skysight-inc/HackerNews huggingface dataset:
Scanning is still fairly invasive (w.r.t. radiation/dosages). And in general, the better the resolution, the more damaging.

The bigger reason we don't continually scan people is that everyone has all sorts of little cancerous growths that are entirely benign. They would show up on these scans and freak people out. And often the overreaction of invasively removing those tiny little benign cancers can cause more problems. Don't misuse or abuse this information, but in general the 'abnormal growths' in a person are just that. They do very little and are just little bugs in the system. But the overall system is capable of dealing with them. It's the rare kind that is able to get around the entire body's defenses. But unfortunately it's difficult to tell which/when that happens.

But again, if you took whole body scans all the time, and tried to root out all those little growths, you'd cause a lot more harm than good.
email me [email address redacted] -- I have no idea who you are in the system.
So you're building a camping company that is for people who don't camp much.
There was a flaw in YouTube that allowed removal of any video
hostnames can have more than three components, e.g. "www.ox.ac.uk". So it's either biggest to smallest: "com.google.www" or smallest to biggest: "www.google.com".

google.com.www is in neither ascending or descending order.

www.google/stuff works now that we have generic TLDs and .google is a TLD, but before that it ignores the possibility of google.net and google.org. This may not be a problem for a unique trademark like google but not all domains are trademarks.
Fetch Robotics - http://fetchrobotics.com/ - San Jose, CA - Full Time / Interns

Fetch is a small team of experienced engineers working on cutting edge mobile robotics. We’re well funded and growing quickly. We’re looking for deeply talented people who love robots and want to solve real world problems.

Front End Developer (React / Backbone) - http://bit.ly/1HjmhNn

Robot Perception Engineer (lasers / vision) - http://bit.ly/1NBOVuY

Robot Manipulation Engineer - http://bit.ly/1I5rZpz

Robot Navigation Engineer - http://bit.ly/1NK5DKA

Robot Application Engineer - http://bit.ly/1IRcoHI

Interns - http://bit.ly/1Dv7qjU

We’ve got operational robots, a disruptive price point and we are poised for significant growth. Simply put, we’ve built something that people want.
I wasn't 100% so I had a quick look. Here's a blog post from 2012 with the Samsung/ARM Chromebook shown as the top seller in laptops in the UK (you have to scroll right down to the bottom).

http://googlesystem.blogspot.co.uk/2012/12/chromebooks-best-...

You're right though, it wasn't 2014, it was 2012.
If Verizon owns your phone (literally, in the case of their edge program), all they need to do to inject tracking into HTTP packets is install a trusted root cert for themselves on your phone. One might argue that's not even wrong for them to do.

Also, Verizon and ISP's in general don't need access to unencrypted HTTPS data to track you. HTTP is an application layer protocol (top of OSI model), but your ISP can track you all the way down to the physical layer (bottom of OSI model). They still have all the metadata of your packets, even if they don't have the unencrypted content of them, because they literally own the wires/spectrum that your device used to send data. That means they can see when you use the Internet, what IP addresses you go to, how much content you send to each, etc etc. I don't think I need to explain to HN how much you can extract from metadata.

My point is that Verizon is not playing the game of injecting the actual ads you see. They inject tracking codes, or track you in other ways, but they still sell that data to the same advertisers who benefit from ad injectors. (Because ultimately, an ad is an ad, no matter how it got in your computer, and if you click it, the advertiser stands to benefit.)

Google should take a stand because the problem of ad injection is a symptom of the bigger problem, which is messing with user traffic in general.

Perhaps the solution is breaking up control of the OSI model. The companies running your cable should not be the same ones servicing you in the application layer.
These guys are pretty annoying. And it ads an "untrusted" advertising stream to the page, a channel which has been the source of malware infections in the past.

I'm really curious how this all turns out. I can't imagine the deteriorating system lasting another 5 or 10 years. So what happens after? Clearly advertising has _some_ value, I loved BYTE magazine as much for the ads as I did for the articles, and there are under served retailers (a lot of Business to Business stuff) as the trade magazines take hits. So how do people discover this stuff? How do they find those opportunities when Internet ads are dead?

