skysight-inc/HackerNews huggingface dataset:
> But we don't negotiate salaries. Two factors: what makes you happy/enough (do not think about your salary but about your challenges) and what can we expect from you. I don't care how much money you would make at an other company, because you want to join our company.

Ahahaha, oh brother.

You need to care about how much I'd make at another company, because if you dramatically underpay me, I'm walking. I'm ok with fuzzy variance - a few K/yr isn't making or breaking me. But if you short me and give me <90% market average, I'm job hunting. I don't care about how much I like the job - you simply are not valuing me as much as other companies do, and that's unacceptable in my eyes.

Unwillingness to negotiate is a red flag: it signals you can't work with me, are inflexible, and are not interested in accommodating me if something comes up.

So no. Negotiate with me and offer at least 90% of market value. Or I will walk - either I'll join and quit as soon as I get another job, or I'll keep searching. Neither are good outcomes for you.
What fraction of the people you know had and regularly used a MP3 player when the iPod came out?

What fraction of the people you know had and regularly used a smartphone when the iPhone came out?

What fraction of the people you know have and regularly use wearable technology now?

I don't think the answer to that third question is higher than that to the other two.

Also, in some sense Apple has been selling wearable technology for years, in cooperation with Nike.
I don't see how DRM is incompatible with their goals. Of course one might argue that DRM might be platform specific. However, I very much doubt this standard will make DRM more platform specific than it already is.
Your password was scrambled, which is why you cannot login.

> UPDATE users SET password='';

That would be an extremely bad idea. Never set pass to empty on Drupal 6 sites.
I have mixed feelings... does the US know that many big cities in developping countries have better subways (automated, brand new, clean, without pee smell, ?).
Officials should at least be motivated to fix the minimum: like digital display in wagons displaying the right stations... ;)
> I'd love an OAuth provider that HAS NO SOCIAL NETWORK!

GitHub, BitBucket?

Both are actually good options if you have a service with developer demographic (even if its just in part). I'm using Google & GitHub right now, and will likely add Amazon since it's very little work to do so.
The market problem is that people want to consume expensive art. There is billions of dollars of interest in making this market clear. The market will not go away because a bunch of hackers find it unethical. As the war on drugs has demonstrated, the market interprets censorship as damage, and routes around it.

I see a lot of opposition to DRM on principle. These principles will go nowhere. The interesting question to me is whether DRM is part of an standard s.t. required permissions are visible and minimizable and the platform is open, opt-in and extensible... or whether it will take over your devices with God-knows-what secret solutions, which is the situation today. I think the W3C standard is problematic (having read it) but represents a small step in the direction that is less wrong. The third option, an imaginary free-information utopia, is directly against the economic will of the people in general.
Sure it does. "Don't" is a perfectly reasonable solution here. It won't satisfy all parties, but not all parties are worth satisfying.
I'm British and read that without thinking anything of it, but I can see where you're coming from - it could mistakenly be read as "plus ten degrees below zero" perhaps.
Apple's ability to turn relatively new product categories into caché products is impressive. But one thing to consider is that the wearable market has been around far longer than the other markets that Apple has moved into.

For instance, the long term existence of a wearable time keeping device has allowed others to cultivate over time the caché market that exists today. Think Rolex, Cartier, etc. Apple is going to have a hard time breaking into that high margin market.
There's the quote "Write drunk, edit sober" that writers are fond of using. I wrote about this myself not two weeks ago, believing them to be related: https://medium.com/editors-picks/f79b411687b9. Sometimes we have to relax ourselves to let creativity flow, whether that be writing or coding.
They are not making anyone use DRM against their will yet.

And then one day there's a government form you have to fill out, or a training video you have to watch, and it's behind some crazy DRM solution that the makers thought would be good to use, which was accepted because it's "standard".
And yet, in many cases, nature prevails over nurture.
For example, adultery is severely frowned upon (and in many cases punished) by most cultures today. That doesn't stop many people from cheating on their spouses whenever they feel like it.
I'd just like to point out that there are considerations other than latency that you should be thinking about. Sure, you can optimize for latency, but just wait and see what happens when you get hit with a DDOS attack...
Ask HN: Which IDE are you using?
Looks nothing like the actual image.
I'd like to see more info like this. Thanks.
I call her 50% responsible. The other half is the lender (gov't-backed entity) squeezing her at relatively high interest. They shouldn't have got so greedy. Now they'll get no more out of her, and of course taxpayers eat the loss.
Yes, a big part of negotiation is knowing what you should do and how you should react despite your internal feelings about your situation. I know I've looked utterly disgusted at offers that were already making me giddy on the inside.

