skysight-inc/HackerNews huggingface dataset:
SEEKING WORK - Remote
Experienced (3 years) iOS and React Native mobile developer

My name is Nicoara Talpes .

Experience: I have build 3 big iOS apps for clients in the past two years. I have had my own startup which did some big data analysis, I have been part of Toptal network of highly selected developers. I am a full stack developer.

Location: Romania Remote: Yes
Willing to relocate: Maybe
Technologies: iOS Swift for three years , React Native for one year. For back-end: ruby on rails, asp mvc c# for four years.
Resume: http://linkedin.com/in/nicoara-talpes , here are portfolio images
Homepage: http://nicoaratalpes.ro (with blog)
Email: nicoara@nicoaratalpes.ro
Portfolio: on my linkedin
Try a modern ThinkPad with Intel graphics. I promise, it will work great.
> how does the plumbing work?

Hoses are flexible...
Mh, I have a rather aggressive stance on these kind of incidents, no matter if they are availability or security related. You can fish for them, you can test for them, and there are entire classes of malicious code you cannot find. For everything you do, turing complete code can circumvent it. There's a lot of interesting reading material going on in the space of malware analysis regarding sandbox detection, for example.

So stop worrying. Try to catch as much as feasible before prod. Then focus on detecting, alerting and ending the actual incident. If code causes an incident, it't probably measurable and detectable. And even then you won't be able to catch everything. As long as a server has behavior observable from the internet, it could be exfiltrating data.
Yarn caches locally, doesn't it?
From the Github issue:

> Beginning at 18:36 GMT today, 106 packages were made unavailable from the registry. 97 of them were restored immediately. Unfortunately, people published over 9 of them, causing delays in the restoration of those 9. We are continuing to clean up the overpublications. All installations that depend on the 106 packages should now be working.

Hard to believe less than a hundred packages cause so many issues. NPM's dependency hierarchy is pretty insane.
Don't store libraries in your project's repository. It bloats things like hell and makes it difficult to navigate the change sets. Set up your own library cache. Store that cache in its own repo if that floats your boat. Then all of your projects can get their dependencies from your cache.
yikes! yes, fixed. my default autocorrect language is not English, so I’ll just blame that.
iOS refuses to run executable at all if unsigned. In fact, iOS restricts regular apps from calling fork() and exec() so you won't even have a chance to try.
This is quite nice, although I think I'm too familiar with to topic to know whether it's actually useful to someone trying to learn this stuff :)

Although I think that "explorable explanation" is a bit of a grand claim for this sort of thing. The explanations (the connections, reasons, mechanisms, etc.) are given in the text, which isn't any more "explorable" than a book; whilst the "explorable" parts (the graphs/diagrams) aren't really "explanations" since they have no depth: the relationships are hard-coded, so the user can only adjust some parameters and get told what the "answer" is for that parameter.

Many years ago I tried to make a more in-depth "explorable explanation" of some concepts from thermodynamics, using the Smalltalk-based EToys system. I did this by setting up many small simulations, e.g. of "atoms" bouncing around in containers, of pistons and thermometers, of falling weights, etc. The behaviour (scripts, methods, etc.) of each object could be inspected, and mostly involved simple stepped-integral scripts like those in games (update position based on velocity, update velocity based on acceleration, etc.). "Measurements" would be taken of the aggregate behaviour, e.g. of a piston's position, and plotted against some other parameter (time, pressure, velocity, etc.), to produce graphs which (hopefully) demonstrate the relationship described by the text. These were "explorable" since the user had complete control to inspect and modify the dynamics of the simulations and see what happens.

Unfortunately I ended up abandoning the project once it maxed-out the RAM of my OLPC XO-1, since I was no longer able to load and save it :(
Not that I'm a manager but I enjoyed High Output Management by Andy Grove. It's short and sticks to KISS, I don't really subscribe to the belief that dealing with people is something you can learn from books -- The Art of War won't kindle a non existent fire, instead it amplifies something innate. A lot of methodology seems overly rigid and stiff to be useful for anything but sounding good in theory and failing in practice.
Even if (which it doesn't, the term is not forbidden), why should npm care?
Server side, yes. Client side, not so much.
Most of the actual content (the letters etc) on the Berkshire Hathaway site is in PDFs. Many are long documents with no navigation built in that are very awkward to read on mobile... As much as it's a nice example of a functioning barebones UI, it's not overall a great experience if it's main thing is serving PDFs. Unless I'm missing something, which I wouldn't mind learning, of course.

I agree with you about just leaving the damn keyboard alone though.
> I assume this only works for single-story homes, e.g. in the New Orleans “shotgun” style?

It works for multi-story buildings as well. This home in the UK has a basement, ground floor, and a loft.[1]

> how does the plumbing work?

