skysight-inc/HackerNews huggingface dataset:
Java, Spring, SQL, XML processing, and recently Scala and NoSQL (E.g. Mongo) are good choices to invest in learning - they are used extensively but of course not exclusively.

Don't worry about super special libraries - just cover the basics of some of the above and build something that "works" and it'll be good groundwork.

What "Works" means is up for grabs, but any set of functions that expose you to the platforms will be worthwhile. All the concepts and capabilities you build in will do you personally a lot of good, and give you good talking points, but don't expect interviewing panels to be actually that picky about specifics - they want to find good developers, not bring in a 3rd party trading bot :-)
Yes, I did read the article. Here is Snowden's account:

>Mr. Snowden said that in 2008 and 2009, he was working in Geneva as a telecommunications information systems officer [...] He began pushing for a promotion, but got into what he termed a “petty e-mail spat” in which he questioned a senior manager’s judgment.

>Several months later, he was writing his annual self-evaluation when he discovered flaws in the software of the C.I.A.’s personnel Web applications. He warned his supervisor, but his boss advised him to drop the matter. After a technical team also brushed him off, his boss finally agreed to allow him to test the system to prove that it was flawed.

>He did so by adding some code and text “in a nonmalicious manner” to his evaluation document that showed that the vulnerability existed, he said. His immediate supervisor signed off on it and sent it through the system, but a more senior manager — the man Mr. Snowden had challenged earlier — was furious and filed a critical comment in Mr. Snowden’s personnel file.

http://www.nytimes.com/2013/10/18/world/snowden-says-he-took...
I think my what 1-3 is 100% right. The how obviously is my knee jerk reaction. Good job on identifying a need, and good luck monetizing!
Currency exchange 0% commission
There is a big difference. A person with a wealth of $100 million shouldn't be called a billionaire which is why I wrote that comment. :)

I don't get why you wrote what you did as a response to mine; I just made a factual correction. (I even stated that the point still stands.)

Edit:

This was not an argument over the meaning of the word 'billionaire'; the post I replied to likely assumed that Wozniak was a billionaire (defined in the way that over 99% of Americans would understand it) and I mentioned that it doesn't seem that is the case.

If you're arguing about the alternative definitions of 'billionaire', it could have been an interesting sidenote, but ultimately the definition that I am using is what most Americans (i.e. the country Woz lives in) would assume and to use another definition in this context is poor communication.

The whole point of the post I responded to was just saying that if Woz wasn't working with Jobs, he might not have been as rich as he is now; no judgment was made on what it means to be "rich enough", etc.
Privacy tools used by 28% of the online world, research finds
They even support Klingon names! (after a big scandal [1])

[1]: http://www.fakenamegenerator.com/blog/2013/10/response-to-ac...
After 9 months of development, it’s now time for Codesake::Dawn security source code scanner first major release.

Codesake::Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

Version 1.0 introduces 142 security checks against public bulletins since 2006, you can use to check the vulnerabilities introduced by third party libraries your web application include in its Gemfile.

Writing safe code it’s important, but sometimes security issues are introduced by third party code your application relies on. As example, consider a SQL Injection vulnerability introduced by Ruby on Rails framework. Despite the effort you spend in sanitize inputs, your web application inherits the vulnerability suffering as well. An attacker can easily exploit it and break into your database unless you upgrade the offended gem.

There is a comprehensive set of command line flags you can read more by issuing dawn -h flag or by reading project README file.

The list of security checks included in version 1.0.0 can be found online at: http://dawn.codesake.com/knowledge-base.

You can use facilities provided by github to submit bug reports, product enhancements, new security checks you want to me to add in future releases and even success stories.

