skysight-inc/HackerNews huggingface dataset:
Considering how fast they're growing, shouldn't these companies see "record usage" and "growth in active users" nearly every week?
Yep. Probably a MDM application like MobileIron or Airwatch.

Your wife made a decision most people miss because they are so used to skipping to yes. And wouldn't it suck if your IT department wiped your entire personal device including those vacation pictures of your recently deceased grandma. This happens way more often then you know.

This total control decision is why a container approach (give power to wipe what is the container only) to enabling corporate data is one I favor.
The article does not point out, that not teling visitors which of password and username were wrong on login pages is a useless measure, it shows that there is a second way to find out correct registered email addresses on most platforms (by trying to register them).

This can be easily fixed by sending email conformation tokens prior to creating the user account and informing users in this email, in case they already have an account.
Founder of Mobli and Yo buys Invest.com domain for $5M
My GP is a Certified Nurse Practitioner and I'm ok with that because she actually talks to me about my life and what is going on to try and get the whole picture.
DNSimple DDOS Attack
> That's terrible UX.

Your complaint is extremely unclear. Could you elaborate? Are you suggesting that websites should allow multiple accounts per email address as a matter of course?
There is no question of legality, you are granting the user that access/ability by connecting to Exchange.
Perian will be retired soon
But requiring a captcha before validating the uniqueness of each username would be pretty annoying for large websites where many of the usernames I would choose are already taken.
Interesting what the CoreOS team is building. If the code becomes as neat as some of the main parts of CoreOS, then this alone merits attention, we cannot have to much security.
Does anyone know for certain whether Google data mine's their Fiber data?
TellApart - Burlingame, CA. New York City (Full-Time, Intern, Visa): Software Engineering

TellApart helps many of the world’s most successful retailers unlock the power of their customer data by applying the latest advances in cloud computing, predictive analytics, and machine learning.
Our Customer Data Platform collects and analyzes massive amounts of data to power an integrated suite of marketing solutions that delivers personalized shopping experiences for 100s of millions of consumers in real time.

About Us:

- Profitable (http://techcrunch.com/2013/12/12/ad-tech-startup-tellapart-h...)

- Featured as one of Wealthfront’s Career Launching Companies for the 2nd year in a row (https://blog.wealthfront.com/107-career-launching-tech-compa...)

- Backed by Greylock Partners and Bain Capital Ventures

- Small, but growing team

Tech Stack:

- Apache Spark, Kafka, Hadoop, Hive, Parquet, Cascading, MySQL, Voldemort, Memcached, Zookeeper

- AWS, Aurora, Mesos

- d3.js, Ember.js

Problems we solve:

- Scale our existing data pipeline to handle 10x the data to match our current growth trajectory. (We are currently one of AWS’ biggest customers and only have a 50 person engineering team)!

- Research, design, and launch dual-homed, distributed storage systems that allow single digit millisecond access times to satisfy the stringent 40ms request time real-time bidding constraints.

- Migrate our legacy identity system used for audience targeting and real time bidding, to a new identity system built with concepts taken from the Lambda architecture

- Make performance optimizations to our real time bidding service to bring 99.9th percentile latency to within 30ms

We're currently hiring for all engineering positions.
Apply via our careers page (http://www.tellapart.com/careers/)
Actually the TRAILBLAZER project was the NSAs attempt and it was a total failure, costing around 3 billion dollars. They abandoned it in 2006. SAIC the contractor that "built" it for the NSA got pretty rich though.

"Trailblazer was a United States National Security Agency (NSA) program intended to develop a capability to analyze data carried on communications networks like the Internet.

In 2005, NSA director Michael Hayden told a Senate hearing that the Trailblazer program was several hundred million dollars over budget and years behind schedule. In 2006 the program was shut down, after having cost billions of US Dollars. Several anonymous NSA sources told Hosenball of Newsweek later on that the project was a "wasteful failure".
The new project replacing Trailblazer is called Turbulence."
- http://en.wikipedia.org/wiki/Trailblazer_Project
Machine Zone (Y Combinator '08) -- Palo Alto, CA -- www.machinezone.com/careers

We are a top performer in the mobile space: our flagship app, Game of War: Fire Age, has been in the #5 Top Grossing apps on both iOS and Android for over a year and is currently the world's largest MMO.

We have tremendous momentum and a pipeline of features, platforms, and game titles ready to ship over the next 24 months--so we could definitely use your help as we continue to scale our company and products!

Currently hiring:

-Operations Engineers (DevOps, Site Reliability, System Administrators, etc.)

