skysight-inc/HackerNews huggingface dataset:
I think they chose a default that was designed to provide a better user experience. If you can't even let the google know what your dependencies / stack is then I think you can run your own as well.

Would be interesting to test the security at some of these companies where this is managements worry. How do these companies worry about dependency leaks but then leave huge S3 / remote exploitable web holes totally open?

If google as an adversary is your worry:

What about all the folks your org emails with that use google in various ways (including perhaps their email stack that they've turned over to google?). How many users are using google single sign on lots of places? How many of their users are using android with telemetry? Browse websites using google chrome? Browse websites that themselves use google analytics.

Google / Apple / AWS / Microsoft are at the root of trust for a lot of what happens online these days.
so now its 40k instead of 10k
What do you mean by this reference to an older Java version?
Advertising is an issue of user autonomy and a user's security in their autonomy. Users don't want to see ads. A browser that is supposed to be "for the users" shouldn't have its main screen be something that their users specifically do not want.

For most of us, adware is a type of malware. For Mozilla, they have a tradeoff between user autonomy and cash flow. They can at least say that the bad things they do are because of the sacks of cash and not for any positive user "experience." Lying about it makes it worse, not better.

Aside from ads, there is the issue that Firefox comes with backdoors (see Mr. Robot ad) and spyware (see telemetry that can't be opted out of.)
I only asked on similarities of big public involvement in both cases. If vague memories or feelings can turn into false memories under high informational stream, could it be related? I didn’t mean anything that could be viewed as a refusal or silly joking.

I have a couple of my false memories myself, and these feel very real (but still false). What prevents few of metoo public-induced cases to be alike?
MeetEdgar | Senior Full Stack Developer | REMOTE (North America) | Full-time | https://meetedgar.com

We're a self-funded SaaS company with a dozen employees, half a dozen dogs, 5000 customers, and a new social media update sent out every 15 seconds.

We're looking for a full stack developer to help build and maintain our social media management tool, Edgar. If you want to help us help small businesses succeed beyond their wildest dreams by banishing social media busywork forever, keep reading!

Your experience should include...

- A history of professional experience as part of a software development team

- Senior-level development skills and the ability to handle the full development life cycle from start to finish (for us, senior-level means you have the skillset and previous experience to fairly fearlessly approach even the major-est changes we want to make to the product; a proven history of exercising good judgement in decisions that consider the full scope of the project; and that you deliver code that not only works but is well-tested, well-reasoned, and well-documented as needed)

- Modern JS development experience with React and Redux (or similar)

- You've solved common problems like authentication, payment, asynchronous processing, and scheduling

- You have been celebrated for your communication skills and commitment to working as part of a team trying to build something together!

- You've worked to improve the dev process in previous roles and recognize the value of maintaining and contributing to an awesome company culture

Apply here:
https://docs.google.com/forms/d/e/1FAIpQLSe3Y4t0VUO2oSwHY0Bd...
This feels like it doesn't live up to its own hype because it doesn't really exhibit a production-quality deployment of a Python application but something closer to a dev server. It uses a single-threaded flask server behind a nginx reverse proxy without a WSGI layer to handle multiple requests, etc. Here is the nginx code:

server {
listen 80;
server_name: localhost;
location / {
proxy_pass http://fai:4242/;
proxy_set_header Host "localhost";
}
}

According to the docker-compose.yml file, fai:4242 is running a container called "flask":

flask:
build:
context: ./
dockerfile: Dockerfile
container_name: flask
networks:
net:
aliases:
- faip

And according to the Dockerfile for the "flask" app.py runs flask built-in (single threaded, recommended for development only) server:

if __name__ == '__main__':
APP.run(host='0.0.0.0', port=4242)

There's not much to say about this except that the flask project themselves don't recommend running this server in production[1]. I would recommend a WSGI server such as gunicorn[2] running under supervisord[3]. I would also like to see some logging and error handling in production quality code, and it would make sense to have nginx serve the static files (index.html, index.js, etc.) directly without using up a python thread (which should be reserved for the more dynamic endpoints.) It would be nice to demonstrate using nginx for rat limiting[4] or as a load balancer[5] spreading the work across multiple flask servers.