Now it’s time for you to install Codesake::Dawn version 1.0.0 with the following command and start reviewing your code for security issues:

$ gem install codesake-dawn

Enjoy it! Paolo - paolo@codesake.com
It makes sense if it fits your workflow. We're using Google Docs and are pretty happy with it. For signing we're using PandaDoc (https://www.pandadoc.com) and it saves a lot of time as well. It's really hard to imagine that I'm doing printing, signing and faxing it back with paper nowadays. If tools help you to be more productive and save time, that's the way to go.
I run a couple of language learning sites. Doesn't make me rich but pays the rent. :)

https://www.antosch-and-lin.com/
The only thing necessary for the triumph of evil is for good men to do nothing. ~Edmund Burke

As someone who wholeheartedly agrees with Snowden being one day vindicated as a hero, it's tempting to nod my head silently and move on to the next article.

The problem is the critics. They will be vocal. They will openly condemn Snowden. Many have never done anything courageous in their life or stood up on moral grounds. Morality is just an antiquated concept to them. Just another word to dilute and distort.

So I'll speak up and say that Snowden is a hero, and I'll take one hero over a pack of cowards any day.
>I don't understand this article.

Blog post.

> they can't possibly draw conclusions about exactly what Snowden did.

Anyone can draw a conclusion from an event they have observed. They can't draw conclusions about the future conclusions of others (ie: what side 'history' will be on.)

>Snowden himself has made it clear that he took documents from NSA en masse, far more documents than have ever been disclosed in the media.

So?

>In Greenwald's case, that's because it was decided that a titrating drip of stories would keep the narrative alive in the media...

Don't you imagine that it is a non-trivial task to vett these documents, so in addition to having the practical benefit of prolonging the time that the material spends at the "front of peoples' minds;" it is a necessary condition of the situation.

>There are places those documents can go that will alter history's judgement on Snowden.

Be careful, you can't possibly draw conclusions...

>(Barton Gellman is not in hiding in the US, for what it's worth)

Barrett Brown isn't exactly having a great time in the Homeland.

>Unfortunately, the author of this blog post ...

It's an opinion piece. I'm not even sure there is anything to argue here.
Using Sketch for creating an infographic
It already astounds me greatly how much common people don't know the basics about EM fields when we've essentially been immersing ourselves in them for over 100 years.

The main danger is power level causing heating/burns - and a microwave operating at 1000W+ is going to do that far more easily than a router with 1W at most.
The comedic part is how out of date technologically that is. I was going to scan the account update form, edit it on the computer including cut and paste my signature in, then hook up an old fashioned modem to send the tiff just like I used to send FAXes in the 90s. But I couldn't find an analog line and working modem so I ended up emailing them the heavily edited scan, which they accepted.

In the heyday of modems perhaps 20 years ago, this was "normal" if you already had a scanner, you could send faxes using most higher end modems, like 14.4 and faster. So this has been technologically obsolete as an authentication system for a couple decades.

I believe the belief comes from the bad old days of itemized long distance billing. AT&T will send a bill to me proving I sent "something" to them so if they claim I didn't, then produce what they claim I sent. Sorta registered mail service, kind of. But itemized long distance billing is dead.

For HN readers too young to know what itemized long distance billing is, before the modern era of "all minutes are free" you'd seriously, no kidding, get a paper bill listing all your interLATA phone calls and what they cost.

Wash DC 202 123-4567 5 minutes daytime rate subtotal $10

The kind of thing seen above.
Actually most apps on the mac coped pretty well — the big exception was Finder (ironically) which would screw up your desktop and window layout every time.
I know you are kidding but the pod/cup 'coffee' makers support tea too, now that is certainly convenient :)
Why the next Zuckerberg or Gates cannot come from India
Board Director?
Does this let you do anything on the host OS that you could do with a node.js library?
Absolutely (a hidden law degree or a second hidden camera, perhaps), but being in a dark room and someone reading for your head and grabbing stuff off of it is a fairly serious threat; it would be easily misinterpreted.
I don't understand the text on the website. Is it some kind of attempt to look funny? "
home.whatever.p", "HOME.ELEGANT-AND-FUN.LI3.HEADING"... ?! Or is the website completely busted right now?