It's always nice to have multiple offers to choose from, but sometimes you're just not in that situation. When that happens you can still master your own psychology, keep your feelings to yourself, and negotiate with confidence.
Am I correct in understanding that one can implement new script language types in Javascript?
Not saying that 2factor / persona auth modules aren't the eventual way forward, but the worst thing to do is to run out and do something like adding modules to your site. Installing modules that have any relation to authentication or security should be postponed until a careful review of the code and its consequences can be completed.
> I don't see how DRM is incompatible with their goals.

From my post on their blog (I'd link there, but their anchors are broken):

DRM is software that is designed to restrict a user from playing content on certain devices, in certain ways, and in certain locations. I think that is the very definition of a walled garden. I genuinely do not understand how you believe that supporting DRM will elminate walled gardens.

In the best case we will have moved from an ad-hoc collection of walled gardens, to an ad-hoc collection of walled gardens with the support and moral endorsement of the W3C.

If your concern is genuinely to eliminate the need for apps, and the enclosue of content in walled gardens, why not use your considerable influence in opposition of DRM altogether?

"Frankly, I don't understand the question about insisting that compliant implementation respect geographic location. As a general rule, we don't provide conformance testing and have no way of insisting what people implement."

That was my point :). The W3Cs mission states that:

"One of W3C's primary goals is to make these benefits available to all people, whatever their hardware, software, network infrastructure, native language, culture, geographical location, or physical or mental ability."

Breaking down that list, we see that DRM is inimical to several goals:

* hardware: DRM implementations are known for being hardware-locked; Netflix is the most prominent recent example, re. the ARM-based Chromebook

* software: existing DRM implementations are tied to specific browsers and operating systems

* geographical location: many (most?) DRM implementations implement geographical segregation (a.k.a. region encoding)

That is, by lending support to DRM, the W3C is helping to ensure that at least some web content is restricted by hardware, software, and geopgraphical location. This is in direct opposition to several of your stated goals.
Just saying that DRM doesn't concern me. I don't feel it infringes on my rights, so no need to complain.

It's an (my) opinion, feel free to complain as much as you prefer.

Of course I also feel that businesses need a legitimate means of getting paid, and I prefer them using DRM over convincing congress to let them spy on us.
related: https://news.ycombinator.com/item?id=3155358
I dig the Pebble, not sure if I'd wear one but it is a nice product and I supported the kickstarter.

I think this will be the general consensus of any "ground breaking" wearable time keeping device. I just can't see Apple shaking up the Rolex market.
> Not entirely true.

Genuine request: Can you please elaborate.
Chris, I've lived all around the world - I literally have not seen worse poverty than Indian slums (and yes, this includes multiple countries in Africa). From a marginal benefit perspective, the gains in India are enormous.
'focuses more on increasing your passive income while maintaining a job and living a healthier lifestyle'

Agreed. This has been my philosophy, and it has worked out well. I start in an area where I want to learn the skills required to create the product, allowing for a good ROI even if no revenue is achieved. I also require that it can scale without more work on my part. I end up with something mostly fun to build, more resume items, and possibly a decent passive income. Since I do have a career separate from the projects, I do not have a lot of pressure to stress myself to death in order to make it my sole income.

The hardest part is marketing. So, I try to start something where I have a reasonable 'in' right off the bat and try to grow organically. Every once in a while I will start a search ad campaign or find a place for a banner ad. The best success I have had so far is by banner ads and word of mouth. I only need a small piece of the pie!
> I am baffled why managers rarely understand 1). In addition to slighting employees, it makes them easy for other companies to poach.

That is why they combine it with convincing their employees that they should be lucky to have their job. My former employer got a lot of mileage out of that. It was made easier because some of the people there were lucky to have a job (based on competence or specialty).
jonahx -

I wish we had some bigger examples checked into the repo. I'll work on fixing that. A few things:

- We've built lots of big components on Facebook and all of Instagram.com with it. Those are pretty big apps (though I know, you're asking for code and want proof).

- I think that composing UIs with JavaScript and components is easier than using directives or a templating language. For example, because Angular uses ng-repeat to construct lists, if you want alternating row colors you use something like ng-class-even. I think that creating a new directive for every use case is less intuitive than how you'd do it in React:

http://pastebin.com/maw6uSMG (paste it into the live editor on the React homepage to try it)

We could be more flexible than that. Let's say we wanted to, for some reason capitalize every other row. With Angular we'd need to create a new directive, with React it's just:

http://pastebin.com/39fik9W9

What do you think?
This would be (and still is) a great sentiment, but the problem is that so many startups and small development shops are looking for something that most fresh graduates/junior level developers can't offer. It's a real shame, because it appears as if there's often little to no budge, and I worry for the future of the market (and by this I mean for the other 98% of the US which isn't SF or NY) because it's a real issue that's going to start rearing its head, if it hasn't already.
I guess I'd have to say "so what?"

