skysight-inc/HackerNews huggingface dataset:
First I would say that having a big name surely help to start land a first job, however once you're in, you can definitely have a great career nonetheless.

I did not have a PhD and I don't know the US equivalent for what I have - Master - (I'm french), however even though I did some internship, I chose them poorly and it did not allow me to get relevant experience.
Note to students: Don't choose your firsts internships poorly, you'll regret it.

So I started doing personal project and phone call started to ring after I put Nodejs and Angular in my resume even though I just did some useless shit with it, and wasn't ready at all for productive work.
Luckily enough, a recruiter working for a startup pass me along a test that wasn't for me, and I did it better than the original dude so I got my first job.

TLDR: Use your expertise to make some work that you can show / advertise. It doesn't have to be professional work, I would assume most people will not go in depth before calling you if it's relevant to them.
"New IE6"? It gets new features.
Is it election time already?
What do you think of Peerio?

Also, any vague timeline available for arrival of the desktop Signal version? What about video-chat support? Would that be possible with WebRTC? (although you should probably wait until ORTC is supported within WebRTC - v1.1 I think?) and then add ZRTP on top of it. Or is a desktop, Javascript version, just not secure enough for that to happen? What if you do it like Whatsapp's "web app", that basically only connects locally to the phone?
Disclaimer - I have not used AsyncIO. I have, however, tried to implement things on top of Twisted, from which this framework derives many concepts.

Asynchronous programming in Python is a real pain in the butt. If I were writing a web frontend where performance mattered enough that Django/Flask would not cut it, I would use a language designed for performance.

I'm not the only one: the python development market has collectively chosen Django won out over twisted. No matter how bad Django can be with all of its corner cases, writing for it is still better than writing Twisted code. I imagine this will carry over to AsyncIO as well.

As a side note, note terribly impressed with the source. Hiding the word "dick" in unicode doesn't mean it's not there.
Do you remember what things were like before the Do Not Call database? We would get one or more marketing calls a day on our home phone (landline). These days, maybe once a month.
TechCrunch editorial line explored using information extraction tools
SO your point is that you trust the map only when there's no other option.
I'm on board with this answer, and it makes sense to me, but it's competing in my head with the idea of always being able to do a clean build from master that could deploy whenever. Let's say you have a catastrophic failure and lose your binary repo and need to rebuild (and your backups, etc - it's an example) - if your dependencies have changed in the meanwhile, you can't redeploy to where you were. Obviously that scenario should be well prevented, but that doesn't feel like a legitimate excuse to not have some safeguard in place to make sure your build environment doesn't change on you.
It is USD, I thought it was fair to assume so I didn't reply.
Instagram exposes congressman who blew public funds on flights, concerts
There is a tool like that for compiled binaries. Details on its usage here:

http://lcamtuf.coredump.cx/afl/

http://lcamtuf.blogspot.ca/2014/11/pulling-jpegs-out-of-thin...
And its happening again.

I agree this wasn't as prevalent 1-2 years ago, I have no idea whats going on either.
From the title and description, where the ORG is described as the "UK's EFF", I got the impression that the ORG is affiliated with the EFF, but on the website it seems that it isn't. Maybe it would have been better described as the "UK's EFF equivalent".
1. I wonder how many "disable networkmanager" comments i have seen around the net in relation to fixing some networking issue. Seems to be up there with Pulseaudio...

2. It would really surprise me if networkmanager finds itself being anything more than a frontend for networkd within a year or two.

At this point in time i am starting to think that going back to pre-freedesktop Linux may be better for my ulcer than trying to keep up with the desktop (developers) uber alles threadmill.
You underestimate how much engineering would cost for an Android port.

From my friends who have maintained both iPhone and Android versions of the same product, the Android dev costs were roughly 4x that of the iPhone, and that continues with QA for every single new feature released, assuming you want feature parity.
It's USD.
> Sponsored by IE.

