skysight-inc/HackerNews huggingface dataset:
A blackened scene with small, bright objects could be compared to a disco environment with black lights and glow sticks. Have there been any studies on discos and the long term effects on the eyes? Then again, I suppose this could not be much worse than driving at night while seeing all the oncoming headlights.
I think the author has indirectly replied to you via the article:

> Note: The numbers (700 Billion, etc) are there to give context and a sense of scale. This wasn’t a small boutique design company—which fwiw I’ve worked for a couple and loved it—this was the company who got valued by that amount because they’re doing something interesting. I personally don’t see money as a measure of worth, but as a freelancer and well, running my business, should not and cannot ignore it. Numbers such as ‘5000 miles’ are there just for stylistic reasons, saying ‘a flight’ would be way more banal. Chill and have a good one.
Nutshell Brings a Twist to Photo Sharing Apps
Don't worry, they will come back

They only grep the CVs for words, if you put you're a lion tamer, archeologist, but has the word PHP in your CV (or something similar) you'll get a flood of IT jobs
www.SoOLF.com – SoOLF - Video chat with a nearby stranger
I am curious about good solutions. But I feel like "first, do no harm" is vital here - the reason we're happy to speculate about cryonics is that the worst case is you're still dead, whereas SV is astonishingly productive to the point where we don't want to look at it funny in case it stops working.

And there are specific worries. I've worked at a place that appeared to make a point of hiring equal numbers of men and women - and implemented this by hiring a number of women who simply weren't capable of performing their jobs (whether this was a question of talent or training I don't know). It was bad for me, as in programming incompetent colleagues are not just dead weight but actively harmful. It was bad for those women, who had a frustrating time at a job where they knew they weren't contributing. And it was even worse for the highly-skilled women on the team, as others who hadn't worked closely with them would - understandably, and probably unconsciously - make the calculation that they were probably in the incompetent group, and act accordingly. So naturally, avoiding that particular failure mode is a matter that's close to my heart, and I get defensive when I hear people saying things that I think might lead to that.
It's not about GPG sucking; it's about the absence of anything sucking less than GPG.

It's not about activists and journalists being (more or less) able to use GPG; it's about the fact that nobody who doesn't face as deadly a risk as them would bother to use GPG.

I didn't feel any denigration reading him; rather, the statement that:

* We have new crypto needs, in wake of revelations such as Snowden's;

* GPG isn't an adequate answer to those needs, and isn't likely to evolve into one;

* Tech people don't realize that GPG is unlikely to morph into an adequate solution, and therefore don't bother starting an alternative.

Finally, I believe that a successful answer would rely on excellent UX and PR at least as much as sound crypto. I'm not aware that Moxie is an expert in these fields (although he might have more talents than I know), so it's not obvious that he's in a position of showing rather than telling.
This is really interesting, and a great approach to testing. I wonder if other JS engines like V8 are using this or something similar?
Sometimes there is, yes. If you pay another company for services, it's strictly business. Hire an employee, and all sorts of primate emotions, politics, laws and so forth come into the picture. Sometimes that can more than outweigh the cost of the extra level of indirection.

On the bright side, this is one of the things that stops the entire economy being swallowed up by a handful of megacorporations.
The difference would be, that with the keys you could just listen in and capture all the traffic.

If you had to force cell phone connections to A5/0, you would have to:

1) Have to both receive and transmit.

2) Have a stronger connection than any other nearby cell towers.

3) Have a backbone connection back into the network so that you can actually negotiate phone calls to users connected to other cell phone towers.

4) Have to be able to handle multiple simultaneous connections. Some MITM spoof cell towers only establish a connection for the person of interest, and all other devices in the area loses connection. A pretty tell tale sign of a rogue base station operating in an area.

So in short it is much easier just to have the keys...
Several of the examples have an extra lambda like this. What does it do?

const toArray = (() =>
Array.from ? Array.from : obj => [].slice.call(obj)
)();
In a similar vein, I'd also like to know how many people manage to land jobs at the Google's and Facebook's of the world, and ultimately prove to be less-than-spectacular developers.

I dropped out of a masters degree to join a startup as a .NET developer, but kept in touch with a few guys finishing there. One of them now works for Google. He was always great in the algorithm classes, and he knew his theory reasonably well, but he'd constantly struggle with writing the code and REALLY grasping OO. I'd help him structure his Java code, and he'd help me grasp data structures.

He's been there a good four years now, so he's clearly doing something right, but I was initially shocked that he was able to get in when things like static classes confused him.
Google always has openings for hundreds of engineers. If multiple people did well and the process is so expensive, why not hire all of them?
This will not be as big a problem as you assume because the "everyone in his professional circle who knows that he or she didn't make it through company X's probation period" would also have gotten their fair chance to try their hand at being a Google or Apple employee, to aim as high as possible, and would have faced the same rate of rejection.

