skysight-inc/HackerNews huggingface dataset:
I've already seen plenty of discussion about it on r/bitcoin et al. I'm pretty sure most people "in the loop" have already heard about this.
Thanks for making me chuckle today.
It popped up a couple days ago, but I'm not the sure the userbase as a whole cares much about it.

http://www.reddit.com/r/SubredditDrama/comments/2u4ypn/reddi...
I wonder if they are using key pinning and have mitigated SSLStrip and other SSL attacks. Also, they say that it wasn't vulnerable to attacks on braking and steering. If firmware updates are possible over the air, you could theoretically capture and disassemble one and modify it to suit your purposes.

The device the software runs on most likely sits on the CAN bus with everything else and could be used to feed false data in that could at least confuse other systems on the car. Similar attacks have been done before in experiments. Local (USB drive) system updates look to be cryptographically signed, but who knows about the OTA ones, and even then the key might be extractable.
I suppose having a discrete set prevents error propagation also, avoiding copies drifting into unusability.
Are Snowden's files a stolen property of NSA?
PillPack - iOS, full stack (rails-angular), marketing analyst, Platform Engineer, Director of Acquisition and Analytics, Director of Marketing Communications, Email Marketing Specialist.

At PillPack we are on a mission to reinvent pharmacy. We are using technology, design, and a healthy dose of empathy to change the way people think about medicine. Our company is a mixture of healthcare, design, and technology obsessives and we expect you to be pretty enthralled with at least one of those.

https://www.pillpack.com/careers
How far did the implementation of the currency go, and will what remains of it be released as OSS, if it's worthwhile to do so?
Don't want to come off overly bitter, it's certainly interesting, but I'd like to see some practical uses of this, besides reimplementation of map() and other "low-level" functions...
Bitcoin's cryptologic is open-source; it doesn't have to be secure from tampering in the same way a videogame console has to be secure. A videogame console doesn't want you modifying game code or running your own code on the hardware. Nobody cares what you do to your bitcoin client; you'll just lose your coins in some invalid[1] transaction or maybe you find some amazing flaw in bitcoin's math - which you could have found in any other programming language anyway.

That said, a browser-based bitcoin client does expose its user to potential XSS exploits 'n such; especially if the private key is in the browser's memory.

1. https://en.bitcoin.it/wiki/Raw_Transactions , basically if you mess this stuff up you lose coins.
The page claims that the new wiki is written with a distributed database but from what I can tell it just writes pages to the file system?

https://github.com/fedwiki/wiki-node-server/blob/master/lib/...

Am I missing something?
Microsoft - Linux/Docker/IPython devs in Redmond/Seattle, Local or Remote

The Python/R team at Microsoft is building a "Data Studio" service centered around IPython/Jupyter which will be targeted at anyone that needs a decent REPL in the sky (eg Data Scientists and beyond). This will be a cloud/browser based service built on Linux/Docker (not a typo!) I'm looking for experienced backend & frontend dev that can help build this service.

2 positions available - Linux/Docker: 5+ years experience in building scalable web based solutions.

1 position available - IPython/Jupyter: direct experience with IPython/Jupyter internals a big plus.

Full benefits, Linux/Mac dev environment, remote or local (prefered). We are Python/R/OSS fans and want to make the fantastic IPython/Jupyter environment available to everyone.

Interested? Please contact smortaz over at microsoft dot com.

Thanks!
These are laptops that the students take home with them. The lab computers are physically secured.
Dell's new XPS 13 – yes, it truly is better than the Macbook Air
BlazeMeter unveils Continuous-Testing-as-a-Service
Device-Device Interactions on the Blockchain
That would only be relevant if you instructed people to use it instead of instructing them to use weak crypto.
I just read this quote from him. When he views his job in this way what more should we expect?

"I think my first job is to try and keep this country safe from terrorism and if that means you have to build strong relationships sometimes with regimes you don't always agree with, that I think is part of the job and that is the way I do it." [1]

[1] http://www.bbc.co.uk/news/uk-politics-31098378
Perhaps they listen to the radio, youtube, or a free streaming service.

Don't be so quick to jump to conclusions.
So, the article is suggesting that everyone who uses GPS technology should be paying a fee.. to the government? Isn't that what we already call 'taxes'?
Dead on. Those pricks cost me about 5 weeks of progress at a startup because they didnt provide drivers for linux or a register set, much less a description. All because some clueless hardware guy used their chip because it was 'pin compatible'. Unless you are Apple or Dell, do NOT do a design with their chips.
Yeah, and for extra points using that same style of misleading headlines for his title.

Would it really have been so bad to put a "nutritional" into the title to produce something related to the actual topic?
"processing intensive tasks" may not be the one to expose all the corner cases of C and C++?
New Microsoft Outlook apps; a closer look
Hello! I'm the ceo here at Hall. If you have any questions, feel free to contact me directly at brett@hall-inc.com
Those aren't really designed for long term daily use, can lead to accumulation of wax and serious infections if used repeatedly and continually.