Just saying.
It's hardly any kind of "mess". It's the most practical and intuitive to reason about choice for a significant amount of work that needs to be done. FP excels at some cases but not all of them. Contorting all of my OOP code into a functional structure would be a nightmare.
A little bit about a linux kernel
Matthew Green wrote a post on this a while ago, but I'm not sure it addresses the question:

http://blog.cryptographyengineering.com/2013/05/a-few-though...
Maybe they intentionally asked you an impossible question that is not obviously unsolveable to see how you react when given and how you approach hard problems.
My method is as follows:

- I don't have a landline phone

- If someone calls my mobile and they aren't in my address book, I just don't answer.

- If that number is withheld I especially don't answer

- If they leave a message I will listen to it and respond if necessary

- If the number is not whitheld but not in my phone book, I google it, and if it is a legitimate business, it will usually show a match on the company website. If I need to I'll call them back e.g. today I had the estate agent ring, but I didn't have their number saved so I didn't answer. I rang them back once I had googled their number
yeah, but that doesn't make checkboxes any bigger either.
That's what I did. Went from 1-2 nuisance calls per day (I mainly work from home) to none at all. It's just a shame BT charge money for this service.
As that comment pointed out, once Apple decides that your device is "obsolete", it stops getting updates, so there are plenty of still-used iOS devices that will never have their Webkit versions updated.

Personally, I suspect this lack of updates has less to do with actual obsoleteness and more to do with ensuring that you always buy the latest device. (Note that this isn't a problem unique to Apple -- many companies, including many Android OEMs, are even worse about it. I honestly feel like it should be illegal to sell hardware and never update it, but I'm really not sure how something like that could be enforced.)
This was the only option. The other debugging options were too intrusive and would colour the information.
This seems to have been released with breathtaking speed. Was it canned, or did they previously know that these revelations would come to light?
I visited Aralsk a few years back (it's Aralsk, not Aral - the locals call it Aralsk, the signs all say Aralsk), and it's a gobsmackingly depressing place.

The main industry there is now "sitting and waiting", and the old waterfront is a dismal shadow of a bustling fishing port.

One thing that we found interesting was North Korea's involvement - there are quite a few buildings in Aralsk emblazoned with Kim Il Sung - it turns out they invested in the cotton boom, and provided "labourers" to the USSR.

Tourism is practically non-existent - the only way to get there is a long, long drive (or cycle... we bumped into an Aussie cycling from Shanghai to Dublin (we were en route from London to Bishkek)) through barren desert.

It's hard to see how Aralsk will continue to exist, with or without the return of the Aral, as the population is overwhelmingly old (although we did see a rather extravagant Kazakh wedding parade while there), and levels of corruption in Kazakhstan are pretty astounding, meaning that getting any concern off the ground is a challenge for your average person, unless they happen to be the son-in-law of the local police chief.

It'll be interesting to see what happens when the Baikonur lease is up (most there believe this will happen much sooner than 2050), as it's a major source of revenue for the region, and provides much of the raison d'etre for the surrounding towns and cities. Most people we met between Aktobe and Kyzylorda were either in some way involved in supporting the operations there, or were subsisting, or providing auxiliary services to people directly involved in Baikonur.

One final thing that seems to generally be missing from people's understanding of the Aral sea - it hasn't "dried up", so much as "gone underground" - there's still a vast amount of (severely polluted) water there - if you wander down to the old sea floor, most of it is several-yard-deep mud - very little of it is dusty and dry.
When friends work together
An instrumented fuzzer like AFL purports to do this:

http://lcamtuf.coredump.cx/afl/

This blog post is a fascinating description of its potential:

http://lcamtuf.blogspot.com/2014/11/pulling-jpegs-out-of-thi...

