skysight-inc/HackerNews huggingface dataset:
This is called DANE described in RFC 6698. But it requires DNSSEC. Without DNSSEC, the visitor to the site can be easily be MITM'd by spoofing DNS. It is presumably more secure when a CA verifies an email (or DNS) because the CA can control their DNS servers and be reasonably sure their DNS is not spoofed. Random clients internet clients can't without DNSSEC.
is there a directory or job site somewhere that specifically deals with commpanies with this kind of culture?

I'd LOVE to work at a place which allowed me to work from home most days or which didn't have set office hours, where remote working was part of the culture. It seems hard to find such places.
Not in .au
> Using “guys” to mean “people”

I do this accidentally all the time and really need to stop it.
As an engineer that identifies as being self-taught, even while having done some formal CS education after I'd already started my career, this question strikes me as unclear.

As far as I've seen in my own code, and those of my coworkers, we use all kinds of data structures when they're appropriate to a requirement and its constraints.

Are you suggesting that some people stubbornly don't use data structures that they're familiar with, even when they're important to speed/performance? I can't say I really see that happen very often. It's usually either that the engineer didn't happen to know the optimal solution, or (as was mentioned elsewhere) the optimal solution wasn't necessarily worth pursuing.
Why This Apple Guy Believes in Google’s Material Design
The lifts are awful. The escalators are just as bad. Apparently the nastiness the escalator maintenance crew deals with is pretty fetid stuff [1]. Well that's what you get with people who find the bottom of an escalator the coziest place to sleep. It's a shame for both the homeless and the system. But yeah, dont touch any surface within the system unless you're prepared to wash thoroughly

[1]http://m.sfgate.com/bayarea/article/Human-waste-shuts-down-B...
That's pretty good advice… Can you point to a source that does this pretty well?
He's doing it over three years. How much more gradually do you want from a startup?
We're using this for internal load balancing, so we control both ends of the connection. If this started misbehaving, we'd see timeouts, dropped connections, or errors, which would show up in logs.
Then why is he giving wired the story on this and not in a Diageo boardroom right now?
"We have a serious problem with incarceration in this country,"

So instead of getting to the root of the problem, which is committing crime in the first place, we are just going to allow those crimes to continue and not punish the criminals??

What a strange world we live in...
It was one of those shows that I was watching and really enjoying then other things got in the way and never finished the last third of the season. I'm going to catchup right after schools done next week.

How accurate is it when they reverse engineer the computer at the beginning of the season?
I've never been surprised at Microsoft attempting to solve the same or similar problem through different channels. They like to have competing projects and see which one evolves and wins... Perhaps that explains it.. Rather than say "No" to something might be the winner.
He's phasing it in over 3 years. How much more gradually can he do that?
quite the contrary, I'm a union-supporting liberal.
Agreed, that's why it's better to get paracetamol-free variants of medicines if available.

Also, caffeine makes paracetamol more effective for pain relief. There are pills available with paracetamol + 50mg caffeine (or just take two cups of coffee); this may be more effective than doubling up on the paracetamol.
I think stevenspasbo did not mean to criticize the progress in this area, but rather just point out the misleading title of the article. Unless you program everything in pure ASM, Bios and up, you always stand on the shoulders of others, that's how since works. But the title of the article, "Probabilistic programming does in 50 lines of code what used to take thousands," makes it sound as if there was a solution to these complex problems that could be expressed in 50 lines of code all along, and only now did we figure it out. The truth is, people have written thousands of lines of code, and put them into libraries, and now those tools can be used and leveraged to express complex solutions more easily.
It doesn't matter at all what kind of promise flavor an API returns because promise implementations treat other implementations as interchangeable.

Even the ES6 Promises implementation supports this:

Promise.all([{
then: function(r) {
r(3);
}
}]).then(function(result) {
console.log(result);
});

Here the plain object with then could have been any promise implementation, even jQuery, and it still works.
Short probabilistic programming machine-learning code replaces complex programs
Looks interesting but some direct comparisons to es6 promises would really help.

