skysight-inc/HackerNews huggingface dataset:
Discussion from five days ago: https://news.ycombinator.com/item?id=7130479

Also, apparently about mobile phone operating systems and written by a Canonical employee.
Microsoft twiddled its thumbs while the web grew up and around Windows using the technology the company introduced.
It was apparently written by a Canonical employee, FWIW.
What distribution are you using ? And what graphics card? I remember some issues with the first version of KDE 4, but since then I run it on Intel, AMD and NVIDIA cards, with open and proprietary drivers without big problems (AMD sometimes have glitches..)
If the startup is started by people in their early 20s, perhaps older people are less likely to work there because it feels weird to have a boss who is 10 years younger than you.
Please don't down vote him for highlighting the current situation.

The question wasn't "should startup hire..."

And he answered with what's happening in the field, like it or not.
If you develop a API that requires a key, is there any secure way of allowing third party developers to develop client applications that use your API?

It seems like a malicious party could just view the source of the client app and see the key and hijack it.
"Einmal mit Profis arbeiten!"
Nice article, Ross. This is definitely a huge issue that many developers face. I did a similar search for Twilio keys and many of those accounts had hundreds if not thousands of dollars worth of Twilio credits ready for use by a malicious attacker. It just comes to show how simple most of these mistakes are while still being very serious
This is seriously lacking data.
What exactly is this "Malicious Code Detection and Prevention" on Ubuntu? Or perhaps Application sandboxing?
My company uses BitBucket because of the unlimited private repositories. We are a small company with just a handful of developers, but our existing Subversion repository contains over 200 projects. Most are not really active, as in being developed. But the majority do get the occasional bugfix. Even Github's largest enterprise plan is too small to convert out Subversion repositories, because on Github you pay for the amount of private repositories. With Bitbucket we can use their cheapest $10 plan because they carge by developer, not by repository.
BitBucket has changed a lot, too. In fact I'd argue certain aspects of its UI are superior to GitHub's.
11 Amazon-inspired news headlines will dazzle you
Brennan here from the team. Mailpile is just a user agent. The app talks to GnuPG for crytpo. We follow the unix philosophy as much as it makes sense, but for the overall experience of an MUA that is easily searchable + allows sending encrypted mail, but also offers a modern web app interface- there must be a certain size + scope of project :)
Warning as potentially misleading: despite the large CESG logo, this is hosted at ubuntu.com.

The PDF summary is written by a Sales Engineer at Canonical Ltd.

The original CESG security guidance has a rather different perspective: https://www.gov.uk/government/collections/end-user-devices-s...
Developer Behind “Flappy Bird”, The Impossible Game Blowing Up The App Store
The thing is, what i'd class as "stupid ideas" can still become popular. Personally i still think that twitter and snapchat are stupid ideas. I think they're cool, fun and interesting for the tweens that use them but they're a stupid business idea, because the revenue models are an afterthought, which i dislike.
Rather than jump into a condemning remark like "That is a stupid idea" I simply say, "I don't get it". Then I talk the idea through with them while trying to understand why they think it is a good idea.

Sometimes I find there was some data I was missing. But, if I still believe it to be a bad idea, rather than tell them their idea is stupid I simply say "I'd never build that because of x, y, & z" which is an honest and unassuming statement.
Yes. That's true - if your source code is exposed to a client.
Going back to my example of Twilio apps, usually the code that interacts with Twilio is on the server side, so you couldn't find the API keys by viewing source.
>Windows and Mac don't have dependency management at all.

Not sure why you feel so compelled to talk about OSs I didn't mention. I was talking about the iOS App Store. In any case - apt-get, yum etc are third party tools that just copy, extract files from some server and run some pre-made configuration scripts. Thats all they do. All the hard work of figuring out dependencies, avoiding cycles, etc is done OUTSIDE the OS by the repository maintainers. You can do that on ANY OS.

