skysight-inc/HackerNews huggingface dataset:
Unnamed Seed Stage Startup | Founding Engineer | Bay Area and Remote | Full Time

We are a new startup in the UX/product design tool space, with a mission to bridge design and engineering, and radically lower the barriers needed to build full-fidelity prototypes and products.

We have a tiny but wonderful team of five. We've previously built and sold startups, and are from Google, FB, MSR, MIT, Berkeley, Stanford.

We are fortunate to have received strong funding offers from top VCs and esteemed angels, including leaders in the design and development community and investors in Figma/Framer.

We are hiring one more founding engineer. We are looking for a product-oriented individual with deep frontend experience (our stack is mostly Typescript and React). Bonus if you have experience with design tools, UX engineering, design systems, mobile development, no-/low-code platforms, and collaboration with designers.

Given the stage of the company, you would be directly shaping everything from product direction to team to culture. If interested, please drop us a line at dtsbur@gmail.com. We're excited to hear from you!
What Is TradeSanta?
Lynk | Falls Church, VA (near DC) | Full-Time ONSITE | Multiple Openings | https://lynk.world

Lynk (previously known as UbiquitiLink) is looking for multiple engineers to support the development of our constellation of small satellites for direct to cell phone mobile communications. For an overview of the project, head to our website, https://lynk.world/ or check out this article from Hackaday [0].

Come and be part of a fast paced company with a short history but an already growing list of flown missions, working to enable standard mobile communication everywhere!

All openings are visible on our careers page [1] with more details, but below is a rundown of the currently open technical positions:

- Spacecraft Technician

- Launch Integration and Mission Manager

- Spacecraft Flight Software Engineer

- Software Defined Radio (SDR) Software Engineer

- Telecommunications Software Engineer

- Spacecraft Systems Chief Engineer

- RF / Electrical Engineer

C, bash, and singleboard Linux computer experience is a big plus for the software roles!

[0] - https://hackaday.com/2019/08/26/the-satellite-phone-you-alre...

[1] - https://lynk.world/careers
Laravel Package Development Documentation
Fastest way to create and share code in any language
A single engine landing with no nose gear is definitely trickier since you'll lose steering authority as the plane slows down--more danger of bouncing off to the side and flipping over, but overall I'd expect everyone to walk away from this with no more than minor injuries. The minor injuries happening when people have to use the rear escape ramps that are at too steep of an angle because the plane is nose down on the ground and the tail is way high in the air.

Chances are they'll have that plane back up in the air in a few months in regular service unless it was right on the edge of retirement already.
Jeff Bezos Is Sued by His Girlfriend’s Brother
What Is Content Pattern Optimization?
Re: NOT NULL is very frequently used in schemas, because NULL is often an undesirable value

Talking strings, usually if you don't want a null string, you also don't want blanks (white space) either. I'd like to see auto-trim in the standard, and also a minimum length specifier. We then wouldn't need to deal with nulls. A single min-length-when-trimmed-and-denulled integer value would replace a lot of repetitious hubbub in typical CRUD apps. D.R.Y. it! You'd have one attribute "cell" that would replace the equivalent of:

IF length(trim(denull(inputValue,'')))
< this_fields_min_length THEN
raise_data_too_short_error(...);

That's the way you'd want it done in the vast vast majority of CRUD systems (if not doing weird things).
Ironically, TV tweeted recently:

"January 28 is Data Privacy Day! TeamViewer is a Data Privacy Day Champion. As an organization, we understand the importance of being open and honest about how we collect, use and store your information."
PG could really do most of it if they got serious about https://github.com/postgrespro/rum with TF/IDF ranking.
In essence, we need 4 dimensional coordinates.

Google Maps' Timeline feature has a bug where changes to place names propagate to the past. A bakery where I used to get lunch has changed to a burger place, so if I look back to where I had lunch on that day 2 years ago, it would mislead me into thinking I got a burger...
SEEKING WORK | Remote | Europe, Budapest | Willing to relocate: No

Technologies: JavaScript ES6, React, React Native, Redux, SQL, MongoDB, Redis, .NET Core

I'm a full-stack developer with 5 years of experience, currently specializing in mobile apps built with React Native.

