skysight-inc/HackerNews huggingface dataset:
This has to be a joke. I'm fond of TDD just as much as the next person, but seriously, some of you RSpec fanatics have lost your minds.
A Strategy for the USD/CAD Developed in R Using Data Mining
No comment :P
"unless you have something genuinely new to say about them."

(From the guidelines.)
I suspect might be important to be hired in corporate environments because, you know, management. That is my outsider's feeling not only to this article but to other articles I read on the matter.

That said, some points the writer makes sound a little strange to me:

"But is ethical hacking an effective counter to unethical hacking, especially when those who practice the latter can do pretty much whatever they want with a wide variety of tools?"
Why, do ethical hackers restrain from using those same tools for testing? Unless we are talking about breaking into the facility at gunpoint, mmh.
The feeling I get is the classic "I don't know exactly what they do, so must be vodoo" vibe.

"“Typically, these certifications are offered after a class,” Williams said, while cautioning: “None of the skills that hacking requires is easily measurable in a class and exam format.”"
No shit. So why do you do it?

"“Certifications are a calling card to say you’re committed to the industry, the profession, and lifelong learning,”"
Ah, that's why. Of course, bosses like their certificates.

It's not a technical article, though, so it's more about the "business" side of things.
App Store Optimization: A Quick Overview
Investigation of Galaga No-Fire Bug
Most people aren't likely to shit themselves without a poop tracker, but most women keep track of their periods to keep from ending up with blood on their pants. Out of all this obnoxious quantified self stuff, this is the only thing I would actually use.
Well, what do you already know or use? That's where I started.

My story: I'm a PHP programmer who got tired of being ridiculed for by security people for using PHP as my main language, so I decided to go around to popular PHP projects, review their code, and submit vulnerability fixes. This transformed into a dozen or so pull requests and a BSides talk, and is an ongoing effort to clean up their libraries.
For now I'm going to offer gut feeling. Take this or leave it - I wrote two paragraphs here that essentially came down to an argument to an authority re: my personal experience and the opinions people who know who trade. That's shitty logic, so let's go with gut feeling for now...

I don't believe that the same specific bug has manifested itself across many many different HFT algorithms run by many different actors over a long period of time, in a way that loses money consistently for everyone involved whenever the bug is triggered, without ever being addressed by anyone.

To argue otherwise is contrary to my current understanding of software engineering best practices - imagine another industry where every service provider has the same bug manifest in the same way, across all their different software stacks - some running Java, some Python, some even with their own proprietary languages - and no one ever catches it even though it's losing money and it's occurence is easily identifiable on a time-series graph (so very easy to be matched up with all available logging data)? No one has the resources to throw a team of devs at this for 6 months to identify the bug, or they do and they're just willing to lose money and not make every last nickel they can? Not a single person is trying to reach for that lost money with a bug fix or a novel tweak to their own existing algo? For years?

I believe it's more likely that either the actors who are quote stuffing believe they are benefiting by tipping their hand early with false information, or they actually are benefiting.

It's hard to imagine how these actors could be benefiting; perhaps they believe that someone is watching their quotes in transit or has visibility into their quotes before trades are executed, and the quote-stuffers are trying to fake these malicious actors out?

The alternative scenario where quote-stuffers are not benefiting from their actions - or rather, that they aren't even operating under the irrational assumption that they are benefiting (because the quote stuffers could be stuffing intentionally but incorrectly) - seems much more implausible.

It seems to involve a whole lot more things going wrong in a very specific very atypical way,from a software development standpoint, with no one every interested in picking up the money they're dropping on the floor due to this bug when things go wrong, over the course of years, even though all the data to pinpoint the source of the bug is public, charted, and discussed openly.

The first scenario just requires a quote stuffer to hold a possibly incorrect belief about the other actors in the market. The second requires multiple specific distinct software development failures to line up like dominoes and stay lined up without anyone ever addressing their root causes.

