skysight-inc/HackerNews huggingface dataset:
~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~

MATASANO SECURITY - Chicago. New York City. Sunnyvale.

Application Security Consultant

Full-Time, work visa sponsorship available

~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~

The security of computer systems has increasingly become an everyday concern. The news all too often brings word of yet another compromise, exposing financial information, personal details, or simply salacious pictures. Whatever the impact, it's clear the technology industry has a problem, and there are few easy solutions.

Some seek legislation to impose harsher penalties on the responsible parties. This ignores the fact that many of those responsible are outside the jurisdictions which seek to punish them. In some cases, they may have tacit approval of their own government, or even be operating on their government's behalf. Others turn to established security products looking for antivirus and network filtering technologies to add protection. This is an also an imperfect solution. It places the defender in a reactive posture, responding only to those threats which have been previously detected, and for which countermeasures have been developed. There's no perfect solutions.

At Matasano, we believe the best way to combat security weaknesses is at their source; by discovering and remediating software vulnerabilities before others leverage them for ill effect. Our clients see the value in this approach. We're engaged to work on some of the most interesting and important software on the planet. Aside from identifying vulnerabilities, we help our clients identify the root cause. Through this, they can adjust processes to reduce the likelihood of similar problems in the future, while increasing their ability to identify and correct them. The goal is more resilient software.

We've assessed hot startup web applications, low level device firmware, mobile platforms, and everything in between. With this breadth, we have need for employees skilled in frameworks like Node, Rails, Django, and Spring. We need people comfortable with x86 and ARM assembly, reverse engineering, and binary protocol analysis. If you're skilled in a programming language with the letter 'C' in it, that's desirable. Newer safer languages like Rust and Golang are in demand. In short if you share our focus on helping secure our software ecosystem one piece at a time and want a chance to do something about it, we should talk.

Learn about our hiring process at http://www.matasano.com/careers or contact us at careers@matasano.com
Get a taste for some of what we do at http://www.microcorruption.com and http://www.cryptopals.com
Check out our blog at http://chargen.matasano.com

Next month, you'll notice a change in these posts. Since being acquired by NCC Group in 2012, Matasano has been working increasingly closely with our peers at iSEC Partners and Intrepidus Group. The time has come to formalize this, by adopting a common name; next month I'll be posting under that name.

~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~'`^`'~-,._.,-~
InVenture - Los Angeles, CA (Santa Monica) - Data Scientist - Full Time or Intern

InVenture is a world leader in providing direct loans and financial services in emerging markets. We are a global team with diverse backgrounds who are singularly focused on using technology, data and customer-centric approach to meet the financial needs of the 2+ billion people of the emerging global middle class.

Investors include Lowercase Capital and Google Ventures. We are Fast Company’s #1 most innovative company in money, #13 overall.

We are looking for people to join our data science team who have the following qualities.
- Problem solver. You thrive on finding novel solutions to hard problems. These problems may have ranged from extracting a new dataset from an unexpected source, to building cohorts for customer retention analysis, or the NY Times saturday crossword.
- Expert. You have domain expertise. Tell us about the genetic algorithm you implemented to find a solution to your NP-hard problem, or the hobby that keeps you busy on nights and weekends.
- Curious. You aren’t content until you understand why the features you have built have the explanatory power they do, and why they aren’t just a spurious correlation.
- Communicator. You’ll be the expert in your field. Can you explain it to us in laymen’s terms?
- Education. Masters degree in a quantitative field, or relevant experience and/or an impressive Kaggle profile.
- Language. We are language agnostic and have expertise in python, R, SQL, Spark, MATLAB, and Stata. We build visualizations using d3, ggplot, matplotlib, seaborn. Huge bonus points if you are fluent in Swahili ;).

