skysight-inc/HackerNews huggingface dataset:
Is that actually how it works? Not having used Uber, my understanding based on articles is that it does not work like an order book at an exchange, where the price is determined by where buy and sell offers cross. Instead, Uber basically dictates the price, and then whoever is happy with that price will be matched. Correct me if this understanding is wrong.

What this means is that, as a first approximation, it is Uber that sets the price, not "the market" (whatever that is). Obviously, Uber still needs to take into account how both drivers and passengers react to the prices, but those are second order effects, and the resulting price is quite likely to be different from what you would get with a neutral platform that simply matches order books.

In the end, I guess this all boils down to the truism that "the market" does not exist. There are many, many different markets, all somehow defined by the rules society sets up for them, and the resulting prices and relative benefits to participants necessarily depends on those rules.
Ask HN: Do you look for an ideal Job? 
I am a software developer from India. I worked for multiple companies in India and most of them very VERY mundane work. I hated working for the outsourcing companies.
Then I joined a very good startup, extremely talented team and worked there for two years. Though the startup is going strong, I wanted to leave India and go west to find a job with better money and life.
I consider myself above average for the skills I work on and this company quickly hired me and put me in their office abroad. It’s a pretty large organization.

After working for startup for a few years, I find the work environment in this company too slow. Full of unnecessary meetings. Lot of politics. People making up stuff to sound like they know what they are talking about. Most importantly, I crave to be around the people who just get the work done. From experience, I know that that's the best way to learn. Be around people who get things done and soon you become like them.
The company invested good money in visa and stuff. Now I can get another job. I already found some startups interested in me. But I am in a dilemma whether I should. What would you do?

I am also worried that if I stay here long, I will lose the excitement of learning new things. The excitement of being part of a team which takes on challenges and solves them. I am worried that soon I will become just another employee and lose the spark.
I see a lot of talented people here. People much more talented and motivated than me. Do you settle? Or do you keep looking for the kind of work you want to do? Even if it means changing multiple jobs.

Note: I have already had 4 jobs in the past and this is the 5th one. In about 8 years. You have to understand that the startup culture/scene is new in India. Until 3 years ago, except a few, it was all outsourcing. You just picked one and worked for them.
Best Way to Teach Programming to Children?
It doesn't matter if they show "responsibly disclosed" all their repos are publicly available to see, it takes one person looking through commits then going wtf is this followed by a quick look at the code and a blog post to make this a wildfire.
Seems to me that this can only work in countries with little in the way of job protection.

If you want to get rid of someone in most EU countries, it's going to cost you a lot more for them to sign away their rights by quitting. From that perspective, this is just an attempt to get rid of people cheaply.

But exactly those people you actually want to take the offer won't, they are much better off forcing their employer to either fire them or make them a better offer.
Sorry for jumping a reply on this reply, its not connected but all the other reply buttons are missing?..

Go check out the architecture/industrial design realm. Paper mockups, foldable concepts, foam, clay, legos....there are a myriad of techniques to create the physical form.

Then if its electornic you have arduino/sparkcore/etc. etc. Sooo many ways that you can move through, whether its purely visual, 3d printing, etc.

Really I'd say don't jump into the 3D modeling environment. Jump into clay/foam/blocks/glue/crafting. Spend a little time there first, then get into the more precise realm. You'll thank yourself later. Iterate and develop, its the sort of thing the creators of NEST did.
Why? If I'm running late to an appointment I will be willing to pay more than someone who is heading home from work to unwind and is in no particular hurry.

I love the concept that my fate is in my hands. It's not a matter of skill or chance in hailing a cab. I'm given all the information I need to make an adult decision and get to choose if it is worth it or not.

Sorry, rereading that some of the language gives a condescending tone which is very much not my intent.
On one side I'm extremely happy that this might come to pass (might is a keyword in immigration legislation) because I personally know people who have been affected by this and can't work even though they're there. It's extremely frustrating for them to say the least, and extremely silly that people who want to be productive members of society can't.

