skysight-inc/HackerNews huggingface dataset:
Aline says good things here - as always - but I want to note that an overly groomed company or one where many of the employees are pushing the company's job openings starts to feel really bogus.

In other words, if you take this too far, it becomes obviously painted on and, to use an old word, the recruiters become "posers".

But if you earnestly take her advice, I think that it's a good write up. Honestly talk about your unique point as a company. Who you are. Why you are. What you uniquely do. No BS. I maximize my corporate BS sensor when I'm job hunting.
> to block the research.

To block implementation, not research. Why do you think nuclear power is so expensive?
The lack of a water resistant rating is a deal breaker for a $700 phone.
Defend science, unless you disagree with its outcome!
No, the data should be continuously mirrored to the alternative network for a while. Without this mirroring, there will be no incentive for users to make the switch.
Blue Is Not a Primary Color. Violet Is
One thing that needs to be added:

Job descriptions need to state where the job is, and/or if they allow telecommuting.

That's the first thing I look for. Now that I have a two-income family, I will not move under any circumstances.
What really gets me about advertising is how much they annoy me, how much they wreck my leisure time, and how little money they make for it. For 4 minutes of annoying the heck out of me, they can expect to make single-digit pennies. What a freaking waste. If you're going to annoy me that much, at least make a couple bucks.
Cheap Design Ideas for Creating a Multi-Purpose Space – Yebble
Except most companies don't care about security of the cloud apart from the magical "compliance" and that they are on the same cloud as everyone else.
We have a ban on billboards in our town in Indiana of all places, its definitely possible. It is nice as well, I always forget how annoying they are until I travel to other cities.
End-user security, in web browser context: do I understand it correctly that if my browser was to only ever execute JavaScipt in bytecode format (without compilation to native code) it would be safe from those kinds of exploits?

Presuming the bytecode interpreter would be "slow enough" and "jittery enough" and "indirect enough" to hamper any attempts at exploiting subtle timing+memory layout bugs like that?

IIRC, Konqueror (of KDE) had reasonably fast bytecode JS engine. I wish the browser was still undergoing fast development, used to be my daily driver for many years.
Or maybe it underscores the point that using Facebook is an uncomfortable requirement for many people and businesses, no matter how much they might hate it?
why is 30 the go-to length for shorter work weeks? I chose 32 because it's 4/5 of 40. I work four days a week instead of five and im not worried about how many hours I put in.

I've been part time for a year and a half. I realized I was earning more money than I needed and that I wanted more time to enjoy life. My employer, a FAANG company, offered a proportional cut to salary and stock grants.
Build React, Vue Web Apps Integrated with Express, Laravel, Flask in No-Time
So in my case, I actually performed an explicit CNAME lookup. The fact that the error message says "We couldn't find any CNAME records for foo.com" tells me that the name parser is still not handling hyphens correctly.
This is excellent writing. Thanks for articulating this.
Why aren’t tax breaks like these ever made absolutely conditional on companies doing what they’ve said they would do?

Eg if you say you’ll do X in exchange for a tax cut, and don’t do it then they have to pay back those taxes, with interest (otherwise there’s little downside)
See my addition above - this still seems to be broken.
Some additional pages by Intel describing mitigation techniques for non-HT domains (including the new overload of the VERW instruction): https://software.intel.com/security-software-guidance/insigh...

Details of which steppings of which processors are affected by which CVEs: https://software.intel.com/security-software-guidance/insigh...
it's not just TV/shows you need to save your kids from. It's books too! Almost every kids book i open up (for my 4 year old) seems to have a Pizza, Ice cream and cookies as the 3 primary food groups that the kids or animals in that book eat. It's ridiculous.
>> We just need computers designed with a real security model in mind

These are already options, as another commenter pointed out. If you need this kind of protection, it is available, at significant cost.
We've been building personal computers around GPUs for a long time now. The CPU based computer was kind of an oddball IBM "thing". Old MOS (nintendo, commodore) and ARM for example seem to have the CPU serve the GPU in most configurations I've seen.
Thats fair. I still think that the bigger difference comes from not having dealerships and "factory incentives"
If anything it was historically the opposite. You had pension funds assuming guaranteed 8% returns. Compare this to actual returns on low-risk investments like treasury bills.

You could historically get close to their targets with higher risk investments (although even then they were optimistic), but that involves the risk of losing a significant amount of the principal. Which doesn't mesh with providing a guaranteed payout to retirees. But if you stick to lower risk investments, the amount of the shortfall is enormous.

So it was historically fraud. They guaranteed a payout and then did things that may have resulted in them not having the money. Once you do the accounting accurately and restrict yourself to investments that can't result in being unable to make the promised payouts, it turns out the cost of a guaranteed payout is large.
Science is inherently political because it is done by people.

