skysight-inc/HackerNews huggingface dataset:
Show HN: Dashboard for HN Who Is Hiring
Link: https://who-is-hiring.arxpoetica.com/listing/20083795

Hello all,

I wanted a tool to query against and save job searches and hide irrelevant ones, so I built it. Thought I'd share. Built on the awesome SvelteJS (https://svelte.dev/) framework and equally awesome Sapper (https://sapper.svelte.dev/) deploy platform. The app pulls posts from user `whoishiring` (https://news.ycombinator.com/user?id=whoishiring) on Hacker News, and provides useful tools for sorting and saving settings / filters to localStorage.

Click on the “Home” link to see a list of former posts.

The project is open sourced: https://github.com/arxpoetica/who-is-hiring-dashboard. Pull requests and recommended improvements welcome.

Side note, looking for fulltime work. If you want me to build something in SvelteJS, for example, I'm a contributor. Feel free to hit me up over here: https://arxpoetica.com/. (Don't litter this HN post.)

## Caveats. Here be dragons, traveler, be ye warned.

* This is definitely a WIP, and has its share of problems.

* It uses pretty eager searching against what's essentially text-based querying, so there's a lot of problems on filter / query, such as word boundary searching, etc. So, for example, if you're a Go programmer, trying to query against that term with this setup, good luck. Likewise, “Java” will return all “JavaScript” entries, so that's also really helpful. Sorry for that. I plan on improving it, however, for this to really be useful...

* For this to really be a robust query engine, the HN API job listings would actually need some improvements. It'd be nice to have actual tagged return posts, for example. I think this would require some sort of form submission instead of just plain text submission on the jobs feed, but that would be an undertaking from HN's part.
Yeah that never happened with Microsoft’s Bitlocker
zen3 would most likely be on a new socket, AFAIK. Zen2+ (4xxx series) would most likely be the last cpu for AM4, as amd have stated they will keep sockets for 4 years but that's OK since intel change it about every year or so..
I myself will be upgrading from 1700X to Either the new 8 core... but the 16 core looks so sweet...
Another equivocator. I can't think of a lazier argument.
This struck me as well. The only thing that comes to mind is the way to administer minocycline. But it's obvious that if the treatment works well, other researchers will find other ways to administer this drug, so I don't see a point. They probably follow a standard procedure to recoup the cost of research, but since they choose a generic drug, I wonder if there is a way to monetize it at all.
If Hollywood can no longer do in-your-face American propaganda then the end is nigh, indeed.
$3 per month can be a lot of money, depending on where you live and your financial situation.

Bitwarden is free as in a beer and free as in speech. Only if you want the 2FA features you need a subscription.

Then Bitwarden costs 10 USD per year. That's approx as much as 1Password asks for 3 months. Ie. Bitwarden is almost 4 times as cheap.

For that price you get a very good program with an open source frontend, and an open source backend (third party, in Ruby).

And Lastpass, after they were acquired by LogMeIn, has the balls to go from 12 USD/year to 24 USD/year. Without any additional features whatsoever a 100% price increase? That's why I went shopping. And I ended up at Bitwarden.
Not OP, but I use gestures religiously. Four fingers to the side to switch desktops (useful for 'categorizing' multiple projects), four fingers up to view all windows in a desktop, four fingers down to view all windows of the active app. Insanely useful and productive.
I think I get what you're saying, so you rather get the 8GB model and add on a 8GB RAM stick? For a total of 16GB and a few hundred bucks saved, cause afaik they solder all RAM. I'm all for putting new RAM on a laptop, but unsoldering RAM sounds like too much effort to me.
Yeah let's just throw our hands up and go "awww shucks". Pass.
strongly seconding this essay - it remains one of the most influential things i've ever read, in terms of completely and immediately changing my views on a topic.
Like what do they imagine voice really doing for CAD programs or Excel, ERP, video editing... at least I guess in Photoshop you could switch tools with voice with out moving the brush but that's not that compelling as an example of voice-for-complex-tasks.
Sure, everyone needs to do their part. But people hear about the pacific garbage patch, and they might think that laws like this will materially affect phenomena like this. But it's possible (I'm not an expert) that a law like this would have very little impact because the vast majority of the trash comes from different regions.
umatrix and ublock origin are better options for getting de-bloated webpages. If you're stuck on mobile, ublock origin works in Firefox for Android.
Facts aren't neutral; people choose them, and there are infinitely many to select from. If you bring in ammunition for a political argument, and that swerves the thread into a generic political lane, that's bad for HN even if the ammunition is factual. Please don't do that here.

