skysight-inc/HackerNews huggingface dataset:
From Hellman's letter to Stanford's attorney:

>Although it is a remote possibility, the danger of initially inadvertent police state type surveillance through computerization must be considered.

Yup...I'd say we've pretty well backed in to it.
Well, they do point out why you don't want to be a little player on IEX:

“Trying to find liquidity without having an impact when you’re doing it is an over-arching challenge we will always have,”

Huge players don't want to have a price impact before they trade - they want the price impact to happen after. I.e., it'll happen to the little guy rather than to them.
It is how it's done in the entertainment industry (for 10%), but finding the work is only part of what an entertainment agent does. They also negotiate the deals, help resolve conflicts, help build the team for the project if necessary, etc. Plus in many cases, the agent (or their agency) is better known in the business than the client, and just mentioning the agency opens doors even if they don't make the contact.

That all seems unlikely in the case of 10x.
They do recommend it as an alternative here and it certainly avoids many of the mentioned issues (relying on other people's architecture, leaking hashes of your data and probably much of the exploitability due to the use of a memory-safe language), though I do not believe there has been a formal review.
If what you're saying is true, that's a bit disappointing, but it may also target a different segment of the market than folks like you.

FWIW over at http://OfferLetter.io, we spent a lot of time figuring out the right pricing model - We let the candidate choose either %-contingency-on-increase, or flat-fee. This seemed to be the best route for incentive alignment. If you have any other ideas for pricing models that work well, do let me know! mallyvai-at-offerletter.io

[We discarded the %-of-net-compensation model - it felt too extreme, and it wasn't clear we could add sufficient value in every case.]
Spark is nice, but its memory model almost requires a full cluster overhaul. We looked at it at my last project. Our cluster nodes only had 64 GB of RAM. That was carved into 4 GB workers. In order to use Spark we'd have to halve our number of workers because of the memory requirements.

Neat project. Has its place. Requires a different cluster configuration which might limit its utility.
State Department email attack 'fits pattern' of Russian hackers, says expert
JS (for the browser anyway) is difficult in that there's basically three generations, and any docs you read are may be from any of them:

1. Per browser DOM APIs

2. jQuery

3. Modern DOM APIs. document.querySelector(), nodelist.forEach(), element.classList() etc. You'd use CSS transitions for animations you used to do in jQuery.

Personal style also comes into it. Some people use function variables, others functions declarations. Some people put script tags everywhere, others use one of two modules systems. There's no one right way to do things. But there's a lot of wrong ones.

First things first: understand the basics, like async and closures. They haven't changed.

And get the yellow book with the bird.
Thanks for this. Looks like gold.
I don't disagree, but "I told you so" doesn't always fly with most people.
I don't even think we have these extreme daycares in NZ.

They're not the norm in USA either. As TFA implied, this is not just a failure of the state (although it is that), but also of the social structure. The single parents described have no one to whom they can turn. I know a family (parents not married, but together for a long time) that had a hard time over the summer. They camped in a state park for over a month. (The younger son loved it.) The good news is that now both parents are working, incidentally at jobs that allow them to still eschew daycare. (Not that daycare is bad for other families; this is just an indication of this family's views.)

My time in NZ was almost entirely in Wellington, and was over a decade ago, so maybe everything is different now. One challenge for me was living and working downtown without an automobile. When walking absolutely wouldn't work, I found the buses to be less convenient than buses I've ridden elsewhere.
I often play around with new languages and other software that isn't in my distro's repo. For that, when they have a .deb available, it's often downloadable, and if I'm just playing around, I don't want to mess with my sources. So I copy the URL in my browser on my local machine, and paste it after "wget " in my terminal on the server, and go from there.

