skysight-inc/HackerNews huggingface dataset:
>Worse, they might just convince some poor soul that "you know, maybe $65/hour isn't so bad after all", and invite him into a lifetime of being underpaid when the reality is that he could 5X-10X that if he wanted to.

I'm interested in making 5X-10X of what I currently am. What should I do?
I really believe in Persona. This is an interesting evolution of it.

Any Passwordless dev around? Care to shime in on this?

Edit: To be more specific, "token-based auth" is an interesting take on the browser-based auth concept. I still think the latter is what will eventually be the solution to the growing auth needs of the web: Authenticate to your browser and your browser authenticates to web apps for you. We see the same thing happening on mobile with apps (eg. on Android, users log into their google account on the android system itself).
Portfolio – Korice
Yeah, but you're not introducing a new failure point. Most services already let you reset your password - as long as you can click a link they send to you in an email.
If you have someone else's mail you can compromise standard (with password) services as well.
"You're less likely to find a same-day delivery-ready molecular model set on Google Express, but for everyday needs like groceries and toiletries, the two services are fairly comparable."

Really? I suppose it's probably possible to order milk and eggs from Amazon Prime, but that's not really their wheelhouse. Google Express seems much closer to a Postmates or Instacart (or, uh, Kozmo) competitor
Comprehensive Apple App Store Analysis
Bill Gates on Why Inequality Matters
That's the "worst" RC4 attack I'm aware of. But I'm not sure that it's quite at the level of a practical attack - certainly not as bad as POODLE.
Ty

If you managed to get the actual non-asmjs source code plz let know (reply here is good enough) :)
30 USD per hour, so c. 200 USD per day. Poland, but mostly remote clients. Mobile apps (crossplatform, also native iOS), occasionally some accompanying Python or PHP stuff on server.
Low-cost Braille printer using Lego
I can't help but wonder whether you're that circumspect with everyone or if I come off as crazy-kill-you-you-phillistine and need to work on my communication skills?

Aside from the fact that I've never felt scarier, I agree entirely with every single point you just made and thank you for qualifying my broad generalisation.
Of course, missed that somehow.

With that out the way, this is really interesting stuff, although some people may end up with crowded inboxes.
11€/H.RO (~10€ after taxes). Back-end/Front-end senior web developer (PHP mostly).
My current rate is $240/day (60k/yr salaried) as a python backend engineer in NYC with 1.5 years of experience.
> we hate it, but we've already dealt with the problem once, so doing it again isn't a big deal

Some of us hate it and just don't play these player-hostile games. I think that games that are meant to be played will respect the player and treat her dearly. Games that exist just for the buck though... oh well.
Sure, but you're missing the bigger picture- The point is to reduce the total number of passwords a user has to manage in general. The fewer passwords you have to remember, the more likely you are to protect those few 'root identity' accounts (by using a strong auth/password).
The Dark Web: haven for drugs, guns, sex slavery
Been working with Scala for 1.5 years and loving it. sbt feels easy to work with, compile times have improved (and you can improve it further by modularizing your app). Scala gets a lot right. Type inference makes it feel dynamic while still being safely typed at the compiler. Pattern matching and everything-is-an-expression are really the killer features for me that makes my code much more expressive.

The one thing that does bother me, as mentioned elsewhere, is operator overloading. There is a veritable soup of operators and you're never quite sure what an operator is actually doing. Worse, there aren't any plaintext equivalents. scala.collection.List doesn't have any "prepend/unshift" or "append/push" methods... all you have are ::, :::, +:, :+, /:, :\, :::, ++:, :++, ++ and so on.
Man, the little transit card beeper thingies at the new train stations in Minneapolis use Windows. It's everywhere.
While this feels similar to a password reset process, it is different:

a. you're sending the auth credentials every single time a user wants to login. If email was secure, that might be fine, but it's not.

b. On a password reset, you typically require a user to actually reset their credentials, and then allow them to continue. In this case, if someone accidentally forwards the email, or enters the wrong email address, the recipient automatically gets access to the account, no questions asked.