>The thing about different repos with the same deps is solved with 'priorities', since its inception.

Different repositories which the user ads can and do have dependency conflicts. One package from repo-1 can require a lib with version >= 1.0 while another package from another repo-2 will only work with version 0.9, etc. I have often had to add add other repos to get software unavailable in current repos. I have run in to these issues quite often. And I am not even getting into how brittle apt-get in general is.
We need our Locke, Jefferson and Voltaire for the digital age
I heard that recruitment consultants usually get 10%.

"I'm also a decent programmer, in a cowboy crazy way." The second part of that scentence contradicts the first part. Or it does to me.
AWS Spotathon -Flux7 Labs PR
thanks the magnet. How did you download the video? I tried videograbber, flash video downloader, and download helper. All of them refused to work.
Main issue seems to me that Linux distros use the same mechanisms for installing/updating userland apps/code as for installing/updating system-level libraries and kernel stuff. It's never quite felt right to me, but has allowed and seemed to encourage the weird dependency trees that end up wanting replace entire GUI toolkits because a desktop app was compiled against a certain version of libfoo, which then blithely tries to update 900 packages on your system when you just wanted one little app.

This fear/anger/resistance towards static bundling in the linux world is the main culprit, it seems, and I don't think anything short of a cultural revolution in the linux world will change that. The last cultural revolution seemed to be a large mass exodus of desktop linux folks migrating to osx a decade ago.
Care to summarize? Each OS is a different document.
Most gear in WoW cannot be traded. If you want to buy the best gear, you wait for a guild to farm the content, then buy the gear from the guild by doing the instance with them. People do trade real money for this service, but it is understandably quite expensive.

Current-tier raid and PVP gear can show up on the Black Market Auction House, sold by NPCs. The BMAH sells a very small number of pieces during the few months it takes people to clear content. When I played in a top 20 US 25 man guild in T14-15, our BMAH was usually camped by the other faction, so we couldn't buy stuff anyway. It didn't make any noticeable difference.
The thing is, large corporations aren't many; they aren't one either, but they're a few. The number of powerful conglomerates in the US is comparable to the number of states (maybe double). There's plenty of power for each, and without a strong central government, those corporations will merge to form fewer, more powerful ones.

This isn't hypothetical. This was the situation in the US about 100 years ago when the robber barons ruled the country. And by the way, some of them did pay for their own police force (the Pinkertons) to fight the unions.
Earthlings Unite to Confront the Asteroid Menace
I know loads of hairdressers that have a good attitude.
Not unaware, so I very well may be a shill. I get the psychology behind all of this, I just don't find it particularly problematic, at least the bits that I interact with.

As I've said, the model I support within F2P games is mostly equivalent to the coin-op arcade game: you died but want another move? A quarter to continue. You ran out of lives? A quarter to continue (or wait a little while for free lives). You want to cheat? A quarter, please. There's psychology there, but I don't think it's anything very new or sinister - charge people straightforwardly for playing, in an amount that seems fair for the amount of entertainment they're getting out of it. Give them something for free with the realization that most customers will never actually pay, and try to please everyone because word of mouth is the best advertising.

Sure. The profit motive requires that we design games so that people have incentives to spend quarters (or rather, dollars for packs of whatever we're selling, since you can't charge a quarter on the app store, but it works out to about a quarter per "unit" - I'm totally against in-game currencies because they make purchases less transparent, and that's bad). That means making difficult levels, more or less. But we'd make ridiculously difficult levels anyways for design reasons, and our greater incentive is to make sure that people stay in the game for as long as possible, so we primarily worry about crafting compelling experiences that people enjoy, and don't feel cheated by. Freemium just means that we place the "pinch" levels more carefully than we would otherwise.

