skysight-inc/HackerNews huggingface dataset:
Docker (https://www.docker.com) is currently hiring for the following full-time technical positions:

In San Francisco:

- Sr. Director for Docker Hub

- Go Engineers

- Python Engineers (Django or Twisted)

- Infrastructure/ DevOps

- Frontend (React.js)

- UX Engineer

In London:

- Engineering Manager (Open-source, Machine & Compose)

See full list of job opportunities here:

https://www.docker.com/company/careers/

If interested in any of these positions, please send an email

to jobs@docker.com
Marco Arment Uses Go Instead of PHP Cutting the Number of Servers in Half
The clever part is getting the startup repair command prompt with no additional tools. Its similar to the old windows login bypasses (https://i.imgur.com/fqjnKh.jpg) in that it gives on more tool to use for pentesting.
Why do you believe that a JavaScript port of bitcoin is an important project? What is lacking in current implementations / why would you want to run bitcoin inside a browser / do you think it's possible to do serious crypto correctly in JS[0]?

[0] http://matasano.com/articles/javascript-cryptography/
Why isn't this being brought to Reddit's userbase? This seems like something where a lack of transparency will really hurt the company.
Show HN: Convert any spreadsheet into a fully-documented REST API
Please take this personally
HP Vertica Distributed R
The definition of totalitarianism is not me liking / not linking something, but total control of even personal, non-political aspects of life by state.

As for "democratically elected parliament", FYI, Hitler came to power by democratic elections.
Yeah $50m is a lot. We would have hired several more cryptocurrency engineers. Not any more. I'm not exactly sure how they are going to allocate resources moving forward, but you can see who they are hiring here:

https://www.reddit.com/r/redditjobs/
Publicly advertizing warez is probably a bad idea.

I'm pretty sure everyone interested on here is able to find the "usual sources".
>Yesterday I was setting up Crouton on my 11 year old daughter's Chromebook

Yet you decided to buy her a Chromebook, which is the most locked down laptop out there with heavy DRM with everything locked to Google's services and only Google code being allowed to run natively. Even Windows is much more open in comparison and doesn't wipe the hard disk when you try to install an alternate OS. Nor do you have to "root" it.
that's how I got in trouble for hacking in high school; used our pascal IDE (in DOS) to make a perfect replica of our fancy ASCII login. It would capture your username and password, and then spit you back out to the real prompt. I only got caught because I kept all my stolen logins in my home dir, in passwords.txt.

I talked the teacher into canceling all of my detentions in return for showing him how to secure his bootdisks. Man, kids today would just get expelled or go to jail. I'm glad I grew up when I did.
HN hates marketing, until you throw in some fancy charts and graphs to make the wannabe math majors here feel adequate.
Thanks for the article link.

I think the evolution of English through new word use is generally an excellent and exciting thing. It can just be a little disconcerting adjusting to new usage (at least new for me personally, in this case).
Oh god. I run 8.1 at home, and it randomly fails to "sleep" -- about half the time (or more), it will boot from scratch the next time I turn it on. I don't know if it's a problem with my hardware, or drivers, or what. Worst of all, the only sleep/hibernate related things I'vebeen able to find on the Windows help pages seem to be for people where it either always fails, or where they don't know how to turn it on. :-(

The most frustrating thing is the mystery about what causes it, since I haven't been able to find errors that explain it in the system logs.
How do you attract English Majors?
I have a few consulting clients and employers listed by country at http://www.warplife.com/jobs/computer/telecommute/

While I've been successful with purely remote contracts, in which I never once met the clients, I far prefer clients that I can visit from time to time. It's kind of nice to show up in person with a deliverable.
Why isn't what being brought to the reddit userbase? That they fired me? That reddit notes is now paused? They are probably waiting for the right time to make an announcement I guess. They probably didn't realize that by firing (or letting me go, whatever) that they would draw the interest of the media.
I'm not talking about deletes becoming "visible" on the timeline after a delay, I mean that the browser is completely blocked and unresponsive for 4-5 seconds (not minutes!). That makes deleting by hand lots of posts and likes a total PITA.
When registering for an account, duplicate usernames will flag a warning. This is enough to give hackers info whether or not a username exists.
It sometimes helps to demonstrate the attack with a test user account that you create and record a video of the demonstration.