Availability: ~20 hrs/week

Rate: ~30€/h

Email: bitfliplabs@protonmail.com
Yeah the problem really is 'in band signaling' See SQL injection attacks for an another example why the practice is dodgy.
it's all a ploy to finger HN users. imagine how many uniques they'll harvest!
I feel as though it may ring a little hollow.
The Illusory Truth Effect: Why We Believe Fake News, Conspiracy Theories and
Abusing children is evil, fullstop. That said the current laws around CP are horrifically ripe for abuse by the sate.

FBI agents got a "covert search warrant", entered his house without him knowing, then magically find unencrypted CP on his drives. This is the same agency that can interview you, not record it, write up their version of your "interview" as a "form 302", then later charge you for lying to them if anything in their written version of your testimony is later shown to be false (no intent required on your part, if you said it rained last tuesday and it didn't you are guilty of lying to federal agents). No one should trust anyone with that kind of power, and you'd be naive to suggest such power has never been abused.
The idiots you encounter are not all the same people all the time. And sometimes, you're someone else's idiot. You might not even notice when that happens.

All it takes is a moment of confusion, or distraction, or frustration. Or a chemical impairment. Or having a stroke. Or drowsiness.

Braking assistants are good, a self-drive function that has the goal of safely removing the vehicle from traffic--for operators that can suddenly no longer function at speed--would be better. Hitting a panic button and waking up on the shoulder with the hazard lights on is preferable to getting intimate with a pole or guardrail while the cruise control is set to 70 mph.

Our informational machine assistants would also be better with access to vehicle state and sensor data. Your navigation assistant could then tell you, if you are approaching an intersection with your left turn signal on, that left turns are not allowed, before you get there and possibly make a bad snap decision. The nav app on your phone doesn't know that you are signaling left. The GPS signal isn't quite reliable enough to pinpoint which lane you're in. It only knows the positions of vehicles whose operators are currently using the same app.

Obviating snap decisions by drivers should be a goal, because less thinking time means more mistakes. Mobile nav apps have gotten better at this, saying which lane you should be in, and whether destinations are on the left or the right, but they could still do better for in-vehicle improvisation, when the destination changes while enroute, or temporary detours are needed.
Dr is the big one I've seen, from an ops side. If anyone with a laptop that can work remotely takes it home and the building burns down, well your company can still mostly work until replicated.

Not my idea, not my decision, but someone must have weighed the costs of laptop w/docks vs desktops and risk of one site going offline for a few weeks and decided it was worth it. For a finance company, I guess those days could carry a lot of cash flow if not regulatory risks as well which could help push the laptop argument.

I really liked the model laptops we were deploying and how the push allowed us to clear out some real old desktops. It was helpful to be mobile but I did keep an old desktop at my desk with tools and more that I could remote to from another desk or from home to do things on site.
2020.05 Releasalot – Weekly Rakudo News
Location: Berlin

Remote: ok

Willing to relocate: no

Technologies: Python (web development + NLP), server-side Swift, Scala, AWS, Gitlab/Jenkins CI

CV: alexmck.com/files/cv.pdf

Email: hello@alexmck.com

Mathematics graduate with 4 years' experience as a software developer, looking for a part-time Software / Data / ML Engineer role while I finish my masters in CS.

Immediately productive in Python, I'm also demonstrably fast at learning new tech stacks (e.g. Swift and Scala in my current role). I care deeply about good software design, test-driven development, and having a product-first mindset. Excellent communication skills.
I named a source: President Xi. Perhaps you should do some research, you are clearly ignorant.
In my view, it is successful more often than not. Laws against stealing, murder, etc., are a form of regulating against human nature, and they appear to be pretty successful.

Regulation is mandatory in order to have a society. The question isn't whether or not it should exist, but whether or not the particular regulation is good.
accuRx | Software Engineers, Security Engineers, System Administrators | London, UK | ONSITE https://www.accurx.com/careers

accuRx’s mission is to be the communications platform that brings patients and their healthcare teams together; helping make patients healthier and caregivers happier.