Mind you, I think this is a neat little demo, but as something to put into production - or to teach other people how to put REST APIs into production - it falls short in its current state.

[1]: https://flask.palletsprojects.com/en/1.1.x/tutorial/deploy/

[2]: http://docs.gunicorn.org/en/stable/deploy.html#deploying-gun...

[3]: http://supervisord.org/

[4]: https://www.nginx.com/blog/rate-limiting-nginx/

[5]: http://nginx.org/en/docs/http/load_balancing.html
Not really. These things are barely functional to most of the rest of the world. Maybe Maps finds things to eat in America, but its generally useless outside that market.

There should be much more robust means of restaurant order taking that could be performed by an OS ..
Next step: make it completely environmentally friendly by using lasers instead of chemicals, followed by a flock of geese to eat the roasted worms :D
Family psychologists have a metric - divorce
Blind from a Bad Diet? Teen Who Ate Mostly Potato Chips and Fries Lost His Sight
Ahh, I meant to say "I don't believe for a second that this represents the majority"! Man, this comment makes no sense. Apologies.
I answer questions on SO mostly for fun. I find it entertaining to answer hard questions. Sometimes I learn interesting things while I write an answer. Other times people post interesting comments to my answers. Flagging, appealing closes, and other BS politics is not fun at all.

Unfortunately, over the last couple of years consensus, policies, and/or something else has changed. The questions that I find interesting to answer (hard ones, and related to my area of expertise which is desktop development, 3D graphics, SIMD, CAD/CAM and a few others) are now either too broad, or unclear what’s asking. A few times the close voters closed the question even before I’m able to write an answer.

I’m probably too old and too lazy to make my voice heard. Apparently, web site owners now want SO to specialize on web development, and on deadly boring questions about it, like “how do I format date and time in PHP”, where an answer can be found within 2 minutes of using a search engine. SO is not my personal web site. If that’s what owners want, so be it.
Just buy a Leopold then. They cost $150-200 shipped from Korea, a bit less if you find a local reseller.
If they want cheap prices using an app will cost more than ordering direct.

If variety is an issue apps help with that.
SEEKING WORK | Remote Only (Located Victoria BC, PST UTC-7. Can adapt availability to match client timezone)

Full-service Designer and Developer, with 6+ years professional remote Full Stack experience, who can take a project through all the phases of Concept > Design > Prototype > MVP > Fully Polished Product. My specialty is a strong sense of design, and I work closely with clients to ensure they get the perfect interface and experience for their users. I am very flexible, and can help consult with fledgling businesses looking to answer technological questions, create plans and prototypes, or get right to building. Send me a summary of where you're at, and I'll see if I can help or point you in the right direction (free initial consultation).

I have worked with and I am comfortable with the following tech:

- Front-End: JS (ReactJS + Native, Redux, VueJS), CSS (Tailwind, SASS), HTML5

- Back-End: PHP (Vanilla, Phalcon, Laravel), Python, C, Java, Ruby on Rails

- Databases: SQL (PostgreSQL, MySQL), Entity-Relationship Models

- Version Control: Github, Gitlab, Subversion

- Production Tools: Heroku, Docker, AWS

- Management Tools: Jira, Confluence, Slack

- Testing: Jest, Enzyme

- OS: Ubuntu, Windows, Windows Subsystem Linux, Bash, zShell

- APIs: Auth0, Paypal, Twilio, Mailgun

But always happy to learn new ones when the job needs it.

My going rate is $40 USD/hr, and I am currently seeking to fill 35 hours per week. Preference given to clients valuing build quality over speed, but I'm happy to be pragmatic and move fast too.

Recommended stack: React (JS or Native) Front-End, Tailwind CSS Design System, PHP REST API, PostgreSQL database, Gitlab deployment and version control.

Email: warrenkoch at gmail

LinkedIn: https://www.linkedin.com/in/warren-koch-156aa026/

GitHub: (with sample projects) https://github.com/dogcomplex/

Resume: https://docs.google.com/document/d/1QEJDogsCCdgdTPKoes4Ts6Qa...
Yes, Signal is probably the more secure choice.

