looking to grow the team rapidly.

We are looking to make our first hires. If you want to change the world and are a strong Python hacker, have experience with Objective C or are an awesome designer, we want to talk to you.

http://www.educreations.com/careers/#jobs or email jobs@educreations.com

We are looking for:

Full-stack Engineer (Python)
Lead Mobile Engineer (Objective C/Cocoa)
Lead Visual Designer
Technical Interns
These seem to be make-work for lawyers in the making, which IMO supports the idea that too much regulation stifles innovation...

That said, what keeps me from turning libertarian is that most of these regulations were extremely well-intended and addressed genuine societal issues. I just wish there were a middle ground here and there doesn't seem to be one.