I haven't had as much success with it, but it's so interesting that I'll keep trying. I'm also interested in KLEE, which I found in a similar HN story, but it has very specific build requirements:

https://klee.github.io

[Edit: bhouston posted the exact same links minutes before I did. Anyway, cool stuff.]
Lot of people get a lot of calls from abroad which come up as private number etc. Depends on your incoming call profile.
The article actually mentions the TPS in the case study:

"But it was after he [Martin Shelley] registered with the Telephone Preference Service (TPS) – a list of people who have indicated they do not wish to receive sales and marketing calls – that the number of unwanted calls increased."

Apparently it's not working as expected ...
Is anybody working on making identity-based encryption mainstream?
So that's the authority model, or the 'tree-of-trust'. In a good trust model I think it can't be more than just a weighting or advisement over your web-of-trust, never your sole source of trust.

In the end a tree-of-trust rests on the fact that you trust the manufacturer of your laptop that they put trustworthy certificates there so you could verify the roots.

We're seeing the major browsers now turning that tree-of-trust into a web-of-trust by cross referencing domain certificates to see if there are duplicates or other shady things going on.
I'd say that simply writing things in an async way is a bad way of premature optimization

Yes, you can win a benchmark with it, but for a real service, it's easier to scale it in traditional ways, or only write a part of it async.
Someone has started building this:

https://github.com/diafygi/emailpk
I wouldn't have said it was fast to the extent I'd be suspicious. Given the nature of the business they're in and the security risks they're well aware of, I'd say they have a plan of action on what to do in the event of a confirmed or potential breach and they just put that into action immediately.
I think the point is that whatever features it doesn't get will be a millstone around developers necks for years to come, much like the situation with IE6.

You'll be held back from using new web features widely because a significant chunk of the audience has a browser which won't support them.
It's not unique to mobile devices either.

http://en.wikipedia.org/wiki/Planned_obsolescence
One type of testing (sorry, not a tool yet) which can help with this is combinatorial testing. Basically, when testing against a set of multiple inputs, create a test which will test every possible combination of input for a pair of inputs.

i.e. for inputs A, B, C, try every combination of A-B, A-C, and B-C

It sounds like a lot, but its not too onerous with the speed of computers we have today. This type of testing will flush out most bugs which will result from a particular combination of inputs, and is deterministic, when compared to fuzz testing.

This is not to detract from fuzz testing, just a note that it is effectively designed to be non-deterministic, which can result in a delay in bug detection.
High school hackers trick men on Tinder into playing text-based adventure
How you react to the impossible questions is what's valuable.
Not at all. GCHQ are not usually ones to try just one approach. They often try every approach at once: partly because they can; but mostly for compartmentation; to overwhelm layered defences; and to decrease sensitive source exposure by combining the results of everything they care to try.

The doctrine has been called "penetrating targets' defences" or PTD: that's also the name of their budget/office/department/contracting scheme which is broadly equivalent to NSA's Special Source Operations/Targeted Access Operations, only more aggressive and multi-pronged. It incorporates HUMINT as well as both R&D and operational deployment of advanced technical attacks.

You may see references in the Snowden documents of this (check the bottom), or in their tenders to BAE Detica for their modular botnet software, or elsewhere. Although much of the really juicy or operational stuff is STRAP3 and thus kept off the TS//STRAP2 wiki.gchq (which the NSA have shared access to via their ic.gov portal, and which Snowden dumped - and which, yes, runs a tweaked MediaWiki on PHP).
Great engineer is relative. I'm a "great engineer" and I will work with BASIC or PERL and CVS if it came down to it. The problem I solve is more important than the tools.
> You really don't need a package manager for Go. Honestly, the main reason [...] is because you're deploying source code to your production environment

Not sure if I would agree with that. A full-fledged package manager automates the process of installing, upgrading, configuring and removing software packages in a consistent manner. Dependency management and semantic versioning is an important part to provide this consistency.
Wether you deploy source code or binaries does not make any difference why a package manager is always good to have.
Anyone interested in a more thorough and context-ladden history of Aralsk, Uzbekistan, and the transition from the Soviet Union to a sovereign country should check out Tom Bissell's great, great book, Chasing the Sea [1], about his time a Peace Corps volunteer there and afterwards. Great writer, really interesting topic.