But who knows :) <shrug> Trading is chaos, after all.
Interesting quirk on the website, when you click the location dropdown at the top of the page and it stays open, scrolling to the bottom of the page reveals the same open dropdown.
Mobiles cleared for use on flights
This stuff is fairly innocuous if that's all Lewis can come up with after reviewing 46 hours of tapes. "I'm not going to comment until I know what my boss thinks?" That's something nearly every underling has or will say at some point.

The bigger issue is that being a regulator in the U.S. is a shitty job. Half the country thinks we shouldn't even have regulators, and the other half blames regulators for not understanding what they're doing out of one side of their mouth while condemning anyone with industry experience who does know out of the other side. So no surprise that the regulators are deferential to the banks. At any given time they're one presidential election away from losing what little leverage they have.

Our regulatory system is the result of a clash of cultural values. One one hand we aren't comfortable with doing away with regulation. To the contrary, we demand it. On the other hand we think of regulatory bodies as leeching off "value-creating businesses" and condemn anyone who undertakes government service. Unsurprisingly, we get regulatory bodies that try not to rock the boat.
Unlike what some suggest here: do NOT use public sources as reference points for salary negotiations. Virtual all of them come up with average salaries that are way, way lower than what most good developers could earn.

I strongly suspect these sites are being gamed. Either that, or the numbers are based on surveys that are mostly filled in by people that are worried about being underpaid (guess what, that means they probably are).
I guess that you simply pointed mail.example.com to www.spamfirewall.at? I would expect your setup to work if you'd instead point your MX record at www.spamfirewall.at, so that the certificate will match what the sender expects to see.

IIRC, SpamAssassin (slightly) penalizes e-mail coming from anything except mail.example.com and smtp.example.com, so it would be preferable to get your mailserver to use mail.example.com with an appropriate certificate. But if this is indeed an external service, you may not want to give them the private key of a mail.example.com certificate.

In any case, it's worrying if they're vulnerable to Heartbleed, but it's not that bad if SSL doesn't work - mail will still be sent in plaintext if the sender's mail server does not support it, or if you're actually under (man-in-the-middle-)attack, so you should treat e-mail as fairly untrusted anyway.
I find it quite funny that people cannot tell whether this is a joke or not, just says something about the state of things...
Some Netgears do offer telnet, though you often need to enable it via a "magic packet" hack. If you Google your router model number and "telnet" then there should be more information on whether your product supports this and how to go about enabling.
Prediksi-skor-roma-vs-hellas-verona
They quite famously are rebooting EC2 physical servers at the moment, maybe that's what you're seeing?
Freelance. I recently took a month off and traveled around Asia. I regularly take 3 and 4 day weekends. I fully intend to take 3-6 months off sometime in the next 6 months.

If you're half as good as you say, freelancing should be a very easy option and provide you with all the flexibility you want. Find companies in need that can provide lots of work and then manage their expectations around your availability.
It is indeed the appropriate answer here, that seems pretty clear to me. What's not clear is how we both came to the same (or similar) conception of what's the right answer from all those possible, arguably correct, answers.

This is basically a restatement of the Frame Problem, which I believe is an unsolvable problem if you limit yourself to software. This is basically my PhD, and I only reached this opinion after much wailing and gnashing of teeth.

In some sense this program isn't limited entirely to software, but extends to the full gamut of cultural human lived experience, by exploiting the intelligence already present in the input corpus.
What if you can automate your AWS infrastructure, so there will NoOps, like using Heroku: CD/CI, AutoScaling, AutoHealing, just battery included?

The point is that you have the 100% control of the infra, but the orchestration service can get you covered. And of the orchestration service went down, your instances will continue to run. Not like in Heroku, their downtime is your downtime!
I'm not sure how accurate it is for recent graduates but I would definitely give a try with salaryfairy.com. It is a platform that people try to guess salaries of other people anonymously basing on their resume. when you have enough number of guesses you will see how much you would worth in the market.
I actually started to track down where you live to find what city you're talking about. I was going to find that portal and prove to you that the fact it's a Zipcar parking spot is a pure accident; there are lots of portals at commercial spaces (bars, restaurants) submitted by users because there is something special and important to local culture about them, and no one is making any deals.