Also in my case they put too much pressure on the canal which eventually gets quite painful. When I was a mechanic it was more of a hassle but much better for my ears to wear proper ear muffs instead of disposable ear plugs.
Data Science, Vector Space, Machine Learning, Predictive Analytics, Data Acquisition, Dataset development, Data Interpretation, Visualization (experimental as opposed to formal methods preferred)

Languages: Tcl

Intern, Full-Time, Contract

Email: genopharmix@gmail.com
You can set and read cookies using Javascript, but due to same-origin policies that are present in all modern browsers, it shouldn't be possible for a non-Yahoo domains to read cookies set by Yahoo.

There might be some exception that I'm not aware of, but that would seem like a pretty serious browser security issue.
Who will win Delhi election this time
I'm weird too, and I'd add that I think Autoconf is also awesome.
Does this also include using something like ephemeral keys?
Leonard Nimoy's Artist's Statement on a Set of Female Nudes (NSFW)
I have Time Warner Cable's "Everyday Low Price" package. Hopefully this link will work to show you their standard plans:
http://www.timewarnercable.com/en/plans-packages/internet/in...

I'm not sure what you count as decent latency, but I don't believe there's any difference in latency between different TWC internet plans.
Package management covers this, but is too understated: many of the applications that researchers use are downright hard to get working on Windows--particularly if you require any customization. I've run into this in a maddening way when working with geospatial tools. Need custom OGR/GDAL support? Prepare to spend hours figuring out how to make it work with Windows. Some deal to a lesser extent with R. Amount of time spent on edge cases is Windows > Mac > Linux. I use a Mac, but every time I build up an R environment with lots of library dependencies on Linux, I find myself saying, "well, that was easier than I expected." Conversely, when I use Windows, I'm right back to fighting library dependencies.

Windows makes simple things easy, but complex things nearly intractable.
Ah, we've had this discussion before. No need to rehash it here, I think I was clear before, and I don't see you changing your stance.

I still don't see what place it has in this thread. It's irrelevant to the fact that a project could learn from all of it's predecessor's successes and mistakes, while not carrying any of the historical baggage. You have a point you want to make, I get that, but if you feel to need to inject it into something at best tangentially related, at least lay the foundation so it makes sense when people read it.
Yeah Rust isn't safer than an already memory-safe language (though it might be faster, then again it's also quite a bit more work wrt e.g. Go). but

> Don't write C/C++ in 2015.

That probably isn't going to stop, even ignoring performance ricers the bottom of the stack does need control, does need good performances, and more importantly does need to be usable from just about everywhere.

You can't really/easily use a scala library from MRI, or a CPython one from Go (it's already hard enough to use a CPython library from Pypy). If there's a C interface and little to no runtime assumption however you're good to go. Currently that means C or C++ (with a nice extern C ABI/API). If it could be something safer in the future, that would probably be a good idea.
DirectX 11 vs. DirectX 12 oversimplified
Piestar | Senior Web Developer | Manhattan, KS

We're a bootstrapped startup with positive cashflow selling our SAAS product to government grant recipients. Looking for employee #1. Our code is primarily PHP with Laravel, but would also be interested in a senior-level front end/full stack candidate.

Full position listing at http://piestar.com/jobs
bcrypt has a maximum input length of 72 bytes:

https://www.usenix.org/legacy/events/usenix99/provos/provos_...
tldr: gcc was a good compiler compared with the existing alternatives, so people used it. It also was free.
Could you elaborate on the culture change since Yishan left if any? I'm curious about the power relationship between the owners and the execs mostly.
Sure.

The government certainly could put a specific tax on sale or use of GPS technology.

But what the OP seems to actually be suggesting is that tax loopholes are closed and high tech corporations are taxed more in general, yeah:

> That’s why a company like Apple should be using a substantial portion of its super-profits to support government investment in the next generation of innovation. Instead, the company runs an entire division devoted to finding ways to avoid taxation.

That's just one of the topics the interview talks about, I encourage readers to skim the others too, not assume the whole article is about taxation, it's not.
On an ARM processor I'd be surprised to see any kind of command shell at all. Certainly it wouldn't be the DOS based command window.
A co-worker completely corrupted his install of Mint and had to start fresh because he changed his background. So, uh, no, I politely disagree. It's not user friendly.
Wow, strong statement! I am not going to weigh on this other to ask for clarification - do you mean not use C/C++ at all, or only in the context of security applications?
If you use email as username, you can make the sign up give the same "check your email to confirm your account" message for a new account and an existing account. This works well for new users and those who have already signed up but perhaps forgot, and leaks no information to someone who doesn't have access to that email account.

