skysight-inc/HackerNews huggingface dataset:
There are a lot of companies out there. It's true, a lot of them have a terrible interview process and they weed out very talented people.

Regardless, go on as many interviews as you can. You'll eventually find a good team that values you.

Don't be sad or demoralized if you bomb an interview, just use it as practice, and go to the next one.
Knowledge of how to get around in Beirut, and much of the Arab world, is based on contextual knowledge and history. People have shared space, and this shared knowledge serves as the basis for spatial communication.
Yes, it definitely is a good path for that, especially if you were using Actionscript 3.0. OpenFL does not support the AIR API on native targets (you can still make AIR games via Haxe, just only on flash target), but on native you'll gain access to anything AIR could do and more through the Haxe standard library's native system stuff.

Tons of people have used OpenFL for exactly this purpose (porting legacy flash games) -- I'm doing it for Defender's Quest (previously a flash game), Cursed Treasure 2 is a good example as well of making the jump from Flash -> Haxe/OpenFL (Cursed Treasure 1 was flash.)
In my opinion, Keybase needs a Warrant Canary on their website.

See https://canarywatch.org/faq.html for more information.
A man made thousands by hacking Trivia Crack to always guess the correct answer
> Since there's only one key on the keyboard that represents both single-quote and apostrophe, software has to guess which one you mean from context.

That's not at all true; while "guess from context" is one option, using modifier keys is also an option; there's a lot of software that does this for things which don't have distinct keys. Certainly seen this used for different widths of spaces, and different widths of dashes, even though the keyboard has only the space bar and the hyphen.
Hack is just a piece of HHVM, it's open: http://hacklang.org/
Location: Sofia, Bulgaria

Remote: Yes

Relocate: Yes

Technologies:

Javascript/HTML/CSS,
Node.js (Express/Browserify/Babel/Grunt/Should),
Web Audio and MIDI API's,
Angular.js, Bootstrap, Stylus, jQuery, Polymer,
CommonJS & AMD

Tools:

Git, iTerm, SublimeText, Pixelmator

LinkedIn: https://www.linkedin.com/pub/nikolay-tsenkov/38/754/955

Email: nikolay@tsenkov.net

Summary: My latest work was with the stack of technologies I listed - I just released my synthesizer a few days ago (Viktor NV-1: http://nicroto.github.io/viktor/). For the better part of the last 2 years, though, I've worked on an app called Pagehop (https://pagehopapp.com). I also have a working knowledge of C#, Objective-C, Swift, Cocoa, ASP.NET (WebForms & MVC), but I would prefer the stack listed first. Just wrote this post about my decision to start looking for a new challenge: http://tsenkov.net/2015/06/02/looking-for-my-next-challenge

Cheers!
Assumably it compiles down to a subset that is easy to port—basically take the VM approach except make it AOT-oriented instead of JIT-oriented, like LLVM.
Hint: you're mistaken at the role Linux played in it. Go study your architecture diagrams.
The system as a whole is SIL-4, thats not the argument.
Linux certainly isn't, that I can guarantee.
The work to provide full traceability trees and 100% coverage thru the Linux kernel is many man-centuries of work.
That has not been done. The SIL rated side will be a different kernel/hypervisor.

If what you're talking about involves RedHat MRG, then that product has a completely different kernel. Its not standard linux.
Hey pitchups. You're right, this is a complex thing.

We try to have a minimum amount of overlap where we all work together every day. If you realize our offices are only in one half of the globe approximately, so this is usually possible. The trip to Thailand was a special case, for example, where we had to shift a bit the regular working hours in order to make it work. But the important part is that we could make it work :)

Also we try to have a lot of communication asynchronously via Asana tasks or Google groups for things that don't need urgent attention.
Startups on a budget: how we used free tools to go from zero to launch
Would you mind if I create a strawman of an edge case to test your devotion to the use of the word 'never'?

That is a fairly absolute word, and I tend to doubt you actually mean never.
Thanks, I've added HHVM and marked HipHop as superseded.