It is an interesting concept, though. I don't really know if I like it yet, but it's nice to see people trying to work on this problem.
I still don't understand the notion that dynamic types gives you anything more than static types. Are there really usefull programs that can't be written in, say, Haskell?
How to check that your analytics app shows the MRR right?
"Thanks for all of your feedback on this bug. We’ve heard you loud and clear."

In stark contrast to the same style of comments provided by the chrome/chromium developers regarding two bugs / features identified on the GNU/Linux releases of same:

a) snap-back (move the scrollbar up or down, and then move your mouse more than 50px from the scrollbar, and it instantly flips the position back to where you started dragging -- a very MS-Windows experience), and

b) clicking in the URL / address bar automatically selects the entire address bar -- again, a very MS-Windows experience.

Both these features were added in chrome/chromium about 11 months back, were met with something between disdain and disgust, and though the developers said they heard the complaints loud and clear, discounted these concerns, as MS-Windows users preferred this MS-Windows-centric approach.

Bless.

(Yes, I'm still grumpy about all of the above.)
Show HN: A modern approach to personal finance
If I disable everything except TLS 1.2 in nginx, how much breakage should I expect? Has anyone tried?

The latest stable Fx and Chrome, including mobile, will still work, right? What about various web services like rss readers or the google bot?
b.) wouldn't make a difference if the account is compromised
As do I. But I would love to see the stats on the active account (used by a real person) vs active account with 2-factor ratio on GMail. I'm willing to bet the takeup is fairly low.

As I mentioned elsewhere in the thread, I missed the password reset link point. I stand corrected.
Meet People In Real Life
Sounds like Kinescope http://en.wikipedia.org/wiki/Kinescope - But instead of capturing the full framerate of the original video like you would for TV, they only captured one frame per visible slice of land to save space
Because ATMs are usually not connected to the Internet, so there are minimal attack vectors. Every time you make a transaction the ATM literally rings up the bank, using an old fashioned modem. They could probably have Windows 95 installed on them and they would still work fine.
ya fair enough, definitely a difference in quality between PG's lecture and this one to be able to quote from. Still thought Kevin had some decent content though
Owncloud is the simplest way to store your files, all you need is a web hosting account and just install the file its that simple, and here is guide http://www.crawlerguys.com/how-to-start-your-own-cloud-stora...
It doesn't make sense to evaluate historic seed stage valuation based on current valuation. Any angel investment looks like a bad deal retrospectively for a billion dollar company on that basis.

Investments need to be evaluated on the basis of the valuation at time of investment.

Certainly there are many companies who could raise money at higher valuations elsewhere who go through YC, but almost none of them could raise at a >$15m valuation (YC doesn't typically invest in post-A companies).
One assumes. I am not sure that that would be the case. I remember when my non-tech friends only had email and maybe MSN and their passwords were not secure in any way, even for the time. There is more awareness now, though, so maybe.
Also, some gamers multitask. I guess it might be possible to have the layout switch automatically depending on which window is in focus.. but it's a pain in the ass nevertheless.

And switching to a layout you don't normally use absolutely sucks for e.g. in-game chat.

It's not the right solution, it's a sad workaround.

Things get harder still if you need to rebind keys because of the physical arrangement of the keys on your keyboard. In this case, you might have to create a custom layout for each game.. screw that.
I have had some dealings with fraudulent merchants (while running a popular price comparison site and dealing with customer complaints, criminal charges against mervchants etc.) in the past 14 years and my gut feeling with this is that this Jordan has already spent your money on his expensive lifestyle.

It's the repeated false promises and claims he makes in his e-mails that create this impression, for example the quick refund. A serious businessman only promises this if he can make absolutely sure that the customer will get it (and it doesn't matter that he wrote "we hope to ...", it's a clear message). I've also read Jordan's reddit posts, sounds fishy as hell.
Completely off topic nit-pick: "It's" is a contraction for "it is" or "it has". "Its" signifies ownership, just like "hers".

"Amazon sells its own brand", since the brand belongs to Amazon. "Even if Google spends its way" since the way belongs to Google.