I could obviously just use curl for this, but wget requires no additional options or thought.
Yeah, I was just about to go edit that. "Cool URIs don't change" and all that. It would still be bad to change URLs; you just wouldn't need to update the client API code.
Note that he uses ohmyzsh. There's ohmybash too: https://github.com/revans/bash-it

For menu complete with bash, the easiest is to add:

TAB menu-complete

inside of "~/.inputrc" then start a new shell to test it. Thats because it uses readline to handle command line (and inputrc configures readline).

Note: im not saying the experience is not better in zsh, just that both can do all this stuff. ive been switching between zsh and bash quite a few times myself over the last decade and use bash daily most of the time lately.

In my eyes:

zsh:

- nice and neat to configure/less bloat maybe

- powerful scripting language

- some scripting syntax requires zsh so when you get used to that... you write non-portable stuff ;)

bash:

- does approx everything zsh does and some more

- scripting language works everywhere because everyone has default to bash

- scripting language is slightly less powerful than zsh in some ways

- configuration is a little more all over the place (just like the .inputrc above)

Thus, all things considered, and given the improvements in bash over the last past .. 5 years or so - i'm using bash more often even thus zsh is also a very nice shell.
"Company, Location, Salary range?" is my low-pass filter quick reply to random recruiter approaches.
It's awesome that these kinds of studies are finally able to happen again.

Scientists had already determined the usefulness of LSD and other psychedelics in Psychotherapy of this sort back in 1950 (http://www.psymon.com/psychedelia/articles/busch.htm), but since the controlled substance act in 1970, it hasn't been possible to do any real science in this area. Good to see this finally starting to change.
Pangu jailbreak
> Is backward transliteration from pure JavaScript to Spider possible

Yep, this is important to avoid the "Groovy" problem where Groovy is valid Java, except for lots of little cases where it isn't, e.g. == behaves differently, default member access behaves differently, etc etc. Since Java 8 lambdas, Groovy is now wildly different in its syntax.
finally something that beats nuclear weapons
Jimmy Fallon, computer science major (audio)
And having extra irrelevancies to worry about such as "Version your API", "Use nouns, not verbs", singular versus plural, and nested resources are the consequences of being "practical".
You don't want to be submitted by two different recruiters for the same job. It's awkward for the job's HR and for everyone else involved, and could potentially invalidate your resume submission. But recruiting firms also use this mechanism to feel out their competition.

Rec: "I have a position with AAA Airline you might be interested in."

Me: :"Sorry I was already submitted to them via Firm B."

Rec: "Oh, you should have gone with us instead. It's always amusing watching them try to work the AAA Airline jobs. Are you working with SoAndSo?"

Me :"Yes..."

Rec :"ha ha ha, best of luck to you guy"
Yes - I concur that the "cryptanalytic breakthrough" GCHQ talked about the NSA having a few years ago was most probably some kind of a practical RC4 break, from context. (Schneier thought this one of the likely possibilities too.) It's used enough in TLS (especially at the time these documents were penned, as some advising on BEAST countermeasures actually encouraged people to use it, instead of switching to TLSv1.2 to use the strong AEAD ciphers - awfully convenient for them!) that if they have, say a known-plaintext-prefix attack of reasonable complexity that can be hardware-accelerated, that would be widely leveragable into very real breaks to them - and the structure of such a thing would look remarkably like what we see here.

RC4 is about as good as such a simple crypter can be, but it really is too simple and not good enough now, and I strongly suspect it is already toast and way too late to safely phase out - which is why the IETF are hopefully about to publish an RFC strongly recommending it MUST NOT be used in TLS, at all. (Worse, even if RC4 isn't toast to everyone right now, an attacker who can put your data on ice for a few years - like just about every Nation State Adversary does - may very well make toast with it down the line and read all your data.)

