skysight-inc/HackerNews huggingface dataset:
WinIt | Software Engineer, Backend | Flatiron, NYC | ONSITE | Full-time | Visa Available

Our vision: WinIt is an app enabled driver advocate assisting users with managing and contesting parking & traffic tickets. Our ultimate goal is to create a one stop solution to solve challenges drivers have to deal with throughout the lifestyle of car ownership -- such as: helping drivers get the best price on auto insurance, leasing & financing etc.

Your Role: We’re looking for a full-stack engineer driven to solve challenging problems in innovative and elegant ways. You will write modular, high-quality code while actively contributing to peer code reviews. You’re comfortable working on a small engineering team, and with the responsibility that comes with this.

You will be instrumental in the development of the next generation of the company’s back-end interface, client applications, and improvements to the existing system as a whole.

You are an intelligent, passionate, and innovative developer that can formulate new ideas and execute them in an established codebase.

You are comfortable working with third party frameworks and integrating them.

Skills: The ideal candidate has overlap from at least two of the following, and is confident in their backend skills. 1. Front end: Angular 5+, or React 16 with a state management library such as NgRx, Redux, or Mobx. 2. Back end: Node.js, ORMs 3. Mobile: Android Java, iOS Swift/Objective C. 4. Solid practice in: writing asynchronous javascript, using js test frameworks, using mongodb, building solutions across the stack

Experience: Ideally you have previous startup experience, and experience working on a live application: Web, Android, or iOS.

You can find out more & apply through this link: https://angel.co/winit-app/jobs/68416-software-engineer
Not like Mongo to lose Data
Yes, it was made public at this time for a reason. I have no idea about who made it public and why, but you can be sure there is a bigger game here.

Did the journalist and/or their friends and family make money on the massive drop in Supermicro stock?

Is the Trump administration asking to push this information out to earn favor in the trade war?

Are the investigators stumped and using this in an attempt to flush out new leads?

No idea.
This is exactly what iCloud Keychain does, except (unless it’s changed recently?) you can sync it peer to peer too, you don’t have to store the contents in iCloud.

The only part it’s “missing” is a 2FA TOTP generator, but apps like https://cooperrs.de/otpauth.html work quite well in that regard so it’s not a major pain point.

Safari + (iCloud) Keychain is IMO evidence that good password management can work client side - these “alternative” solutions like login links via email etc are basically catering to the shit experience of other browsers/platforms.
> why no run your own DB?

Running your own DB introduces tons of risk that just isn't worth saving a couple bucks (until you're at the scale that it is).

> That said, Mongo is a poor choice for any app ever written.

Sorry, that just isn't true. It works great for us, and is the 4th most popular database by usage (and growing). https://insights.stackoverflow.com/survey/2018#technology-da...
Yes, some devices are getting more difficult to repair. However, Microsoft and Samsung aren't the ones lobbying to make it ILLEGAL to fix device.

Apple has sued over people taking displays that were still good, but just needed the glass replaced. This is a trivial repair and has been done forever in the IT industry. To the car analogy: it's like replacing the windshield and selling the vehicle. Then Honda sues you because the Honda logo is still on the car.

Article: https://motherboard.vice.com/en_us/article/a3yadk/apple-sued...

This has nothing to do with security and is totally over Apple wanting full control over a device that someone purchased with their own dollars. To say it's to do with security is asinine.
This seems more a complement to latex. At the moment it generates svgs. But these can use TeX math via mathjax, and the internal representation is quite straightforward.

It seems like it would not be much work to add a way to output as eg tikz (or rather, pgf) to this. It could probably output something more low-level too
Well, IP addresses are just numbers, so you could convert that to an IP address, then do a whois lookup if you wanted.

7bbb41211116 => 136044181786902 => 65.33.17.22
HP’s x360 14 Chromebook is a radical change from last year’s model
>(The other funny kernel.org story is when a Google security researcher found his own name in the master boot record of a misbehaving server.)

Do you have a link to this story? I tried googling but couldn't find it
I’m surprised he didn’t sue.

ONE WEIRD TRICK - dirtbag companies HATE this - my mom (former lawyer) taught me to get any company dragging its heels or otherwise being scummy about giving you what you paid for is to basically state what you want followed by “...and if I do not get the product/service that I paid your company for, my next call will be to the State Attorneys General of the state of (where we’re from) and the state where you are incorporated, and we will be filing a claim of fraudulent business practices.”

