skysight-inc/HackerNews huggingface dataset:
> The hacker can probably still compile one by their own, but at least it will makes them pain in the ass.

I've compiled a branded build of Firefox myself, and it is as simple as setting a single flag at compile time. Almost trivial. The only protection that branding has is legal, not technical. If I tried redistributing the branded build then Mozilla might sue me. Do you think they will be able to sue malware authors when they do it?

There is absolutely nothing stopping a hacker from replacing or patching Firefox.exe with a branded version that will run their hostile extension. Even if they do not have write access to Firefox.exe, they can download it somewhere else and change where the shortcut points to. It would be almost impossible to tell the difference.

This is not a serious security measure.

But I think you are missing the bigger point here. If they can write to files on your computer, then it is far too late. They can encrypt and ransomware your documents, they can install a keylogger, and they may be able to extract all of your passwords and cookies from Chrome and Firefox.

It would be like if someone stole your car, but at least they don't have the keys to the glove compartment.

It is not a justification for Mozilla is doing.
Oh goodness, they posted about non-sports related politics on their subsite dedicated to non-sports related "Culture, Food, Politics, Whatever"?!?

How dare they!?
Any thoughts on the actual topic, or did your attention span prevent that?
A common problem back then with those caches back then was that in their common configuration they would limit the maximum upload size to a few megabytes... which would manifest itself as a broken connection when such an upload was attempted.

We regularly had to tell customers "can you try whether uploading works with this HTTPS link? now it suddenly works? okay, use that link from now on and complain to your network admin/isp"
Al and Georgia and Beck and Paul
QR codes are not good for high throughput situations, like subway gates although:

https://atadistance.net/2019/08/13/transit-gate-evolution-do...

But China is in love with the QR code, so who knows how many years or decades it will take them to make their subway gates use fast NFC payments.
When Canada Recognised Smalltalk
> not all communication needs to be secure

There are good reasons to make all communication, even trivial conversations, secure.

If we only secure "important" communications then we are unnecessarily broadcasting useful meta information to prospective attackers. Encrypted communications rise to the foreground in visibility and that gives away who and when and where sensitive information is shared.

OTOH, if we secure all communication then we make the work of attackers or over-reaching governments much more difficult because no communication clearly says "high value sensitive information"
>the worst and most incoherent art works they could find

Even if either of the sources you cited suggested that the CIA specifically looked for low-quality art (spoiler: they don't), I'm not sure the CIA qualifies as the foremost authority on artistic achievement.
US debt surpasses $23T for first time
I don't know, hardware manufacturers are expected to design and manufacture their stuff with harm prevention in mind. There are tons of regulations intended to prevent not just injuries due to stupidity but also abuses.

If the same goes for the communication tools, maybe we should regulate them too? Software is like the wild west when it comes to regulations and unfortunately, regulations will come because the software developers fail spectacularly to regulate themselves.

Does your software act as a perfect tool for genocide or a decline in the health of a society? You won't be able to stand with straight face counting your money saying "not my problem" simply because a business is supposed to create more value than it takes from the system and if the opposite happens the system will eject that business. Commies will take over, something will happen before people die off for the ideal of the free enterprise. That's why we don't have free organ market.

Anyway, this doesn't mean that Instagram or any other app makers are evil, it simply means that there's a problem that their business enables and some people are asking questions.I hope they don't say "not my problem" because that's how revolts begin, commies take over or guillotines become street attraction.
The HR term for this is "salary inversion".
The problem with NFC was Google and Apple

Google intentionally hobbled NFC and stonewalled Panasonic from adding IrDA to Androud to force people into using Android beam. Apple never gave anybody access to raw NFC to prevent competition to Apple Pay.

I personally met people who made TenPay. They pretty much confirm that the sole point of QR code was to sidestep Apple and Google.
What blows my mind about what you're describing is how ill-equipped society was for Facebook, and how laughable it is that Mark Zuckerberg is in charge of reconciling Facebook and society, for the very reasons you're talking about.