Edit: What it looks like to me and everyone I asked to have a look. Big bug. Can't even see the pricing. http://imgur.com/ydTIPso
"It's a legitimate request"

I don't think it is personally. Their transparency is in the updates to their software. If you think the updates don't correlate well with the level of contributions, than don't contribute.

Having to justify every expense would be extremely burdensome, and would only detract from running a productive foundation in my opinion. Would we ask Microsoft how it spends all the money we give it in exchange for a copy of Windows?

I think maybe if this was a cancer foundation, it would make sense. The results are harder to see, so you might legitimately be interested in seeing where the money goes.
Nice! WRT to the icon, you should add stereoscopic imaging (red/green style) to geek out even further!
Nice website, recommendation seems kinda cool, but I'm sure like most people here, I don't see this going too far.

>That’s why you’ll never hear an ad on Beats Music.

Yeah, that's not lasting.
Except for the 'revocation code' briefly mentioned on their FAQ page[0], this is likely just the same authentication scheme offered by Clef[1], with all the same inherent weaknesses.

The biggest weakness in these schemes is the inherent potential for a MITM to display the QR or bar code (I still don't think Clef actually displays what site you're logging in to on your phone, and even if they do it's vulnerable to visually similar URLs). The bottom line is the lack of authentication between the phone and the browser.

The on-device encryption is also useless because the key is such a short PIN.

[0] http://www.capturein.com/FAQ.html
[1] https://getclef.com/
Pedantic twitch. You wouldn't need the "I"(integral) in PID as we can only drive the system one way. You hardly need the "P"(proportional) either, if you are just trying to figure out when to shut off the power. That leaves shutting off the power based on how fast the water is heating up. So really just "D"(derivative) control. Which is super simple. ... and that is even assuming that there is enough thermal mass in the heating coil compared to the thermal mass of the water to ever make a difference.

It is gotten to the point where I get a twitch whenever I see someone refer to the PID concept. In most cases it gets used in an inappropriate way.
For profile pics: http://randomuser.me/
Show HN: Add subscriptions to Desktop Applications (integrates with Stripe)
Global.beatsMusic | home.title
It does. File system, databases, requests, whatever. At least I am not aware of edge cases currently. Only be aware that C++ node.js modules are incompatible with node-webkit, you have to build these modules with nw-gyp. A little inconvenient, but should work fine.
> Plagiarism isn’t a crime

Copyright...?
Is mining Bitcoin still proficient (except for ASIC makers, huh)?
Actually, they were very enthusiastic about the project from the word go - the fact that it's considerably different to the run of the mill short film was a significant draw, I think.

I think that hacker types like us underestimate just how novel the approaches we take can be for people in the outside world, as it were.

Joanna put it best, IMO:

"There's an old phrase in acting which is "stay in the boat." As things change, stay in the boat. Don't go 'oh, I would never dream of doing that' or 'oh we didn't do that, I haven't been trained'.

Just learn and stick with it and find out how it is going. Because you'll be able to find that a) you'll be able to contribute quite a lot more than you thought you would, but secondly you can't afford to be divorced from new methods of entertainment."
With all due respect, aren't the hypothetical abuses of Snowden files ultimately just FUD at this point? Snowden's public statements have given the impression that he cares deeply about the U.S., giving me the impression that he probably isn't going to intentionally release the documents to those that would seek to abuse them.

However, I would be very uncomfortable with him giving full access to the unencypted stash to a place like Wikileaks. But still, I think innocent until proven guilty of mishandling his stash should apply.
I thought Dropbox implemented some type of local lan sync?
Are you sure the trademark filing is based on a foreign filing and not on a foreign trademark? Meaning they got the trademark somewhere in the EU? That would make more sense.

Anyway, it is absurd, and everyone involved (applicants and those who approved it) should face defenestration.
You're risk adverse, aren't you?
Hi, I was checking out your project. Do you mind if I ask where you got the list of universities and the URLs?
I had this, it got boring real fast. The money wasn't great. I could live on it but there was no future prospect. A slow career death if you will. So I took a harder job, with higher pay.
The Boing Boing reference irked me more than I though it would. Guest posting is bad unless you're a brand we've heard of? Sorry but the line between spammy guest post on some anonymous blog isn't far from the trash that gets posted on legitimate blogs.