I know no one likes the grammar police, but it is really distracting to read otherwise well-written comments when they contain such basic mistakes.
Google glass would be a great implementaion
just needs a browser plugin to check your mail via imap for any email containing a token link to any of your open tabs and to automatically auth you...
Show HN: Get coached by developers for free
Persona is no longer developed by Mozilla -- Persona team has been moved to other Mozilla projects: http://identity.mozilla.com/post/78873831485/transitioning-p...
It would in cases where there wasn't an _intentional_ attack. If I accidentally sent a log in email to my Mom, and she clicked it, odds are she wouldn't know what was going on: there is no challenge screen asking for a new password. She's just see my account.
Not supporting common filesystems makes the system more complex for the user, not simpler.
I believe the argument is that most top commenters (which I suspect correlates quite well with high rates) are not pseudonymous, and thus unlikely to respond. See: patio11, tptacek, etc.
Yes, I'm a developer of passwordless.

Persona is great and similar to passwordless in a way with the only downside being the reliance on JS.
I don't think your hypothesis is correct. There are sites out there that already aggregate the permanent and contract markets. (i.e. itjobswatch.co.uk) - I'm sure others exist for other territories.

I know its fashionable to bash recruiters - and man do a bunch of them deserve it. But for contractors/freelancers - if you don't like selling then service companies/recruiters are your friend. Quit thinking of them as useless and start thinking about them as a sales channel who do something for you that you don't like. The key is to find the smart operators - who want to build a long term relationship (want to meet face to face etc etc) and don't talk crap. But thats about you taking the time to vet. Although I seldom need to employ because I'm doing a lot of my own sales, its a good backup and this works well in my market place (and I know of others in other markets who follow similar strategies), your mileage may vary.
Lack of NFS support in chromeos kernels is also extremely annoying.
Appears this is in the wrong thread, probably referring to the robocoin ATM thread;
https://news.ycombinator.com/item?id=8457298
Clickable link: http://www.askadev.com/
This blog has had a series of posts on some of the new features that I found useful: http://emacsredux.com/blog/categories/emacs24-dot-4/
Ask HN: Get some stupidtalk to get the brain going?
I have caught myself reflecting on beginning of the day

chat / talk with co-workers how onesided and inept our

conversations are without them it can be really tough to

get your brain up to speed on work stuff. Is this common?

Just wondering why would one need to do that.
21 Ways How Big Data Will Improve Your Life
>There is a huge opportunity in cutting the costs and fees associated with trade finance with bitcoin.

Why is there an opportunity with bitcoin? Aren't the costs and fees paying for the legal agreements, risk management, arbitration and things like that? Bitcoin might possibly reduce the cost of moving the dollars around but I suspect this is a very small fraction of the cost of this type of service.
You should familiarize yourself with the story of Homejoy. The founders did pretty much exactly what we are describing as a potential threat here in order to gain experience in the cleaning world.

The argument that asking employees to sign a non-compete is somehow unethical, yet getting a low-wage job to learn how to run a competing business is not unethical is moot and completely subjective.
My current daily rate is $9/hour, I work in Indonesia
I work as iOS Developer, I have 8 years of experience in IT and only 1 year in iOS Dev.

But I hope my hour rate will increase soon :)
My current daily rate is USD$640/day, I work in UK/Aus/NZ predominantly. (remote and travelling mostly)

I work as a Full Stack .Net Developer/Architect for web applications, I have 16+ years of experience, with main skills in C#, MVC, jQuery, EntityFramework, SQL, Agile.

Am not an exceptional developer, but I have a good working relationship with my clients to help deliver on their projects. I don't actively network (that I'm aware of) but seem to get work through personal referrals, so must be doing something right.
Senior Perl developers in London should be getting £350-£450/day for onsite contracting work. The market seems to support £450/day, but that needs to include recruiter cost - that is, you're unlikely to get it if you're via a recruiter. Source: I run http://perl.careers/ and have been active in the London Perl market for the last 10 years as a dev and a recruiter.
It's interesting that the default service for user-produced video online (YouTube) sorted itself out far earlier than the default for audio.

