skysight-inc/HackerNews huggingface dataset:
Stating the stock in a dollar amount makes it harder to evaluate. I know that recruiters love to do that, but it obfuscates some important factors. That said, this doesn't seem out of line with the compensation I've seen for that position in Seattle. It does vary pretty widely depending on the company and experience. In some companies this would be higher than anything I've seen, and in others you could likely get more. It's hard to give a more concrete opinion with so little information.
John Oliver Interviews Edward Snowden
The. Word. Is. Cue.
It would be awesome if it persisted all the operations to a log. That way, when I attach a new endpoint I could get it "caught up".

And then, assuming your handlers are idempotent, running db migrations or adding a new representation of your data would be as easy as attaching a modified handler and running through the log from the beginning.
This will backfire. Freedom of expression is about a lot more than freedom to send around pictures of naughty bits. The public should not get the impression that freedom from surveillance is being demanded by puerile hornballs, lest they think that those who have their privacy compromised by the government _deserve_ it.

Please, please, take this down.
If I were to find issues, would you prefer bug reports via github issues or some other mechanism?
> When I look at my colleagues, friends I feel like many of them have it quite easy.

The most difficult thing is Mastering one's own psychology. I'm sure if you surveyed your friends and colleagues, each of them is struggling with their own issues.

Horowitz talks about this in his recent book> http://techcrunch.com/2014/03/03/the-hard-thing-about-hard-t...

Success in life also requires a heavy repetition and grind-out quotient> https://www.youtube.com/watch?v=GBG57W_qFMA
Your value to a company has nothing (AT ALL) to do with what you personally need to live on. That shouldn't enter into the equation.
I didn't state that clearly. What I meant is the other way around-- that if people had more universal access to this technology it would be less likely to lead to greater inequality. This in turn would involve challenging our economic system.

I do think in that case it would be more likely to have a leveling effect, since it would be technically easier to fix problems or boost capabilities to high but normal human levels than it would be to try to go beyond normal human ability. At the very least there would be less risk of a runaway divergence if anyone could access this technology as part of normal family planning.

I agree that in our present economic system this would join elite schools and trust funds as another way generational inequality is perpetuated. IMHO we jump to banning because any economic change is categorically off the table. If these scientists instead called for universal access to any human enhancement technology, that would be crimethink.
"Mr. Wage" is a lovely example of an aptronym: http://en.wikipedia.org/wiki/Aptronym
Perhaps there will be so many that they'll need to get in line?
Why is it cheaper with a CLA?
chmac's single, substantive contribution to the project: https://github.com/datastax/nodejs-driver/commit/6f3c6b2f454...
== tl;dr ==

Amazon Web Services security team is hiring. We're looking for security-minded engineers at various skill levels. Our positions range from journeyman support engineers to principal engineers.

Locations: Seattle WA, North Virginia, Dublin Ireland (EU), Sydney Australia

Positions: http://amzn.to/HackerNewsQ2

Questions: @z1g1 or via email aws-itsec-hacker-news [at] amazon [dot] com.

== Full ==

Key focus areas include:

* Recognize, adopt, utilize and teach best practices in security engineering: secure development, cryptography, network security, security operations, systems security, policy, and incident response.

* Collaborate to ensure that decisions are based on the merit of the proposal, not the proposer. When none of the proposals is the obvious winner, you are still decisive, able to disagree and commit to the team’s decision

* Demonstrate high capacity and tolerance for extreme context switching and interruptions while remaining productive and effective

* Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon

* Partner with teams throughout the Company to develop pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk

* Solve problems at their root, stepping back to understand the broader context

* Maintain an understanding of the Internet threat environment and how it affects the company

* Find and fix flaws in existing company systems and sites

* Leverage current state of network and application security tools and how they can benefit the company

* Maintain knowledge and skills required to keep up with the rapidly changing threat landscape

* Participate in efforts that create and improve the company’s security policies

* Work under extended, extreme pressure, handle situations calmly and lead incident response teams effectively

* Proactively support knowledge sharing within the team and across the company

* Help recruit the very best people for Amazon through active participation in the overall recruiting process

* Large-scale security engineering Cloud security experience is obviously a plus, but not a firm requirement.

Full Listings are available here: http://amzn.to/HackerNewsQ2 .
Out with the Caraway, in with the Ginger: 50 Years of American Spice Consumption
I'm not actually sure that Oliver's premise is correct, that people would be substantially more outraged if they understood their nudes were being seen by the NSA. In fact, we've had this exact debate before re: body scanners in airports. In those cases, people make the connection: while it's obviously preferable to retain that privacy, if the very serious and important trained agents need to do this to stop their plane from blowing up, they're OK with a little bit of exposure.