9 times out of 10 that’ll be enough to get the gears moving. Legal compliance is almost always more expensive than fighting a customer on an issue, so they tend to give in rather quickly.
PSN notoriously doesn't support changing usernames, at all. It's been their #1 most requested feature for over a decade.
Toolz is one of my favorite python libraries. I use it all the time. It provides even more of this useful functionality. It also has a sped-up version called Cytoolz written with Cython.

https://toolz.readthedocs.io

https://github.com/pytoolz/cytoolz
> VLC [...] filesystem=host

See my comment on why it's not easy to fully sandbox software like VLC:
https://news.ycombinator.com/item?id=14409234

The author is correct, in the fact that flatpak-vlc is not a secure sandbox.
Let's not ignore quality of life, though I agree it probably hasn't increased "4X" (whatever that would mean).
At the scale their datacenter are, they must be replacing a full rack of servers every single day, just to follow a standard 3 years depreciation policy.

Servers practically vanish every single day. Add a few more supermicro and it's not even noticeable. Business as usual.
"Almost all popular applications on flathub come with filesystem=host, filesystem=home or device=all permissions, that is, write permissions to the user home directory (and more), this effectively means that all it takes to "escape the sandbox" is echo download_and_execute_evil >> ~/.bashrc. That's it."

No shit, installed applications can write to the filesystem. What an exceptional security hole that only affects flatpak and literally every other form of installing those same programs outside of a sandbox.
Companies exist to make money, and by that metric Google is a long, long way from dying, as the author admits: "It is indeed possible, even likely, that Google can continue onward without the kinds of changes that I and other Google supporters have advocated over the years, and still make bushels of money"

Google's revenue today is six times as large as it was a decade ago. And I expect its revenue in a decade to be at least 3 times as large as it is today. The reason is
that many of the causes of past growth will continue for the foreseeable future:

1. The people who are connected to the internet will continue to become richer - in particular booming poor countries like India and Indonesia

2. The amount of time people spend on the internet will continue to grow

3. The amount of advertising Google can show people per hour will continue to grow. For example, Google can show many more ads on YouTube and still be less saturated than the old network TV model. Another example: The Economist app currently shows untargeted ads copied from their print magazine - but in 10 years these ads will probably come from Google.

4. Google can continue to improve its algorithm for placing of ads. Google knows so much about me yet I'm amazed how stupidly untargeted its ads sometimes are. Eg. if my photo stream doesn't include pictures of cats, don't show me ads for cat food!

5. Google can continue to collect more personal data. Right now it doesn't know when I last purchased toothpaste, but it might in 10 years from now.

6. The number of people connected to the internet will continue to grow (although of course at a slower rate than in the past)

[Note: I am a Google shareholder]
My in-ears tend to die due to wax, not broken cables. The $150 AirPods would be just as susceptible to that as a $2 pair of wired Huaweis. And that's ignoring the superior UX of just following the cable rather than having to guess which device they're connected to when.

It's also pretty nice being able to just connect the phone to a speaker system, rather than having to mess around with per-phone dongles, idiotic "dock" designs, or pairing to random bluetooth receivers.
How about you quantify how much of an increase in waste it would be? My prior is that almost all appeals to waste conservation fall apart when you examine them in depth.
Don't compare to what your friends are making, compare to what you need to make to live well and save up for early retirement. If you'd earn double but would also spend double in a year from now, you're not in great shape financially. Look into your financial spending history, and make up your mind.

Anyway, all three companies are doing evil in the world, as far as I'm concerned, so I'd rather stay with the startup. Then again, I'm just your average freetard open source / freedom advocate.
Whoever directly oversees it and acts as the stakeholder for GovCloud should be, sure, but there's no reason for the person above the direct overseer to be cleared. Otherwise by that logic Bezos should be cleared as well.
Yes. The sandbox tool used by Flatpak is "bubblewrap", which has an overview here: https://github.com/projectatomic/bubblewrap/blob/master/READ...

There is nothing against Flatpak using user namepsaces when the developers feel a bit more comfortable with that, though.
I lived in Latvia for one year. Median salary - 370. Lots of people with iPhones. Not her latests iPhones but lots of people. Funny thing - there was a great divide - the biggest amount of dumbphones I’ve ever seen since iPhone introduction and yet, lot and lots of iPhones.
> his other major gripe is that the security updates for non-official flatpaks

I don't know whether it is true or not, but the author explicitly states that it is the official applications AND runtimes that aren't properly maintained.

> I have the same problem when I run applications that have an official RPM repo, and a volunteer packages the deb and pushes it to the official Ubuntu/debian repos

No you don't, because either (a) the package was not uploaded to the official (main) debian repository or (b) the debian security team is in charge of fixing it if the maintainer is no longer available.
The Generational Gap in the World of Technology
Online accounts (even free ones) increasingly seem like they should be viewed as property, that stealing an account like this should be considered theft, and that a company administering accounts (Sony in this case) should be held to a standard of due process.

I wonder if this is something there's been any pressure on legislation for, and I also wonder if it's something tech companies would fight against.
Most TikZ syntax is actually pretty different from normal LaTeX syntax (and most other graphics syntax!). It's got a bunch of syntactic features I've never seen anywhere else.

