skysight-inc/HackerNews huggingface dataset:
First step: make sure to have a plan B ready, before making any other steps in the negotiation process. Look for jobs similar to yours and that pay the same or better. From there, the situation becomes rather simple. If you walk away, the product will become abandonware and will take a big hit in value, say A dollars. Given plan B, walking away would cost you nothing at all. The maximum you can get from the new owners for staying on, is A dollars. The fair amount would be A/2 dollars. If you do not get anything at all, execute plan B and walk away.
Salary negotiations will be a bit different since you're also competing with all local jobs. So you can take on multiple devs and pay them differently if they have similar skills (hard to measure anyway), or you can pay everyone the same and limit what markets you pull from. The former could get ugly if anyone found out.
It's just interesting to me that the iPod touch (which many people think of as "an iPhone minus the cellular chip") follows the design cues of the iPad (which many people think of as "a big iPhone, often minus the cellular chip"). There certainly doesn't seem to be any one right answer so I think it'd be interesting to hear how Apple decided on the rounding they use on the various models.
Former Reddit CEO says the site's about to be purged
We are RocksDB engineering team. Ask us anything: IAmA
Ah, ok. Go binaries tend to be more portable and don't require npm, so I can understand that direction. Thanks for the explanation!
I find that in the age of the open office, working remotely is the only time I'm really productive. I didn't mind working from an 8x8 cube, but my current tiny desk in a maze of desks, all alike, is the pits (cue some nimrod posturing about how this enhances agile/availability/WTFever).

That said, I totally grok people who have a large social component to their dayjob seeing these things as a perk. I am not one of those people. I write code. It it isn't truly important, GO AWAY...
No, what my post was claiming is that the presence of malware didn't hurt my system and wasn't an issue when I browsed the files (on a practical basis).

I understand the potential.

I think it's valuable for you to do this.

You should continue to look for malicious files in a variety of places online.

Good work.
It's fairly likely that rumors of the NSA's ability to 'decrypt SSL' refers to RC4 vulnerabilities.
https://numbers.today

A quantified-self platform that allows you to track your daily routine and change your behaviour based on data. There's an API available.

At the moment, trying to push some features and get more traction. Is getting worse and I'm feeling quite lost.
I am working on an educational project designed to help developers to learn more about customers, marketing, monetization and business strategy.

The end goal of the project is to increase their chances of bootstrapping a tech company, launching a successful side project or a "lifestyle business" while minimizing risks.

My strong belief is that most developers are stuck in a local optima. Depth-first search of professional decisions space is usually limited to software engineering/CS/coding. However there may be many better algorithms to achieve desired personal profits and professional satisfaction. I am trying to uncover such algorithms and communicate required business/marketing/entrepreneurship concepts using language and metaphors from CS/programming.

I have also started writing a book about ethical (minimal negative externalities) marketing for independent open source projects.

If anyone is interested in this and would like some free consulting in exchange for feedback and insights, drop me a note vitalii.daniuk@gmail.com
I think this still runs afoul of the fact that you may not be able to get the cost of understanding below the cost of ignoring. Which, for many is quite low, actually.

This is tough, as most talking points discuss the worst case cost for someone ignoring security. The normal cost for ignoring security is much much lower.
The point is to not have to manage it.
> In hindsight I am very aware that this was a lousy situation to have put myself in, but here we are anyway.

Put it this way, even if you were a founder, you'd still be unlikely to raise an A round, and still be in this same situation. At the very least, hopefully you were collecting salary.

> So I know I need to get out in front of my management team before they make a deal I'll walk away from, but this is new territory for me and I have no idea what would be reasonable to ask for and what would get me laughed out of the room.

Meet with the founders, and state what you want. Even if it gets you laughed out of the room, it's what you want. If they're stand up people, they will have earned your trust through this process, given that you're the lead engineer on the companies product.

The reasonable expectation to set is that the board of the other company will have to approve acquisitions, and those that are non-standard, such as equity grants that have accelerated vesting options are harder to get through. With that in mind, you have to weigh your own leverage.

It's hard to believe that in this hiring climate that the acquirers are not interested in retaining engineering talent.

> How do I best stand up for my own interests here, without being the asshole that ruins the deal for everyone?

Ask for what you want. And if you don't get it, decide what you're willing to live with. If it's zero-sum, you can walk away and look for new opportunities. No one will fault you.
Hey, question for you. Have you found a good "remote whiteboard" solution? Our company is all remote, and this is the one area where things could be better. Sometimes we really want to just get in a room and whiteboard something, but we can't.
Hacker news managed to kill even keybase.io.
Feel free to reach out if you need a little help fixing the mobile usability issues - I'm happy to give some advice. I'm not a designer by trade but there's nothing huge to fix there - a few small tweaks to the existing design would make it readable on mobile.

