skysight-inc/HackerNews huggingface dataset:
Sanity.io | Backend/Golang Software Engineers | Oslo, Norway and San Francisco, CA | Full-time | VISA, ONSITE | https://sanity.io

Sanity.io is a startup building world-leading cloud-hosted content infrastructure at enterprise scale. Basically we provide a global, real time structured content database with powerful query capabilities and an open source framework to build highly customized content management interfaces on top of it.

We're looking for senior Go developers to help build our distributed document store. If you get a kick out of distributed systems, database theory, and query language design then we'd love to talk with you - prior experience with these fields is not necessary, as long as you're eager to learn. Position will primarily be based in Oslo, Norway, although we will consider applicants for our upcoming San Francisco office as well.

We offer competitive salary and stock options, a flexible work environment open to periods of remoting, a tight and friendly team with an awesome work/play ethic, base in the second happiest country in the world (Norway) in one of Europe's fastest growing cities (Oslo), and awesome social benefits as mandated by Norwegian law including five weeks of paid vacation, universal health care, child benefits, and one year of paid parental leave.

For more details, see: https://www.sanity.io/blog/hiring-backend-engineer
An Infinite Orchard
@aionescu: https://twitter.com/aionescu/status/1080573780743749632?s=09

Why did they have to go down the 'trust' rather than 'distrust' route? It is a completely different universe from the principle of least privilege.
thats what i mean, and when they dont limit current draw because despite being required to the design is cheaper faster not better, then thats it.
you get heat at the highest resistance so port gets very hot and undervoltage beyond that resistance, so device gets wonky, unless it is regulated, to prop up the voltage
That's not true. There's a retail location about a mile from where I live and while I usually wear contacts, I have sunglasses and a backup pair of glasses from Warby Parker. A couple years ago I lost my pair of sunglasses in the airport and instead of spending another $200 on a replacement pair of Ray Bans, I walked into the Warby Parker store and was surprised to find that you can buy sunglasses without a prescription on the spot. I've also found their staff helpful when selecting frames and once you get the frames in the mail you can bring them back to the store for free fit adjustments. Apparently some of the stores also do eye exams.
The disclaimer at the bottom of the donate page is strange:

>Contributions go to the Mozilla Foundation, (...) to support Thunderbird. Mozilla reserves the right to find another use for the funds if it determines that Thunderbird is no longer furthering Mozilla’s mission.

Is that true if it's now a separate project?
Yes, I agree completely. Their services are all tied to their hardware. It's not the same as other services companies.
Mmm... Hostile how? Improve how? :)

If you want to write a public API to access text layers and then patch the PSD plug-in for text layers support, you are welcome.

If you want to make the tool's options dock optionally horizontal and docked to the top (a-la Photoshop, Inkscape etc.), you are welcome.

If you want to improve OpenEXR support, you are welcome.

If you want to improve the text tool (easy text on path etc.), you are welcome.

There are hundreds of things GIMP could do better. We know that. We welcome contributions.

The only thing we don't feel good about is when people tell us to make GIMP look and work like Photoshop "because Photoshop". GIMP is not a clone of Photoshop. We need better reasons than that. Apart from this, you are welcome to come and propose changes.

Edit: to be fair, two other topics we don't exactly like are project name change and save/export :)
Ideas are easy to find. People willing to spend time and effort implementing ideas are very difficult to find.
ah yes, you are commenting on the precision not on the magnitude of the displacement!
> the Anglosphere drinks coffee and tea, while the rest of the world takes naps and siestas and so on. Protestant work ethic cultural imperialism

Even if the first part was true (it's not), the second part is unlikely to be the explanation: Protestantism, even the Calvinism most associated with the “Protestant work ethic”, isn't a unique feature of the Anglosphere.
NPM might not be the best package manager, but if you're using something like Lerna you can get the best of both worlds. Your local copy of an internal dependency can either be symlinked to the local source code, or a copy of the published package.

