skysight-inc/HackerNews huggingface dataset:
Yes, absolutely. When I worked as an employee, I would have a growing stack of all the things my co-workers printed (why do they print so much shit?) and I would write on the backs to try to get some use out of their paper. That is just for incidental notes, though. Any note that is just for remembering over the next few minutes to an hour goes on whatever scrap of paper I can find. But much longer-lived notes go into one of my growing stacks of notebooks. I use unlined art pads with ring binder sides for even technical notes. I scribble sketches and ideas at random in them, and mix in more serious drawings. They become a sort of journal for me, as I hate writing classical journal style. I keep them, then look back through the old ones every once in a while. It is a good review of how far I've come and also helps me recapture good ideas I had and dropped because either I wasn't ready or I got distracted by something else.
Evernote just got hacked. Big time.
>A 'way of understanding the world' is a conditioning, a particular mode of thinking. Usually >they require training. An "objective" observer watching a tribal ritual will find the whole >ordeal it as meaningless as an "objective" observer who is watching scientists operating a lab. >To understand this is scary for a "man of science/math" and it drove me to tears when it hit me >from the sky.

They might find both situations to be equally meaningless, however one gives people the power to understand the natural world; the other does not. The great progresses our world has seen have largely been done by folk engaging in scientific processes - not tribal rituals. Watson & Crick discovered the shape of DNA in a lab, not around a fire.
on arstechnica.com.

it's highest everywhere else.
"Most of us are indie programmers"

I would think most career programmers work for corporate entities, but neither I nor the author have any statistical evidence presented.
You do realize that CRUD hasn't even really been solved yet, right?
"One-way encryption" is a peculiar choice of phrase.
Interdisciplinary projects have a lot of potential to be challenging and rewarding. Bioinformatics, Computational Neuroscience, etc. - these are your phd jobs. Another cross disciplinary project is entrepreneurship (you have to do everything - marketing, finance, product development, etc.) and this doesn't require a phd.
So the content within the accounts was safe then?
Volcanic aerosols, not pollutants, tamped down recent Earth warming
The Rise of the Rolling Release
How to Live 30% Longer -- Maybe More
That's why I don't use any fancy services for my notes, which usually contains sensitive data. I simply use Notational Velocity which encrypts my notes and stores it locally. It does provide a synchronization option with SimpleNote but they can't even be bothered with using SSL.
Not exactly true (unless you have some inside information). Opera announced they are replacing their rendering engine with WebKit. There's been no announcement that they are dumping the entire browser (which is a lot more than just the rendering engine) to release a custom Chromium build.
I'm with you. I really like solving problems or finding a good algorithm to solve the problem. What I can say for you is try to find a company with lots of R&D going. I think there are many companies out there, especially startups that are having some R&D to improve their product and beat their competition. I think startups like Prismatic (http://getprismatic.com) and Diffbot (http://www.diffbot.com) have a heavy NLP and machine learning research going in the background to improve their product. I'm interested in joining those companies I mentioned and contribute to their reaserch and development.

I think game companies also have an R&D to improve their AI, path finding, rendering algorithms, etc.

That's it. Just find an R&D job.
Life is a balance. It's important to disengage from the keyboard once in a while and use our hands to create. I agree that it is important to expand one's horizon with an array of skills, rather than having a single focus.
Apple, Microsoft, Yahoo (at least non-US), etc. ...

I'm not sure if there are any bookmark services that actually support this, though it'd be a decent selling point.

It was a big deal, when Google finally assed themselves to implement it for Gmail, but companies have been embarrassingly slow in following their example. Especially when they provide e-mail services.

Twitter hired TFA specialists a few months back, but they are taking their sweet time about implementing the system. I've wondered for a long time why social networks aren't on top of implementing this.

