skysight-inc/HackerNews huggingface dataset:
SEEKING WORK - Remote or London, UK

I'm a software engineer based in London, UK.

I have experience navigating complicated frameworks and working with a wide variety of projects, including front-end developent, automated testing systems for startups, and internal tools for Google.

Skills: Python, PHP, HTML5, CSS, Javascript, jQuery, MySQL, C++, Chef, AWS, Linux system administration

Website: http://dariuss.net/

LinkedIn: http://uk.linkedin.com/in/scdarius

Github: https://github.com/darka/

E-mail: darius.scerb@gmail.com
Obviously not if he bought them to provide liquidity for competitor Vaurum.
What I call the "narrow unsubscribe", now used just about everywhere. The unsubscribe link at the bottom of that spam email you received? It will unsubscribe you... from that particular type of email from that company. Usually that category is so small that you'll still get roughly the same amount of email; unsubscribing from additional categories requires logging into the website (or worse).

LinkedIn is a big player here[1], of course, and if you add the fact that they add new categories of spam all the time (automatically opting in everyone, of course), it become just about impossible to fully unsubscribe from their email.

Viacom is a particularly bad player here[2]. If you've signed up for Hulu Plus, you've probably seen these emails. If you click the unsubscribe link on one of them, it will unsubscribe you from that particular Viacom property. Viacom holds dozens, potentially hundreds of properties. To unsubscribe from all of them, you have to go to each property in a big list, uncheck all the subscriptions, and save. And of course, these are all separate pages, and they likely do the LinkedIn automatically-opt-in strategy for new properties. They just went into a spam filter on my email.

1. https://getsatisfaction.com/linkedin/topics/how_do_i_stop_re...

2. http://www.techbyter.com/today/archives/436
> I don't really understand your argument here. Are you saying that Tor should be banned because the ratio of illegitimate to legitimate applications is higher than that of encryption software? I'm not putting words in your mouth, I'm just trying to understand what you're saying here.

No, I'm not saying it should be banned, I just don't want to hear people whine about "OMG I want to help these poor oppressed people soooo much and the government just doesn't understand!!!" knowing full well that the reason the government comes down so hard on Tor is because it's primarily a vehicle for illegal activity (seriously illegal activity at that).

I'm just saying hey, the government doesn't like it and don't kid yourself about the reason -- and certainly don't run a Tor node if you aren't ready for potential consequences.
If it's not insured, what's the point?
New RFS: One Million Jobs
This. I can't imagine, except maybe in a development mode, where I would want all of these different modules loading at different times especially if they're loading later rather than referencing the script in the HTML's HEAD.
The threat model here is people leaking their own Coinbase passwords (via phishing, compromised PC, etc.), so the 48-hour delay and out-of-band verification ought to actually help.
I find that reading articles on design can be off-putting if read too literally. "Do this" or "Don't do this" may or not apply to a specific situation. I did think this was a nice article in that it showed some nice examples of what things can look like and explained the general principles about why it may be a good idea to use them.
I am not so much scared by functional programming as I am annoyed by functional programmers. I feel that they often come over like mathematics professors that just fill the chalkboard with lightning speed and look at you like "seriously, how dare you ask this dumb question". They go ahead explaining to you how your language is crap for all its sideeffects, smugly explaining how their language doesn't have those and then explain to you how Simon Peyton Jones shoehorned them into haskell with a monad. Also you always appear to fail to understand monads and they always fail to explain in an understandable way (although they're not that hard to get).

Functional programming is great and feels right, I am amazed how knowledge of fp affects my js, C# and Python up to this day. But from a social perspective: Loose the smugness, and then we'll talk fp.
This just means both are at fault. The driver in front for not being aware there's an asshole behind him; and the driver behind for being an asshole.
Thank you for sharing. A very interesting read!
>I think that it will depend on whether or not we reform the education system so that we don't create a permanent "servant underclass.

I find it really difficult to argue against good state-subsidized education; some people really do learn useful stuff in school.

But... I don't think good education is going to make the problem go away all by itself.

I really hope that what I am about to say is wrong.

I don't believe that education has as much to do with success as people say. Education correlates with high income, yes, but education also correlates with having high income parents. I think having the sorts of parents who encourage and help you to get an education also correlates with both getting an education and with getting a successful career.

Nearly everyone in my family has a degree of some sort, many have advanced degrees. I have no degree, and no significant time spent at college, and am the highest earner of my siblings. Hell, almost all of my siblings have worked for me at some point.