Favourite function description quote:
"RQ.parallel does not add parallelism to JavaScript. It allows JavaScript programs to effectively exploit the inherent parallelism of the universe."

Favourite variable name: untilliseconds
I stopped taking Zuckerberg seriously when he pushed that Chinese propaganda book on everyone at Facebook and tried to call it "enlightenment".
I assume it steals every piece of data it can but this chrome extension works for US Netflix

http://hola.org/
> Did they look at alternatives - issuing more equity, special dividend, more generous bonuses??

Well it seems he specifically wanted to increase salary compensation, but I can bet that any organization making a choice this big went so far as to consider alternatives.

Paying your staff seems like a very good reinvestment of profit. In fact, it may well be what will allow them to pull ahead of their competition!

The biggest problem I see with this plan is not increased payroll tax but increased HR costs to weed through the many more job apps they're going to get these days.
This seems more to me like a small announcement about a tor staff member leaving.

Clickbait title = front page of HN.
The Universal Record – acoustic transducer that vibrates a vinyl disc
From the creator of the Comic Sans typewriter: http://jesseengland.net/index.php?/project/sincerity-machine-the-comic-sans-typewriter/
There are subway stations in NYC with toilette? Huh, lived in Manhattan 4 years and haven't seen one. I'm excluding Penn and Grand Central because they have piles of people waiting for trains, and they have restaurants, so they'd have to have toilets.
Having one-off internet facing applications written in C as the norm sounds great to me, but I test the security of one-off internet facing applications for a living :)
Then I'm at a loss as to why you'd be against a fair wage.
Google Panda and Penguin Lack Real-Time Updates, Despite Google’s Past Statements
Bowl toilets are probably preferable on an airplane for splash reduction reasons.
Certificate pinning [0] is a common way.

[0]: http://en.wikipedia.org/wiki/Transport_Layer_Security#Certif...
It is most likely not the ratio part but the median pay of all other employees part. You need to keep an ordered list of the pay of every single other employee and keep it up to date as people join and leave the company. Then there is the issue of accounting for part time or temp workers.
From the creator of the Comic Sans typewriter: http://jesseengland.net/index.php?/project/sincerity-machine...
Well, we have done at least one Earth gravity assist with a nuclear payload in the past. There also was some criticism about it back then: http://en.wikipedia.org/wiki/Cassini%E2%80%93Huygens#Plutoni...
republicans (with a lower case r) ought to be both economically as well as socially liberal. I don't think being a republican means you have to oppose unions in all its form.

We owe a lot to unions and I'm sure they still have a role to play in today's environment.
Maine cops pay Bitcoin ransom
Profit sharing is for socialists!
Ask HN: Why would I want funding / investment?
I have a company in a pretty new market and it would be easy for us to get additional funding but right now we simply do not need it to grow. We are profitable and can grow at the speed we need to grow to satisfy increasing demand for what we offer.

I see other companies in this new market getting funding every other week but I do not see any benefits for us. It wouldnt make a difference to how we scale the operation. Does it make sense to seek funding simply for additional business advice?

We have been running a variety of online businesses in the last 10 years so I also wouldn't know in what way this could help.

We plan to develop the company / brand for another year and then sell the whole business.
If profits are unexpectedly worse next year, the compensation structure is probably the least of their worries.

What they're really doing is investing in their brand as an employer, in the belief that loyal, eager employees make a sustainable company. For a company working a space like credit card processing, that's probably a better bet than a big ad campaign or R&D investment.
I was sad to hear about LowRISC getting attention and energy rather than efforts like cheri (https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/). I'm super excited to hear about tagged ram in LowRISC.
What’s that font? 8 tools that let you identify typefaces
As far as I remember she ran a guerilla campaign, posting these signs all over the city. My understanding is she did it for the betterment of the town and possibly her portfolio.
Yeah I guess this is about casting down damnation on any words or phrases that have in any way bothered the author in the past. It is a totally out of context assertion, I would say. I describe things that I like as being "sexy". It hardly is a term that only applies to women :P
They might be less happy when they have to have layoffs because they can't actually afford to pay people more than the value they provide the company.
Perhaps it would be good to say "150 000" instead of "1.5 lakh" which doesn't make sense to people outside the Indian subcontinent.
Humans frequently have gastric distress. With large enough volume of people, it's not if, but when, someone is going to have an uncontained event.