-Data Platform Engineers (big data, work with massive scale)

-Software Engineers (full stack, experience with highly concurrent systems)

-These are full time positions ONLY

Apply online or reach out to me directly at andrew(at)machinezone(dot)com
More likely, people won't forget how to spell their email address, or make a mistake in typing it that isn't immediately obvious; they might not remember which of their emails they used to sign up, though, even if they only have a couple. No one else can sign up with an email address that belongs to you.
I don't want to be a killjoy but here I got HTTP faster than HTTPS

3 tests

63%
59%
60%

Mac OS X 10.9.5
Google Chrome 39.0.2171.71 (64-bit)
Google Chrome Helper disabled
Just listened to this on my way in to work. I was intrigued by the point that was made by the host that the real world is complex, and that increasing intelligence has diminishing returns. Making something a million times more intelligent than humans may only make it twice as effective. Something I hadn't thought of before.
Homeownership and Wealth Creation
Real Estate Tours in 15 Seconds Using Hyperlapse
DNSimple is DOWN
The father of DNA is selling his Nobel prize because everyone thinks he’s racist
Telling them "correct password, wrong email" seems like a bit of an information leak if you ask me.

I think a "did you mean?" output in case of a bad password as long as there are lexically similar usernames in the database.
What about non-Linux platforms (FreeBSD, Mac OS X with a kext)?

One thing that I believe Docker has failed at is in taking a purely declarative approach to image definition; rather than specifying the packages that are assembled/inserted to create the container, Docker ships around non-portable Linux binaries.
Snowball is looking for full-stack engineers -
Location: San Francisco

Snowball aggregates messages from all of your favorite messaging apps -- SMS, Facebook, WhatsApp, Hangouts, Twitter, Telegram etc. We give you a single, lightning-fast way to access your conversations.

It's a simple idea with big implications: we're pushing the boundaries of the Android platform to make the OS social.

We're building a cross network social graph. What we're not building: yet another app.

Why work with us?

1 - We're doing truly ambitious things with the Android platform -- making humans a primitive on the device. The problems are hard and interesting. After all, who wants to work on yet another photo sharing app?

2 - You're working with founders who have already built and sold a company to Google. If you want to be a founder someday we'll teach you everything we know; in fact, 50% of the engineers from our last company are now founders.

3 - You get real equity and a real salary. We want everyone to succeed in the case of an exit and we don't want anyone to starve while we get there.

4 - Everyone at the company is technical and actively writes code. Except the dog. And we're trying to teach her :)

Email me: helloanish [at] squanda [dot] com
I completely overlooked this.. they have a product that is nearly identical to Kiva:

http://www.swisslog.com/Products/WDS/Storage-Systems/CarryPi...
If you misuse jQuery, it doesn't reflect badly on jQuery as a technology, it reflects upon the developer. jQuery is an outstanding library.

If you stay away from technologies because there are developers out there misusing it, I doubt you'll be left with much but machine code.
> I think websites say "Bad combination" not because usernames are treated equally with passwords, but because you don't have a choice but say that.

Of course you do.

> If I tell you that your username is incorrect, am I telling you your password isn't? This would be silly

Of course it is, a password is checked against a username, not against the whole database. If the site is telling you the username is incorrect it's telling you just that: the username is incorrect. It wasn't able to go any further and check the password since it has no idea which password it should check for (or even, if you're correctly storing passwords, which salt it should use for the password check). Your criticism doesn't even make sense.
Massive DDoS per Twitter account.
Location: Pakistan

Remote: Yes

Willing to Relocate: No

Technology: LAMP Stack, Python,C#, Browser Extensions, API integrations, MVC Frameworks in different languages.

Résumé/CV: http://justpaste.it/adnanprofile

Email: kadnan at gmail.com
Oxford to lead UK quantum computer drive
At the time of writing (September 2013), the JWT spec would have been only on it's 12th draft--it's had 19 follow-up drafts since then. It's possible that the author didn't know about them at all.
Docker just posted a blog response

http://blog.docker.com/2014/12/initial-thoughts-on-the-rocke...
I feel like the variance in network latency is going to be an orders of magnitude larger than the extra time it takes to test a password.
Airenvy

Location: San Francisco, CA
Position: Ruby on Rails Engineer - Full Time

Ruby, Rails, AngularJS (1.x), PostgreSQL, Heroku

Airenvy is a property management company focused on managing Airbnb rentals. Our property owners don't have to worry about responding to guest inquiries, key exchanges, cleaning, sheets/towels/laundry, or adjusting their nightly prices. We are an all-in-one solution for owners with second homes or vacation properties. In turn, our guests get a predictable hotel-like experience and a reliable concierge while they stay in the properties we manage.

