skysight-inc/HackerNews huggingface dataset:
Uber - Frontend, Backend, or Full stack - San Francisco - Full-time - Visa welcomed

As a member of our product engineering team, you'll have a direct impact on the customer experience for both riders and drivers. Our team is responsible for Uber’s core business logic, which includes maintaining our product configuration in 200+ cities around the world, handling and storing thousands of payment transactions per second, developing intelligent fraud prevention strategies that scale, and ensuring that push and SMS notifications are sent in a timely manner.

Skills
------

Fast learner. We’re looking for software engineers who thrive on learning new technologies and don’t believe in one-size-fits-all solutions. You have advanced knowledge of at least one scripting language (e.g. Python or JavaScript) and knowledge of or eagerness to learn: MySQL, PostgreSQL, Redis, Kafka, and ElasticSearch.

Fearlessness. You think a working proof-of-concept is the best way to make a point.

Versatility. In addition to having an intimate knowledge of the whole web stack, you understand how all the pieces fit together (front-end, database, network layer, etc.) and how they impact the performance of your application.

Strong architecture chops. You know how to build highly scalable, robust, and fault-tolerant services that support our unique rate-of-growth requirements.

Passion. You feel ownership over everything you ship; you'd never call code "released" until you’re confident it’s correct. You pride yourself on efficient monitoring, strong documentation, and proper test coverage.

A team player. You believe that you can achieve more on a team — that the whole is greater than the sum of its parts. You rely on others' candid feedback for continuous improvement.

Design and business acumen. You understand requirements beyond the written word. Whether you’re working on an API used by other developers, an internal tool consumed by our operation teams, or a feature used by millions of customers, your attention to details leads to a delightful user experience.

How to apply?
-------------

Backend: https://www.uber.com/jobs/4810
Frontend: https://www.uber.com/jobs/4811
Full stack: https://www.uber.com/jobs/4767
We're going to see a few interesting things play out: GWT got a new user-base within Google because the Inbox team is using GWT for the non-UI part of the Web implementation (and j2objc for iOS).
I generally enjoy it. However some joker decided it would be super funny to exchange the red and green icons on the build server.

Me: It's not funny could you please revert it?

He: Nope

Me: ಠ_ಠ

I could have hacked into the build server but decided blowing my backdoor for this was not worth it. Instead I added him to my black list.
I don't think they expect anything in particular. It's just a sad fact that the transaction is asymmetric. It may take you a while to read, but it costs them very little to send you spam, and there is apparently a non-zero conversion rate.

I guess from their point of view, they have no idea of your current position, whether you are going through a break-up and want to move cities, whether you hate your boss, or whether you're just bored. They are simply putting out offers and playing the percentage game.
The Servo project[1] has a constantly maintained list of bugs and features appropriate for new contributors, and several people willing to mentor if needed.

There is so much low hanging fruit building a new browser engine, that there is plenty of stuff to work on even if you aren't yet an expert on browser engines.

Also, you get to use a new programming language :)

[1] https://github.com/servo/servo
If two websites use this scheme and they both get hacked and a user has an account on both with the same username/password the attacker has to do half as much work. Another reason is an attacker can compute a rainbow table prior to getting access to the hashed passwords. This would reduce the amount of time the owners of the site would have to respond in the event of a breach. Finally, it's really easy and cheap to generate a random salt.
Memcached is just a stupid key-value store, and by stupid I mean it just stores and retrieves values. It's extremely primitive compared to Redis.

It's not even close to the same thing as Redis except superficially.

The key/value part of Redis is just the beginning. The values themselves can be of several different types that allow for a lot more flexibility in how you store and query data.
Outreach - https://www.outreach.io/ - Full-Stack, Backend, or DevOps - Seattle, WA - Full-time

Outreach is a small, quickly growing, funded startup with real revenues. We have a sexy product that is tackling the un-sexy space of sales automation.

