skysight-inc/HackerNews huggingface dataset:
Looker | Various | Security | Onsite/Remote

Looker has LOTS of open positions on the security team. If you're interested, please reach out or directly apply using the links below. We are looking for curiously brilliant individuals who are passionate about security to join our team.

--- Security Compliance ---

[+] Director of Security Governance, Risk, and Compliance | San Francisco or Santa Cruz Only > https://jobs.lever.co/looker/3bf4bea6-699f-440b-9ab9-d8e77ce...

[+] Sr. Security Program Manager | San Francisco or Santa Cruz only > https://jobs.lever.co/looker/89bdc052-cc07-4845-a5a0-57b9020...

[+] Security Analyst, Security Compliance | Any Company Location > https://jobs.lever.co/looker/ac2989a0-5b86-43de-a99b-778ed41...

--- Security Operations ---

[+] Cloud Security Engineer, Security Operations | Any Company Location, Multiple Openings > https://jobs.lever.co/looker/12e228f2-4e9e-4daf-a41c-e044d78...

[+] Security Engineer, Security Operations | Any Company Location, Multiple Openings > https://jobs.lever.co/looker/158c29b4-5c09-49ee-8b7b-c9685f0...

[+] Sr. Security Engineer, Security Operations | Any Company Location > https://jobs.lever.co/looker/f279d000-241e-49e5-9b78-5a3b8ec...

--- Product/Application Security ---

[+] Sr. Application Security Engineer, Product Security | San Francisco, Santa Cruz Preferred > https://jobs.lever.co/looker/6b6ce2eb-76cf-4d1c-931e-4bdbf4c...

--- Other Engineering Positions ---

Other engineering jobs are posted here: https://jobs.lever.co/looker?lever-via=mXKVwAVDK5
I do apologize. Unfortunately can’t identify what happened, but in any way it was definitely mistake on our side. We do not take candidate’s time lightly and try to be as prompt as possible (usually we make a decision within a week).

Again, I apologize for our mistake.
I'm going to present an alternate take on "how to live" from you and several other people who replied, not to say your way is wrong, but to say that others live other ways.

I like hearing about cool stuff, I like sharing it with friends. I like style, looking fashionable, and being apprised of trends. I don't plan to die with savings.

You wouldn't trust me, because I often tell my friends about things they should know about; not because I have anything to gain, but because we all do this in all of my social circles. If I hear about a nootropic they might like, I tell them. If they know of a bar I should try, they tell me.

I like a lot of ads because I like knowing what's going on in the world. Even in a post-capitalist Star Trek world, I'd want people who made stuff to tell me.

Neither way of living is wrong.
Unfortunately it is not looks that count but results. And there Tesla is far behind. Which kind proves the incumbents right on the way they are manufacturing cars. And that is my whole point. You can have a killer product, if you are unable to produce and distribute it that doesn't mean shit.

Ideas are a dime dozen, right? Execution is what matters is the start-up advice, right? And on that front Tesla is not looking good right now.
Previously: https://news.ycombinator.com/item?id=11899385

"I found a paragraph in this article http://www.linusakesson.net/programming/tty/ very apt at describing what Unix signals are like:

In *The Hitchhiker's Guide to the Galaxy*, Douglas Adams
mentions an extremely dull planet, inhabited by a bunch of
depressed humans and a certain breed of animals with sharp
teeth which communicate with the humans by biting them very
hard in the thighs. This is strikingly similar to UNIX, in
which the kernel communicates with processes by sending
paralyzing or deadly signals to them."
> Anyone who has done serious work in Word, or some other WYSIWG editor has got to the point where the document becomes FUBAR, and you have to copy the plain text, and start again with a new document

I'm sorry but, speaking from experience, that is just not true in all cases. Granted, it takes a certain kind of methodic work (and more know-how of the tool than would be reasonable) to work around many of the problems but if you put in the time to learn, Word (and similar software) is more than adequate for large-scale editing work.