There are plenty of challenges we work on every day. Our business depends on an on-the-ground workforce so we spend a lot of time building reliable applications for our vendors (cleaners, laundry partners, neighborhood managers). Because we answer all the inquiries for our owners, it is important we know a lot about the properties we represent. We try to get as much information about a property as possible and make getting that information seamless. Our owners are very patient with us now, but we need to build smarter systems to gather this data.

jobs@airenvy.com
Oh, and we're backed by First Round, Google Ventures, Lowercase, Felicis, Greylock and more ..
Elephants, I believe
AT&T couldn't even roll out U-Verse in San Francisco: http://www.fiercetelecom.com/story/att-ordered-stop-u-verse-... , and it's among the hardest cities in the U.S. to build any physical infracture: http://www.citylab.com/housing/2013/10/san-francisco-exodus/... . As demand for housing the bay area rises supply remains constant, leading to dramatic price increases.

These are political problems and they have political solutions. It's not "sad" that Silicon Valley can't get faster Internet access; it's the nature of the way California's politics as a whole have developed. The number of veto players (http://www.amazon.com/Launching-Innovation-Renaissance-Bring...) and NIMBYs ensure the problems California is currently experiencing.
Not really. Spread the benefits - Silicon Valley already has the advantage of having a huge amount of investment money swilling around. Give Austin and Kansas better internet connections to see if they can attract larger startup industries of their own.
Initial thoughts on the Rocket announcement
That and getting underpaid (after COLA adjustment with the Bay Area).
That's a very interesting question.

My pet theory is that it has to do with outsourcing and the widespread belief in the private market that software development is a product just like any other that you buy on the market.

When your average intelligence agency has a million dollars to spend on a project, it will keep a house full of smart people and tell to forth and create, paying their bills and keeping their backs. We might call this the academic model, if it wasn't so far from how academia works today.

When a civilian government agency (or any large private entity for that matter as they are completely similar in this regard) have a million dollars to spend on a project they immediately start phoning the big boys: We've got a million to spend on this project, can do do it?

It is all a bit exaggerated of course, but in this made up example one will get a working, if perhaps shoddy product, and one will get a server filled with very important powerpoints while the product itself tends to be late and slow.

Or to put things in a simpler way and less of a rant: I suspect it is a lot easier to spend a million dollars on a highly specialized system, than to do the same on a very generic system anyone could build. The corollary is that the same intelligence agency would fail in the same way a private or civilian organization would when implementing a new payroll system.
I disagree. There is an obsession with preserving life in our culture, at any cost. But everywhere else in the world (ie. for other animals) there is abundant evidence that death is crucial to life. Without a tree dying, what would mushrooms feed on, where would insects make their homes, etc.? Didn't you watch the Lion King?

Would you rather have tens of billions living forever in socially stagnant, oppressive conditions, or a few billion living in gradually-improving conditions? Doesn't the quality of the life matter as much as the quantity?

To take the argument to an extreme, I would certainly rather live a hundred years of average contentment than a thousand years of being tortured by a sadist every day.
If it matters, you can make it non-trivial. As with most privacy attacks, you can target an individual pretty easily.

But, if you're trolling for lots of users, the "new account" feature will have a much lower operational tempo than the authentication workflow, and for a privacy conscious organization, you can do things to make it harder for attackers. Examples: Captcha, data input validation, risk scoring, don't provide immediate confirmation, etc.

Revealing that the email address is a valid system account isn't a particularly useful piece of information to a user who isn't remembering a password. john.smith100000@gmail.com is probably taken by another John Smith. It just isn't a useful piece of information.
What Legal Authority Does Judge Judy Have?
Uken Games - Toronto

Hiring Backend Engineers

Uken is looking for talented engineers to help us scale our games to support millions of concurrent players. We are a 70 person game studio in downtown Toronto.

Our stack includes: AWS, Rails, Redis, ReactJS, Angular, Percona, NSQ, Docker, InfluxDB.

You should be passionate about building rock solid services (SOA) and infrastructure, and optimizing for performance and stability. You will also be part of our on-call rotation.

If this sounds like you, please email me: mark at uken.com.
I'm interested: why do you need a container for a UI application? It would be better for your users if it could run as a simple process.
Term life insurance is a great option. One way I've heard it said: "For the price of pizza-for-4 each month, you can have ~10x your annual salary in coverage for a 15 year term."
A lot of places have a captcha in their sign up process.

Also signing up usually involves more than a login/password (address, phone no., etc)

Yeah, someone could do something like "you'll get an email if this email wasn't registered already" on sign up
Cool! This is my cup of tea. However, the "piping articles from HN to Usenet" thing is already sort of happening, albeit manually. Have a look at http://compmisc.wikia.com/wiki/Piping_articles_to_Usenet_how...

The comp.misc Usenet group is the Usenet equivalent of Hacker News these days, with a pretty lively and esoteric group. We post articles of interest and cross post follow ups to relevant, other groups when there's a specific Usenet group better suited for that topic. So comp.misc is like an article clearing house and a one-stop shop for new articles, which are typically sourced to HN, Slashdot, Pipedot.org, and elsewhere.