In my current project, skill still reigns supreme - while we do present increasingly difficult challenges to the player, we specifically avoid the type of RNG-based difficulty that Candy Crush leans on. If you fail, it's not because you got an impossible seed (which is often the case in Candy Crush, as I know all too well, as an avid player), it's because you could have done something better but didn't. Internally, we make sure that we are all able to beat every level without using boosts or any such nonsense; those are there merely to accelerate progress for the impatient, never a requirement.

Granted, we're all really good at our game at this point, so the difficult levels might be very difficult for normal people even if we can beat them, but forcing people to either get really good or pay money to progress is fair, IMO, and much less abusive than leaving it to randomness.

Maybe that's just rationalization, maybe we're actually doing better than other people, I'm not sure, that'll be for you to decide when we release, and it will be up to the market to decide whether we deserve money for what we're doing...either way, F2P is here to stay, and believe it or not, some of us really do want to make it as fair to players as we can while still working profitably within the model (we need to make enough money to stay afloat, and premium casual games do not do that). I'm 100% open to suggestions, as long as you realize that "go premium" isn't a realistic one, because we've tried, and it doesn't work anymore.
The problem with BitBucket is that they tolerated the blatantly misogynistic Feminist Software Foundation and their C+= repo for more than a week, whereas GitHub pretty much quickly removed them after complaints.

Even with the free private hosting on BitBucket, that controversy alone makes it an unsuitable hosting service for any serious software project.
"Do I simply walk away from Linux and systemd, or do I run screaming?"
Is this a local gig only? or are you open for remote freelancers?
There's not going to be any one line answers but the section https://www.gov.uk/government/publications/end-user-devices-... is illuminating.

Not least for recommending the use of TPMs for disk encryption
Business-oriented developers like familiar languages.
I think there are two root problems here; the first is human error/forgetfulness, and there's only so much you can do about that.

The second, which I see on a daily basis from a small number of my colleagues, is a lack of understanding about security - by way of an example, we distribute a script to commercial partners that I've regularly had to expunge passwords for our Subversion repo from. Trying to explain the problem to the culprit gets nowhere because 'well, they can't access the repository without using our VPN', which of course is very far from the point... but nearly impossible to argue against without lecturing.
Fighting is ok. Esp fighting back. It is, occasionally, necessary.

Fighting is not just violence. It is self confidence, standing up for oneself or for what is right.
The problem is that this misuse of power by the US government happens hand-in-hand with a power grab of the same scale by US corporations. Google collects similar amounts of information as the NSA, and certainly uses much more of it than the NSA does.

So you could say the US is facing two threats: government overreach and corporate feudalism. The question then becomes which of the two is the more serious, and more imminent threat? Considering American culture and history, and combining it with a sober, non-ideological analysis of the current forces affecting government and its structure, I'd say that corporate feudalism is a lot more likely, and a much bigger threat.
Faker.js: Generate fake data in Node.js and the browser
The article was written by a Canonical employee but not the study. If I were Canonical I would avoid writing/publishing such an article, as anything that the government recommends for security is probably seen by many as potentially backdoored.
Tolq - http://www.tolq.com - The Hague, Netherlands

Javascript powered professional crowd-sourced web translations. We are rolling in clients right now and we're looking for strong programmers to help us out, we're looking for more software engineers to back us up. INTERN, REMOTE welcome.

* Web / Backend developer - Our backend is mainly in Rails with some Node.js and possibly a bit of Golang pending. We're looking for a polyglot. :-)

If your interested you can apply by sending me a direct email at timon@tolq.com

STACK:

* Rails

* Node.js

* Selenium/Phantomjs for various testing/indexing stuff

* ElasticSearch

* ... and lots more
Yes this aired nationally on radio a few days ago and the poster failed to attribute. Faux pas.
Just viewed the source and found the URL to the .mp4, grabbed it w/ curl and threw it into Transmission.
Friendly grammar lesson[1]:

"Does" vs. "do" can be a difficult distinction[2]. Your choice depends on whether the sentence subject is singular ("he does like cake") or plural ("bob and alice do like cake").