I'm not sure how to do this just for usernames, but usernames are less sensitive than emails anyway.
obligatory mention that 6to5[0] lets you use all this stuff, and more, today. I've been using it for 3 months now and it has totally transformed the way I write JS applications, it's awesome.

[0] https://6to5.org/
First I want to revel in inch thick Computer Shopper whist.
Yep, without .edu discount, by the time the P-Pro (mid/late 90s) came out the value proposition was really bad.

For integer performance RISC had no benefits left by 1996-1997. 300Mhz P2 (in a Compaq workstation) was at parity with a 250Mhz R10k (SGI O2). The P2 as a fully assembled system was priced less than the R10k CPU alone.

Only the huge amount of cash available to dot-coms propped up Sun then. With all the "you need sun servers for dot-coms" beliefs.

My current employer made the same call (Linux on commodity PC) around the same time for the same reasons. It took ~8-10 years for competitors to stop using the fact it was Linux based for FUD. Now the only issue we get is Windows-only shop (very common in our industry) complaining that we're the only non-Windows system they use.
Gaming Marriage Done Right
> an you not just image the harddrive to a backup (While its running)

The disk contents are fully encrypted, and Windows will only boot when the system is in an untampered state (via TPM unlock). A student would have to compromise Windows in a way that escalates their privileges. From there they could turn BitLocker off if they liked. This is far from impossible, but we also use AppLocker to prevent students from running any software that has not be explicitly approved--so they would have to compromise some software which is already installed. I won't delude myself and say it's impossible to compromise all of this, but for my goal of keeping 13-18 year-olds from resetting the local admin password it is quite sufficient.
I guess more generally, it's about effects. The same rant could apply to any particular effect, because they share the property of being infectious: async, unsafe (in C#, not Rust), throws (checked exceptions), IO, etc.

My question is: In a language that has a first-class effect system, does the red/blue problem disappear? Does being able to generalize over effect allow you to avoid cutting the world in half, and allow you to compose effects easier?
ShareProgress hiring Backend Developer (SF, REMOTE)
http://shareprogress.org

If you're a developer looking for an opportunity to work on progressive causes you care about...

At ShareProgress, our mission is to help progressive organizations achieve success through the use of data and technology. Innovations in these fields have made it possible to organize and campaign more effectively than ever before, but most groups don't have the knowledge or ability to take advantage of these advances. We help organizations like Greenpeace, Sierra Club, CREDO, Compassion & Choices, AFL harness these innovations for their work.

For us, progressive means more than just the political left. It describes any organization working to help and protect the less fortunate amongst us or to make life better for the population at large: improving our cities, protecting our environment, encouraging civic engagement, fighting for economic justice, and providing training and opportunities for those who haven't traditionally had access to them. Our primary focus is on nonprofit organizations, but we consider any company with an inherent social good mission to be progressive as well.

How We Achieve Our Mission:

- Enable progressive organizations to run more data-driven and tech-savvy programs
- Build a stronger, more diverse progressive technology community
- Grow ShareProgress into an institution that can directly support further innovation in the progressive space

This role is full-time. Preference for the position will be given to candidates in San Francisco, but REMOTE work (including from outside the US) is a possibility.

Your Job:

- Scoping out, developing, and validating new features for the ShareProgress web tools

- Researching and making recommendations on third-party tech services to use with the platform, when appropriate

- Keeping an eye on scalability for all new development with the ShareProgress codebase

- Coordinating with the larger ShareProgress team on projects related to platform development

Experience with:

- Ruby on Rails

- Test-Driven Development using RSpec

- Developing scalable web applications (to handle hundreds of millions of records)

- PostgreSQL and Heroku

Benefits:

- Health/dental/vision insurance

- Stock options

- Team outings around SF

To apply or learn more, send your résumé to jobs@shareprogress.org.
I think Rust is a security advance because it makes memory-safe programming practical in more domains than it used to be. The fact that Python has memory safety doesn't help (for example) browser engines, because it's too slow and requires too many dependencies. Rust didn't invent memory safety, of course, but it's bringing the security benefits of other languages to places they couldn't reach before, and I would argue that that itself advances security. To make an analogy, Rust is like the effort to add stronger ciphers to TLS as opposed to the effort to invent new ciphers; both are important, the latter because it creates stronger systems and the former because it makes those stronger systems more widely deployed.
Why is this on here and not flagged?

Similarly, on any UNIX OS, you can boot into single-user mode and obtain root access.

These are ancient techniques.

The obligatory response every. single. time this is brought up: Local access? All bets are off. (With certain caveats, of course).
This is actually a great boon. The Windows development environment is incredibly inviting to beginners and it has a lot of power. Linux may be more flexible and open, but it's really hard to get started with when you have no experience programming.
Soundslice for Teachers
Reddit is a great site in what it does. And due to its nature, it has tremendous amount of niches, some of which are worth a lot of money if handled properly.