It is only a problem if failing probation is a huge black mark. If there are a large number of people for whom the company-employee fit didn't occur, the word "probation" would lose it's sting. Maybe we can call it an "apprenticeship" period? Or other innocuous term without previous negative connotation.

> In addition to that, the employer will also accrue a lot more negative publicity from the employees who didn't make it through.

The same could be said of ex-employees, too.

In general, the problem is the neurosis of giving too much importance to "failure" or "probation". It is ironic that this is the case even in a startup discussion board :-)
Given that they had Thanksgiving and the holidays in the middle, yeah, it's not bad for a big company. Read some of the Google interview stories.
It's an IFFE (Immediately-Invoked Function Expression). The goal is to perform the feature test (the availability of Array.from in this case) just once instead of for every function call.
OP, if you are serious about needing help, I'd love to offer my services for free. I am the same age as you and would love to take this project on to explore and develop myself in this aspect.
This is the startup secret weapon: they can hire people that Google (and other large companies) cannot. When there's no shortage of work to do, and hiring is a constant struggle, you can hire as many good people as show up at the door.

A lot of startups do still hire with a large company mindset, but I think they're making a big mistake.

Simply the process of getting approval for a job req and playing the required politics screws everything up. I've actually been pressured to hire someone just to hold onto the req at a large company, with the up-front, stated intention to fire the person in a month or two and keep looking.
Does it support NFS?
How long ago were you doing these interviews? Currently, a company like Google/Facebook/Apple will hire all the good people they can find.
Advanced WordPress: Why Every WordPress Developer Must Join It?
When you say "clear his name", that suggests the story about him wasn't true. In which case, the site should be asked to remove the article as it would be libellous.

My understanding of it though is that it's entirely true. It just happened a reasonably long time ago. I'm not sure why it's Google's job to censor queries about true stories on the grounds that they happened a few years ago.
Ironically it's the opposite in the UK, temp employees in the tech industry typically earn a lot more.

In context to the interview I was talking about the perm rate was half of the contract rates they were paying people on the same team.
Computer security has more subfields than cryptography.

http://en.m.wikipedia.org/wiki/Information_flow_%28informati...
Is It Possible to Get Zero Percent Car Loan? Learn 0 Percent Financing
The SIM cards aren't going to be replaced even if true. I just don't see that happening.
In the story as given, it says many of Tim's projects etc failed before they adopted MDD. What happened was Tim changed to being a manager (after 15 years dev experience) and formed a new team and adopted MDD. They then attributed to MDD the success, when in fact the success was due to people.

This point is emphasised again later when he finds a new team in his org when MDD is failing. That team has a new manager (with 15 years dev experience), working with a new team and a new methodology QDD. Again, the team attributes success to QDD, not the people.

ie the success is down to people, not the process.

If you realise MDD (and QDD) is completely made up, that will probably explain things somewhat. Also subsitute MDD with Agile, and realise that Agile was created under similar circumstances and you'll probably get the point.

:-)
> OpenPGP SDK code looks like OpenSSL.

I wouldn't be surprised to learn that intelligence services sabotage open source crypto projects by helping turning their codebase into an arcane mess, which scares away the million eyeballs which are supposed to make bugs shallow.

I've worked on OpenSSL quite a long time ago; I thought they kept it so messy in order to sell their expertise through consulting. At that time, only tinfoil hat folks would have believed that spooks would spend millions sabotaging everything and anything crypto-related... Now I believe that infiltrating open-source SSL / TLS / PGP developper communities is at least as strong a priority as infiltrating terrorist communities for them, so I'm utterly convinced they're trying, and I'd rather bet they succeed.
Why 50k users? PGP/GnuPG is used to secure a _lot_ more than email.

Every Linux distribution signs packages with it. So that's at least 100M users right there. Several APIs regarding domain name and AS registrations is based on it. I know at least two financial systems that signs their messages with it. That's just mentioning a few I can think of right now. I'm sure it secures a lot lot more. It's used all over the place and it seems to do the job fairly well in most cases.

Is it suitable for signing email in 2015? I don't know. Things could certainly be improved. I know there are more suitable schemes for IM communciation. But the software and the underlying protocol is not something you can break in a heartbeat. It's important software.

Perhaps we need to speak more of the evolving use case in email?
That's what I assumed (but I wondered if there was some other advantage I was missing).

Are not all the ciphers breakable post collection anyways? Is it fair to say that this is effectively for the purpose of blanket non-targeted surveillance?
Where by having the keys in their possession it gives them a shortcut for bulk analysis and saving CPU time that would otherwise be spent breaking encryption.

And a cpu-processing-savings advantage justified cyber-attacking a foreign civilian corporation?
Depends how you set it up.

