skysight-inc/HackerNews huggingface dataset:
Products Suck – and some do it better than the others
I believe this. We've recently been tracking down bugs coming from users of a web site a friend and I run. We couldn't figure out what was going on until we realized that some injected code was stomping on our site's code and breaking everything. Grrr. So now we have to decide if we want to change all our code to be way more defensive (or offensive) so that we work in the face of hostile injected code. Or perhaps we just live with 5% of our users not working.
> I want a real language, like Python or Ruby

First, by what criteria is JavaScript not "a real language" whereas Ruby and Python are "real" languages?

Second, in any case, among the languages on that list that compile to JavaScript are both Ruby and Python, which I think meets any reasonable definition of a "a real language, like Python or Ruby".
A/B testing in Node on Fire
I think they meant that it takes the users a long time to learn to be cynical.
Juice Analytics - http://www.juiceanalytics.com - Nashville, TN and Atlanta, GA. Python devs, SQLAlchemy

We're the creators of JuiceBox, a new kind of tool for visualizing data. We have a platform built on AWS, Redshift, Django, SQLAlchemy, Backbone, and d3.

We have a small team and a great work environment. There are two positions we're looking to fill immediately.

Data Architect - We're looking for someone to design the next version of our tools and architecture for managing client data.

Technical Consultant - You'll be using our framework to build applications for our clients. Python, SQL and business experience are desired.

Learn more and apply here. http://www.juiceanalytics.com/work-with-us/
Why does the browser even allow any toolbar/extension to modify the content that was delivered on a HTTPS connection. Isn't the data that is delivered over HTTPS pristine that it should not be modified at the browser endpoint by the browser.

I am a layman in security and do not understand a lot of this. May be I missed something here. Is my question correct?
Maybe I am mistaken, but was Couchbase not forked by one of the original CouchDB developers, with hot paths of code rewritten in C and employing memcache to increase the speed?

http://www.couchbase.com/couchbase-vs-couchdb

http://damienkatz.net/2012/01/the_future_of_couchdb.html (An announcement from one of the CouchDB -> Couchbase developers)

EDIT: I think I confused blog posts. That is a guy involved in Couchbase, no? I forget who but one of the other CouchDB only devs who worked with him was pissed and wrote a rantish piece. Too tired to find it now.
Let me help you trim all the tracking junk off your URLs -

https://boards.greenhouse.io/customerio/jobs/56857

https://boards.greenhouse.io/customerio/jobs/50334

https://boards.greenhouse.io/customerio/jobs/50732

https://boards.greenhouse.io/customerio/jobs/50443
A nice benefit of using DuckDuckGo is the distinctive way it flags an official site.
Just because some dude says something in the Internet doesn't make it true. Especially that dude, when he talks about US intelligence agencies.
Yea they shouldn't have the user wait till the order form to find out that they're only in SF.
Not a joke, the release was due in these days, so I picked 1 April since we have a tradition now to ship 1 April. Last year with HyperLogLog support, because of the futuristic name of the data structure, people had an hard time to believe it was a really thing and not a joke.
IE11 actually does some of the JPEG decoding on the GPU:

http://blogs.msdn.com/b/ie/archive/2013/09/12/using-hardware...

So, this really doesn't work as a joke.
I can't follow. The code I showed is already processing masterlist and decides if it should process masterlist[z].list2 for every z: 0..masterlist.length.

I fully agree that the code in my post is very bad, I took it from the article.
This is really interesting initiative. All the best!
Don't forget a very good reason gTLDs are a scam: it's a land-grab by the enormously wealthy—those who can afford the opening bid of $185,000—that shuts out the plebes like you and I.
I had already set up our computer to mirror-reverse all websites for today, so ironically com.google looks normal.
>Personally I'm pro-immigration and anti-H1B

That statement is self contradicting, since H1B is the only way to immigrate to USA.

Edit: Unless you already have family here willing to sponsor your PR.
PORNSTAR ASHLEY WOODS – Greek Escorts Directory
It's easy to say "use bcrypt" or "use scrypt," but I think it's important to acknowledge the challenges of deploying those functions in large scale high performance environments.

