skysight-inc/HackerNews huggingface dataset:
1) No, this is not against the 1st amendment. You do not have free speech at work, and before he signs this he is still employed.

2) He would not have signed it under duress because he does not have to sign it. It could be argued, but he'd probably lose. I wouldn't think either party would want to go to court over 2 weeks pay either way.
This World of Ours - James Mickens [pdf]
A Fun Sociological Explanation For Why We Haven't Discovered Alien Life Yet
> But for a very particular minority, life is very very different.

That's pretty much true for any and every society.
> I don't remember the transition to GUI in the 80s as being as shallow as the mobile app market is.

Then you weren't there. I'm pretty sure the first caveman to use a different pigment in cave paintings got the same shallow reactions.
The difference is that the registrar is now obligated to shut down any domains where the registrant changes first name, last name or email address and does not verify the email address using the link from the sent email. This is why it's such a big deal.
SmoothMouse is an experimental project to improve mouse & trackpad usability.
This isn't a "real name" policy.

It states that for certain types of changes/new contact details, there will be a verification email sent, with a link you have to click.

That doesn't involve giving your real identity to anyone.
SEO Andy
Towards the end of the year I tried to make a simple game that had IAP. It hasn't done overly well, and the IAP revenue was negligible compared to my other paid apps. In general though, I think IAP can be a significant driver of revenue if you have the right type of app for it.
You'll only have to confirm any underlying email changes in your example. However, the new ICANN contract also mandates a yet to be defined "Privacy and Proxy Accreditation Program", which will bring changes to the different whois privacy services that registrars currently offer.
BTC Geek Monthly Stats: Indonesia Climbing in Bitcoin
No, this is incorrect - it is part of the new Registry Registrar Agreement that ICANN ratified earlier this year. It goes into effect 1 January. All accredited registrars will have to agree to it this year to retain their accreditation.
Less than half of one--this is my first dev gig. I'm basically 'unproven' so I understand why it was slim pickings for me.

I'm hoping building some experience here will give me a better chance in the future, although I'm a bit worried that working with such an old tech stack might not work in my favor.
Is the block chain actually useable without miners though? I guess the game example is pretty neat because the clients can 'mine' behind the scenes but if a company wanted to do something like that would they need permanent miners to make it work?
Agreed, I think this made the front page solely riding off the hype of the recent AI and Machine Learning media surge.

I would love to hear more information though. Fun fact, part of my data analytics course next semester involves participating in Kaggle competitions.
There's a difference between "not trashing people" and not saying anything under threat of lawsuit. Pretty well anything can be interpreted as disparaging. You could say something as simple as "they fired me, I don't think it was fair." and find yourself liable.
You should be very concerned about your registrar, then, because they are not paying attention to ICANN policy.
I've never agreed to these since graduating university. One time someone tried to get me to sign that anything I invented for the next 3 years that was related would be their property.

I've found three good pushback techniques:

1. "My [insert family member] is a lawyer and I haven't seen this clause before, so I'm going to get her to read over the agreement." Next day I just say that they won't let me sign it. Why make up a family member as a lawyer? Because to push back or hire a lawyer is viewed as an aggressive move, while affably showing deference to your family member isn't.

Later in life when the job / contract offers started getting bigger:

2. "I don't sign things I don't intend to follow and I'm going to be building things in this industry on my own time for my own profit." Strait up confidence along with the fuck-you attitude to back it up by walking away. I'm never going to work for someone that is that dense and short sighted anyway.

Every single company has allowed me to just strike out the clause and have us both initial it.
No they're not. From Wikipedia: http://en.wikipedia.org/wiki/Consideration

Consideration is something of value given by a promissor to a promisee in exchange for something of value given by a promisee to a promissor. Typically, the thing of value is a payment, although it may be an act, or forbearance to act.

Paying you not to speak is no more an attempt to dissolve your human agency than paying you to speak. Assuming you have nothing disparaging to say, not agreeing is foolish.
I think the fundamental question is how easy it is to shoot yourself in the foot without having any clue as to what you are doing wrong.. Comparing PHP to C is somewhat of a bad comparison since C is famous for security gotchas. If you are comparing PHP to C security-wise.... What's the comparison? All the security of C with all the performance of a scripting language?

Now, the core language in PHP is a lot better than it used to be but in the extensions you still see all kinds of braindead behavior like implicit (yet both global and anonymous) database connections and the like. Since so much of PHP is in extension-land this is somewhat troubling.
Companies, CEOs and other executives should print this a thousand times and put it up on their walls.
Thanks for your data point. But I presume this was a small to medium sized company? At Big Co. HR is a faceless organization and I'm curious if people have succeeded negotiating with this beast?