On the other hand, I'm not sure how fair it is to all the people who applied for an H-1B last year and this year who were forced to participate in the H-1B lottery and couldn't get into the quota of 85000. Now one winning lottery spot could be worth two workers instead of one. Who's to say that the spouse, who didn't even have to go through the trouble of finding an employer, convincing them to sponsor, applying, waiting for the lottery results, etc is more deserving of a work permit than those who did but just weren't lucky enough to win the quota lottery?

I'm ashamed that I'm thinking of something so petty when I should be happy for those people, but having lost the lottery once, I can't help but feel a small tinge of jealousy and resentment.

I would be happier if none of this was an issue in the first place.
Length could be encoded differently, as a varint. As long as the highest bit is set, the next byte is also part of the length - just left-shift the result so far by seven and add the 7 lower bits, as soon as the highest bit is 0 we have the final length.
The processing overhead is low, 127 bytes only cost 1...
Not such a big issue.
Unless you're willing to move the burden to the programmer, to prove correctness.

Bugs can always be found statically, but there may always be bugs that evade all the static analysis you happened to do.
I'm not allowed to work on weekends? Thoughtful, alas.
Great piece of code!!!
Thanks
Resistor is more than resistance. There is also other characteristics like power capacity, accuracy, tolerance, frequency responses, temperature coefficient etc.

The cheaper resistors are typically very loose for most of these characteristics. A tight characteristics means a high level of quality control at manufacturing, and this is usually lacking for the fakes.

For Op-Amps, the interesting spec is their frequency response as the op amps are not typically used in DC situations.
No, it works like this: everyone gets their fix ready hush hush, and on an agreed date it's made public, and vendors hit the "publish" button more or less simlultaneously.
Interesting - like most new marketplaces this seems to be a "winner take all" situation. The online marketplaces really tend to converge into huge monopolies by virtue of network power.
>We were talking about EU/government mandated retention of IP + header[0] information

The beginning of this thread, the first comment you replied to, was me talking about the IP information in particular.

>However, this is an entirely different situation! Omegle is not an ISP.

Omegle's reports would be much less useful to law enforcement if they couldn't subpoena ISPs to track people down from their IP addresses.

>it also turns out that you can't tell from "logging IP addresses only" whether someone is a child rapist or not.

That's also why logging IPs only is less of a privacy issue: the data is pretty much only useful when you're investigating a specific crime.
Show HN: The Best Wordpress Deals
I'm not sure why, exactly, but a few months ago it took a notable leap in usability. Today, I use it for everything, and it works superbly.
Attitudes like that involve neither thinking nor research.
> Or how it is fair to the guy from random tiny country X when he has to compete against two largest sources of immigrants to this country.

Compete for what?
Its not just counterfeiting that is a problem, but also recycling. Real product, but used: http://spectrum.ieee.org/semiconductors/processors/the-hidde...
One of IV's related-but-unrelated companies, Lodsys, sued a ton of developers for using Apple's purchasing API, despite Apple themselves having paid for a license for that patent.

I can't imagine Apple counsel was very happy about that.
I don't know personally, but the project I work on (MCServer, an open source Minecraft server) implemented it as a replacement to CryptoPP recently (we needed SSL support with a sane license) and it has been working fairly well. Even when a feature we needed wasn't implemented, the maintainers quickly added it and were nice to work with.
After writing my comment I went looking for a summary/analysis and discovered how recent the news is. There was really nothing out there.

Speed of dissemination definitely trumps ease of reading, so, yeah, I was wrong. The OP clearly should have linked to the source here.
f# multiple implementations (comprension, partial, parallel)

//array comprehension
let squareVec vector = [| for x in vector -> x ** 2.0 |]
squareVec [| 1.0; 2.0; 3.0 |]
[| 1.0; 2.0; 3.0 |] |> squareVec

//inline function
[| 1;2;3 |] |> Array.map (fun x -> x * x)

//extract function
let square x = x * x
[| 1;2;3 |] |> Array.map square

//partial
let squareVec3 = Array.map square
[| 1;2;3 |] |> squareVec3

//partial
let pow x y = y ** x
[| 1.0; 2.0; 3.0 |] |> Array.map (pow 2.0)

//parallel
[| 1.0; 2.0; 3.0 |] |> Array.Parallel.map (pow 2.0)

//can use SIMD on mono (next version on .NET too)
//no first hand experience, but can also use GPU from F#
I prefer the direct link.