https://news.ycombinator.com/newsguidelines.html
What are these tasks that people "switch to mobile devices for" while using their desktop? When I'm working on a desktop, there is literally nothing a mobile device does faster, or more conveniently O_o
Endless scroll as a single navigation pattern? WTF?
Unless your CEO loves talking about CVEs all day long, I think we should all be grateful for these good-looking marketing campaigns for serious security issues.
Where's the gotcha? The device is for studios, not home gamers—so what?
On a Windows box I would agree, but on macOS gestures are so productive that you actually lose quite a bit of productivity by using a mouse - even Apple's Magic Mouse.
Regarding Greenspun I have to think about a colleague. He is a studied mathematician. So in the past 15 years he was working on a tool in Perl. Now he switched teams and is tasked to work on a Python problem. You don't hear about him for weeks besides he need to setup is development environment. Then he comes back and starts to code. It seems like he doesn't need to spend any time learning Python. You look into his code and also have no idea what's happening or why it's working.

What he basically did was implement his own programming language out of lists, dicts (hashtables), and functions, with class hierarchies, type checking, inheritance, etc. And the time he spent "setting up his system" was the time he needed to basically code his VM engine in Python instead of Perl, and then adapting his standard library files to the quirks of the underlying interpreter.

It was weird for me at first, but actually makes sense if you look at it mathematically. A math lover starts with defining zero, one and plus, right? So this is the only logical way to program for him. He doesn't even know what a VM or standard library is.
Loads are only a single uop, and this uop is responsible for doing the address calculation and starting the fetch (the results are usually passed directly to the operations that consume them, the "receive the fetch" part is their job). So logically there might be multiple things going on, but it is reflected in a single uop dispatched to either p2 or p3, not breaking any "one port, one op" rule at that level.

Stores are different: they are two uops, STA (store address) and STD (store data) and they need different ports p237 for STA and p4 for STD and so they play within the rules as well. Basically the two ops are needed for the separate inputs they use: the store address, and the store data and they can execute happen independently. Loads OTOH have 1 input (the address) and one output.

Note that loads _can_ actually end up dispatching multiple uops, in the case of a cache miss!

If the load uop misses in L1 when it executes, it gets replayed 7 cycles later, with the idea that the data will be arriving from L2 if there is an L2 hit. If that also misses, the load will replayed a final time when the data arrives from L3 or DRAM (there is no additional replay for an L3 miss, because the latency is variable so the load just goes to sleep waiting for the result, whether from L3, L4, DRAM or wherever). The replayed uops still have to play by the one port, one op rule.
I think you are too literal. Its a fox made of fire, not just a red fox.
That McDonald’s thing sounds clever but it boils down to “the US’s Cold War system of alliances lined up closely with its economic ties.”
If there was ever an administration more deaf to "I told you so," I've never seen it.

Too bad this will change nothing.
It pains me to see how many posters on this thread are not aware of the leakedsource (.ru, .co, etc.) websites that show the exact thing HIBP shows, except with a much higher fidelity.
A lot of people online swear by the Hazlitt book - has anyone here read it and would like to share their thoughts?
There was a good podcast with a famous FBI negotiator, Chris Voss, who recommends if you want to sway someone, frame it as, "are you opposed to doing X?" rather than "should we do X?". People are more likely to agree with the former.
In Castoria
And their status page[0] actually indicates it as well!