That makes it a lot easier to work on a package and its consumers at the same time.
Now that you're a computer science major... is there anyway you could think of making a better environment for learning? I personally really struggled with "connector-set" style programming thing like Scratch. It always felt too limiting, or, I don't know... forced? It's very obvious how the blocks match to code - so it feels (to me) like it's "begging the question": to know how to connect the blocks you need to know how to construct the code. It's like it's missing a layer of abstraction after you figure out the very basics.

Lately I've been wondering if there is a better way that doesn't match 1-to-1 with coding constructs - something visual, but something that isn't just "a for-loop represented as a physical block". Not sure what that would be though!
I think everyone with an interest in spaceflight should play Kerbal Space Program. It gives you a sense of scale, both of space and time (luckily you can fast-forward to 100.000x), and also teaches you the basics of making orbital trajectories and correcting them, landing on planets/moons with different gravity... I'm really glad to have played it!
Check out the crazy journey Rosetta took on the way to 67P/Churyumov–Gerasimenko:

https://commons.wikimedia.org/wiki/File:Animation_of_Rosetta...
If you stick it in your mouth or something, maybe. Or if you're soaking wet and have a terrible heart. Otherwise, nobody's getting hurt off 18v.
My HP Spectre won't charge from non-HP usb-c chargers in Windows; or, at least, it complains and says it won't charge. I haven't tested whether it actually draws current or not since I only booted it once in Windows. However, in Linux it charges fine at full-speed from non-HP charger with appropriate wattage. It will not charge at all from several chargers that don't have the necessary 90W capability.
Believe it or not, some people get more value from their smartphones than from a laptop.
> is there any real difference between checking out a portion of the tree via a VFS or checking out multiple repositories? There is no difference.

How big is your monorepo? Assume each line of code is a full 80 characters, stored via ASCII/UTF-8. That 67 million lines of code in 5GB. I can fit five of those on a Blu-ray.

> The end result is that the realities of build/deploy management at scale are largely identical whether using a monorepo or polyrepo.

True.

> It might be deployed over a period of hours, days, or months. Thus, modern developers must think about backwards compatibility in the wild.

Depends entire on the application. Lots of changes are deployed within short periods of time with low compatibility requirements.

> Downside 1: Tight coupling

Monorepos do often have tightly coupled software. Polyrepos also often have tightly coupled software. Polyrepos look more decoupled, but pragmatically I can't say I've noticed a much of difference.

> Downside 2: VCS scalability

I've also heard Twitter engineers complain about the VCS. But what is the scope of the author's discussion? 1,000 engineer orgs? Or 20 engineer orgs? Those are vastly different levels of engineering collaboration. I assume the article was not written to cover both of those. Or was it?

---

Ultimately, I think the author implicitly assumed a universe of discourse of gigantic repos with hundreds and hundreds of daily contributors.

When people talk about the spectrum of monorepo vs polyrepo architectures, that is very extreme. For example, last I knew, Uber has more repos than it did engineers. And I don't assume that "polyrepos" always means multiple repos per engineer.
China is the second largest economy, but the country is still quite pooooor... ... _on average_

America is on another hand is a developed country on average, but double digit of population is officially below the official poverty line....

Which one is better you think? In reality, that is Apples to Oranges comparison. China is not a market economy to begin with...
This is a great podcast, I've been a fan for a while now. Every episode is worth a listen.

Woods' story is just another piece of evidence that "3 strikes" rules have no benefit to society.
You can set a ttl in the JWT and you should. But I think you are talking about using jwts as session cookies, which is indeed not something you should be doing without having a reliable way to invalidate them if you care about reliable signout and token invalidation. For that ttls are not a great solution.

We don't currently use them for sessions, but I've been planning to. When we do, we'll have a mechanism for invalidating tokens, just like we currently do for our oauth tokens. One way would be to simply embed that in the jwt as a field and check that on each request, just like we do already with oauth. The biggest risk with either oauth or jwt tokens is somebody intercepting them and using them. This risk is about the same for both but it does need consideration.

We are using jwts internally for authorizing messages on our queues and internal API calls. Those jwts have very short ttls and don't leave our infrastructure. They typically include assertions on scope, userids, etc. I've been considering to make JWTs the native format on our queues; i.e. embed the message in the JWT rather than a jwt in the message. This would make message tampering harder for any man in the middle attacks. We already uses nonces in some of our messages so we'd be able to prevent replay attacks this way as well.

