skysight-inc/HackerNews huggingface dataset:
Arena Solutions - http://arenasolutions.com - SF Bay Area

Full-time, work visa sponsorship available.

We're the first SaaS-based Product Lifecycle Management (PLM) company, helping manufacturing companies build better products.

At Arena, we're an open office culture with many breakout collaboration rooms. We offer a great work/life balance with perks - we a have basketball & soccer league, fully stocked kitchen full of snacks & drinks, and cornhole, ping pong, and shuffleboard table. We also build great products.

Here are some positions relevant to HN:

* Senior Software Engineer

* Senior UI Developer

* Senior Web Application Developer

* Product Manager

If you'd like to join us, check out http://www.arenasolutions.com/about/jobs/ & feel free to drop me a note at ninja -at- arenasolutions.com.
Ministry of Supply sells The Armstrong, a space suit for the modern man - http://ministryofsupply.com/pages/the-armstrong
Who decided indenting with spaces was a good idea?
Galvanize, Inc. (http://www.galvanize.com) San Francisco, CA | Denver, CO | Seattle, WA

We are looking for a data scientists and software engineers with teaching experience to join our instructional team.

Practical, industry-based education is hard to access in the exciting and growing field of data science and software engineering. Galvanize has a tight-knit team of established professionals, educators, and community builders that are creating pathways into industry’s most demanding data science and engineering teams.

We are growing our instructional staff across all of our campuses. Our instructors train technical professionals with programming experience to solve real-world problems utilizing innovative educational techniques. We’re looking for passionate educators and practical problem solvers with demonstrated flexibility and curiosity.

Join us in building the world's hub for education in data science and software engineering.

Interested in teaching at Galvanize? Apply here: https://jobs.lever.co/galvanize
You don't need to be rich, ex. donuts.co, they raised money from rich people.
Doh! Good catch.

Clearly, that should read:
"Austin, Texas\nCitizenship Required"
Remind - https://remind.com - SOMA, San Francisco, CA - All Engineering roles.

Remind is hiring JavaScript, iOS, Backend, Full Stack, Data Engineers & Data Scientists in our SOMA-based San Francisco office. We're on a mission to improve K-12 education in our lifetime. Want to help? Check out our jobs page - https://www.remind.com/careers.

FAQs:
- 23M users, 150M messages/month & 23 engineers, raised $59M
- we’re the WhatsApp of education: a messaging app for teachers, students, and parents. No phone numbers are ever exchanged, no conversations are ever deleted. And because everyone has a phone (we do SMS too), students and parents get more involved. One teacher said his homework completion rates jumped from 75% to about 99%. That makes us super happy.
- tech: architecture consists of many small microservices built with Ruby, Node.js and Go, running on top of Heroku and AWS behind a public RESTful API - http://api.remind.com. We use Postgres, DynamoDB and Redis heavily, with a massive job queue backed by Sidekiq and RabbitMQ. Frontend clients include a native iOS & Android app as well as a full AngularJS single page app - in process of moving to React and ES6.
- iOS app has 4.5 rating. The reviews should explain our impact - https://itunes.apple.com/us/app/remind-safe-classroom-commun...

Perks:
- competitive salary and equity
- lots of opportunities to connect with teachers and other end users
- open vacation policy
- catered meals
- stocked kitchen and fridge
- health and fitness reimbursement
- transit and parking benefit
- trips to technical conferences
- monthly Hack Days
- foosball table, couches, 20-foot loft ceilings w/lots of light
- 100% health premium coverage for you and your dependents
Introducing Tumult Hype Edition

http://blog.tumult.com/2015/04/01/introducing-tumult-hype-ed...

Light theme, Dark theme, and now the Gold theme!
See Antartica and Somali Pirates Using Oculus VR
What are the downsides of avoiding this by using scrypt/bcrypt client-side (for a web app)?
BrainBoostr – Random Interesting Facts
It's just impossible to avoid being hacked. If you're a big enough target, someone on the bleeding edge is going to have the desire and ability to get you. What if you're hacked because of a secret NSA backdoor installed in some firmware?