In the '85-86 time frame, I worked at McDonnell Douglas Aerospace Company (R.I.P.) on the Harpoon anti-ship missile. It wasn't an overly complicated missile or system, but there were still aspects of the design that Just Didn't Make Sense. Designed in 1970-72, by 1984 docs and institutional memory didn't cover everything any more. Bigger, more complicated, older systems will have even more of the "Just Don't Make Sense" problem.

If Chinese hackers steal some version of some weapons system docs, they're mainly going to be confused by it. Unless they have every subsidiary piece of information (Mil-Standards for everything from bolts to lubricants), test results, and design presentations, and at least some of the design information about interfacing systems (bomb racks, for the Harpoon example, or perhaps bolt patterns on the decks of ships) the engineers who get the docs will mainly spend their time puzzling over gaps in the docs.
"My point isn't that strong passwords aren't important, it's that if the salt + hash procedure that was used is adequate, then the strength of any individual password becomes insignificant in relation to the strength of the password + salt."

I'm pretty sure that's not true any more. Modern gpu based password crackers like Hashcat will rip through their lists and algorithmic modification of those lists just as quickly with no salt, 2 byte salts, or 16 byte salts. The salt adds no protection at all against a brute force attack - especially wordlist-based brute-forcing (at least not against an individual password - it _does_ mean that the first time you find one account using "password123" you don't automatically have all of them).

This article: http://arstechnica.com/security/2013/05/how-crackers-make-mi... explains it nicely - it kind of muddies the water by concentrating on a list of plain MD5 password hashes, but Hashcat is just as happy to rip through any of over 30 different password algorithms including just about any variant of MD5+salt and SHA256+salt (http://hashcat.net/oclhashcat-plus/#features-algos). (Astute observers will note that list _doesn't_ contain "slow hashes" like bcrypt/scrypt/PBKDF2 - that's why Coda's "just use bcrypt" is still good advice for developers storing passwords.)

The only sensible password advice these days is:

1) Where possible, use two factor auth - make sure the email account that receives password resets is tfa secured, or all your passwords can fall to an attack on that email account.

2) Always use password storage/generation software (1Password/KeyPass/LastPass/whatever), and use a long but memorable passphrase for it.

Once you've chosen to do that, it them becomes easy to follow the next rules:

3) Never reuse passwords - generate a new random unique password for every login.

4) Use long complex passwords - at least 15 characters including upper/lower/digits/symbols. (I use 25chars except to the few passwords I need to type manually regularly - 1Password can't autofill my AppleID password on my phone or iPad - so I've got a 15char password in my head for that).

5) Recognise that some passwords are more important than others - your online banking, PayPal/eBay, Amazon, AppleID and/or Google Account are the obvious ones, but also take extra care with domain registrar accounts - if I can change your DNS, I can update your MX record, and bam! I've got your password reset emails. For the same reason your dns hosting is a critical account, if I can update the MX record on your webhosting cpanel account or your linode/rackspace/whoever server - I can get all your password reset emails. Treat all these passwords with extra caution - don't type them into "untrusted" computers.
>I have mixed feelings... does the US know that many big cities in developping countries have better subways (automated, brand new, clean, without pee smell, ?).

Yes, but those countries also believe in public works.
This is very timely as I'm currently studying to sit the GRE in August, with the hope of applying MS CS programs at the end of the year (Stanford, CMU, Princeton, etc). Perhaps I should reconsider this?

I'm a non U.S. citizen/resident and I'd like to work in Product Management in the U.S.; I had hoped that an MS CS from a top university would help bridge the gap between my design undergraduate from an unknown international university – helping me land a job at a top tech company as an Associate Product Manager or the like.

Thoughts from the savvy HN crowd?
"Name one thing (other than a phablet) that other companies did first"

The smartphone. The mobile device as an independent computer. The voice interface. The web browser. The app store. The notification panel. Push messaging. The lock screen widget. Cloud synchronization. Instant messaging. Panorama images. Mail. Calendar. Documents. Maps.

Apple has a track record in making good and successful products from already existing ideas and products. It's called innovation, and other companies do it too.
The problem is that, even though it is faster it isn't fast enough. You can't solve any real world large problems with a n^100 algo, even though it is faster in theory.
I don't think you caught quite what I meant.

In any seven to ten year period you likely will have a major life event. If you can handle it, then you can probably run a startup. If you can't, then don't.

The people you've worked with clearly can handle it.
I said 'Not sure how valid that still is' for a reason :). I just found it extremely interesting and 'out of the box'. After reading up a bit on modern defences, I think you're right that it's irrelevant nowadays. (Unless you're in legacy hell, doubtful for the target user demographic)

But the parent comment is still valid, there's nothing to stop Moxie registering another domain even note-crypt.com or notecrypt.org or anything like that and the average user will be complacent with that. (same applies for appspot, note-crypt.appspot.com vs notecrypt.appspot.com vs notecrypto.appspot.com)

It only takes a single lapse in checking the domain and they've lost their login details and encryption key to the attacker.