It's straightforward and effective when password hashing happens client-side (like local encryption for a bitcoin wallet), but using scrypt or bcrypt server-side at effective difficulty levels will either destroy your L1/L2 cache or exceed your CPU budget.

In practice, from what I've seen, this means scrypt is never used, and bcrypt is used with a work factor that's tuned low. I think this is just a fundamental asymmetry, and that at the end of the day people use bcrypt so that they can say "we used bcrypt!" and get a nod when their entire user database is compromised, even though it provides very little value the way it's deployed.
Nokia HERE's first wearable tech - geo-intelligent kitty collar:
http://360.here.com/2015/04/01/unveils-first-wearable-tech/
I'd be interested to hear more about the approaches a hacker would take in each case if they came across the hashed passwords and have no knowledge of the salts, etc.

For instance in the first case where hash = md5('deliciously-salty-' + password)

I'm not sure how easy it is for an attacker to reverse the hash if they don't know the salt. (I understand you need to assume the attacker has the salt, but just posing a constrained hypothetical here)
Why would proper sand boxing limit tweaking or repurposing of software? (I must admit I'm not sure exactly what you mean by that). It just limits apps interactions with each other and the OS environment.
The Americans with Disabilities Act exists for a reason. It's not about being "politically correct", it's about accessibility. And yes, it's the law.
The title seems to be misleading. Nowhere in the article does the author explicitly state that salts should not be used, because well, they should be used. His point was that salts are not enough, you need to couple them with a possibly slowest, yet acceptable hash function. And then hope that Moore's law does not breach your passwords.
Location: Belfast, UK

Remote: Yes.

Willing to relocate: Yes.

Technologies: C/C++, Python, Nim, HTML5, Haskell, Redis, HTTP, WinAPI, Posix, C#, GTK+, HTTP, IRC

Résumé/CV: Please email for a formal CV. See the following links for a portfolio: http://picheta.me/projects.html and/or https://github.com/dom96.

Email: <redacted>

I am one of the main developers of the Nim programming language having contributed to the core language by improving the compiler and the standard library. I have written all of the asynchronous IO, sockets and many other related modules in Nim's standard library, as such I am very skilled in the low-level details of Posix and Windows systems.

I have also developed a lot of software projects, most of which are open source and available on my Github. These include a package manager for the Nim programming language, a web framework inspired by Sinatra, the Nim forum (http://forum.nim-lang.org), IRC libraries in Haskell, Python and Nim, an IDE using the GTK+ framework and many more.

I am currently looking for both remote and UK opportunities for internships this summer. I am interested in working with new technologies so if you don't see something in my list above please contact me anyway!
Parse Pigeon: Add on-demand delivery to your app with a few lines of code
Cool. I use Google Keep for this.
Instacart: Self-driving Carbs
https://www.youtube.com/watch?v=IzjkFiv6CPs
How to avoid “Cargo Cult” clouds
DueDil - London - https://www.duedil.com/

-DueDil is a high growth technology business on a mission to contextualise the world’s private company information.

-Our research tool is used by over 1,000,000 people to find opportunities and risks within businesses.

We're currently hiring for Full Stack, Back End, Data Engineers and DevOps: https://www.duedil.com/careers

Github - http://github.com/duedil-ltd :)
You are saying that you actually need to read and understand code you are refactoring. Hard to disagree.
Iterable (https://www.iterable.com) - San Francisco, CA

Come join Iterable. We are bringing the growth hacking tools that consumer Internet companies like Twitter/Facebook build internally to other e-businesses. We aim to build the best user growth engine on the planet. It's crazy how messaging and email usage are changing, but the technology and capabilities haven't caught up to the 21st century. Our team of hackers and thinkers is from quant finance/Twitter/Google, (we built large parts of Twitter's growth systems). One of our top level goals is to build a uniquely fun and growth oriented company culture. Knowledge sharing in any capacity is highly valued here -- are you interested in prediction markets or PGP encryption? Do you enjoy teaching posture techniques or purely functional data structures to others? We pair program, design together, and generally create a learn-and-teach environment here. If you're interested in coming on board, you can help with some challenges we face:

- Scale our messaging API
- Design and write performant, beautiful, asynchronous interfaces
- Write software to build machine learned user models
- Make data visualizations for our email and user data
- Design an immutable deployment infrastructure for our platform