Then send them the movie.
Location: Toronto, Canada

Remote: Yes

Willing to relocate: Yes

Technologies: Javascript (Node.js, Backbone + Marionette, Grunt, MochaJS, CasperJS, Selenium), PHP (Laravel), Ruby (mainly for small web scraping projects using Nokogiri), Linux admin, Apache, Google Chrome API's and extensions

Résumé/CV: http://www.aegabriel.com/resume.pdf

GitHub: https://www.github.com/berrberr

Email: alex [at] aegabriel.com

Interested in building testable front end applications with Javascript. Current sideproject that I am working on: http://www.streamkeys.com
Just want to give you a heads up - your listing for Front End Engineer is misleading. When you actually get to the description page, the job title suddenly changes to "Front-end UI Designer/Developer", and includes having to do design. Might be worth changing the job title on http://www.promptworks.com/jobs.html, as right now it implies it would just be for front end development.
Gcc code is arcane: it relies heavily on macros to define some kind of DSL for the compiler backends (check out the .def files), but if you want to contribute seriously you need to learn that DSL and how it works behind the scene somewhat, whereas llvm is C++. That being said, it's an interesting experience to dive into that code.
Indeed. You can do this using the BMW manufacturer software (which is comically not hard to find), at least for the E9* series of BMW's. Not sure about the newer F3* series, but I wouldn't be surprised.
Show HN: Haplo – Write front-end and back-end in the same JavaScript codebase
If I have a key or picture of a key, yes. If I have access to just the lock, I can't figure out how to do this without some odd equipment. And if the 3d printer + just the lock can't do something new, then how do 3d printers make traditional locks obsolete?
Apple is selling another 5B in debt
That was a very good read, thanks for the link.
For those that haven't noticed this article is by the chap who wrote the absolutely wonderful http://gameprogrammingpatterns.com/
SpaceX - ERP Application Development (Los Angeles)

Looking for people with demonstrable experience in:
ASP.NET, C#, SQL Server, and AngularJS

We are a fast-paced, highly iterative team that has to adapt quickly as our factory grows. We need people are comfortable tackling new problems, innovating solutions, and interacting with every facet of the company on a daily basis.

http://www.spacex.com/careers/position/5185
How do you handle (Do you?):

* not more than 2 identical characters in a row (e.g., 111 not allowed)
* Name/Username in password (Name: Chuck Norris, username: ChuckNorris, Password: ChuckNorris#1)

These are reasons why I don't look forward to doing this and also why I'm leaning towards G+/FB/twitter/etc authentication in an app I'm planning.
Sorry - it's really all of the above. To be more clear, I will break this into some sub-questions that are hopefully less obsequious.

The "reddit is giving 10% of its shares to its users" thing was very positively received. My understanding was that redditcoin was part of that effort. Is the 10% thing still going to happen in some way? If not, why not?

Regardless of the answer to the question above, hearing that redditcoin is being cancelled would likely lead members to conclude the new leadership doesn't want the community shares system that was so touted previously. Is that the case, if you know?

And then the final, more meta question is: Why would Reddit's staff, of all people, think they could do something involving Reddit quietly?
This is my latest pet project built around an idea I've had about unifying client and server code. It's mostly an experiment/POC and it might even be a terrible idea but let me know what you think.
There is no working javascript full node. I believe the future of bitcoin is brighter if there are many independent implementations of bitcoin running as full nodes.

I want bitcoin running in a browser because browsers work on every platform and can bring bitcoin to more people. Also keep in mind that reddit is primarily a website, to using javascript is a pretty appropriate first choice of language for bitcoin stuff.

Can you do serious crypto in C? Only if you know what you're doing and don't screw up. Same goes for javascript.
> But that's perhaps a performance and logistical advance, not a security advance.