Or do we get to a more reasonable advertising load? Something without flash/js jiggling around and trying to get your cursor. How will sites let users know they don't allow "invasive" ads? How will users respond? For me at least I think it is the difference between Web 2 and Web 3.
At the moment yes. Most of our customers are new to outdoor sports and don't know what specifications they want. They're also generally going car camping and only in the summer, so it's usually not a big deal at all. Putting it up front will freak them out and make choosing harder. The way it works now, if you are experienced enough to know exactly what you want, you can tell us.

I do agree though that this part of the flow isn't perfect, so we'll work on this. Perhaps for different items, giving examples of what optional specifications people COULD write in? E.g., temperature for sleeping bags, capacity for backpacks, etc.
Hacking Browsers: Are Browsers the Weakest Link of the Security Chain?
> Google and the Berkeley researchers found that ad injectors are now available on all major platforms and browsers.

Bull. iOS is a HUGE chunk of web browsing and its immune from this stuff unless you jailbreak or are conned into installing a root cert and VPN.

You can't just download an app from the store or visit a site and find it installed like you can on a desktop.
Poynt - http://www.getpoynt.com - Palo Alto, CA
Android - AOSP Forks - Kernel - iOS - Node.js - Java Engineers
Email careers@poynt.co if you think we could be a great fit.

PoyntOS is the world’s first payment terminal operating system, empowers developers with amazing tools to build applications for merchants.

Small merchants today use a multitude of solutions running on various devices including outdated terminals, tablets, PCs, and phones. This not only creates a fragmented experience, but also adds up to additional costs in order to acquire the necessary hardware in addition to the apps.

With PoyntOS all such solutions can be made available on the same payment terminal that every merchant uses on their counter. While we take care of the core payment processing for the merchant with their acquirer of their choice you can focus on building the rest of the solutions that makes the merchant more productive and run a successful business.

We are a small startup with an incredible team. We are a unique company in that we work on: hardware, a novel operating system forked from AOSP, and our own ecosystem of applications made to help millions of small businesses.

This means that you would have huge impact in a small engineering team building things you wouldn’t be able to work anywhere else.

The founding team has done a great job of hiring diverse, energetic, and experienced engineers and we hope to find many more to deliver the finest tools for millions of businesses.
Still trying to figure out what the 75% is in reference to...

This article is mainly about Boeing/Lockheed defending a $17B contract from the government.
And also, the lack of Omega-3 fatty acids may have some important effects. Example: http://www.ergo-log.com/margarine.html
We built this in a way that you can swap between Github Emojis, Twitter Emojis or Apple Emojis.
I agree with this advice, even though I'm probably the worst offender. I have:

- Rolled my own password library (linked elsewhere in this thread)
- Rewritten an existing AES-CBC + HMAC-SHA-256 library to use a different
underlying driver (mcrypt is basically a mummy at this point)
- Did both of these things in PHP, which a lot of people assume
is inherently incompatible with security

However, everything I've done in this vein has been passed before people who are far smarter than myself, to which I received no complaints. And I constantly seek out criticism from people who understand crypto too. (Aside: Most crypto people are dicks. But they mean well.)
it's not the root of the hierarchy, it's just up a level. How is .google or .bike or .app any less arbitrary than .com, .net, or .jobs? ICANN picked some arbitrary TLDs a while back, now they've picked some more.
Another Virtru Employee here! The DevOps position is also available in our West Los Angeles offices.
You answered your own question:

> It just limits apps interactions with each other and the OS environment.

That makes a whole slew of modifications and tricks harder and/or impossible without having access to the sourcecode of the software, which is (on windows at least) not rare at all.

Any kind of interaction not explicitly allowed is then forbidden and the sandboxing will be a lot harder to overcome than two apps on the same machine talking to each other using a third.

Maybe some kind of unified app-to-app messaging protocol can take care of this, similar to how linux systems uses 'dbus' and the likes.
We're building a rental company for people who don't need to buy. Currently that manifests itself in outdoors, but hopefully not forever, since our vision is to reduce unnecessary consumption by making renting as viable and easy as buying.
Clara Labs (https://claralabs.com/, YC S14) - San Francisco, Engineering, Full-Time

Clara is building the simplest possible interface to getting work done.