"Services are connected through "elephant cabling" – a flexible cable that carries electricity, water, and sewage. For safety reasons, the house only uses electric power and no gas." [1]

[1] https://www.dezeen.com/2014/10/15/baca-architects-amphibious...
But it's published by "puradox", not by "floatdrop"!
Location: Bucharest, Romania

Remote: Yes

Willing to relocate: Maybe

Technologies: iOS Swift for three years , React Native for one year. For back-end: ruby on rails, asp mvc c# for four years.

Experience: 3 years as a mobile developer. I have build 3 big iOS apps for clients in the past two years. I have had my own startup which did some big data analysis, I have been part of Toptal network of highly selected developers. I am a full stack developer.

Resume: http://linkedin.com/in/nicoara-talpes , here are portfolio images Homepage: http://nicoaratalpes.ro (with blog)

Email: nicoara@nicoaratalpes.ro

Portfolio: on my linkedin
If you didn't mention the "getting offensive words" part it wouldn't even cross my mind as i'd pronounce NGR as En-Gee-Ar :-P.
> Which case are you referring to?

Martinez-Fuerte.

> Also, I can't tell if you're nitpicking my summary or if you actually do believe there's a 100-mile-wide Constitution-free zone hugging the US border.

“100-mile Constitution-free zone” is a simplification that, like any simplification, is somewhat inaccurate; there is a broad (unclear as to it's maximum limits, the 100 miles is current executive policy) in which the courts have allowed, in fairly broad circumstances, substantially lower standards for search and seizure than are otherwise Constitutionally applicable in the US, rendering the protections of the Fourth Amendment in practice much weaker.
I got used to the touchpad with time and the touchpad drivers have improved, too. It's really not a big deal at all after a few weeks.

HiDPI is generally pretty decent although it's slightly annoying that different layers of the graphics stack (Xorg, GTK2, GTK3, etc.) have different mechanisms for tweaking the scaling but with a few evenings of work, I have everything dialed. A small price to pay for years of use to come. The Arch Linux wiki is super helpful for this.
Last time I used Tk was with TCL and yes, it was all Motif (or notif or whatever).

I should probably take a look at it again if it can now do native components. I'm really sick of these bloated new desktop frameworks like Electron.
That's the same as protecting just the login page with https. What prevents code outside the form page from replacing the link which goes to the form page?
> Exactly. Hardware rental is one way to tackle provisioning. You're still left with all the other tasks required to bootstrap your own datacenter. As you build up the roll-your-own solution, you end up in the same place: hire IT headcount.

For a startup, building a datacenter isn’t required in the beginning.

I meant, literally renting existing hardware, in an existing datacenter. This is just a single step from renting VMs at AWS or GCE, but already improves costs significantly.
Build your iPhone and Android native app in 5 minutes
The "portion of books" doesn't matter at all, the economic incentives do. A few sentences later: "For all but a tiny few, it’s nearly impossible to make anything even approaching a living from writing literary fiction."
They sweared this would never happen again.

Then it happened again not two months after left-pad. And now it happened again.
You see lots of floating structures in marinas. They're attached to heavy piles, and go up and down with the tide. They're always floating, never resting on the ground. The proposal here is a watertight hull which very seldom floats.

That's a maintenance problem. It has to be kept watertight for years or decades between uses. Modifications to the house have to maintain hull integrity. It's hard to test the watertightness. The experience of Louisiana levee boards indicates the maintenance won't get done. People who have a house like this might have it sink, or worse, sink unevenly and break apart, in a hurricane. Since it's supposed to ride out a storm, it would probably be occupied.
Colin Percival found a similar problem with Intel's implementation of "HyperThreading" back in 2005:

http://www.daemonology.net/hyperthreading-considered-harmful...
Ask HN: (CAN) Failed out of grad school after a year, age 30. What next?
I enrolled in an accelerated graduate business program with an accounting specialization. I missed the GPA cutoff for Year 2 and will have to withdraw without a degree. Before this, I had spent 3 years as a business analyst (writing requirements, setting sprint schedules, doing QA for deliverables) for a small SaaS company.

I went into accounting because I managed project budgets at my last job and thought it might open doors to bigger, more stable companies than the one I was working at; there were 5 people at the company and so advancement wasn't really possible without being a full-stack developer. Before enrolling, I was looking for jobs where I could do BA work on larger projects with more responsibilities. I wasn't having much luck and ended up accepting the admission offer out of a sense of wanting to move on. That was a mistake.

Accounting ended up not being right for me at all; academic accounting practices were much more abstract than what my day to day experience led me to believe.

