skysight-inc/HackerNews huggingface dataset:
> I've heard people say that uPnP is insecure, but I haven't heard anyone back up that assertion with any information.

uPnP as a spec doesn't seem to have any security (authentication/authorization) baked in. I'd find you a reference from upnp.org but they're making it difficult to search.

As an implementation - have you had a look at any firmware from consumer-level routers recently? Sorry, more anecdata. The only flaw I can remember is http://upnp.org/news/documents/UPnPForum_IGDSecurity_PressRe...

Even with a good implementation, if I can execute code from any device on your network, your phone, your Smart TV/fridge, your PC, then I can forward ports to wherever I like.

I know, I've accepted the risk too by keeping uPnP turned on in my network.

> You can close ports with a firewall, by not running services on that port or via NAT. I know which one I'd rather deal with.

I don't want to deal with any more NAT implementations. It wasn't so long ago that the size of the tables on consumer-grade routers were small enough that BitTorrent et-al would fill the NAT & TCP tables and cause disconnections or router crashes.

NAT is a hack and we should be moving away from it.
If I can get to work on this again I will do that. I'm gonna have to use JS however.
No one is forcing them to apply though. Your point would be totally valid if they were tricking people into thinking it was going to be better than it is, but they are totally transparent.

You could almost make the exact same argument about volunteering. You are asking for people to work hard and not get paid with the upside being they feel good about what they are doing. This is virtually the same thing, they are saying if the environment and lifestyle is appealing to you, and you're willing to deal with the downsides, please apply.
>They need pre-warming in advance of significant traffic changes

Why?
AOLserver is America Online's Open-Source web server
There has been a fair share of Texas bashing here. Mostly complaining about EDT and other various shenanigans going on.
Doesn't matter for a lower bound, of course...
For local development, I use Vagrant + Chef cookbooks to setup my environment. The same Chef cookbooks are used to provision the production servers.

It's not clear to me how I can benefit from Docker given my setup above. Any comments?
I think it brings up the issue of considering at what time is it better to compete against them rather than join them.
If merit correlates with the ability to make money and merit is heritable, you'd expect those with merit to come from families with money. Top schools and our industry are probably far from pure meritocracies, but that data doesn't prove (or even strongly suggest) it.
I've done this before. I think sleeping allowed my brain to figure out a solution that I had struggled with for hours under pressure while awake. I can only recall this happening twice.
Focus on your interests. Maybe go to some meetup groups. You are probably asking the wrong question.
your nickname dude haha
It seems to be highest over the weekend, so perhaps the drop is caused by employees at offices with no IPv6 connectivity?
My turn to nitpick:

> as the wavefunction evolves in time, its probability amplitude spreads throughout space

sed 's/probability//'

Probability is a real number embodied in a state of mind[1]. Amplitude are (as far as current physics believes) a complex number out there in the world. I know, squared norm and Born statistics, but still.[2]

http://lesswrong.com/lw/oj/probability_is_in_the_mind/

http://lesswrong.com/lw/r5/the_quantum_physics_sequence/
Before resorting to ad hominem attacks you may want to do some research on who you're attacking. Robert Khoo is neither a moron nor a psychopath. I disagree with his job posting, but it helps no one to attack the person behind it (with false insults) instead of attacking the posting itself and what it represents.
>would be willing to work hard

I don't think the issues is with working hard - the issue is with parts of the industry expecting people to work so much that it's beyond "working hard" and becomes damaging, and I think (and I think the author in OP's link does too) that there has to be a change in developers' mindsets to protect themselves from negative consequences.
> if you [...] don’t mind having a really bad sense of work-life balance, this is the job for you.

wtf, they're not even trying
My comment is not an endorsement, it's merely an explanation of the mindset of the person who wrote the ad.
Ideas _are_ the patentable work though. The system is designed to get people to share their ideas. The problem is that most patents should never have been granted in the first place, because they are obvious or non-novel.