It's no wonder the absolute majority of people use it; the learn how to avoid the problems (or live with them) and there is near zero incentive to personally switch. The majority of the onus is paid by the next batch of people who have to learn it.

I'll also agree that it's not what I want for comments and that better models exist for 90% of all text-editing tasks out there. But it does work
if it's important and uncommon, isn't that a good reason not to add additional barriers?
Not with the current political and economic structures we have. They all REQUIRE a growing population to function because we borrow from the future.

Without a growing population safety nets collapse because there aren’t enough young people to support the older people. Government debt spirals out of control as revenues can only decline in the future.

Capitalism itself, at least the way it functions today, starts to fall apart at the seems.

No modern western country has any system to deal with this. Stocks values, social security, government spending, staffing (military and private) all rely on more people with more productivity and more money on the bottom end.
I'd say "vulnerable" in this context would be admitting personal / professional weaknesses and significant professional mistakes. In a bad corporate culture, being vulnerable in such a way would be used against you by your peers and managers to damage your political standing and to deny you bonuses, promotions, etc. In a more positive culture, that same knowledge would be used by your peers and managers to use their strengths to cover your weaknesses, help you and others learn from your mistakes, and so forth.
Your biggest point for me is Tesla's failure to deliver an affordable electric car. I can buy a brand new Corolla for significantly less than 20k CAD, while realistically I won't get a model 3 for less than 50k CAD, except maybe in Quebec where big incentives are still in action (not for long).

I don't care that I get a better car for my money! When Tesla is saying that they have the best selling car in its class, you see the Mercedes C-class and the BMW 3-series in the chart. How can they seriously call it a mass-market affordable car when these are the cars that they are competing against?
Do non-familial adoptions actually happen in any sort of significant numbers in central american countries?
This is why I have a certain distaste for articles like this. The author has this sort hypothesis / contention, specifically that user onboarding is a waste of time, yet presents no data to either validate or disprove their hypothesis. We're supposed to just accept their hot take as gospel, where as folks like yourself can offer actual data that serves as a compelling counterpoint.
No, because Facebook does not have a detailed written policy regarding user data deletion and retention, which Google does have.
I may be wrong, please correct me if I am. The way I read it is pretty synonymous to psychological safety.

Sometimes speaking up about an idea in a meeting opens yourself up to be contradicted and challenged in ways that may be percieved as uncomfortable. The lack of vulnerability stifles ideation and promotes groupthink because differing opinions and unconventional ideas won't be shared.
There's a lot more to society than energy. Take food, for example - a huge portion of the world's food is grown in the American midwest. That food is powered by fertilizer (petroleum) and aquifers that are being depleted far faster than they're being refilled. Or seafood, which is being depleted rapidly. More people require more resources - wood, minerals, you name it - and there simply isn't enough to go around arbitrarily.
> Angola is one of the up and coming countries in Africa. That people are leaving it indicates it’s more an economic calculus than persecution

The US was the up-and-coming nation of the Western hemisphere for a long time while engaging in systematic persecution of blacks, Native Americans, and, at various times and places, other groups. Aggregate economic development and systematic persecution of selected groups which justifies flight in reasonable fear aren't mutually incompatible.
Or how about just not steal stuff from people and have the government pay market rate, using taxes?

As long as we are taking stuff from people, what makes the most sense is to so it equally through taxes, and compensate people fairly by purchasing houses.

Or even better, the government could pay money to build more houses.
> To be fair, nuclear power plants can also take a decade or more to build.

That's kind of the point. Better to have it and not need it than need it and not have it.

And even if batteries become cost effective in a decade or more, that's when people start installing them at scale. It's not as if you could replace the entire grid with them overnight either.
I’ve been at Stripe for 4 years, joined as an IC then shortly transitioned to an EM. Previously was an EM, and remote for 12 years total.

Noticeable differences:

- While I’m remote people tend to default to throwing time on my calendar, which means a conversation sometimes doesn’t happen. We use Slack, so I am highly responsive on Slack to ensure I’m still talking with folks I need to and would rather ping someone unnecessarily and ask about something than miss out on information. Ding words and DMs to offset the barrier to adding calendared time to talk.