That said, I use it a lot less now that I know that it is neither self-hostable, nor really open to third-party clients.

I would like to get rid of Android at some point, and I am tired of relying on third parties not to discontinue their products.

Nowadays, I use Matrix. There are a few downsides (the python server implementation makes the biggest public server quite slow, E2E isn't turned on by default yer -- though it should be at some point, and the clients' UX is generally rough around the edges).

And yeah, whatsapp is king of the network effect, though messenger would take the crown in my circles. That said, by deliberately staying out of these services, and providing my reasons, people ask me for alternatives they could use.

One thing that I like about Matrix is its compatibility with multiple bridges, which lets me connect with people on networks such as IRC, Discord, Telegram, etc. (depending on bridge availability). There is no public whatsapp bridge due to their TOS, and I haven't decided to give them my social graph just yet (though they probably have it already, thanks to having access to my friends'address books). I'd really like to see an officially-endorsed Matrix bridge.

If people really want to contact me, they can still phone me, write me an SMS, e-mail or a letter. Many still bother, but I get it's a tough call for simple acquaintances.

I still feel it's worth it holding to your principles. That's what they are for, and small numbers make the big numbers in the long run.
Are there sat links with enough bandwidth to siphon data off undersea cables?

I have no knowledge of this area but I always thought sat links can't compete with multi gbps cables.

Maybe I'm wrong though.
A substantial minority (if not majority) of standard (i.e. not special-purpose) printers speak PostScript, and PDFs are a subset of it. Not sure how much more "widely used" you expect it to be :)
I wonder what would happen if we tried applying that today. For example, would climate change qualify? Scientists are pretty one sided on it, but politicians and the general public are not. So does it have to be controversial for the experts, or for the general population? I can also think of issues where scientists aren't in agreement but the population mostly is. What about if there are numerous different sides to an issue? Imagine giving fairness to some religious matter, given how many different religions there are.

Overall, I just have a hard time imagining the details of how it would apply in today's world.
Since there's a lot of machine learning folks reading this, let me mention not too long ago, there was a kaggle competition on horse racing. The dataset is from Hong Kong Jockey Club, which is still available here

https://www.kaggle.com/hrosebaby/horse-racing-dataset-for-ex...
OH GOD THERE GOES THE REST OF MY WORKDAY
They are two different case studies. One is SmarterQueue (40K MRR), the other is morningscore (10K MRR).
i feel odd about this timing.. why not release it with new pixel phones (like apple does), or there is no new software gimmicky on new pixel phones?

anyways started downloading this for pixel 3a, thanks google!
Hey foxhop. How would we reach out? You don't have an email on your profile.
With charisma, it’s not just quantity but quality. What appeals to some will repel others. De Raadt has qualities that entice him strongly to some, but are irksome to many, many more. See for example the trollish attitude to Comic Sans.
> what would it take to convince you that this change really is being made for performance and security reasons, and not to hurt ad blocking?

Is there a security argument for this change? I must have overlooked it.

As for performance: users have a choice about what extensions they use. If Google sincerely believes that their proposed limited content blocking API is adequate, then they can expect that users will notice the performance advantage and move to a new ad blocker even if the old API remains present. That's the main mechanism by which uBlock Origin has largely replaced AdBlock Plus.

On the other hand, in the (fairly likely) case that we find out the new ad blocking API doesn't allow for very thorough blocking, and the ads that make it through slow things down more than our current generation of full-featured blockers, then the lower overhead of the new API really doesn't help end users in any meaningful way.
Hello Hacker News,

I recently launched Later Kiwi, a small service built as part of a larger project to handle scheduling future tasks/jobs. Currently, I use it to trigger delayed/scheduled notifications and emails.

I'd be grateful for feedback.

Thanks!
Everything does vary a substantial amount between districts and even individual schools since at the national level there are only a few guidelines(although standardized tests have crept in since No Child Left Behind), so even with the public system the schools vary between feeding the "school-to-prison" pipeline where students walk through metal detectors and have little breathing room, and "magnet" schools that soak up all the academic achievers and give them back-breaking workloads.