And for new projects, a quick CTRL-Shift-M in Firefox while you're creating your stylesheets would help verify that things you're adding won't break on mobile.

(Sorry if I'm sounding negative, but your post might be really good and some small design tweaks would make it readable on any screen size and help stop the design getting in the way of your content).
This would be for a cryptographic attack - not someone with the hardware.
Skræp – transforms crumpled scrap paper into gold by 3D Printing
Just a GIF towards the bottom of the article, referring to the possible future feature of re-evaluating past state.
‘Brain scan’ reveals impact links between disciplines
Ah, my bad. So the patch set I linked is something that is still being worked on or just didn't get merged yet?

I was a bit confused as the patch set I linked to were from Feb 2015
To add to that, cheques have unique properties that would be hard to replicate.

You can preemptively write cheques for future payments, like buying a car in two payments: one now and one in 3 months.

It also works for guarantee deposits, or write blank cheques with only the receiver filled in, etc.
U jelly?

I imagine you walk up to Marc and say, "Hey, we are building PGP for the world."

Some days later, $10,000,000 pops in to your bank account.

Edit: Would be considerate if the down-modders would provide an alternate scenario.
Or Ireland, which until two days ago, didn't have postcodes at all!

https://www.eircode.ie/home
And there's not going to be evidence like that any time soon. Software Developer productivity is extremely difficult to measure. It has very little to do with how busy you manage to keep yourself.
Troy Hunt comments on this. If it's a non-important site that shares a password with another important site that is an attack vector (I'm sure you aren't doing this but many users do). So if you stick to all non-important sites get weak passwords you'll probably be fine you just have to make sure there is no attack vector to another site of more importance.

I.E. If one of them has the last 4 digits of your credit card then they can call customer service at another more important site and get more information building to a full scale attack. It could happen in a similar way to what happened to Mat Honan http://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/

However, that example leads to what the article is talking about. If it's a low probability then users figure the risk is worth it.
Founders here if there are any questions!
I've found that installing Ghostery has vastly improved my web browsing experience.

It's not just adverts, though - the amount of pointless javascript on web pages these days is almost embarassing. The concept of optimizing web pages for quick loading and judder-free browsing seems to be completely lost on today's web designers.
For those of us who only drive out of necessity, it's effectively six weeks of vacation that the employer doesn't need to foot the bill for. I suppose people who enjoyed commuting would not view it that way.
So then there really isn't evidence is there?
Amazon hasn't dropped the ball at all. In fact, this has been a huge success for them. This was entirely a marketing ploy, and now everyone is talking about it.
About the plugins, you are right, it's weak anyway, my bad. To better answer your question this is a paper explaining some critical vulnerabilities in the concept of password managers (let alone the implementation) http://devd.me/papers/pwdmgr-usenix14.pdf
Working on a Bluetooth-enabled, 8 button, one-hand chording keyboard. It appears as a keyboard for typing and a wireless serial port for updating the mappings between chords and keys. Apps for Android and Windows make it easier to update the settings. I'm just planning to use it with my tablet (stuck onto the back) to make typing easier. I also love using it for EagleCAD shortcuts when making PCBs on my Surface (the pen input is nice enough when making pcbs to not opt for a laptop). Here's a picture of it: http://i.imgur.com/91nsGba.jpg
OPM hack included 1.1M fingerprints
Modern economics seems to be relying on more and more empirical data rather than theory. I think this is unfortunate. If you throw a pebble into the ocean, you cannot measure that this pebble increased the water level but no one would argue otherwise. No empirical data necessary and it would be silly to argue anything else. Similarly, artificially increasing the cost of hiring labor will decrease the quantity demanded.

Put another way, if one were to ask an economist how does the price artificially increasing the price of X affect the quantity demanded of that product, an economist would easily be able to answer without much hesitation or inquiry into the product X. I think a higher burden of proof should be placed on those claiming that artificially increasing the cost of labor doesn't affect quantity demanded. Since there are never any real controlled experiments in economics (states or municipalities all have their own history and other factors at play), you have to rely on theory.

Someone can agree for an increase in the minimum wage, but at least be honest about it being based on a moral trade-off between decreased employment opportunities for those whose labor is not above the current clearing rate and the benefit to others who would keep their jobs and enjoy higher pay.
Pay attention to the license. This is not open source as it's for noncommercial use only. Still interesting, just saying.
It does seem to work that way, I'm sure I've signed up for Verified by Visa but I've only had to use it once or twice. Which makes me happy, because I hate it.
Modding one of these bebs for that sweet sound of tubey goodness: http://www.head-fi.org/t/671688/bravo-v2-review-tube-rolling...
Super good headphone amp even before mods, keeps me nice and distracted from this thing http://engertlab.fas.harvard.edu/Z-Brain/, a website you can look through the spiffiest images of zebrafish brains, you know.. for whenever you're bored beyond human understanding.
I have it firsthand he dressed that way prior to Berkeley. It's just Larry.
Your Google Searches Could Help the FDA Find Drug Side Effects
The "lightning deals" seem to be either uninteresting, or already 100% claimed. (Though the day's not over, and they do seem to be adding new items periodically.) Has anyone built an app to watch upcoming lightning deals and snap them up at superhuman speed?