I once thought about how the world would be different if we were like rodents and essentially lacked bladder and sphincter control, if we'd have to all wear diapers all the time (think of the landfill waste so probably we'd have figured out something else but what) and what ballgames would be like. Probably holes in the seats. Because how else could we have a functioning society? We'd actually probably be a lot better at sewage control because otherwise it'd always be everywhere.
And yet somehow they manage to do a payroll cycle every 2 weeks, produce W-2s every year and so on. I don't get it, obviously this would add up to quite a bit of admin work at a very large company but it's basically the sort of thing you can do very easily with a spreadsheet.
Oh, certainly. I agree completely with everything you said.

But right now, the situation is that I go to arstechnica.com, which offers no encryption whatsoever, and Firefox just loads it up like nothing's wrong.

Yet I go to self-signed.example.com, and Firefox presents me with a giant warning screen, followed by a pop-open warning dialog, where I have to click to confirm the security exemption, add the certificate in, and OK another scary prompt. It's so over the top that laymen probably think proceeding will give that site complete interception control over every site they ever go to again in the future.

That's absolutely ridiculous. Worst case, self-signed should be treated like HTTP is now. No padlock, no green address bar.

People who are knowledgeable and able to confirm self-signed certs should be able to very quickly and very easily do so. This will greatly help with developing inside the local network, or for small communities that know what they're doing and don't want to pay hundreds of dollars for wildcard SSL certs.
Sorry, let me rephrase. Some parts of the city say things like No Parking unless with permit (for residents of the street). Or, what about 2 Hr parking unless Sunday or Holiday? Or what about 8-10AM street sweeping every other Monday. I feel like the new design doesn't solve for this.
Hi i am learning new things
If you explain your intent and they still feel offended, I do wonder how one should react to that. It feels to me like someone who is being pedantic who thinks they are "right". Who knows, maybe it does offend enough people that this usage will decline.
Pain also dimishes my joy. Pain relievers are shit, but pain is far worse.
Women's Bags ➠ 5 Must-Have Bags for Women
It's never a particularly compelling argument to start from the position that you can't understand that other people hold opinions different from yours.
Seems hard to believe that an "engineer" with a degree in engineering or CS wouldn't know what is a unit vector.
I like how you think, but I don't think that's the same question as was posed by the article.
Denver is discussing this now. The only thing on the table so far are the self-contained toilets. There's no discussion of having a sort of self cleaning wall. I mean why not, people do that already and in the wrong place and it's not self-cleaning? And by people, I mean men. Takes a desperate woman to take a leak in public, but the two I've seen do it? They had the bravery, courtesy, and drunkenness to do it in the street gutter. I have never seen a man do that.

And then what about the public urinals in Amsterdam? Not under discussion in Denver either. It is admittedly sexist, but it's also mainly a dude problem.
During the reverse engineering scene I would assume that they are reading the BIOS which would have been stored in ROM (Read Only Memory). The ROM chip would have the same address and read control lines like any standard memory chip which could be read by setting the Address lines, the Memory Read, any additional/ancillary signaling and then reading the data lines.

Once you had all the bytes read, you could in principle run this through a Disassembler to get the actual Assembly language instructions (minus any original comments). You would have to figure out the boundaries of code, data etc.