Really this all turns on the degree to which the individual believes the government usually acts within the interest of the population. If you think the government is a good institution and that they are honestly just interested in national security, you'll accept your "dick pics" becoming collateral damage. If you believe that the government or one of its [former] operatives may use that information against you one day, you won't.
> I discovered Diceware a few months ago when looking for a password generation scheme for my company. We were just letting people choose their own passwords before, which I don't think is a good idea.

I think that if you implement Diceware at your company, people will still choose their own passwords. It's easier, and how would you prove they didn't?
What happened to the world from thirty years ago, when not understanding the
technical aspect of the world one lives in (then it was mechanics, electricity
and basics of electronics) was something to be ashamed of?
Networking is never a waste of time I have found (at least speaking as a developer) - it helps you get ideas from others that you may have missed and that may be important for you now or the future.
I'll have to try ultrajson for my use case, but when I benchmarked pickle, simplejson and msgpack, msgpack came out the fastest. I also tried combining all three formats with gzip, but that did not help. Primarily I care about speed when deserializing from disk.
Is $150k stock per year or for 4 year period?
The people who do well at hackathons and programming competitions are often excellent students. And extra-curricular activities as a way of learning more and improving yourself are generally considered good for students, right? That's one reason universities support programming competitions, hackathons, CS clubs, etc. I'd go so far as to say the best students are the ones who love their subject so much they do it in their spare time too.
The author appears to be Richard Hamming, not Feynman.
>> Meeting anyone has some value to it.

I'm sure we've all met that guy who might legitimately have a mental problem. You can usually tell early on because their idea is something really out-there. I'm talking on the order of "make an engine that works by blasting lightning out of the back", as just one example from my own experience.

The problem is that they tend to not know the difference between polite chit-chat and real interest, so any level of interaction above straight-up ignoring them makes you permanently their "buddy".

I'm sympathetic to their plight and I want to be polite and not cut people completely out of the conversation. They don't deserve to be treated poorly, they don't deserve to be ridiculed. But I'm also not a charity or a community outreach program for people with high-functioning autism. I'm not there to be their babysitter so everyone else at the event can get their worth out of it. I'm there for the event.

I don't know what it's like for you in SV, maybe you have better filters for these kinds of people, but out here on the east coast, there has been at least one in almost every meetup I've been to.
From http://effective-altruism.com/ea/54/show_me_the_harm/:

"Finance is often taken to be the legal high earning career that’s most harmful to society. The average Goldman Sachs employee earns around $500,000 per year. If someone joined Goldman and donated half of his earnings to Against Malaria Foundation, that would be about enough to save 100 lives per year (or more accurately, saving 4000 QALYs), plus likely have substantial positive flow-through effects. For Earning to Give at Goldman to be net harmful, the marginal employee would need to be causing the death of a hundred people each year. This would mean that Goldman Sachs employees are several orders of magnitude more deadly than American service people in Iraq.

Goldman has 32,000 employees. An upper bound for the harm caused by the marginal employee is thus the total harm caused divided by 32,000. For the harm to outweigh the good, Goldman would therefore have to be killing at least 3.2 million young people each year, or doing something else that is similarly harmful. That would mean that Goldman Sachs would need to be responsible for around 5% of all deaths in the world. Bear in mind that Goldman Sachs only makes up 22% of American investment banking, and 3% of the American financial industry - if the rest of finance is similarly bad, then it would imply that finance is doing something as bad as causing all the deaths in the world."
The Linux kernel doesn't require a CLA either.

Linus Torvalds: To be fair, people just like hating on Canonical. The FSF and Apache Foundation CLA's are pretty much equally broken. And they may not be broken because of any relicencing, but because the copyright assignment paperwork ends up basically killing the community. Basically, with a CLA, you don't get the kind of "long tail" that the kernel has of random drive-by patches. And since that's how lots of people try the waters, any CLA at all - changing the license or not - is fundamentally broken.﻿

https://plus.google.com/+gregkroahhartman/posts/NstZfwXbAti
In my own experience when I was working at Sun I knew a lot of people inside Sun but nobody "outside" of Sun. Even after people had left I often lost track of them. When I left Sun I realized I didn't have anyone to consult with on questions if they weren't already at Sun. That was a problem since I was interested in how people other than Sun employees solved some problems. So after realizing that I resolved to try to reach out to people when I could and always be accessible (one of the folks here who as an unobfuscated email in their profile :-) The folks I've met over the years since have been pretty amazing. As a result I'm glad I've operated in that way, for me it has worked out.
Indeed; we've already had this debate re: TSA body scanners. Most people are willing to compromise the exposure in exchange for assurance that they won't get blown up. Oliver's premise that this is the hinge on which the issue turns is a nice try but ultimately probably incorrect.
Software security is an engineering problem. If your threat model includes the attacker knowing how you generate your passwords (and it probably should for most companies — insiders and disgruntled staff are a big risk), this scheme may not be significantly better than using 1password or a similar password safe on a device you know you/your employees will always have on them. That's not to say you're wrong, it's just that you're making trade offs here like in any other engineering problem.
Corekube's Heat template is structured to allow up to 12 minions to be used, you just have to change the parameter.