If you want to be proficient in TikZ, I think the best way is to read the manual. I put it on my phone and started at the start. It's general understanding of how 2D graphics systems tend to work and learning how TikZ does things that made me comfortable.
I have a huge beef with academia and science and all as it exists today, but your description misses how thankless and exhausting $techCO jobs can also be, on top of working for companies like fb or google that are endlessly wrapped in intrigue, or working hard for what at the end of the day is a mundane purpose like increasing ad revenue which is fundamentally about making other people more wealthy than you.

A lot of the issues with academia depends on what specialization you choose, especially if you choose something closely related to theory. Particle physics is a great example of this and given that those who popularize science seem to hold up such pursuits as "pure", "fundamental", and thus important.
I've also heard equally worthwhile efforts when contacting a company through BBB (Better Business Bureau) has gone as far as getting people's accounts unbanned where the account was meant to stay permanently banned from an MMO. Get legal through the right channels and you will see results. You want to get a hold of BBB directly basically, I havent had the pleasure of doing it but have heard from many that it works.
Show HN: YouTube Captions Searcher
Well, at least I can plug an external GPU into latest MacBook Pro. Can’t do it with latest Surface - not T3 ports.
I'm not in biology, but I imagine that doctorates in biology depending on their specialization could find work in biotech.
Mmm. Care to explain? This is extremely sparse on details. Or am I missing something on mobile?
Hmmmm, I have Dropbox plus, for $99USD per year.

This is another Dropbox feature I would like but is not included in my product.
> This isn't any less "broken" than painstakingly adding third-party repositories when your package happens to not be maintained.

True, it isn't any less broken than that; it's more broken.

First, adding a third-party repository, and then using your distro's GUI package manager to install an app from that repository, is a lot more work for the average user than clicking on a download link and then dragging the downloaded file to your desktop (or clicking on it to open it and start an install process). That's by design: it should take some work on the user's part to download and install software that hasn't been vetted by their distro. Greatly reducing that work, as Flatpak does, is a bug, not a feature. (See further comments below.)

Second, third party repositories don't promise that their apps are sandboxed; a binary from a third-party repo has the same privileges as any other binary from the distro. Users aren't being told that the third party apps are "more secure". Promising that your apps are sandboxed means they need to actually be sandboxed; disabling the sandbox with default privilege settings breaks that promise. So users get less security than they think they are getting with this model.

> Linux is secure because nobody can ship software on it without going through massive hurdles

Really? Then why are there thousands of open source applications in my distro's package manager? (And that's without installing any third party repositories.)

> everybody who is smart enough to install software on Linux does some diligence.

Nothing can protect a user who is not smart enough to do some due diligence before installing software. So setting up the system to require some due diligence seems like a better idea than removing the due diligence just because users will find that easier, and then claiming that you can still provide security.
The Screenwriting Mystic Who Wanted to Be the American Führer
A ton of commercial systems have similar vulnerabilities. Teslas have gotten hacked remotely a multitude of times over several years. People who attack/hack systems are specialized in ways that those engineers that build systems are not. None of this should be all that surprising. New recommendations on proper system design should mean future programs should have budgets to hire people to mitigate these problems. However, it should always be assumed there are vulnerabilities that can be exploited by others; any claims to the contrary should be met with extreme skepticism.
This makes me wonder about the details of such a sterilizing event. How would it actually work? Say the Earth was in range of a supernova explosion, or in the path of a GRB. How would we go out? Would the planet be thrown off its orbit and wander away from the warmth of the Sun, letting us die a slow, freezing death? Would the planet simply be vaporised? Would the atmosphere be incinerated, and anything below it suffocated for lack of oxigen, or maybe burnt by unfiltered solar radiations? Would it leave the planet mostly there, and just destroy anything organic on it?

Would it be an instantaneous event? One moment we are there, and one nanosecond after that us and every trace that we ever even existed will be vanished. Or will it take longer? Will we feel it, feel pain, or recognize that it's over, that's it?
The end result is the same as hosting on S3 + CloudFront, it just saves you a lot of trouble setting things up, makes things just work, gives you nice features like lambdas, A/B testing, forms, authentication, etc etc for free, and just makes your life super easy.

Basically, if you have a repository with your Jekyll (or whatever) site, just add it to Netlify and that's it. It's served, and will automatically update when you push.
Meet the startup you've never heard of that powers Venmo, Robinhood and others
Maybe you are just too early. I think I actually know your product and I bookmarked it with the intent of setting it up. The too technical part was kind of true despite me taking on many technical challenges of this nature - Bitcoin in 2011 being one of them. However, the friction here versus the age of my kids requirement didn't line up - but I expect it will in about 3 years when they are a little older. Maybe just keep the wheels turning for a fews years.
"People don't care about their privacy, it's a simple as that."