- Capturing all “collisions” (we have awesome stairs to encourage this) is a lot different. As a remote, when I’m in the office it’s a bit special and people come up to me. When working in an office, I get less “Hey, what have you been up to?” conversations.

- Timezones are definitely harder in the office. In an office people generally have fixed blocks of time, since commuting has a cost. Being remote (from home) there is no commute cost, so I can split my day up if I need to without working overly long days. I worked with engineers in Europe, so having this flexibility to hop on a call at 6am and then take a break to hang out with my kids before school is super cool.

What doesn’t change? I believe the most effective management practices aim for predictability, and having inclusive behaviors. Also it doesn’t change how you show up to the job. When I’m in meetings, I need to look fully engaged and present, whether remote or in the office. I think this can be harder in a home office, being surrounded by your things vs. an empty conference room.

Happy to talk more about my experiences here or remote in general!
The designers/engineers probably have the constraint of having to make everything work with the "repulsive hot pink", which requires a lot of work.
The environmental movement went anti-nuclear over two very real things: the dumping of waste at sea, and nuclear testing - both because of the threat and the waste products ending up in the atmosphere. This was the era of direct action, culminating in the French government carrying out a state-sponsored terrorist attack that sunk the Rainbow Warrior and killed a photographer who was on board.
Well, it's time we pay Clippy some proper attention, but probably more to learn from his failed career so that we can build better products!
Brene Brown has several books approaching this subject. See Daring Greatly.

Could start with her TEDx talk here
https://www.ted.com/talks/brene_brown_on_vulnerability/up-ne...
Most of the initiatives Satya has gotten credit for were started under Ballmer. Some of the worst moves I've seen regarding current MSFT internal culture were direct results of Satya

Source: Me, at MSFT before Ballmer left and still there now.

That doesn't mean Satya's not had a good effect overall. Part of the investor postives were due to PR differences that Satya made (which are very good), and his ability to talk about the future of the company is far superior to Ballmer.
Seasteading Goes Adrift
Yeah. It's sometimes hard to remember just How Bad software was even in living memory. These days, we all just assume that the basics all work and are surprised to see bugs, which we vote up to the top of HN. But it wasn't always like that, things just failed in crazy ways, at all levels of the stack.

At the start of the dotcom boom, a server uptime measured in months was considered notable, and the idea of a client system lasting a week between some failure or voodoo reboot was laughable. Now... I dunno, when was the last time I bounced my phone? Genuinely can't remember.
True at first glance. But the better allogy would be a better way to process cheques in the case of PayPal. And in the case of producing cars ignoring the Toyota Production System, ignoring decades of experience in high volume car manufacturing is at best incredibly arrogant.
While you are technically correct, it's an idiom.
https://www.merriam-webster.com/dictionary/light-years%20ahe...
Google is not allowed to collect PII data of users who visit google services without registering. So everytime you delete your cookies, you are a new user, and they also are not allowed to log the ip address of non-users indefinitely.
I've always hated ligatures in general and consequently all webfonts, google fonts, etc are purged from my web browsing. But they also have no place in a monospaced font when two characters combine.
> They both pollute.

In this "pulling out all the stops" scenario to stop climate change, only one of them pollute in ways that matter.

Unless you mean the CO2 emissions resulting from construction, etc. I admittedly don't know the numbers there, and I'd imagine a nuclear plant uses a LOT of concrete - but it's also very long lived, which means it should amortize and come out ahead of coal which produces CO2 in operation even if it produces more upfront.
Before they were reading the whole file into memory and parsing it. Now, they are using mmap to read parts of the file into memory when they are used. If you're only doing a single linear pass through a file there is a third option; you could read part of the file in a single chunk at a time, parse that chunk, then read the next part of the file into the same chunk of memory.