The rules should apply evenly to all, no matter how well we know the brand. Google seems to violate this when it comes to respected business models. If you toe the line and Google hasn't heard of you? You're done.
> It's well agreed upon that paper trading is nothing like trading with money on the line. It's ALL about psychology.

It's also pretty well agreed on (mainly from scientific studies into the actual results of investors) that this is not only bullcrap, but believing it's true was a major contributing factor in the enormous economic disaster we're all still living through right now. I'd like to say how galling it is to see someone hasn't learnt the basic hubris-based lesson we paid so much for -- except that I really can't express that in words adequately.
I can assure you as my wife and I are starting into the rental business that leasing a residence is not passive.
Saving Browser-based SVGs as Images
m3.medium only has 4GB of storage? Is that a typo? Why not the standard 8GB?
That'll make it unusable for my AMIs. The m3.medium is $0.113/hr for 3 ECU and 3.75 GB RAM, while the m3.large is $0.225/hr for 6.5 ECUs and 7.5 GB RAM but 32 GB of SSD storage.
I'm not so sure I'd sleep well knowing my business relies on Facebook as opposed to Google. Talk about a choice between two evils. Diversify!
>Apparently the CIA got wise to his attempts and shut him off.

Maybe the CIA sent him. It happened in the USSR (that intelligence services NKVD, KGB, GRU, etc, competed fiercely with each other).

>The NSA wasn't so lucky.

Good.

>But we would be foolish to discount the possibility that all of this is a huge smokescreen for a concerted and consistent attempt to weaken or expose US intelligence operations.

I agree. You make a good case for having a clearly defined separation of intelligence services, and lots of checks.

>The fact that an impingement of our sources and methods helps our adversaries cannot be understated.

It can be overstated, and it has been. Also, what adversaries?
Commenting on the comments, not the original post. Seems to me there's some confusing of issues going on. MLK vs Snowden is not a reasonable comparison -- one was a lifelong activist and the other is a first-time whistleblower. Their roles and goals dictate different actions, including whether to stay put or run, among other things. Secondly, the issue of the legality of NSA actions versus their constitutionality is quite different. Laws can be found unconstitutional. So while the NSA was ostensibly following the law, Snowden claims they were violating the constitution. One does not invalidate the other.
I am working since 1994 and I can ensure you that the amount of paper produces has never stopped reducing. We have shared directory where we had many shelves.

Paperless office is not yet there, but it is always improving. For example, I am changing my bank and my main complain against my previous bank is that it was too much paper.
Turncoat - Douglas Adams (2000)
Now let's get rid of JS, HTML and Node and we are onto something!
It's all very important and necessary. Only the sheep-like are ok with a government that operates in secret against its own citizens. They have pitted themselves in an information war against their own citizenry. Like corporations amass patents, our only weapon to defend ourselves is as much information as we can gather about them.
Riiiiight.

So the local IT guy goes looking for vulnerabilities, finds them, SAYS he tried to alert people, then runs an EXPLOIT, and he's mad because he got a ding in his personnel file?

He did know that he was working for an intelligence agency, right? In what world is it acceptable to run an exploit on your company machines if it's not your job to find those exploits? A little Occams's Razor goes a long way.
Will Gradle ever expose an API so developers can use the same language for the build scripts as they do for the projects they're building, i.e. Groovy with Gradle for Groovy projects, and Scala with Gradle for Scala projects?

The Gradle overview at http://www.gradle.org/overview says "The Gradle design is well-suited for creating another build script engine in JRuby or Jython. It just doesn't have the highest priority for us at the moment."

Perhaps if Gradle easily enabled any JVM language to be used, there'd be far greater uptake. There's a few of us out here who don't like using Groovy.
This probably puts you at even greater risk, since the intelligence folks don't even have the pretense of rule of law once you're outside the borders. That, and the Nordic countries have traditionally been very friendly to U.S. req^H^H^Hdemands for information.
Secular Stagnation - Posner
It's busted in firefox here, works in chrome.
Very useful resource!

