skysight-inc/HackerNews huggingface dataset:
OneSignal | DevOps, Systems, Full-Stack | San Mateo, CA | ONSITE | $140k-$165k Salary + 0.20%-0.35% Equity

OneSignal provides a simple interface to push notifications, letting content creators focus on quality user engagement instead of complex implementation. Our goal is to democratize push communication for everyone from individual blogs to top tier apps.

We are looking for talented software engineers from any background. Our stack includes Rust, Ruby on Rails, React.js, PostgreSQL, and Redis. Experience with our specific tech is not required; we are simply looking for talented people with a big appetite for learning and shipping quality code.

Specific roles and benefits can be seen on our careers page: https://onesignal.com/careers.

To apply, please send your application to eng-jobs@onesignal.com.

Interested in how we leverage Rust for our application? Check out this blog post! https://onesignal.com/blog/rust-at-onesignal/
Doubtful they will destroy data. Instead, it will most likely be a flag that's flipped to indicate "deleted" status.
Does using Disqus mitigate this?
GitHub says bug exposed some plaintext passwords
I haven't done any shader programming, but can we even say that about those languages? It might just be my own inexperience talking, but for anything more complicated than matrix multiplication the innards of a GPU seem just as opaque as a CPU.
I doubt that the intent was good at all. Various companies have been trying to get legislation to let them go after (with legal action) websites holding or referencing "illicit online content" (not necessarily sexual in nature) even when such content is user generated. This is just another evolution of SOPA and PIPA carefully given a name that would make fighting it political suicide. It's a fairly common tactic. Even the organizations trying to fight online predation say that at best, SESTA won't do anything to help and more likely than not will hinder their efforts.
I still think there are huge potential market for iPhone and Mac. Especially on the Mac, the problem is Apple is a little slower without Steve Jobs.

I think the past two to three years they have been way too distracted with Apple Park, arguably the biggest Apple product since the iPhone. I think next two to three years will be important to show if they could really steer well without Steve. But I am already not liking their touchbar and quality issues on mac and FaceID, notch on iPhone X
One would hope, but these aren't shady Chinese knockoffs having these problems, these are Nintendo and Apple products. Part of the problem, though, is that the worst-case scenario is so much worse than before. If your regular USB accessory is shoddy, it just... doesn't work. But since USB-C has the capability to transfer tons of power, having something go wrong can have much bigger consequences. Also, as mentioned in another comment, you can't have things like a hardware fail-safe to prevent a certain amount of charge from going through a port, because they're intentionally left under the control of software, because sometimes maybe you'd want that much power going through there.
Have a business associate who was debating between a 2015 and a 2016 model, while both were being sold by Apple.

I've been meaning to tell him just how much he dodged a bullet, by going with the 2015.

P.S. I see now, this problem pre-dates the 2016 models.

Still think -- keyboard failures, etc. -- he dodged a bullet.

But this behavior -- well, it would freak me out a little.
So what happens if a hacker hacks company A and uses their server as a jump box to hack company B? Is company B allowed to hack A since their machine was used in an attack?

Or even worse, what if company B is mistaken as to who attacked them? If they "hack back" as advocated, but against the wrong target, are they liable?
Murky waters with cluster? No. Just being concerned about corporate liability / risk. I might have spent too long working under business folks, as some companies won't consider using open-source software unless there is a vendor they can call at 3AM and complain at. I'm saying that if someone needs distributed transactions in cluster, and they want to run my software, I would take that call and help them fix it.
Yes, the major browsers ship the HSTS preload list compiled directly into the build. That's why it can take months for a domain to, once submitted, actually be preloaded across a majority of users -- because the browser nightly/beta/release build cycle alone is 2-3 months, plus the time that it takes the average user to update their browser.

Incidentally, this is one of the major advantages of HSTS preloading at the TLD level, namely, that all .app domains are already preloaded and have been since 2017.
It's like Robin Hood running from King John's guards and barging through other people's homes. Some would definitely be pissed.
I've been watching this project for a while, it seems pretty interesting. Does anyone here have experience operating this in production?
There's been a trend in all the mainstream entertainment divisions to avoid risks and maximise profitability. The result is bankable but bland and homogenised "content".

There used to be indie scenes in music and movies that would kickstart the careers of the next wave of creators. Ironically, making the tools affordable and accessible has killed that next wave, because success depends as much on access to mainstream distribution and monetisation as it does on creation - and there's far less money available to distribute, promote, and monetise non-mainstream projects than there used to be.

Not only is there no money in true indie originality now, there isn't even much chance of exposure.
> Zuckerberg also cautioned users against clearing cookies in their browser, saying “it can make parts of your experience worse”, and adding, “Your Facebook won’t be as good while it relearns your preferences.”