Isn't it both, depending where you come from? And isn't decreasing the performance/security tradeoff a security advance when developers in the domain do not want to compromise on performance?

> But developers shouldn't be swapping their Python code for Rust if security is their primary objective.

OTOH developers building up security primitives/building blocks aren't doing so in Python in the first place, and doing so in Python would mean it's not easily accessible for {anyone not using Python}.
"Is the valley not are the forefront any more? Is innovation in the valley being stifled by attempts to control IP? "

No, I don't think SV is "The forefront", but it remains one of the forefronts, simply because of the remnant culture and money flow. That being said, I do think it has stagnated mostly do to your rightly referenced attempts to control IP.

What I am seeing is that many of the companies the best poised for the future are those that are fully embracing FOSS but have learned how to adapt a business model to still profit while supporting that FOSS. Otherwise you end up with a company trying to go Apple and fork something open and then shove the user into a prison.

My observation is that businesses have only put up with this because the companies that did it tended to offer support as a prereq for prison sentencing, and companies love support as a backup. As more FOSS friendly companies move away from user-prisons and towards user-freedom but pay us for support if you are a business model, I think more and more the old guards in the industry are headed for a shake up.

I don't work in SV but I have friends who do, so take my opinion with a grain of salt.

Regarding the origins of SV, the talks he gives are very interesting variations on the war refinement produces enhancements in tech line of thinking, which I think will continue to be relatively true. Follow the war money to find out where innovation is going on.

For example, the last time I talked to Mudge he was really stoked about all the stuff DARPA was doing, and with programs like cyber-fast track, I think less and less of that money is geographically limited to a single center of innovation like SV.
Ask HN: Examples of businesses built on open data?
I'm looking at examples of businesses built on open data - such as

1. Selling the data itself - like, take data from the govt, clean it, massage it etc and sell it

2. Services built on top of open data

3. Scraping - data that is not readily available in machine readable format, but can scraped (web pages, PDFs etc), packaged and sold.

Anyone knows examples of such?
Yes, it's correct, at least my dictionary says so.
Pffft. 70 yards? Pikers. Lame-o.

Ye olde longbowmen shot at 200-400 yards.[1][2]

[1] https://en.wikipedia.org/wiki/English_longbow#Range

[2] http://www.archerylibrary.com/books/badminton/docs/chapter24...
Using the uglier to say that something ugly is not that ugly, is using logic in a dishonest and misleading way
It's an extrapolation.

If you listen to the speech[1], what Cameron is actually saying is that he believes that it should be possible to intercept the content of communications via the Internet in the same way that letters and phone calls can be intercepted (when authorised by a warrant from the Home Secretary).

My interpretation is that this is aimed at companies like Facebook[2] and Twitter. There's been no specific mention (to my knowledge, at any rate) of banning encryption or forcing companies to backdoor encryption software.

1: http://www.independent.co.uk/life-style/gadgets-and-tech/new...

2: http://www.telegraph.co.uk/news/uknews/terrorism-in-the-uk/1...
I think you misunderstand how PyPy works, not to mention making baseless claims (it'll be too slow), which is why you've been downvoted.
You can absolutely express tainting via the type system. I have seen this done before in Rust code in order to express functions that can only accept strings that have been properly sanitized, along with a function that takes an unsanitized string and returns a sanitized one. This particular example was using phantom types, though you could obviously also define wholly separate types for this sort of thing.
We can massively generalize this by calling "blue" "pure" and "red" "impure". The end result is essentially Haskell (but you can take it much further, too!).

---

There's something horrifyingly restrictive about having merely (blue -> pure, red -> impure), though. All "blue" functions behave roughly the same (e.g., very, very nicely and compositionally) but "red" functions come in many classes: async, stateful, exception-throwing, non-deterministic, CPS'd, IO-effectful, combinations of the prior.

What we want is a nice way of representing different kinds of red functions and how they all interact.