I'm used to the status pages from Amazon, Google, etc. pretending everything is okay for about the first hour or so of an outage.

[0] https://www.fastmailstatus.com/
Not unless your attacker has physical access to the machine. You still have to touch the device to activate it each time.

This still mitigates the most common MITM-type attacks:

1. Attacker instigates login via fake portal.

2. Attacker fools you in to entering your 6-digit OTP.

3. Attacker intercepts your valid OTP, combines with your stolen password, logs in to real site.

This doesn’t work with a YubiKey or the equivalent because of the back-and-forward cryptographic signing. The request has to come from the website you’re logging in to, which it doesn’t in this scenario. It’s the weakness of part 2 above which we avoid here.
Might be a good idea to replace link with https://www.fastmailstatus.com/

Of course this happens on the one day I actually have time sensitive emails. Sigh.
Apple Enters the Identity Ring
> a bit is more likely to flip when the bits above and below it have the opposite charge. ... To exploit this effect, we developed novel memory massaging techniques to carefully place the victim's secret data in the rows above and below the attacker's memory row.

The secret data has to be duplicated, column aligned, and have a single unallocated row between it. Controlling the alignment of the secret data seems like a major complication for realistic exploitation.

Edit: The strategy in the paper requires allocating a bunch of physical memory from all the small blocks so that memory allocation requests from a new process are allocated deterministically to a desired physical row.
It's also worth noting that the ideas they're proposing already exist, at least to a large extent. The "panel" system just looks like a tilling window manager, tags were a thing on BeOS and are implemented on userspace by KDE etc. for global search to work better and you can already control your PC by touch & voice, macOS puts Siri front & center for that matter, (not that I think that's a good thing).
Oh god, no. By not voting, I've surrendered to what the entire crowd wants by average (which might be entirely counter to the direction I want). By giving my vote to someone else to cast, I temporarily empower my leader who stands for my principles or movement, who may understand better which policies to vote for on my behalf.
These recent CPU and Memory vulnerabilities are calling into question the economics of the public cloud. A lot of these bugs only really matter if you have multiple programs from different entities running on the same computer system. A company that has its own private cloud, doesn't have to care about these attacks so much.

The cost of mitigating these attacks both in terms of CPU performance and increased hardware costs may offset some of the economies of scale.
Best of luck with this! But fundraisers can't be Show HNs: https://news.ycombinator.com/showhn.html
Looks like it’s reverted to some default WP theme.
> Whenever you pay cheaply for anything made in any third world country, you're externalizing the societal cost of pollution to that country

That's true maybe when it comes to atmospheric pollution, but not with plastic waste in rivers and the ocean.

The majority of plastic found in rivers and the ocean are not industrial waste but post consumer waste... things like cigarette butts, plastic bags, and food wrappers.
Ya it sucks. I had a client whose data was stolen and uploaded to his site. He wouldn't reply to me... He works for Microsoft and his operation mostly benefits the big companies - and can really damage a small company that happened to start out with bad software.
Fasterdata: DOE guidelines around maximum network I/O performance
Not really, because an attacker still needs physical access to the device. It still protects from someone with your password getting into the account (unless they have your laptop)
Whenever I hear about flat organizations the old quote comes to mind: "All animals are equal, but some animals are more equal than others". It seems to me that all these orgs are a few people at the top that have a say and everybody else needs to survive through a lot of political skill.
Fair enough. Those commissions do compress as the house prices climb into 7- or 8-digit ranges, and there are always discount agents. The one in my area buys billboards that promise selling the house for 3% flat.

I was hoping perhaps someone from the industry could comment on why those agents haven't overtaken the market by storm.
> Most people are far better at what they do with their mobile phone, than with their desktop OS.

