skysight-inc/HackerNews huggingface dataset:
Privacy.com | Product Engineer / Full Stack Engineer | 110 - 160k USD / 0.01 - 0.25% | New York, NY | Full Time | Onsite

About Us

At Privacy.com we've reimagined the way consumers and businesses buy online by creating a one click checkout experience everywhere online - all while protecting our customers' financial information by making unique and ephemeral payment card numbers.

We're a small venture-backed company looking to expand our team to keep pace with our growth. We're nimble, product-focused, and working on a multitude of interesting technical challenges across payment processing, fraud detection, scale, and predictive analytics.

Roles

Product Engineer

As a Product Engineer at Privacy.com, you'll work at the intersection of design and engineering to build effective and delightful experiences. You have a strong desire to understand the needs of the user and enjoy collaborating with teams across the company on building and shipping products. You'll be working primarily with Javascript (AngularJS, React Native) and SASS/CSS on a variety of platforms including web, mobile and browser extensions.

More Info: https://angel.co/company/privacy-com/jobs/566489-product-eng...

Full Stack Engineer

As a full stack engineer at Privacy.com, you're just as comfortable working with Javascript promises as you are with multiprocessing in python. You'll have the opportunity to work on a variety of projects and languages, ranging from our browser extensions to our real-time financial transaction processing engine.

More Info: https://angel.co/company/privacy-com/jobs/307492-full-stack-...

Apply through AngeList or shoot us an email to jobs[at]privacy[dot]com
We are definetly not safe
If you've got friends who have time to complain about it, but not the time to move conversation to WhatsApp/FB/line/telegram/WeChat/...anything and prefer to exclude you, are they really friends? This honestly makes me angry when people say they're pressured into buying a high cost device.
I haven't been able to find anything in the C11 standard about the initialisation of bar being a constraint violation. In 6.7.3, the only constraints for type qualifiers listed are for _Atomic and restrict. Could you let me know where you got the information you talk about here from? I could be missing part of the standard.
> the newer APIs do not share all my web traffic with the extensions

The webRequest API can observe the URLs you visit without needing blocking permission.

And so does the webNavigation API, the tabs API, history API, content scripts, possibly cookies API and whatever else does not come to my mind.
So was I; in the end I had to cave as nothing was particularly good, sadly.
Well said, never thought about it that way.
Radical Proposals to 'Refreeze' the Arctic
Because any business in china is much more an extension of the Chinese government. There's a perception of Chinese people and companies doing things for the reward they'll get in treatment by the government.
It's hard / impossible to tell from the images but there's the tiniest amount of rounded concave to the keys.

When I look at it from the side you can see the keys sink towards the middle, but it's a lot less than other keyboards where this feature is more distinct. It's much less than the Thinkpads.

Thanks for the tip though. As I was writing the post I was thinking about what other characteristics there were of keyboards and I never thought about that one.
Thanks for the link, I'll take a look :).
I don't speak German.... How do you say walk/hike?
> Obviously, no deal is bad for the UK and the EU too, but how can the UK Government negotiate with their hands tied?

You have succinctly described one of the devastating flaws in the Brexit idea. The UK has very little leverage and the EU has a lot of incentive to make it very painful for the UK, as a warning to other would be EU deserters.
I mean that's exactly how Firefox operates. They divide the opposition to feature removals by continually allowing the most vocal critics a workaround, until finally when it's removed completely most people have already learned to live without them.

They moved the option to keep browsing history but not keep download history to a user-pref, and then later removed it.

They moved the option for tabs-on-bottom to a user-pref, and then later removed it.

They moved the disable-automatic-updates to a user-pref, and then later buried it in an external policy JSON, which I guess it's okay to see if that file exists at startup but not the user*.css files.

And on and on.
I've witnessed some Standards negotiation in a previous job, involving the Khronos OpenMAX standard (which is DirectShow/GStreamer for mixed HW/SW multimedia codecs).