Sure...
iMessage is good...for now. I don't know about others, but more and more I notice little quirks and bugs, like messages being out of order, and syncing with macOS can be iffy. I really hope they work to improve it in the next year or two, because it's starting to wear on me a bit.
just block ads and use FBP, isnt the problem solved?
The conditions do change though, even if the buildings don't: you'll gradually be surrounded by different people as prices climb and climb. Perhaps, sooner or later, they'll look down on you as the undesirable they don't want nearby.
The not-so-secret life of boarding passes
"Bankability" is a variable in the risk-reward equation, certainly.

I think I was more trying to get a point across that most of those probably were perceived to be relatively "low risk" original or not.

If you compare apples to apples you could probably find an equal number of relatively bankable directors/stars making mostly original stuff.

Guillermo del Toro is a big one in my mind thinking about this decade; Paul Feig and Edgar Wright also come to mind as bankable directors. Between them you can probably point to plenty of original films that might stand toe to toe with ET or Ghostbusters.

Don't forget to take off any rose-colored glasses when comparing of course; there's always that nostalgic factor when comparing one's childhood favorites to today's output.

If there is a big difference between the Top 10 list in the 80s and the Top 10 list this decade so far might be that audiences rewarded the big experiments in ET and Ghostbusters a bit more fondly at the box office than any equivalents this decade, but mainstream favor is always the hardest part of that risk/reward equation for Hollywood.

Not to mention on top of that you have the market shifts of bigger international audiences, smaller domestic theater audiences (shifting to home theater setups), etc.

How do you even compare Okja, for instance? (That one is a bankability "hire", too, in that the director proved himself in adaptation and foreign market work.) One of the most original films in the last decade, and who knows what its equivalent box office numbers might be except maybe some formula of a Netflix accountant somewhere?
I believe that this feature is required by https://gdpr-info.eu/art-17-gdpr/.

They have no reason to make it a good experience though.
Then again store-load reordering is visible across cores and undefined.
> To ensure correctness in our design and implementation, we use TLA+ to formally prove our work.

Hah, I'm sure it's not for the whole thing but I wonder how many vendors can claim anything close to that!
I went into this expecting to see a bunch of precompiled randomarts manually tiled to create a composite picture.

I was not expecting to learn the simple rules that underpin how randomart is generated for a hash and then to see the author discover hashes that roughly match the goal.

Happily surprised! Very cool to read.
I have a dongle for USB(-A) that provides only charging and no data transfers.

Is there a reverse option where you can buy a dongle that intercepts this madness with overvoltage protection or whatever?
I switched to Android due to no 4" phone options, there's less options on the Android side too though. And the incredible push of Apple Music and removal of the headphone jack were just the icing on the cake of switching.

However, the experience of the Samsung Galaxy S8 (which was just to get me familiar with the platform while I looked for a better phone) was incomprehensibly poor. People keep telling me that it's Samsungs software that's crappy but it's really unacceptable for a flagship phone to be this crappy.
You don't necessarily have to find someone that cares about what you find interesting ... you have to be willing to put yourself in a situation in which you experience something you wouldn't find interesting at all. Obviously I'm not saying that you have to dispose of your interests, nor am I saying that it's not possible to eventually find mutual interests (nor am I saying that it's impossible to find a partner that shares your same interests); but that by limiting your potential connections to only things that you find interesting, you by-definition limit your scope.

To give an anecdote ... me and my wife are about literally the most opposite of people. She likes almost nothing that I like, and in many ways, vice-versa (opposites attract, as they say). I've gone to my share of nights out clubbing with her (which I mostly dislike, other than being with her), and she's endured way too many a geeky discussion. Eventually we settled into a groove and found mutually interesting interests :)
Seems to me that Rust's current point on the popularity curve suggests that the vast majority of programmers probably don't know much at all about the lang, or even that it exists. Busy people can note that there's plenty of HN threads about a thing without investigating further. Until they finally do.

Better to be charitable, I think. Doing so costs us nothing.
Sure, but the censor can just censor requests that omit SNI.
Preemptive Love is one of the most fearless organisations on the planet operating in the most dangerous places on the planet with little regard for their own safety. They constantly surprise me with the risks they are willing to take so that others might love.
And the big 3 keep pushing. All pushing up fees for internet, cable, etc in lockstep. Lying on contracts, using misleading advertising for initial terms, not following guidelines or laws. None of them offering truly competitive rates. The agencies that are meant to handle complaints and regulations do so half-heartedly. It's bad when my phone bill dominates my monthly expenses, second only to rent.
Could this be related to the recent rise in tribalism and identity politics in American culture? In the sense that, without genuine connections to other people, some people focus on superficial characteristics as a way of belonging?
>I am an Asian American overachiever with two engineering degrees from world-renowned universities. //

.. and as cheating isn't wrong in your personal ethical system you're happy to lose your job to someone who claims to be better qualified than you but is just cheating to get ahead?