It's the SSL discussion all over again.
Besides possible interpretation issues (with the text of TFA), what is so great about something like that? The whole idea of the web is: the client decides how it renders the data. If we targeted a remote hosted bit mapped graphics terminal with a VNC like sharing protocol then the web would have never taken off. But of course, the last line of defense in undoing the web is to host VMs running your application and just sending over the bitmaps.

In the end this may be inevitable but I'll stick to HTTP as long as it is feasible. These 'improvements' are a step back. More bandwidth to mobile would be an improvement, as would be a mobile infrastructure without silly caps (you know, like we had 5 years ago).
1: the "99%" you're looking at are jobs on a specific niche that uses technology to bounce information from one place to another and display them, mostly known as IT jobs.

2: Hard problems are everywhere. Literally. Even in those "99%" jobs you mentioned -- "doing" such software may not be full of mysteries, but make it evolve without break and respond to constraints are examples of real hard challenges. It's a matter of seeing them and putting it on perspective.

3: there are many ways of framing a problem, making it hard or easier. The harder you frame it, the more instruments you will be required to have to tackle it. Those may involve research skills and fluency in an array of fields that would help understand the phenomena. It mostly depend on where in the spectrum of the problem you want to work, and that's up to you to figure it out.

4: advice to avoid a career working on crud apps: interview the interviewer and find out if the problems of the hiring company are the ones that you value.

5: questions like "where to work on hard/fun stuff" are very hard to give satisfying answers. I suggest you take the time to survey problems you are interested, try talking to people working on them...many problems are tackled by teams, often with people with different background and specialties dealing with different aspects of the problem.
This isn't an answer, and in fact, supports the opposite of your point :)

It would have been just as easy to use micro-usb 3.0, which had plenty of bandwidth, and do the exact same pin or format conversions.

Standardized serial buses that are less complicated already existed. What exactly do you think USB 3.0 is?

If the only reason for lighting was "a general purpose next generation serial format", then it is definitely a horrible idea.

Of course, none of this (except DRM concerns) answers why they'd not bitstream the format and convert it to HDMI signaling instead of doing the weird crap they did here.
It's easier to understand by lay persons than hashing.
This article just reminds how overly-politically-correct our society has become.

Complimenting a dress is now sexual harassment?
Repealing the MTA would not lower the bar "to parity with a photo sharing app". There are still a whole host of federal regulations that you have to comply with.
It goes to efficient write-only memory.

Or the author is not qualified to do security, or thinks readers are ignorant.
Defense sector is full of hard problems. A PhD helps, but even with a BS you can be working on very challenging things. When I worked at a defense startup we were designing protocols, writing VHDL and drivers for logic implemented in FPGA's, doing formal analysis of algorithms, doing data visualization, etc. Different people were doing different things, obviously, but even the junior folks were tackling problems that required reaching into their CS toolbox.

Its not an industry that has a great reputation, but what it does have is phenomenal engineers working on complex multidisciplinary problems.
And another example of how badly Wordpress scales.
Meh, it's a PR person who probably had it explained 10 minutes before. They explicitly state that they are hashed and salted, so I'm not super concerned.
I have a lot of respect for the Evernote team. They've done a great job of improving the product over the last couple of years but it's puzzling that they've recently rolled out a version of Evernote targeted at business without addressing 2fa. It's a very serious gap in their offering.
Biggest disappointment of my teenage years: no induction into a secret cadre of American ninjas to go along with my black belt to help our master avenge his murdered wife.