(I'll caveat below by saying that when I talk about 'enterprise', we're talking about >500 employees and hundreds of millions in revenue annually.)

In many cases, they'll have their environment set up with standard *nix and Windows SOEs. You'll work with their admins to configure your software, and you'll direct them how to integrate it into their environment (DNS, etc). You'll need to think about backups, security, access management, and how all of this will integrate with their existing requirements.

Support arrangements differ, for example if you have an SQL DB underneath your software they might want it on their standard image, in which case you'll have to deploy and configure your software accordingly. Typically, they'll be responsible for the maintenance of the platforms, and you'll be the support for the software. No enterprise will simply deploy a VM image you hand to them (unless you're Oracle or MS).

You'll also have to provide other support materials, so their helpdesk can support their end-users.

As others have mentioned, you'll be agreeing to SLAs with them (eg a Priority 1 incident will need immediate phone support, P2 incidents need acknowledgement within 24 hours, and so on). You'll be issuing a yearly invoice most likely.

You'll have to agree to their standard IT services contract, and because you're a small vendor you probably won't get much say in the way of changes. Depending on how large your contract is (north of ~$50-100k perhaps?), you'll need to make sure you can comply with any of their insurance requirements (things like public liability, etc). You might also have to demonstrate financial stability, both historically, and into the future (with a business strategy, plans, etc)

TLDR: Enterprise companies can seem super hardcore about this if you're used to dealing with small shops.
It wouldn't happen if it weren't economically wise. Contrary to claims to the contrary there is no shortage of adequately qualified candidates and an endless and growing sea of unqualified. So randomly rejecting the majority of qualified candidates is a relatively small price since the hiring goal is to get rid of the vast sea of unqualified.

If there were indeed a shortage the practice would be reversed and companies would be willing to risk hiring unqualified workers in order never to miss the one candidate who can do the job.

But so long as there is a flood of less qualified workers along side a good number of skilled ones, the practice will continue or worsen.
We run SELinux on all our docker hosts and are about to roll out GRSecurty as well, at present this is one of the best lines of defence you have against running code so close to root.
I'm pretty sure Ford Prefect would be rather disappointed that his home planet got blown up...
'Work permits for H1-B spouses is a game-changer'
As they point out, SIM churn is not an uncommon thing especially in the poorer countries these agencies were targeting. Even in the worst case scenarios where every SIM had to be replaced, they'd probably just allow natural rollover to occur over a multi-year period.

But it seems like that isn't really needed because the stolen keys were mostly replaced already anyway. Anyone who suspects they might be a person of interest can always just request a new one from their carrier.
Making ArtList
Defendants win about as often as plaintiffs do in the Eastern District of Texas. They are about equal both for wins by summary judgement and for wins by jury verdict.
Could someone explain why Uber doesn't have an Android app for their drivers? It looks to me like they are trying to skim a little extra from those without iPhones. Surely they can afford the engineering costs associated with an Android version?
A Constant Doubt – Response to Generation Stupid
Then Lenovo would admit that they have seriously messed up. Now they are still trying to act as nothing serious happened, only small misunderstanding. "SSL certificate" doesn't tell much to a wider audience. I had difficulties explaining why this Lenovo malware is dangerous to my sister, who is quite smart overall. What most people get by reading articles on this topic is "Lenovo inserts ads", which is not that much of a concern for most users that are used to it anyway.
So I'm a fully qualified teacher of meditation, all the way to what is casually called enlightenment. I'm also a software engineer - I came from a "householder" lineage where teachers have day jobs. I'm currently the release coordinator (ish) for the Ethereum Project, so I'm working on cryptocurrency stuff. For the record, I hardly teach meditation: very few people really want it.

Let's actually put this into context: you sit there and do stuff with your mind that is supposed, over time, to make your mind work better (even if better means silently!). This is not in principle different from exercise: you do thing with the body that result in a better body. The argument between dancers and cross fit enthusiasts about the real benefits of exercise would be a good parallel to the discussion about meditation for a better mind vs. meditation for enlightenment.

To expand a hair more: meditation is a tool on the path to enlightenment. You certainly need it, but you may also need other things: "wisdom teaching" that show you what to look for, or membership in an enlightened society to provide models to step into as your practice matures. Climbing might be an analogy: a lot of time in the gym, but the real action is on the peaks. It's just that in meditation, the gym and the peaks are both on the meditation cushion, in different parts of your mind.

One thing that I don't think anybody has discussed here is the role of time. I'm willing to believe that a fair number of the people who are meditating for better minds now will meditate for other reasons as they age and their mortality presses in on them. Others will find a deeper practice during personal tragedy, or moral crisis, or any other deep impetus for change. I don't see anything wrong with a whole bunch of people hitting the gym - those who choose to climb later will be in good shape.