Currently, we let GP practices communicate with their patients, team and other organisations.

We’ve grown from being used in a handful of organisations at the beginning of 2018, to now being in over 3,200 practices that send over 90,000 messages a day to patients – improving care and saving staff over half an hour each day.

Over the next 12 months we'll be releasing new products in GP practices, hospitals and pharmacies. Speak with us to find out more :)

Apply here: https://www.accurx.com/careers
Depends very much on which datacenter you're using. I'd imagine google doesn't get much (any) bot traffic from Akamai, so I'm not surprised that their ranges aren't flagged yet.
Kudos to the security expert for the finding but his web page gave eye cancer.

Seriously, consider lowering the contrast or chaging typography... Don't know, but it was hard to read in its original form...
Absolutely not. A water landing is absolute worst case. So much harder to get first responders in. Plus drowning.
Location: Bangalore, India

Remote: Yes

Willing to relocate: No

Technologies: Erlang, or any other functional programming language

Résumé/CV: https://docs.google.com/document/d/1LzvpADGIQkm9PN2WI-pxS-dd...

Email: trishachatterjee2009@gmail.com
They're doing nothing too wrong, the person criticising them doesn't understand basic computer security.

When the user hits "save password" on the client-side, the client needs to save the actual (plain text) password in order to replay it for future logins. A hashed password cannot be stored, otherwise that hashed password becomes the plain text password anyway (essentially destroying any benefit hashing would have here). The rules that apply to servers/services aren't the same as those for clients/saved logins.

Using reversible encryption is unavoidable, because they ultimately need plain text to send to the TeamViewer remote service. It is still marginally better than storing the actual plain text even if it is security through obscurity (using a hard-coded key in this case).

Storing it in the user's registry hive instead of a higher privilege allows the TeamViewer client to run in the user's context, instead of needing to run as administrator, have a broker, or similar.

One potential upgrade might be to use Windows' Data Protection API. It works essentially the same way as their current method, but Windows is responsible for protecting the encryption key (and has a broker than can house it at a higher privilege level).

But ultimately if you have a process running in the user's context and can manipulate the TeamViewer client, you can bypass the Data Protection API pretty trivially (e.g. injected DLL, UI hooks, other misc memory hooks, etc).

So my question would be: Describe the scenario where a bad actor has the ability to arbitrarily read data within a user's execution context, but not manipulate the TeamViewer Client also running in that same user's context? Because I got nothing.

My security advice here is simple: Don't save passwords to your local machine if you don't want them saved to your local machine. And don't leave backups of your saved passwords in insecure locations. I'm going to research if I can get a CVE assigned to that.
I guess when you've used those credentials on a windows machine?
Free-Floating Mitochondria
Metafilter has no threads and no comment voting (as far as I can see).

It's not really the same sort of experience.

It's more like a message board - which is too inefficient. Time ordered comments makes for poor content.
Keybase still lacks essential features like being able to mute specific group chats. On Android it's all or nothing: I can either get a notification every time someone spams a chat, or I can turn notifications off and not even know when someone directly messages me.
Show HN: Remote Work Awards 2019
In OsmAnd you can set vehicle parameters: height, weight, and width limits.
I once worked at a place where a bug in the spec was treated as impossible - if people couldn't get the results they wanted because the spec made it impossible, there was no way to get it fixed. Any attempt to log it as a bug was rejected.
Coronavirus Consequences
This is concerning because it is clear that we’ll need more and better vaccines (and new antibiotics) in the years to come. The impact of every mosquito borne disease entering and re-entering North America, along with the already surging cases of tick borne illness means pretty soon the United States will either be afraid to go outside or considerably worse off than people even realize. The nCOV outbreak is just the latest in an ongoing string of pandemics that modern air travel brings along with its benefits.