I also added Wormhole, which I think is the pub/sub system you're referring to (published in NSDI 2015: https://www.usenix.org/system/files/conference/nsdi15/nsdi15...).

Updated version at original URL: http://malteschwarzkopf.de/research/assets/facebook-stack.pd...

Regarding the focus on academic papers: I agree that this does not reflect the entirety of what goes on inside companies (or indeed how open they are; FB and Google also release lots of open-source software). Certainly, only reading the papers would be a bad idea. However, a peer-reviewed paper (unlike, say, a blog post) is a permanent, citable reference and is part of the scientific literature. This sets a quality bar (enforced through peer review, which deemed the description to be plausible and accurate), and allows the amount of information to remain manageable. The number of other sources of information makes them impractical to write up concisely, and it is hard to say what ought to be included and what should not when going beyond published papers.

I don't think anyone should base their perception of how Google's or Facebook's stack works on these charts and bibliographies -- not least because they will quickly be out of date. However, I personally find them useful as a quick reference to comprehensive, high-quality descriptions of systems that are regularly mentioned in discussions :-)
It will be fully public for 60 days before Congress votes on it.
I wouldn't say this is bad or anything, but it is focusing on the wrong problem. Block ciphers like AES are the very strongest piece of the puzzle. This is kind of like putting three huge locks on your front door. It doesn't hurt, but the second and third locks have limited utility.

The best attack on this scheme (in a purely offline scenario) is probably just cracking weak passwords, just like it would have been with only one encryption pass.

EDIT: One more point. The FAQ says something about plans for a future streaming API. Please do not do this, at least for the decrypt operation. Streaming decryption APIs expose application developers to not-yet-authenticated plaintext.

EDIT EDIT: I think it's an API mistake to leave key generation in the hands of the user, especially by using a PBKDF. PBKDFs are a measure of last resort. If you can just generate key material randomly, you should do so.
Another thing is the Haxe standard library, which guarantees certain features across all targets, including features that aren't normally available (like, say, Reflection in C++, if I understand correctly). If the feature is natively available, it falls through to the native implementation, if not, on that target the standard library provides enough code to enable the feature.
Did Wired get it wrong? Why Google Now won’t be the death of apps
So this would project image onto flat surface, how does it actually project directly to your retina?
I'm financially independent, mid 30s, married with kids, and I haven't been in my bank branch in years.

I agree that under 30s should be able to relate, but technology is changing how often I physically queue up somewhere.
Goldman Sachs analyst found dead after complaining to father of '100 hour weeks'
>But it's not really practical to interact with characters by appealing to love, greed, loyalty, arrogance etc. in order to motivate them to behave differently

You can do something like that in Deus Ex: Human Revolution. You can have a cybernetic augmentation that lets you read microexpresions and do voice analysis. Then it tells you if the character you are talking to is more likely to be persuaded by flattery, assertiveness, bribery, intimidation and so on.

It ends up being little more than a gimmick, because being a modern high-budget game with impressive actors (they do good voices and their face expressions are so realistic that you don't need that cybernetic augmentation if you know how to read expressions in real life), it would be too expensive to have the kind of huge conversation trees that old style text-based computer games have.
In my opinion part of the reason why Haxe still hasn't got much support outside of game development is an easy, cross-platform way to do native UI. It's definitely something that's needed for it to be a good solution for building most non-game applications.
Ha! We tried it! But so far we're happy with HipChat.

One thing that makes Slack better for a company like us is the possibility to be in several teams at the same time. This is something HipChat should definitely look into!
That may of course also play a role especially when handling unpackaged food but then again the money goes through both hands anyway. Most of the time I see people counting the money when they place it there coin by coin. And it makes putting the change back into the wallet easier because you don't end up with a hand full of bills and coins.
Sure, go ahead and create a strawman if you think it helps you. It won't change the fact (not opinion, but fact) that the democratic process depends on transparency.
> As a sign of God's power, as a message to others, the same as any other miracle

Well sure, but you might as well point out the stain in the corner is a "sign of God's power". It seems to me the "correct" approach would be to appreciate the ineffability of what happened, not make ridiculous claims about holiness causing preservation when there is literally no rational implication of this.
It strengthens their own beliefs and it also will rarely brings new converts.

http://www.telegraph.co.uk/women/womens-life/11257637/Religi...