Fining companies heavily for being hacked is like fining someone for being rained on. Except, in this case, the rain is pretty much a guarantee, and the person knows that, and when they get rained on, their customers get screwed. So you fine them for not having an umbrella.

An audit doesn't necessarily need to be done the way it has before. It could even just be a bug bounty hackathon, like the big browsers do.

If whitehats had a ton of easy-to-find work to do, there'd probably also be fewer blackhats.
> Since 2011, the registration process for gTLDs has been opened up.

More accurately, during a few months in 2011 and 2012, a registration process for gTLDs was opened up.
look, I get it.

everything has a starting point. (you decide what career you want)
then an early game phase. (you go to school to get a degree)
than a midgame phase. (you start work and collect paychecks during your career)
than an end game phase. (uou live the retired life using the resources you earned during your career )
than the game actually ends when predefined conditions are met. (you die or whatever)

got it.

we are literally arguing in circles because we are not conceptualizing the problem the same way and not communicating clearly.
Docker (https://www.docker.com) is currently hiring for the following full-time technical positions:

In San Francisco:

- Sr. Director for Docker Hub

- Go Engineers

- Python Engineers (Django or Twisted)

- Infrastructure/ DevOps

- Frontend (React.js)

- UX Engineer

In London:

- Engineering Manager (Open-source, Machine & Compose)

See full list of job opportunities here:
https://www.docker.com/company/careers/

If interested in any of these positions, please send an email
to jobs@docker.com
http://www.stryd.com, Boulder, CO

Athlete Architect is a multidisciplinary team that is enthusiastic about the future of wearable technology for athletes. Out of this passion, we've developed the world’s first wearable power meter, Stryd, for runners that provides insight into their running technique and performance.

We're looking to expand our still small engineering team of only 3 people. We're looking for:

#1 Lead iOS Developer. We use Swift. But we want you to have deep understanding of Objective-C and iOS programming best practices. Good sense of design is bonus.

#2 Firmware Developer. You need to have knowledge of microcontroller-based firmware design and development. Experience with relevant technologies, such as BLE, hardware debugging, analog and digital sensors, ultra low power / ultra small footprint software design. Strong skill in C. Good in assembly is big bonus.

#3 Full Stack Engineer(Intern or Part-time, REMOTE is OK). You need to be Strong multi-lingual developer, interested in writing code using technologies like JavaScript/CSS, Go, and Python.

For #1 and #2 relocate to Boulder is required. But you know what? If you like running/triathlon, this is your dream place. You get unlimited opportunities to run and train with LOTS of elite athletes who are Stryd ambassadors here.

If interested, please send an email to stryd@stryd.com
Whats the difference between obamasucks.com, obamasucks.net, obamasucks.org, ... and obama.sucks?

If you really want to prevent any possible domain which contains "obama" and "sucks" from being registered, there is a serious problem with freedom of speech.

In the case of .porn, do you know you can submit your trademarks to the ICANN so they enforce them? ex.

http://who.is/whois/barely.legal

You can read more about protecting your trademarks here:

http://www.wipo.int/amc/en/domains/rpm/
I haven't done this in most cases, but for some systems this is a practical action to take (embedded system, minimal software, security sensitive). The reality is any modern OS + apps for "basic" functions is far too complex and has too many SLOC in too many disparate languages for any one person to be able to reliably verify it all. Knowing that the very simple basic functionality of all the code you plan to run on an embedded device is secure though is still an achievable objective.
Design nitpick: The alert every time you add something to your cart is really annoying. What if I want to add 4 backpacks and 3 water purifiers, etc... I click add, get a pop-up, click ok, then add again, rinse repeat....

Maybe instead just use a floating div to appear, say xyz has been added, and then fade away after a second.
Indiegogo Heat:
The world's first hot sauce crowdfunding platform.
https://learn.indiegogo.com/heat/
Disney announces X-Wings: https://www.youtube.com/watch?v=AZ3n_D1zBrg
I am one of these spammers. I had a chrome extension and was approached by revjet.io about adding injected ads. The ads typically overwrite the sites normal ads.

I see it as stealing the ad revenue from the content creator(which is often Google), which is the same as using adblock.