We don't have any second-preimages in MD5, yet; what's demonstrated are techniques for efficient collisons. They might, but collisions are easily enough for practical problems as many have publicly demonstrated. SHA-1 hasn't been publicly demonstrated with a collision yet, but it has all the same underlying problems as MD5 (and the original SHA), just to a lesser extent - I suspect that NSA can produce SHA-1 collisions with enough effort. Don't expect them to spend more effort than they need, however, to save money and avoid revealing capabilities where possible. Several attackers have happily leveraged simpler shortcuts - there's a piece of (probably South Korean) malware that has signing keys co-opted from hapless developers who've somehow been derping around with 512-bit RSA keys. I could break those, so that's completely ridiculous!

By the way - do be on the look out for PGP signatures with 1024-bit DSA signing keys. There's a lot of them. Upgrade to at least 3072-bit RSA, I suggest (or Ed25519).
Uhm, I mentioned that in my post. Thanks for re-iterating? Personally, I thought it was pretty simple, but I come from a land of CORBA. I don't think the ultimate solution for "this structure is too complicated" should be "fuck structure altogether" though. Rather, we should try to arrive at a simpler structure.
Title is misleading.

It's an active attack, meaning it requires packet modification. Its been done to death, see stream watermarking, etc.

Show me an effective passive attack with a powerful but non-global adversary and I'll be impressed.
Precious stones hold the stories of continents, oceans, and cultures
Sorry if this isn't what you're asking, but this article is part of a series for different languages: http://howistart.org/
Bluemix + Hadoop + Big Data Challenge
The government has a window into basically all the file sharing services.
I'm sorry, did you just suggest something SOAP-like with more features? Because SOAP is too complicated?
Python's Little Tin God wouldn't like it.

Python's feature set is basically what's easy to do in a naive interpreter. Everything is a dictionary. Anything can be changed from anywhere. With "getattr", you can patch one thread from another. It's elegant, and very difficult to speed up. Google tried, with von Rossum on board. Their "Unladen Swallow" JIT compiler project crashed and burned.

The PyPy group has made a fast Python compiler/interpreter/JIT system. It's really hard. The initial funding from the European Union got them started, but wasn't enough. They really try to handle all the hard cases. This requires two interpreters and a JIT. They have to handle "oh no, someone patched object A from thread R, invalidating code that's running in thread S". There's a "backup interpreter" that kicks in for hard cases, and once control is out of the area in trouble, the JIT can recompile it. (This is an old and oversimplified description.)

This transactional memory thing is very clever. It has to separate things at run time that probably should have been separated at compile time, of course. It's impressive that they can get it to work. It's a lot like how a superscalar CPU works, including transaction commit and backup at the retirement unit.

Python gets into this mess because, like C and C++, the language doesn't really know about concurrency. (Threads came late to UNIX, and C predates threads. So C has an excuse for backing into concurrency.) Python has the C model of concurrency; at the user level, it's treated as a library issue. Internally, though, it needs a lot of locking, because there's so much mutable state in the interpreter.

It would be a lot easier if the language were restricted a little. But then It Wouldn't Be Python(tm). The price of this is huge complexity layered on a simple model, and probably years of obscure bugs in PyPy.
Which fails badly if the download gets interrupted.
As a person who has an anxiety problem I'd be worried about having a bad trip. I have never done LSD though..
Repeat after me: languages don't have speed.
Maybe to someone who is just now getting into the industry, but it wasn't long ago JS had no speed.

Python also varies in speed over time and implementation. Implementations have speed. There are reasons that people use "slow languages". It's not just developer happiness. You really do have to look at performance holistically.

If you want to speak to microbenchmarks, I can. For example, CPython's std lib JSON processing is done in C. It's very fast. As of Go 1.2, PyPy blew the doors off Go in my tests processing 10,000 JSON records. CPython 2 & 3 also beat Go in my tests as well. What's this mean? Does it mean Go is a slow language? Well, it's one microbenchmark vs another. It really doesn't mean much to your application.

"I don't know why slow-language people bother throwing up the argument that benchmarks aren't everything."

I'd go even further than 'aren't everything'. Benchmarks that aren't your application do not mean anything.