BTW, there's also a section of 30%-off items—mostly clothes and luggage—that doesn't seem to have the "lightning" quantity limits. http://www.amazon.com/b/ref=pin15_us_gw_d_p3_ld_softlines?_e...
I get what you're saying, but living in a sketchy cell reception area makes me cringe at the thought of requiring SMS (let alone security concerns surrounding SMS as others have already mentioned). A mobile app instead solves it as near as I can tell... assuming you're okay with requiring a mobile device.
20% of contributions to Linux are by people who aren't backed by corporate interest. That's better than most open source projects of even moderate size.

All modern kernels are going to be complicated. Simple kernels aren't efficient or full-featured, that's just how the real world works.

There is no prioritisation of people who are and aren't backed by companies. All patches are judged by merit. And anybody can give a major contribution (just take a look at the massive amount of work going into kdbus which is being worked on by many different people with different interests).
So now you're gonna go pick through months of comment history for a comment or two and take it out context? Why not evaluate how my love of Java and type-safety informs my desire for the segregation of society</sarcasm>. You're probably one of those Twitter mob types that tries to get folks fired for their opinions, aren't you?

I bought a firearm because I like shooting little paper targets. I can legally carry a loaded firearm in my car, but I don't, so what does that tell you? I have a single handgun, so I must be a homicidal maniac, right?
> I have to point out though your assumption is that the product is the key asset a buyer will be interested in. Is this the intention of the founders as well? Because counter-intuitive as it may seem, the new company might be more interested in the people who sold this product than the thing itself

This is a really good point, which I'm having a difficult time answering without going into more detail than I'm comfortable revealing even with a throwaway account.... Let me put it this way: I believe the tech staff, while skilled and a great team, is probably too small to be worth acquiring for its own sake -- (But maybe I'm wrong about that? It's 3 guys, one of whom is a long-term contractor rather than FTE) -- and the non-tech staff (including the co-founders) is, um, I'll just say not a likely acquisition target IMO.
This is an authoritarian way of thinking. Basically, I prefer to be onsite therefore everyone should be onsite. You make the claim that the author fails to substantiate the benefits of working remote, but you also failed and just countered with your own opinions.

BTW - since I work from home I just got to on a 20 min jog with my wife. Yes, we do go outside.
That's absolutely true. I'd also like to add that there is an explosion in ancillary imagery and video that often measure in megabytes. Do we really need all those parallaxed full-screen background images?
I just sent an invite to your adlervermillion address.

To be honest I haven't found their service to be useful in my day to day life. I am mainly inviting you out of sheer guilt, because I have been accruing invites and not using the service.

"Use your keybase account. There are insecure children in the US that write their passwords on post-it notes." ;)
The problem is that in order to do true risk pooling, you need to be able to charge based on risk. The ACA (Obamacare) has eliminated much of that making the cost the same for everyone at a given level. And it turns out that many healthy people have continued to opt out and many of the new enrollees are people who couldn't get coverage elsewhere.

None of this is a judgement, just the raw math of the situation.

Here's one sample but the problem is nationwide:

"“Our enrollees generated 24 percent more claims than we thought they would when we set our 2014 rates,” said Nathan T. Johns, the chief financial officer of Arches Health Plan, which covers about one-fourth of the people who bought insurance through the federal exchange in Utah. As a result, the company said, it collected premiums of $39.7 million and had claims of $56.3 million in 2014. It has requested rate increases averaging 45 percent for 2016."

Ref: http://www.witn.com/home/headlines/-Health-Insurance-Compani...
History of Chat Services [pdf]
That was the first version. There's quite a big difference between that version and the one that got merged (it underwent a complete rewrite because the original version was insanely unsafe -- I'm surprised it even worked on my machine).
The fatal problem with this plan is that all end user devices are by now hopelessly compromised. Take a look at the Snowden documents, which are now years behind the state of the art.

It doesn't matter if your crypto is both bulletproof and easy to use. They'll just break into your phone or your laptop through a side channel and read the key. And you won't even notice.
I have a very good friend who has had terrible experiences with getting reimbursed for legit claims via FU. He pays for the most expensive plan, too.

Based on his experiences I'd rather go directly to an insurer like Oscar.
This.

Corporation will push you content from their sever, including agressive advertisements.

It's (sadly) up to the user to filter them on his browser, on the front-end.