When I think about the global scale and social/political/economic scope required to responsibly run Facebook, and compare that to the skill set of Mark Zuckerberg it's just, like, insane that he's in charge of it. I'm sure Mark Zuckerberg is truly brilliant and capable of becoming a great international leader. No doubt. I just don't think it should be, like, his first job. Lol. It's truly absurd.
Expressions versus statements? The future of functional programming
This is so utterly horrifying I can't even put into words my disgust. Although, I probably should have seen it coming.

How do the schools and Gaggle have access to all of this info anyway? I assume they have school accounts that are provided by the school and therefore the legal property of the school since they are the ones paying for the MSFT 365 accounts? But what about Gmail? I don't use it but I thought it was free? I take it there is some corporate version that is paid for?
Oh, so finally most of the porn sites are defaulting to https?
How long are we figuring it will be until Google gets bored of _this_ project too, and shuts it down?
Cytoplasmofrupturedfrogeggs organizes into cell-likes with the ability to divide
On that note, are there any GUI tools for wireguard at all (other than Algo)?
> Honey bees are livestock, not wildlife.

What's all this livestock doing in my garden?
I'm stealing it :)
https://edu.google.com/why-google/k-12-solutions
IPSec tends to use AES, which can be 2x to 4x more performant than ChaCha20 thanks to hardware acceleration. And the power savings may be even greater than the throughput differences.
I mean, if we're talking about wars where adversaries have capabilities of attacking carriers, then those wars necessarily include nuclear weapons. The best we can hope is that those weapons are not used against too many cities.
Open Letter to the Founder and CEO of Instacart
Even raising the topic attracts hostility.
SEEKING WORK

Location: Budapest

Remote: Yes

Willing to relocate: No

Technologies: Javascript ES6, React, HTML5, CSS3

Résumé/CV: https://www.linkedin.com/in/dimitrimarion/ and https://www.dimitrimarion.com/

Email: contact@dimitrimarion.com
> computational necromancy

Haven't you read laundry files? You could accidentally summon an alien horror from another dimension.
Why are they a strange choice?
actual title prior to truncation

"Cytoplasm of ruptured frog eggs organizes into cell-like structures that retain the ability to divide."
"Eval" is one way to implement a dynamic language, so I'm confused by why you seem to write those as very distinct concepts.

Is it correct to interpret your last line as saying that Python should support SemVer?

If so, the only way to get SemVer is for every release to increment new major number, as every single one has backward incompatible behaviors going through eval.

eval("a:=1") - SyntaxError before 3.8
eval("async=1") - SyntaxError starting with 3.7
eval("1_0") - SyntaxError before 3.6
eval("a@b") - SyntaxError before 3.5, NameError after

It's true there are other ways for a dynamic language to trigger backwards compatibility issues than by going through eval(), but my goal was to give concrete examples of how difficult it would be for Python to make guarantee about backwards compatibility because eval() does exist.
They would be killing the CA by doing this, since all certs have to be publicly logged in order to be trusted by Chrome or Safari: https://en.wikipedia.org/wiki/Certificate_Transparency

If a minor CA suddenly issued a cert for, say, mail.google.com, they'd be distrusted by every browser/OS within days. If a government made a habit of doing this, there'd soon be no trusted CAs in their jurisdiction.

The US probably has the best chance of getting away with this since they also have all the major OS/browser vendors in their jurisdiction. But if Mozilla/Apple/Microsoft/Google all mysteriously decided not to distrust a CA that was issuing bogus certs for high-profile sites, it would be pretty conspicuous.
SEEKING WORK

Location: Budapest

Remote: Yes

Willing to relocate: No

Technologies: Javascript ES6, React, HTML5, CSS3
Résumé/CV: https://www.linkedin.com/in/dimitrimarion/ and https://www.dimitrimarion.com/

Email: contact@dimitrimarion.com
The end of California for most people was generations ago. My folks lived in LA when I was a kid, and the sheer lack of affordable housing even then made them move out to Florida, where water front property was comparatively affordable.

California has never chosen to fix the problems that it has. It has instead become a less practical version of New York for the west. Now, if you can tolerate living in California, that's saying something. You can tolerate the crap that most people wouldn't in a thousand years want to deal with. Don't get me wrong there are good things - the climate generally speaking and the education system.