In general the school schedules are arranged for the benefit of the faculty more than the kids, though. The days start too early for most teens, and there's a lot of rushing between overly-short classes, to the point where I recall witnessing some students being marked persistently late simply because one teacher ends the class late and the other starts early. The upside of that is that you do tend to have a break because every single class has a few minutes of administrative work before it can really start.
Search your static Hugo site in 4 easy steps
Oh, you mean this:

http://climate4you.com/images/ARCTIC%20Temp%20201907%20versu...

http://climate4you.com/images/ANTARCTIC%20Temp%20201907%20ve...

What's unusual about it? Over the past 20, 200, and 2000 years, how have those regions varied in temperature and extent? What were the causes of any shifts?
Just an FYI, the German word for naked is "nackt", not to be confused with "nacht", which means night. Which might not seem important, unless you, like my sister in law, accidentally signed up for a "nackt wandelen" or "naked hike", as opposed to a "night hike" at her daughter's university (Freie Universität Berlin) when she went to visit her last year.

Fortunately her daughter saw the mistake long before they attempted to attend. I can only imagine the scene had she not discovered the mistake before showing up!!! :)
Your local authorities could fix the small straight sections so that people couldn't drive over the speed limit there.
Personally, I don't think it's better than any of those languages.
I think yoga complements any strength training program really well. Flexibility is very important for weight lifting if you want to avoid long term injuries.
I'm one of those "don't mind ads, do mind privacy intrusions" crowd. I'd be perfectly willing to turn off my adblocker for good if only advertisers would be willing to turn off their tracking and scripts and stick to only serving up JPEG banners.

Alas, that's not likely. So I do what I can to use web services ethically - pay for services where possible (like Fastmail), whitelist when a site owner seems to be using ethical non-tracking ads, donate where appropriate (like open source developers looking for help with hosting fees).
mabl | Boston, MA | Software Engineer | ONSITE | https://mabl.com/careers

Bring AI to software testing at mabl. We provide automatic, self healing testing of web applications using advanced ML and AI techniques to replace the tedious and fragile UI testing of yore. Consider us a smarter, auto-healing Selenium.

We’re a 100% serverless operation build on Google Cloud Platform that rapidly develops and deploys features on a CI/CD model. We closed our $20MM B round [1] and need more engineers to add more features and scale our platform.

Our open positions:

- UX Designer

- Software Engineer

- Marketing Lead

- Inside Sales Representative/Account Executive

Familiarity with the follow tech or similar a plus:

- NoSQL persistence stores

- Managed scaling services

- Container orchestration

- Streaming Pipelines

- CI/CD Pipelines

- Browsers/Extensions

- React

Our stack is built with Java 11, ES6, Bash

Drop me (an engineer), any questions joe at-symbol mabl.com, and checkout our careers site [2]. We can’t wait to work with you.

[1] https://techcrunch.com/2018/09/18/mabl-announces-20-million-...

[2] https://www.mabl.com/join-the-team#jobs
It would be really hard to "clone" a SOC. Since its not a board that you can print for a buck these days, it actually requires a fab to print chips ... which is not something that is common to open source yet.
Creditshelf|Frankfurt am Main, DE| Ruby developers, Devops, DataEngineers, Secops, Datascientist| Onsite| https://creditshelf.com/en/career/open_positions

Creditshelf is a broker between Small, Medium size companies in need of a loan and investors.

we are looking ever-learning and curious people to join our team.
Our working language is English, but our german colleagues are more than happy to talk german to you if you want and we even support german classes;
Our HR can help you with visa process and in german paperwork;

Our job descriptions may look a bit overspecified, but they are going to updated soon.
if you already know one of the required technology, then you're already great candidate, because we believe that smart people can learn and adopt fast.

Your future tasks may involve tasks like adding new functionality to CRM used by our employees and investors, implement new services, enrich data from datalake; automate risk-analysis, research smartcontracts to automate business processes etc

Let's e-meet soon ;)
"These large rich tech companies" are not the ones getting breached. The likes of Google and Microsoft take security seriously already. The problem is the likes of Equifax and Capital One and government databases with poor security that nonetheless contain all kinds of sensitive information that they shouldn't be aggregating and retaining to begin with and they certainly shouldn't be required by law to collect and store, even though they frequently are right now.