Every person on our team is involved in the thinking that creates their work - full stack in the broadest sense of the term. This means identifying, owning, and driving projects to completion.

We believe shipping early and frequently builds better products. An extreme example: we scheduled thousands of meetings entirely manually for our first Clara customers before building any software at all.

Accepting human dependency is the fastest way to building useful machine intelligence. The failure of intelligence products to date has fundamentally been a failure to build trust due to unreliability and lack of focus (think: Siri). Conversely, Clara has delivered a highly reliable, focused, and useful natural language interface from day one.

We’re looking for frontend, backend, and machine learning engineers to join our early team. Check out our full descriptions for each role [1], and feel free to ping me directly at stephen@claralabs.com if you have any questions!

[1] https://jobs.lever.co/claralabs/
Forget the selfie stick, here’s the selfie shoe
The site is a possible seizure trigger.
That's a really good idea, thanks! And definitely thanks for the example!
Flagged as seizure trigger.
Another issue is disposal of waste. Living in Australia it seems pretty clear to me there's lots of land here where such storage / disposal could be implemented, yet the outcry from various groups over 'abuse' of areas where no-one lives or visits has to be seen to be believed. And one reason I stopped supporting Greenpeace (some years ago now) was because of their staunch and irrational opposition to nuclear.
Software Engineer @ Baremetrics // Remote

Baremetrics is the leading analytics tool for Stripe. We are a small, tightknit, completely remote team. Learn more about us at https://baremetrics.com/

We are looking for an experienced engineer to help make Baremetrics even better. We are growing quickly and are at the point where we need to adjust the architecture to handle the growth. These are exciting times with interesting challenges.

Looking for someone who can communicate effectively and work with a remote team easily (we are in Slack all day). Familiarity with data analysis/statistics is not required, but definitely a bonus.

Our stack includes Ruby on Rails, Postgres, Redis, Mongo, AWS, D3, the Stripe API, and more.

For details and to apply, visit:

https://baremetrics.workable.com/jobs/15463
I interpreted it as "illustrating absurdity by being absurd."
Dumbstone.com http://www.dumbstone.com We Bedazzle Wearables and trade them as virtual currency!
If the person is engaging in April Fool stuff, we obviously can't take any of this information seriously anyway.
It is present for those using Github for Window/Mac whereby you can clone a repo by clicking that button.
While it's a April Fool's thing, video decoding in the GPU does happen (I remember DVD players getting accelerated through the GPU)
It's there for Github for Mac users too.
http://www.codetriage.com/ lets you view projects by the number of open issues. I'm not sure how to gauge the beginner-friendliness of the projects.
Seriously cutting one's energy footprint is not free, it comes with serious cost increases elsewhere. The average American can't afford to live in NYC without curtailing much of what constitutes average living conditions.
Woah there nelly.

"Lifting the barriers" to development doesn't mean that a 50 story residential tower will be built in Central Park West. You are the barrier. Lifting them means that as a citizen, you lose control of your surroundings.

So when a big company, say Pfizer, works with the city to raze your neighborhood through an eminent domain process, you're fucked. (http://en.m.wikipedia.org/wiki/Kelo_v._City_of_New_London)

It doesn't eliminate gentrification, it industrialized the process.
The CSS working group has published a draft of proposed extensions to the CSS specification, which include dedicated units for denoting lengths on astronomical scales (lightseconds, attoparsecs, etc.) as well as extending the CSS gradient syntax to grant first-class support to the generation of double rainbows.

http://dev.w3.org/csswg/css-egg/
Branch Metrics - http://branch.io - Palo Alto, CA - FULL TIME

Awesome team helping apps grow through seamless referrals, sharing and deep linking across install. A lot of fun, scaling challenges, great stack, tons of opportunities to contribute to open source. http://stackshare.io/branch-metrics/branch-metrics

https://branch.io/jobs/senior-frontend-js-engineer/

https://branch.io/jobs/senior-java-developer/

https://branch.io/jobs/mobile-integration-engineer/
Oh god if you have any sensitivity to rapid flashing lights and colors do not watch that trailer
But its a non-obvious (imo) attack vector opened simply by switching to scrypt / bcrypt.