But since moving away from Cali, I've always noticed something weird and eccentric about most people that chose to remain. I can't begin to say what it is - maybe an optimism that things will get better as tech giants solve more and more problems. Still, my response is good luck with that. Big money in the hands of just a few has seldom benefited any nation, and that applies to states just as much.
Yes! We really need ESPN writers' regurgitated opinions on "Culture, Food, Politics, Whatever", though the parent company owns different publications for all that. Instead of spending that energy on writing more sports stuff
I'd say I'm an intermediate+ user of VIM. Its my main text editor and has been for 6 years or so. I use splits extensively, but not as described here.

I basically just do :sp or :vsp to divide the current spit in half vertically or horizontally, and then if I care (rarely) I use C-W H/J/K/L to send one of the windows to the appropriate part of the screen. I also switch windows with arrow keys (mapped to fn+HJKL) and use tabs for "workspaces". I also have a custom bit of vimscript that lets me select and swap splits with <leader>w (I do this more than "moving" splits).
TartanSense Robotics | Computer Vision/Machine Learning Engineers, Robotics Engineers, Full Stack Developer | Full Time | Bangalore, India | On-Site

Tartan Sense is building small robots that can help farmers with various time consuming manual tasks. From weeding, to sowing and more. Farmers struggle with unpredictable availability of labor, low yields compounded with pesticides/herbicides that are often quite harmful. We want to help change that by a combination of precision agriculture, predictable availability and insights for farmers. If you have deep skills in one of the above areas, email us at info@tartansense.com. Please use subject of email as HN | <ROLE> . If you are looking to spend some time in India, in a startup doing interesting and important work, you are most welcome to join us.
SEEKING WORK - REMOTE ONLY (MDT Timezone)

Experienced fullstack Ruby on Rails developer

Skills:

- Senior Level Ruby on Rails, primarily backend RESTful APIs

- Postgresql/MySQL/Redis

- VueJS for front-end JS with Typescript

- AWS Lambda (Using Go for low-memory operation)

- Docker

- Linux (Usually Ubuntu or Alpine for VPS)

Recent Products:

Built out a Intercom-like chat widget with easy installation onto websites. Used Rails/Postgres/Redis with a VueJS/Typescript/Webpacker frontend.

Location: MDT

Contact: john [at] consyse.com
I think you should learn more about economic systems, because your thinking is a bit off-kilter from reality in my opinion.
Google also wants to meddle with the elections (Numerous quotes here, but the most relevant is certainly Youtube’s CEO). Anyway, you are right for the collect-and-keep-my-data part, but I think in their idea they want to use this data to build some sort of utopia. That is the most benevolent appreciation on it, because it is one that explains all of “Do no evil”, election “influence”, use of AI and exhaustive data collection.
I don’t know about that. People’s daily fitness activity, weight, entire diet and sleep patterns aren’t valuable?
Ask HN: How does your company get better?
In my company, many show little interest in improving the way we work. What processes have you seen bolster interest in such activities?
Iceland livestreams 10-year-old McDonald's cheeseburger
I used QR odes for the same sort of thing, but Firefox sync has gotten so good at sending tabs to specific devices, including a desktop that might not have a convenient camera, that it's even more convenient.
I’d not be at all surprised to learn D.A.R.E. went a long way to vilifying drug users.
Ah my bad, I think that's the wrong link describing the old process. I remember a recent talk by Axel (author of that post) describing the new process where features are accepted as soon as they are done (i.e. stage 4). But I can't find any articles by him to back this up, so maybe my memory is failing me ;-)

Update: ok, as soon as a proposal reaches stage 4 it's considered finalized and part of the standard. A proposal can reach stage 4 at any time during the year. At that point browser vendors will start implementing those. https://flaviocopes.com/es2019/
Location: Seattle

Remote: Yes

Willing to relocate: No

Technologies: Python, Django, Flask, SQLAlchemy, some Kubernetes / Docker / GCP

Résumé/CV: https://www.linkedin.com/in/ddurdik/

Email: ddurdik@gmail.com

===

Experienced senior backend engineer aspiring towards leadership and management. 9 years background in B2B / professional services / compliance worlds. Expert in:

* Scoping RFPs, editing and ratifying SOWs, and acting as engineering liaison for sales conversations (“can we build this?”)