Our Tech Stack Simplified

* Front - React.js (we are big believers in single page javascript applications)

* Back - Rails (nothin' but a JSON api which our front-end consumes)

* Database - CouchDB, MySQL, Elasticsearch, Redis (help us scale! we process lots of emails)

* Ops - Amazon Web Services managed via Chef

For more info: https://angel.co/outreach/jobs/46560-full-stack-engineer
Loha | Remote | Part-time (6-8 hours per week) | Backend (Ruby on Rails) Dev
https://itunes.apple.com/us/app/loha/id866898916?mt=8
http://www.loha.co

Recently-launched, bootstrapped web/mobile startup looking for a backend Ruby on Rails dev or, if the stars align, a technical cofounder who's willing to work for equity in exchange for a few hours of work per week.

Tech:
Ruby on Rails
Postgres
Heroku

Outsourced team works on the iPhone app and so we're looking for someone to manage API updates as well as do small web and data projects.

Email sayloha at loha dot co (co not com!)
Linux job market booms even as the server market disappears
I'm not impressed that they say condoms are not effective
I'm kind of curious, which brand do you use?
The significance of the Naked Mole Rat finding is that not only does it not develop cancer, it also has a very long life-span for a rodent (decades).
Obama announces hacker sanctions amid cyber-security ‘national emergency’
Many Android bugs with 500+ stars closed as obsolete on December 25 (2014)

https://news.ycombinator.com/item?id=8803118
I wouldn't do it either, but it sounds like they are solving a problem for the people around them.

(A simple way to look at it is that if Google/Waze manage to extract some amount $X in profit because of their effort, it is very likely that the people using the product derived a benefit greater than $X from that same effort. It's also possible that some benefit is delivered to the users from things that Google/Waze doesn't manage to profit off of.)
You can actually buy it. They are instructions on how to play those games.
I also have wondered why this isn't talked about more often. We see an unbelievable amount of garbage from catching uncaught client-side errors.
Costa Rican here. The article doesn't come close explaining the complexity (and inconvenience) of addresses in Costa Rica. We even use landmarks which no longer exist (e.g. from the old pharmacy in X, take a left), or use any distinctive surrounding object for official guidance (trees, fences, wall color).

Landmark usage for directions is greatly due to poor city planning throughout the last century and the address culture grown around it. Most city streets do have names/numbers, but are pretty much unknown to the common citizen. Waze and its contributors have done a truly amazing job. I believe OSM has lagged behind Waze because Waze was the first GPS nav system that actually worked in the country, and was therefore so greatly welcomed.

P.D. Nokia maps also worked decently, but GPS-capable nokia phones were scarce in the market.
We can talk all day about politicians lying in front of congress. Would you like to?
If you have a public repository anywhere (e.g. you've forked a project on github) then you can add a specific git commit to the requirements instead of pypi version.

See https://pip.pypa.io/en/latest/reference/pip_install.html#vcs...
Ignore anything about MQ. They have old docs on using MQ that we've been trying to wean them away from.

Modern hg is far better than MQ, and in some situations, better than git. You can edit, you can rebase, you can amend, you can evolve.
Finally you can send your selfies to grandma with Skylight
How the media treat students and relatives affected by the Germanwings tragedy
Voice turn by turn nav and traffic updates and reporting cops, roadwork etc. I use it even on my commute just to get those alerts.
JS's bcrypt/scrypt performance will be pitiful. If it takes the client 1s in JS to bcrypt a password, a server will be able to do it in a 10th the time with a more efficient implementation. That makes client-side bcrypt have to use an artificially low difficulty factor due to the inefficient implementation language.
It's not a way to fall back, it's a way to detect fallback and prevent downgrade attacks.

https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-05

A client sends a ClientHello trying to connect with TLS 1.2, MITM does not let that through, the client sends a ClientHello for TLS 1.0 with a signal that means "this is a fallback", the MITM lets that through, the server sees this and does not allow a connection, foiling the attempted downgrade attack.

I know that, that's why I asked: "Why is SCSV a sucky feature?".
Facebook Riff – collaborative videos
I was going to write that I thought it was silly to convolute software licensing with data licensing, but I can't really find any fundamental difference between them.
Chartboost [https://chartboost.com] | San Francisco, CA, USA | Full time | Many open positions including Software Engineers, QA Engineers, Directors of Engineering, Product Managers and more

Chartboost [https://chartboost.com] is the the world’s largest mobile games-only platform, helping developers grow their audience, monetize, and make better data-driven decision. We’re profitable, backed by Sequoia and have a ton of traction in our space, currently being used by 90% of the top grossing iOS and Android Game Developers.