> Rachel Underhill, 39, a florist who lives in Peacehaven, East Sussex, was brought up as a Jehovah’s Witness before leaving the religion in her twenties

[...]

> We weren’t allowed to make friends with anyone “worldly”, which meant anyone who wasn’t a Jehovah’s Witness, or do anything outside the religion, which they called “outside the truth”. It was incredibly isolating. We were brainwashed into thinking all worldly people wanted to abuse us, and this was confirmed every time we knocked on doors to try to convert people – you can’t imagine the damage it does to a child being constantly yelled at to go away.

This is why you might see me arguing against mocking religious people - it does nothing to convert them and may just strengthen their beliefs.
It is infuriating to see SO many articles, even from publications that can usually be trusted, referring to this legislation as "commendable" or "significant reform". It is far from it, and we can't expect the couch-dwellers to pay attention while the dying gasps of the 4th estate trumpet this kind of non-change.
"As Snowden intended, the primary impact of the leaks was on political debate inside the United States."

I think the primary impact has been the complete erosion of whatever goodwill the United States had among the citizenry (n.b. not the governments) of her allies.

That obviously doesn't matter in the short term; but so many things don't matter in the short term.
It must be a sign that I am getting old, but your story of considered pragmatic compromise warms my heart. :)
If you are going to the trouble of layering encryption like that you may as well using a MAC with similar construction. It is poorly thought out. I would also be much more worried about scrypt than AES in the future, it has had much less review yet is not layered in the same way.

Also the go reference implementation is not idiomatic, It does not conform to the interface of other encryption functions in the standard library.

EDIT: I was wrong, they do double up on MAC's but do not on the KDF.
Quaxe looks like exactly that: http://www.glazman.org/weblog/dotclear/index.php?post/Announ...

There was a big talk about it at WWX 2015 just a few days ago. Looks very promising.
Yes, mostly.

If you are putting up an API that needs to be available 24/7 you need to have the system sufficiently decoupled so that you can go read-only and make schema and infrastructure changes without needing to stop the world.
Sadly the only way you'll get a better experience from your coworker's DAB radio is to convince them to switch to Radio 3. It's the only DAB station in the UK with a 192kbps bitrate (although only 256kbps is considered to be better than FM under perfect conditions).

(Well, technically, DAB+ would make things a ton better as it uses AAC instead, but progress is moving forward very slowly in rolling it out..)
When you have a queue of N people, with service time T, an additional 1 person causes an additional N*T of net wait-time. So the net weight-time grows super-linear with line length.
I'm skipping bail.
I build apps with it; Haxe => C# on Xamarin...

Edit: Example of hackery I didn't release because it's hackery. But it's stable and it works. I would like to find the time to clean it and release it.
Wait, so I just bought MobaXterm (it's awesome just wish the UI was cleaner and faster) - I can go hand out copies to anyone I wish, legally?

I don't want to do that, cause I'd prefer they get more money, but it's neat to know. (I'll double check the license of course.)
Working out hardware is first part. Getting enough developers working on VR is much more important. I think Google is going clever way here by building up the hype and attracting them early. Also lots of 'traditional' VR people will switch.
Ask HN: Editing functions within JavaScript closure, e.g. Agar.io
I've seen Chrome extensions which remove the site's <script> tag and replace it with a modified version, which isn't ideal because any minor JS change can break it. I've seen using debugger tools to place a breakpoint in the closure's init script, in order to create a global variable to reference it, which works great but requires user intervention each load. And yes, I understand that the point of the closure is to limit / restrict public access. Are there other alternatives to access / modify the contents of a closure, within the context of a malicious user?
You should explain the service on the website itself, not just here. I clicked the link without looking at the comments and was a little confused :)
You're probably right, and my responses probably could be improved. In which case I sympathize even more with job seekers who get silent rejections, and don't know what went wrong. :)
Don't just bring him home, honor him.