If you had to manufacture something before you could patent it, then your idea could be stolen by any potential investor. And some solutions you can't manufacture without help from entrenched businesses. Robert Kearns shopped around an idea to GM and Ford for a new wiper system. They stole it without paying him. If patents couldn't be held by NPEs, then the law would always be on GM and Ford's side, because Kearns didn't happen to own a massive automobile production line.

Why should owning a massive car factory be the only thing that qualifies you as an inventor?

Also, anyone who can beat you to market has a defense against your patent claim. The biggest, richest, fastest manufacturers win the right to produce everything they never invented.

Don't get me wrong, the patent system is definitely broken. The way it's broken happens to get exploited by certain non-practicing entities. But the problem isn't NPEs, it's _some_ NPEs, and really, it's just the features of the system those NPEs are exploiting.

The problem with our patent system is that no one actually seems to care about novelty or obviousness, even though they are supposed to.

Consider "a method for thermal refreshment of bread" (patent number 6080436). It's a toaster patented in the year 2000. David Martin, a patent quality assessor, claims that about 30% of the patents his firm reviews are for things that have already been invented.[1]

Software has it's own special version of this problem. Juries can't code, so they don't have any clue what's obvious, what's just an incremental improvement that anyone could produce if they knew the language. Juries can't tell the difference between design tweaks and brand new methods.

The problem is not that the system rewards intellectual effort, the problem is that the system rewards things that are effortless.

[1] http://www.thisamericanlife.org/radio-archives/episode/441/t...
> Full Medical, Vision and Dental, 401k (SEP) retirement contributions (2% of annual income per year), Holiday pay, Periodic bonuses, Flexible vacation time, We're willing to relocate you if need be

An insultingly horrible job and this is everything wrong with tech-startup culture, really Marco? Maybe your post is what's insulting to 99% of the world work population (who have much worst jobs) and what's wrong in the tech culture today (disclaimer: I was Marco's first employer).
I'm unconvinced that this is a suitable excuse. For a lot of small companies work is family. You spend an awful lot of time with these people, day in day out, and you share in triumphs and adversity together. Penny-Arcade is by far not the only organization in this boat.

Demanding, insane-o jobs are also common in those places. They may have poor work/life balance, but goddamn it, they pay their people, either with fat salaries or substantial equity or both.

It's hard to imagine the confusion under which someone would post a job that is three standard deviations more overworked than the norm, and then flippantly say "we're not money-focused" about the compensation.

You want insane-o crazy work? You pay for insane-o crazy work.

But maybe this isn't surprising. PA does come derive from an industry where talented, young people will drag themselves through broken glass just for a tiny sliver of the glory of making video games for a living.
You can map them by using the curvature of github and the relative speed of development. Is too early to say, but there is also some indication of some kind of dark flow control, possibly as a result of dark energy drinks.
This blog post basically boils down to: you will work far more than a regular full time job, and you will be paid poorly.

This is not, as far as I can tell, actually supported by the job posting itself.

I really can't understand why this is getting upvoted so much. I'd love to see an intelligent discussion of unrealistic demands in tech jobs, but this isn't it.
That's exactly what Satoshi would say.
Both my parents were on virgin mobile and my mom couldn't stand it. Dropped calls, text messages that were never received, and there were a lot of dead zones. I switched my plan on t-mobile to a family plan and brought them on. They've been really happy with it so far.
until someone comes up with a way to determine what is bad versus good then that is perhaps the best there is. I use companies to do all sorts of things for me - watching software is just one more thing.
You know...IE11 does support webgl...just saying. (I don't think it checked...)
Prototype Android Applications Quickly From Your Browser
I think someone who so blatantly values his developers so little deserves to be insulted.
Money is just one form of compensation. PA offers a matching 401(k), my company doesn't. PA offers what seems to be a pretty sweet working environment, my company doesn't. PA might have some interesting/hard problems to solve, I'm stuck making CRUD apps for customers that just don't care.