[1] https://www.goodreads.com/book/show/233072.Chasing_the_Sea
> Sponsored by Google

Right next to your citation.
Giving Octopus Deploy a Test Drive
Python 3.4.3 is out
Open source .NET: A progress report
Every interviewer wants you to let the guard down and show them the real you. We know the version of you that comes to our interview will be copacetic, genial, nice, friendly, etc. by default. Our biggest task in most of these interviews isn't necessarily ascertaining whether you can develop software -- hopefully that's borne out of some pretty straightforward questioning.

The real task is to figure out what you're really like after the interview facade goes down, and being able to envision you as part of the team.

It's a reason there's so much thought and discussion these days on ways to effectively anonymize people during job searches and interviews, I think. An interviewer / hiring manager needs to be very aware of their own feelings and mindset when making a decision to ensure the "seeing you" part of the decision process is done consciously and purposefully.
Thanks a lot everyone for your suggestions, I feel great being part of this great community. I apologize of not disclosing the currency upfront (you know my english ). It's USD. Thanks again.
That doesn't actually solve the problem though. It helps in theory, but it requires the user to understand what they're doing to a level most won't.

There is also the cultural issue of just exchanging fingerprints. Only techies put them on business cards, and even then only some. It needs to be common action.
Changed, I didn't mean to give that impression! I'm not one of the ORG, just seen them speak at a Nottingham tech meetup and donate, so my fault, not them!
Canadian Spies Collect Domestic Emails in Secret Security Sweep
Introducing Structurizr
I wouldn't be surprised if kickstarter worked out a deal with pebble with a lower fee. All this traffic and press is clearly good for them too.
Are you thinking of something like https://keybase.io/?
Matrix Synapse (ecosystem for Open Federated Instant Messaging and VoIP)
I use KMail and the GPG integration is beautiful. But I can't speak to what KDE looks like on OSX.
Am I missing strpos in C[1]?

[1]: https://en.wikipedia.org/wiki/C_string_handling#Functions
Are they really? Other browser vendors also refuse to implement things sometimes. IE has taken its sweet time on certain technologies, entirely deliberately. Google have tried to force standards with their marketshare.

Pointer Events is an odd case. It's a Microsoft-backed spec that only Microsoft supports. Apple won't implement it, Google won't, Mozilla's implementation is unfinished. Touch Events is also weird: only Google supports that.
My understanding is that the legal departments at companies require interviewers not provide reasons for not making the hire, so as to not inadvertently expose the company to hiring malpractice lawsuits.

A decision will be completely legitimate and within the bounds of fair practice, and the rejected interview candidate could still bring a case against the company, costing time and lawyer fees.

Also, from a practical standpoint, should the interviewer see 50 candidates for a position, it's a full-time job just writing the "this is why we didn't pick you" letters.
The Myth That Everyone Naturally Prefers Trains to Buses
I did not pick on him or anybody else, I mentioned something that bothers me.
Apple Fined $0.5bn for iTunes Patent Infringement
This can be turned around and say that it is actually the progress of the web which is obsoleting the devices. Device manufacturers can not update the devices forever, although they could keep them updated a while longer.
George Eastman House: Photographic Processes Video Series
Arid Viper: hackers crack Israeli govt but don’t know how to write a robots.txt
Does anyone else get "Base.hs@493:1-493:2 parse error on input `" on trying to run the code snippet in https://www.fpcomplete.com/user/agocorona/EDSL-for-hard-work...

Am I misusing fpcomplete, or does the code snippet not work?
Now did it? As far as I know, the whole MAD thing was based on precommitting to strike if struck, therefore negating the benefit of first strike for both parties.
It seems as though at least for smart phones this could be easily solved through technological means similar to those used for screening email, something along the lines of a spam classification system.