* Navigating murky requirements and helping stakeholders understand their options, tradeoffs, and costs

* Leading implementation teams and architecting features and products with an eye towards maximum reuse, minimum maintenance, and meeting the client’s unique needs

* Driving internal engineering discussions to align teams, enhance communication, and minimize friction

I’m a process geek, a “cultural asset”, and a proud mentor with demonstrated skill at growing junior developers into great engineers.

===

If you’re open to hiring me into my first management role, then you’ve got my undivided attention!
Net neutrality is about maintaining the possibilities of newcomers arising. Saying that removing net neutrality didn't change anything is like saying that removing elections doesn't change anything. In either case, it inappropriately freezes the status quo in place.
Location: Chicago, IL

Remote: Yes

Willing to relocate: No

Technologies:

* Security Manager/Security Application Architect/Can code as well (Java/Python),

* Cloud Tech (AWS, some GCP)

* Java/SpringBoot2/Microservices/etc...

* Can bring a startup from 0 to secured cloud presence with CI/CD pipeline, Jenkins/Docker, Little bit of Kubernetes/Fortigate/AWS Cognito/Firewall Setup/GuardDuty/BurpSuite/Metasploit/CheckMarx/Logging/etc...

Resume: Upon Request

Email: contact@securitybuilder.io

Looking for contract work to bring companies from nothing-to-something in 4 - 6 weeks. Did it before, can do it again.
Unfortunately, Wireguard will not work if you are not on a network where only TCP ports 80 and 443 are open.

For these, you can try DSVPN, which is even easier than Wireguard to set up: https://github.com/jedisct1/dsvpn
So basically, you're saying that Pollock is easy to forge, as long as no one understand what makes his paintings distinctive?

I mean, I could probably spot an amateurish Pollock forgery, and I'm no expert. And while forging his general style would be difficult, forging specific works would be nearly impossible - the layers are very specific. It would be even harder to forge drip technique paintings, where his direct control of the "brush" was limited.
Apple 1 Emulator in Shadertoy
Measure the things that matter ;) it will inform you of places you can improve
kloeckner.i GmbH | Fullstack(Elixir/Ruby), Hybris(Java) | Berlin, Germany | Full-time, Onsite | https://www.kloeckner-i.com

Klöckner & Co is one of the largest producer-independent distributors of steel and metal products and one of the leading steel service center companies worldwide. Based on its distribution and service network of around 170 locations in 12 countries, the Group supplies more than 130,000 customers. As a pioneer of the digital transformation in the steel industry, Klöckner & Co’s target is to fully digitalize its supply and service chain and to support the launch of an independent open industry platform, which shall become the dominant vertical platform of the steel and metals industry. Currently Klöckner & Co has around 8,800 employees. The Group had sales of around € 5.7 billion in fiscal 2016.

At kloeckner.i we believe in challenging the status quo. We believe in thinking differently. The way we do it is by building products that are well designed, easy to use and user friendly.

We build these products for the steel industry using a mixture of agile methodologies and pragmatic user centric problem solving to ensure that our parent company Klöckner & Co is the most effective player on the market.

Open Positions:

https://www.kloeckner-i.com/en/jobs/full-stack-developer/

https://www.kloeckner-i.com/en/jobs/senior-hybris-developer-...
You could always just embed your own twitter feed, depending on how much content you intend on posting.
The idea is the poison kills them if they set up a nest next to the foundation.
He was very useful to inform the wider audience about global surveillance, make it "we already know that - boring!" and accelerate the progress of laws to extend it. In the end, this was his mission.

edit: thank you for the downvote, well-informed stranger!
Both have advantages that make them complimentary identifiers and not actually that competitive with each other. Ultimately they promote each other rather than consuming each others market share and I see both last years and years in to the future.

You can print a QR on paper. You can't do that with NFC.

NFC works in low light conditions -- QRs typically don't. NFC chips have allocated uids -- QRs are mutable. NFC is expensive and QRs are cheap. QRs are universal while NFC is tightly controlled.
Angaza | San Francisco or Nairobi | ONSITE | https://www.angaza.com/careers/

Angaza makes it possible for life-changing products, such as solar + battery power systems, to be sold _on payment plans_ in off-grid regions across Africa and Asia.