Many are ignorant of how CPython is even built and are shocked when I show them how fast many standard library modules are. It's just not so simple. Don't believe the hype.
Radiotopia successfully funded
These recruiters act as matchmakers. The basic idea is that you don't know about all the companies that might want to hire you, so you can't send them your cv. You talk to one (or a few) recruiters and they do the leg work to talk to lots of companies to find the few that you would be interested in. If you accept an offer, the recruiter gets a substantial payout from the company that hired you. If the recruiter is good they save time for both the candidate and the hiring company. If the recruiter is bad they waste you time by trying to get you to talk to lots of companies when randomly sending out your cv would have worked just as well.
I just skimmed thru the list and found dozens of very interesting stories that I missed, mainly because I haven't been with HN for that long. Looks like I have some catching up to do tonight :) thanks a lot!
we use wework for the space, because it's far superior to any other offering in nyc. the networking/collaboration aspects are severely overstated by the company.
Thanks, I was going to look for this after the mention it got in the Programmer's Price article that was on the front page today.
Ask HN: Taskorami 2.0 – Which design is better?
We have had thousands of downloads for Taskorami 1.0 on Windows 8 and want to bring it to web, desktop and mobile

So, we are building Taskorami 2.0 from the ground up and want to get some feedback on design.

Check out these 2 designs and let us know which one you like more.

make sure to click around to see different views

Design #1- Light
http://bit.ly/1xQn2dU

Design #2 - Dark
http://bit.ly/1t4FE3M

Simply leave a comment with "light" or "dark" to let us know which one you like more or email me at eibrahim at gmail.com

If you want to follow our updates and get an early beta invite, you can signup at http://bit.ly/14Amn5Q

Thanks in advance for your constructive feedback.
The recruiters are not the ones offering the opportunity and employment. Most of the time, they are actually forcefully interposing themselves between me and that opportunity.

My "outrageous entitlement" stems from the fact that I have a specialist skill that is relatively rare, yet also highly in demand, at least for today. That combination allows me to charge more for my skill than most other workers can charge for theirs.

This means that companies may have difficulty renting that skill as a price low enough to justify the expense, as they can be outbid by other businesses. Those high-bidding businesses do not need recruiters. They publicly advertise, and get enough responses to filter their own candidate pool. The recruiter offers a company a more directed advertisement, aimed at folks who might not necessarily be looking for a particular opportunity, but might be willing to pursue it anyway.

Recruiting is advertising and sales.

We are not mocking the company offering the opportunity. If they are embarrassed, it would only be because sleazy, inept, and ignorant people, operating under the color of agency, spread the word about it.

This situation is very much like a person that offers to do all my Amazon shopping for me, who helpfully takes several hours of my time to figure out what I want, then ignores all that and buys for me everything listed in his own store, with the occasional outside purchase completed through an affiliate program. In all cases, I would be better served by declining the offer and doing my own shopping.
Ah, ok that makes sense. I wasn't really thinking about it from a recruiting firm's standpoint, but, you're right, that could cause problems.
we're running spectrographic analysis etc but we don't know the color of the surface? it strikes me as strange we don't have color photos. is it to save bandwidth?
I've been using node-jsx and jsx-loader to bring JS Harmony syntax into projects I'm working on now. The last great hurdle to make JS a language that's easy to express in is the existential operator. It sucks how often you have to manually null-check in JS.

I'm mighty tempted to write a Webpack plugin to make `?` usable in vanilla JS.
only thing you need:

twitter.com/actualrecruiter
"But flash trading isn't about front-running" -- standard HN apologist
>> "Several months ago the general direction of Angular 2.0 began to change in critical ways. I found myself fundamentally at odds with certain aspects of the proposed design. Still, I tried to keep an open mind and explore the various possibilities. Unfortunately, I haven't been satisfied with how things have progressed since then. At this point, there are too many irreconcilable differences. The Angular that's being built is not the Angular I signed up to work on and after careful consideration I do not believe it’s best for the Durandal community."

