skysight-inc/HackerNews huggingface dataset:
Location : London, UK, Local, Full Time

Stack: Python, C++

Resume: http://www.markbrown.io/cv

Contact: contact@markbrown.io

I will be finishing my PhD, Friday 26th September 2014(!) in improving the timing performance of scintillator detectors[1]. My work is primarily simulation and experimentation. I'm interested in building and improving open science[2] and improving my domain knowledge of statistics and Python. I love interesting problems with real world applications and I hope to find a job outside of academia doing so.

[1] http://www.markbrown.io/research

[2] http://www.authorea.com/3692
They already use it. There was a Kotlin talk where they mentioned some plugins are now being written in it.
Lest I Forget
* It also alleges that Google bought the domain name "duck.com" as a way to divert traffic from rival search engine DuckDuckGo*

Amazing. I tried it, and indeed, duck.com goes to Google search. I'd like to hear a "no evil" reasoning behind this.
> The legitimate response in such a situation is to officially dodge the question.

That is absolutely, 100% not the case. Dodging the question, for this particular question is as much a leak of classified information as giving up the answer directly.

This is by the same principle used by hacktivists called the "warrant canary", which they think they invented: But the same thing happened to a CIA director (Helms?) in the 1970s and he did the same thing because the same principle applied back then too.
While I agree that numerous spelling and grammar mistakes can indicate a lack of maturity in writing skills, I also know that some of the most brilliant people I've ever worked with were absolutely terrible at spelling. One guy in particular was an amazing programmer. He produced libraries of code that were fast, efficient, and easy to read and understand. They were also very well documented. I know, because I went through the documentation and fixed the dozens and dozens of spelling errors. If I didn't know otherwise, I'd have thought he made a game out of how poorly he spelled words.

I can appreciate numerous spelling/grammar errors making you analyze an article with a bit more scrutiny. However, I can't think of a single example of an article with those kind of errors where I couldn't figure out from the content whether I thought the author really knew what they were talking about.

At any rate, I think there is a big difference between an article needing a little bit more scrutiny, and the article being "unsharable".
Your cert config on heroku is causing issues at taskflow.io
Facepalm. The email is, in fact, missing a u. jobs+hn@curriculet.com
Startup Tech Incubator Announces Biotech Experiments
I think most of the time you can trust people to do the right thing when it comes to the lives of others, when the right thing is sufficiently clear, when the fact that it involves the lives of others is sufficiently salient, and when there are not enormous incentives to do otherwise.
Depends on if you are willing to pay the fines to maintain your style.
But see, I don't want it. Then, one day, I do, because I'm working on something a bit different (or on the same thing, just with a different approach).

All those libraries buy me the freedom to do a bunch of different things. That freedom has some value, even if I never use it.
Check out changer.in -- they regularly hold PuneJS and are into a lot of the technologies you mention.
"Caring about its users" does not explain why prerolls have no relevance to the content of the video. Nor does it explain how invasive they are. Google could have used an Adwords like program for Youtube. And if it's really about content creators, they could let the creators keep all the money from invasive prerolls, which might reduce their prevalence.

I'm not complaining about prerolls. YouTube is free for me; prerolls pay for it. It is however patently ridiculous to even suggest that for Google I am anything other than a product and an eyeball to be sold. This blog post reeked with sanctimony and prerolls are just one glaring example of that.
Have there been any big successes from TCDisrupt's hackathon in recent years? I know it used to be a big deal, but the only thing I remember from the last one was the "TitStare" stuff, which doesn't exactly sell it strongly.
Yes, and these methods create an anonymous class at runtime. What's so hard to understand about this?
Another side effect of focusing on (b) is that it frees up the resources someone else (a runtime implementer) has to focus on (a) independently. This is just another corollary of "build it, build it right, build it fast".

