skysight-inc/HackerNews huggingface dataset:
Penn State has a college of engineering and a college of business. It seems like it would be pretty easy to tell which one you were in, and if you went to the business school, you wouldn't say "I studied engineering."

Although to be honest, the only place it says "engineering" is in the headline, which editors often mess with.
> Re: permissions - We went for the overarching permissions API so that users don't have to approve MORE permissions once in (You still have complete control of whether or not Verbr will post to your twitter/FB etc once in).

That kind of defeats the point of having this granularity of permissions. I'm sorry but I don't want other apps to have this level of permissions on my other social websites.
Natural interaction is definitely the next big thing for VR and that mount will elegantly replace the current "duct tape the leap motion to the headset" homegrown solutions :)
That's a big difference. I wondered what possible computer languages that he could have studied recently in school that he couldn't get work in today, and why he was talking about the industry software he learned in school. He seems a little young to have done a pascal or scheme CS program.

The only applications I learned in CS/EE school were POSIX, the Microchip assembler IDE, and EAGLE. For every other one, I was on my own.
I cannot register with the android app for galaxy nexus.
https://github.com/defuse/password-hashing/issues/39#issueco...

"Therefore all KDF functions are cryptographic hash functions. All hash functions are not KDFs, due to speed."
Does Akka solve the periodic GC pause of the JVM in some magical way? If not then to me it seems like a tough sell. Maybe I have 100K Akka actors with active client connections, now suddenly there's a GC Pause of a few seconds. I seriously wonder if will just result in a trainwreck of the JVM crashing. I've seen the JVM crash enough times to know its not by any means bulletproof.
They are currently stumped by situations that humans are OK in. They are not "already far better" in all situations. Even if they are better on average, my point is that this is not enough. If the world was run on pure rationality, they would have only to be epsilon better on average to be adopted. In the actual world, they are going to need to be very much better, and have very very few failure cases to be adopted.
How to Do London Chic
Such an employer might do well to reconsider whether his product is worth what he thinks it is, then, if he can't muster the budget to pay employees a market (or above market, given the risks) rate.
What about rot13?
LMF: A framework for getting more users
It's not too much to ask, but there are better and worse ways of getting it. My mom and I live in similar sized houses on similar sized plots of land.

I live in a suburb that is constructed like a small town. The streets are a grid, and there is a "main street" that puts the essentials within walking distance of many of the houses--groceries, restaurants, hardware, even elementary and middle schools--and a few smaller shop areas sprinkled on a few other blocks.

My mom lives in a suburb that was constructed by a suburban developer in the 1970s. The streets are all curved and hierarchical (i.e. connect like branches on a tree), and all the shopping is concentrated in a big strip mall at a major intersection.

The result is that the traffic is far worse for my mom. Everything requires driving, and the street layout extends travel times, while concentrating all drivers into a smaller and smaller set of roads. They also have a worse time in winter. They are totally dependent on plows when it snows; whereas in my neighborhood most folks can walk to a store if they need something.

Edit to add: I can't prove it, but my subjective perception is that average health is lower in my mom's neighborhood, with more fat people. There's no reason to walk besides exercise (i.e. walking in circles just to walk). In my neighborhood it is often more convenient to walk, so people do it a lot more.
The problem highlighted by the article seems to be that companies are no longer so interested in hiring raw material and then providing training in angular.js or whatever but expect to hire people who already have those skills.

Anecdotally, I'd say that of my CS class maybe only 5% did any serious programming work outside of class.
Let me rephrase. Indirectly, possibly communicating with people you think can help you - like commenting on AVC's blog - and hoping they contact you is not going to be anywhere near as helpful as contacting them directly. It's not serendipity when you put out bait and hope it catches something.
Yes, but when we were kids we wanted to design our own weapons and toy soldiers :)

I was thinking along the lines of printing kid-designed soldiers or weapons :)

Absolutely niche (though maybe not that much niche for stuff like Warhammer 4000 or tabletop war games or whatever :) ).
Agree on the premise. I think theres a spectrum of questions, from those that work great in short simple polls:

"What's frustrating you most right now? Level is boring, level is too difficult, loading time is too slow etc

vs ones that require detail framing and context - for example How would you approach building your army.

The former can work very well, but you need to be careful to get good results out of those less concrete with many factors at play.
Big data, There's signal in that noise
You articulated perfectly exactly what I was thinking.

I realize it is a popular idea among society - that college is a career training center - but that is patently false.

It is an unfortunate idea too, because it leads to lots of people wasting thousands of dollars on an education they won't ever use in their career just for the sake of having the piece of paper they get at the end.