My company and another had opposing solutions to a problem, which made opposite tradeoffs and opposite implementations (ours worked better for a more HW-focused solution, theirs for a more SW-focused solution)

How does one choose? In the end, it's backroom negotiation, diplomacy, and compromise. In other words, politics.
Grsecurity: Teardown of a Failed Linux LTS Spectre Fix
"you fundamentally cannot know what will come out the other side"

This is a baseless and false claim.

"Nobody wages war or starts a revolution knowing what the outcome will be either"

Even if true, this isn't relevant ... it cherry picks extremely chaotic changes to shore up a completely invalid argument.

"That's the nature of change."

No, it isn't ... well understood, predictable changes are executed all the time.

"We're fortunate enough to live in a world where we can vote for change instead of kill for it."

Not relevant.
Less accomodating everyone & everything.

It needs more simplicity.

Like the rasp issue - the cables marked active work while the ones not don't. Or vice versa? I don't recall. Never seen any such markings - but apparently there is a distinction there that some how interacts with raspberry not having enough capacitors.

^^ See that paragraph of confusion? That's what standardization chaos looks like. Neither I nor apparently raspberry foundation know whats going on.
C isn't just legacy, it's fundamentally broken. Rust is the future. C++, while it mitigates some of the brokenness of C, favored backward compatibility with C over fixing the brokenness once and for all.
> This is the first language in my 23 years programming that reports my usage back to the language authors

I suppose that means you haven't used any of:

1. nodejs, which reports your usage back to npm Inc with the exact same amount of detail (names of dependencies, ip of caller) (and stores much more, since it publishes 'downloads per month', etc)

2. rust, which does the same with crates.io

3. perl, which does that with cpan

4. python, which does that with pypi

5. ... etc

All of those languages have a central registry of packages that has the same level of detail in the metadata it can potentially collect as the go proxy does.

> This "feature" should have an option to disable it.. at the very least.

It does. Multiple options. You can run your own proxy, disable it entirely, or opt out of the go mod experiment and never run go get, but rather vendor by hand with `git clone` or whatever.

> And the truth is, if this is ok to you, then there's really no limit what the code I write today, may report back to google tomorrow.

Very much a slippery slope. They've communicated clearly how to disable it and what it does, it's in-line with what other language ecosystems do in terms of metadata reported to a central package repository, and I think it's very easy for someone to be okay with this, but to not be okay with any step beyond this line.
They are probably trying to figure out where you are from. As an American with Norman and Germanic ancestry I get stared at periodically when shopping, and I think they are trying to figure out what is off about me. I definitely do not perceive it as friendly or welcoming in any way. What is unique about the Germanic stare down is there is no effort made on the part of the starer to avert their gaze or even acknowledge that they are staring. Walking towards the starer usually encourages them to turn away.
I thought Model 3s didn't have keys.
I really hated going to nude camps with my parents during the summer. I think that was a form of child abuse. For me, freedom is being naked alone in the wilderness where there is no one around, not in some crowded area with other naked people.
There's a very good point here about the limits of using usage telemetry -- given a question of the form "should we invest in improving feature X?", it's a mistake to decide not to simply on the basis of low usage. Low usage could be because users simply aren't interested in the feature (in which case it probably doesn't make sense to invest in improving it), or it could be that they really are interested in it but they don't use it because of limitations (in which case it may well make sense to invest in improving it).

However, I don't believe that's an issue for the specific features discussed here (userChrome.css and userContent.css). These are by their nature features that are only accessible to users with particular knowledge/skills and the Firefox user base is much broader than web developers. But moreover, nobody is proposing to remove this capability and I think its debatable whether it is now harder to access in practice (existing profiles that use this capability were automatically converted, for new profiles you already have to manually add a file to the profile directory, flipping a preference in addition is not a serious barrier).