A good trick to make the distinction easier (and to properly identify the subject, which I still find difficult in some cases) is to rearrange the sentence as a simple affirmation:

* Startups does hire above 35.

* Startups do hire above 35.

The only exception to this rule is that you always use do when the subject is "I," "me," or "you": "I do," "you do," "do you?", "do I?", "do startups hire me?," etc (even though "I," "me," and "you" are singular).

1. The vibe I've gotten from HN and /r/programming (and from my own experience communicating in another language) is that, in general, ESL individuals find it helpful for others to point out when they make grammatical mistakes. Hopefully JamesAdir feels the same, and actually is ESL (or I'm sure I'll come out looking like a jackass), so I apologize in advance if the above is not true in this case.
2. http://data.grammarbook.com/blog/verbs/what-does-or-what-do/
Another thing we (Twilio employee here) do, for our Client product, which runs on iOS and Android, we use a different form of authentication: we require a server-side component to generate a "capability token" which is signed by your main auth token. The capability token is limited in what it can do, and expires after a configurable amount of time, so if an attacker gets hold of one, the damage they can do is limited.

Of course, people can "cheat" and put their auth token and a capability token generator in their mobile app, but we try to discourage that use.
A Whirlwind Tour Of Web Component Tooling
It is partially due to assortative matching. Startups don't advertise to (or maybe even want) older candidates, while many older candidates don't actually want to work at startups. Laying blame just on the companies doesn't quite make sense to me.

Of the several hundred applicants we've gotten at Standard Treasury, the median age is likely a little less than the founding team (we're all 27-28). That age is likely even higher than most other startups that go through YC as we build enterprise software for banks -- it's not the sexiest topic in the world. Well, it is to me but you get my point.

We've hired some people that skew older compared to most other startups we know but that only seems to our benefit, frankly.
And what could management reasons be?

I don't get it from economical point of view. It's just additional work that doesn't bring any profits. Sole exception I could think of, is securing software-based limitations that "encourage" consumers to purchase more pricey devices. But it doesn't seem to be the case for this device - there aren't much of fancy hardware features hiding behind missing software options. One could probably solder an USB port (not sure whenever soldering and rebuilding firmware worth the savings from buying cheaper device), but I guess that's about it.
I remember paying ~ £5 in the 80s for 8bit games on cassette tape and considering it a bargain. I remember when Street Fighter II came out on the SNES ~ 20 years ago. It was priced at ~ £65-70 and people snapped it up (I DO remember considering it expensive, in relation to the normal price for SNES games which must've been about £30-40).

If prices had kept up with inflation, 'budget' games would be about £12; blockbusters, over £100. Games are well undervalued on app stores, and exploitative rubbish is the result. I've personally paid reasonable small amounts for some of the classic games (e.g. Monkey Island) and am on the lookout for good modern games at about the same price point.
I would straight forward look for skillsets and productivity(productivity includes guys availability i.e. whatever is needed) and attitude rather than age, Period.
KoL is something totally different, it started out as an attempt to create something that didn't exist and was more of a joke, now 10 years later it still lives on and to me it is one of the most enjoyable videogames I've played (and replayed) again.

Nothing even close to a major studio adapting an old hit to mobile platforms to squeeze out as much profit as possible.

When I found out that there was a mandatory quest at the altar of literacy to gain access to the chat channels of kingdom of loathing, I knew I was hooked. I even learned haiku to be able to chat on the haiku chan.
http://kol.coldfront.net/thekolwiki/index.php/The_Altar_of_L...
People who receive CT scans have a higher rate of cancer. This seems like a logical fallacy.

People who receive CT scans are more likely to get cancer.
So CT scans must cause cancer.

The alternate hypothesis are that people who are more likely to develop cancer are more likely to have a CT scan. Given the tiny number involved here (in absolute number of people who develop cancer after having a CT scan), is it not possible that these people had a CT scan because of early symptoms of cancer?
Fun fact: In the U.S., you can age discriminate (ie: not hire people under/over a certain age) all you want, as long as the person isn't over 40.