For instance, /r/watches is an active area for discussion of watches. The people who post there often share their new Rolex or their treasured Patek Phillipe. /r/watches is just one of many, many such niches on the site which have a lot of potential value.

My thinking has been that reddit could focus on developing the value in its many product oriented subforums.

Also, interestingly enough, reddit has already sort of created its own new cybercurrency - dogecoin. Though it may not be doing well, I think most of the value in dogecoin was how easy it was to use on reddit.

reddit does need to find a way to monetize. I think it could do so quite successfully due to the nature of it having many high value niches.

I say all this as a big fan of the site and have even been considering making a subreddit finder (so that someone who is a fan of the TV show Suits, for instance, can know that there is /r/suits to discuss the show, which they would have simply no way of knowing if they just landed on reddit's homepage with pictures of Very Round Eggs, to use a current example).
UserFrosting: User Management System Based on UserCake, JQuery, and Bootstrap
That's a fair point, except that (contrary to "Nobody cares what you do to your bitcoin client"), I would suggest that most people do not have their own bitcoin client, and are in fact running code written by somebody else. Those users will likely be very upset if a client loses all their coins.
Micro's interpreted, and is missing a lot of the bits and pieces of .NET that make it a real nice platform to work with. So you end up with something slow, and a fairly limited standard library.
Almost all applications are "security applications", in the sense they are security sensitive, these days. If I pull data over the internet, my first person shooter now can't allow buffer overruns. Bad Things may happen in almost any environment.
>A mere 1% of US labor earns the minimum wage
Would you mind citing your source for this? It seems to me you could claim anyone making ≥$7.26 per hour - even part time workers - as "not earning minimum wage," a metric that is not particularly encouraging given the cost of living exceeds even the earnings of a person making that for 40 hours a week in most places - nevermind that people making around this wage are often kept below the number of hours that triggers mandated benefits.
Chicago is hiring in Chicago (downtown)!

CSG International’s has a suite of solutions that empowers the top brands in media and entertainment to easily and effectively market, monetize and manage their premium digital content and customers. CSG International offers either a set of software services or as an integrated solution, and allows content companies of all sizes to increase the value and return of every content transaction. The solution supports virtually all content types and commerce models, marketing promotions, partner management, financial management, reporting, and analytics.

To learn about the other product and services that are offered at CSG International (and in Chicago) please check us out at: www.csgi.com

We are hiring globally for:

- iOS Developers
- Windows Developers
- Roku Developers
- JavaScript Web Developers
- Project Managers
- Technical Analysts
- Software Architect’s
- Operations Engineer
- C# Software Engineers

We offer competitive pay, casual dress, work from home opportunities, Happy Hours, Group Outings and much more. Find more about us at: www.csgi.com to join our fantastic team please apply with resume at: work@csgi.com and Tara Taft will get back in touch with you.
Thanks for the links - excellent depth in the analysis. Loved the ones on Jackie Chan.
Or, if there is a large enough user base running some faulty logic, this could cause a big ugly fork in the blockchain. Not good.
GUI "variety"? Are you joking? The very reason there exists so much "variety" is that they all suck. Windows has one GUI system and it's worked darn well for quite a long time, and will continue to do so. Linux might be able to let you make your windows do somersaults so you can show off to your friends, but it still hasn't been able to get the basics right, like focus-stealing prevention. Windows is miles ahead of Linux on GUI -- if there's one thing I can tell you for sure, it's that.

And Linux is "miles ahead of Windows for research because of its command-line interfaces"? Really? Since when are 25-year-old command-line shells research products? Not to mention stuff like http://mywiki.wooledge.org/BashPitfalls

As for package management, when it works it works, but sometimes I wish it could burn in hell. I can't tell you how many times I've run into problems getting packages to work because their dependencies were either (1) no longer available ("sorry! our servers changed, your version of Linux is outdated"), (2) only available in source code form (but good luck compiling it!), or (3) not available for my version ("sorry, this version is too new for your OS"), among other things. Distributing your dependencies along with your application might not be sound engineering practice, but it sure as hell can make things actually work out of the box so you can focus on what you actually want to do.
The fundamental underlying problem is that a buffer containing sensitive data is being reused for a separate purpose without being scrubbed of the sensitive data. In the particular instance of heartbleed, this faulty behavior was due to the underlying memory allocator rather than any property of the programming language.

It is true that idiomatic Rust tends to avoid working with raw buffers, but for low-level tasks this is sometimes unavoidable. Rust also especially doesn't encourage reusing buffers, but if you've already taken the step of specifying an unsafe memory allocator then Rust can't help you. So yes, Rust gives you a lot of tools to avoid this situation but it can't outright prevent it, as a few people on the internet appeared to be suggesting last year.