In particular, consider the new MIO IO manager included in Haskell GHC 7.8. It's increasing performance of IO-bound lightweight threading by orders of magnitude... all performance provided completely for free to consumers of these abstract threading services who've spent all their time making their algorithms correct, not fast.
One of the design decisions that I deslike in Go, is that instead of providing FFI declarations like Object Pascal, Ada, D and many others, they require the use of an external C compiler.
When you are redirected from Facebook - either after clicking "Accept" or in an implicit flow - to the page with the next parameter, and that page redirects to attacker.com, then attacker.com will have access to the referer header†, which contains the access token. Using this access token, an attacker could extract the sensitive information from the victim's Facebook account.

† there are a few exception when referer header isn't shown, e.g. HTTPS->HTTP redirect, but an attacker could make sure that the referer header would be sent for the majority of victims
This is the 2nd part of the "we need lots of clean/carbon free energy" - a way of storing and transporting it.

Chemical fuels have a great energy density. Problem is, they dump carbon into the air when you burn them (and also basic pollutants).

So we just need:

1) fusion or similar "lots of 'free' energy"

2) a process like this to soak up that energy + CO2 + H2O and emit nice energy dense hydrocarbons

3) decent catalytic convertor/filter tech (we're pretty good on this at the moment when we want to spend the money?)

then we've got a long-term energy future.
> Didn't he get a salary of $1 a year without any backfire while CEOs of smaller companies tried it and got fined?

Yes, yes, no. It's very common and legal.

http://en.wikipedia.org/wiki/One-dollar_salary
I really like this comment. But I bet some folks gloss over a particular point of importance.

For me, there's a huge advantage in literally using tree-paper, either for code-reading, designing, taking notes, what have you.

It involves more of your senses, it's more tangible, every letter is written with more care and the medium is incredibly flexible (maybe I feel like drawing a circle on a whim, can't do that in emacs.)

It's better for scratch-pads than a text-buffer, imo.

Insights come more consistently and easily after iteratively marking up a printout. It's just fully-intuitive.
If you're okay with open headphones Grado makes a couple in that range that are very well regarded. My sr-80s have always treated me well.
Am I over-romanticizing the past, or wasn't QuickBasic 4.5 one of the great tools of the late 80s? I remember finding a library somewhat similar to Borland's conio and then experiencing nearly unlimited love as I could develop and deliver standard .exe apps with pretty decent looking interfaces in a matter of hours. The interface to QB4.5 pretty nice by the standard of the day.

TurboC was a very nice package, as was TurboC++. I really wanted to get TurboProlog, but missed the chance.
I would also add that there are height restrictions on "fences" as well. At six feet, there is a setback consideration in the front in my city at least.

That said at the bottom of the article:

My HOA won't allow anything like that, what do I do? (my neighbors would freak out, what do I do?)

There are many possibilities. Some people dig a trench five feet deep, fill that with organic matter and have something that is either flush with the surface or it appears to be only one foot tall (which is in the comfort zone of neighbors and HOA folk). Other people will build something that is 18 inches high the first year, and add a foot each year. Still others will have so many neighbors build them all at once that it is difficult the buck the tide. And then there is always the back yard.
While I think the "solitary confinement in Guantanamo" assumption is probably off-base, certainly he'd be in a tough situation somewhere, and he probably did make the right choice. I definitely wouldn't have had anywhere near the courage he has shown in his whistleblowing, let alone the courage it would take to face the punishment.

Nonetheless, I'll expand on what I meant by "popular"; in the mainstream his flight is seen as evidence of guilt, and the particular countries to which he fled cast even more of a shadow on his intentions. Lots of people I've talked to think he must be an enemy because he fled. Martyrdom is always terrible for the martyr but often better for the martyr's ideology than the alternative. You're definitely right that he's having a continued impact on the discussion, and perhaps that does make his exile a net positive for his ideology. But the people I know who think he's a traitor who betrayed his country before seeking asylum with its enemies don't tend to listen to what he has to say.
Be it resolved state surveillance is a legitimate defence of our freedoms…
I'm currently reading "Inside Apple" by Adam Lashinsky and even though I knew Apple was secretive and Jobsian and intense, I never knew the extent of it. If you want to read more about pushing boundaries, read Inside Apple.
You're absolutely right about the pricing. Right now it's still in the "throw a number down on the front page and see if it sticks" stage of pricing. I'm still banging my head against the wall to find a better pricing scheme, but it will likely be similar to what you mentioned.