I envision my phone having a white list of known good numbers, which would be allowed to cause my phone to ring like it does now; a black list of known bad numbers, which would be immediately dropped; and a catch-all handler for all other numbers, which would send the call to voice mail for easy manual classification into either of the other categories.
Repeating what I said in previous thread: There are real problems with the Touch Events spec, and we need a replacement. One issue is that it is under specified w.r.t its compatibility with mouse events. A concrete example: Should the touchmove event trigger the mousemove event? I believe it does in IE and Firefox, while it does not in Chrome and Safari. This isn't specified anywhere, and can make it incredibly complex to implement something that works with both mouse and touch input. And it is exactly this type of thing that Pointer Events sets out to fix.

This is exactly the same story as with the <meta name="viewport"> tag. Apple did something without releasing a spec, and the others made not-fully compatible copies. That was 8 years ago. No exaggeration: Right now the only(!) thing that works consistently cross platform is setting width=device-width. It is insane, and it hurts the web.
Spear phishing, as its nicknamed? If something is sophisticated enough to work, don't knock it!

There's no fundamental difference between the basic techniques used by malicious hackers, organised crime, pentesters or nation-state adversaries doing offensive "cyber-operations" (ugh): the only big difference is the budget (time, personnel, money), how likely they are to get away with it, and how aggressive they are.
Pretty much it.

Basically it is history repeating itself.

Companies embraced IE 6 because it was quite good when it came out, they love to target single browsers and thus we deserved what we got.

Younger developer generations bashed about IE6 all the time, embraced the Webkit gods, with the excuse that it is open source, forgetting that it doesn't matter if the user cannot update the browser.

So here we are, with Webkit being the new IE 6.
To be fair on Apple, they usually only drop devices once the OS wouldn't run performantly on them. The issue of non-updated devices used to plague Android far more than iOS.

Also, you aren't describing IE6, then. You're describing IE. The issue of obsolete OSes not having new features? IE6/7/8/9/10 gave us that. But calling Safari IE6 is weird, there's no specific version. Apple didn't ever stop work on Safari.
Take this with a wink and a nudge -- I'm likely to favor the javascript if its the case that you're my only developer who has mastery of cljs.

A few hours to rewrite your brilliantly concise bit of code is sometimes warranted to keep my technology stack easier-to-maintain from a personnel standpoint.
Unfortunately, laws make it really difficult to provide candid feedback to candidates in the US.

I always call my candidates and ask one simple question when they don't get the job and after I tell them they won't be getting the job: do you want the usual HR rejection reason as in "you don't fit the profile we are looking for" or "we have a candidate that better fits the business need," or do you want me to give you 3 suggestions on how you could have done better? If the latter (they always want feedback, don't we all?) then I go into very specific behaviors. The majority of these tend to fall in two camps: you did not prepare for the interview, or you did not demonstrate a specific skill or experience and this is how I think you can get it.

100% of the people I have given feedback have never come back to sue my company or me for rejecting them. Many have followed me and one has actually followed me, interviewed at another place I went, and got the job then.
It would be one thing if the salary was substantially higher than what you can get elsewhere, but it's not. The other perks sound really nice, but not nice enough to deal with the headache of interviewing there.
I don't see anything wrong with the font rendering on that.
The US Do Not Call list seemed pretty good at cutting the number of cold calls substantially. The remaining cold calls are clearly illegal (in the US). This situation seems vaguely like the Tragedy of the Commons to me. I've decided to listen all the way through the recording speech - these evil psychos can only have a finite number of interactive response units, so monopolizing one of the for as long as possible cuts down on the number of calls they can make. I also attempt to engage the human operators for as long as possible. The evil psychos making these calls clearly have a smallish number of human operators. Wasting their time is even more important. I've actually been able to transport my cell phone to the restroom and flush the toilet in a human operato's ear several time.

No, I don't think that the human operators deserve civility, manners or any kind of polite treatment. They know that what they do is at best marginally legal, and very probably illegal, yet the keep doing it. They've violated the social contract, not me. They can suffer through whatever they can tolerate.