> Besides, if you're not doing any hacking in your free time outside of class anyway, you're probably not cut out for this career.

Bingo.
There have been blind user studies that show that users like Bing's results as much as Google's when the logo is removed (if not more).

You don't realize it, but you're making an argument for the strength of their branding, which is at least partially (if not entirely) due to the amount Google spends to be the default search engine in just about everything. Yes, they have to have good search results, but that's far from the whole story.
Like so many things, good management > no management > bad management.
But optimizing based on explicitly detecting undefined behavior is not a legitimate extension. It is simply insane, because the undefined behavior is not actually being defined.

The authors of this proposal agree, and are trying to avoid such situations by just eliminating undefined behavior. Their blog posts and academic papers (linked from the blog post in this submission) have many examples where such insanity has happened.
http://www.similarweb.com/ is very accurate. I didn't know about this. Thanks a lot :-)
"Cryptographic hash" has been used to refer to non-invertable hash functions since the late 70s.

Using that term to refer to a KDF is exceptionally misleading and foolish.

If you gave that answer to those PHP developers, they'd come out thinking MD5 and a salt would Work Just Fine.
Nice catch. Someone in the comments section pointed out that the WaPo actually listed MIS as one of their "most unemployable majors." (Is that irony on some level?)

http://www.washingtonpost.com/blogs/wonkblog/wp/2014/08/26/t...
Palantir has offices in no fewer than 6 buildings in downtown Palo Alto, across the street from Stanford. It is as close as you can get to being an SV company, other arguments aside
3 times I have worked for a small company that had a liquidity event, as an early employee. That already makes me incredibly lucky, that those companies didn't sink without trace. In each case, my stock was worth between 3-6 months of my then salary. Which was a nice chunk o'change to be sure, but not FU money, not by a long shot.

Now I work for big companies for a good salary. I put in the hours to get the work done, but I'll never do 80+ hour weeks again unless I own a ton of equity in the venture.

The truth is that startups, like the music biz, like video games, like PR require a steady stream of young people with unrealistic ideas who can be exploited. Don't let yourself be played, is my advice now to young engineers. Especially don't take career advice from a VC or a founder...
I was using (two years ago, the last time I played with them) a freescale provided 2.6 kernel that just hasn't been upgraded, and the old mentor-graphics/code-sourcery tool-chain. Together with busybox, I was able to get a basic serial console-based system with shell, all rather straightforward.

I didn't succeed getting a newer gcc+newlib compiled for m68k, though.

All in all, the whole ecosystem around m68k seemed to have rotted away, also m68k support was also taken out of u-boot at some point if I remember correctly.

While it certainly would be possible to fix all of this, it's just too much effort "just for fun" with no particular gain besides "because I can":

If you actually have the need for some embedded CPU, one is much better off using whatever ARM core the majority of tinkerers is currently using, that way you are less likely to experience this bitrot.
Why mention md5 at this point, or even SHA1, when BLAKE2 exists? (assuming the people there don't want SHA2 because of slower performance): https://blake2.net/
> 47 percent of the technology jobs in New York City no longer require any college education at all.

I've done a lot of hiring over the years and recently in NYC. I can say in general I've always hired for Attitude and Aptitude. I can teach you anything if you have the right Attitude. I can't teach you to have a good Attitude and I can't make you have a better Aptitude.

One very real challenge in NYC is that big players are soaking up most of tech talent and there is a ground war between financial technology companies and other start-ups. That pressure has caused companies to go back to the drawing board on how they qualify candidates. For a while recruiters wouldn’t even look at a person without seeing some lofty education background in a resume. Now they’re looking for the scrappy problem solver that might be savvy based on their recent work experience.

I find this interesting because when I started in technology 30 years ago I had a hard time hiring for my companies and developed this “Attitude+Aptitude” concept with my teams. Over time it seemed like it was getting harder for people to get into technology jobs because it became accepted principle that you had to hire people with CS degrees to ensure success. Of course that was BS when it happened and I’ve always fought against it over the years. One of the best things for me about hiring in NYC was being able to tell the recruiting team what I was looking for and to tell them to stop looking for just CS degrees.