I blame it on our instructor not having a murdered wife. Just a wife few would miss if she were.
Why don't they require plaintiffs in a patent suits to be actively using the patent in some sort of meaningful way in order to be allowed to file a suit? If they are just holding a patent and do nothing with it they shouldn't be allowed to sue or the patent should expire early.
I happen to enjoy easy jobs. It allows me to use all of my mental energy toward my own startup :-)
Polaroid and C&A signed a non-binding MoU agreement with Socialmatic
I see. Well quite some work went into upgrading the globe.js to Three.js rev 56 (API changes and debugging related errors) and the integration stuff (creating the geo data) under the hood. Plus using particles instead of the cubes (which was rather easy). So although it still has definitely a lot from your version (globe and three.js) it's definitely not just a cheap and quick copy for ripping off credits ;) That's why I appreciated the comment. Consider a big part of the credit as yours :)

Just a side-node: the API docs were the biggest obstacle in the whole process. W.r.t to platform usage I think this would be one of the top prio things to get even more people using Three.js.
If you want the actual facts, follow the link in the second paragraph. You'll find over 200 pages worth of facts.
Possibly big Evernote hack, Evernote resets all passwords in response
Why Microsoft Is Pushing a Touch-Based Web of Tomorrow
In principle, circumventing DRM does indeed violate copyright law (or rather the German version thereof).

However, there's also the right to make private copies, and I'm not aware of any relevant case law.

Keep in mind that this is civil law, and "Wo kein Kläger, da kein Richter" ("No plaintiff, no judge").
No, it is an accurate choice of phase. The passwords are "hashed" which is literally one-way encryption, since the encryption is lossy - the information to reverse it literally doesn't exist in the output.

The only way to "break" correctly working hashes is to encrypt tons of passwords (+salt) and see if the lossy output is identical to the output you got from the previously hashed password.

Which is a very time consuming and computably expensive process (in particular when using something newer/better than MD5/3DES).
Ask HN: What should companies do if they are hacked?
Out of curiosity, I thought I'd quiz a HN on how you think companies should handle these situations that keep occurring?

Please comment below! =)
So, I can't find your email. I checked your profile and your blog. I can follow you on twitter or whatever you like, but your advice would be extremely valuable.
Google Chrome does bookmark sync using user-provided passphrase, so I'd consider that bookmark service with client side crypto and 2fa.

Crappy consumer services not supporting 2fa is somewhat understandable. No one uses Apple or Yahoo web services for business. People do seem to use Evernote in business contexts. Google Apps for your Domain is a fairly legitimate business option, as is Google Docs.
Sure, but there have to be better ways of extracting labor from a conquered population than enslaving them and working them to death.
How is it an oxymoron?
The "tradeoff" seems to be "make the server into a
dumb store for encrypted data." At which point, you
don't have Evernote (an API for fuzzy-matching
clippings punted into it from various devices),
you have Evernote (a set of fat client programs)
plus a POSS (Plain Old Storage Service, like S3.)
In fact, the workflow sounds like it would have more
in common with editing a Word document over SMB than
with making web requests.

Not at all. Fuzzy-matching can be done client side just as well as server-side. The constraints are a bit different, but not too much (E.g. on the server-side: Make it scale --> conserve CPU, on the (mobile) client-side: Make it fast --> conserve CPU)

Otherwise, yeah most Web Apps are nothing more than editing stuff over the network and visualizing it differently.

The #1 competitor or a SaaS isn't some other SaaS but rather Word/Excel: http://www.startupcfo.ca/2011/05/the-1-competitor-for-saas-v...

Edit: Also there's no reason to believe the client-side store wouldn't be encrypted. That'd be exceedingly stupid.
supposed to be ironic right?
Get a PhD, or get a high paying job and do interesting stuff of weekends, or do your "self-directed" work as a pauper with option to do a startup or open source project that gets you a job later.
People are going to argue with you semantically, but you'll all generally be in agreement (except 3DES is a block cipher, not a hash function).
Hong Kong baby formula law enters into force.

The regulations stop people from taking more than 1.8 kilograms of formula across the border, in a bid to crack down on the so-called "parallel traders" who sell the milk powder at a profit in China. A Customs and Excise Department statement says offenders will face a fine of up to $65,000 and a maximum two-year prison sentence.
I second this. In computational biology we work on hard problems with real outcomes which potentially change or save lives. Some of the problems are probing at the fundamental mechanisms of life. We need more programmers who aren't afraid of hard problems.
That doesn't really tell us anything because Windows users have much more choice as to where their gaming money goes compared to Linux users and Mac users. Same goes with the overrepresentation.
Someone should write a boilerplate "we've been hacked" blog post with parameters for the kind of hashing and factors of authentication used, and what they know - or don't know - was compromised.