Also:

> and google suddenly getting religion about you being able to mass-download your data.

They had that even before the GDPR.
Ah, I see I've misremembered which flight disaster this was. Apologies.
Flare | Software Engineer | ONSITE | Full-time | Boston, MA | https://getflare.com

Flare redefines personal safety through beautiful jewelry, tiny electronics, and smart software.

We're looking for software engineers who can help across the entire stack, which includes embedded, mobile, front end (React), and back end (Python + Docker + AWS + RDS).

It's okay if you are very confident in one area and want to expand to the others. We have an amazing mission and an exciting roadmap. This is a great opportunity for you to learn a lot while building something that matters!

Please apply here:
https://flare-jewelry.breezy.hr/

Email mike at getflare dot com if you have any questions.
Instead of delegating launch authority to more people in the case of decapitation attack, let's just automate it. Seems like a big conceptual jump without a good reason.
even old google pixel 1 (2016) got android 10!

and there seems to be a re-spin already:

https://developers.google.com/android/images#marlin
I do not doubt there are people for whom it works like that. There are also people who do not start like gamblers, but end up with an out of control addiction.

I've known people with "get rich schemes" who ended up lying and stealing from their loved ones.

But the self-serving excuse of "I'm only human" is always a lie. That's not being human; that's being a particular, untrustworthy kind of human. Not all of us, or even the majority, are like that. "But it's just my nature" is such a cowardly excuse for lying and cheating.
One practical reason, at this point it's impossible to upgrade.

The GPLv3 is incompatible with GPLv2, and there are major contributors who are either impossible to find, or sadly past away. This ignores those who just wouldn't want GPL v3. It would be impossible to untangle these people's code from the rest of the kernel at this point, even if you wanted to rewrite it.
> I feel that a useful term is needed for software where you can inspect the source as needed - perhaps inspectable source.

People have used the term 'source-available':

https://en.wikipedia.org/wiki/Source-available_software
> I think apps will have upper hand on this issue.

They also have the dark kitchens card to play. Have a food concept that people want to order for delivery but don't want to make it available for delivery via an app? No problem, the delivery apps see the demand for that concept and get one of the dark kitchens to satisfy the demand.
When I was a kid, my friend's mom had an old all-metal Kirby vacuum cleaner - thing sounded like a jet engine running. One day we decided to see if it could pick up a roll of quarters (his mom wasn't home). We ran it over - it shuddered, the lights in the house dimmed and flickered briefly, but it kept going, making a glorious racket. Eventually every single quarter was picked up and in the bag, and it ran normal thereafter - no damage at all. We opened the bag, fished all the quarters out, then went down to the arcade to play some rounds of Gauntlet and Smash TV.
I remember watching a video called Hippies From Hell in which a bunch of German lockpickers (from Sportsfreunde der Sperrtechnik) were picking locks.. at a lake, naked.

It didn't strike me as German; it striked me as part of hacker culture. Was I wrong?

[1] https://de.wikipedia.org/wiki/Sportsfreunde_der_Sperrtechnik
Cardiogram | Senior Frontend Engineer | San Francisco, CA | ONSITE

Are you a frontend engineer who wants to make the world healthier?

Cardiogram's goal is to shift healthcare from reactive to preventive, starting with the most ubiquitous health sensor deployed today—optical heart rate. Every modern wearable, from the latest Apple Watch to a $29 Xiaomi, ships with a heart rate sensor. Locked within that sensor data are signs of both daily activities like sleep and stress, but also major health conditions—sleep apnea, diabetes, high blood pressure, and atrial fibrillation—that affect more than a billion people globally.

Frontend engineers build the core of the company: the Cardiogram app for Android or iPhone. You'd be working in primarily ReactJS, NodeJS, Javascript/HTML5/CSS3, with the opportunity to learn native iOS (Swift) or Android (Java).

More information and a link to apply is here:
https://cardiogram.com/careers/