Recently I took a position as CTO in a San Francisco HQ’d start-up. I’ve been talking to my engineering team on how we filter candidates, again I’m preaching A+A but its clear they’ve been taught to look for CS degrees and Math majors. I’m working with them to broaden their thinking. I think this is an example that in general people are lazy about hiring and they’ll use anything they can as an excuse to not invest in finding out if a candidate is the right person. It’s tough, we’re all busy and have yet another meeting to run to or another customer call to deal with. It’s easy to think hiring is a pain and distraction from what you’re doing today. But, let’s be clear, the single most important thing you can do is scale your teams and if you don’t hire they’ll never scale and you’ll fail. To me the most important thing you can do in a company is hire well. The second most important thing is fire well, let people go if they’re not working out. You’re not doing them any favors and in the end their life will be better if they can find a place they fit in and can be successful and your world will be more successful if you focus on building a team that is a well oiled machine that smashes through problems like a hot knife through butter.
The title of this post is lost on me. What's so painful about this discussion? It's not that I'm stupid, it's just that I'm ignorant and don't know.
Yes, it is different. We can confidently explain the mechanisms that lead to the tree falling down. We could not confidently explain the mechanisms moving the rocks.
Successful startups go through a couple of phases as they grow. At each phase the skills needed from the team will change because the challenges to get to the next level are different. And the team will often turn over along the way. Not everyone who was there in the beginning will be there at the end. And that's okay. Now maybe you have the skills and experience to grow with the organization along the way or maybe you don't. Lots of people maybe can and maybe can't. Sometimes it depends upon where you are in your career. Was this your first time managing? Then maybe you need more experience and growth to be the CTO of such a large org. It can often feel like a demotion when you are passed over and senior positions are filled from the outside. I understand where you are coming from. I've been in your position.

Whether the CEO lied to you or not really depends upon context. When did he tell you this? Obviously things have changed as the company has grown. Perhaps he didn't foresee the need for a CTO at the time but now he does. Things change and the needs of the company change with them. And remember he himself is growing and learning as a manager. If he was inexperienced he probably just couldn't foresee the need. Also how realistic is it that a growing/successful technology company won't have a CTO? I find it unusual that it took until ~450 people to get one.

Where do you go from here? If you'd like to be CTO (of your current company or another) the first step is an honest self assessment of the skills and experience you'll need to attain and perform in the position. Second you'll want to talk to the CEO about where you fit in to the company and your room for growth. You'll need to convey your understanding of the need to bring in senior management but also convey that you feel that you can grow along with the org to accept more responsibility. See if you can lay out a plan to do that. If you don't like what you hear coming out of that process then its time to start looking around.

Ben Horowitz has a really good blog post that touches on a lot of this stuff. http://www.bhorowitz.com/demoting_a_loyal_friend
The problem is, simply, that cryptographic hashes are very fast and not meant for user-generated passwords. For that, a special sub-class of cryptographically hashes (called Key Derivation Functions) are recommended to make brute-force computation much more difficult.

KDFs are meant to require a great deal more computation (e.g. an example of PBKDF2 might iterate HMAC-SHA256 8,000 times).
I think that's possible, but I would strangle anyone who actually did that. At that point, not only are you pointlessly redefining the language just so it can feel slightly more familiar to people who are more comfortable with Python and the like, but you also completely lose the ability to enclose variables in the square brackets to make a closure.

If you're going to write C++, then write C++. Don't redefine language constructs to fit the patterns of your other favourite language.
For the people not understanding why this discussion is a problem, in synopsis:

In order for a server to use encrypted passwords for authentication, the server must have access to the decryption key -- which means an attacker has access to your decryption key if they can compromise your box. Furthermore, if they don't get your decryption key, but they get your database dump -- they can then just brute your db and decrypt the passwords. They can do this because encryption is, by design, reversible. Encrypting passwords is almost as bad as storing in plain text.

Cryptographically hashing a password is the only way to go. When you cryptographically hash a password, using a known library that has been tested and written by actual cryptographers with passwords/authentication in mind (like bcrypt, etc -- no, sha's and md5's are not safe to use) - you get a one-direction algorithm in that a password goes in, is digested, and a fixed-length hash output comes out. There is no way to reverse this hash back into the original input. Adding salt(s) combats people making rainbow tables against your implementation, as they then would need to know not only which algorithm you are using, how many iterations it does, but also what your salt(s) are (sometimes even varied every so many iterations). This makes it almost impossible for someone to brute your leaked password database.
The first thing i did after reading the post was to check the official documentation. The docs are explicit about not using MD5 for hashing password. Good on PHP doc maintainers.
But someone did suggest Base64!
It's painful because:

- Bad advice is posted everywhere.

- Good advice is disregarded because nobody reads the preceding posts in the discussion.
Multiple someones, including someones with fancy titles.
There are some startups out there that are more in between. I've had the good fortune to work at two such places.

One nice thing as mentioned in the article is that you have more responsibilities at startups. If you have the intelligence and drive, this can help you with your career immensely. Personally, I have learned a huge amount at the startups I have worked in, many things that larger companies probably would have taken a lot longer before putting trust in me to do.