> I don't know if it's a purposeful process or not, but I'd say it's perfectly reasonable for users to think that pref-gating is the first step toward removal

It might be reasonable if no other reason was given, but there is a specific and compelling reason (avoiding unneeded main thread I/O during startup for something like 99% of users) here.
I feel that all of this would be MUCH less of a problem with simple code that are required on each USB cable with the exact specs it supports. This code could be put into a tool which then decodes to show what exactly that cable supports.
Exactly, they can't. That's been Boris' point all along, and why he's calling for a general election tomorrow as a result of this. But rumour has it that the opposition will vote against a GE too, forcing Boris to negotiate in this circumstance. It's absolutely appalling.
The Big Exit: Can Minnesota Expect Another One Soon? Why or Why Not?
*It allows devs to create those apps _within a VPC_.

You could always have fast startup with Lambda + database outside the VPC.
> we're talking about millions of people deliberately destroying stuff out of a mix of spite, arrogance, and folly.

> ......But even then, it was mostly an idea that probably only very few people believed was good.

Very good points.

I agree the Culture Revolution has caused great damage. I don't think it shifted the core of "Chinese culture". It was "rectified" quickly and today people understand how bad it was. OTOH, The New Culture Movement had probably caused more impact. I'm not saying the NCM is bad but its effects are significant and long lasting.

https://en.wikipedia.org/wiki/New_Culture_Movement

Please let me know your view on it.
Is anyone getting flashbacks to "The Big Hack"?

It feels like maybe Bloomberg knew of something but got the wrong root cause- it seems a lot more likely for someone to sneak in a slightly-reprogrammed BMC than change board layouts /etc., especially considering just how much control BMC's have.

Yikes.
> You could argue that much open source work is like volunteering to serve food at the local country club.

It's more like volunteering to pave the road in your neighborhood because you want to help your neighbors out, and also to make it easier for your friends to come visit you at your house.

But eventually, some local small businesses realize that they can use the road to get their commercial goods to the market faster. At first, you don't mind because they're not causing much harm. Why not let them use the road?

But eventually some international megacorps hear about the road and start to tell their trucks to use it too. After a while, some of the truck drivers start to loudly complain about the way the road was designed. "This road doesn't let us drive our trucks as fast as we want to. Please fix!"

Next time you're repaving the road, you spend some extra time to make it less curvy and easier for the truck drivers to drive fast, even though you don't own a truck and this doesn't really help your friends or neighbors.

Eventually, even more huge companies start using the road to bring their goods to market. Their complaints get more frequent. "This road isn't designed for our eighteen-wheeler trucks that we'd like to drive through here! Please fix it or we'll start using another road!" And on and on...

Eventually, you realize that you're working for free and this isn't about helping your friends and neighbors anymore. You start to tell friends in other neighborhoods who are considering building their own free public roads not do it (it's just not worth it). You recommend if they want to do it that they at least charge a toll to use the road. That way the road won't be overused by folks who complain and don't give anything back.

After word gets around and some time passes, the world has fewer public roads and the remaining roads require a toll to use.
I'm only about 2/3 of the way through but I really enjoy it.

The NY Times seems to like it. https://www.nytimes.com/2019/06/14/books/review/fall-or-dodg...
> None of the people working on this spec are idiots, so how did they arrive here?

I’m convinced it’s so they can advertise as supporting USB4 when they really only support the slowest (aka cheapest) method
The documentation makes clear, if someone accidentally commits something they shouldn't (i.e. a file containing your users personal details, credentials, etc...) then it is stuck in their proxy forever. It is clear that google employees believe we live in a perfect world where all employees never make mistakes.

https://proxy.golang.org :

> "...the mirror aims to cache content in order to avoid breaking builds for people that depend on your package, so this bad release may still be available in the mirror even if it is not available at the origin. The same situation applies if you delete your entire repository. We suggest creating a new version and encouraging people to use that one instead."
I'd phrase it slightly differently:
The leavers believe ignoring the results of the referendum is essentially a coup.
The remainers think respecting the results of the referendum is essentially a coup.
An Astute Observer's Report from the UK Parliament – 3 September
You just made millions of stupid, ignorant Americans excited for the possibility.
Where do you live in San Francisco? There are tons of Amazon Lockers there where you could pick up a package.