In the middle of my search I stumbled upon this:

http://www.zipcar.com/press/releases/googleingress

http://www.zipcar.com/ingressplayers

I didn't knew about it before. I'm not sure what to think about it. Maybe it's fair that they did it; I need to read more. But I'm getting worried.

The moment they'll try to monetize players will be the moment this game will die. People will leave with a bad taste in their mouths. I'll leave with a bad taste. Someone will step up, make a similar game. But it won't be the same anymore. It won't be The Game.

So dear NIA, please don't screw up what you created. Don't sacrifice the game to Moloch for a quick buck.
Damned, I will change my LinkedIn profile; I didn't know it was sounding pompous :-)

For me, an "entrepreneur" (french word) is someone who undertake an "entreprise". An "entreprise" is not necessarily a company or a business. It is a kind of project. You could say that preparing a party or a wedding is an "entreprise".
Send me sales people (or anyone for that matter) who want to market and sell "minimalism".

All the ones I know only want to sell "features".

Your words are absolutely 100% true, 1wd.

But I have become cynical that the world of software developers and their best customers (e.g., the ones who love "features") will never, ever follow your advice.

Personally, I prefer minimalism irrespective of the security benefits. But "engineering", a term many HN readers might attribute to their own work, like to speak of "trade-offs". All engineering involves trade-offs.

When you go without "features", sometimes you actually get something in return. What you "get" might not always be obvious. This week, it should be obvious. At least to everyone who chooses a more minimal shell without surplus features.

http://mywiki.wooledge.org/Bashism
http://news.ycombinator.com/item?id=6866696p
Agreed in general. Though I can't help but think the Back to School scene is there because of the recent EconPop episode about Back to School.
If people don't get it we should maybe just retry it.
Yes, I had a flatmate who had a "startup". She carried on her hobby (as I would call it) while her boyfriend earned a wage.
The stuff that you suggest sounds amazing, and like it would actually make me want to use G+/Hangouts.

Sadly, the percentage of the population who would be into that is probably single digit, and large companies rarely care about single digit niches :(
On the other hand, simply providing this service enables anyone, malicious or not, to determine if a given mail server is vulnerable. Publishing a "shame list" doesn't reveal any new information, but may result in improvements to the vulnerable servers as a result.
This is a great idea (and name!), but does this fall under FDA regulation? I haven't kept up with the FDA's current policy on medical apps.
Oh if you don't believe it, I don't care. It's only my concern that you not make a dumb case against the word "decline" based on a common sense parsing.

Yet we aren't going to see the sales drop by 50% anytime soon.

For example, the idea that a one-time 50% drop is the definition of a decline. In fact, just last year shipments were down 12% year over year:
http://m.wsj.com/articles/SB10001424127887324695104578414973...

That's just one article. You can try googling "laptop sales year over year" and seeing what comes back. Nobody who knows anything denies that the industry is in decline.

But then again, HN's cadre of Ron Paul voters are known to deny basic economic realities based purely on wishful thinking, so you're hardly alone.
A Primer on the Deadly Math of Ebola
> Let the downvoting begin!

Aw, I was going to upvote you for provoking interesting discussion, but then you had to go and say that, and now I have to downvote you on principle.
Fair enough. My point is that Docker makes packaging up the various services I need to deploy much easier and more predictable. Now, rather than spin up three EC2 nodes to be Kafka instances, I just use fleet to submit three Kafka units and it finds available resources among my existing CoreOS cluster. If I need more capacity, I spin up more generic CoreOS instances on EC2 and fleet starts using them.