So you can certainly legally not hire people over 35 years old, as long as they're not yet 40.

Once they're 40, you can not discriminate against them because they're too old (eg: Fred can't do that job, he's 50 years old) or too young (eg: We can't hire Joe for the CEO job, he's only 42.)

Of course there are many reasons to hire/not hire someone, but if you're using age as a criteria, you are on very shaky ground legally.
that may have been the case 5 years ago, but i think technical literacy has gone up, and anything ending in .com .net or .org will be recognized as a website. Most people under 30 would recognize any name.tld as well since twitter use has popularized url shorteners with unusual tld.
The Highs Lows and Pitfalls of Being a Work from Home Professional
I'm having trouble if the ARD (or parts of it) starts dicking around with copyright restrictions. They receive a huge amount of funding from mandatory payments of all German households (you can try to avoid that if you're a poor student or poor, period, but usually you're (supposed to be) paying - by law).

It's really close to a tax to pay for their content, their infrastructure. Which makes sense in a way for me, I do want broadcasters that don't need to rely on 'what the masses want' alone to pick their content, ending with Big Brother and brainless idiotic stuff everywhere.

But there's power and there's responsibility. If you take money from ~every~ citizen/household, then you better release that stuff with a decent license.
Maybe they bill you later.
Now that's a great job interview question, because it's sort of a programming problem that also shows how a candidate thinks: formulate a letter of last resort. Knowing they'd have to work for a range of unexpected catastrophic situations, what are the priorities going to be and how will you make sure they're implemented if nobody's there to oversee them?
I'm English and that was still a fascinating read.

It was also the friendly "grammer-nazi" post I think I've ever seen.
Virtually all games I've bought recently have had this inane obnoxiousness. One of my favorite games was 'Choice of Romance: Affairs of the Court.'

You play it. You want to go on to level 2? Pay. Level 3? Pay. Not have to wait 20 minutes to start a new game? Pay. No ads? Pay. Start from level 2 or 3 with accomplishments you achieved? Well, it claimed to be free, but restore-from-save doesn't work, so you pay. Play it on your iPhone, Kindle, Android, and Chrome? Pay four times.

It was a great game, and I would have gladly bought the rest of the games, but it's both not fun to know I can either waste hours or get blackmailed into paying, and terrifying to see where they'll try to skin me next time...

I moved on, but I haven't found any really good games that don't do this.
That's exactly what I thought after watching the interview and that's why it is so sad that most of the American public will never see it..
I see this point a lot but who cares about vendor lock-in if it speeds up your 'time to market'.

Bizspark is especially beneficial if you were going to use the MS stack anyway or you have experience of it.
thanks. i've been watching it for a while

but, i always thought the main hell of personal email setups is that you have to deal with postfix or exim. which is why atmail was so great. milepile doesn't help me with that does it?

http://atmail.com/products/
MRI is very different from CT. CT use X-rays, which is an ionizing radiation. MRI uses a very strong magnetic field, and as far as we know it doesn’t increase the cancer rates.

The final images are quite similar in appearance (semi transparent films with a black background), but the underlying process is very different.
Ask PG: Add other top-level domains to HN's domain list.
It seems like whenever I type a comment or self post that includes a domain like www.somewebaddress.io the HN servers don't recognize/display this as a link. Is there a list of domain codes that the server recognizes, and is there a way to add new ones in? This will probably be a lot more relevant when the new domains from ICANN start making their appearance too.
And? Hairdressers can't work at start-ups?

I get very tired of comments like this that imply that working at a start-up or software company is somehow "better" than working at other jobs, especially those that require a reasonable level of skill.

Please don't look down on people.

EDIT: Hmm, I suppose the point is that a hairdresser doesn't have the range of skills a start-up should be interested in. But still, it reads poorly.