Ouch.

Angular 2.0 is really looking the ugly beast, isn't it? I mean, killing off core 1.x concepts like $scope, controllers, DDO, jqLite, while introducing a new programming language to suit the framework -- even if optional -- is it too much?

I feel Angular 2.0 isn't really Angular. It's a new framework that shares the name only for branding purposes.

And now seeing the respected Rob Eisenberg leave the team based on irreconcilable design differences really undermines my faith in Angular 2.0.
None of these reasons matter at all for production builds. The production build needs to happen only once per release, and the only things that count are performance and reliability.

The last time I checked gcc still had better performance than CLang, but things might have changed since then.
"... From there it is only a small step to measuring "programmer productivity" in terms of "number of lines of code produced per month". This is a very costly measuring unit because it encourages the writing of insipid code, but today I am less interested in how foolish a unit it is from even a pure business point of view. My point today is that, if we wish to count lines of code, we should not regard them as "lines produced" but as "lines spent": the current conventional wisdom is so foolish as to book that count on the wrong side of the ledger."

~Dijkstra

https://www.cs.utexas.edu/~EWD/transcriptions/EWD10xx/EWD103...
A complete redesign of the Science Exchange order experience
Ask HN: Google Cloud vs. Amazon Web Services Comparison?
Does anyone know of a pricing tracker that compares GCE vs AWS in terms of price / GB storage, instance types, bandwidth etc?

Would be especially interesting to see the historical trends here.
The Plan to Turn NYC's Old Payphones into Free Gigabit Wi-Fi Hot Spots
Six ways Knight Rider predicted the future
The drill probably not (no results for COSAC):

https://twitter.com/erichand/status/534413817040867328

They might have had some results from particles/gases in the atmosphere, not sure, nothing announced yet that I know of but they did say they were taking measurements. It might be weeks/months before they announce results.
Everybody always cries "front running!" I believe front running is an overblown issue. I also believe that most defenses of HFT as "liquidity providers" overlooks a large share of prop firms and hedge funds using HFT for speculation and are not in fact liquidity providers.

But the firms that do play liquidity -- the firms that compete with one another for your order after it comes thru your broker -- aren't hurting anybody by front running. In fact, they value your order flow so much (for their own info) that they price-improve for you so they capture more/all of the order. IIRC over 60% of stock trades are price-improved.
I have a bad connection, so it's better for me to use a download manager that can resume failed downloads properly. Browsers usually fail at that.
For the longest time I thought this was entirely unfounded as well. Then I applied for a position with a start-up that seemed quite interesting and I had only found out about it due to the recruiter.

I went through the whole interview process and the company, who I shall leave unnamed, wanted to hire me. They didn't however want to pay the recruiter fee even though they had explicitly reached out to the agency to do their recruiting.

The company's take was that recruiters were worthless and just fucking them out of money; so now that the work was done they wanted to bypass the recruiting firm and hire me directly and pocket the fees.

Ultimately I walked away from the whole thing because I didn't want to work somewhere with such questionable ethics at the top.
Well that was interesting. Thanks for sharing.

But seriously...
Kash (YC S14) Is Hiring Engineers and Account Executives
How about Chromium? Are they switching too?
Asked too soon, this seems to cover it: https://cloudvertical.com/cloud-costs#cloud_costs/index

Still: anyone know of this with historical graphs?
Good idea, but if you're including the checksum in the file, you can't use too good an algorithm and still expect to find a collision. I guess for some positions collision-finding would be impressive?
How Leica Lost Its Way
The user/developer divide is the worst excuse for the GPLs' restrictions. Once users "modifiy it to their whim" and distribute the changes, they're developers and distributors. At that point, it's the developers' and distributors' freedoms that matter to them.
For Sale: 50,000 Bitcoins
"I have no idea what front running actually is" -- standard HN complainer