I would assume in those early days, they wouldn't expect the run of the mill hackers to be able to disassemble the stored data in ROM.
If you read the article, the owner is offsetting all the wage increases by reducing his salary and using existing company profit. And, I suspect he'll be able to hire/retain his best employees - which is important in a customer service centric business.
> You need to keep an ordered list of the pay of every single other employee and keep it up to date as people join and leave the company.

Is it even possible to run a company without having this information somewhere?
I've purchased W.L. Weller for as little as $12 a bottle, and it is, generally speaking, fantastic.

According to thewhiskeyjug.com, its median price is $17 for the Special Reserve.

In a marked note of irony, Pappy Van Winkle is oft-regarded as the best bourbon around, so people tend to consider "close enough to Pappy" as being a fantastic bourbon. In an interview once, Julian Van Winkle mentioned that he though W.L. Weller was "just about as good" as Pappy Van Winkle. Because Weller was, at the time, very inexpensive, and Pappy very much in the expensive category, there was a giant boom for Weller... so much so, that now some of the older bottles of Weller go for 4 figures. Hilariously, more than what it costs to buy a bottle of Pappy (though both are nearly impossible to find, and people do pay plenty for Pappy when they can find it.)
If you're happy with your organic growth then that's fantastic. Joel Spolsky gave a very good talk at at a YC conference some years ago where he compared the organic growth strategy at Fog Creek software with the capital-raising strategy at Stack Overflow and identified some factors that made the different choices appropriate in those different contexts.
Paying more than what the job is actually creating in value isn't a fair wage. It's the type of thing that is likely to put a company out of business. Then instead of having a 70k job they didn't earn they are unemployed.
Assuming you know what data to include and what not. For instance, it is not obvious to me whether the "company" means a company in one country only, or all the legal entities of a multinational. Should you include part-time workers, and if you should how should you do it (the actual pay or the FTE equivalent pay, and what are the FTE hours for different jobs?)

It's a quagmire.
I assure you that every company I've ever worked for has had that list of salaries at the tip of their fingers. This would be next to zero additional effort if it's only salary ratio. The problem is - you can easily play games with bonuses, stock options, etc... to make it appear that the CEO has a low salary.
So like

SELECT MEDIAN(salary) FROM employees

(That's valid Oracle.)

I mean I get that there'd need to be some adjustments to normalize salary to yearly salary and factor in non-cash benefits, but come on.
If HR or Finance doesn't have this, they aren't doing their job. The company should know exactly how much money is going to payroll every pay period and should know exactly how much they are paying each employee. If they don't know this, the company has bigger problems.
I have no problem with him cutting his salary, but the 80% of profits won't be profits. They will now be going to expenses. If revenue is a little less, that means they are now losing money.
Show HN: POH – Programming challenge on engineer's cartoon love story
Apache Cassandra Leads All Others in Latest NoSQL Benchmark
I'm with you, but did you read that the increase was already paid for out of profits and by reducing his own salary?

I'm not sure if he is still head of the board or what, but this is definitely a bold move. Still, $70k in Seattle is only like $52k in my lowly city of Myrtle Beach, SC. It isn't a whole lot of money for any professional salesperson, clerk, or the like to make. It will certainly be a big win for morale and one would expect, performance, and retainment/turnover.

I guess we will see.
> I'd rather have a very slow but rigorous and scientific review process than what is offered here.

Yes, but clearly, others disagree. They'd rather have rapid review and are happy to pay for it.

Also, consider medical research. Quite literally, lives will be saved by faster review.
If an employee is living paycheck to paycheck on an above market salary it is a set up to lose everything. This is definitely an intentional management technique.
you might want to look up 'malware' in the dictionary,
you should easily recognize it, it has a picture of squire next to it.
A Brief History of Hardware Accelerated Decoding on Macs
Nope, but E150 is pretty well known because it is ... everywhere. But we do know that if whatever you buy has to many E numbers on its label its probably something you do not want to eat (That's a rule of thumb: Everything, even water, has a E number, but companies usually only put them on the labels for the not-so-nice stuff)
Hopefully he adds some money management training to go along with this.