Some aspects of our culture that make us different:
- We are all very focused on self improvement
- Our company has egalitarian and transparent values (work when you want, on what you want)
- We are chill and empathetic people
- The company is completely transparent

Technologies you'll work with:

- Scala
- ElasticSearch
- Postgres
- Redis
- AngularJS
- Play Framework
- RabbitMQ

You'll get to work with us at our office at 5th and Market in San Francisco. If this sounds like an interesting and fun opportunity for you, please email me: girish at iterable.com
If you just don't like it, then whatever. There are no consequences. The problem arises when you try to outlaw things other people are doing because you personally believe they are wrong. If I'm RMS and I believe proprietary software is wrong, sure. I can be my crazy self and advocate free software. Shutting down Microsoft for paying employees to do "wrong things" that are perfectly legal is where the line is crossed, and that's essentially what people are saying about the NSA.
Host-Me2
Host-Me2 Your New Nº1 Web Hosting Company, Hour Goal Is To Present Affordable Prices For Small And Medium Company's.

http://www.host-me2.com
No, it isn't. To argue such is disingenuous. You can be for the idea of immigration but believe the current H1-B system is a sham setup as an indentured servitude model to a majority of its participants.
It's not about a workplace setup, it's about responsible energy production.
Runscope - San Francisco/New York

Runscope is building tools for developers working on API-driven mobile and web applications. We have a clear vision for the future of service-powered software and the tools that will be required to build the next generation of applications. We're an experienced team backed by top-tier investors looking for people who share our passion for building great tools and want to help shape not just our products, but the company as well.

We are looking for talented Engineers including but not limited to Data Systems Engineering, Product Engineering, & DevOps. Also looking for a Customer Support Engineer (SF or Remote).

https://www.runscope.com/jobs
Has anyone tried format c: ?
There is one thing that I think is often omitted. A lot of user use trivial passwords and they reuse them. These users' passwords will fall essentially no matter what you do because making the check so slow that a dictionary attack with a couple thousand very common passwords becomes impractical is itself borderline impractical. On the other hand strong passwords will withstand an attack even if they are hashed with plain MD5 or SHA1 - at least right now, there are already some serious collision attacks.

The user group really benefiting from strong password hashing schemes is the one between the two mentioned extremes. So if you really want to protect all your users and use simple password authentication you have to enforce strong passwords policies which is itself not trivial and will definitely badly annoy some users.
HALL
Real-time chat & texting for business teams.
https://hall.com/careers

San Francisco, CA (LOCAL only)

1. Front-End Dev. - (JavaScript, CSS, HTML)

2. Full Stack - JavaScript, Rails

3. Sr. Backend (node.js focused)

4. Sr. Android Engineer

_____

Why work at Hall?

Work on a product you'll be actively using every day

We're a design & data-driven organization.

Raised a $5.5m series-A, led by the early investors in Mint.com, Google and Box - Felicis, PivotNorth, Founder Collective and AngelPad.

PERKS: Be a part of a world-class team, love what you do and have a huge impact!

Top-of-the-line MacBooks and 27" monitor

Generous equity grants

Weekly company-wide happy hours
That's pretty sweet!
Password hashing is crypto, too. Don't roll your own crypto.
Vurb - San Francisco, CA (H1B OK) - http://vurb.com

We launched in February on the iTunes Store ("Best New Apps") - http://techcrunch.com/2015/02/26/mobile-search-david-vs-goog...

We also won TC Disrupt and raised over $10M with a small team

What we do: Vurb is evolving the mobile search and sharing experience, by creating a single app to find, share, and do - partnering with services and apps like Yelp, Foursquare, Rotten Tomatoes, etc. Rather than jumping between 6 different apps to find something, we're delivering a cohesive experience in one place - an app you'll use every day.

Investors: Max Levchin, Drew Houston, Naval Ravikant, CrunchFund, Redpoint + others.

Why me? Apply if you are looking for a rapidly growing small team and the opportunity to take on significant responsibility and ship rapidly. This is a hard problem with the potential to improve how we do things on the Internet.