The document isn't dense. I found it pretty straight-forward, actually. It isn't short, but unless you are a member of the "tl;dr" contingent, the gist is pretty easy to discern.

The trick is that things like "Count one charged Auernheimer with conspiracy to violate CFAA § 1030(a)(2)(C) and (c)(2)(B)(ii)" translate to "Count one charged Auernheimer for breaking a law" and things like "See Perez, 280 F.3d at 329; see also Rodriguez-Moreno, 526 U.S. at 281-82 (citing Hyde, 225 U.S. at 356-67)" are references that you don't need to resolve in order to understand.

It also helps if you can translate things like "It is far from clear that this Court has ever “adopted” this test. We have mentioned it only once." into "oh no you didn't".
Uber is in the position of a network provider, and hence in a position where it can naturally become a monopoly via network effects.

Any market with network effects has high barriers of entry and therefore reduced competition, unless regulation exists to lower the impact of network effects (e.g. mandating interoperability).
"To enhance the potential punishment from a misdemeanor to a felony, the Government alleged that Auernheimer’s CFAA violation occurred in furtherance of a violation of New Jersey’s computer crime statute, N.J. Stat. Ann. § 2C:20-31(a)"
“Resist complaining about being downmodded. It never does any good, and it makes boring reading.” Please.
Haha awesome! 10 minutes, I'm glad you lasted that long :) I hope it's the best JS you've ever written :P

I haven't contacted them, no. I've been meaning to go to Brighton though as I hear the tech scene down there is actually very interesting indeed. Thanks for the link, I'll get in touch!
Thank you Mr. Mehta wherever you may be. Thank you for your fantastic audit skill. You are unknown super-hero working against dark forces.
Yeah but do these downloaded software meet the following criteria:

- Insanely cheap ($10) where an employee would be willing to pay for it out their own pocket.

- The software actually makes the employee/departments life easier.

- The downloaded version doesn't contain any crippled support.

Atlassian's whole approach to enterprise is to create internal advocates. They don't care about the revenue that is generated from a $10 sale. They just want to plant seeds in companies so that when they do end up purchasing more than 10 user licenses, they know they can charge a shit load more.

I'm not sure if Atlassian is the first to implement this pricing model, but I believe it is the future for most enterprise sales.
$5,000 Security Breach
Really? I see job postings here all the time...
Yes, you can. It is configurable, see i18nJs.js file and more in detail the function isHoliday(date)
That is somebody trolling you by modifying their request headers.
Yes, look at Rogaway's license for OCB mode.
Oh man. I haven't eaten a donut in years. I'm going to go get one now.
Many projects that care about performance and memory fragmentation use per-purpose free lists, and not malloc/free.

The performance is significantly better, and there is a much smaller danger of running out of space due to fragmentation issues.
Whoops, too late. Were you able to get that info from actually running the exploit?
Surprised this isn't a more popular response.

Vagrant/Puppet for local development

* this way every developer has an identical dev environment.

Git for code versioning - Github/Bitbucket for repo hosting

* each feature has a branch, then we use pull requests for review/merging into staging branch.

* when features are LGTM and tested, pull request to merge into production branch

Capistrano with multi-staging to deploy to staging and production servers

* every developer can deploy to staging

* only a few developers can deploy to production.
Show HN: GreekSquare – A web app just for Fraternities and Sororities
> To a degree. This only applies for being tried in NJ for the same crime.