In a perfect world, quality web apps have rate limiting built into their auth schemes. But it's important to acknowledge these two algorithms will put a much heavier burden on your CPU.
This surely has some of the acolytes going insane.
Yes. Per-capital carbon production is lowest in dense urban environments. Suburbia and low density rural areas are the real carbon pigs on a per-capita basis.

We need to change the wrong headed notion that dense urbanity is somehow bad for the environment. On the contrary, it's how we need to build in order to save the earth.
Data Scientist

http://joyofdata.github.io
Slice | http://careers.slice.com/featured-jobs/ | Palo Alto | FULL-TIME| Software Engineering, technical lead, data science, sales and marketing

Slice is building one of the most powerful e-commerce data sets in the world from email receipts. We're challenging assumptions and transforming businesses along the way, and we’re just getting started.

Slice was founded by Stanford GSB entrepreneurs who have built, sold, and taken multiple companies public. Last year Slice was acquired by Japan's largest internet company, Rakuten. As a result, we offer the best of both words: a start-up mentality with the backing of an established global company.

We are a curious, creative team of people who love to solve big, challenging problems. We foster a culture of learning and thrive on continuous improvement through teamwork to build better products and a better company.

We are growing rapidly and hiring world-class software engineers, data scientists, data analysts, sales directors.

Website: http://careers.slice.com

Company video: https://www.youtube.com/watch?v=oY8OKR85KMk

Please send resumes/portfolios to sean+resumes [AT] slice.com and mention the HN Who's Hiring thread when applying! Thanks!
The need for unique passwords brings me to a stupid idea that I've had for a while.

Imagine a service which just stores hashes of every password that it can find from everywhere. Any site that wants can check whether a given password is in use..somewhere..and reject it if it is. Any site that wants can add more passwords to the list.

Internally the service would work from a bloom table designed for a fixed false positive rate. (You can actually layer bloom tables in front of bloom tables with parameters to make this possible.) So even if someone compromises that site, there is no direct record of the actual hashes for passwords.

Basically let sites say, "You have to choose a unique password, and do not reuse a password that anyone has used elsewhere!"
The lowest I've found out there for bulk is $0.002, not $0.0001; what service do you use? I'd owe you a few beers if that's not a typo
QEMM! Protected Mode! Unreal Mode! TSR! Ralph Brown's Interrupt List! Oh man!

Had so much with my friends while in high-school trying to figure out what kind of weird graphics mode this cool game called "Scorched Earth" used... It wasn't 320x200 :)
I keep wondering when building over roads will become common. Traffic only needs a couple stories of vertical space; everything above that should be profitably/affordably usable (once ventilation is addressed).
April Fool!
If you host is, say "zeus.barrera.io" you can use:

test-service-1.zeus.barrera.io
dummy-server.zeus.barrera.i

Etc. No need to create new (possible conflicting, definitely not future proof) TLDs.
WePay (YC09) - Palo Alto/Redwood City - Full-Time - Only current US work authorizations

Company Description

WePay is a fast-growing payments company that has built its API specifically for platform businesses like marketplaces, crowdfunding sites and small business software. Through this API, WePay allows platforms to easily offer payments to their buyers and sellers. WePay uniquely offers platforms a customized user experience while shielding them from fraud risk.

Job Description

We are looking for great software engineers to join our rapidly expanding team. Our transaction volume has more than tripled year-over-year and we’re rapidly outgrowing our existing tech stack.

We’re working to rebuild our application on top of a brand new service-oriented architecture and need your help. Do you love programming, take pride in the quality of your code, and are awesome at ping pong?

We’re working with real money so writing efficient, maintainable and well tested code is a must. We believe that great coders can adapt to whatever programming language they need to, whether it’s Java, Python, PHP, Javascript, C++, Scala, Ruby, or whatever it is that’s hot this week.