Here, I'll write it down just so I can get it out of my head. :)

* Hobby: $4/mo (paid yearly), limited to 1 site and 1 recipient

* Startup: $10/mo, unlimited sites, unlimited recipients

[Custom Branding]

* Freelance: $35/mo, custom branding, 10 sites

* Studio: $85/mo, custom branding, 25 sites

* Agency: $150/mo, custom branding, 50 sites

It's a lot of plans but maybe the two-bucket separation would be manageable. Or maybe I need to do a more fluid $4-5/mo/custom-branded site plan, but pay-per-use plans typically doesn't perform as well for non-developers.
Here's my understanding of this:
1) Bob uses example.com

2) Bob has authorized example.com to use Bob's Twitter account on his behalf, using OAuth 2

3) example.com happens to have an open redirect, an annoying and rather pervasive type of security vulnerability generally considered to be low-severity. (e.g. Google: "we hold that the usability and security benefits of a small number of well-designed and closely monitored redirectors outweigh their true risks.")

4) Mallory can now own Bob's Twitter account from any IMG tag on the Internet.

Step 1: generate a carefully crafted redirect URL which will start an OAuth authorization with the redirect URL designed to hit example.com but get 302ed to a page Mallory controls.

Step 2: put that URL in an IMG tag

Step 3: cause Bob to load that image. Twitter, noting that Bob has already auth'ed example.com on this device, handily elides a re-login and re-authorization and redirects Bob to the carefully crafted URL on example.com, which redirects him to Mallory's server

Step 4: Mallory now has a token which gives them Bob's Twitter account to play with
Taking The Hassle Out Of Applying For Preschools In The Bay Area
Just to be sure, how is Google's OAuth2 implementation vulnerable to this?

As I understand it: the attacker exploits the fact that your application does not validate the redirect_uri parameter. Google's API keys all have whitelists for redirect_uri's. So those can't be exploited, right? Then the only problem is that those redirect_uri's themselves can perform redirects (in Google's case you can put arbitrary data in the 'state' get parameter so you could put another redirect_uri in there) but you can validate those too (on your whitelisted redirect_uri page... and you are advised to do CSRF checks anyway). So in this case, where is the vulnerability? I don't see it.
> Then there is Go's woeful head-in-the-sand type system and its dumb approach to error handling. Errors values are logical ORs -- you can return a useful value OR an error.

Not necessarily. Maybe you want to return the number of bytes read until the error AND the error.

> We've know how to do error handling without exceptions and without boiler plate since about 1991 (Wadler; monads). Generics since about 1985 (ML). Can we move on yet? Is a quarter-century long enough?

You're conflating "it was once invented" with "it's a good thing without any trade-offs and should be put in every programming language".
Haifa, Israel; Remote OR Relocation; Full Time

Stack: Unix/Linux systems programming, Scala, Coq, Lisp, Python, Matlab, C/C++, Python, Ruby on Rails (once), kernel hacking, etc.

Contact: https://www.linkedin.com/profile/view?id=33147086 or ("eli" ++ "gottlieb" + '@' + List("g","m","a","i","l",".","c","o","m").foldRight("")((x,y) => x ++ y))

About you: You are doing something real, not just another social-mobile-local roomate's-dog-sexting app or enterprise CRUD backend. You have technical depth and challenge coming out the wazoo. You are not merely "changing the world", you are awkwardly avoiding the words world domination in conversation when people ask what you do. You may create or abolish entire industries. We all have our part, and you are damn well doing yours, and you know it.

(If the above sounds like I'm asking for only the most over-hyped melodramatists among companies... well, think of how you write your job ads.)

About me: I started programming at age 11, wrote my own microkernel in Object Pascal in high school, specialized in programming languages and compilers in university, and have renewed my interest in operating systems in grad-school... while also trying to learn automated theorem-proving, type theory, and machine learning. I want to improve on all of these things (especially the ML); please do not be surprised if I shlep a textbook to work with me. Outside academia, I've worked on an analytics engine, a Ruby on Rails web application, the backend for secure file-storage in the cloud, and a handful of open-source projects.