No, because this wasn't a prosecution under NJ law, it was a prosecution under federal law, in which the violation of NJ was an element of the offense. So double jeopardy prevents any further federal prosecution for the same offense, but doesn't prevent prosecution under state law of NJ or other states (even though the court here found NJ law did not apply, federal circuit court precedent on state law questions is not binding on state courts.)
the one where companies make money.
I enjoyed the recollections. I probably would have been afraid of his shadow if I was there.

On another note, it would be interesting to see if a website containing all these memories of Steve Jobs ever comes about. A crowdsourced biography if you will: storiesabout/stevejobs .
This is fun, indeed.

Has anyone already made a patch for this bug, where the lib returns random data instead of actual heap chunks?
For a country founded on the "self evident truth" that "all men are created equal", it is really sad to see discriminatory lines based on the "country of birth" [1]. It's not even based on nationality, but on country of birth, so applicants are effectively being considered "created differently" depending on random circumstances at birth.

[1] http://travel.state.gov/content/visas/english/law-and-policy...
It's actually based on a real life example that happened to me personally which cost myself and several other people their jobs.

In my experience there are some Russians who come here expecting to be able to be openly homophobic which, as I can personally attest to, is a recipe for disaster.

I've worked with lots of Eastern Europeans and many of them have been perfectly accepting of my orientation and the vast majority treated me respectfully though.

Unfortunately, when you move from a society where being gay is still considered a mental illness by 70+% of the population, you can't assume that everyone is just able to leave that behind when they move.
I met him once at a Node.JS bar/podcast talk about 2 years ago. He looks just like his Twitter picture. Could still be the figure head of a bunch of people I guess.
There's this hackership thing in Berlin as well... http://www.hackership.org/
We will add a $10,000 bounty for the first published and confirmed successful completion of this challenge.

Conditions:

1) CloudFlare confirms success.

2) The winner publishes their solution, including source, publicly.

3) Promptly send the link to the publication to [adam | ionicsecurity | com] (for tracking the order of submissions)

Good luck!
The reality is that null-terminated strings are dramatically more expensive than strings with a length counter in every regard other than memory usage, and the memory usage overhead from storing a length value is utterly miniscule compared to the actual size of the string. Even if you ignore all the secondary costs that result from the decision to use null-terminated strings, they're just poor engineering. There are far better ways to save a few bytes.

(By secondary costs I mean things like the myriad bugs caused by null-terminated strings, the severe performance penalties involved in copying and manipulating them, the unfortunate implications they have for file formats and network protocols, etc.)
Appeals court reverses hacker/troll “weev” conviction and sentence
For a company like Amazon a few months probably isn't significant in the grand scheme of things. They don't operate like a startup that is constantly a few months away from failure. Plus they have a lot more employees to fill in the gaps.
I'm kind of sad that this is a throwaway account because you're posting good responses, that are technically competent and are actually specific to the bug discussed in the article, to people who are either less informed or are talking about their vague general understanding of vulnerabilities rather than reading the article and actually discussing its contents.

Your posts are exactly the kind of thing I _want_ to read on HN. Is there a particular reason why you feel you can't post this under a general-use account?
They did comment on something else than venue, though (page 12):

We also note that in order to be guilty of accessing “without
authorization, or in excess of authorization” under New
Jersey law, the Government needed to prove that
Auernheimer or Spitler circumvented a code- or password-based barrier to access

[..]

The account slurper simply accessed the publicly
facing portion of the login screen and scraped information
that AT&T unintentionally published

(If NJ law demands breaking a password, that seems to run counter to the idea they picked NJ for its law, or was that concerning some other charge?)
I should have been clearer; it doesn't amaze me someone self taught could do it, but it does that CS major couldn't.
Good. CF should not send you the IP address. If they sent the origin IP address to any random person with a DMCA claim, their service would be useless, as attackers would just send any old DMCA, demand the origin IP address, and DDOS that.
Circuit Board Turns Wearable Tech Into A DIY Project For Anyone
Twitter a terrible RSS replacement.