I don't know what engineering you do but I don't think society should value engineers as highly who know something is wrong but can't explain it and so don't get it fixed. "Soft" skills matter.
To be even more precise, you can refer to Article 6, section f) about Legitimate interests.

If you conduct business with an individual, most of time, your legal basis will be the Legitimate interests of both parties, you should only rely on consent for non-necessary part/service (like subscribing to a newsletter, or sharing information for improving the service).

For a good summary of that, I would recommand this ICO document: https://ico.org.uk/media/about-the-ico/consultations/2013551...
Tell HN: "[GitHub Security] Please reset your password"
I just received this email from Github:

-----

Hi there,

During the course of regular auditing, GitHub discovered that a recently introduced bug exposed a small number of users’ passwords to our internal logging system, including yours. We have corrected this, but you'll need to reset your password to regain access to your account.

GitHub stores user passwords with secure cryptographic hashes (bcrypt). However, this recently introduced bug resulted in our secure internal logs recording plaintext user passwords when users initiated a password reset. Rest assured, these passwords were not accessible to the public or other GitHub users at any time. Additionally, they were not accessible to the majority of GitHub staff and we have determined that it is very unlikely that any GitHub staff accessed these logs. GitHub does not intentionally store passwords in plaintext format. Instead, we use modern cryptographic methods to ensure passwords are stored securely in production. To note, GitHub has not been hacked or compromised in any way.

You can regain access to your account by resetting your password using the link below::

https://github.com/password_reset

If you have any lingering questions or concerns about this, don't hesitate to let us know. You can reach us by emailing support@github.com or by using our contact form:

https://github.com/contact

Thanks,

GitHub Support
Sure, but as my point is that pioneering isn't mutually exclusive with "risk averse". Buddy cop films had a long history before it, so adding comedy had some risk, but not as much risk than if there hadn't been as much interest in buddy cop films elsewhere in the 70s and 80s.
I am not a lawyer, let alone an imaginary property specialist, however I do not believe that second point is technically true.

Trade marks are intended for consumer protection. As long as you made it abundantly clear (everywhere) that your work was NOT a Disney work, and that it was instead a distinctly branded other work which happened to include Mickey Mouse (even in a leading role), based off of the features of the public domain version of the character (and possibly mixing in elements obvious to contemporary authors in a generic sense), then it would PROBABLY be worth talking to an actual trademark/imaginary property lawyer to see if the idea is uniquely expressive enough to be a new work.
There is a way. I've never heard of anyone doing this before, but it could make you some money depending on who your audience is and your willingness to market ads.

Trying to sell anyone anything these days is pretty much the-kiss-of-death. People are too distracted by and resentful of advertising.

However, just getting a name (a product name probably) in the public eye without a sales message is valuable. The goal of this is what they call "product recognition".

If in your game world, there were a place for a billboard or a car bumper, you could place a simple message there, just the name of a politician running for office or just the name of a product. You don't want something attention grabbing. You would want something barely noticeable. You want the name in the background not in the foreground. In the case of a politician, you could customize the name to the user's location. Perhaps there is some other place within your game where you could place a name.

The problem all side projects face is "marketing". The product is usually much easier to come by than a way to reach you customers. In your case the problem would be doubled because you need to both market to game players and market the ads to someone.

Good luck!
Pakible (YC W15) is hiring a lead account executive
The nice thing about universal things is that there's so many different kinds.
ZOA Robotics | Machine Learning Engineer | London, UK | Full-time | Onsite | £40-50k + significant equity

We are an early stage startup with a mission to develop affordable, high performance robots. Our first machines are versatile autonomous quadruped platforms for industry, construction and logistics. Our goal is to expand from there and develop mechanical animals to work with people everywhere.

We are looking for a talented software engineer with machine learning experience. You will work closely with hardware and software colleagues to develop, test and implement the control architecture for our robots, leading on the machine learning aspects of the system. These include creating optimal gaits for the variety of tasks performed by our robots, developing vision and sensing algorithms towards fully autonomous operation.

Challenges include robust gait control, vision & sensing, and autonomous navigation with limited computing and energy budgets. Learning fast and developing new ideas is essential. This is a truly multidisciplinary team and your work will feed directly into the hardware design, and vice-versa.

Joining us will also provide you with the chance to shape your role as company needs progress and to influence the path ZOA Robotics takes as we grow.

Full details & apply: http://zoarobotics.com/jobs
Still, the initial package is meant for the infra of the outer domain.
Sure, the real payload will be billed to the inner domain owner, but not the initial handshake (and usage of keys etc)
1) your own personal ethics, and 2) the fact that being caught, especially in a college environment, has consequences.
It's no different to how every other freelance employing business works.