Our technology stack includes Scala, Python, AWS, Git, Kafka, multiple NoSQL storage solutions, Jenkins, Puppet and more. Experience with our stack is a bonus, but not required for all roles. And... you’d get to work in our new office [http://www.officelovin.com/2014/12/11/chartboosts-new-san-fr...].

We're hiring senior engineers for our Segmentation team and strong back-end developers on our Advertisers engineering team. Our full list of open roles can be found here [https://boards.greenhouse.io/chartboost#.VPD-KLPF8cx], but we have many more openings coming down the pipe.

If you’re interested, feel free to apply directly or reach out to talent@chartboost.com.
Interesting in that "want people to adopt" has never been a stated objective for OpenBSD that I've seen. It's more like "we build what we're interested in, and if it solves a problem for you too, that's great."
Yeah, I think it is, in fact, because Waze is very easy to use for everyone, especially for people with non-technical backgrounds. The support for Spanish locale must be another reason.

Note however, that I haven't used OSM myself, so I can't truly compare them fairly.
Totally agree. I look at how I used to think and communicate, and "tool" is spot on. Software is so incredibly hard, it took me years, and many mistakes along the way, to learn this. And I'm still learning.
I programmed my gmail to auto-archive the worst offenders. What's the problem?
It would be conceptually easy to extend Ekam to support automatically deciding which libraries to link against, and this has always been something I intended to do eventually, but it just hasn't happened yet.

In Ekam's link stage, it starts with a root object (typically, something exporting the symbol `main`) and then tries to satisfy all missing symbols using other built objects, transitively, until none of the remaining missing symbols are satisfied by any known objects. It then hopes those remaining symbols will be covered by libraries specified by the `LIBS` environment variable and so invokes the linker.

Ekam could additionally at this point consult an index of symbols exported by libraries in order to decide which ones to link against. We just need to implement such an index and decide how exactly a library gets included in the index.

I haven't implemented this because with Sandstorm we prefer instead to bring most of the source code for our dependencies into our build tree, so that they are in fact all built with Ekam instead of linking with pre-built system libs. This makes sense for Sandstorm since we intend to run in a chroot environment anyway and so cannot really share libraries with the rest of the system regardless. It's also really nice for development to be able to edit dependencies directly when needed and start using those changes in Sandstorm code without having to install the new library version somewhere as an interim step.
California Gov. Brown orders first ever statewide mandatory water reductions
Location: Between New York City and Philadelphia

Remote: Yes

Willing to relocate: Yes

Technologies: Ruby, Rails, Javascript (d3, jQuery), Full-stack, Postgres, Linux, Vim, Git, Bash, Python, Law

Résumé/CV: Available upon request; github.com/josomo

Email: josomo@runbox.com

About: I'm a software developer with a legal background. I've completed internships at small and larger start-ups, and I've created and executed on my own ideas as side projects. I am enthusiastic about learning new languages and technologies, but at the moment my strength is full stack Ruby on Rails development. I'm looking for contract or full-time work.
Live Video AMA with Bram from Startup Stash
Except for patents: http://en.wikipedia.org/wiki/PageRank#Relevant_patents
Absolutely. The guy was crazy. He was right about some things, but he was crazy.
Mesosphere - [mesosphere.io] - San Francisco

We're hiring for a number of positions in both our Hamburg, Germany and our San Francisco, CA offices:

+ Engineering Manager
+ Frontend Engineer
+ Distributed Applications Engineer
+ Distributed Systems Engineer
+ Linux Systems Engineer
+ Solutions Architect

Full details are at http://mesosphere.io/jobs/, please apply online or email me at ryan@mesosphere.io for more information! We've raised 40m in less than 2 years, are visa friendly, contribute extensively to open source (we're building products and services around the Apache Mesos project) and have great investors, advisors and engineers. Work ranges from Javascript to Python to Go to Scala to C++, depending on the layer of the stack and application to hand. Get in touch!
People have odd ideas about how serious the vulnerabilities in hashes are. These hashes, even old and obsolete ones, are still entirely secure for password like hashing if the password is random enough, which scrypt output is.