The groundwork is being laid and I think we're going to see a lot of competition in Heroku's space. Given the price difference between Heroku and EC2 (much less DigitalOcean) I think there's a lot of profit margin for competitors to attack. That's Heroku's weakness: it's easier than ever to build the equivalent functionality.
This seems to completely ignore what you'd be doing for this company.

This kind of living costs calculation (or something like it) is useful if you're starting your own company -- and want to figure out what profit you'll need to be making before you decide "this is worth the effort".

But if you're being hired to do a job, this isn't a good approach.
find out your salary range where you live, ask 20% more but tell them that your are willing to negotiate or accept less if it's the "right" job. If they really want you, you get to keep that extra 20% , if you are just ok then you get a market rate which is a good thing too. If they are not willing to pay the market rate then maybe is a good thing to not work with them.
I don't think reading some news and HFT have the same impact on the global economy.

http://en.wikipedia.org/wiki/Knight_Capital_Group
Very cool, just this week I was looking for something exactly like this to help automate reporting that absolutely has to be Excel. I wonder how well it plays with PivotTables and how it handles lots of data. I tried all the other python Excel libraries, and they either had memory errors with our data (It's not even that big, but it's much larger than we should be using Excel for), or were fine on memory, but would destroy PivotTables in the sheets they wrote.

For anyone running 64-bit Office and getting a compile error, to get it to run, just add the PtrSafe keyword to the Declare line like this,

Private Declare PtrSafe Function [etc...]
This was a refreshing* summary of modern sleep research, reinforcing what I hope becomes "common sense" about sleep: Avoid bright lights (computer monitors, TVs, tablets) near bedtime. Practice good "sleep hygiene" in your bed. Have a routine!

I've found that I wake up in a better mood when using a Philips "wake-up light" to supplement my usual alarm clock--even during summer. This was touched on in the article concerning how melatonin begins to decrease before waking, something you can trigger with exposure to light.

* The article's also refreshing because it appears to be written solely to provide information and not a subtle "submarine" article carefully crafted to raise awareness of some new startup or service.
Well, I'm not American, so I'm gonna have to take your word for it. Is it really that bad over there?

You would assume wrong. I probably can't make 150 in one set right now, since I train in short bursts, but I could when I used to wrestle in my teens. Five, well, I think I could manage ;)

I didn't mean to belittle the effort, anyway. I know how hard it is train to that level, and I respect it a lot.
Before reading the website it seemed like uber for prostitution. After is seeme some what legit. I guess you can't pick your messager, which I think people will want. I may not care who drives me or cleans my house but I do care who is rubbing all over me.
While this is obviously a joke, I can see it having a limited amount of practical value. Imagine, for example, being tasked with updating a poorly-maintained legacy code base with a large number of indeterminately failing specs containing order dependencies. You could `RSpec::Maybe` everything until you're sure you have the order dependencies resolved, then convert to regular `RSpec::Expectation`s.
I've recommended this book to many many people in the past, but still haven't gotten around to paying anything for it, largely for the reasons you mention. I looked at his options for payment, and they ranged from "buy one of my fonts", which was tempting but expensive, to "buy Typography for Lawyers", which I wasn't interested in because I'm not a lawyer, to "donate to me", which felt like I was getting nothing in return.

I'd gladly pay $10-15 for a DRM-free ebook version of this book, even if it's the exact same content as the one online, since I can keep it with me on my mobile devices and be sure that even if the site one day goes down I still own and can read the book.

Or hell, since the author apparently has objections to e-book file formats and closed platforms[0], then give me a clean downloadable desktop version of the website as static HTML or something. Or an app version of the book which is just static HTML wrapped in a web view. Anything along those lines would be fine, as long as I can view it offline and keep it past the point when the author stops paying for his server.

[0] http://practicaltypography.com/why-there's-no-e-book-or-pdf....
The Ray Rice video for the financial sector has arrived.