People can complain about the (allegedly, nobody knows what they're paying yet) low salary all they want, but that's only one piece of the puzzle.
Penny Arcade are being publicly called out for their questionable ethical behavior. That is market forces at work.
$10 for a 10 minute test, okay. A month of 200 US-hosted n1-standard-1 machines would cost 200 * $.115 * 30 (days) * 24 (hours)... over $16,000. That doesn't include load-balancing, bandwidth, or any additional charges there may be. The price shouldn't be mentioned anywhere in the article.

Demand is elastic of course, and if you really want to scale in a cost-effective manner you also need to do auto-scaling. As far as I can tell (I have no direct experience with GAE), it's much easier on AWS. It would also be interesting to see if you can scale your pool of webservers from 1 -> 200 faster on AWS or GCE.

The article does quote @cloudpundit, who hits on the true point of the exercise: Relevance of GCE LB load test: With AWS ELB, if you expect a big spike load, must contact AWS support to have ELB pre-warmed to handle load. I would also guess that Amazon is working to improve ELB to behave similarly, especially now that Google's product has less restrictions than theirs.
This same monicker can be applied to designers.
Sure, but my boss also expects me to be working the entire 8 hours I'm sitting at my office, not browsing Hacker News... :)

Expectations are one thing, and they're very easy to state up front. Reality is quite another, and much more difficult to enforce.
I think a lot of the backlash is because this feels like something Penny Arcade would never do.

Sure there are jobs that are this demanding or don't pay much, but as a company PA has always seemed to stand a little above the rest. They are charitable and straight forward and generally try to treat people in a decent (or atleast honest) way.

This posting seems to go against much of what I think makes Penny Arcade, Penny Arcade.
How are you using Logstash? I have NGINX write the log, then the log-shipper suck that log file up. If you have a better work flow, please share. :)
I like it. Maybe "were you north of an east-west line" when this list was made.

I guess it gets tricky when people are born.

Wait a minute, just realized this whole question breaks down if we don't recycle numbers from the dead back to the newly born... and there's no guarantee that all of the dead will sufficiently resemble all of the newborns. I want my money back. :)
Since we're talking about insane job ads, I saw this one recently: http://www.splore.com/content/jobs

"You should be ready to make this startup the primary focus of your life"
I don't think a hobby is comparable. They do the raiding thing because it is fun. They have only a social obligation to stay, and they can quit anytime that it doesn't fit into their life anymore.
InfinitEye 210 Degree HMD Technical Q&A: How does High FOV Virtual Reality Work?
It only counts as "rich" if he can use the money. I suspect that in practice, such large amounts of Bitcoin money have limited usefulness. It would be hard to get the actual million dollars his wallet is supposedly worth. There are still exceedingly few businesses that accept Bitcoin payments. At best, he could get augment whatever other income he has by selling small amounts of his Bitcoin money at a time.
Discover The Secrets That Google, Yahoo, And Bing Don’t Want You To Know
Does that matter? If two people independently invent the same thing, they're both inventors with equal standing. The classic example being Leibniz and Newton with regards to calculus of infintesimals.
Have you used Windows Phone or do you just Microsoft bash?
It's definitely not ideal (blocking end-to-end routing defeats a lot of the point of IPv6) but i understand the security POV. It is straightforward to change, about the same complexity as forwarding a port was on IPv4 (click around in web ui for a minute or two).

The router is an AVM FritzBox 7340, the ISP is Snap (New Zealand).

I have no idea if this setting is common or not for IPv6 deployments.
It's not really conserved. Here's a better article about it than anything I could explain:

http://motls.blogspot.com/2010/08/why-and-how-energy-is-not-...
Bitcoin Block Propagation Speeds
Neither, this wasn't a comparison to Reddit, tho I see why you would make that parallel.
I won't try too hard to convince you otherwise, because you certainly seem set in your opinions. But I think it's a shame that such an overwhelmingly negative tone is thrown around so much. There are companies (small and otherwise) made up of good people that do not operate on this horribly cold impersonal calculus. There are bosses that will genuinely go out of their way to help you through a family crisis. There are co-workers and organizations that feel like family. I'm sorry you think it doesn't exist and that you've never had a relationship with a boss that was anything other than evil, but don't be so quick to tell everyone that that's all there is.
Is there any way to upgrade clusters without downtime? It seems the import/export requires a shutdown, and nodes running different versions cannot join the same cluster, correct?
That has been my impression too. Dark matter developers are people who work in software development in the employ of a company. Their employer may - and usually does - have a blog and a twitter and may well have dedicated marketing and sales teams. So even though these developers may not personally market, their employment depends upon these non-dev activities.