Someone who is used to living on $48k/year (their current average) suddenly making $70k/year is a huge change. And unfortunately, most people will adjust their standard of living to whatever their making instead of banking the difference.

As a result, I can easily see your concern about "increased fear of job-loss" because of what they're making.. and how hard it is to be "poor" again. It's the definition of golden handcuffs.
I rarely care. Even the CA-signed certs are usually for "RL Media Enterprises Inc." or something equally opaque to me, rather than something more meaningful.

Bluntly, the refusal of a certain part of the security community to simply secure transport first and then worry about authentication on top of that is both frustrating and mind-boggling.
You know gmail.com is one of the domains with known invalid certs signed by browser-supported CAs in the wild, right?
You've been here long enough and participated in enough discussions on this topic that I think you know very well that crime is at a historic low, as well as some of the prevailing theories about which factors might have influenced that besides incarceration. To lead off with such a dismissive comment on such a complex sociopolitical issue is very disingenuous. I could respectfully disagree if you had taken some time time to lay out a context for your position, but as it is it just seems like the most vacuous kind of sniping.
Anonymous Interview with Jonathan James
Pornography in North Korea
Be happy!
I just learned about Dyson Trees[1] recently. Could this be related? (Layman asking serious question)

[1]http://en.wikipedia.org/wiki/Freeman_Dyson#Dyson_tree
The price of Wildcard SSL certificate is a bit expensive because multiple sub-domains are secured with single certificate.

For a large business with multiple sub-domains (mail..com, blog..com, info..com, anything.com, etc...), if the business purchases individual SSL certificate for each sub-domain it need to spend more money, and the process will be so long as generation of new CSR, private key, certificate installation, etc...

A Wildcard SSL secures unlimited sub-domains which saves time and money as well.

$150 is much higher for a wildcard SSL certificate, Visit CheapSSLSecurity (https://www.cheapsslsecurity.com) where you can get Wildcard SSL certificate at $60/year for Domain Validation and $108/year for organization validation.
But it's just wrong to conflate these two things. Security of transport and authenticity of parties are two separate questions and should be treated as such. Particularly since conflating them essentially says "anonymous secure transport will not be possible".
I don't understand. Their current profit this year will be $2.2m, after the CEO takes a $1m salary.

The current average salary is $48k (x70 employees == $3.36m/yr).

If the CEO drops his salary to $70k and ups everyone's salary to $70k it will be a net increase in expenses of around $600k.

Their profit of $2.2m can more than deal with an extra $600k.

I'm also assuming they're still growing and will grow a little more due to some publicity from this.
As I noted below, I have no problems with him cutting his salary. Those profits stop being profits though and are now expenses. If revenue comes downs little bit they are losing money.

Personally I think it would make more sense to raise salaries by whatever he wants to cut his salary, and then add some profit sharing in as opposed to just removing all the profit and adding significant risk to the business.
You're looking at it strictly through a profit maximizing financial lens, but obviously this move isn't strictly a financial one.

What if the purpose of businesses wasn't to maximize profit/ROI?
You're assuming that the wage market is already efficient and that Gravity's employees aren't worth $70k or more.

We know that your first assumption is wrong, and I don't think any of us are in a position to know if your second assumption is wrong or not. It certainly doesn't seem unreasonable.
Yup I agree it's great that one can spend the breaks with family.
> Even on a static page you want to be sure that what you see is what the server sent.

So have a PGP signature of the page available and the browser can check it.

> HTTPS provides not only encryption, but also authenticatoin.

And this is the problem. Those are two separate issues and should be handled separately.
Such a sad announcement.

Organizations like this and the Bitcoin Foundation eventually become so self-centered they start to undermine the work of all past contributors.

Hope the community works around these issues.
+1 for tests.
My understanding is that he is using this years profit to fund the expense of the three year plan, not 80% of the profit EVERY year.

And then, after three years, hopefully the ROI on this will be quite high, and then at that point, yes it becomes an expense.