Ticker tape parades, a federal holiday, buy 1 get 1 free at Carl's Jr. - celebrate what this man did.
It will be fully public for 60 days before Congress gets a chance to vote for it. Fast tracking just means Congress cannot amend the bill, they can only vote up or down. Opposing fast tracking is essentially the same thing as opposing the entire deal. Our negotiators would be in much weaker positions since other countries would have no reason to believe anything they say.
I agree. Instead of promoting this as something very simple to do with GitUp, we should stop people from having people the urge to change commit messages.

Plus, as even programming data structures are increasingly immutable, I don't see why I would go change the commit message from a week ago.
The quote you're referring to is "The new legislation, while it is commendable as far as it goes, contains some obvious shortcomings."
If he were to come back to the USA and then subsequently be detained, I would join the hopefully overwhelming protests in favor of his release. I am hoping if such a time comes, that there will be a historic level of demonstration advocating for his freedom.
We started basically from scratch once again with a microservice architecture and had no problems. but failed as monolithic one for the 2 years before (and learned a lot about the tech debt).
As long as "home" means "prison next to Robert Hanssen and everyone else who sold secrets to the Russians", then sure.
Let's not kid ourselves, he will get the Manning treatment for the trouble he's caused.
U+0027 (APOSTROPHE) is a string (or character) literal delimiter in some environments, and it might be sane (though inconvenient, for typing) to have an environment where U+2018 and U+2019 (LEFT and RIGHT SINGLE QUOTATION MARK) were character/string delimiters, but there is no sane reason U+02BC (APOSTROPHE, MODIFIER LETTER) should ever be a delimiter of any kind.

This article is about the argument that Unicode Committee recommendation that U+2019 (RIGHT SINGLE QUOTATION MARK) is the preferred character for apostrophe in English text is wrong (since, among other things, it breaks detecting matched pairs of quotation marks), and that the preferred character for that use should be U+02BC (APOSTROPHE, MODIFIER LETTER).
Roughly the upside is that (in theory) the attacker needs to defeat each cipher separately (barring that the combination offers some shortcuts where one cipher interacts with another so that some computational complexity can be eliminated). Downside is that the performance takes a hit (processor/bandwidth [if blocksizes don't match, dunno if this is an existing risk]), which might not be trivial.

Disclaimer: I assume that existing, proven implementations are used and out from one cipher is handed over to another as input, keys and IVs and other crypto mumbo jumbo are not recycled and that the implementation does not offer new side-channel attacks somehow etc etc.

Personally I'd wait for a while to allow more competent people to analyze the library. In the meanwhile one can do performance profiling to roughly calculate how much beefier servers are needed in a real-world scenario due to extra crypting and decrypting :-)
Embedding a Torus (John Nash) video
Well after interviewing for a different branch of IBM last month from one of these posts. I subsequently fell into a black hole of no responses. When one recruiter/ hiring manager is bad at their job, it looks bad for the whole company.
http://en.wikipedia.org/wiki/.%D1%80%D1%84
Go to a specific country, then a year. Try searching for a city or a state, it doesn't work.

I can't now reproduce the earlier behavior I saw where a job title ended up in all 3 search fields.
Another example of that would be the mummies in Egypt that lasted >4k years in a hot, dry place.
When you purchase another company, the difference between its market value (if publicly traded) and the acquisition price is booked as an asset called "goodwill."

If it's clear you've overpaid for the asset, you have to "write down" the goodwill (take the lost value as a loss). One example: http://www.businessinsider.com/hps-8-billion-write-off-is-re...

If it weren't for goodwill, no one would acquire anyone else b/c they would take an immediate earnings hit.
I'm waiting for the first publicly released case against warrant canaries. From everything I've seen, and based on the site you linked as well, they're essentially untested. Other cases involved compelled falsehoods or compelled speech exist, but not in the same or even relatable context: in this case, it's clear that the recipient of the gag order made premeditated statements designed to allow them to make a compelled speech claim that sidesteps a gag order.