For me, personally, blogging and going to conferences is pure marketing. It works too. It results in me and the guys who work with me to have an income, thankfully. It's about demand creation for our services. Many people who are awesome computer scientists and programmers are not looking for that lifestyle. They work for good companies that pay them well to code. They do not have to worry about the non-coding tasks that need to happen for there to be that coder job.

Sometimes I envy their situation, but I am now personally addicted to self-employment, business, and startups. I love coding and do it for my livelihood, but I do not feel that I am called to work as just a programmer for a company.

I do like the analogy still. It's like the dark matter halo that presumably encircles our galaxy. It's unseen but is vitally important for all of our existence.
> "If merit correlates with the ability to make money and merit is heritable..."

In the UK this was called being of 'good breeding'. It's no more true now than it was back then. Bear in mind that money is also heritable.
I checked - his code is not stolen - it's still there at the website.
You have to work with white-lists, not black-list when dealing with such high numbers of shitty apps. In theory this should be done by the app store provider, just let in non-malicious software.
Those controversies are over-analyzed. People tend to forget that these two guys are, like all of us, human and don't have some sort of fancy PR machine to soften the blowback. Krahulik suffers from chronic anxiety and so when the threats started piling up, he responded in kind the way an animal gets backed into a corner. There's no denying he fucked up, but curiously his critics seem to gloss over his attempts to apologize.

I've been at PAX. These guys are approachable, they're kind and funny and do not carry an air of superiority. I know their failings as well as I know my own.
The license is also suspicious

## License
All software included is bundled with own license
The MIT License (MIT)
Copyright (c) 2013 Samuel Vasko
Permission is hereby granted, free of charge, to any person obtaining a copy

People can think that the whole package is MIT when it is certainly not (there's GNU inside)!
If this is how "family" gets treated, someone needs to call protective services.
For anyone not familiar with Penny Arcade( PA ), the absurd condition are there to reduce the number of candidates applying. Pa gets thousands of applications every time they have a job opening. Everyone dismissing the possible job at PA for those conditions is automatically removed from the process and that is exactly what R.Khoo wants. In case you are wondering why would you still want to work there, then you are not the Candidate, and >shock<, they don't want you there. Yes it is that simple.

Anyone who wants to work at PA, knows why very well.( hint: its not the money )
Dude, cat accidents are affecting so many people! Like the other day, I was riding my cat to work, and I passed this cat accident that basically totalled 5 other cats, killing two people. It's not something to be overlooked....
Because they consist of a set of EC2 instances, the vertical and horizontal scale of which is determined automatically based on the average traffic profile of each node. Once the traffic has increased enough to warrant a scaling event, it takes minutes for new ELB nodes to come online and go into DNS rotation before they can start serving traffic.
Out of interest, what is a rough idea of the total requests per second on heroku for everything? All your nodes or whatever you call them? Dynamos?

Is 1,000,000 request per second a stupid, pointless number as no-one ever gets 1,000,000 requests per second or is this some sort of meaningful number?
Penny Arcade really isn't the same as a "normal company" though. Most of them there are minor celebrities just by proxy of the number of viewers that read the comics and watch the videos. I think it's safe to say there are a lot of people that can get a sense for what it would be really like to work there. It's more like a reality TV show (which they have actually done) than an enterprise business.