And scientific knowledge has political implications because it tells us about the world around us, and politics is the process by which we decide how our laws will adapt to and affect that world.

None of that is inherently negative!

However, when political expedience and facts conflict, we should adapt the politics to the facts, and not the other way around.

That's what the "march for science" was about.
Hockey Stick Studies
Open Sourcing the Magnificent Escape Action
Clifford algebras are used whenever you use Gamma matrices, I think their a well established.
In that case it is impossible to do Climate Change, science, no? It serves the interest of the Democratic "agenda," as a side effect.
The creator u/rcgy posts links to the generator pretty often on D&D reddits so it's very possible! In the future we'd love to hear what features you liked most and what parts you used in your game!
The hardest part of designing this is getting live testing for what parts DM's really need. So many people tell us they use it but so few get back to us on what parts they mainly use.
In music production and C++ code compilation I get a pretty reliable +25% perf boost with HT on (this was not the case a few gens ago though).
> We get to "all science is politicized"

No, just the science that's fashionable to politicize. You can't pretend that this article isn't at least more biased than the people they're supposedly warning us about.
If ARM and AMD CPUs are not affected, then speculative execution in general is not the issue.
He was, obviously.
That is atypical from what I see in the US. In the US, if the pension fund is doing well, that means the politicians offer the government employees unions better benefits, and so all the union members vote for them and since not enough other taxpayers vote against them, we just end up with inflated benefits.
> Should regulators really be preventing a team of people from buying up historical intellectual property?

That's not the question, is it? Take any monopoly from history and examine individual purchases, and they can usually be reduced to a question like yours that seems benign.

Murder isn't the act of firing a gun, it's the act of firing a gun at someone with the intent to kill them.
Not that I know of?

Cambridge Analytica created a quiz that users could take. That quiz asked for permissions from facebook like posting to your feed and seeing your friends list. The problem was that people 1) Don't pay attention to the permissions and 2) the friends list permission gave a LOT of information about your friends.

So if I gave the quiz permission, it also got lots of information from my 600 friends that might not want to give Cambridge Analytica that information.
I was once in a position where I really wanted this, I even made a post on Ask HN ~2 years ago in hopes to generate some discussion and find resources about it [1].

Things have changed for me since then. A year ago, out of mostly good luck, I landed on a fully remote software engineer position (not having remote experience before). We don't have an overwork culture and stick to mostly 40-hour work weeks. Some days are longer and some are shorter, sure, like in most tech startups.

Ultimately, it feels like I'm saving much, much more time just by not commuting. This is not just saving the 2-3 hours per day commute (typical for SF bay area), which is huge on its own, but also a lot of little pieces of time throughout the day -- you can sneak in time to do some housework chores during idling minutes at work (unload the dishwasher when you take your coffee mug back to the kitchen!), you can make a quick lunch in ~2 minutes at home instead of having to go out (even down to the cafe to line up for free food, in the case of big cos).

The end result is that even though I still work mostly 40-hour work weeks, it feels almost like moving to part time work. The best thing about it is you still get full benefits (health insurance is expensive on your own!), and base pay is relatively decent (not as high as SF startups, but still a lot higher than part time employment). And I'm doing fulfilling work that I like, and spending my time productively, to boot.

[1] https://news.ycombinator.com/item?id=14808178
Model 3 owner here. Having same issue as back in March. No AP, no FSD and most frustratingly, no cruise control. Multiple TS steps over phone with no resolution. The earliest appointment was months out so I drove into a service center. A frazzled, yet personable, tech assured me that the issue was NOT from the recent FW update but rather a hardware malfunction with the left repeater. I pressed for details- is it wiring, hardware, physical damage? He couldn’t tell me, but insisted that it had nothing to do with the previous FW update and that another FW update wouldn’t resolve it

Tech scheduled a service appointment for 4-13, much better than I could find in the app. On 4-4 Tesla pushed a FW update, which I guess is pretty common before a service appointment. On 4-5, a Tesla rep reached out and said the issue WAS in fact, with the original FW update and that the more recent FW update had resolved:

“Hello Sam,

We have reviewed your vehicle logs and alerts. At this time we do not see any issues with the Autopilot system as well as you confirming that the system is operating as designed. Since this is the case there will be no need for you to come in for your scheduled appointment. While there is no way to say that you will never have an issue again, at this time there is no issue that needs correction. If you do have an issue in the future you are always welcome to create another appointment with your concerns.”

I responded:

“Ok- I’d still like to understand what happened. It is generally acceptable that the universe is getting more disorderly. It is perfectly acceptable that something goes wrong and we don’t know why. It’s significantly less understandable, that the issue mysteriously resolves it self. Does that make sense?”

Tesla Response:

“Hi Sam,

It was found to be a software bug in the last update that was performed causing your cruise control not to function. That was resolved in the last update you performed.”