Maybe they are hoping for a Google acquisition to solve all their problems?
Introducing Phosphorus.five, an Open Source AJAX Library for ASP.NET/Mono
You can certainly keep the room intact.

In Oslo there's a museum called Norsk Folkemuseum [1] (Norwegian Museum of Cultural History) that includes 160 buildings that were dismantled and moved - some of them from other parts of the country.

Ranging from a stave church built ca. 1212 [2] that was moved to the present location in the 1880's, to a collection of five buildings built in the 1800's in an old part of Oslo that were moved to the museum when that part of Oslo was re-developed in the 1960's.

[1] http://www.norskfolkemuseum.no/en/

[2] http://en.wikipedia.org/wiki/Gol_Stave_Church
Why is the san francisco airport a "big feat"? It's not like people HAVEN'T been using uber or lyft at the airport (I sure have).
The landing page is very ... thin in terms of actually communicating what it means to "connect" or be "coached".

Is this a 1:1 real-time (textual) chat? Voide chat? Another forum like Stack Overflow (which, btw, is spelled just so, not as a single word)? A video conferencing system? E-mail-based service to let "developers" answer questions that way?

In effect, it tells me too little, which causes me to skip it.
Generally in the UK a recruiter's fee comes from the candidate if it's a contract role, and from the employer if it's a permanent role.

That's not precisely how it works, but companies accept there's a recruiter fee in the cost of a permanent hire, but will have a salary range they can offer, usually set as a policy by HR to stop wage inflation. Also the recruiter fee then is seen as a one-off cost.

For contract wages, companies tend to have an all-in price they're willing to pay, which they'd happily pay the contractor directly. At that point, the recruiter is usually taking the difference between that and what they pay the contractor. In most contract positions (in the UK) via recruiters, invoicing is done via the recruiter.
$80 - $150 per hour (depending on the project) capped at 10 hours per week. Live in a GMT +2 area.

4 years rails XP. Help maintain a very big legacy codebase and have built a rails backend that served an education site that got thousands of concurrent visitors at peak.

Know enough devops to provision a secure server, and do deployments via capistrano or ansible.
Best italian job crawler
Docker and Microsoft partner to drive adoption of distributed applications
FD I work for a password manager...but I would still think password managers are better even if I didn't.

1) Password managers have security qualities built into them, example forced logoff after X amount of time. Someone who leaves their email up is still leaving themselves available for an account theft. The password requires a key to decrpyt. This isn't the case for email
2) Email is not meant to be secure and attempts to do so have gone pretty badly. A lot of the big email providers are leaps and bounds ahead of where they were 5 years ago but email as a whole is still broken.

I think this is really cool and has a lot of potential, but these things still need some work. You probably shouldn't be rolling this out on things that require a high level of security.
The Wine project has no such agreement. I'm not involved with the legal stuff myself, but I know it's been considered by the project bigwigs, and the decision was that an agreement would be too onerous and discourage contributions, especially from non-English developers.

We are, however, very careful that all submissions are accepted under the original author's name. We rarely accept patches of the form "I took someone else's half-complete patch and fixed it up." In addition, all submissions are assumed to be released under the project's license. If the original submitter doesn't have permission to release their submission under that license, then the violated party should take that up with them.
I couldn't make the link clickable. I tried yesterday, waited 24 hrs and still the same issue. Thanks for this.
Again, how he gets this from Amanda’s and my presentation is beyond
me

Yes, I don't doubt it is beyond him. Yet he is one of only two very smart people with very interesting things to say that managed to get themselves removed from my various feeds, because I just couldn't stand their idolatry of static-typing and never ending condescension of anything remotely critical of it anymore.

I haven't seen the presentation, but I don't for a second doubt they implied that:

If somebody stays away from typed languages, it [means]
they’re stupid, or lack education, or are afraid of maths. There
are [no] valid practical reasons for staying away [from type
languages].