We've reached millions of people whose homes now have electricity for the first time:

- https://youtu.be/2EvEeAs_9R4 and https://youtu.be/onMT6_Yv67I

- https://www.angaza.com/category/engineering/

The technology you build will help reach a billion more. We are hiring software engineers (Python + PostgreSQL, JS + React), a financial data analyst, and other roles in San Francisco and/or Nairobi:

- https://www.angaza.com/careers/

You can also read more about Angaza engineering culture on our Key Values page:

- https://www.keyvalues.com/angaza
Dex (YC S19) | Founding Engineer | Full Time | San Francisco + Remote | $80,000 - $120,000 + 1-6%

Dex (https://getdex.com/) is a personal CRM that helps anyone build stronger relationships. Thousands of users use the Dex dashboard and Chrome Extension to remember where they left off and set reminders to reach out.

We’re looking for a founding engineer with experience building and shipping product. There is a tremendous amount of ownership and autonomy you’d take on -- and you’d be able to ideate and build features from start to finish.

Tech stack: Vue.js, React Native, Expo, Firebase, Cloud Functions (Javascript, Node, Python)

Job posting: https://angel.co/company/dex-8/jobs/635625-founding-engineer

Feel free to reach out directly to kevin (at) getdex.com or apply through AngelList.
Location: MDT (Provo, Utah)
Remote: Yes
Willing to relocate: No
Technologies:

- Senior Level Ruby on Rails, primarily backend RESTful APIs

- Postgresql/MySQL/Redis

- VueJS for front-end JS with Typescript

- AWS Lambda (Using Go for low-memory operation)

- Docker

- Linux (Usually Ubuntu or Alpine for VPS)

Recent Products:

Built out a Intercom-like chat widget with easy installation onto websites. Used Rails/Postgres/Redis with a VueJS/Typescript/Webpacker frontend.

Contact: john [at] consyse.com

Looking for solid part-time remote work.
Give DSVPN a try https://github.com/jedisct1/dsvpn
Note the politics of funding such surveillance as a justification for not needing to restrict access to weapons.
I have to wonder how many...so many types of horrors too. Don't forget primates...
Sometimes you can't. Many folks do not actually care what they do for work. It's a paycheck. To give you a better answer: documentation. The biggest headache people can have onboarding is not knowing where to access simple information or how to do their job properly.
And that's pretty much what all this "Pollock paintings are stupid" stuff gets to, right? That anyone who likes his work or claims to find special value in it is "dishonest or deluded". You can find quotes to that effect all over this post.
Location: Denver, CO

Remote: Yes

Willing to relocate: Spain, Germany

Technology: JavaScript, CSS, React, GraphQL, Relay, Apollo, PostgreSQL, MySQL, Redux, CSS Modules, Python, Natural Language Understanding and Dialog (especially Rasa libraries)

Resume: (will send via email), rojobuffalo.com

Email: rbblakeley@gmail.com
Also, have they ever actually seen kids communicate? With the way the world seems to be, my friends and I joked a lot about wanting to die (and still do). We don’t actually mean it, it’s just a really strong way of saying that shit’s messed up and it’s all rather absurd. The joke itself also implies irreverence. It’s usually taboo to joke about dying, so doing so is a bit subversive. It can also be used as pure ironic detachment. For example: [1]. I don’t know if current youths make jokes like this, but my friends and I do.

Anyway, yeah, restricting a few key phrases is amateur hour. It doesn’t actually help, and kids will just find ways around it anyway. Wait until they discover Unicode homographs!

[1] https://knowyourmeme.com/memes/like-this-image-to-die-instan...
Actual article:

https://www.vice.com/amp/en_us/article/43k7z3/nationwide-fak...
ycombinator gods, can we change this title to something like "alternative employment industry thriving on instagram and other apps"?

This title is close enough to the truth that it is making me and the rest of HN uncomfortable. Make HN safe again.
This article doesn't blame the tech companies for these problems much like no one blames hammers for murders committed with them.