Currently in my MSc at the Technion, and really pining for the not-Technion world at the moment. Hoping to finish either this semester (August) or next (February... Technion has very weird scheduling). Feel free to pass over me if my uncertainty about graduation date makes me useless to you, though for something really cool I might want to take leave from Technion anyway.
I'm not sure what persistent means in this context, but what is meant by "fast" immutable array here is that the immutable array supports operations like insert and delete (returning new immutable objects) in near-constant time.
I'll note here that the Sennheiser 5x5 line has lately been replaced by the 5x8 line, which from all I've been able to gather is hardly different at all.

I've got a pair of HD558s which I quite like; indeed, they're the best headphones I've ever owned. What I'm curious about is this: Can someone who's actually done the foam mod give me an idea of whether the result is worth the risk? I'm pretty sure I can complete the modification without damaging my headphones, but I'd like to know it's worth my while before I carry it out. Thanks in advance!
Every new dev machine should have an SSD.

It's under $1/GB
I just made the commit to the gh-pages branch. Here's the commit, not that it's much of anything:

https://github.com/lftl/rgb_of_life/commit/6be88caab5a8956ff...
I remember seeing you mention a draft of an DNSSEC "jeremiad", but I never saw the final product. A quick Google search doesn't find it. Has it been made available to a wider audience yet?
If I've already got NoScript, ABP, and Ghostery will this addon make any difference?
The many typos of the text make it almost difficult to read...
Security Flaw Found in OAuth and OpenID, Here's What It Means for You
Completely unregulated spectrum would probably be intentionally filled with garbage and the remainder sold back at the highest possible prices. In other words, some ass(es) would DDOS the spectrum to create scarcity.

If encrypted comms were allowed on open bands, commercial users would probably use the free spectrum and it would be difficult/impossible to get them not to.
Is Russia planning to invade the Ukraine? What are their plans? Are the "protests" in the Ukraine Russian-backed or not? Do they have greater plans to push out west, or are Russia's plans legitimate in the region?

These questions can be answered with good-old fashioned spying, and nothing else. Russia is not going to give us their gameplan on a silver platter.

And when we do learn Russia's gameplan, it would be best if we kept that fact secret. We can't have Russia knowing that we know their gameplan during the negotiation process.
Good Oauth2.0 and later implementations enforce this. Note that Twitter does not fall into that category.
I think your response lines up with what the article is saying, but the person responding wasn't talking metaphorically.

He was saying that if you aren't careful you won't create the same standards when you go to a community. If 30 of us live together and you come in to do a study that is completely different from sampling from a population of tens or hundreds of thousands (as would occur in most Western studies).
Russia isn't hostile to the west. It's easy to think that everything a foreign country does is about "us". Putin needs an external enemy and a national narrative to support him. It's all domestic policy. We're just annoying background noise. What Putin wants is to stay in charge of his kleptocracy for as long as possible. He doesn't give a shit about the US.

It's the Russian equivalent of American currency disputes with China. While there is truth to the claims of an undervalued yuan it's really overblown. It's about identity politics and feelings. China just happened to be a convenient target.

To the downvoter: Do you think Putin just now found out he is homophobic? That his claims that NGOs with foreign ties are foreign agents aiming to destabilize the country are real? No, it's all theater, scaremongering and scapegoating.
This is the answer, whether you agree with it or not: http://www.lawfareblog.com/2013/07/dishonor-in-high-places-s...
...but mountain view seems rather quaint and really quite pedestrian friendly, at least in the area by the train station.

Well, sure, Castro is walkable, but most of Mountain View isn't like Castro.
>What are the HR roadblocks/hurdles that I would face in trying to get this candidate hired?

Most of the roadblocks would be in the form of communication and getting things done. However, if the person is capable of managing him/herself well and they are productive at work, whether in an office or not, the work will still get done.

>Could this person be hired as a contractor internationally?