I don't know enough about the process being discussed here to know whether it needs to do lookups at random offsets in the file, but iff it doesn't then the chunked read solution could be a simpler way to reduce memory usage.
This is going to suck, especially for democracies. Large voting blocks of old people with little savings and non vested interest in the long term outcome of the world. Yikes.
OK- so ads, then. At your convenience, to be sure, but ads nonetheless.
Website design won't drive customers to a new store instead of Steam. Epic is curating their store so that should already cover quality and discoverability. Apparently they think that isn't enough.

> Price in this case would be margin. If Steam takes 10%, Epic could take 5%. Games makers could pass the savings on, or increase their own margins.

Steam takes 30% and Epic takes 12%. Very few games have chosen to reduce their price to go with the increased percentage.

For a web based store customer service only matters when things go wrong. Most customers should get a fairly standard experience of paying money and receiving their product. Do you consider Steam's customer service bad? Would a marginal improvement in customer service convince you to deal with the hassle of installing another launcher, setting up a payment method on a new store, and splitting your game library?
"...its introduction from Japan to Europe in the Middle Ages"

That's a very long trip to make in the Middle Ages. How did this happen? What sources are there for this? A quick google search came back empty.
Requiring papers to prove one's own identity and familial relationships is anathema to the traditions of Common Law.

Of course, this tradition is being undermined left and right for the sake of the convenience, prejudices, and the power to control, of the ruling classes. And we go along with it, because there are some defensible reasons for doing so.

It's why I prefer online services that allow users to pick their own names. Here, I'm logfromblammo, and that's all anybody needs to know about me. In contrast, on Facebook, the terms of service require me to link my account to the identity I use for official interactions with the government, which is in turn linked to the name my parents gave me at birth.

Without descending into the identity derpfest propagated by some right-leaning libertarians, controlling my own identity means that it is more difficult to hurt me by hacking documents linked to my government identity. The more private businesses use the government identity exclusively, the more identity fraud and identity theft can become a problem.

This type of DNA-collecting dragnet reinforces the paradigm "you are who the government/company/computer says you are" over "you are who you claim to be". Getting sent to the vice principal's office to be disciplined for something that another person, enrolled at my high school with the same name as mine, had done is as close as I ever want to get to that. I got yelled at, for their mistake in identification. I am the only person who can really be sure that I am me, and I don't trust others not to screw that up--because they keep on screwing it up.

Asking for someone's "papers" to prove anything is never going to be something I could support unconditionally. Whenever you do that, you're taking away someone's agency to be in control of their own life.
My understanding of vulnerability is two-fold:

1) Always be willing to admit you don't know something. Ask others for their feedback. Listen to constructive criticism.

2) Whenever there's a problem start with the assumption that it's your fault. For example, if your call to an API fails, assume you're calling it wrong; if there's a misunderstanding between you and someone else, assume that you're not paying attention.

A good team will eventually hone in on the real problem and solve it together.
It is certainly not the only contradiction in the system. The only question left is: How do you hedge against or even personally profit from the inevitable collapse?
I'll second that question. I figured Rails would still be pretty popular, and now I'm wondering to what degree that is or isn't true these days.

My guess would be React/Angular or, if it's a particularly hip group, Next.js/Nuxt.js/Serverless with as little back-end as possible.
Stay at hostels, go to coworking spaces.
These days it means to be very open -- air doubts, acknowledge failings, welcome feedback, etc.
3 days of parental leave is a travesty. Fuck them, seriously.

Find a company that values you more, and that allows remote (or remote-first). Plenty of companies in the latest Who's Hiring that have fully-remote work-from-anywhere $100K+ positions. Just Do It.
Additionally, this was the biggest selling point of Windows Phone. It died, and so did the Security/privacy mindset.
There are multiple bots that crawl github for pubkeys and other credentials.
Of course, with DNA testing you could catch them the first time around, rather than have to wait for a biometric read on the second (or third) trafficking.
Review of “Surveillance Valley”
Managing Apache Kafka Clusters at Scale with Confluent Control Center
Their post has id 19797003, yours 19797206. When I posted theirs was "5 hour ago", yours "4 hours ago".
To my understanding, while nuclear and coal do both pollute, nuclear pollutes in a less environmentally harmful and more containable way - pollutants that stay in boxes instead of going up in smoke.
"I don't know a single person who voted for Trump"
I recently had a great conversation with USDS, they are an impressive organization and are doing a ton of good.