I'm also curious: did you negotiate this after they offered you a job? It seems frustrating to get the job first and then turn it down because it never met your requirements? Is it reasonable to ask a potential employer about their own-time policy during the interview phase?
>her first publicly released app, coded in iOS

ugh

Edit: I mean the phrasing. not the fact that it is an IOS app.
Lets say you were to sign something like this, but then 10 years later the company completely changed direction and their new business plan was stealing candy from babies. Then you wrote something about how horrible the company is now. What kind of recourse would this contract let them take on you? Would you just have to pay the 2 weeks salary back to them?
"... you can write insecure code in it," he underscores his point,
"but that's a fundamental problem in every single programming language"

No, there are languages where you can't write insecure code, where the compiler doesn't allow it and will warn you when you do.
> if you can't do the time, don't do the crime.

That is entirely the point. He may well have been willing to do "the time". But "the time" is wildly disproportionate to "the crime". This is bad for the same reason that we don't execute everyone convicted of breaking the law.

Furthermore, how does your logic apply to the NSA? A group of someones very clearly broke the law hundreds of millions of times after being told to stop and being kicked off networks, then finding ever-more invasive ways of stealing our emails to grandma. Remind me, who is threatened with jail for the next billion (!) years under the CFAA?
That still does not mean the language itself is insecure. In my opinion this rather indicates the developers responsible for building those vulnerable sites lack some knowledge about proper web security.
But it does threaten ECDSA used by Bitcoin.
We should listen to this guy. Not many guys can pull off a striped shirt that well.
Can you give an example?
In the context of web development of course...
I think one issue is that there are a number of somewhat dangerous foot-guns security-wise in extension-land. For example, last I checked the pgsql extension had implicit, global, anonymous database connections.

Culture is part of it, but part of the culture is figuring out how to ensure that programmers can verify security. Yes, anyone can write insecure code in any language, but can anyone write provably reasonably secure code in a given language? That's a far harder question. I don't see PHP scoring very well in that regard.
Wait, so companies post real problems, and then people solve them for them for free? Is there at least a prize for the winners?
538 hiring geek-journalist?
Suicide is a choice. I fully agree that MIT acted abominably and in an ethically, if not legally, questionable manner with regards to giving evidence and support to the prosecution but not defense. But you can't blame them for his decision to take his life. It was an incredibly selfish act given the intense pain it caused his family.
Its not shallow, it makes the app easier to use and therefore better designed.

Also, perception is reality.
In praise -- yes, praise -- of CES.
I wonder if you could head this off contractually when you start a new job? Something like adding "Severance pay will not be made conditional on limitations of free speech." to the contract that you and your employer sign when you start a new job.
People != People
This is pretty much the "reset fast" that is advocated by the "Engineering the Alpha" book.
Actually I really wasn't trying to allude to anything. I am genuinely curious about how more teacher-friendly policies like those you mentioned affect students. Your last sentence answers my question.
Win32 API for example
We’ve heard you — Starting account fee reduced by more than half to 1%
Wonderful, congratulations!
A big problem with Detroit is that the local transportation isn't too hot, particularly because the train system is basically non-existent. I think this is because the car companies pushed back against rail development so that people would have to drive everywhere. It's pretty hard for young people to get around right now, at least until Google releases its self driving vehicles.
Gabe Newell on what makes Valve tick
Nobody said it wasn't secure.

IMO it's just a bit easier to write buggy/vulnerable code in PHP than other languages. Or maybe I'm just a hater, don't know.
Unless I am misunderstanding, that is all but totally unrelated to what we are talking about, however true it is.
People volunteer to be profiled when there are local hog profile cases. Here are some people saying that they'd never give their dna to the police along with other people saying that they're happy for the police to have their dna.

http://news.bbc.co.uk/1/hi/talking_point/8039149.stm

http://news.bbc.co.uk/1/hi/uk/7532856.stm this page gives more evidence that people volunteer. It also shows how large the dna database is, and how few crimes it helps solve.

You are just wrong about id cards. The detica poll (2004) showed something like 80% support.

The 2004 yougov poll showed 61% support.

Even in 2006 support had only dropped to 53%, but opposition is only 37%.

And all the way through pepple were clear about cost being very impotant to their acceptance of the scheme - when asked about id cards costing over £25 the support drops dramatically.