The script I linked to above is my own, it's just a little bash script you can use with the newsbeuter RSS reader. Yes it's manual, but it also allows the poster to select articles of most interest to the group. There's still something to be said for human curation.

That said, this looks interesting, and I'm still a big Usenet fan, so let's check it out!
Google has invested a lot on the long tail, and Bing hasn't as far as I can tell. That is evidenced by achieving better results with longer queries. We've done some research (to be published soon!) at Blekko that has some similar benefits on the long tail although the index we keep is much much smaller than the big guys.
I mean, he had a bare $10B left after his fine! That SEC is so mean to the makers; jealous takers who think insider trading is illegal.
Location: Los Angeles, CA [USA]

Remote: OK

Willing to relocate: Yes

Technologies: Recently Ruby on Rails, LUA+Java (for Android), Objective-C (for Mac), and ActionScript. I pick up new tools quickly enjoy keeping up with new frameworks and technology stacks. Much more detail available upon request.

Resume: https://www.dropbox.com/s/wlewe39jmdcv3oj/RKE_2014_CV.pdf

Email: please see resume or HN profile

I'm looking for a product management / programming role at an interesting consumer software development company - ideally a role where I can write code while providing product direction. My background is quite varied, but the unifying theme has been detail-oriented software development for the mass market.

I've done most of the interaction design and written almost all of the GUI code for each of the projects I've worked on during the last 8 years. I'm usually able to work on any part of a codebase, but my strength is creating and iterating on user interfaces, and my least favorite things to work on are system architecture and data architecture.
> "If an NSA system fails to see 10% of traffic, that's acceptable."

If you believe the NSA lies and assume their sole purpose for collecting global communications is to stop terrorism...missing 10%...that too is a disaster. If we missed 10% of the terrorist plots, that'd be a complete failure.

On the other hand we know the NSA doesn't just collect this data to fight terrorism. The data is collected for economic advantage as much if not more than any other reason. Terrorism to the NSA data collection is just a red herring.
This part is super important for Rocket support in Mesos and other things that run containers.
Endaga Brings Rural Villages Online With a Cell Network in a Box
Interesting. I have U-verse in Soma. Apparently my apartment building has a "deal" with AT&T so that no other TV/Internet providers can work there. And if you're curious, the U-verse Internet plans are awful.
They'll probably keep Rocket lean and introduce new features as "separate projects" that will all be bundled into CoreOS.
Ya big jerk, can you send some of that fiber to your Minneapolis brothers in the north?
Epic Games - Seattle/Bellevue, Washington - http://epicgames.avature.net/careers

Epic Games is in the business of creating fun games we want to play and building the art and tools we need to bring those games to life. We provide our engine tech to developers around the world, and consistently strive to stay on the cutting edge of our industry. We iterate to improve everything, every day: our games, our technology, our processes, even our workspace and people. This unrelenting focus on innovation and quality defines us.

In Washington, we are actively recruiting for

* Backend Engineers to design, implement, and iterate on scalable, secure, highly available backend services. Should be fluent in Java or other OOP language, have experience with secure, scalable system architectures and deployments, cloud technologies, and noSQL. Preference to experience with caching solutions, distributed systems, Spring framework, and deployment tools.

*Software Development Engineer in Test (SDET) to design test scripts that interact with multiple systems, verify results of automated tests, and test deployments to all services and environments. Should have end to end QA experience in an online environment, experience with performance and load testing, Selenium, Wireshark or other network packet analyzer, and knowledge of HTTP and HTML TCP/IP protocol.
> This doesn't address timing attacks, which are why this is done in the first place.

This is not done because of timing attacks, it's done because of cargo-cultism and laziness.

> The error shown isn't to dissuade people from using web pages to try to gain access to accounts - it's because the raw code itself doesn't know which is which

Modern systems store passwords salted and hashed with KDFs. The stored hash must be retrieved before the provided password can be checked as you need the stored hash's work factor and salt, which are stored alongside (/as part of) the hash. Such a system necessarily knows which is which.
DNSSimple is down
facebook handles this case by showing the profile picture of the user matching the email field.

banks and yahoo handle this case by showing a magic image that you chose, which also provides anti-phishing feedback
I think the real lesson here is that if emails should remain secret you should not indicate upon signup whether or not a user exists with that email.

Always send an email.

If that user already exists, make sure the email says "We noticed you're trying to sign up again. If you didn't do this, someone else is trying to sign up for you." If that user doesn't exist, send them the typical signup message.

The author has some great security tips in the "what should I do instead" but I don't think the instead portion is accurate. Keep private information private, and make access to public information as easy as it should be.

If emails are public, shoot, use a websocket connection to style the login field in real time and show the user whether or not the email they typed is valid.
However most sites reveal existence of an account before requiring a captcha, and many sites can't even fix this.

e.g. Twitter can't require captcha before letting me see twitter.com/username …but they're still doing this security theater.