Renewed funding heavy vaccine and antibiotic development would save millions in the US and abroad, sooner than we think.
Legends of Learning | Elixir/Phoenix/React Engineer | FULL-TIME | REMOTE / Washington DC

Legends of Learning is building the future of game-based learning. Our platform is a marketplace for 1500+ science and math games used by over 3M students in 25K schools and growing fast. We are also the creators of Awakening, an adventure game for kids to explore and learn at home. Check it out at https://www.legendsoflearning.com.

We are seeking a junior- to mid-level full stack engineer to join our small and high-performing team. Our tech stack includes React, Typescript, Apollo/GraphQL, Unity, Elixir/Phoenix, Postgres, and AWS. We specifically need someone who is proficient in Elixir (1+ years), Javascript (2+ years) and CSS. Any additional experience throughout our full stack is a big plus. This person must be user-oriented, eager to learn, a good communicator, and a great team player.

Applicants must be located in the Western Hemisphere and available for full time collaboration on US Eastern time zone.

Please email tech-jobs@legendsoflearning.com to get in touch.
A quick word here: we help run PathAI's security team, and PathAI is fantastic. If you're considering a security engineering gig, add them to your list! The work they're doing is truly important and the team is on the ball, passionate about security (no surprise, given what they do), and sharp.
SEEKING WORK

Location: Los Angeles
Remote: yes!
Technologies: Node.js, typescript, graphql, React, PostgreSQL, graph databases, web sockets.
Résumé/CV: https://docs.google.com/document/d/1QZFT_miF9MGO42JnS1P43Kra9DKwjRKY23HpxkYhQIk/edit?usp=drivesdk
Website: https://www.good-idea.studio
Email: joseph@good-idea.studio

Full-stack web developer with 8 years experience. I've built websites, MVP-level apps, content management systems and other full-stack, high-volume systems.
At Offchain Labs, we’re building a platform to unlock the full potential of smart contracts, making them private, affordable, and easy for developers. Our working prototype of Arbitrum runs on top of Ethereum and interoperates with native Ethereum contracts and tokens.

We make smart contracts easier to develop at scale, with production level security. Our developer tools do the heavy lifting to add a flexible second layer to decentralized application architecture so our clients can focus on business logic and user experience.

We're looking for Senior Software Engineers that are excited to learn and develop blockchain technology and possess production experience with Backend Engineering (C/C++, Go, or Rust). Experience with compiler construction and architecture, and security engineering on large-scale systems is a plus.

Click here to apply!
https://jobs.lever.co/offchainlabs/9b024e89-1cb7-43f3-b6f8-c...
These days, both Firefox and Chrome get 97/100 out of Acid3 (Edge gets 98/100) so there is a small number of tests in that old page which do not make sense for the web of the 2020s.

The point of Acid2 was to make it visible just how awful IE6’s CSS support was.
It isn't a lost cause. The lessons are:

Security is high stakes
Security is hard

https://blog.codinghorror.com/youre-probably-storing-passwor...
Sounds funny, but your theory is false. I use GMaps every day to drive to and from work, with a very simple route that's almost all on an interstate highway. Almost every day, it gives me the exact same route (which is so simple I really don't need GPS navigation at all for it). Sometimes, it gives me a different route because of an accident, traffic jam, construction delay, etc., which is why I use GPS all the time, but I see absolutely nothing to indicate that Google intentionally makes my route more complicated than it needs to be. (And yes, these delays are real: this road is under a lot of construction at the moment, and it frequently has crashes and traffic jams in places.)
Lightstream | Chicago | Full-time | ONSITE, REMOTE (US) for strong candidates | https://www.golightstream.com/

We’re building the future of live streaming. We empower streamers on Twitch, Mixer, YouTube, etc. to be successful with creative tools and analytics. We’ve got a ton of momentum including a $9M Series A, a strategic partnership with Microsoft and an acquisition of the analytics company https://arsenal.gg

We build with modern stack including React, Node, Typescript, Rust.