Why should you join?
- Take it from people who have build models and studied problems ranging from microfinance to global climate change: we are tackling an incredibly hard problem with huge social and financial impact. The impact of our models is both intimidating and inspiring.
- We leverage a unique, diverse, and deep data set. You’ll be surprised by what connections we’ve found between our different data sources. Surprise us by what you will find.
- You will own a model, or multiple models, whether building a country-level credit model from scratch, or integrating new data sources into our existing underwriting models.
- Amazing company culture. Our employees come first as indicated by our “Employee Awesomeness” program. We do lunch and learns, provide a flexible work schedule, and have regular team outings and happy hours. Our smart, passionate team is the backbone of our culture, and is what differentiates us from others making it a special place to work.
- And btw, our customers love us: inventure.com/love

Contact peter@inventure.com and please include the hacker news in the subject line.
Yev from Backblaze here -> You're not wrong. In fact we recommend having an on-site backup FIRST, then moving on to other backup mediums. I wrote a post about it -> https://www.backblaze.com/blog/the-3-2-1-backup-strategy/. Online backup is great, but local backup will always be quicker to get data on to and off of!
We fall back to a share page that let's you use the native sms client without contacts access.
Location: Dallas, TX

Remote: Yes

Willing to relocate: Yes - Oregon, Washington, Colorado, Utah

Technologies: UI Design, Animation, Javascript, CSS, Node.js, React.js

Résumé/CV: http://rblakeley.github.io/resume.html

Email: thisryanb[at]gee mail dot com

Website: http://rblakeley.github.io
Principal Software Engineer - Full Time | Burlington, MA | Arcadia Solutions (http://www.arcadiasolutions.com)

Arcadia Solutions is an EHR data aggregation and analytics company that helps our clients (generally provider networks and health plans) use their data to identify opportunities to reduce medical expense and improve care provided to patients - especially those most in need of medical interventions.

The web application is written in AngularJS with a Rails API and MSSQL back end. We're also using CoffeeScript, Sass, D3.js, Rspec, Capybara, Jasmine, and Redis. The team in place consists of four Engineers who have been working with Angular for about 18 months and Rails for anywhere from 18 mos - 3 years. We started development on the application in November 2013 and worked/learned alongside three consultants from thoughtbot for the first six months (thru initial launch). In the time since we've continued to enhance the product, which is rapidly emerging as a leader in the market.

In 2015 we expect to spend some time focusing on scaling the product - it's currently deployed to fifteen clients of varying sizes, but we expect to add a handful more (and thus, many new users) to the application each month this summer. Based on what's near the top of our product roadmap, we're also expecting a few complex data modeling challenges. While the team in place is definitely up to the challenge, we'd love to add some technical leadership to the team. As such, we're hoping to find someone with experience on Rails and Javascript frameworks (preferably Angular), experience scaling enterprise applications, and a commitment to testing/quality.

Some perks of the position include a flexible schedule (WFH when you need to, work late one day/leave early the next, etc), dedicated investment time (work on trainings, side projects, open source, etc. for at least one day/month), snacks, pet-friendly office, company-sponsored events (we just spent a long weekend in Stowe, VT), and kick-ass teammates (at least we think so)!

You can apply for this position at the link below, or feel free to reach out to missy.carroll [at] arcadiasolutions.com with any questions.

https://careers-arcadiasolutions.icims.com/jobs/1369/princip...

Hope to hear from some of you!
Your theory here seems to be that one person in the world having an extremely negative outcome validates basically all negative risk perceptions. I think that's bunk. It makes no more sense than saying that because one person wins the lottery, it validates everybody who buys a ticket and loses. To evaluate risk and reward, you have to look at baskets of outcomes, not crazy outliers.

Suppose he lent his house to a friend who trashed it? Suppose he gave keys to a cleaning service and some reprobate there stole the keys and trashed the house? Suppose an earthquake destroyed his house? No matter what happens, there's always a way to blame people after the fact.

The way this discourages fixing things is that blame never fixes anything. Blame isn't a solution, it's another problem.