But, and this does need said: the enlightenment tradition must be protected through all this popularity. The dance, the mountain climb, all of that - those are analogies for something far above-and-beyond one's regular sitting practice: you build CERN in your mind and look for the fundamental nature of consciousness through introspection. It's not done one mantra at a time.
Your Best Profile Photo Tip?
Same here. S/he sure does come of as very butthurt (is there a better, less "offensive" word for that?). It wasn't a "shallow 'no'", it was just a "no", what else did s/he expect (companies usually don't give usable feedback because of legal reasons)?! S/he seems hurt to get a "no" after 6 hours of in-person interviews, but obviously, if it was a guaranteed "yes", you wouldn't even need an interview!

In other words, just another unsuccessful interview, nothing unusual here, nor anything that Apple did badly or wrong.
malicious client

Inside the same process? Is this really a risk one can sensibly defend against? A malicious client can take your copy of the data, scan the entire memory space of the process for the other copy, and overwrite that.
> but it's absolutely fair to specify how many hours of time were lost

I don't think it is. First of all, the hours aren't "lost", they are "cost of getting a job" - you don't interview without at least considering the possibility of not getting an offer. Anyone who expects to get a job after every interview they do is delusional. It's like the time you spend pitching your services to a client who then decides not to hire you - not "lost" time, but "cost of business".
This seems to be a valid link:

https://www.fpcomplete.com/user/agocorona/EDSL-for-hard-work...
Motion sickness isn't exclusive to the 'video lag' - many people suffer from motion sickness as their brain tries the reconcile the difference in signals from your inner ear and your vision. The immediate reaction is that your body thinks you've ingested poison, hence the urge to vomit.

As far as I know, the only way to get over this is to 'train' your brain to ignore it.
> I've actually been pressured to hire someone just to hold onto the req at a large company, with the up-front, stated intention to fire the person in a month or two and keep looking.

Wow, that is seriously fked up. While I got pressure to hire (one role I hired for was very specific so it took a long time to find a candidate), as long as I was actively sourcing/interviewing people, I never got too much flak. You've got to keep a hiring bar high... and not screw people over!
Not available in Norwegian app store. Is there a precompiled version I could simply just download?
Good point. Most roles at Google have a specific job req... you find the right person and the job is filled. But there are roles where that's not the case and where what I said doesn't necessarily apply. (That said, I'd argue that the expense that a company takes to interview you is in direct proportion to their interest in you, no matter what else happens in the process.)
How to launch a subscription based startup
Chat in Firefox, Seriously?
Facebook tried 'email' it didn't work. Google tried Google+ didn't work., or for that matter a social network. Microsoft tried 'search engine' it didn't work.

If you don't want to learn a lesson out of it, then you are purely an idiot.

Moral of the story. Stay focused on what you do best, or if you want to 'disrupt' the current market of a specific product, then you have to build the most innovative earth-shattering, ground-breaking product, that could blow the competition away, otherwise you will be beating the dead horse.

There is no room for at par or mediocre efforts in a highly competitive product marketplace.

It's not a rocket-science, it's called 'common-sense'.
> reasonable grounds to believe that an operation by NSA and GCHQ probably happened.

No kidding, they've been bought, under more-than-suspicious circumstances, by [inQtel](https://www.iqt.org/) and [Texas Partner Group](https://tpg.com/), which officially are CIA proxies.

I don't think they had to resort to tailored access to perform their heist, I'd rather bet that they still have enough former colleagues inside Gemalto to get whatever they want by simply entering the correct password on the correct keyboard.
Would you expect an honest answer to that one?
At this point, i suspect it's damage limitation.
> What sense does it make for all Founders depositing into start-up their post tax saving just so that start-up pay them back those money minus second income tax, minus second FICA & Unemployment insurance deductions for next 6-12 month?

You've just described how all business work.

1. Someone at the start puts in money

2. The business does work and pays it's employees

3. The person who put the money in at the start get's a share in the profits.

The fact that the people putting the money in, and the people doing the work are the same doesn't really matter.
Open letter for the Python sync world
Macro-Benchmark with Django, Flask and AsyncIO
Jen-Hsun on GeForce GTX 970
I can confirm it works :)
I totally agree with your opinion.

On the contrary, I've been in a position that I have to decide for applicants ( by doing technical interview ) if they could do the work or can not do it. It was a pleasant job when I can see some sparks of commitment and joy of doing the work. But talking more with the candidates it looked like they had a really hard time, being screened by the HR team, since they didn't have proper profile indicators, like "keywords in the CV", "past experience", "good university degree", "recommendations" and so on.
I can't recall the article, but there was a case where public data was de-anonymized based on DOB and zipcodes, and it was incredibly successful in a given state.
"The attacks against Gemalto only breached its office networks and could not have resulted in a massive theft of SIM encryption keys"

That's what they think...