Qualifications

Be able to take complete ownership over a bug, feature, or entire project and drive it to completion. We have to trust that each of our team members can work independently because we hate micro-managing.
Be open-minded, flexible, and have a pragmatic approach to solving problems. The payments industry can be baffling at times, so we value people who can persevere and continue to make progress with a positive attitude.

One or more of the following skills would be awesome:

*Front-end expertise including: HTML5, JavaScript, CSS, AngularJS
*Back-end expertise with RDBMS and NOSQL databases, messaging and queuing systems, batch and scheduled tasks
*Restful API design and implementation
*Building highly available and distributed systems
*Big Data experience including Hadoop, Storm, Kafka, etc.
*Machine Learning and Modeling
*Experience in Risk and Fraud Detection
*Experience in payments and PCI compliance
*Expertise in Security
*Leadership experience
*Prior open source experience, we love open source!
This would only work if you could achieve this search with the use of a zero-knowledge proof. Actually disclosing your password to the service would defeat the point.
Location: Fairfax, Virginia, USA
Remote: Yes
Willing to relocate: Yes
Résumé/CV: http://mason.gmu.edu/~vmuchhal/resume/resume.pdf
Email: vinit.muchhala@hotmail.com
About:
About to graduate in May 2015 from a Master's in Computer Science from George Mason University.
1-3 years of experience interning at several places
Most proficient in Java, Python
PHP, Javascript(Node.js and Angular.js)
Getting increasingly better at Hadoop and other Data Science technologies.
Working as a Data Science intern in DC till May 2015
SHEP the Drone – Worlds First Drone Sheepdog
Varnish is other thing. For cross-datacenter replication you will want SSL. So for Redis Cluster it's a necessary thing.
Costa Rica is actually pretty well off. It has some poverty to be sure, but its population is small and the country is very safe. Most roads have names, but many roads have the same names, and there's no consistent numbering scheme.

Also, outside the capital, there's really not much of a need for signs: Costa Rica is small and very tourist-friendly, so asking for directions is easy (English is very common and taught in a lot of the schools).
Y Combinator W15 March Madness Bracket
Apple Fightback Begins as iPhone 6 Crushes Galaxy S6
Yes. I think Parse is good enough for your usecase. Games are client-side heavy and don't punish servers so much.
I'll look next time I'm in a store, thanks.
No, they are forced to move to these areas because they want to have a bearable commute. Your solution is to jam everyone into a more confined area.

Another solution is to make commuting from a "long distance" (e.g. 60-120 miles) more bearable. In NYC, for instance, subways could be built to NJ.

Faster trains (low-speed maglevs) could be built like what's being done in China (http://en.wikipedia.org/wiki/Line_S1,_BCR).

Mountain View to San Francisco is 40 miles. Is there some reason that isn't a 40 minute commute?
Too bad I get redirected to an auth page after 50ms of audio.
ECommerce API Design with the Etsy API
I agree with that in principle, but: YC invests in companies at an absolutely enormous rate, they have relatively few 'rotten apples' when you take into account that they encourage companies to pivot post investment and that they couldn't change what a company actually does even if they wanted to (they own a very small minority of the stock after all).

If I were in YC/PGs shoes I would have dropped installmonetizer the second I found out what they did but then again, I don't run the most successful start-up accelerator on the planet for a good reason.

In fact, I wouldn't have invested in them in the first place. But on the whole if you select for hackers driven to make money at any cost you can expect to get a rotten apple every now and then.

Whether or not YC should have dropped installmonetizer once it became clear what they were up to (if that wasn't clear from the application alone) is something everybody has to decide for themselves, for me it is clear that they should have.

Also, to their credit I haven't seen them invest in anything as shady as installmonetizer after that point so maybe some lessons were learned.
http://www.openhatch.com A website for ongoing opensource projects in python.
Mistakes Made as a Solo, Non-Technical SaaS Founder – Part I
I never download from 3rd party sites like cnet. Just take the extra few seconds to identify the official site and go there.
An independent overview of the research: http://examine.com/supplements/Fish%20Oil