It is all individual dependent of course.
Any given couple of days more Americans die from heart diseases than those who died by the 911 attacks, I have yet to see someone call those "an existential thread for America".

But we never learn. The best thing that could happen right now for the NSA and the military in the mist of this criticism is another attack on US land, the former will say " see! This is why we need to spy today more than ever! " and the military would get another major money injection for decades to come and it gets to invade any country where they think the enemy might be.
There's no ideologically pure world where businesses are uninvolved with government. Indeed, if you take the oft-cited "must maximise profits at any cost" motivation, businesses must lobby government to their advantage.
I rather happy about that, it saves me a lot of work. I've already cloned the repo on github (and a few local machines). Essentially I currently plan on unwrapping their administration system and switching to a shared secret model.
The Reagan era was so bizarre that even late-model le Carré can't do it justice. Claire Sterling's work (referenced in the article) was basically hackwork hearsay that came in via two key sources: a right-wing journalist closely linked to the Moonies, and a Tory speechwriter-turned-novelist who believes that he is in contact with Native American shamans via his dreams.

These are not, I should stress, the strangest people who held influence over the intelligence community in those days.

The official CIA judgement on the matter was more qualified, pointing out that the USSR supported "national insurgencies and some separatist-irredentist groups," but did not directly support terror groups (although they did support states like Libya that, in turn, supported and directed terror operations): "[T]he terrorist activities of these groups are not coordinated by the Soviets. The Soviets have on occasion privately characterized certain nihilistic terrorism as 'criminal,' and have urged other revolutionary groups to cease and desist from terrorist acts the Soviets considered 'self-defeating.'"

One certainly could point out that US support for groups like the Afghan mujahideen and the Pakistani government, the Central American Contras and their narco-trafficking allies, and right-wing "Gladio" networks in Europe would have, from the banks of the Moskva, looked a lot like US support for terrorism as well.

But CIA's considered analysis was basically ignored by senior political leadership, including CIA director Bill Casey, and a pervasive and almost hysterical suspicion of the Soviet leadership overshadowed US foreign policy for most of the 1980s, resulting in lost diplomatic opportunities and a few close calls with general war.
Ask HN: Your HNWatcher words?
I've been having some sucess in following HN via HNWatcher, by following some people plus some words like "putty, reactjs, brazilian, sublime, emacs, compiler, bytecode".

Does anyone do something similar? What are your words?
Point of order: The post you replied to was not "as wrong" as the participants in that forum ;)
> I'm floored by the amount of people with "fancy" titles from supposed "consulting" companies in the link discussion.

I'm gently curious if black hats will now target some of those companies?

Or are there enough low-hanging fruit available from www searches for them to not worry?
It's the evil twin of capitalism, crony capitalism, which is what we have in this country.

(Technically, it should be called fascism, since it's the binding together (fasces) of government and business in an unholy union.)
JPMorgan, other banks hacked, and FBI looks to Russia for culprits
Happy that they went with UTF-8 here: http://us.php.net/manual/en/ini.core.php#ini.default-charset

Some nice improvements overall.
I used to come in at 7am to beat traffic at my startup. There would only be a handful of people until everyone else started rolling in around 10. After acquisition by IBM basically everyone is there at 9 for a stand up and now I come in later when I do go in.
IBM Sees Broader Role for Watson in Aiding Research
"either you can use md5 or base64, there are also many other encryption are there.. md5 is very secure because it cannot be decrypted."

I'd say this has to be a joke, but Poe's Law is a tricky thing.
Well, that's kind of the point. You don't want performance here.
I like hearing about other options, but I wish the top rated posts were about the OP, not alternatives....
"universities are not, and were never intended to be, career training centers"

The professional vocational degrees like engineering, medicine and law are intended exactly for career training. They are usually certified by practitioner guilds, for example.

You are quite right about computer science, but that is not a vocational professional program.

The OP studied engineering.

(edit: reading down a bit, someone spotted that OP studied Management Information Systems, which may or may not be engineering as generally understood.)
This varies greatly from startup to startup, but if you are not a founder it will be very very small. Early in my career I was a very early employee (think sub 10 employees) of a startup and was compensated with about 0.2% of the company. Later in my career I joined a very late stage startup (think sub 500 employees) and was compensated with about 0.007% of the company.

Also note, that when I say compensated, that was with a standard 4 year vesting agreement.
There's a very practical issue as well--you can't just say "Oh, well, this machine only hoovers up packets from foreign nationals coming across the wire". It's far, far simpler just to grab everything, and so the practical tendency is to do that. And once the machinery is into place, and the invoices paid, and the appropriations made...well, you're not going to turn it off so easily.
Why Developers Underestimate, or 100 Sandwiches