With RSS I just got the news/blog posts I care about, nothing more. Following people on twitter I get some good links but mostly a lot of noise about personal life crap I really don't care. Normally I stop following someone if the valuable links to noise ratio gets too low.

#notinterestedinwhereyouaredrinkingtonight
Yes every allegiance has a price , however What you're suggesting from what i understood is that A16z would pay 50 million dollars to a new hire. With them being in the VC business , i think they know that , such amount of money can possibly invested in growing their portfolios.

I don't have any evidence of any engineer being offered such exorbitant salaries , however this gets close.

http://www.businessinsider.com/a-google-programmer-blew-off-...

If you can find a reputed VC firm like A16z , whose looking to do what you propose (please post a link)
the real reason is probably that apple is a pattent troll themselves. why would they cross one target (microsoft, and possibly several other microsoft partners) off their list by joining this?

remember that not even patent trolls have tried to enforce design patents as IP before apple. They are really good at trolling. ALso, do not forgot job's emails to the RIM ceo during the valleygate.
Open Source Developers to Industry: Help
Oh, yes.

Like all the code I've contributed with no reciprocation demanded.
I understand what you are saying but that's not what I meant to ask. The signal I'm proposing is not red/blue, it is superposition/resolved. Maybe this is more clear:

1) On Earth, Alice creates two entangled particles, both in superpositions, and gives one to Bob. She tells Bob: 'If your particle ever loses its superposition and resolves, whether to red or to blue, press the button!'

2) Bob goes to Alpha Centuri, Alice remains on Earth.

3) Alice wants Bob to press the button. She does something to resolve her particle.

4) Instantly, Bob's particle loses its superposition and also resolves. Bob gets the message and presses the button, in much less time than 4 years.

Why wouldn't that work? I suspect because you can't determine whether or not the particle is in a superposition, but my understanding is limited. Maybe the basis of my question is wrong.
Turn Your Social Media Skills Into a Career
I tried them on a client project today, and they found some (minor) form post issues. the scan used roughly 1.5hr, which results in "incurred cost" of $4.75 (for their cloud ressources needed), and they suggest a 5x "gratitude" factor which I gladly paid.
Koa, if anything, will actually replace connect[1], which is the middleware layer that express is built on top of.

And yes, TJ built that too.

[1]: https://github.com/senchalabs/connect

EDIT: Looks like Express doesn't use Connect anymore. I'm out of the loop.
Yes, under NJ law, but the same opinion points out that the CFAA threshold is lower.
Thanks. I wonder would using something like this preclude me from including other peoples GPLv3 code in our software?
Why do you primarily use that as opposed to building in express?
lol TJ is real and too smart for his own good;)
I dispute that this is really all that ancient a view.

Christianity, for example, regards violence as only useful backed by supernatural aid, and doesn't see it as the only way to fight, only assigns irredeemable evil to supernatural entities, nominally prefers peace, and does not expect human agency (exploding or otherwise) to be sufficient alone. The 80s could well be viewed as a repudiation of christian ideas of evil.
Anyone with a shred of conscience would have resigned from the Bush administration sooner than later. The war against Iraq was against international law, since it was not sanctioned by an UN resolution, regardless of the war crimes commited. Unfortunately US officials are above international law, because the US has not ratified the ICC (international criminal court) treaty.
A security bug may well require enabling a feature, rather than disabling one, and then you end up with exactly the same problem.

I personally detest #ifdef's, and would rather have multiple .c files that I can choose from to include in my build. Code infected with #ifdef'itis is unreadable, difficult to test, difficult to maintain, ...
I wonder if one could use this server (or, of course, any other vulnerable server, but the hostname on this one is nice) for phishing people. For example, e-mail them the link, then try to snarf the referer header out of the server's memory in the hopes that their webmail URL contains something juicy, or give them a fake form that POSTs interesting data to it. Probably far-fetched, but it's amusing to consider.
Would not the companies be wary of hiring people on H4 considering their authorization to work depends on their spouses maintaining their H1 status ? There is an inherent risk that the H-1B holding spouse might lose their job.