I'm looking for advice on how to recover from what has been a demoralizing 12 months. I know HTML/CSS, WP, and enough jQuery to build your average marketing website. During the school year, I volunteered for a nonprofit and built them a custom WP website. It's not the type of work that I want to pursue at age 30 though; Squarespace/Envato Themes or a 20yo bootcamp grad can happily do this work much more cheaply.

I am considering the following options:

- Salesforce ADM 201 certification. I hear LinkedIn recruiters do look for those, and CRM knowledge may open doors to larger companies that are looking for business-minded people who aren't 100% technical.

- Desktop Support job. Not sure if I can make a compelling case to an interviewer as to why I want this, aside from "it's a stepping stone", which I'm sure they love hearing :)

There are probably others I haven't thought about yet. Turning to the community for advice. Thanks.
Ah yes, it has both, i forgot about them - although i lack a way to use them :-P. And TBH i was thinking in terms of something bootable :-).
Sure.

https://www.cvedetails.com/product/156/Apple-Mac-Os-X.html?v...

https://www.cvedetails.com/product/32238/Microsoft-Windows-1...

https://www.cvedetails.com/product/17153/Microsoft-Windows-7...

But everyone here is already thinking about the string of recent macOS vulnerabilities. Even just in the past few months Apple has been hit by a bunch of fairly major vulnerabilities while Windows hasn't been in the news for a while. What bugs me though is that a theres a handful of the Apple vulnerabilities that weren't caused by an implementation error, it was from a flawed design.

In particular the most notable example of this would be the API used by system preferences that would let any user create arbitrary files with arbitrary permissions owned as root. Obviously the first choice with that is to create a setUID binary but even if the permissions weren't user provided this should be something that should jump out during the design process as a bad idea.

https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-...

As for a comparison of just recent newsworthy macOS vulnerabilities compared to Windows I'll just cite Hacker News as far smarter people than I have commented on this subject to death.

I just used the following query and only looked at the links on the first page.

https://www.google.com/search?q=site%3Anews.ycombinator.com+...

https://www.google.com/search?q=site%3Anews.ycombinator.com+...

macOS total karma 2345

https://news.ycombinator.com/item?id=15410953

https://news.ycombinator.com/item?id=15807913

https://news.ycombinator.com/item?id=15828767

https://news.ycombinator.com/item?id=15864637

https://news.ycombinator.com/item?id=15804726

https://news.ycombinator.com/item?id=16043578

Windows total karma 304

https://news.ycombinator.com/item?id=815265

https://news.ycombinator.com/item?id=2758554

https://news.ycombinator.com/item?id=10889728

https://news.ycombinator.com/item?id=13577709

The macOS results span the last 3 months, the Windows results span the last 8 years. Mac sales only provide about 8% of Apple's revenue which is overwhelmingly dominated by iPhone sales and app store revenue. macOS has become the red headed step child and it's really starting to show.
Yarn was the only thing that made npm get off their collective asses and do something about their dog-slow issue-ridden CLI and services.
Also a pioneer for the trans community. What a fantastic person.
One thing I'll reiterate: as Greg mentioned, the backports to kernels prior to 4.14 are derived from a rather old KAISER version. They do not match what 4.14 and 4.15 do. This has several consequences.

1. They will have bugs. There's a reason PTI was heavily modified from the old KAISER code. They will also tend to diverge from upstream just because the code is so different. This means that the next time low-level x86 changes need to be backported, it'll be a huge mess.

2. There is only minimal upstream support. I, for example, am already largely ignoring two bugs in the backports that aren't in the upstream version. Why? Because I have no affiliation with a distro using an old kernel.

3. Contrary to its marketing, KAISER does not effectively mitigate the old kASLR leaks. PTI very nearly does, and I intend to improve it further once I find some time to do so. I doubt those improvements will get backported to pre-4.14 kernels.

4. At least some versions of "KAISER", on meltdown-affected hardware, expose the kernel stack to userspace. If that's not usable for rooting a box, I'll eat my hat. KPTI doesn't have this problem.

If you can put pressure on your organization or suppliers to update to 4.14 or better, please do so. Red Hat, especially, should seriously consider moving to 4.14 for RHEL 8.
No. That's not what I'm talking about. That's just a way to host your own snapshot of the entire npm registry. Not a good way to introduce the decentralization feature of IPFS.
I think the point was simply that there is no understanding of physics without the math, as the math is the only accurate description of the physics involved. Admittedly, "trusting math" was a poor phrasing.
i think the key take away in your story is to not take a 'fairly large amount' ... (without having experience, etc.)!
The "literary critic" should be revived as a website, or as a feature of existing websites like GoodReads. I have no idea what recent fiction to read, and would love to just enter a list of authors ("Cormac McCarthy", "John Darnielle") into a search engine and find critics to follow...
Setting an internal mirror for a registry is often a hassle quite a few companies cannot afford, as it adds more operational burden/costs.
A bit like PHP in that way?
Correct.