He believes they were being very constructive, showing an understanding for other opinions and taking a nuanced view of static typing, with an eye for valid criticisms. I know, from the online reviews, many did not experience the talk that way.
$1600/day, 8 hours/day, 5 days/week, remote (NO TRAVEL), USA. I write software for startups that have raised in the $5-20M range with at least $1M/year revenue. My software is mostly written in C, C++, Java, Python, Ruby, JavaScript. I began programming more than 15 years ago, although I only "officially" entered the industry during 2010.

Don't set my salary as some sort of goal. Lawyers with 1/5th of my experience or talent go for 2-5x easily. Hell, I should go get a JD.
It has been years since I used Windows more than once a month, but a) seems like a convenient feature, while I'm pretty ambivalent about b).
Looks like the buffer was on tape - it would record at the speed of acquisition, and then when it was time for transmission it would spool the tape at whatever rate was appropriate for the quality of the radio link.

And it's small b, so 5 Megabytes on the tape.
May I ask which app it is? It is good to know that MAS does indeed produce such success.
Difference between Java CPU (7u71) and PSU (7u72) release
It's a private messaging platform. You contact a developer or another student if you like and decide between the two of you how you facilitate a session.
haha i can save you some time. there are two models. the first is hypersimplistic, reciprocal of an decaying exponential with four parameters and zero inflection points (although there's one visible in the data so far)... it does not even come close to addressing your questions.

the second model at least accounts for decay - gee - but is still essentially two terms with three parameters- the result is two competing decay terms.

This is, essentially, a trivial joke. it has no delay parameters for incubation, etc. I've only skimmed the article, but I can't find an actual attribution of these numbers to the model (the model itself is from a journal). It seriously appears like an editor said, "Let's get some scary-mathy-lookin stuff up there on Ebola).

if it bleeds...
Java SE 8 is ready to debut as the default on Java.com
Not really. If your changes aren't controversial, you don't really need to get permission. Arguably some developer could demand their contributions are reverted, or sue, or whatever, but for all practical purposes no one will care enough.

Having an agreement isn't a no-cost option, it adds another barrier to contribution to a project.
my current employer gives me 11 EUR/hr. However i charge 15 EUR/hr for smaller freelance jobs.

i work as an (mainly php)associate software engineer, in the netherlands, have a half year of experience. my main skills are LAMP.

I am interested in a remote positions, as well as local (but i am particular about which time of day I work).
It's not rich semantic features that are missing, but basic stuff such as C++11 keywords, handling of >>, etc. Those seem to be available in a cc-mode branch, but since cc-mode is maintained separately from Emacs, it takes more effort than it should to have an updated version of cc-mode in Emacs.
Thankfully good games let us rebind them. I play with ESDF, and if the game needs a separate sprint button, I'm likely to have it in A, where it's as close as it can be. Z is often a good key for crouch. I find these easier to reach than shift & ctrl in the WASD arrangement. And my pinky can still reach ctrl, shift, caps and tab if needed.
Its probably running on google speech api, im not very familiar with it, but the calls may be a limited / paid sevice
Yes, password managers are absolutely the better solution, if we can convince every person to use one :-)
Business as usual, this article is from 1994: http://www.motherjones.com/politics/1994/05/company-spies
Unfortunately I do not know so well Haskell to give you an answer. I was referring to this:

> I think this is because there is yet to be a language that makes expressing complex types easy.

Since I'm obliged to use a dynamic language (JavaScript) I'm looking for a solution in it.
And in JavaScript is really easy to express a complex type, say "the set of all the even integers between 2 and 14 but 10", using runtime checking to enforce the constraints. Is it simple in Haskell to define such a set in its type system?
Where the Engineering Jobs Are- snapshot of ~300k jobs by field, state, metro
You laugh, but this is closer to most companies "quality policy" than otherwise.

True quality comes from good process and systems, nothing more, nothing less.
Not to mention the fx risk involved.
I missed the evidence.

California law provides for penalties payable to the employee, giving him his daily wage for each day the last payment is delayed. http://www.dir.ca.gov/dlse/faq_waitingtimepenalty.htm
It typically isn't worth trying to dick over your old employee.