What we'd also like is a nice way of composing different kinds of red functions so that the bundled piece has a sensible kind of redness too and we can keep composing.

And this is exactly monads and monad transformers.

There are other ways to achieve this end as well all under the general name "Effect Typing". Very cool stuff.

But what I'd like to emphasize is that Java/C#/Go have not solved this larger problem. They each introduce a fixed number of "rednesses" and very specific ways that different kinds of red can be connected together. Monads are a generalizable solution.

The situation is exactly the same as HOFs themselves. We've had subroutines and functions for a long time, but first-order and higher-order functions are a marked increase in power since you can now refer to these "function things" directly.

Monads take the notion of "CPS Transform" and allow you to refer to it directly, to mark sections of code which use it and compose them intelligently. They allow you to invent your own kinds of redness on the fly and ensure that your custom colorations compose just as nicely as the built-in ones.

If this article is even slightly interesting then you owe it to yourself to learn much more about effect typing. It'll change your world.

(That and sum types, because nobody is served by a bunch of integers named Token.LEFT_BRACKET.)
Yes! I'm struggling to articulate the sentiment that boils down to "if you're already deploying Python or Scala or Ruby, Rust is unlikely to drastically improve your security, and rewrites are sure to harm security at least somewhat".

If you're currently shipping C/C++, Rust seems like a great bet. Don't write C/C++ in 2015.
The application may return a different HTTP Error code depending on the authentication attempt response. It may respond with a 200 for a positive result and a *403* for a negative result.

I would say a 401 - Unauthorized with proper WWW-Authenticate header.

403 means forbidden, which apply to when you try to access a resource without permission / authorization

Also, in their Password Storage Cheat Sheet [https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet], they seems to recommend :

Select:
PBKDF2 [*4] when FIPS certification or enterprise support on many platforms is required;
scrypt [*5] where resisting any/all hardware accelerated attacks is necessary but support isn’t.
bcrypt where PBKDF2 or scrypt support is not available.

AFAIK, things are not so binary :

* https://news.ycombinator.com/item?id=3724560

* http://security.stackexchange.com/questions/4781/do-any-secu...

* http://security.stackexchange.com/questions/26245/is-bcrypt-...
I don't have anything of substance to add, but author, if you're reading this, I enjoyed your writing style a lot.
"Complaining is great."

Such integrity! Even on this issue, they stick to their non-complaining principle!
Very true! It's easy to forget how bad things were back then ...
6 Guidelines for Setting the Right Content Goals for Your Business
Curriculet - Full Time - San Francisco, CA - http://curriculet.com

Curriculet is looking for senior frontend and backend software engineers who are passionate about improving America's literacy through technology.

Curriculet enables students to read more deeply and teachers to teach better in their classrooms. We're an online reading platform that allows teachers to embed lesson plans on top of books, articles, other texts. Our team is made up of former educators and startup veterans. You'll be joining a well funded company that is <10 people.

Fully Funded Startup:
* Competitive benefits package, including healthcare, etc.

* Awesome view of San Francisco from the 41st floor

* Macbooks, Mac monitors, standing desks

Senior Software Engineer:

* 5+ years experience

* Smart, motivated, ready to build something that isn't another todo app

* Ruby on Rails experience preferred, but not required

Mobile Engineer:

* iOS or Android (or both!)

* Someone who can own the entire app cycle from development to deployment

* Has an opinion about API design and isn't afraid of looking at backend code

Introduce yourself here: jobs+hn@curriculet.com
That really solves a lot of problems. Need quiet time -- work from home. Need collaboration -- go to the office.

It's what I generally end up doing.
> What if you have 2,000 kuna in savings, but you're still 37,000 kuna in debt?

This is directly translatable to being 35,000 kuna in debt. You can't ignore savings when determining ability to pay debt.
There's not much wrong with writing passwords down. Printing thema is less desirable.