I can't blame companies for not having one such on hand to begin with, but I'm sure they'd appreciate that someone with the unfortunate experience crafted a draft for them in stressful times like these.
> Please create a new password by signing into your account on evernote.com(https://www.evernote.com/Login.action).

and

> Never click on ‘reset password’ requests in emails

Is sure to confuse a lot of people.
I was wondering the same!
The Sockpuppets Of Twitter
I work in this industry, and have spent a number of years in R&D. In my experience, the vast majority of software R&D projects are not weapons/military related, and include things such as cyber security, healthcare, big data, cloud computing, etc. A lot of it is aimed at developing innovative approaches to reduce costs in various government/military processes both through automation and doing things more smartly and efficiently.
Get a job at a big web company that has distributed systems.

But one day you will learn that even "exciting/Challenging" work is 99% perspiration.
Even though this information was accessed, the passwords stored by Evernote are protected by one-way encryption. (In technical terms, they are hashed and salted.(http://en.wikipedia.org/wiki/Salt_(cryptography) ))

That's great. But to really reassure people they would do best to reveal the algorithm. After all, DES-based password hashes are both 'hashed and salted' but are easily broken with JtR.
Sorry, I have to ask... are you trying to be funny with your nick?
How many hours do you usually work per week ?
I'd bet on the 640x480 monitors are people using virtual machines to run Linux just to install Team Fortress 2 and get the unique item that's only available using Linux to play . Similar to the iPod Ear Buds for using a Mac to play.

I'd imagine that's skewing a lot of the stats on Linux at the moment to be honest.
Looking Back at the White House Hackathon
Thank you - good question.

Firstly the easy answer:
I would certainly prefer assassination over war.

Secondly the comeback:
Assassination is simply the extra-territorial equivalent of the death penalty - how you feel about the death penalty will influence how you feel about assassination

Lastly - well the confusion - the above kind of says assassination is a Good Thing. But the Litvenunko affair shows just how hard this is as a problem - Russian government killed a man under the protection of the UK government and we could do little more than protest. In a world of assassination as an accepted action we would now be on our forth Prime Minister and Russia would be looking for their next president.

I cannot say if that's a good or a bad thing. Certainly it would favour Saddam over Bush.

In short, assassinating people is Wrong ! But assassinating the wrong people is more Wrong and usually counter-productive. As the old saw goes, "you want directions to Dublin? Well I wouldn't start from here if I are you"
I haven't received such an email, wonder why.

Anyway Evernotes android client wasn't very good and it was far too slow to start.

And now the have been hacked.
Anybody know a good alternative?
Your attitude is common, but mistaken. It's another version of "the grass is always greener". Whether you're working on a self-driving car or implementing Microsoft Word 2014, the fundamentally hard parts are actually the same.

The self-driving car might sound sexier if you've never done something like that, but once you've learned the basics of how control loops work and the quirks of realtime operating systems, that's about it for novelty. What you'll actually spend your time on is the same old stuff: managing complexity. Debugging, testing, designing APIs, designing user interfaces, integrating disparate module, etc. You may actually find that it's more soul-crushing than a basic CRUD app, because in a safety critical project you'll probably have less autonomy, more oversight/bureaucracy, and a much slower pace.

The fundamentally hard part of any software project is complexity. It's easy to let even the simplest project spiral into unmanageable complexity, and it's deeply challenging work to prevent that. That's the meat of what any good software engineer does.

There's a better way to word your original question: in what kind of organization should I be writing software? That has a far bigger impact than the problem domain on your happiness, level of challenge, and autonomy.
I get to work with highly intelligent people, doing work that impacts tens or hundreds of thousands of people.