I suspect that the judicial system will not rule favorably on such a clear attempt to get around the gag order, and the end result may very well be a limitation on warrant "canaries" being published in the first place.

And, given that it's likely a case involving warrant canaries would be handled with the same level of secrecy as the actual proceedings leading up to it, this could have already happened without us even being aware.
Only a presidential pardon will really suffice to come home without threat of arrest. It may very well happen posthumously, but that of course wouldn't be too useful to him by then.
Great listen!
he leaked Collateral Murder because he didn't like the Army ?
It's random enough, a blurry cat, head down, in the night can be tagged properly, while a nice walking cat in normal daylight conditions but behind open window blind won't be flagged. Not that surprising though.
It seriously concerns me how many enterprises have this problem; clearly, devs want (need?) *nix boxes - why are we still being given Windows boxes?
> You can run the domain but I don't think Samba implements Users and Computers plugins etc. does it?

Do you mean mmc.exe snapins? I have to admit, I never tried.

> OSX is Stealth Unix. Clever.

The integration of X11 into the desktop is pretty poor, and I miss a decent package manager like apt-get or yum. Apart from that, I completely agree. Apple has managed something quite impressive by building an operating system that is a Unix to techies and a comfy, user-friendly desktop to the rest (and to the Unix people).
Thanks everybody, much value as usual!
Building Nvidia DIGITS Devbox [PDF Guide]
Russian billboard advertising contraband hides when it recognises cops
Not at all, but it is still their main source of revenue.
What if there was a warrant canary service that killed the canary for you, unless you kept it alive on a regular basis (e.g., weekly, monthly) by providing a secret key and a message. The feds might be able to order you not to take the canary down, but they can't force you to post another update to a third-party canary to keep it alive. And, if they can, it might be time to revisit the role of our government.
But the full quote would mitigate the raging hate-on the grandparent is sporting.

Yes, the USA Freedom Act is limited. Yes, it doesn't change all the things we'd all like to see changed. "The perfect is the enemy of the good." It's at least movement in the right direction. Let's try celebrating that, instead of (or at least along with) bitching that it's not movement far enough.
Best of luck, would never work.
Awesome Tools for Growth Hacking in One Place
http://math.stackexchange.com/questions/1303322/from-carath%...
Perhaps a minority opinion, but I believe the NSA vastly overstepped and that they need to be reined in (much further than what the USA Freedom Act contains)... but also that Snowden probably should face charges.

Snowden is charged with "willful communication of classified communications intelligence information to an unauthorized person," which -- I think sensibly -- is illegal even if the unauthorized person is a reporter and even if you had good intentions.

I'm not a lawyer, but if he wants to argue that he's innocent or that the law is unconstitutional, it seems like the courtroom is the right place to make that argument.
In case you're interested, the next version of Docker (1.7) supports multi-host networking and dynamic service discovery out of the box.

The whole thing is pluggable and can use various distributed state backends (etcd, zookeeper etc) or IP connectivity backends (veth, macvlan, vxlan, openvpn etc) without changing your application. Service discovery uses DNS so you don't need to modify your application to take advantage of it. It's probably the most significant change to Docker in the last year.

This will make the integration with Kubernetes smoother. Currently Google is forced to rip out Docker's native networking stack because it is not flexible enough for their opinionated networking model. This causes many Docker applications to break in Kubernetes today. That problem should go away with Docker 1.7+ because Google-style networking can be expressed as a Docker plugin, which Kubernetes can load programmatically as part of its orchestration. An added benefit is that you can augment Docker with Google-style networking even if you use Kubernetes competitors like Mesos, Swarm, Cloudfoundry etc.

(EDIT added details more relevant to Kubernetes)
When I was in Japan in 2000 my host family made it very clear to me after talking to some Koreans that they were not Japanese.
Not in Japan, you can buy chef a sake or beer if you want though. I am not sure when is it appropriate however
Hell, is Twitter even turning a profit yet?