Even MD5 is still (AFAIK) effectively unbreakable in this use case (finding md5 collisions is possible, finding the input given an md5 is not). According to http://en.wikipedia.org/wiki/MD5#Preimage_vulnerability finding input to generate a given md5 has a complexity of 2^123.4 - i.e. never going to happen. And that's Md5, an obsolete hash!

Sha1, also considered obsolete, has a bad rep because there are scary theoretical collision attacks. This isn't good news, certainly, but for a sense of perspective: nobody, not even with lots of distributed computing power, has ever actually managed to find a collision since that would take around 2^60 attempts. I don't think anyone has ever found even a theoretical weakness in its preimage resistance.

And you're talking about sha2 - there have been no published reports on any attacks, even theoretical, on the full sha2 (they have found weaknesses on reduced versions, suggesting room for improvement - but that's largely of academic interest).

Collision attacks are another matter. If you're using a hash to sign potentially hostile content rather than recognize friendly content, md5 is clearly dangerous, and sha1 may well become so. But that's relevant to things like certificate authorities, not message authentication.
SRE hiring made easy
American Express, Serve @ Tampa bay area (the other bay area)
We are trying to transform the Serve division into a nimble, agile SV like company. We have the following positions open. We work on C#, Java and a bunch of other technologies. Come and join us!

* Programming languages - C#, Java
* Platform - Windows, .Net, Linux
* Database - Oracle, Mysql

Software Specialist 1
https://axp.taleo.net/careersection/2/jobdetail.ftl?lang=en&...

Senior Software Engineer
https://axp.taleo.net/careersection/2/jobdetail.ftl?lang=en&...

Junior Developer (2 positions)
https://axp.taleo.net/careersection/2/jobdetail.ftl?lang=en&...

Junior Developer
https://axp.taleo.net/careersection/2/jobdetail.ftl?lang=en&...
Tie it Together: App that automates interior design
Dawkins has never struck me as being particularly intellectual. The stance he takes on his definition of science often comes across as extreme as many religious fundamentalist perspectives.
> [edit - it stops after a while]

It stopped for me after I closed the window in disgust.

Internet Jackass Day is bad enough on a fundamental level, but when your jackass behaviour gets in the way of people's actual tasks (and there's no way to say 'stop this BS'), you're not being funny.
https://www.openhub.net/ it's a great site to search projects in any language
Exactly what I was looking for. This is why I come to HN. Very clever. Thanks.
More people = greater diversity of opinions and interest groups, thus greater difficulty achieving consensus (or even majority).
That's pretty cool. I wonder if it violates Google's AUP.
It is nearly impossible to be objective about your own brain. If you suspect X makes you happier, then it probably will. After it works once, you will probably believe X makes you happier, and if definitely will.

In other words, even if fish-oil does work as a mood stabilizer, there would be no way for you, as a consumer of fish oil, to be even slightly certain it works.
Yes, this seems to be very successful.

http://www.mercurynews.com/scott-herhold/ci_26809055/herhold...

We need more of this. I don't know where the low-hanging fruit is in mass transit, but a lot more could be done.
If someone can't easily figure out how to create per-IP login attempt throttles, I suspect their application has far more gaping holes in it.
Nokia's map data lives on as "HERE" https://www.here.com/?map=9.9258,-84.0787,8,normal
Free Microsoft Points Codes • UPDATED: April 2015
Highly unlikely. If you've got an API or site designed around validating passwords on each request you've failed as an engineer.
That actually reminded me of a bug I submitted a while ago. It appears to be fixed now, but I was pretty surprised at the answer they provided at the time. When instant search first came out, anything that auto-completed to "do a barrel roll" would initiate the animation. It's such a popular term that simply typing "Do a" was enough to trigger it as it was the first result.

https://productforums.google.com/forum/#!topic/websearch/R5A...
IQ estimates using SVMs trained on MRIs
OnDeck - Arlington,VA & New York, NY.

OnDeck (ONDK) uses data aggregation and electronic payment technology to evaluate the financial health of small and medium sized businesses to efficiently deliver capital to a market underserved by banks

* OnDeck is the largest VC backed tech IPO in NYC history.
* Crain's 2014 Best places to work.