Maybe instagram influencers, but what about developers, media producers, authors, and on and on and on where high output of creative work is the goal?
Signed exchanges are a terrible idea. They take control away from publishers and let large sites (AMP caches) control small sites. Google punishes web publishers with a traffic drop unless they allow Google to serve their websites from Google's servers and include Google's JavaScript. AMP, signed exchanges, and portals can't seriously be considered real standards.
AMP is anti-competitive behavior
Github could be crucial in helping to win this war. The problem is not only that journals are behind paywalls (luckily sci-hub is helping here) but also the format we use for publishing and review is from last century. Github could help to make it easier to share articles with the code and data used to obtain it, and to have better process of peer review.
Listen to the users and the designers, work on a great team, and read the source code of the frameworks you use as you learn them.
Great news. I think Brex has a great idea. But if anyone can, please do shed some light for me on how they grew so fast ?

I mean, I can see how Bird etc would achieve a 2B valuation fast, they're B2C so you can see them everywhere.

Are they signing up thousands of customers at an astonishing rate or is this funding more related to potential growth ?
I can't reply to js8 due to the indentation level, but that's somewhat new to me.
Semi-direct democracy when people use the term seems more related to some occasions where everyone has a chance to participate in a decision, through an initiative, referendum or similar. Wikipedia describes it like this.

But it does not talk about cases where you could opt-in to vote on every decision, and if you did not your representative would vote for you.
Basically, you would chose a representative like you do in most countries, which would have the n votes of the people that elected him by default, but at any time you could say this vote is for me, your representative would have minus one vote and you could vote anyway you feel like.

This seens a bit more manageable than what jadbox describes in that you do not have to track potentially million of representatives.
The biggest issue would be on how you could vote, because the window has to be relatively short for things to happen, but long enough to allow everyone that wants to to vote.
>Do trains have an uphill battle in car and air travel centric America? Most definitely

Figuratively and literally (because trains have a much harder time going uphill than cars)
Let's solve everything with VR. Throw in some cryptochain as well for good measure.
Very good, you clearly got a very accurate grasp of the low level details. Thanks for writing such an informative guide!
>Naming a car Nova can cause trouble in Spanish-speaking locales (“no go”)

That's an urban legend: https://www.snopes.com/fact-check/chevrolet-nova-name-spanis...
Another way to put this is "bias for action"
It shouldn’t be easy to make GLOBAL changes within the organization, even by those WITH some power.

Global Changes imply that someone has the power to changes how the whole organization operates, which is the whole point of concentration of power.

If something is that major, then all the participants or factions have to unite on that one thing and then disband.

There is no “club” and there is no single “club account” that a treasurer controls. If there has to be one for purposes of interfacing with others, we have a computer network emulate it to the outside.

Concentration of power can be defined, measured, and opposed in principle. The question is, can any structure prevent it? Every unit of time it has to be more expensive to maintain a faction than to let it disband. And you have to factor in all the possible ways to profit by collusion, that’s what the challenge is.
Show HN: NuronLabs – A Worldwide Neural Layer
Here's a plain version without the Oath consent form: https://outline.com/BhZZTZ

This one might be a better article: https://news.ycombinator.com/item?id=20158002
> And in Germany, at least as far as I am aware, these broad regulations some US employers try to force on their employees have been thrown out by court decisions. But not sure on that.

Would be interested to hear about specific court decisions!

In general, this topic is not quite so clear, even in Germany. For a contrary argumentation, have a look at: https://www.lieb-online.com/files/luxe/publikationen/Urheber... (covers both Urheberrecht and Patentrecht, 15 pages, argues seemingly mostly in favour of the employer, but that does not mean they are wrong)

Keywords to search for, if you don't have the time now to read it as a whole:

- Freizeitwerk / freiwilliges Werk (it's a difference! but just because you do something in your freetime it is not necessarily a Freizeitwerk, in case your job is to produce such works and it could be of use to your employer, this is arguably not the case)

- Beweislast (just because you say or mean it to be unrelated to work, does not automatically mean it is -- side note: the bigger your employer, the less you can know about what is in their interest or not)

- Anbietungspflicht (describes the case using work ressources / work time)