There were a few things that were deal killers for me:

* on site, relocation to DC. I don't mind flying out for meetings, and being onsite for a few weeks to get spun up, but commuting and sitting in an office every day is unproductive.

* mandatory drug testing. I'm not a big marijuana user, it's not really my thing, but being forced to pee in a cup is dehumanizing and humiliating. Until the federal government is able to find a way around mandatory drug testing, I think that they are going to miss out on a lot of top tech talent.

* disorganized 'tours'. This may have just been a mistaken impression on my part, but during my conversation there didn't seem to be a lot of clarity about what I'd actually be doing, or if it was a project I'd be interested in. It seemed more like "come on board, then we'll put you where we need you". As a highly technical CTO, founder and developer, there are specific problems (especially in healthcare) that I'm interested in helping with. I don't mind taking a pay cut to do good work, but the last thing I want to do is sign up for a "tour" and end up being assigned to something that doesn't fully utilize my capabilities.

Just wanted to give some direct feedback related to my experience with USDS, if others don't have the same concerns / restrictions that I do, I highly recommend giving it a shot.
Yes, my company (GitLab) fully reimburses me for the coworking space I rent. They don't manage it for me - I just submit the rent as an expense each month.

More details on GitLab's coworking space policy here: https://about.gitlab.com/handbook/spending-company-money/. (Search the page for "Office space".)
What are some of these negative moves you talk about under Satya? Are you sure it isn't team specific rather than company wide?
So sad, just bought a Cozmo a few days ago and today it arrived. It is a great toy, I like it a lot already!
What a shock to now see this in the news :(
Author is not thinking it trough.

Firstly, simulating intrinsically chaotic weather does not have to be accurate. It's just has to be close enough to be indistinguishable from the real thing.

Secondly, weird rounding errors, randomness, aliasing effects, truncations etc. will be physical reality for the beings living in simulated world.

Thirdly, physical laws we encounter might not be the real physical laws. Imagine super quantum Newtonian universe (infinite light speed, infinite speed of causality) where relativity and quantum effects are caused by the limits of the computer architecture and are not the laws of the underlying universe.
I don't know that we have much to disagree about. Absolutely users will get more value from seeing their data, but there are situations where it can take a while to get "their data" visible, like if you're waiting for people to answer a form that they created with your software. Instead of having them wait a day, it can help prove the value of your service to show them what data will look like, once it starts coming in.
$200 million funding and $100 million sales in a non-SAAS world (not profits) is vaporware in my book.
Question:

What is a good Fortran compiler/implementation these days?

I know they have Intel and IBM and SimplyFortran as commercial software. GFortran works via GCC. Is it as good? Has anyone on here used this LFortran.
Too soon...
How would ANY other non-speaker do it? Presumably there are plenty of deaf PhD's about who have never, nor have the ability, to speak.
Excited to read this. Their piece on heroin won a pulitzer last year: https://www.cincinnati.com/pages/interactives/seven-days-of-...
> "Contextual recommendations are based on practices developed in thousands of high quality, open-source projects on GitHub each with high star ratings."

Wait, what? Is there a way to opt out of that in GitHub? I don't want their AI to scan my code.

Realistically, since most of my GH code is Common Lisp with few stars, I doubt it's looking anyway, but I'd like to make sure.

I'm sure it's covered in their TOS, but as a (still) paying GitHub customer I don't want them to do that with my repos.
^this. This was going to be my response.

All energy production creates pollution in construction. Nuclear is the only source I know of that can produce consistent and reliable energy without creating any emissions from operation.
Thank you for the helpful explanation of guix packaging.