Not even close. That metaphor would only be apt if there was literally video of a Federal Reserve employee accepting cash from an employee of a major bank with an explicit statement from the bank saying something along the lines of

"So you're going to keep the interest rates low so we can keep doing bond arbitrage instead of lowering rates for consumer lending right?"

Even then most people wouldn't care because they have no idea how financial institutions work.
Quick method for customizing Craigslist job posts
You get the prize for missing the point spectacularly and for best display of ignorance, congrats.
Oh for goodness sake. It's a joke.
This is about much more than religion. The western approach to life is to work at a job to earn money to pay for food an shelter. The subsistence approach is to spend much of your time hunting and gathering, and maybe some of your time working for money.

Many people are so far removed from the subsistence approach, that they can't relate to what these people are going through. Asking these people to stop fishing and move to a place where they can find other work is the cultural equivalent to telling everyone on HN to stop working in tech-related fields, and go find something else to do. Sure you could do it, but it would take part of your identity away. When your two-year old kid looks up and asks why you're not doing something your people have done for thousands of years, that's a hard question to answer. The Yup'ik people, and all other people who lived subsistence-based lifestyles responded to previous environmental change by finding a different area to live their subsistence lifestyle. That is not really an option. The move away from subsistence is much more drastic than many people can fully understand.

My perspective on this is shaped by having moved to Alaska 12 years ago, and knowing many people who live a subsistence lifestyle to varying degrees.
This is what happened:

Me: "That will depend on the other things in the compensation package, such as the paid time off."

HR: "Everyone gets 20 days. We have gym, swimming pool, and medical insurance. We don't offer stock and don't give bonuses: it is a monthly cash based salary structure. Now tell me, what's your minimum?"

I ended up spitting out a number. How should i have responded ideally?
Unrelated side note: this is the first time I've noticed one of the new TLDs on the front page of HN.
Hey,

thanks for your reply. They are not vulnerable to Heartbleed and I never pointed my domain to their anti-spam tool, it's just something they were offering and set up for their customers I think. I'll just contact them with a link to the test and ask what's up.

Good point about being penalized by SpamAssassin, I'll look into that!
Arguably an insistence on stitching together systems out of 'do one thing and one thing only' minimalist components is precisely why Shellshock is so bad, though.

That so many things delegate setting environment variables to the system shell is what allows a vulnerability like this to be so pervasive. Why does a DHCP client pass server-originated data to a full shell? In some ways, it's a form of minimalism.
I would be pretty simple. You use a high-latency channel with "proper" encryption and authentication to stream a one-time pad key; then encryption and decryption would be a simple XOR, plus a bit of synchronization (to know where in the key stream you are). Doesn't sound like it would introduce much latency.
This is a great answer. Thanks you for taking the time to write this up. Some great advice here.

Someone once said to me that sales is about desire and the price. If a customer desires something then the only reason they won't buy is price. In this case you're the goods and the salesman.
Nice in theory, but my benchmarks show otherwise :) Copying a 32 words of memory doesn't take much more time than copying 1 word of memory.
What do you propose I use instead?
Ready for Rain: Why Seattleites Crave the End of Summer
10 Weed Out Questions to Make Your Hiring Process Less Expensive
Research salaries in your local market via Indeed.com or Salary.com. As a benchmark, median entry-level developers in Boston are getting $63,500> http://swz.salary.com/SalaryWizard/Software-Developer-I-Sala...

Answer: I'm happy to evaluate the entire compensation offer package if we get to that stage. I understand junior developers are getting in the range of low $60s-to-high $70s. *Then flip the question: Can you share with me what your compensation band is for this role?
With RogerVoice, Deaf People Can Make Their First Phone Calls
Your cost of living is the minimum that you can accept. How much the company will earn from the products of your labor is the maximum that they can pay you.

For high-value workers, there is a large gap between those two. Negotiating is about dividing the surplus.

Your strategy suggests "give almost all of the surplus away."
That's the usecase of `pending`