It's a hundred times better to have a difficult password on a post-it on a monitor than it is to have an easily guessable password. Who do you suspect is going to hack you? Ask that question honestly and you'll know how best to thwart them.
Were you treated fairly in terms of a severance package?
And here we are... that's why AdBlockPlus isn't reliable anymore. They started with helping the user getting rid of all the ad-ridden websites and now they are monetizing it (not that it is wrong, but there should be another way - they are crippling their product).

Currently I'm using uBlock on all browsers using EasyList blocklists on all browsers.
It's not static. It's an editable wiki.
I thought the same thing, a joke. Then I read it as 'proton beam' for a few milliseconds...the brain does funny things when it's trying to make sense of something.
...the LibDems (the last line of defense against cyber-totalitarianism in the country, I have to give them that) will likely be annihilated at the polls (because of their blunders on, well, any policy except this).

I wonder how likely this really is, though.

Right now both UKIP and to some extent the Greens are looking a lot like the Lib Dems did before the last election. They are potentially disruptive, rising in the polls, the parties for people who want to vote for "someone else".

However, the reality at the last election was that for all the talk about TV debates and Clegg-mania, the Lib Dems didn't do much better on polling day than they had before. They wound up in government more through good luck than anything else, because unusually neither the Conservatives nor Labour managed enough support to win outright.

Of course watching them in government has been like watching a slow motion train wreck almost from day one, as they've made one politically naive judgement after another and squandered much of the good will they had accumulated prior to the election. If either UKIP or the Greens form part of a coalition after the election this year, I find it hard to see anything different happening to them when their idealised and sometimes extreme policies come face to face with the reality of running a country.

Ironically, the very First Past The Post electoral system that the Lib Dems so wanted to change may be the one thing that keeps them in power after the election, if the "someone else" voters split between UKIP and the Greens, but on the day a lot of people decide not to vote for those parties after all (as happened to the Lib Dems last time), the protest votes that remain cost Conservatives and Labour crucial swing votes, and ultimately the Lib Dems then manage to hold a majority in enough parliamentary seats to remain relevant. The irony of that result would keep the political pundits at the newspapers busy for weeks following the election. :-)
Double down on Rúnar's book! You have only learned half of Scala until the day that "FP in Scala" is trivial to you.
I guess, yes, there is a benefit to Slack in the sense that they would have more signups overall. But what I was really going for was that it wouldn't benefit them on a large scale, meaning that people that do stuff like what he does would have to move to Slack, which is most likely not going to happen without large incentive. I doubt that he has enough "clout" to drive a noticeable number of people to Slack over a long period of time. The only way that this would change is if Slack marketed itself differently.

> Third, by my reading, the author is implying that this setup would be useful for many others who want to offer a good chat service for online learning, paid support, or a multitude of other reasons I can't think up. It sounds like a great idea to me.

Yes, but Slack isn't really built for some of these purposes and it shows in the way that people see each other within the app. I.e. I see all of my coworkers within Slack, which is not what you want with tech support. I can see it being useful for a student-student interaction, but it would have to be augmented to allow specific student-teacher collabs because all people (at least in the way I understand) are on the same "level" and can see everyone and all the channels, which might be counter-productive to learning because it becomes like AIMing your classmates at that point.

> Finally: you'll probably get more out of the internet by being more concerned about content than tone.

Thanks dude! When I use the Internet next time I will be sure to think about this comment. :-)
Meet the two guys winter thru-hiking the PCT (with 19 incredible photos)
Well it's not really that it allocated everything really close together in memory-space, but since it would try to reuse existing memory from the freelist before asking the OS for more memory, you were more or less certain to get memory openssl had previously used as scratch space to, say, store a private key for temporary operations.
I remember, in 2003, going to a tech demo being put by SGI at our university. It was obvious that they'd been running this same demo for years, in part because some of their showcase graphics would have looked dated on my friend's Xbox. I knew from classmates that they're hardware was capable of more than was being shown, but I also got the feeling that they'd stopped pushing the envelope.
1. need a 'compiler' to compile html and css into one css file
2. seems it can make embedding content a bit easier and cleaner. eg. embed a facebook/twitter button.