If somebody wants to do an integrated risk analysis on AirBnB and make some predictions on that, great. I'd love to read it. But comments like the one I call out are predicting the past. They're not just worthless, they're harmful to useful dialog.
How so? The update mechanisms use certificate pinning, and even if they didn't it sounds like an argument to use different certificates for code signing and for web servers. What other problems could there have been? Most people are only going to verify that it's microsoft.com.
http://positions.bookbub.com/

Looking for all levels of engineers excited to join a fast growing startup. We use RoR on an AWS stack.

Cambridge, MA
I dont like that conversation and posts are singular datatypes. If I am going to skim, I want chronological rivers of text. My screen should be JUST headlines, everything else is noise.

http://techmeme.com/river
http://mediagazer.com/river
http://hckrnews.com

Ive also reduced my skimming vs reading, I just dont actually learn as much. If I skim all day, and you asked me what I read, 90% of it is forgotten. Skimming headlines is like a continual huff that never gets you anywhere. Longform is the way to go.

http://longform.org/
http://longreads.com/
https://readability.com/topreads/
https://www.instapaper.com/daily
http://medium.com
FarmLogs seems to have a nice company culture. They brought someone in who seems to have been unfamiliar with many of the technologies they use. Yet with good mentors and some patience, it looks like everything worked out.
Cool. Even cooler: it would create static HTML files. I've been searching for a software like this for long. Jekyll only works on computers I've installed it on. I want an admin interface, but no db and static output. Only thing I've found is http://prose.io
> But lithium is still not cheap.

Lithium is extremely cheap. The cost of the Lithium has practically no impact on the cost of the batteries. Most of the cost of batteries is work.

This venture makes sense because as lithium batteries are used, they lose capacity, and thus their specific energy gets worse. At this point, they are no longer very useful for cars, yet still can be used for other things. As Tesla recovers the used batteries from their cars, they can resell them as home batteries.
I think Bush had the audacity to push through extraordinary measures initially. He was responsible for a number of Bill of Rights attacks: Habeas Corpus, search and seizure, 1A, Gitmo, and this whole rendition thing. The author of the Patriot act has since come forward and indicated he had no intention of having it abused in scope as we're seeing. PA was not intended to quash dissent nor pursue common criminals.

Obama ran on a platform of repealing PA and restoring the Bill of Rights. Of course, he did a quiet 180 on the issue shortly after entering office and has since issued more secret executive orders than any other president. It makes one wonder what happens to Presidents after they're sworn in. Does someone read them in on the facts of life? Or are they simply always dirtbags whose principles are for sale?
I definitely agree with the treatment centers. Professionals should be able to treat addicts with the best methods possible and we should not have laws getting in the way of those treatments. Still not sold on decriminalizing any "recreational" distribution. Small use possession yes.
Once I've decided I like something, I tend to want to actually own it.. Play's opaqueness when it comes to telling me what's DRMd and what isn't (may very well have changed - I haven't bothered checking in a very long time, and to be honest I don't know whether they've ever had DRMd music at all, because their lack of transparency with respect to video content and ebooks mean I never bothered even looking at their music section) has kept me away from using it at all for content.

It's the discovery I find annoyingly troublesome.
I think you're drawing a false parallel, and I hope you're not serious. An action which has a victim is not necessarily a crime, and an action which is deemed a crime does not necessarily have a victim. Note that this is a practical distinction, not an ideological one. In a pure ideological social-contract style system one could argue that the basic definition of a crime should be an action which infringes on the rights that we as a society agree to possess.

On a very basic level, illegalizing things because they 'negatively impact people' would bring capitalism to a grinding halt.
What are you gonna do if the government does this to you?

I mean its entirely possible. First they came for < insert group > etc..
Yes, marriage, as far as it needs to be a government-sanctioned thing for wherever reason, should be a partnership of 2 or more consenting entities that are legally allowed to enter contracts. Like an LLC kind thing - the whole point, as far as government goes, is to provide asset management, is it not? Adding arbitrary restrictions is inelegant.
Tighter control over the user experience doesn't necessarily benefit the end user, but Twitter don't care about your interests that much.
Looking for a summer internship. I'd love to gain more concrete experience with the full stack.