That said, there's no way I would apply for that position, and I hope nobody else does, so that they finally realize that they need to hire more than one person for all that stuff. I'm just saying the Penny Arcade company really is different than nearly any other technical gig, and that when they said "work is family", it's not "a nonsensical feel good catchphrase". It's them trying to weed out as many people as possible so they aren't flooded with 100,000 resumes at once.
Beer-Tapping Physics: Why A Hit To A Bottle Makes A Foam Volcano
Works with animated gif of carlton: http://codepen.io/anon/pen/Atpgn
Sure, but those small businesses generally aren't making the one IT guy run a massively high-traffic website while putting on the largest gaming convention on the planet, right?
And, FWIW, you don't seem to automatically get it back (at least not within six or eight months - I had this one angry, ill-considered day once…)
Google Plus Second Most Used Social Network World Wide in Q3 2013
Here is an understandable and serious 40.000 feet bird's eye view of quantum physics: http://lesswrong.com/lw/r5/the_quantum_physics_sequence/

Having reading it, I'm confident this post is crap. The abstract of the scientific article behind it looks much better, though.
Chrome and Opera Optimize for Mozilla-Pioneered Asm.js
The paper linked speculates that a small group of people mined the first 20,000 blocks of Bitcoin. 20,000 blocks (@50 coins each) is 1,000,000 bitcoins, which @ $1000 is $1 billion.
Uh, "Vitamin Water(tm)" isn't a health claim? I was not making it up: Coke argued that nobody would mistake a product called "Vitamin Water," that is, in fact, colored HFCS-water, for something healthy. That's a bit more dubious than selling you a cheap genetic test.
"Glurge" isn't the right word... But there's got to be some term for this genre of syrupy and mostly content-free articles about start-ups.
Every C++ class declaration ever looks like this:

class Foo {
public:
stuff;
private:
other stuff;
};

What's the point of private-by-default if everybody overrides it anyways?
The primary "unreasonable" default seems to be that in the beginning, writes were not safe by default. Although they were explicit about it (if you read the docs), it probably was a bad decision. This has been changed, thankfully.

As far as maintenance, it's unreasonable to expect that you could have a zero maintenance configuration. What other software does that? Your operating system doesn't. Your browser doesn't either. Nothing is immune to entropy.
There's an "AmigaOS" release from '06 [1] (you can buy expensive PowerPC boards that run it) [2]

[1] http://www.amigaos.net
[2] http://en.wikipedia.org/wiki/AmigaOS_4#Compatible_hardware
They separated out the video streams and audio streams, so now the only 1080p link you can get is video only (and it uses a different ID to the old 1080p videos, so support needs to be explicitly added for calculating the link).
I'm as guilty a generalist as any, yet I'm happy straddling several disciplines.

There's a broader argument for and against "specialization" i.e. studying other disciplines yields perspective etc.

At any rate, I'll share the ways I'm solving it presently:

* reduce the number of disciplines required to be effective
* confront human resource management problems
* build funnels to save time or improve process

I suppose I'm advocating tackling fundamental leadership problems in an organization :/

If you have any advice or ideas you can share I'd surely love to hear them.
This is a controversial change, and praising the new system while neglecting to mention that you work for Google risks coming off like astroturfing, regardless of your intentions. I think enough people can be reasonable and take your opinions into consideration even if your employer is the topic of conversation.
My guess is that Satoshi died and that we will never know his identity.
Well at least do some research before you insult him then? Here are some options: enabler, workaholic, calculating
While I don't usually find myself in staunch agreement with some of what Marco has to say (particularly with regards to Apple), I fully endorse this post.

I found myself seething while reading the original Penny Arcade job listing. The cognitive dissonance required to write it is beyond my comprehension. In particular, the nonsense about somehow justifying a below-market salary in order to "make the office nicer".

Needless to say, my appreciation for Penny Arcade as a whole plummeted drastically today.
And if your philosophy is truly "work is family" then this kind of job posting is exactly the thing you need to weed out people that aren't passionate about the things PA is doing. A point that seems to go over many peoples' heads in this thread (though not some of the others).