Any support remaining for the cards collapsed when the estimated costs rose from about £40 for combined passport id card to about £120 for just the card.
Some languages make writing secure code easier than others. When it comes to web-related code of semi-good programmers, I'd conjecture that the amount of vulnerabilities is directly proportional to the amount of magic involved. Early PHP had lots of magic - things like register globals or magic quotes. By now no sane developer uses those things anymore (well, and they were removed). The plethora of recent Rails vulnerabilities was also caused by various magical behavior, especially in parameter parsing. (Actually, I'd expect modern Rails code to have more vulnerabilities than modern PHP code, because they still have a lot more magic involved.)
Is "Silicon Valley" really just the VC-driven startup system (as the article implies)? Or is it something bigger?
Great points, except for "@2x only." If your app supports iPads, then the iPad 2 and iPad Mini (first generation) are both non-Retina screens and are still available for sale directly from Apple. Given Apple's 3 year support cycles, iOS 10 will be the first iOS that can fully drop support for non-retina displays if the iPad 2 and original iPad mini are discontinued by the end of this year.
Instead of surveillance of the masses by secret government employees with cushy protected jobs; why not open surveillance of everyone to everyone and architect the infrastructure so you know who is watching you when they do. Like a distributed homeland security neighborhood watch.
> there are languages where you can't write insecure code, where the compiler doesn't allow it and will warn you when you do.

Where is this wonderful language that throws compiler warnings when the code contains an SQL injection, XSS, or CSRF vulnerability?
Dear Economist: The Rumors of My Death Have Been Greatly Exaggerated
Announcing TurnKey Docker optimized builds
A perfectly straight road is probably great if you want highway hypnosis.
Reaching out and providing scholarships and generally giving a leg up is not how this gap will be closed.

It has never been about teaching women to code, except at the bare minimum "I can get a job at a giant company where I'll write 2000 lines of code in a year."

It's about right clicking with your mouse to see if there are any other options available. Googling for your answer before you ask someone else. Asking questions on stackoverflow. Hacking and reading at night to figure out something that may or may not be for work. Recompiling the source code to make it bend to your will.

There is a price to be paid, and it doesn't have to do with money. As was said thousands of years ago, "There is no royal road to Geometry." It is the same today. All these solutions that don't involve paying that price are destined to fail. College age is too late. Middle school may be the last opportunity for any real percentage of women to be affected. It's not about completing classes.
Sending database credentials to the browser btw may or may not make sense. It really depends on context. If the db is enforcing users' security (which would be the case if you want to share security logic across apps possibly written in different languages) and it is an internal app with limited numbers of users, this makes a lot of sense. For a public internet site, however, it makes very little sense (since you likely have lots of users with essentially the same permissions).

In LedgerSMB, for example, we use app login credentials as db credentials for internal users, but for customer/vendor portals, we use a single user account for the portal. There are a lot of reasons for this but PostgreSQL is flexible enough one can (relatively easily) limit most users to the LedgerSMB app if one wants (via pg_hba.conf). The goal however is to allow non-web apps with the same credentials and security enforcement and we already have some of those.

So it isn't necessarily a facepalm. It really depends on context. There can be valid reasons for it but those are not in the context of a public-facing web site. I.e. if you expect users only to access the db through a single app then you don't want to use it but if you want the db to be accessed through a group of apps then using the db as a SSO technology is actually pretty smart.
The most common vulnerabilities are in the frameworks and libraries surrounding a language, not the actual language (there are exceptions). On top of that, user/developer sloppiness is even more common than security bugs in common frameworks. I would bet most servers that get compromised do so through having things like root/password1 credentials or extremely obvious sql injectable code.
BootstrapZero: Free Bootstrap Themes / Templates
Supercomputers Join Search for 'Cheapium'
I believe that was more or less the point he was making - regardless of the language or platform developers without proper understand can and will make security mistakes.
>The revenue from Windows Phones and Amazon are miserable.

Yes they are. Amazon is terrible because the apps aren't tablet apps. Windows is bad because, well, nobody uses windows.

>Also, I bet that your best money-making apps are not on Android.

And you'd be wrong. The iOS counterparts to the Android apps I've ported made 34k. ~10x better. Of the 5 Android apps I have, my #1 and #2 iOS apps are included.
Coingen - Create your own crypto-currency
The Constitution only stipulates your right to free speech against the government.
I've never heard of severance in the U.S. being mandatory or illegal to withhold if say, they did it for every other employee that left the company prior. I think unemployment benefits takes care of this.
Exactly! Just because you choose to drive your car into a brick wall at 100mph, it doesn't mean your car is unsafe.
> via an open and largely unencrypted internet connection.

Doesn't have to be that way, you know. You can use VPN, SSH, OTR or any other way to secure your communications, if the endpoints can be trusted at least to some extent.
I was initially thinking this would be a mobile launch. Must be a later phase.

I could see something like this working for Pizza Hut though.
Why Starting Small Can Lead to a Better App
t * sin (t) ≈ Christmas tree - exploring a famous Reddit discussion
>Not one single animal, insect or fish has evolved specifically to be eaten.