Location: San Francisco Bay Area

Technologies: Python, Java, Objective-C, Google App Engine, iOS

Resume: Send an email and I'll give you a copy!

Email: wertheimjoshua[at]gmail[dot]com
Looking for a summer internship. I'd love to gain more concrete experience with the full stack.

Location: San Francisco Bay Area
Technologies: Python, Java, Objective-C, Google App Engine, iOS
Resume: Send an email and I'll give you a copy!
Email: wertheimjoshua@gmail.com
I am fat. Does it count as "well rounded"?

sorry I just had to :)
Kinsa | New York or San Francisco

Full Time iOS, Android, UI/UX, QA, Data Science, Machine Learning

Join our team of world-class entrepreneurs, engineers and designers in building the world’s first real-time map of human health and the worlds smartest medical thermometer.

Work at the intersection of hardware and software design and technology to push the limits of global health. See your hard work on store shelves, and in the hands of delighted consumers. Get ready to be inspired to do your best, every day.

Sound exciting? Check out our current openings at https://www.kinsahealth.com/working-with-kinsa/
Imagine you could peg your mood to any index you like, that it was a free choice. Performance at work, social activities, personal relationships, physical prowess, heck the sodding FTSE 100.

If you had that free choice, what would you choose? I assume a weighted aggregate of some kind including some of the above?

The truth is you can peg it to anything you choose, and you do that by prioritising these things in your day to day life. If you spend 1 day a month doing exercise, you're implicitly weighting that lowly in your mind. If you spend 10-12 hours a day working, that's how you weight it in your "mood index".

Just my opinion of course.
>who are just choosing not to continue it

Or so they claim. How many times in history has some group promised to stop some wrong doing only to continue, perhaps in a modified way?
Dammit. I thought I had been careful enough to get the correct number.

Alright. Picking the simplest formula off Wikipedia, cosine of 85 degrees is ~0.0871557 times a (6378137m) times pi is ~1746383.9m for the circumference. That's still approximately 500k squares at the exact latitude. My point is one of the sheer magnitude still available.

What I should do is calculate how many decimal points down from 90 degrees 3 meters is and get that circumference, since that's the low bound, but I'm not really feeling up to the number-plugging.

I could be incorrect about what a is; I presumed it is the semi-major axis on WGS84, but I might have picked the wrong thing.

...

Ooh. I forgot there's a Wolfram|Alpha. ... And 10 minutes later I haven't convinced the input parsing to give me what I want. Oh well.
If search optimization is what you're after, why not just use "local"
One I've had for years is bookmarks. It's actually a bash shell function. You can bookmark a file or a directory.
$ bma filename
$ bma dir

when you type bm, it lists the bookmarks. Select a directory, and it cd's to it. Select a file, and it opens it in vi. Bookmarks can be grouped and sub-grouped and shared with many users on the same linux/unix box.

If enough people are interested, I will publish it somewhere for others to use/adapt/improve.
You say that you merely prefer the Ph.D. credential, and that you're not degree obsessed, but further down you say that if a person submits a resume they should include their Ph.D. thesis. Can you provide some clarification on what exactly are the requirements to be considered for a role?
http://blog.codinghorror.com/the-ten-commandments-of-egoless...
Software Developer/Salesforce consultant | Leeds, UK | Full time, permanent, mostly on-site

A young, 30-ish-strong consultancy in central Leeds. Strong focus on Salesforce work, but we also have MS Dynamix, Data/BI and AWS practices, so you'll have some variety. Salesforce experience not required. We're also looking for data analysts.