- Pflicht zur Anbietung (for the free time stuff which is not "totally unrelated to the interests of your employer" -- so "automatic transition of usage rights via contract" is indeed suspicious and likely to be undermined in court, but they have a say if they want it)

Sounds somewhat like slavery indeed. ;)
Perhaps I'm missing something really obvious, but doesn't hardware-provided memory encryption solve this quite handily? You might be able to read single bits of raw physical memory from another process, but this won't tell you anything substantial about what that process is up to.
Even extremist Shia Iranians, from what I have read and heard, view Wahhabi Sunnis as radical.
It's interesting: Chinese cash is welcome in real estate and the US treasury market. What is it about startups that makes the government concerned?
2019 Open Source Database Top DBs, Public Cloud vs. On-Premise, Polyglot
Thank you for this - bookmarked for the future.

My uarch knowledge is a bit out of date; would you happen to know if the following can still cause performance problems in modern Intel/AMD?

- call/return address mismatch

- mixing int/float vector instructions with same register

- false dependencies between partial registers (ie. AH and AL)

Thanks again!
>I could see F-Secure making an offer

I'd be surprised if F-Secure made another acquisition so soon.
Yep. I have a client that is working on arresting someone who uploaded all of their customer data to this guy's website. None of them will answer - it seems like they only care about money and their operation just benefits the big companies. Most small businesses don't have the resources to completely security proof their custom services against these $3K+ hacking tools that the script kiddies use (who steal data and upload it to Troy's services).
The new Yubikey's with NFC support work on my 2 year old iPhone already.
Weren't plastic bags created because they have a significantly smaller environmental impact than paper? You need to re-use a paper bag at least 3 times before it's better than using a plastic bag[1]. And let's face it, no one re-uses those flimsy paper bags from grocery stores, but they're becoming the standard wherever plastic is banned.

Those "environmentally friendly" re-usable grocery bags aren't much better either. Depending on the material, they need to be used anywhere from 30 to 300+ times before they're less harmful than plastic bags[2].

Am I missing something or are regulators overreacting here? Clearly some countries have serious litter issues (sounds like the vast majority comes from Asia and Africa), but does that justify the rest of the world trading one type of pollution for another? Are we even fixing the problem or just making ourselves feel better?

[1] https://www.gov.uk/government/publications/life-cycle-assess...

[2] https://www.theatlantic.com/technology/archive/2016/09/to-to...
I really wish they would include exceptions for biodegradable plastics -- which are increasingly indistinguishable from polymer plastics.

When you ban "single use" plastics, people often buy "multi-use" plastics -- which are actually worse for the environment if not used many times, and people often only use them once. There are a number of stores around me where they have thick, heavy plastic bags for purchase for 5 cents that I doubt are actually being reused much at all.
There was a time when r/politics was generally about the US politics. Now it's been almost only "Trump is bad" content for several years.
I'm curious if an A/B test was run for this. Didn't we all agree that full-screen cover images were bad UX? Especially for a news source, that seems like an odd call.
The fact that you can't change your brightness before logging in is pure stupidity on Apple's part
The i.MX8 cannot be deblobbed
Yeah, I had to clean off a computer of a friend who passed to make it "safe" for his son to use. That was an eye-opener experience.
PC Gamers Are Slowly Switching over to Console Gaming
Eventually, people will get tired of drawing pictures of houses and shopping trolleys, the glyphs will become increasingly simplified and abstract, and we'll finally have Yingzi. https://www.zompist.com/yingzi/yingzi.htm
They still have tons of it to dispose of, and still have lower regulations/controls on how it gets disposed of.

And now there is a backlog of recycling plastics in north america that is increasingly likely to get thrown in landfills, some of that may make it to waterways.
If this attack is a concern then so is rowhammer. So you can basically ask whether cloud providers have mitigated rowhammer.

AMD's SEV might help protecting VMs from each other.
The stock market has historically been very safe in the long term while risky in the short term as well.

Edit: As long as you are diversified and not putting all your money into meme stocks, of course
That seems a like a great place to work.