Right now we’re particularly focused on two searches:

- DevOps engineer with a focus on container orchestration (Kubernetes)

https://bit.ly/2RZCiEX

- Data engineer for our Arsenal team.

https://strea.mr/2S5E3Ro

All job postings are here: https://strea.mr/2GE4qsY

Interested in us but don’t see what you like? Hit us up at jobs@golightstream.com
Even NSA has mobile pages these days!?
Sure, and humans have hardware exiting the solar system. A very different story to put a person there.
AB 5 is already changing how Uber works for California drivers and riders
Among other things, it's weird that it shows up with a different GeoIP triangulation for different users. Someone commented here about seeing this in Portuguese. I'm seeing this in Japanese. Does anyone what's going on?

EDIT: And now it's showing up in English.
Clay (https://clay.run) | Software Engineers | New York, NY | ONSITE, Full-time | Visa Sponsorship Available

Learn More About Life @ Clay Here: http://bit.ly/3b5bVX7
Want to help give the power of programming to an order of magnitude more people? Clay is the spreadsheet that fills itself - the first live-spreadsheet that brings together the best parts of spreadsheets, coding & simple automation.

There are only ~20 million developers in the world, but over 1 billion spreadsheet users - come help us build the bridge that lets that much larger group tap into “programming” superpowers. We’ve raised a Series A from the top investors in the world, and are a small, tight-knit group that is now building out our core-engineering and product teams in NYC. If you want to design and implement novel types of interfaces, and happen to be interested in Brett Victor, no/low-code tools and the history of computing - let’s chat!

Tech Stack: NodeJS, React, Redux, Typescript, PostgreSQL, Redis, Elastic Search, AWS, Serverless & Lambda, Terraform & more...

Open Roles:

- Software Engineer: https://jobs.lever.co/clay/d1cb19b1-88ab-4bea-9c78-6ac10c689....

- Designer Who Can Code: https://jobs.lever.co/clay/456b9e54-99be-4289-9529-6fca06786....

Or write us an email at jobs@clay.run
SEEKING PENTESTING / SECURITY WORK | NYC / Remote

Security Engineer currently @Google looking for freelance security work, anything related to webapp/mobile/infra/hardware. Get some boutique pentesting results without having to pay one of the big guys.

Resume / Email @ https://dylan.legg.io/resume.pdf
Future is remote!

With the advent of technology, you can work from anywhere in the world. You don't need an office to open your laptop. Instead, you can stay at home, walk to a co-working space or even take a plane to Bali.

Not only about location

But remote work is not only about being location independant – it's a way of life. It's about blurring the boundaries between work and rest of the life and integrating them for a calmer and more meaningful life experience.

Life is more than work

Working from home, you can be more involved in your family life and see your kids grow. Without an office, you can travel to explore the awesome planet you're living on. Combined with flexible working hours, you'll work when you're the most creative.

A celebration of remote companies building the future of work

There are a lot companies working with a distributed team across the globe. And there are increasingly more companies who are hiring their first remote team members.

Remote Work Awards 2019 is a showcase of remote teams leading the remote work revolution. These companies are sharing what they have learned when building fully distributed teams – while there are a lot of benefits remote work brings, there are also many challenges to overcome.

This is my small contribution to the remote work revolution that's happening right now. I hope this inspires people to start exploring remote work opportunities and companies to consider their first remote team members.
There are many factors and others have pointed out some of them. Here's another one:

The dollar's relative value to goods and services isn't rising... and it's because of countries like China that make goods and services for so few dollars.

Think about it - I can go to oldnavy.com and buy a shirt for $9. That shirt was made literally on the other side of the world, shipped, marketed, sold, packaged and delivered for $9.

The disparity in incomes and environmental protections between the U.S. and other countries makes it very difficult to trigger price inflation. And things just keep getting cheaper. Prices don't rise when supply of goods and services keeps pace with the demand from dollars.
> The early bird gets the worm, stop blaming the CEO.

Indeed. But oversized financial rewards and credits to CEO is to compensate the blame.
> A hashed password cannot be stored, otherwise that hashed password becomes the plain text password anyway (essentially destroying any benefit hashing would have here).

The plaintext password may be re-used by the user on other systems, so yes hashing would still benefit here.