Here is a search on Google Maps.

https://www.google.com/maps/search/Amazon+Lockers/@37.758045...
When you put it that way it makes it sound like an organization that just strongarms others into joining it, rather than it maybe actually being in their best interest.
Neither have you refuted that this has been a historical game of stack ranking literary genres and I’m asking when we will grow up and let people enjoy good books.
thanks but I don't want it
This is talk is responsible for my outrage whenever people say math is invented.
Your middle paragraph was true, but is now outdated as of the last 15 years or so. This is indeed how the MIT Blackjack Team worked, as documented in books like Bringing Down The House.

However, casinos now know of and how to foil this strategy. The countermove is to prohibit entering a table while a shoe is in progress. Either the new player must wait until the deck reaches its established end point at the cut card, or the deck gets reshuffled immmediately upon the new player entering. Either way, an incoming player can't take advantage of any count.
Lots of things can be said when one doesn't care about logic or sense. What you responded to was a valid point.
None of that means I can't have a second say after two years and a better understanding of the repercussions. In HN speak I need to evaluate my trajectory and either pivot our stay the course. Just not allowing myself that freedom is just bad policy film a personal, business, or political perspective. People can and sometimes should have a chance to change their minds.
Cancelling Async Tasks with AbortController in JavaScript
The problem is that gambling is a zero-sum game. By your logic, the crypto market being played in 2017-2018 was perfectly ethical even though people's life savings were being drained to fill the pockets of other people who were capitalizing on the ignorance of the layperson.
West Virginia, specifically Charleston. The general lack of eye contact was more pronounced in remote groups and less prevalent in Charleston proper, and I really never noticed until I spent time up in Morgantown at the university. Seems far more common in the deeper southern coal fields and almost non-existent in the north. Presumably this has to do with immigration waves and when parts of the state were settled (or when the industrial owners brought in large numbers scab labor), but I've never seen a study on it.
This the funniest stuff I have seen in Parliament. The PM lost his first vote, his majority, control of parliament and now they’ve withdrawn the whip from 21 of their own MPs. All because of two political geniuses who decided to prorogue parliament. Brilliant. ORDER!
Iconoclast view ahead (change my mind please):

AWS does tons of stuff around VPCs....I feel like they really want me to use them (or their customers really want to use them), but I just don't see why.

I just run RDS on the internet. I don't have to muck with the complexity or cost of NATs or peering or Lambda slow start or any other weird networking issues.

I know it's "public", but that seems irrelevant in the era of cloud services. This isn't any different than, say, how Firebase or a million other services run. Should I be concerned that my Firebase apps are insecure because someone isn't overlaying a 10.* network on them?

EDIT: I should clarify that I understand the legitimacy of security groups, especially for technologies that weren't meant to operate outside a firewall. But that's mostly a different subject; AWS had security groups years before VPCs and subnets and NATs.
There's a major, major hosting company whose server IPMIs all had an internet IP and used a default password for an unreasonably long time. I'm honestly not sure how this company is still around.
This gentleman suffered for the entire day in order to bring us this excellent summary from today's extraordinary session of Parliament. He is on Twitter at https://twitter.com/IanDunt

His most telling comment:
"I never fucked up harder than when I forgot to buy some of those little G&T cans when I came into work today."
Yes, no soldering. Here's an example of the sort of thing that is sat on my desk:

https://lastminuteengineers.com/esp8266-dht11-dht22-web-serv...

If a NodeMCU board is too big for you then an ESP 01S is smaller and even cheaper. Less I/O options though but very useful. Needs a writer and wires to program. You can get one with a relay that is capable of switching 16A.

https://frenck.dev/diy-smart-doorbell-for-just-2-dollar/ - here's an example of a project. $2 is a bit ambitious I spend £7 for two of them on Amazon. That's two ESP-01S and two relays!