* Full-stack Engineer / DevOps - generalist opportunities across the stack: backend, frontend, APIs, JavaScript, node.js, backbone, AWS

* Mobile Engineer - iOS / Android engineers (2+ years experience)

* Search / Data Scientist / Data Engineer - search, classification, ranking, ML, graphs, data crawling/processing (Advanced CS degree required)

* Product Designer - UI/UX

* Business Development

Apply at http://vurb.com/jobs | jobs@vurb.com
Bolt - San Francisco, CA (https://bolt.com)

- UI/UX Designer

- Ruby Engineer

- Blockchain Engineer

- Application Security Engineer

- Network Security Engineer

- Devops / Infrastructure Engineer

More info at https://bolt.com/jobs

Apply by emailing your resume to jobs [a]bolt.com

----

If you're looking to join a small, elite, mission-driven company to have a major impact on human commerce, definitely reach out.
CNET.com and Download.com are both part of CBS Interactive (CNET Networks was a publicly traded company and was bought by CBS in 2008).

I worked at CBS Interactive when the Download.com installer/adware controversy erupted: http://insecure.org/news/download-com-fiasco.html

As you might expect, it was controversial inside the company as well. I guess things haven't changed after I left.
I didn't get the impression the author was saying salts are useless, obviously you still have to use them and bcrypt and scrypt both do. The point is that a lot of programmers naively assume that a salt (or salt+pepper) will make their password storage secure on its own when that isn't really true anymore.
He missed step #1: write some tests that will provide feedback if you broke something, or assurance that you didn't.
This happens a lot on iOS too - even some respectable sites have ads that open the App Store without any user intervention. I'm not sure why Apple allows this.
Well, obviously, since you don't do so. You rationalize it as bad.
ICOM Productions - http://www.icomproductions.ca/careers/ - Calgary, Alberta, Canada We are looking for web software developers. We are an e-learning company.
We have a few Stacks:

PHP 5.3.3 - QCodo/QCubed based LMS with custom AngularJS Modules
PHP 5.x - Custom Framework with Slim, Doctrine DBAL and PHPUnit
Upcoming Stack: HHVM/Docker/MariaDB - Custom Framework
other parts of our development stacks include
git/mysql/less/jade/vagrant/centos/rest/phpstorm

We are starting on React/Reflux/Webpack/ES6 based development now.
We have an amazing work environment

- pool table
- beer fridays
- quarterly company events
- flexable hours
- and much more

We are trying to foster pair-programming. We welcome experimentation with frameworks and tools. Don't focus too much on the requirements listed in our posting. My ideal candidate has 0-2 years post-university experience, has experience in testing, and is familiar with php. Since our stack is not common we expect a not insignificant training period.
What is authenticating millions of users per second?

Facebook has 900M monthly users, 30M per day and probably most of those are cookied in. Even if not that's only 350 authentications/sec...
Thought ICANN auctioned all the gTLDs.

Also, The USA invented the Internet.
I've been thinking about implementing a sort of slideshow like this.

I could definitely see this being extended, contained within a frame and used (by intercepting and mimicking scroll actions) in order to present a slideshow in a smooth, consistent manner.

By itself, it's novel. But extended, I could see a few uses for it.

Interesting idea, degrades pretty well (for text only), and I enjoyed scrolling through smoothly with middle-click.
CloudHelix - San Francisco, CA near Bart - https://cloudhelix.com/careers.html

Fullstack, Backend, SRE, DevOps | Fulltime | Local or Remote

We build a terabit scale Saas and on-site platform for ingesting, visualizing, traffic engineering and detecting anomalies on network traffic. Today it uses both netflow and BGP from routers and host traffic capture and stores that info into a clustered in-house built columnar database handling tens of millions of rows per second.