If you're interested, shoot me an email at vilius.vaivada@alscient.com.

www.alscient.com
"problems that absolutely need solving _before_ a forced global deployment of TLS can happen"

I'm all for this switch to SSL. But there's no way Mozilla's announcement will effect global deployment of TLS... not with 11.7% market share (NetMarketShare.com, https://www.netmarketshare.com/browser-market-share.aspx?qpr...).

The realist in me says this will just frustrate developers as staunch advocates of Firefox pester for working services while higher-ups refuse to justify the cost to suit a possible minority userbase. These users being forced to either switch browser or move service provider.
Someone in the other thread had a genius solution to this:

- All domains should now come free with a domain certificate.

Seriously, this entire problem set is solved by that one single change. It is one of these ideas that once you hear it you cannot un-hear it. We already know (and as this blog post says) that domain certificates have zero cost associated with creating them, so just bundle it with domain registration and soon competition in that space will force the additional cost to near zero (in particular if it is required).

This is a much better solution to "Let's Encrypt" because it scales better, and we don't have all of our eggs in one basket.

So who do we lobby to make this happen?

PS - Domain registrars won't fight this too hard as their customers will be "forced" to buy a "bundled" domain cert'. I am just hopeful that even if initial prices would be higher, eventually the additional cost will be absorbed into the domain registration itself.
It is definitely not a tool to continue a race war, racial program, etc, etc.

It is a tool of politicians much like the issues with pornography. It relies on fear, uncertainty, and doubt, with a big dose of apathy thrown in. The last is because the majority really doesn't care what happens to users because they do not themselves use these drugs. Images on TV, internet, and newspaper, reinforce the image of those who do as low lifes, malcontents, people you cross the street because of, and such.

Politicians love power with which comes money. Police love the job security and money. Prison systems love the job security and money. So any solution is going to involve taking the monetary rewards out of it to those who enforce it.

One example, instead of paying prisons by the number of people you penalize the system for repeat offenders. This would drive the implementation of more programs designed to get people off the drugs and also get them jobs training so that the job is more valuable than the drugs. Should it end up costing too much then the system needs to adjust what it jails people for which eventually would lead to the decriminalization of drugs.

Make it too expensive for those who currently profit off the situation as is and it will lead to a road where it can be fixed
Resurvey. Petaluma, Calif. & Portland, Maine. Remote (U.S.) welcome. Contract, initially.

We're bringing video collaboration to businesses. Techstars alum, initial customers in a single vertical, relaxed but performance-based culture.

Design hypermedia APIs, build web and native apps. HTML, CSS, JS, BaaS, document-oriented databases, security, AWS, Win7+, OS X, iOS, Android.

Email links to projects you've worked on and a bit about yourself to people@resurvey.io.
What's your reasoning? I'm always a little wary engaging this sort of statement because it often turns into a moralizing rabbit hole, but I'm also curious what you even mean. Certainly no one is precluded from making a copycat service, excluding that no one really desires to duplicate the investment and work given the likely outcome that no one would care. And it's also pretty clear that there are many services that get fairly close already. Given that, I'm just wondering what you could mean.
Location: Anywhere (EU / Canada all ok)

Remote: (Flexible)

Technologies: Ruby, Puppet, PHP, Some frontend stuff
Resume:
https://www.dropbox.com/s/5pk27nman1xxv65/cv_devops.pdf?dl=0

Relocate: anywhere

Email: nextgengames+hn@gmail[dot]com
"I also believe that many of us aren't mature enough, and recreational first-time users should have to consciously unseal a sticker: "Upon consuming this drug, you are not allowed to work for x years, drive, or be treated for health", in addition to cancer/addition-related notices. I have no idea how to convey this message to users."

If you feel you aren't mature enough as a "first-time user", then maybe you shouldn't be using in the first place. Think of it like shooting a gun for the first time.

With more educated and mature people using drugs, it will make for a healthier society.
Seriously? People can't be bothered to take the extra 45 seconds to open an Authenticator app and type in the current 6 digit code?