===============================

OnDeck is looking for

* Backend Engineers(Java)
* Frontend Engineers (Angular)
* Security Engineers
* QA/Automation
* Analytics (Hadoop, HBase)
* Product Managers.

Perks

* Health Insurance - Medical, Dental, Vision
* Competitive salaries, a 401k plan, and meaningful equity for all employees
* We offer discounted health club memberships for all members at Crunch Fitness as well as free memberships to One Medical.
* We have “Happy Hour Wednesdays,” quarterly employee outings and a game room with a Ping-Pong and foosball table, old school Pac-Man, and Wii.
email: abhijithrc@ondeck.com
Presumably Google would incorporate that data into Google Maps if it's valuable, not simply delete it.
It popped up something which took three seconds to scroll in. Then disappeared. Then when I found my place again it popped up another one. Then it went away, and I tried to figure out where I was on the page. And then it happened again and I closed the window.
The problem is it's unsolicited and there's no way to unsubscribe.
Can someone summarize the linked paper? What result does it propose w.r.t altruism, and why are Dawkins/Pinker/others challenging it?

EDIT: after some digging, I found this article: http://www.theguardian.com/science/2012/jun/24/battle-of-the..., which summarizes the disagreement like so:

For lay spectators, the row is a symptom of the long and controversial
evolution of the very idea of evolution. At root it is a dispute about
whether natural selection, the theory of "the survival of the fittest" first
put forward by Charles Darwin in 1859, occurs only to preserve the single
gene. Wilson is an advocate of "multi-level selection theory", a development
of the idea of "kin selection", which holds that other biological, social and
even environmental priorities may be behind the process.

But Dawkins is far from convinced: "Wilson now rejects 'kin selection' and
replaces it with a revival of 'group selection' – the poorly defined and
incoherent view that evolution is driven by the differential survival of
whole groups of organisms."
Need Fullstack Developers @ Wirestorm / dan@wirestorm.us

Location; Portland Oregon or Santa Monica

We are looking for self-starting code assassins to slay wildly different yet heavy projects day in and day out.

Skills & Requirements

-Know your stacks (heavy emphasis on Angular)

-Play nice with others

-Appreciate loyalty

-Obsess over every friggin’ detail

About Wirestorm Innovations

Wirestorm is a small network of international talent. We assemble hit teams to do the impossible. Every project is challenging, and every position critical. We don’t have ping pong tables or espresso machines, yet we enjoy a thriving culture of shared invention. Our clients range from sovereign governments to Fortune 500 companies.

Interested send resume and a paragraph detailing how you fit the description send to Dan@wirestorm.us
You say some C knowledge required when we are talking about a complicated UNIX kernel.

right..."some"knowledge is really required...
These days, ESB's generation is mostly gas, with wind being the second-largest. Coal is being phased out, and peat generally not expanded.
"Used properly, the two protocols offer the same level of robustness..."

How are you measuring robustness there? Do you have some data on the prevalence of bugs related to I2C and SPI implementation/use?
mrb, this is awesome, thanks for sharing. Can you comment on storing the scrypt as an md5 hash and how that would impact security? [Asking because I'm confined to server side systems that only support md5]

IMHO While MD5 has a fraction of the keyspace of SHA2, it's still a very hard problem to reverse it and intuitively it seems this might provide a huge improvement over salted and stretched (multiple rounds) of md5 on the server.

Thanks again.
I thought it was trivial to quickly compute SHAs so you can try lots of passwords.

In the case of sending bcrypt output wouldn't the "password" be long and essentially random and therefore not easy to enumerate?

Or is SHA also reversible?
SEEKING WORK - remote (GMT +1)

Mathematician and a full stack dev with sysadmin experience. Worked in many languages and dozen of technologies, too many to count here. If you are looking for someone who can pick up things quickly and be useful from day one contact me.

For more details take a look at my resume: http://nikola.henezi.com/nikola_henezi.pdf

Gihub: https://github.com/nhenezi
Email: nikola `at` henezi.com

Keywords: Javascript, node.js, react.js, angular.js, socket.io, python, scipy, django, sqlalchemy, php, linux, haskell, mathematics.