The rep then canceled the 4-13 appointment without further explanation or communication.

The issue returned yesterday (5-13) and now the earliest appointment is mid June.

Cruise control existed in 1958. I get that Tesla has “tight integration” but the lack of a fall back/degraded performance mode seems ridiculous. This is before considering the lack of NoAP and FSD, which adds insult to injury- Those features represented nearly 15% of the vehicle cost in my case ($8,000 upfront).

Convenience in LA traffic was a primary consideration when purchasing the Tesla. The lack access to purchased features is irritating, but I knew they were bleeding edge. The further loss of a ubiquitous feature like cruise control is even more irritating. Tesla’s handling of the situation feels ridiculous.
This discussion is a good example of why downvoting, graying comment text, and specifically, downvoting for disagreement, are bad.

The solution to the problem this story is about is robust, fearless discussion in pursuit of truth.

But what I see here are many thoughtful, reasoned comments being shamed and made hard-to-read by people who aren't able or willing to rebut them. It is cowardly and anti-intellectual.

It's effectively the downvoters saying, "I disagree with what you said, therefore I will make it harder for other people to hear you." It's antithetical to the stated purpose of this site: intellectual curiosity.
Better Intel page on the MDS vulnerability is here: https://www.intel.com/content/www/us/en/architecture-and-tec....

Interesting point: "MDS is addressed in hardware starting with select 8th and 9th Generation Intel® Core™ processors, as well as the 2nd Generation Intel® Xeon® Scalable processor family." Looks like my 8700K isn't on the list though.
Facebook is a "Public Square"? Please. Call a spade a spade... it is a "Walled Garden". If you don't like how the roses are starting to smell, well, step outside the gates, no one is keeping you in:

https://www.facebook.com/help/224562897555674
It takes one rouge/unpatched VM to run and scan threads randomly, undetected over a longer period of time, if not patched. With HT disabled potential hits become less likely, but still possible given time. Is virtualization on Intel dead now? Perhaps not. But, it's increasingly dangerous to use Intel for cloud services.
I feel like people with these sorts of hardline views on security, might just be so concerned with safety that their argument misses the whole opportunity cost of not being 100% safe in our usage of technology. If we needed to make sure everything was safe and perfectly secure, the world would have missed out on a lot of innovative software. Tough thing to contend with is that the security people are hardly ever wrong.
I believe "they" were all the people poking the project asking when were they going to support virtual X and virtual Y. He basically stated it would never happen on OpenBSD[1] but here we are with [2] (vmm/vmd/vmctl).

[1] http://www.tylerkrpata.com/2007/10/theo-de-raadt-on-x86-virt...

[2] https://www.openbsd.org/faq/faq16.html

[1] probably isn't the best source out there, I was in a bit of a rush to find it but that is indeed the quote! Gotta either love or hate Theo I guess!
Could you recommend some audio-drama? I'd love to listen to something like that!
If you're going to modify your code to add an extra check you might as well just switch to another algorithm entirely.
> We have a crime epidemic and it seems to me like facial recognition can help

But.. do you?

https://www.cityrating.com/crime-statistics/california/san-f...

Property crime, is up, but not an "epidemic" - that's probably the homeless issue.

Violent crime, it's not any worse than normal.
I actually find it a bit weird to watch something nominally set in the real world where everything is conspicuously covered up, and they get coffee from Generic Grey Cup, their computers from NoBrand Aluminum Cases, their fizzy sodas from Vaguely Red Can Corp., their cell phones from The Unbranded Glass Slabs Conglomerate, etc. In real life, there are some brands around. But in real life, nobody spontaneously rhapsodizes about how awesome their monitor is, or at least, not very often.
> 75 years for non-citizens

WTF?! Years? Seriously? I hope to hell that is a typo.
Navigating Directed Graphs
> Both parties will withhold information in an attempt to appear better than the other so that initial negotiations go in their favor.

I try very hard not to do this. When I'm interviewing for a position, I'm trying to determine honestly whether or not I'm a good fit for that employer, and that employer's assessment of how good a fit I may be is an important part of that.

Fit is important to me because when I'm on board, I'm on board 100%. It's a large commitment for me, and I want to minimize error.

So I try to be honest about my weaknesses as well as my strengths, to allow the employer to make a better assessment about fit. That greatly benefits me in the end.