From what I've seen? My life (and my income) is more like that of my "class brothers" than of those I went to high school with who have my level of "educational attainment" - The conclusion I am drawing from this is that having parents like mine was important to my success; most people with parents like mine are going to go to college, sure, but the college itself is less important than those parents.
Two Active Record SQL Injection Vulnerabilities Affecting PostgreSQL
Hasklig:  Haskell Font with monospaced ligatures.
Honestly, I couldn't care less if my YouTube video stream was encrypted or not. So I'm on the side of the original poster. That said, Google obviously is against that. So I guess he should have just pushed for newer cipher support saying RC4 was not legally possible for his organization. Google adding support for newer ciphers and getting more users seems like a clear win for them and probably only takes their equivalent of updating a Chef or other infrastructure recipe since it is just a setting.
Article says Cortana has correctly predicted 6 of 6 knockout games. There have been 8.

And since when has a team going out of the World Cup been tragic?
No, not yet.
I just got a job which pays me good, after 3 years of struggle.
25
Now I dont know what to do, since I got a job which I wanted after some 3 years. I work in a startup, we are building a product for middle east which is already proven in US. hopefully there will be a landfall of money someday. Still I have no idea what to do after 2 years.
Currently, in CO, the legal retail prices are > than the black market was in the '90s. The black market is 50% of retail.
The fact that there are apps with excessive motion seems like a great argument for better motion design.
U.S. Justice Seems to Fall Harder on Foreign Companies
Thanks! My point wasn't to spit out what Google guidelines state. It was to draw one general observation -- the deep thinking about motion -- and expand upon the importance of that, but not necessarily how to do to.
Shrink-Wrap HTML containers with content-width
I'm not scared. It just does not make sense to me.

Just because I speak French and English fluently does not mean I can speak Japanese. My wife is Japanese, and speaks it fluently. We've been together 19 years. I've tried to learn. it just does not make sense. It would be nice, because I have relatives there, and I could go live there, legally, but it just doesn't make sense in my brain.

What can I do?

Functional programming is the same. Every couple of years I take a look, and I recoil in confusion.

It also doesn't help that people make fun of me for seeming dumb.
Re: the arbitrary code execution in CGIHTTPServer.

CGIHTTPServer executes cgi files inside a folder specified at init. Its function for deciding what's inside the folder (to be executed) and what's outside (to be returned raw) is completely bust. If you urlencode the slashes you will confuse it enough to yield false negative/positive.

This means that if you are using CGIHTTPServer, anyone can execute anything that the web server was supposed to print, or get the source of any cgi script.

You should probably not be using CGIHTTPServer anyway. </PSA>
I think you posted under a throwaway, and then replied with your actual account.

> Women have almost no intellectual curiosity. It is just how they are wired. If you want to have great conversations about anything meaningful, you must find a man.

I hope you someday learn to see women in a little better light.
I'm not claiming it was under market. I'm claiming that you can't claim it was over market.
If you liked this, you may also enjoy Foursquare's visualization of checkins, which shows the pulse of the city and the change in human activities (and which areas are populated) as the day progresses:

New York City http://vimeo.com/75413842

San Francisco http://vimeo.com/75416817

Tokyo http://vimeo.com/75404940
Why does opening this make called to https://spottster.com/?
Safari has always shipped blocking third party cookies by default; just about everything works with it. I remember there used to be some nasty trickery to make iFrame resident Facebook games work, but that was about it.
Curious if there are any companies which currently create millions of jobs?

I suppose one could create a new market which could have capacity for such jobs. That might still be in the best interest of a startup.
If this many bitcoins were purchased in a short time frame on the exchanges the price would shoot well over 1000 almost instantly.
Agreed. The press coverage has been over the top. To the average Coloradan it's been a non-event. Smokers kept smoking and non-smokers still don't.

The only difference I notice is a small amount more of public smoking, but it could be my imagination.
Productized Consulting as a Service
You are looking for https://github.com/iron/persistent, which offers two utility middleware for exactly this.
>Women have almost no intellectual curiosity. It is just how they are wired. If you want to have great conversations about anything meaningful, you must find a man.

You are hanging around the wrong women if that is what you are really interested in (I suspect not). I would be careful generalizing your experience with certain women to the remaining 50% of the human race!

But kudos to your success.
Ant is... well let's just say if you're using Ant you're doing it wrong ;) (or that's a very-old-legacy-stuff)
Why isn't this happening here in Vancouver? What more proof do we need?
Um, no. People disable RC4 because it's rubbish.

If I may quote GCHQ - a "surprising [...] cryptologic breakthrough" was obtained a few years ago from NSA.

We don't know for certain if that referred to an RC4 break specifically, but from context, I think that is the most probable candidate - a bulk cipher they've never used themselves, but widely-deployed internationally (at the time, and still to a large extent) on a huge number of websites largely because of advice to mitigate the BEAST attack (a tricky, active attack) not by switching to TLS 1.2, but by switching to a stream cipher designed in the late 80s for the 8086 that is showing its age poorly. That was probably not good advice.