People do care about their privacy - absolutely - and that 'care' is increasing. That said, I definitely agree with 'bubbletink'.

"Privacy is not a product, it's a feature" is generally what I say, unless it's literally some kind of 'id securing' product you're selling. By that I mean, for a social network or any other non-security product, what users care about most is ease of use, cost, features, access to friends, hype/cool factor ... and then privacy is just one of those later tick-boxes.

So I don't even think that a 'privacy first' Social Network will really take off unless it offers something else, more salient as it's primary offer, with 'privacy' just happening to be a really nice add-on, or better yet, something inherent or existential about the product or architecture.

Also, I do think people are 'voting with their feet' as a lot of folks are switching to things like Instagram, wherein it's just some photos, the ability to message, and not a lot of the deep banter and political stuff. Just fashion, kiddies, kittens, celeb-selfies, and a lot less dialogue. This 'trend' is in a way inherently more private because it implies considerably less personal information, and considerably more default-private activity.

Also remember that Snapchat got big because of 'disappearing videos'. It wasn't just 'stories' - it was 'stories that disappear' and can't be searched! A little bit of sexting innuendo there, but an inherent 'privacy' nature to that.

In then end, we should also consider that many of us (esp. your Eng friends) are not stupid, and may just opt to use FB in a fairly minimalist fashion, i.e. not sharing too-too much.

I used FB in that manner and I make no assumptions about what they are 'learning' about me, and frankly, I don't care that much.

Apple is just not a data/social company - and so this new 'privacy trend' fell on their laps just about the same way the blockchain stuff fell on NVidia. It's a movement that is consistent with their current business model, and so it behoves them to continue in that direction and even support it.

But yes, fully agree, most of us have quite a different perspective than 'joe user' we have to consider that.
Show HN: Live list of available .page domains
When I was last interviewing candidates for a data scientist position, I can't count how many physicists applied for the job when they didn't even understand what overfitting was.

There is a definite sense of "physics is hard, therefore everything else must be easy" groupthink, combined with Dunning-Kruger syndrome.
Ha, interesting! I always assumed a .org was at least a dollar. Mind sharing a link?
What about cereal boxes and soda cans?
OK, I'll bite.

Here's a few concepts that came out of B-Schools/MBA land. at a grossly brief, thus over-simplified level:

* "Shareholder value" as the prime goal of management, justifying the exclusion of all other stakeholders (employees, customers, community supporting the business, country supporting the business, etc.). Few concepts have done more to damage this country and capitalism itself (note the main problem of shrinking middle class able to purchase the goods produced).

* "Manufacturing is fungible & expendable, just outsource it to the lowest-cost country". Massive damage to developed nations' economies, and national security, all to goose short-term profits. Actively destroys massive corporate value of know-how, simultaneously providing both the existing know-how and ability to generate new know-how to new competitors.

While all the MBAs thought we were exploiting the cheap Chinese labor, the Chinese were looking long terms and exploiting our myopic need for short-term profits to gain massive economic & military advantage (note the recent controversies about planted chips, among many other similar security nightmares). This will go down in history as one of the all-time great geostrategic blunders, brought to us by MBAs.

* "Invest in the stars, milk the cash cows, dump the dogs" -- breaking down your business units in this way, guarantees that the business will become a shell of its former self -- the dogs will be sold off with no regard for their potential if invested in (they may be developing key breakthrus, but not yet showing good financials), the cash cows will be starved of all potential and soon become dogs to be sold off, and maybe the stars work out or maybe they don't. Great way to kill a business. GE was financially managed -- where is it now?

* The general concept that I've seen multiple times of focusing on managing to the financials instead of managing to CREATE great value. The financials will ALWAYS look better when investment in building true value and a competitive moat is overlooked to cutting costs and goosing current sales. These numbers will look good and increase for a while, possibly years. Until they don't. At that point, the business has no hope, and is a walking zombie, unrecoverable.

So, yes if MBAs are kept in their suitable container of 1) installing good accounting practices for tracking and security of financial assets, 2) managing the profits that are made to ensure good returns, 3) optimizing operations & taxes (lease vs. buy capital assets?, etc.), then things will work out great.

But putting them in charge without also having serious domain knowledge, both on the customer/market side and on the engineering/manufacturing side -- very bad idea.
Since the lead in this story is maximally buried -

"You put hardware in a device to help you persist the software, the malware. You don’t put hardware in a device to do the whole attack, you put hardware in the device to unlock the keys, to elevate the privileges on the shell, to open the network port and then you take a software or remote approach to do the rest of the work. And I think that’s the context of that quote."
Some years ago I worked for a DoD contractor that builds systems like this, and honestly I think people do care, but they are wildly, woefully, ignorant about the risks. They truly do not understand the vulnerabilities. I'm not making excuses for them (especially given the pushback I received when I started calling out the more egregious things), but I think it does help understand the problem better.