My day-to-day involves taking the most powerful and complex invention in history, and bending it to my will in ever more elegant and sophisticated ways.

For my efforts I'm paid X times the average US wage and receive regular kudos from strangers on Twitter and blogs.

My friends and family assume I must be a genius to be able to do what I do. On my best, most satisfying days, I'm not so sure they're wrong.

I'm just an ordinary programmer at an ordinary startup, but from where I sit this job is amazingly glamorous.
if ($string == '' || null) return 'massage';

Heh, beginner mistake.
Then I shall be clearer and say that I disagree that vi/vim is harder to use than an editor that needs a command-line flag to enable search-and-replace and doesn't do case-insensitive search at all.
Jailbreaking != phone unlocking. Phone unlocking means unlocking the SIM to be able to use different carriers. The DMCA, strangely, doesn't let people unlock their SIM slot to use it with different carriers. (FWIW, this seems like a strange thing to make illegal, but it's what happened.)

Jailbreaking still is legal, and is unrelated to this DMCA exception.
http://www.radioaustralia.net.au/international/2013-03-01/ho...
Not exactly sure what the "tips" are in these, most of them just look like cruddy PHP code.

In the 2nd part of Example 2, using "else if" instead of several "if" statements to check the same value would result in fewer comparisons having to be done since the way it's written now the second comparison will always run even if the first one was true. It would be even better to use a switch statement if you're comparing the same variable in each case.
Looking at the other articles on the site, I think the poor guy is actually earnest.
I don't think you got quite what I'm trying to say--the whole point of Evernote is that all your data is "there", and the collated index for finding this or that is "there", and so any individual piece of data doesn't need to be on this device or that device. When you insert a new piece of data, all you need is that piece of data. You send it off to Evernote, and they stick it into your database. Then, later--still without any local state--you search the server to find out if anything you've sent in matches some arbitrarily-complex query--and if there are results, then you temporarily download [the newest version of] them from the server. The collation itself--not the storage, not the UX, but the ability to immediately put something into device X and then find it using device Y--is what you're paying them for.

Without that, what you have is a OneNote notebook stored in your Dropbox.

> Edit: Also there's no reason to believe the client-side store wouldn't be encrypted. That'd be exceedingly stupid.

It's encrypted with a key that's stored on the client, which is the same as the server being encrypted with a key stored on the server: effectively about as secure as DRM (i.e. not.)

To put it another way: presuming you have a motive to gain access to just my data--with this hypothetical service, if you steal my phone, you have my data, and the key to decrypt it. Or if you steal my laptop, or my desktop, or any other device the service is synced to. Or if you hack into them. All you need after that is the passphrase I (hopefully) set to unlock my encryption key--and for a single target, social engineering (or lead-pipe cryptanalysis) can get that right quick.

Meanwhile, there is only one thing people can do to steal my Evernote data: hack into Evernote's servers. If you just want my data, that's a whole lot more effort than it's worth, compared to just palming my phone.

[Now, if you want a bunch of random people's data, this is where using passphrase-locked + per-account-salted encryption-keys server-side is actually relevant to security. If it takes O(N) time to crack N accounts, there's much less incentive to do it than if it's O(1).]
NYC tech is taking off. Be a part of it at Amicus (YC S12)
Your average user has no idea what a hash nor a salt is. There's really no reason for them to include their hashing algorithm in an email like that.
And email
Most machine learning work is the CRUD of math. It is plug-and-chug in standard toolkits.
Steam launches a script to install dependencies. The expectation is that this script will be modified by distros to account for the packaging mechanism on that distro, and package name differences. So if you are not on an apt based distro yet apt-get is being run, then your distro's Steam package needs to be updated.

It would be nice to describe all the dependencies on the steam package itself and let the package manager handle this, unfortunately it wasn't possible on Ubuntu 12.04 because of multi-arch issues. Other distros might not have this problem.