Point is, the JS crypto does not add anything to the situation. All the security is provided by SSL, and once it goes, the JS doesn't help. It just gives the users a fake sense of an additional layer of security, which is dangerous.

Moxie broke the current SSL usage, and therefore, he broke the JS crypto (as he controls the communication channel). He beat the current state of the challenge.
>With an average NYC income of $20/hour, that's $66,000,000 of life saved, per year.

If you only factor in salary.

How about the improvement in their quality of life?

It's not like everything has to be justified by it's effects on businesses.
Agh, I tried to reply but failed miserably, reply is here: https://news.ycombinator.com/item?id=5789890
The future of everyone being able to view online video (e.g. Netflix/Hulu/BBC) without a plugin is not getting anywhere closer.
What's the point of this? That you can do it cheaper? Under New York? With the necessary precautions and the same specs?
Introducing SiphonLabs: Web Hosting Platforms in the Cloud
Maybe that's why is Google Chrome installer more complicated than some rootkits.
Probably her biggest fallacy was in only considering the most extreme of views, such as fanatical religious altruism and authoritarian communism, and then contrasting them with her own. To her anything between was simply a compromise, a mixture of good and evil. (I am aware of her views on this matter.)

The problem is that reality disagrees. Very, very often the optimum in a complex system is found somewhere between a large number of polar attractors. I'd say the optimum is rarely near a pole.

It seems that so far the human societies that maximize happiness and well being are those that are somewhat altruistic, but not to the point of smothering individual initiative or removing the incentive for productivity.
Insurance companies offer discounts for preventative measures, like taking a defensive driving course for auto insurance, or installing an alarm system for homeowners insurance.

Surely you could accomplish the same thing with health insurance?
We can NOT do this the easy way! Please read the W3C proposal. The proposal is NOT an alternative to proprietary plug-ins but rather a proposal to introduce proprietary plug-ins into HTML5. DRM can't be free software because you could simply change it to write the data to your disk and recompile it.

This proposal is turning HTML5 into "New Flash" because the CDM will have to do the decoding and rendering of frames. This is not only dangerous to freedom but this is dangerous to all the achievements and advances in HTML5 and the web stack.

https://dvcs.w3.org/hg/html-media/raw-file/tip/encrypted-med...
Hah! I completely forgot about my high school programming stuff!

I'm with you, the reward was remembering all the cool shit I did (started programming at 4 on a C64), and the hopes that the info might be useful to people starting out. I definitely wish there was less of a barrier to becoming a programmer these days, although I think interpreted languages go some way here.
How much traffic are we talking about?
Why on earth is a resync necessary then?
> However, I very much doubt this standard will make DRM more platform specific than it already is.

Of course not! In fact, due to the nature of the web, it will make DRM in general less platform-specific! The problem is that HTML will become more platform-specific.
We believe in defense.
>a corporation would not hesitate for a second, on moral grounds, to restructure its debts through bankruptcy, and neither should individuals.

I see what you're saying, but I really dislike that way of thinking, because it's justifying something bad by saying "That's what others are doing"

That's like saying that because BP are spilling oil into the oceans and getting away with it, you shouldn't stop doing it yourself.

The world would be a better place if morals were used in more decisions, not less.
Sure looks like it's getting closer to me. The amount of content I can view without a plugin has absolutely exploded over the past few years. Sure, big Hollywood names aren't in there yet, but it's not like they're the only ones who make videos worth watching.
And don't forget Google, who got famous for some of their design decisions early on. E.g. the minimal design of google.com, and the "undo replaces confirm dialog" pattern.
My coworkers say Tim's statement "We always focus on making the best products" is BS.

I disagreed, but wonder how that reconciles with a rumored low cost iPhone. If Apple introduces a "low cost" phone (vs. just lowering prices of previous generation models) how will they spin that with Tim's methodology?
Would you consider the prior portable music market (Walkman, Discman, etc) a parallel?

Of course, time pieces have a much longer history. But as far as the modern consumer/brand marketplace is concerned, portable music devices certainly predated earlier MP3 players by decades, at least.
The dual use elevator/toilets are a highlight of the New York subway.

The trash strewn tracks are worth a look, while the total lack of electronic signage as to when the next train is like stepping back in time 40 years.
The non-research/terminal MS may also be useful for those wishing to teach computer science at the junior/community-college level.
That's why the W3C proposal is a proposal for an API which proprietary plug-ins would use. The plug-in will do the decoding and rendering. Therefore the EFF is absolutely not over-reacting.

https://dvcs.w3.org/hg/html-media/raw-file/tip/encrypted-med...