What we do know for sure is that it's in a poor state; worse than any other cipher deployed in mainstream crypto. RC4 is Considered Harmful.

Go back and review what you've encrypted with RC4 previously, and evaluate if an eavesdropper could have recorded it and saved it for later when they do have a practical attack, and if so, if that's a problem - because in the state it's in, that is not a theoretical concern, because we know some Nation State Adversaries (cough) certainly do that en masse as general practice.

The IETF TLS Working Group have actually had a big discussion about this already - resulting in a live Internet-Draft not merely deprecating, but actively prohibiting RC4's use in TLS, which obtained strong-to-unanimous support in the Working Group and in my opinion will very probably be adopted as a WG document: https://tools.ietf.org/html/draft-popov-tls-prohibiting-rc4-... - long story short, you MUST NOT use RC4 in TLS, don't even think about negotiating it, kill it with fire.

If you're still using it in anything else, consider this your I-told-you-so warning.

If you want a replacement, consider ECDHE-RSA-AES128-GCM-SHA256 or - if you want a modern stream cipher that's actually 256-bit secure yet faster in software than RC4 (unless you're on an 8086...) - ECDHE-RSA-CHACHA20-POLY1305: coming to an AEAD stream near you, and already with a draft implementation live in Chrome and on most of Google's properties thanks to agl's patches that more recently have become BoringSSL - but sadly not YouTube's video CDN yet, as the article notes.

I couldn't speak for OpenSSH, but I also think your information, or your software, may be out of date. SSHFP DNSSEC records, in particular, have had SHA256 on the Standards Track RFC for two years and change - https://tools.ietf.org/html/rfc6594
I sell vpn http://www.vpntraffic.com
We have a middleware for that! You can look at http://github.com/iron/persistent, which does wrap an RWLock in an Arc. It also provides a struct to make your middleware Share, so you can do similar things.

We also have session, which works on a HashMap under an Arc, although it isolates the mutable data to a session, instead of sharing it across isolated requests.
i miss you, Mark.

From mark@markssun.cs.umd.edu Wed Feb 17 19:49:56 2010
Date: Wed, 25 Feb 87 00:24:52 EST
From: mark@markssun.cs.umd.edu (Mark Weiser)
To: don@gyre.umd.edu
Subject: paper

Leave it (a) on my sun keyboard, (b) in my second floor mailbox,
(c) at the bottom of a pan of hash brownies. I'll be sure
to find it in any of those places.
-mark
The developers and miners are, in effect, the government of bitcoin. The developers act like the federal reserve, in that they can change the code to raise the max amount of bitcoin, increase the mining difficulty, etc. just as the Federal reserve would conduct open market operations or set interest rates to target inflation. So it's completely wrong to say that Bitcoin is "under no one's control". [0]

The key difference is that a majority of the miners have to accept the developer's changes and run the new client. The average US citizen cannot refuse interest rate hikes. So it's a transfer of power away from the few and corrupt (Fed + banks) to the few who are limited in their ability to be corrupt (developers + mining pools).

If the developers implement a terrible policy, the miners will refuse to update their clients to avoid devaluing the currency they are working hard to generate. So the power distribution and incentive structure are different. Whether thats a good or bad thing remains to be seen.

[0] http://www.weis2013.econinfosec.org/papers/KrollDaveyFeltenW...
What I Learned as a Woman at a Men's Rights Conference
Yes

I did it through pretty consistent work with large companies over 15 years but two startups as well. The startups both exited successfully but really just brought my compensation up to normal vs. a Google.

It felt like any other day. I write code because I love it. That said, I got really picky at work and started refusing total shit work.

I was 40.

Microsoft and Google really. The startups added a modest bump.
I don't know what material design is, but if Google+ is an example, the implementation is bad. If I click on the status input box, there's a time span when I can't type characters to the input box. I need to wait some useless animation when it expands. What probably really happens is that the "fake"/unused input DOM element is replaced after the animation to a new input DOM element or something.

The same bug also happens with YouTube. If I open the YouTube page and start to type characters to the search box, I'll get missing characters. For example, if I type "skateboarding dog", the end result will be something like "skarding dog" etc.

Google+ offers animations that make the site more annoying to use, stuff moves and changes in size. Facebook, on the other hand, works really well. Their 'status update' input element does resize, but I can start typing instantly.
Relatedly, the motto on D.C. license plates is "Taxation without representation":

http://upload.wikimedia.org/wikipedia/commons/e/ef/Washingto...
C# is missing good type inference, implicit conversions, implicit parameters, higher kinded types (huge loss), lightweight method syntax, currying, pattern matching...
Somewhat related:

After nearly a year of very little activity, Jython finally has a 2.7 beta 2 version released recently, with a 2.7b3 release coming soon.