I don't do Arduino. esphome is a lot easier for me. You use pip to get the thing installed under your user account. Write a .yaml file which is largely copy and paste from examples and then install it through a USB cable the first time and then over the air after that.
You've posted 4 comments in this thread already. They're the exact same responses I see 20 times in every reddit thread, but in this case they're all from the same person, so maybe some actual discussion can happen.

It seems self-evident to me that a set of people exists that wants Brexit with a "good" deal, but does not want "no-deal" Brexit. Which way do you think those people voted on the original non-binding referendum? Which way do you think those people would vote on a second referendum, with the actual choice between "no-deal" and "remain"?

It is also self-evident that the same people okay with "no-deal" Brexit voted "Leave" on the original referendum. Suppose a second referendum is held, and "Remain" wins because the "good-deal" Brexiters above are no longer voting with these "no-deal" Brexiters. Weren't the "no-deal" Brexiters a minority the whole time? Why should this minority get what they want, at the expense of the majority? That's the current trajectory.
Advances in Financial Machine Learning Package (Python)
The latest version of mlfinlab (Github) has been released.

A package based on the book: Advances in Financial Machine Learning by Marcos Lopez de Prado.

```pip install mlfinlab```

This new release is our biggest to date and includes code for:
1. Sequentially Bootstrapped Ensembles (Regression & Classification)
2. Purged Cross-Validation
3. Feature Importance
4. Bet Sizing (+ EF3M)
5. ML Asset Allocation (HRP, CLA, IVP)

Documentation can be found on Read-the-Docs.

https://github.com/hudson-and-thames/mlfinlab
Location: Rome, Italy

Remote: open to it

Willing to relocate: Yes (preferred)

Technologies: Java, Python, C, NLP, TensorFlow, Keras, Pytorch, scikit-learn, pandas, Matplotlib, NLTK, spaCy, NumPy, SciPy, Nginx, Git, Android, Linux, Embedded systems

Résumé/CV: https://www.linkedin.com/in/federico-scozzafava-3657a5128/ | http://wwwusers.di.uniroma1.it/~scozzafava/

Email: federico.scozzafava at gmail.com

Experienced Phd student in NLP
They come with NFC credit cards
There is a full quorum she can call for - the full Privy Council, over the usual three government MP's. I'm not sure in what circumstances, but it's been claimed that even asking for this would be judged to be exercising political involvement.

Impossible position, much?
It's very popular in the audio community for making audio cables. I used some myself to make a sleeved and braided aux cable and it turned out really nice. Gives the cable a nice feel.

Also, I'm not sure if it's the braiding or the Paracord (or both?) But it's very anti-tangle.

I also used cable with a thin flexible jacket, so it doesn't stiffen up like a twig in winter.
I want an interest only mortgage when rates go negative.
Sitting happy on a Pixel 1 from 2016. Android gets better and better.
Good job completely failing to address actual problems, USB-IF. What do people actually need? They need to be able to easily tell what the port on their device is capable of doing and they need to avoid buying chargers, cables, and devices that violate the specification, especially when they do so in a way that might destroy a device or even endanger the user. Unfortunately the only thing the USB-IF cares about is "Moar megabits! Moar!"
Either you (literally) didn't mean "literally", or you're being wilfully ignorant. There's a significant minority who are more than happy with the idea of a no-deal Brexit and who voted for it with the understanding that may be the outcome.

As far as the last part of the final sentence goes, one could also make a similar argument that the remain side should have shown some responsibility with regards to not utterly destroying the negotiating position in order to purposefully sabotage Brexit such that it becomes unsalvageable. But hey, them's the breaks and here we are.

I don't know what happened to make people so sure that the other side is always either evil or was tricked into its position, but it seems to be the way these days. Sometimes people just disagree. Sometimes they even have perfectly understandable reasons for feeling that way. We would all do well to presume our personal objective "rightness" a little less often in this day and age.
If you commit and push your credentials, they have been compromised, full stop. This proxy should make no difference to how you handle such a compromise.