Many parasites have done just that. Also the females of some species eat the males after mating.
That was the main thread in the discussion yesterday -- you're renting access to the provider's network and the endpoint connection hardware is a part of that. Even if you buy your own modem, the configuration is controlled by the ISP through the setup and the router (again, even if it's yours) will also be configured to allow some backdoor information for the ISP. I may be misremembering a bit of that.

I found the article, commentary is here: https://news.ycombinator.com/item?id=6997159
It's quite a difference between saying 'I like hardcore porn' and watching it. While the ISP might certainly create a profile about you that lists you as a porn lover, that's a lot harder (for example: You might go for lesser known/_unfiltered_ porn sites anyway or tell them that you want porn because you don't understand the filter and assume that all your torrents with new 'material' won't be available otherwise).

I agree with your general point, but I don't think these things should be conflated. Having to state one's stance towards any kind of content is different from someone watching over your shoulder.
Great info, thanks! going to look into these
any language could print out a hardcoded string of your root password
Rust, a Dayz-like game from the makers of Garry's Mod, largely fixes the issue. When a player suddenly logs out, their body collapses to the ground unconscious and can still be killed and looted.

Your job as a survivor is to build a shelter safe enough that your body can 'sleep'
You should also look into the US Dollar- I hear people are going crazy over that one too... and since it's lost 98% of its value in the last 100 years it is bound to rebound any day now.
I think of it more like calling someone and asking them to send you a book. They do. Then the police come knocking on the door saying you accessed the information illegally...

If you don't want someone to have something, don't have your system dispense it when they ask for it.

But yes, intent does come into it - and that's often the problem - people investigating systems for curiosity or academic interest or because the system owners won't take them seriously when they have reported problems that put people's data at risk and want to demonstrate it are treated like criminals (often charged with felony offences with potential jail time worse than assault or theft)
IMF Lays The Groundwork For Global Wealth Confiscation
do most companies purchase ipads for employees when they're cash flow negative?
That's a bit of a broad statement, maybe - I'd be interested to see a general purpose language that will not allow you to write insecure software, I have a hard time believing that exists.

But you're coming from the right place - it's absolutely the job of the programming language to at least make it more difficult to do so and encouraging good security practices, and PHP does not do a very good job of that. Then again, I write JavaScript for a living so I suppose I don't have much room to criticize on that front.
I'm working on a one of PG's frighteningly ambitious problems: search. I'm starting by building the search engine I want to use while writing code.

I have an initial (ugly and very limited) prototype here:
http://gigglebang.com/

If this is an interesting problem to you, email me with a few ideas on what you want in a search engine: gb@dewdrops.net
Actually, that doesn't seem very sane to me. Why are we doing additional work for functionality that we already created, and losing support for people on older versions? Sure if you are a making a new app it makes sense to use great new features. It doesn't make sense to delete code that is working and redo it just because the new way is easier. 0 effort >>>> small effort times 10.
Sure, and if you can find some gigs that pay $500/hour, you're golden. I'm perfectly happy living on $4000 / month myself, and probably a bit less too. My point was that only at that baseline you can really 'choose how much and when to work'.

(also, $4000 / month pre tax and expenses is less than $2000 / month pretty much anywhere in the developed world.)
http://www.impredicative.com/ur/

http://plv.csail.mit.edu/ur/
Probably answering my own question here but now I think of it, there is no language I can think of that catches SQL injection etc, but there seems to be server that does!

http://www.hiawatha-webserver.org/

I have no experience whatsoever with this beast but it says it kills SQL injection, XSS etc. Curious whether this would be effective.
InFORM - Interacting With a Dynamic Shape Display
Another recommendation for Leangains.com - been following it for over a year and have seen good results. Although I haven't followed the protocol to the letter - I eat a good amount of junk food during the week, but also good food as well. The point is to narrow your window of time that you eat during the day. I believe I could be doing even better if I concentrated on eating better and cutting out the crap, but now I have a pretty good balance of being in shape and being able to eat what I want.

Dr Mercola also has some really good articles on IF - www.mercola.com
Those reasons are so vague, though. Alright, so "people aren't happy", how should I go about fixing that as an employer? Step 1: find out what they are unhappy about. Hence the exit interview.

IMHO, this information should be gathered well before exit, e.g. through regular 1-on-1's, but that's another discussion.
It's pretty dark
Ask HN: Recommended News Sites
I know many of us now use Twitter, HN, and Reddit for our news, but are there are other sites that are must have news sites for software developers? Even more mainstream like CNet?

I think I've narrowed to far in on HN and Twitter, and realize that I am missing out somewhat, especially on domain specific news (security).
A Snowier Silicon Valley in BlackBerry’s Backyard
I agree that the article could've gone into more depth about the difficulties they faced, but most developers will agree "a lot of the UI is compromise" is the key point. Supporting iOS 6 and 7 visuals at the same time just means your app looks out of place in both versions.