(the extension mentioned that ads were being used and you could also disable them)
Collective Health, ( http://collectivehealth.com/ ), San Mateo, CA (Full time, on-site only)

We're tackling the employer-sponsored healthcare industry (our favorite analogy is how Tesla takes on several verticals at once, such car makers, dealers as well as the oil industry).
We can lower both the first and second derivative of the rising health care cost curve, nationwide. There's some compelling evidence for it, if you'd like to chat.

Our tech stack is a mix of Go and Java components with Angular on the front end. We use a custom service bus to tie our SOA together, microservices style. We love docker, postgres, riak, automated testing, and continuos integration.

As a company, we're strong believers in transparency, trust and balance. As an engineering team, we believe good code is easy to read and should have a short "time to understanding". We expect all of our engineers to continually teach as well as learn. We also believe that everyone should write good code, yet balance that against the need to ship.

The company just a year and a bit old, so early enough for non-trivial equity. Despite that we punch above our weight-class with experienced founders, 40+ team members (~ one quarter is engineering), and paying customers.

We've got a ton of interesting problems to solve around distributed systems, data analytics and predictions, system reliability, security, privacy and more. We're looking for experienced SW engineers up and down the stack, front end, back end, infrastructure, data, dev ops, test, generalist, etc.

https://jobs.lever.co/collectivehealth

We're super proud of the company mission, engineering culture and tech stack we've put together and would love a chance to explain it all in detail!
The Future of Male Birth Control
Adding Greater Realism to Virtual Worlds (Details About Improbable)
For an attacker, a great way to cripple an organization that uses scrypt/bcrypt easily is just to attack logins. If each login takes 1 second of work, then it's easy to overwhelm any system system using a host of bots on distributed hosting systems. Say an attacker can hit with a mere 1 req/s from 100 hosts (very easy with aws/digitalocean/hetzner/etc), then that's 100 CPU-seconds of work just for logins.

Comparatively, if they hit with 100 req/s for normal front-end data, caches can easily handle that. So really, adding these types of login checks to any publicly available login page ends up creating an on-demand DDOS target.

From the password cracking side, the asymmetry comes from the fact that an organization has to have X amount of server resources to service Y number of requests, but an attacker can utilize the same X amount of server resources to service just one thing, breaking the exact password they are looking for. This is further exaggerated by the fact that generally for an organization those X server resources also need to more than just service logins (like actually serve content or API data).
Boulder, CO - CU-Boulder - Drupal Software Engineer - https://www.jobsatcu.com/postings/97678
That is effectively what the Amazon Dash (stick) does.
Yeah, salting definitely isn't bad, in fact it's actually essential. What the author is saying is that it's not enough - salting won't save you when your attacker can test 10s or 100s of thousands of hashes a sec. The article could have been phrased better.
> I see the mantra ‘salt your password hashes!’
> repeated over and over, when its only real
> value is against rainbow tables

This is dangerously incomplete reasoning. Salts
real value is that if multiple password hashes are
Leaked simultaneously then each must be cracked individually. In the Adobe leak password hints were included, which allowed for very easy guessing of passwords, and because there were no salts even if you had no hint if someone else had the same password and an obvious hint you were cracked.
This is fundamentally Microsoft's fault. The shareware culture of Windows is insanely insecure these days. Any sane operating system should have a packet manager, with all the software you could want included, and nothing you don't.
The blocklists are targeting people in the same communities, but who hold differing views, so it definitely is creating echo chambers. You don't need to isolate everything, just those holding opposing views in your community.
I just had an SRE screening and one of the questions was

"What is a linux command that's mostly not known?".

I could not remember anything that's special, at least for me at the time but "less -F" poped up to my mind. Thank you :)

Oh now I can think of ccze, column and tac. Interviews..
Just when you think you're safe,

"Check me out with CVS!"
If you apply to any role through this link you should get priority: https://hire.jobvite.com/j?bj=ouws0fwc&s=Hackernews_Satshaba...
Yep this can lead to some confusion, but the magic of OSS software is that you can download it and check :-)
I actually had my first interview was told I passed it and they would schedule the next one with me within a couple days then never heard back.