That is what will be done. They will lose out on US-only benefits, but I've seen SV/SF salaries, and if you're paying that much to a person in a third-world country, they won't care for 401k or dental insurance. You should consult a lawyer for the best way around this (maybe a tax benefit too).

>If we wanted to hire them full-time, permanent would that require setting up an entity in the country that they live in?

Multinationals do this for tax and other benefits. You don't need to do this (unless you are producing a tangible product and there is big demand in the foreign market).
OpenID-Connect is the most current spec in that world.
What Programming is Like
London, UK; Remote / can come to the US for contracts; Contract/Part-time.

Stack: Design, HTML/(S)CSS/JS/Rails

Resume: http://jon.gd

Recent things I've made include http://attending.io http://hiremyfriend.io http://jongd.github.io/ohmygod/ http://helpmewrite.co & http://listerly.co

Contact: hn @ designedbygold.com

I'm a designer & full-stack developer; love hacking MVPs and prototyping, but also getting really into the details and making things delightful to use. Would consider full-time if you're amazing but I've just gone freelance so I'm quite keen to do that for a while. Bonus points if you want me to do something with data visualization :)
Hey Guys,

This week we a TON of new openings for online education startup Udemy. Here is a link to the openings: https://www.udemy.com/about#jobs

If anyone is interested in any of the positions (whether they are devs or not, feel free to email me and I can walk you through the process to get the best chance for the position you like.

Side Note: I do NOT get a bonus for finding new employees.

Aside from the positions - the company is pretty legit w/ tons of free startup swag and all of the stereotypical San Francisco & startup perks like free food, activities, and lots of beer/whiskey (bourbon is the offices' personal fav).

Cheers,
Adam
adam@udemy.com
https://www.google.com/search?q=hugelkultur+termites
Migrating Google Docs to Google Drive
Near an US City, Relocation, [Full Time | Contract | Part Time]

Stack: Android, RoR, python, flask, Opencv, Sklearn, C/C++, Java, MySQL, PostgresSQL

My Resume: http://goo.gl/v98aZD (Recruiters feel free to add me to your system)

Contact: deon@appmunki.com

I am mostly looking a for a mid-sized company. Before getting my degree I worked mostly as the owner and manager of a team of consultants. For the past 2 years most of my focus have been on academics application, so most of the things in my portfolio from that time are academic applications. I graduated in Dec. My only hard criteria is that I would like to live near a city.
Tried to connect on LinkedIn and it wouldn't let me; shoot me a note (email in profile) and we can chat about a potential position here at Canvas.
> There's no way that Go can follow in C's footsteps.

I am not a big fan of Go, but looking at Oberon based OSs used during the 90's at Swiss Federal Institute of Technology in Zurich, it could be used.

Granted, maybe some extra features like direct compiler support for untraced pointers and full processor mapping in the unsafe package would be welcome, but the original Oberon could survive without them. By making a set of assembly routines available as kernel package.

Which is no different than the assembly required by C to interact with the hardware.
My impression from the openjdk code is that each lambda generates:

1. A method in its parent class.
2. An invokedynamic instruction at the call site.

The invokedynamic instruction calls LambdaMetafactory, which compiles an anonymous class at runtime that calls method #1. So the only benefit of using invokedynamic is fewer class files, by deferring generating them until runtime.
Summaries of practical software dev research
NASA data and code for developers
Multiple SSH profiles GitHub
Can you specify what the 4 non-dev roles are?
ERR, right arrow :p
Google faces antitrust lawsuit on US mobile Internet search
Not sure whether it helps, but here is way to force a "C" function to never be inlined (by asking for it's address, and then calling it):

http://www.flipcode.com/archives/Forcing_Functions_To_Be_Cal...
exceptionhub.com
Most major highways don't allow pedestrian or bicycle traffic (among other things). Most roadways don't allow unlicensed vehicles. You can't go start up a pickup hockey game in the middle of a major road. This is all regulated. You can't just go use a road for any old reason, just because it's perfectly capable of being used for that reason.
all the elephants in the room are pink
Too bad he's made an unwise decision. Still, he is a best engineer.
That doesn't sound so bad. I wonder if the process could be made to work with salt water.