No employee (or employer) is perfect, and a large part of what makes a good fit is if the imperfections are things that are tolerable by the other.
This is probably one of the many reasons why Amazon has started shipping their own products with their own fleet.
I've been working between 4 and 2 days a week for more than 5 years now. I am never going back to 5 days. Never.
Will Today's Global Trade Wars Lead to World War III?
That depends who you think is in the right. In return for money, a merchant guaranteed a specific delivery date. I paid my money, they failed to to deliver. I contacted them and told them they needed to pick a new shipper. I ordered again. Again I paid money and they guaranteed a delivery date. Again they failed to deliver. Again I contacted them saying they needed to pick a new shipper. Each time they fail to live up to their side of the agreement, they pay me a token amount in restitution. All they have to do is pick a shipper that will actually deliver (or cancel my subscription, which wouldn't pain me in any way) and the cycle will be over.

Who's in the right?
Kind of funny that many of the impassioned pleas to respect science are often pleading for support of things that are not scientific.
Show HN: A tool that lists all 3rd party JavaScript (and image) scripts on a URL
Four must have security audits
Maybe there is a way to run them safely. For example, have an open source part running in kernel, and closed source part that is properly isolated in userspace.
São Paulo is the city without outdoor advertisements.

Random link: https://99percentinvisible.org/article/clean-city-law-secret...
Generally speaking the drives in external enclosures are from the bottom slice of the still-viable drive pool. You'll often find that they have shorter/less comprehensive warranties.
Not on any x86 device, no. Not that I'd be a particularly easy target since I use NoScript with a whitelist and keep my router's firewall very strict. I suppose someone could come at me with a malicious Steam game.
The only "currency" I know with a finite money supply is bitcoin. I may be misunderstanding you but there certainly isn't a fixed pile of Euro notes sitting in a vault under the European Central Bank. Money creation is essential to any macroeconomy, just look at the countries in Southern Europe. They have to deal with atrocious unemployment because they cant devalue. Germany and France certainly can. Sure runaway inflation is harmful, but in the choice of inflation in the high single digit contra 20-30% unemployment, my choice would be to lower unemployment.

If your case is that economic output is fixed I would flat out disagree. It's been shown over and over again that investment increases economic output. Which was very much the idea with Germany's Energiewende
Because of the Curry-Howard-Lambek correspondence.
You got it wrong. It isn't ARM's module that was merged into the kernel, it is a complete reverse engineered Gallium based driver made by third party volunteers.

This driver offers full OpenGL acceleration and does not depend on the ARM's propriety blobs. They re-created all the, as you call it, "interesting stuff" from the user space library.

Edit: I take back what I said, I misunderstood the comment. Indeed, the interesting stuff is in the userspace counter part of this kernel code.
Google Pay Hidden Privacy Settings
I realize there are plenty of ways to get this info already (e.g. in-browser network inspection), but figured this might be useful to people who regularly need to check for pixel presence.
The google results for 'Singapore facial recognition' are fairly useless, would you mind elaborating on their program?
The big museums all have a warehouse somewhere: https://en.wikipedia.org/wiki/Smithsonian_Museum_Support_Cen...

If you constantly collect items, and never discard them, then your collection will just keep growing (as will your warehousing bills). There's far more than can be put on display at many locations.
While counter-intuitive, I have actually encountered this issue with other cars as well, specifically a Ford f150 where an internal problem in the APIM module (accessory protocol interface module, essentially the dash touchscreen controller) essentially bricked the truck by spamming the canbus with erroneous signals. Remember that modern automobiles are rolling networks with multiple interconnected controllers, some of which are required for the vehicle to function.

Note that this doesn't excuse Tesla here, since the situation I discussed is very rare, normally if that module fails the vehicle will still start and run. Tesla engineers should absolutely have been aware of this issue, as pointed out up thread there are multiple tutorials for ras-pi SD memory preservation, and I have trouble believing a competent EE shouldn't be aware of life issues due to eMMC. It also shouldn't brick the car, normally automotive electronics are designed very carefully to avoid single points if failure, with fallback routines and safety "limp-home" modes in case of problems.
Fukushima did blow up. Saw it live on TV. In fact, anything that creates that much thermal energy in a pressurized environment has a chance to blow up.

Fission is a pointless, dirty, expensive technology when it comes to power generation on Earth. It is also not that friendly to the environment once you consider the huge infrastructure you have to operate. But the worst thing is that it is not scalable. Think about exchanging all coal and gas power plants with nuclear reactors, consider the safety and proliferation issues and then tell me that PV with chemical storage is not much simpler solution.
It's a matter of prioritization and due process. Sure, mandatory ubiquitous face recognition at all levels of society might reduce crime. By how much? At what cost to our society? What are the alternatives we could pursue instead to reduce crime, and how do they compare? Those are important questions which deserve a thoughtful, cautious public debate before we rush into implementing it.

I'm personally in favor of these bans because it gives us chance to have that debate.
Amazon does something similar now -- if they see you're following a repeating pattern (say, ordering detergent the first day of every month, or you buy the newest installation of an annual video game on release day), they'll prep loading the product onto their delivery trucks in anticipation of a last-minute order.