:(
Or maybe old language looks "richer", because you can easily notice grammar used in old literature that is no longer used in modern speech, but it's very hard to spot grammar that didn't exist yet.
Thanks!

It's been a long haul. In my role as an Apache volunteer I added the CouchApp capabilities into CouchDB (thanks Damien and folks for tolerating me!). After that we started a company that eventually merged with another NoSQL company to become Couchbase.

Our technology is inspired by Apache CouchDB (and in some cases compatible with it) but it is all green stack and open source.

Couchbase Server is for when you have a ton of traffic (or spiky traffic) that you can't afford to slow down. We power mission critical apps for use cases like airline booking, market making, social gaming, e-commerce, and CMS. http://www.couchbase.com/case-studies

Couchbase Mobile is a parallel effort creating peer-to-peer capable native mobile (and other edge compute) device embedded database with network aware background sync including conflict management. IBM Cloudant also uses our model and interops with our client libraries (but our Sync Gateway has an application API I think is more fun).

Mobile: http://developer.couchbase.com/mobile/

It's been out for a year, plenty of early adopters. Bigger names are getting interested. Ryanair just shipped an app using us, which is fun for me to see: https://twitter.com/zgramana/status/581196081637122048
MyFitnessPal - http://myfitnesspal.com - San Francisco, CA

MyFitnessPal is the leading app for nutrition tracking. We help our community of over 80 million people live healthier lives!

Backend (Scala) http://www.myfitnesspal.com/jobs?gh_jid=26934

iOS http://www.myfitnesspal.com/jobs?gh_jid=2553

DevOps http://www.myfitnesspal.com/jobs?gh_jid=36516

Frontend http://www.myfitnesspal.com/jobs?gh_jid=36969

Data Science http://www.myfitnesspal.com/jobs?gh_jid=50510

All openings: http://myfitnesspal.com/jobs
Entelo - San Francisco (SOMA), CA - Full-time - http://www.entelo.com/

Entelo's mission is to help organizations build great teams by allowing them to search for talented people regardless of where they represent themselves on the web. We index hundreds of millions of social profiles and provide a powerful search tool that predicts which candidates are more likely to look for new opportunities and provide collaborative tools to help recruiters and hiring managers recruit more efficiently. Sales and Marketing departments have had a plethora of tools to help them over the years, but recruiting/HR has notoriously been behind- we're seeking to change that by providing solutions to improve both efficiency and efficacy to recruiters.

We're helping 200+ companies with their hiring needs including fast-growth companies such as Facebook, Quora, Github and Lyft. We've been huge fans of Hacker News as the community has been great to learn from and four of our recent engineering hires came through Hacker News threads!

Our Tech Stack: Ruby, Scala, Rails, AWS, MySQL, Mongo, Redis, Elasticsearch, Redshift and Docker

We care deeply about professional growth and have an annual $1k allowance for all employees to spend on their own professional development (courses, conferences, coaching, etc.). Additionally, we're located in Soma near BART and CalTrain and have a number of perks including health/dental/vision and heavily subsidized gym membership.

We're looking for sharp, collaborative engineers for a variety of roles including:

-Sr. Backend Engineer/Architect: Ideally looking for someone that can own our backend stack in regards to crawling, parsing and normalization of the hundreds of millions of profiles we index. We use a combination of Scala/Mongo/Haskell for our backend today, but are open to other technologies including Golang. ElasticSearch experience is also a huge plus.

-Data Engineer: We're looking for our first Data Engineer to be our first dedicated data-team hire. Ideally this person has experience with data warehousing, data mining and building out data pipelines and has experience with storage (MySQL, MongoDB, Redis), search technologies (elasticsearch, solr or lucene)and stuff in the MapReduce family (Hadoop, HFS, etc.)

-DevOps Engineer: Looking for our first DevOps engineer as DevOps is currently handled by committee. We are looking for someone that comes from more of a development background as opposed to operations as we're an AWS shop and currently use Docker.

-Full-Stack Rubyists. Experience with ElasticSearch is a huge plus.