I have a blog post on the Rackspace Dev Blog from when I initially released it, but it is a bit outdated - https://developer.rackspace.com/blog/running-coreos-and-kube...

Most of the same information on the blog can be pulled from the README as far as I'm aware, but I'm happy to answer any further questions.
Thank You for Buying “Call of Duty” and Helping to Fight Cancer
Hamming not Feynman
One of the arguments regarding this is that employment in the sort of higher level careers we're talking about is fairly inelastic, so if you don't take the job then it will go to the next best candidate who applied. The impact is less about the total damage/good done by your position than it is about the difference between you and the next person in line (or basically the average person in that industry). If you're the sort of person who is concerned with maximizing impact in this way you'll probably do at least a bit better on the margin, and any money that you earn to donate is pure benefit since that wouldn't have happened otherwise.
I think the main idea would be to prevent the term "dick" appearing in traffic logs.
Gearpump – A lightweight real-time big data streaming engine
And I thought: Do they mean Sales Engineer, Systems Engineer, Software Engineer or Senior Engineer?
It will show up as an imgur link visited rather than a link with "seemydick" buried in it.
If someone is directly reviewing everything you look at, different story. ( and I might say, you've got some workplace problems already if that is the case )
> call your representative and tell him

Or her. ;)
I studied genetics, so yes I realize that this stuff is harder than we likely think and is not a panacea.
Even outside of government, people are surprisingly compliant with authority when it comes to having naked pictures taken of them. See http://en.wikipedia.org/wiki/Ivy_League_nude_posture_photos , http://www.nytimes.com/1995/01/15/magazine/the-great-ivy-lea... . Wikipedia:

"The Ivy League nude posture photos were taken in the 1940s through the 1970s of all incoming freshmen at certain Ivy League and Seven Sisters colleges (as well as Swarthmore), ostensibly to gauge the rate and severity of rickets, scoliosis, and lordosis in the population.[1][2] Harvard previously had its own such program by the 1880s.[2] The larger project was run by William Herbert Sheldon and Earnest Albert Hooton, who may have been using the data to support their theory on body types and social hierarchy. What remained of the images were transferred to the Smithsonian and most were destroyed between 1995 and 2001.[1][3]"
One reason is trying to follow a HN discussion. I do not see a better way to do this than keeping several tabs open with topics I would like to recheck a few hours later.

There could be other ways doing this and I have some ideas, but right now multiple tabs seem to be most practical solution for this.
Left-leaning Red-Black Trees (2008) [pdf]
Show HN: AtomStore – The missing piece for an immutable flux architecture
I'm not sure what the problem is. Can't they just be kept 50 metres apart to avoid cross pollination, the same as Monsanto's regulations to prevent cross pollination of their GM crops? :P
I disagree, I think the hard skills for being a successful software developer are picked up by honing your craft daily working on the same project. Hackathons are too contrived since the goal is to have a finished product in 24 ~ 48 hours. Every time I have done one I throw away all the "Danger, Bad practice" signals from my sub conscience and work towards finishing the product/idea. Things that are important like maintainability (even if your hack is successful, and get investor funding you want to re-write it properly), coupling, testing, documentation, API, Memory profiling, Logging, performance optimizations, design patterns are thrown out the window to get that idyllic prototype out. Even working as a team, there is very little you gain from spending 48 hours with (mostly unknown) individuals than it is for your peers in a job where you actually have a favor economy.

And I don't mean that there isn't any value on hack-a-thons. I think you're right on dealing with deadline pressures and the ability of working yourself out of a problem in a pinch are valuable skills. I just don't think that's where the "hard" skills needed to become a successful software developer are learned.
Anonabox Analysis
I was comparing saving to donating, and contrasting with spending. So the exact opposite.

Was I really that unclear?
The SVG Canvas, Coordinate System, and Viewport
Yep, cities may have regulations for that, and they usually do these days.

And I don't necessarily agree with your preference. My family used to own a large, historical house that had a huge front wall because the terrain was very elevated from street level. And I can tell you from experience, most "graffiti" is worthless crap scrabbled by drunk teenagers without ANY artistic talent or ANY worthwhile message to the world. If you give graffiti a pass because there's the one-in-a-million Banksy, you should also tolerate ads everywhere because a few of them happen to be awesome.
This point could have been made without the sarcasm, please see guidelines on being overly negative: http://blog.ycombinator.com/new-hacker-news-guideline
Take a trip on tumblr sometime and you'll see that the psychological drive to be a unique and special snowflake is strong enough that you have nothing to worry about.
So given that you like to use the scrollbar in that matter which would you rather see:

1) A native scrollbar that is restyled to match the colors of the webpage it is in?
2) A janky web view with scrollbars hidden and then reimplemented in JS which doesn't function they way you want it to?