The main benefit of using jwts is that verifying them is trivial and can be done without network interaction. Very nice in a microservice type architecture. Jwts are issued on our API server are after verifying the oauth token (not jwt currently). We don't leak these tokens outside our infrastructure currently and we don't have public endpoints that would accept them in any case. None of this is new but not that common in modern REST/graphql type setups nevertheless. JWTs are probably easy enough to retrofit in most APIs that it might be worthwhile exploring this for many.

If you are interested, we open sourced our Java code for creating/verifying JWTs. Check here for an example and more code: https://github.com/Inbot/inbot-utils/blob/master/src/test/ja...
In both those conflict it was mostly not the US being at war with Vietnam or Afghanistan but with them supporting one political faction within the country against another which is a much messier business.
Services also includes Apple’s anticipated video / TV offering, which will be 100% additive vs 30% (15% recurring) from Netflix customers willing to pay the upcharge.
Radiant Earth Foundation | DevOps Engineer | Oakland, CA | Onsite

Radiant Earth Foundation's core mission is to make insights from remote sensing data and machine learning an order of magnitude more accessible for global non-profits, humanitarian organizations, emerging economy governments, and others. https://radiant.earth

We provide a free platform that takes care of all of the geospatial processing and machine learning so that users with any level of remote sensing experience, from zero to expert, can use near real-time data to get geospatial insights for their use case.

In addition to our platform, we work with organizations on complex use cases with high-impact outcomes. Since our founding in 2016, we've worked with the Bill and Melinda Gates Foundation (a primary funder), the Omidyar Network (another primary funder), as well as the United Nations Institute for Training and Research, Schmidt Futures, the World Bank and more.

We work with a range of fellows and contractors to support our efforts, but our in-house engineering/ML team is just 2 people :) In addition to being somebody who is excited to be part of a small team working on large-scale problems (right now we're all generalists, to an extent), we're especially interested in applicants who want to help us foster a team culture of respect, inclusion, and diversity.

Apply here: https://bit.ly/2CLLzdK

If you have any questions, please don't hesitate to shoot me an email: alando (at) radiant.earth
There’s a whole spectrum of bad actors.

Incompetence is scarier than malicious actors imo, and expecting users to carry USB condoms around seems like a bad idea.
Remember that "RISC" in 1985 was barely a word, RISC was, in part a response to the changing costs/speed tradeoffs between memory and CPUs - prior to ~'86 memory was slow and expensive - instructions were heavily encoded to reduce instruction fetch bandwidth - RISC instructions are bigger, easier to encode, they essentially assume caches

A "RISC 6502" likely wasn't a "reduced instruction set 6502" it was more likely a "non-microcoded single cycle CPU running the 6502 instruction set" (possibly with some address extension past 64k and 16-bit data paths) -

remember that even the very first 68ks available in '79 was a 32-bit CPU architecture from day one (even if it had 24-bit addressing and an external 16-bit data bus), while the 8088/8086/80186/80286 were all 16-bit (the 80386 didn't show up until 6 years later)
Remember that if you’re storing each event you need to anonymise user identifying data out of it for GDPR (assuming you have users who don’t consent), and you need to be able to remove (or at least anonymise) the data of consent is withdrawn.

With Google the TOS states that you’re not allowed to store personal information in the first place at least.
This is really neat idea. Good landing page too. I think you could do a lot more though e.g. filter notifications based on tags/utm parameters/etc. Take a look at how email platforms like Mailchimp allow you to filter in or out information. It could be a way to increase the value add of your app. Also, figure out how to automate those summary notifications. Doesn't make much sense to go into the app to send a notif to slack. Just give me the notification every morning.

But, as an MVP, this is a good start. Congrats!
As of 2017 California is at 50.45% carbon-free electricity:

https://www.energy.ca.gov/almanac/electricity_data/total_sys...