Check out more at https://www.entelo.com/careers

I'm the founder and you can email me directly at jon at entelo dot com if you're interested in working with us at Entelo.
RethinkDB 2.0 drivers: native support for Tornado and EventMachine
(Or Debian unstable in an hour or so...)
Gmail SMTP passwords on GitHub
Tokyo, Japan || Full Stack Engineer || [REMOTE is a possibility]

We are a pre-release startup based and are looking for full-stack engineers that are interested in Go (golang) and Bitcoin. We ambitiously aim to bring Bitcoin to the general public in Japan, and although there has been bad press about Bitcoin, we believe we can make an impact in improving the lives of users of our (soon to be released) service. We strongly believe in testing, continuous integration and code reviews, so you will love the benefits of having well tested code in production and being able to learn (and teach) others from critiquing each others' code. As a startup, we are focused on shipping our product, so you would be expected to be reliable and able to self-manage your own time.

You will be our 2nd engineer hire and work directly with the CTO in getting the service ready for release by early Summer. This will entail helping with the architecture of systems, coding the backend systems, writing client side JS, setting up servers, and keeping everything running.

Our current stack looks like this: Golang, Beanstalkd, PostgreSQL, Salt Stack, Knockout.js, Durandal, Bootstrap

Requirements:

- Comfortable with SQL
- Familiarity with Linux and the command line
- Basic knowledge of Bitcoin
- Experience with AWS EC2
- Strong communication skills and working as a reliable team player with a remote team
- Fluency in either Japanese or English (both are a plus)

Bonus Skills:
- Go and other parts of our stack
- Startup experience
- Experience using JSON-RPC interface of bitcoin client

Please send your cover letter and resume/github repos to golanghn@fastmail.com
I love this post. Not every single piece of software needs to include SSL support out of the box. Sometimes, for the exact reasons Varnish explains, it just doesn't make sense.
Might I humbly suggest recreational items like fishing rod? In CA something that dangerous might have a seven day waiting period or need a permit so donno.
Not normally, but it does open up a DoS vector that at the very least will prevent legitimate users from logging in.
When a country accomplishes something really great, it’s not because they are small and the US is big. It’s because they are smart and we are dumb.

We hear this all the time. Portugal legalized drugs and it worked, but they’re small. Iceland forged their own path after the banking collapse, but they’re small. The Nordic countries have great education systems that cost less, but they’re small.

Always a great excuse when you really don’t want to learn from others.
Dot & BO - dotandbo.com - Full Time, San Francisco
We are looking to fill several engineering positions.

See all Eng Positions Here:
http://www.dotandbo.com/careers/engineering

Email Inquires to: careers at dotandbo dot com

About US

Dot & Bo is a new kind of furniture shopping experience that combines the personalized advice of an interior decorator with the entertainment experience of watching your favorite home design television show. We tell stories using curated design collections, and we're quickly becoming one of the top places for discovering and buying things you love for your home.

Based in San Francisco’s Design District, our team is passionate about delivering a customer experience that’s engaging, accessible, and fun. We’re collaborative, creative, and we like each other a lot. We work hard at what we do, but break regularly for happy hours, bowling nights, and inspiring guest speakers. We’re led by an experienced team and are backed by some of the top venture firms and entrepreneurs in the world.

We’ve experienced incredible growth since launching in January of 2013, and we are just getting started. Join us and be a part of our next chapter.

WHAT WE OFFER

Exciting opportunities for advancements for superstar performers
- High level of responsibilities from day one
- A refreshingly fun work environment
- Surrounded by design and totally cool furniture
- Opportunity to participate in the growth stage of a startup’s development
- Generous merchandise discounts
- This position pays a competitive salary and benefits including paid vacation, health insurance, stock options, product discounts and is conveniently located in San Francisco's Design District in Potrero Hill.
Not really - it just does the conversion to RGB on the GPU - you still need to create a buffer containing decompressed pixel data...
There may be other downsides, but the one that immediately comes to mind is that some of your client's devices may well be extremely resource constrained. The obvious type of device that comes to mind is mobile phones but there's also set top boxes and many other non-full-blown-PC web clients around.

What ever work factor downtuning you need to do to conserve server resources may well be dwarfed by the downtuning you need to do to get bcrypt to run in a reasonable amount of time on a mid range smartphone.