Because probably every country has some words they don't like.
An Inside Job: Remote Power Analysis Attacks on FPGAs
Model 3 production choices
(18) SIR NIGEL 2 DO BATTLE WIT MRS MAY?
The best comment made on that blog post was by Eben himself:

"One almost wishes that they’d stuck with the original name for the KPTI patchset: Forcefully Unmap Complete Kernel With Interrupt Trampolines.

https://www.theregister.co.uk/2018/01/02/intel_cpu_design_fl... "

Now that's funny!!!
The problem isn't with that one tool alone. The problem is with the entire ecosystem, in which all the tools get regularly replaced by "better" ones. It all adds up.
They have 2 different functions with different names that do different things. They call the method of blocking you prefer "mute".
I had a similar experience, another decade and a half back: I attended a Hypertext conference ~30 years ago, where he was doing demos. [...] From his comments, I got the distinct impression that he was disappointed and a little saddened that we had not progressed further than we have. :/

Reminds me of a retiring librarian, who went into aero/astro circa 1960, because they wanted to be part of humanity's exciting push out into the solar system... then watched their field stagnate for their entire professional career, and retired wishing they had done something else with their life.

Hopefully AR/VR will shake up the collaborative tech space. It would be really sad to still be stuck around here for another decade or three.
Curious, what would you rather do instead? Is there an opinionated React framework you could use?
F by xv v
No. World heritage sites are of archeological interest, whereas marking and preserving only some internet properties perhaps less than a decade old, would only play into the hands of sycophants bent on gaming the UNESCO system for personal gain.

The reality is that an UNESCO site is something that warring factions should agree to avoid destroying with bombs and guns, even while they eviscerate each other amid very real bloodshed.

You can’t make such a promise that destroying a certain server in a data center may or may not cost the world something valuable. Furthermore, there are not warring factions in the equation, to threaten precious data centers housing your precious data.

You would waste UN resources on... bought and sold consumer products? Why not a clutch of warez d00dz cracked proprietary software? Who decides what world heritage is?

The wrong kind of war might seek to destroy your precious garbage, if there’s no obvious reason it’s special.
The app in question is Pythonista. it’s kind of wonderful.
The tk native widgets don’t look good, because they don’t follow the OS’s user interface conventions. The most notable issue is that widgets don’t have the correct padding or font, even if they’re being rendered via Cocoa (for example).

The example layout here [0] may be functional, and rendered by the platform, but it does not look “native” because the text areas are shoved right up against each other.

[0] https://user-images.githubusercontent.com/6771275/28181423-d...
Listen to the Mechanical, Musical Sound of Quantum Computing
There was a floating house for a floodplain on the Thames river featured on Grand Designs: https://www.dezeen.com/2016/01/20/baca-architects-bouyant-am...
You could arguably come up with something similar for backends. It's just a story of a malicious and sneaky dependency.
Part 2: Cryptocurrency Linear Arbitrage
This is why you should depend on exact versions whenever possible. But even if you do, your dependencies most likely won't, so you are screwed anyways.

The caret syntax for auto-upgrading to the next minor version is the open door to a world of bullshit.
HP Omnibook 600C. It has a 75MHz 486DX4 and 8MB of RAM.
That's what I don't get about these arguments in support of text editing on iOS. The mouse isn't bound to the physical dimensions of the screen. It also doesn't require you to put it atop/obscure the screen to work, either (unless you're doing something very wrong).

I'm sure there are zippy ways to edit text on iOS, but like you, after using a mouse, hell, even a trackpad, I think it's soooo much quicker using the latter.
No. The Byrds song, which is itself an excerpt/phrase of Ecclesiastes, does not have phrases like "and a time to pluck up that which is planted"
Join the Muse (YC W12) as a QA Lead and help 50M people with their careers
One can argue that HBO was the Internet of the 90s.

They had a separate subscription and being a premium channel allowed them to experiment with content that would not be valid or even allowed on basic cable yet alone broadcast TV.
Oh, also you have at least such an authorized source of code unless you have writtem every bit of software yourself. You might be unaware what the sources are.

If you use Google Chrome with auto updates, for example, you've made Google an authorized source of code for your system. More general, your browser developer gets to decide for you what technologies your browser supports by default.

Most OS' facilitate automatic or semiautomatic update mechanism. Then the organization who develops these updates and sends them to you is a source of code, that is authorized by you by virtue of you installing the OS.

A gatekeeper is a good thing if you have the last say. So you choose one that works in your interest and you decide whats good for you when you disagree. And you do have gatekeepers that work, but they work in your interest and for you so you don't notice nor complain.

Not having any gatekeeper means basically letting run any code on your machine. I detailed before why that is a bad idea from the security perspective and for it's other consequences.