You'd be architecting, expanding, developing and maintaining this platform. We're a small but quickly growing company that moves quickly. You'd make a difference.
Not unless they do something incredibly stupid like install a certificate authority and hijack every SSL session. [1]

[1]: http://en.wikipedia.org/wiki/Superfish#Lenovo_security_incid...
For OS X I highly recommend the lightweight Gitbox. Although I haven't seen an update in a long time, there are some visual issues in Yosemite, and it crashes from time to time, it makes the most common tasks super easy. Single keystrokes to pull/push, add all, commit, etc.
Zaption (http://www.zaption.com) || San Francisco, CA

Full-Stack Web Engineer (Node.js, MongoDB, Knockout.js) || Full-Time

Zaption is an education-technology startup that's fixing video learning. Teachers and trainers use our web app to turn online videos (from YouTube, Vimeo, etc) into interactive learning experiences that engage students and deepen understanding.
We're a very small (6-person) team that is funded, growing, and has real customers and revenue. We're looking for a dev who's interested in education, besides being good with JavaScript, having some experience with Node.js/MongoDB, and being able to wrangle HTML/CSS.

If you're interested, email charlie@zaption.com
GoDaddy IPO registers strong start
We’re looking for a full-stack Unreal Editor 4 developer to join us in downtown SF on a ground breaking new venture building immersive Virtual Reality and Augmented Reality experiences with new hardware.

This is a full-time on-site role in an accelerator/incubator startup funded by of one of the worlds largest technology companies. We’re a small group of programmers, artists and hardware designers. Attention to detail, strong communication skills, an ability to do design and implementation from end-to-end are critical.

Core requirements:

- Extensive experience building games in Unreal Engine

- Knowledge of blueprints customization

- The ability to script VFX animations in UE4

- Strong C++ / C# skills with the ability to code and architect gameplay mechanics

- Experience building complex technical products

- Comfortable with version control

- Good background in 3D and applied mathematics

-Direct experience using VR/AR devices such Oculus Rift, Razer Hydra, Leap Motion etc is a plus
Neat! Really looking forward to that!
>No, it isn't.

Care to tell me what are the other practical avenues for people to immigrate to US if they are not a noble laureate or an olympic gold medalist ?
They aren't a detriment to the one with the H1B. That person is better off than they would be without it.

Believe it or not, that Indian or Chinese fellow is a reasonably smart and savvy developer just like you. They compared the "legally enforced loyalty test" to their other available options and determined that the HUGE pay hike (think 500-750%) made it worth their while. Further, the transferability of the "legally enforced loyalty test" only means that finding a new job and rage quitting must be done in exactly that order. Many people take a job with the first sponsoring employer with the express intention to shift jobs the minute they hit US soil.

I know you don't want to be competing with the nice Indian fellow, but don't spin your protectionism as somehow being for his benefit. You simply want to confine him to (American style) poverty to protect your paycheck.
TailorWell | Seattle, WA | Software Development Engineer | .NET, SQL Server, C#, Web API, Web Forms, ASP.NET MVC

TailorWell operates a multi-tenant insurance exchange platform for small group products. The need for our technology is overwhelming and the opportunity is boundless. We are a small team making big waves. This is an opportunity to define new products and change an entire industry.

TailorWell needs an experienced .NET Engineer confident with SQL Server, C#, Web API, Web Forms and ASP.NET MVC. Knowledge of cloud services, REST-full APIs, scaling, availability, and security will help. This position will influence both the software architecture and the company culture. We look for candidates with strong opinions on how software should be structured combined with the wisdom and patience to move in the right direction while delivering for the business. At this job you will deliver value everyday, help build a team, and have a hand in defining a market. We are passionate about quality, transparency, and continuous improvement.

- Must be able to work on-site in Seattle

- Must be able to work legally in the US--we can't sponsor visa workers at this time

Send résumés and contact information to joe@tailorwell.com
Forage (https://www.forage.co) - Full-time - San Francisco, CA

Forage makes it easy to cook dinner in 20 minutes or less. We're a fast growing company (We were a team of 4 people at the end of last year. We're now over 25, and just getting started). We're hiring front and backend developers as well as designers and other roles. We're looking for people who are passionate about our vision of improving the food system and reducing food waste, all while enjoying delicious food while doing so. We're repeat entrepreneurs and are backed by Ev Williams, Chris Sacca & Hass Hassan (board member at Whole Foods).

You'll have a chance to work on interesting technical challenges that have a highly tangible impact on a physical product. We're particularly interested in exceptionally strong frontend developers with Angular experience and backend developers who're good with Postgres.

Learn more at https://www.forage.co/company/jobs or send us a note at jobs@forage.co.