I'm curious though, where did you get your Hispanic names from? Seems like they come from a database of funny, weird and probably offensive names. No one is called like that in Spanish-speaking countries, and yes, I know the names are supposed to be fake, but just comparing the Hispanic with the American ones, you can tell there's a big difference.

Whether or not is intentional, it could be even more helpful if you use "normal" names.

Disclaimer: I'm Hispanic.
so will they allow the app now?
Graph DBMSs are gaining in popularity faster than any other database category
does it? Didn't require anything for me..
Not a fan of Beats. Tried a pair of their headphones in a shop and they sounded terrible. Build quality was flimsy as well. I think the only new thing they bring into the market is style, and that's not enough for longevity imo.

This new service, $10 a month. Not quite sure what it offers over Spotify. Anyway, past experience with their product means I'm just not going to be interested in this.
I thought you where joking.

Noooo-pe (archer style) http://imgur.com/96o4ZvL
Eh, weird. Here, it's busted in chrome and works in FF.
If there's a buyer for $100.01, selling it for $100.01 isn't "stealing" your ability to buy it for $100.00. That's just a more efficient market.
You might give more credit to the hundred or so people (all the equivalent of our PhD graduates today) who were doing the actual work for him.

Edison's contribution was to pay them enough so they could eat and live, and point them at a project.

And Edison's an even more interesting example to bring up in a Jobs discussion because of the whole history between himself and Tesla (and if nothing else tells you about the man's character, the elephant-electrocuting nonsense during the current wars would tell you all you needed to know).
>No prizes for guessing how that scene ends.

Snowden has the same kind of insurance policy against the Russians. (the plot thickens)
Neat. An Objective C bridge to access OS X's frameworks was specifically what I was thinking of, and it looks like there is one: https://github.com/TooTallNate/NodObjC
This works. They use your MAC address of your network adapter to differentiate referrals.
Ask HN: How to find my first hire?
Hi everybody -

I'm a first-time entrepreneur in NYC preparing to launch my product over the next few weeks. It involves applying some very interesting algorithms and data analysis to the wedding space (not traditionally a high tech space). I've already been approached by a few companies about licensing the algorithms in other markets.

I've spent the past year bootstrapping the product, however, not having previously worked in the tech industry, I've found it difficult to get plugged in enough to find people to hire. I'd love some suggestions on how to find good people.

The product is built on Mongo/Node/Backbone. Beta-tester feedback has been awesome so far: "I wish I could put into words how great it is.", "It's the same sort of rush when you get a 'like' on Facebook or Instagram", and "love this!!"
I hear about this first-hand from a Badoo support 'insider': Besides the occasional obscenity, which one might expect from such a site, the constant fake profiles used by scammers -- which are always almost exactly the same -- is a real problem.

I understand that naively blocking by IP, or something else attempting to associate rogue users uniquely, is never going to work, but how about some heuristic approach? Or -- even easier -- do it like StackOverflow: only allow certain privileges after the user has garnered an appropriate degree of trust.
Ten Tips for fighting patent trolls
It looks like it has some Sweden-specific stuff, and adding in English-speaking countries would require knowledge of their tax systems. I suppose you could do an English version for English-speaking people living in Sweden who don't speak Swedish, but it would likely be a tiny niche market.
If you are interested in creating a FreeBSD image for the Raspberry Pi, take a look at crochet [1] which is a script that pretty much automates the steps outlined in the wiki. In addition, it can also be used to create images for Beaglebone and other ARM (and MIPS I believe) platforms

[1] https://github.com/kientzle/crochet-freebsd
If you believe in the concept of "degrees" of torture, at least. It's all wrong on every conceivable level. You don't need to ever lay a finger on someone to break their mind and leave them permanently damaged.
Hmm no API available (unlike randomuser).
We need automated faking!