That's summing up nuclear, large hydro, and renewables excluding biomass from the California Power Mix column.
Migrating the Internet Archive to Kubernetes
Apple cuts revenue forecast on weak China sales
Nice, clear explanation. Looking forward to the Bayesian inference one!

One note though: I think on equation 25 you are missing a log on the left hand side.
From someone having sweaty hands (Hyperhidrosis). FaceID is not only cool, but it’s a game changer! I always get frustrated when attempting to unlock my 6S plus 3 times, then ultimately being just asked for my passcode. With FaceID, everything just works smoothly/seamlessly as if there’s not even an authentication phase.

If I knew this earlier, I could’ve bought the X sooner. Couldn’t recommend it enough.
Yeah, but BigCo can't charge you $20 for that no-data-passthrough cable.
Why would the first world want third world immigrants?
I still think the name is a critical failure that inhibits adoption, though it's probably too late now to do anything. Look up about masks in The GIMP, for example ... https://www.google.com/search?q=gimp%20masks for me in a fresh private browser window this search brings up "fetishwear" sponsored links. The secondary meaning, the primary one from my childhood [en-gb native]: "gimp" would be like calling someone a "spastic".

The software could never be widely used in UK schools IMO. The bracketing of "I know it's a weird name, but I've used this programme for years, ..." is just too cringey for me when sharing in polite [or perhaps timid] company.

I know it's hard to get cross-language, cross-cultural names, ... I still don't know why they didn't go with Imp [nor what creature Wilbur (Wilber?) is supposed to be!].

Sorry, not wanting to start a flamewar but it should be mentioned IMO. Here's 2 threads where it's raised so we don't need to cover any of that ground again (both/all sides are represented I think; selective quotes):

1) https://arstechnica.com/civis/viewtopic.php?f=2&t=22973 'Here's a sign of immaturity: Naming a product "GIMP".'

2) https://www.reddit.com/r/opensource/comments/6cs6wk/small_gr... 'the GIMP's name has long been the classic example of how bad open source projects often are at branding and marketing'
There is no standard for modular power supply cables.

USB-C on the other hand is a standard.
Nomenclature: https://en.wikipedia.org/wiki/Thule
I believe this does not include most of the mortgages. For example, Fannie Mae has 3.35 trillion in assets, which dwarfs total student loans.

https://en.wikipedia.org/wiki/Fannie_Mae
Same kind of justifications that get made for apple stuff "Oh you cant replace the screen because we are protecting your security even though the replacement screen came from another iphone.
> It seems like graphene production at scale is something states should be putting money and resources into.

They do.

https://polska.pl/science/achievements-science/graphene-prod...

They created a company that does it, and you can buy graphene from them.

https://www.graphene-info.com/nano-carbon

Turns out there are lots of different kinds of graphene, and despite all the hype - the demand for the kind we can produce at the current prices - just isn't that big.
This is a big part of their growing numbers. They used to be a small, direct-to-consumer digital brand. But after early adopters bought glasses, they needed to get more eyes on their product so they started with small showrooms in NYC.

Now they've expanded more and more. I think the margins on the glasses are still good so they're not over expanding but they definitely need more employees in this stage of the company.
iPhone now stands for inflationPhone, fuck apple.
> I don't recall if it did size changes as well.

AFAIR it did; there was one point at which you emerged inside a semi-transparent container, at ~1/10 of your original size, and a full-sized alien was looking at you.

> This tech predates Valve's Portal, although I doubt it is the first attempt at this.

Portal was inspired by Narbacular Drop (2005).

https://en.wikipedia.org/wiki/Narbacular_Drop
i'm familiar with this (through stochastic control and reinforcement learning and general econ stuff) but it's not really useful for the whiteboard coding style DP that FAANG asks.
Also not to be underestimated: Android.

Personal anecdote: I broke my iPhone and have been using Android for a bit, and I must admit: at first I thought I'd switch back but nowadays Android is pretty good.

Hardware at a comparable price-point is solid, the UI is smooth and better-looking than it was before, the app ecosystem isn't quite as good, but is very very close, and there's features I would actually miss on iOS (a calendar widget on my homescreen, unlocking my device without touching the screen and Google's Night Sight).