Like it or not designers usually don't spend time on the subset of the audience that clicks and drags the scrollbar. They spend time drawing a pretty looking scrollbar.

When it comes to the implementation personally I think it still better to have a scrollbar that functions the way you expect it to, even if it looks a little different, rather than ending up with many different reimplementations of the scrollbar by different programmers.
> Essentially it allows some company to randomly re-license free contributions to turn them private/for-profit.

On the other hand, without signing over your rights, you can effectively hold up a project from moving forward. For example, if a project wanted to move from GPLv2 to GPLv3, IIRC, you can't do that without the permission of all contributors unless they have signed over their rights. And as @trestletech has pointed out not all contributors are created equal[1].

One the one hand, you have people making significant contributions (and you don't want to just stomp all over them), on the other hand you could have people making tiny contributions, yet are holding up everyone else.

[1]: https://github.com/datastax/nodejs-driver/commit/6f3c6b2f454...
maybe you will like session manager

https://chrome.google.com/webstore/detail/session-manager/bb...
He could like to the EFF call to action page:
https://act.eff.org/action/end-the-nsa-s-mass-spying-eb7893f...
Lots of tabs are a hint you are time-slicing too finely, IMHO. If I have more than a manageable number, it's a little hint to myself that I'm getting spread too thin to make any sort of reasonable progress on anything.
The Great American Parcel Survey: Using Google Street View to Survey America
It's happened many, many times.
Astronauts describe an "overview effect" that involves among other things a tangible sense of ones smallness.
Ansible is really great, but for reasons some people might not think about.

Ansible has support for powershell, which is essentially now the backend of windows. (your new servers are gui-less right?) Powershell is also not a bad language at all, and while for those of us that are bash/zsh/fish natives, it will take some getting used to, I find it a really powerfull and more intuitive way to interact with windows, even if it is very overly majorly verbose-verbose.

Being able to work in my very mixed environment (Solaris/OSX/Linux/Doze, etc) via a central ansible server group is awesome.
99Sounds: Download Free Audio Samples for Games
Bitcoin Trader Burton Wagner Arrested, Could Face 5 Years in Prison
It's not an opinion, you just haven't learned to be objective about morality yet. Nor has the UN.
With apologies for the somewhat flip turn of phrase, if we outlaw human genome editing, then only outlaws will edit the human genome.

States in general do not have a good track record at preventing things that can take place in a small room, with inexpensive equipment and few personnel.

Consider the kinds of equipment, and its associated cost, needed for genome editing -- and compare to that required for development of nuclear weapons. The collected might of the western world has occasional challenges in preventing development of nuclear weapons; it's not clear to me how anyone expects to be able to enforce a "ban" on editing the human genome. And for a glimpse of what an unenforceable ban looks like, look at the drug war.

The whole thing is empty posturing. Genome editing is coming, like it or not. Bans won't prevent it; they'll just prevent open discussion on how and where it's being used.
Hi HN !

I wanted to submit that to you because I think it is currently completely useless (It could be more of an API draft in fact).

I just wanted to create a mechanism to enforce immutability in the whole flux architecture. If I manage to get more safety, I'm sure it can get more useful. For now I just want to know if you would use it...
According to "xjohanson" who submitted the story and seems to work at gasvalet it's available "everywhere"[1]. Which makes this feel even more like a scam or joke.

[1]https://news.ycombinator.com/item?id=9327849
Those contributors contributed when it was not under the Apache license. They either need to get all rights assigned to them (DataStax) and then they can relicense it under Apache, or they need to get all contributors to agree to relicense under Apache. Looks like they are taking option 1 because it will make relicensing less of a headache in the future if it becomes necessary.
Sounds alright to me tbh.
Show HN: Siteleaf – CMS that publishes static files to FTP/AWS/GitHub
GNU's own desktop environment GNOME

I am pretty sure GNOME is separate from GNU/FSF.
> but it seems to me that the core reason why CLAs exist is to undermine the core concept of OSS software. Essentially it allows some company to randomly re-license free contributions to turn them private/for-profit.

While your assertion is true, it's not the only reason (or even the main reason) for CLAs in OSS.

IANAL, but this has actually happened in the past (the big case I'm aware of predates open source but not free software -- google for Diku MUD). Let's say that someone infringes on the license. So you take them to court to get them to follow the license. If you have a CLA you are the copyright holder so you can just do this. If you don't, to make your case you have to round up virtually everyone who has ever contributed to your project because they are copyright holders too. So, in effect, it doesn't matter if they infringe on the license or not because you can't hold them to it.