I manually disable my ad blockers on websites I choose as appropriate. The minute one of those website use an agressive ad that covers the content or a popup, it goes back on the blacklist.
The point is flawed. If you aren't going to listen to 90% of your library, why even waste space for it? For that 0.00000001% chance when you remember you loved Fall Out Boy as a teen and want to relive those memories?
You have no idea how complicated sending message to Members of Congress is.

There's no way to email legislators directly. The only way is to fill out their forms. Each form is unique, and many have CAPTCHAs.

To do that, we first had to develop an open source dataset that describes to a computer the steps necessary to submit messages via each contact form for 538 representatives. That was quite a lift, but was made possible by about 100 volunteers who chipped in. The dataset is called contact-congress, and is online here: https://github.com/unitedstates/contact-congress

Then we had to create a system to fill in the forms based on the dataset. The system we designed is called phantom-of-the-capitol and it does that by firing up 3 browser windows on an AWS instance each time a user submits a message. If the legislator has a CAPTCHA, we take a screenshot and return that to the user. The code for that system is here: https://github.com/EFForg/phantom-of-the-capitol
That's true, in fact, rhetoric is probably your best bet by far if you want to convince people.
What an unfair pile of fear, uncertainty, and doubt, to lob such a vague accusation. Downvote.
>Before we can compare remote and local teams productivity we need to solve the problem of measuring developer productivity.

In the blog post, there's the phrase "more productive"... note the qualifier of "more". In this thread are additional examples posters using the phrase "more productive".

More than what? It implies a mathematical relationship right?

If you want to argue the merits of remote workers, you can't have it both ways with the word "productive". On the one hand, everyone can just throw around the phrase "more productive" when it's convenient to the remote-work narrative but then also discount it as "unmeasurable" when we're looking for the type of concrete evidence to satisfy managers.

If that's the state of discussion, these mixed messages reduce to "Remote is good because it is MORE of This Unmeasurable Thing". The discourse on this topic needs to be higher quality than that.
One must have the domain name (and in fact, the entire URL) before one can access the content (A).

So, B actually came before A (assuming the article was only accessed over the Web [eg. not also handed out in print on the floor of a prop trade desk]).
And it's illegal for companies to sell plans across state lines. Remove that restriction and the situation would change quite a bit.
I did! I was discussing this with my colleagues.
While I agree that RC4 should die in a fire, this attack seems impractical to me.

> To successfully decrypt a 16-character cookie with a success probability of 94%, roughly 9x2^27 encryptions of the cookie need to be captured. Since we can make the client transmit 4450 requests per seconds, this amount can be collected in merely 75 hours.

How likely would that amount of network traffic and energy consumption cue the potential victim that something malicious is going on?
But this is a double-edged sword, is it not? I mean, "the site the developers want to build" will invariably be a site with no ads whatsoever. It loads so fast! Look at how clean the code is! Then everybody loses their job because there's no actual revenue.

In theory, reconciling these opposing forces should be what top management does. In reality, top management is usually too terrified to do so, because they're subject to the same pressures the sales people are: they have corporate masters of their own, demanding a revenue chart that always drives up and to the right, who will cheerfully throw them overboard the moment they appear to not be 100% behind that goal. So it's ads ahoy and UX take the hindmost.
What has New Horizons discovered during its flyby of the dwarf planet?
The underlying issue here is not programmatic advertising, but the proliferation of content itself. The cost of setting up a publishing operation is effectively zero, and anybody who wants to publish online is. The value of an impression will continue to slip as long as it more and more content becomes available and more of it is consumed.

It is unrealistic to expect or hope that the supply content should be restrained. The other side of the equation is advertiser demand, and that is restrained by complexity at this present moment: The best DSPs (demand side platforms, or ad-buying tools) are typically met with very high minimums (10K/month to 250K/year) because the cost of supporting advertisers with account reps is so high. Yes, ad tech stacks are also pretty damn hard to build, but most at this point are built for scale.

My vision for my company is to democratize the advertising process so that access to the best tools, talent, and strategy is available to anybody with a message to share. If we can pull that off well, anybody that aggregates a quality audience with media should be able to benefit from their effort. Eventually individuals should be able to freely pay for the content they choose with their attention itself, detached from the act of consuming a specific piece of content.
That's very cool. I think I would love to have something like that to go on to the back of a gamepad sort of deal. Working in VR is difficult when you have to change input devices. The gamepad is best for navigation, the keyboard is best for text input, the mouse is overall bad.
> I'm embarassed to say I continue to be shocked by how images from space can surprise and delight.

Never feel this way. We're tiny, really tiny and that's impressive and scary.
I've been on it for a couple months now. I've used it twice: once was to exchange AWS IAM keys for a consulting job and the other was for someone to give me their credit card details.

But in most cases it's just to track someone.
No, can't say that I have. We sometimes collaborate in realtime on a Google doc, Trello card, or Screenshare on Hangout.

Maybe we have a more show-and-tell-and-iterate approach.