So, if you use Jython and you are sick of dealing with <=2.5 code, you should be in luck real soon.
There are scenarios in which the Bitcoin "sector" grows without the value of Bitcoins themselves appreciating significantly (or at least, to the same extent). For example it could become a common medium of exchange but an uncommon medium to hold, if a large portion of the growth is in Bitcoin exchange platforms that convert payments immediately to national currencies, like BitPay. In such a situation there could be a large volume of business going through companies like BitPay, but with only transient demand for the coins themselves.
I think there might be some selection bias there: if you are iretired from above, it sounds like you are choosing women based on appearance alone. While a fine pursuit, it won't necessarily lead to intellectual conversations.
http://en.wikipedia.org/wiki/List_of_largest_employers

Seems like walmart and the Chinese energy companies are the only private employers of >1m humans.
List of companies/organisations on that scale: http://en.wikipedia.org/wiki/List_of_largest_employers
[Thanks, japhyr, for pointing that out although we obviously disagree]

Actually, I've already figured that out. This guy is going to be my friend for the rest of my life even though I've only known him for a year.
Several times it's happened that we both make excuses to ditch our respective girlfriends to just hang out alone together, drink wine and talk about life.
Women have almost no intellectual curiosity. It is just how they are wired. If you want to have great conversations about anything meaningful, you must find a man.
How Ink Is Made (2010)
Pre-legalization: "Crime will go up."
Post-legalization: "Crime went down, but not because of the weed thing."

Well, okay then.
Why is this? Is it simply a deployment issue - that it's hard to get all the pieces running together in a test environment?
Hehe, they're weeks man! It's a bad habit we use in Sweden to always refer to weeks by number: http://www.timeanddate.com/calendar/?country=21
Bitcoin companies may quickly move to focus on properties of the blockchain that are not related (and, perhaps more importantly, more profitable), than the bitcoin currency.

Also, importantly, bitcoins may be extraordinarily profitable for a bitcoin company, but never increase in value, whereas if you purchased a bitcoin today for $700, and 5 years from now, the bitcoin was still $700, you would likely be unhappy.
Walmart employs 2 million people, but it's hard to imagine a venture-backed technology startup with plans for mass employment.
I agree, and I suspect that it's likely "a cop stops $unsavory_character and wants to charge him with something; as his possession of marijuana is no longer illegal, he must choose something more contrived."
The main driver behind Bitcoin is amateur speculation. As those guys don't stand any chance on real markets, they find opportunity in Bitcoin.
Be careful what you wish for. Microsoft have created many jobs in the industries that fix / work around / benefit from bugs in their software.
Someone needs to make a search engine that only returns results for things that people have tried to hide under this law.
After my horrible experience building a desktop cross platform app in Swing GUI, I vowed to never use Java. I wonder how Zetes addresses the problems with Swing.
hey please pm me oknoorap.at.gmail
The distinction is subtle, but important. Let's say, for example, that I have no real idea what the price of bitcoin should be in five years -- but I am confident that enthusiasm for, and interest in, bitcoin buying and trading will grow dramatically all the while. I'd rather own the company processing the transactions than the bitcoin itself. The bitcoin might soar, and it might tank, and it might do both of those things in a mostly unpredictable, haphazard fashion. (As has been happening.) But the companies trading bitcoin don't necessarily need to buy and hold. They can make money off of transaction volume, or off of leverage against their bitcoin assets, or off of any number of things only tangentially affected by the nominal value of bitcoin.

This is sort of like the old saying about how to make money in a gold rush. You don't mine for gold; you sell picks and shovels.
> I ran into an acquaintance on the street that I hadn’t seen in a year, and he said he’d heard of our parties and would like to get invited.

Straight from The Great Gatsby!

Do people often stereotype you as a Oligarch? Given that you probably moved to Moscow or St. Pete, what would be the relationship between an Oligarch (born with money) and you (worked for money)? What do they think about you and what do you think about them?
(co-founder here) The lion's share of those costs are related to drafting the investment agreements. It is a lengthy process if you want to do it properly, especially if you haven't done it before. Usually you sign a term sheet first that roughly outlines the content of the agreement. The devil is in the details though, so the full agreement may take a couple of weeks to finish. Then there is due diligence, option pool, and a bunch of other stuff to consider before the deal is sealed.
My highly optimized Nginx web servers, behind a load balancer, can't handle tens of millions of connections. If it got anywhere near that point, Nagios would be alerting of load, HTTPS being unresponsive, RAM filled, swapping to disk, no pong reply due to a saturated network, and a whole load of other issues. My HA Nginx setup will die long before you reach tens of thousands of simultaneous connections, let alone tens of millions. I'm guessing I'm not the only one.

Practical attack against my server? Nope. You'll kill it before you get anywhere.
So, 72-hour delay is even more secure?
RFS?