If I run an advertising agency and I've got 4 freelance film makers I regularly use and one of them stops taking my calls or almost always says no, I'll eventually stop calling him and add someone else to my regulars. It's just business, no point me wasting my time calling him.

I think there's a load of companies abusing the gig economy at the moment, but Uber aren't the worst and definitely not for things like they provide a GPS or set the rate, it's all the delivery companies and the gas-servicing people who all have to wear uniforms and work full days.
One of my favorite features of this crate is the RegexSet [0] type. It can be useful to check input against a set in O(mn) time and still have the flexibility of a regex. (m is the size of the RegexSet and n is the length of the text you are searching)

Congratulations on the release!

[0]: https://docs.rs/regex/1.0.0/regex/struct.RegexSet.html
Mark Ripptoe - Starting Strength ;) https://www.amazon.com/Starting-Strength-Mark-Rippetoe-ebook...
Redis is used as a mission critical tool by companies, whether it wants to be or not. The SSL/TLS changes I was making were going to be easy to merge in for those who were interested. And the fork wasn't just for SSL/TLS; it was for transactions, speedups, and other work that is in-process.

Some of that very well may make it back upstream. I can't say; a lot of what I've already done and am planning has been rejected before. Which is why there is the fork. I need those things, Salvatore already rejected them, maybe someone else would need them too, I'll fork.
Not parent, but this was sarcasm.
My work computer developed the same problem (MacBook Pro 15-inch, 2017). If the battery wasn't 100% charged and it was plugged into a charger, the mac reliably fried usb-c ethernet-dongles.

I took it to an Apple Authorized service provider and they called me, and said that the computer is just fine. To add insult to injury they even sent me a screenshot of a big green "passed" message.
The key thing about Oculus Go that is entirely missing from their website is that it only allows 3dof in the movement tracking. It's just like cardboard/daydream/gear. Unlike all the tethered VR headsets that do full 6dof.

In my opinion this isn't VR at all. It's a glorified 360 degree viewer. Personally I think it's pretty deceptive of Oculus to market this like it's a full VR heatset when it's very much not. If you are interested in VR for the immersion or the experiences, avoid this. Get something with full positional 6dof tracking.
SEEKING WORK - Remote / Northern Virginia / Washington, D.C.

========================================

I'm a former VP of Product and Engineering with over 10 years of experience building web apps with Ruby on Rails. I work on everything from startup MVPs to internal tools and refactoring legacy applications.

Services:

- Backend: Ruby, Ruby on Rails, API development

- Frontend: HTML5, CSS3, SCSS, JavaScript, Bootstrap

- Product: Wireframes / mockups

Talk to me about your ideas!

========================================

Email: tony@29fx.com

Website: http://29fx.com

LinkedIn: https://www.linkedin.com/in/tonyvt2005/
Fwiw, they've open sourced their TLA+ proofs for percolator and raft merge. Worth checking out: https://github.com/pingcap/tla-plus
Separating concerns using Razor Pages
How to Audit a Smart Contract? – A Guide
The argument is NOT that news is 50% SNR, the argument is that BOOKS are 50% SNR. Effectively, an edited collection of the news over the course of a year has a low SNR compared to that of following the constant stream of instant-news.

The point was expressed badly, but it's about the way that the average quality of new-stuff is a lot lower than the average quality of a curated set of high-quality stuff from a time period.

It's like how you'll see better movies picking out the best movies from all of movie history versus picking even the best of whatever happens to be the newest.
You can't solve for decades of bad habit. Someone being lazy, lacking grit & determination is not something that's easy to solve for. To be motivated, an individual must have a sense of autonomy, ability to self organize and regulate, to set goals, plan, schedule, manage time, and be able to tie in their personal goals to the organizational goals. I've found out that at best all you can do is put a carrot in front of them and once they eat it, replace with another carrot. It's tiring, best of course is to hire a great person so you don't have to deal with this, but if this person is worth it, then it might be worth you mentoring them for a long time, giving them the right books to reads, building systems and processes that covers their weaknesses. This is something that I have put a lot of time into and I'm not sure can be addressed in a post or even a few pages.

Nevertheless, you need to listen to their excuses, and then probe for the reasoning behind the excuse. It's either that they don't want to work or they don't know how to do the work. The later is easy, you train em. If they don't want to the work it can be for various reasons, it could be fear, it could not seeing any value in it, it could be boring. If it's fear, address it, environments such as blame free culture where people can experiment and failure is owned by the team helps address this. If it's not seeing value, then you have to show how the work is valuable to you, the team, the company, the world and to the associate. If it's boring, you have to teach and educate them that even the most exciting works are 80% grunt and mundane things and those things are just important. What are the excuses?

If they are asking for promotion but not delivering, you must deny it. It should not come as a shock to them since you should be having 1on1s often and a good feedback loop to them. Best of luck.
Heh, someone better tell Mozilla that it's time to pack up Firefox and go home then.