I miss my to do app and my email app, both of which are not on Android (Things and Spark). But overall, I personally can't think of a single aspect where iOS "miles ahead" anymore, from an end-user perspective.
I am not sure making an open source product defensible is the right idea. I'd monetize in one or more of the following ways:

1. Extend the open source product in ways which makes it more valuable for specific groups of people, sell licenses to those people. As the product matures and you add more new features, maybe some of the early extended features get pushed into the open source product.

2. Offer monthly/annual support agreements to people who sign up for a licensed version.

3. Offer to make custom modifications for a fee for specific clients (this might be a way to help start doing #1 too).

A lot of this will boil down to marketing the benefits to the right groups of people and finding features which are valuable to businesses over the open source edition -- this is true for open source just as it is to proprietary products. I don't see how (not to say it is impossible) Patreon or similar platforms will lead to enough income to make this a profitable project, although they may help validate people are willing to pay something for the product.
I actually just completed a migration from Authenticator to Authy. I don’t have much to say except that it was pretty seamless. Sync between multiple devices works very well. I’m not a fan of the Authy UI but it does what I need.

If you use a password manager that supports OTP tokens (lastpass with their authenticator app, 1password, bitwarden) you could just use that and remove Authy out of the picture.
https://elbilstatistikk.no/
My GPA was 2.37 and I would've had to take so many classes to increase my GPA up to the cut off point of 2.7 (B-). With 90 credits worth of classes, you'd need 90 credits at 3.0 (B average) to make up for the difference, or less if you get better grades and that means you're on the low end of what they accept.

Now I presume if you did 2-3 semester with a B+/A- GPA, they would take that as testifying you can handle the masters and let you in, however I'm enjoying math way too much right now and there are several classes (Algebra 1-3, Topology, Differential Equations and several classes in statistics I intend to pick in the option block) that will come in handy if I head into ML masters I'm also interested in Type Theory and all of Discrete Mathematics. Also, I feel math is a great program to improve at general problem-solving.

The first semester was really challenging, some classes I had in fact already done (Calculus 1 and Linear Algebra) turned out to be surprisingly difficult. I'd say around halfway through the second semester I felt I had gotten my younger brain back.

I don't have expensive habits, have two restaurants meal a week, own a car and live at the university residences (rent is 390$/month, parking 850/year). My cost of life seems to be around 12k CAD/year and am Canadian (tuition costs are 1600/semester) so I really have no idea how much you'd have to have saved up if you are in the USA.
Brace yourselves for the next UEFI Secure Boot "Improvement" bonanza, and, of course the accompanying Stuxnet backdoor.

Just like Spectre/Meltdown: half of all people will just shrug, completely unsurprised, when the inevitable zero day drops. And the split between those that find the sky falling, will be the clueless and the plants. Whatever.
TXR lisp:

This is the TXR Lisp interactive listener of TXR 203.
Quit with :quit or Ctrl-D on empty line. Ctrl-X ? for cheatsheet.
1> (each ((x (range 2 1000))) ;; 1 is uninteresting
(each ((y (range 1 100)))
(let ((z (expt x y)))
(when (= x (sum (digits z)))
(put-line `@x @y`)))))
2 1
3 1
4 1
5 1
[...]
963 69
964 75
964 78
991 71
999 75
The ideal solution from the vendors' perspective is to have a single hardware standard with this standardized method of making compatibility vendor specific so that we have the situation as with lightning cables but with cheaper hardware costs. A standardized incompatibility standard.
I full throatedly recommend authy.
Jumping in to reply because I made the switch to Authy about two years ago and haven't looked back. You get the ability to sync MFA across devices and desktop without a hitch. Add in the backup (with encryption) and you can onboard a device quickly and it fits every use case I need.
Thunderbird is a XUL implementation with a lot of JavaScript being used for its UI. It's as close as you can get to being the Electron of Firefox without being in a PPA.

The most recent version (Thunderbird 60) introduced sweeping UI changes that went much deeper than even Chrome 69's.