skysight-inc/HackerNews huggingface dataset:
> Nice, but it would be nice to know if that is the default or not on Linux as well.

It's because OpenBSD uses a much nicer, more declarative configuration file syntax, whereas the options on Linux, like Openswan, use a less expressive key-value syntax. To be fair, AFAIU Openswan supports more IKE extensions, and is an older project with more baggage than OpenIKEd or OpenBSD's ipsecctl configuration compiler front-end for isakmpd. But that only highlights the fact that much of the complexity of IPSec is due to history, not because IPSec is intrinsically too complex to make it useable. The SLoC of IPSec kernel code are comparable to the SLoC for WireGuard kernel code. There are smarter ways to implement IPSec and IKE, especially when you have the benefit of hindsight.

> I don't agree with the claim that IPSec somehow automates PKI, it's still very disgusting compared to things like (LetsEncrypt's) ACME

It doesn't automate CA renewal, but you can't even do any kind of PKI using WireGuard as WireGuard doesn't support key signing or key authorities.

FWIW, OpenBSD provides a utility for generating and manipulating X.509 certificates for use with IKE.[1] I've never used it as I'm unfortunately quite familiar with PKIX infrastructure and have my own tools, but AFAIU it's what most people use.

None of this is to say that, when comparing apples to apples, WireGuard isn't a better protocol than IPSec. But SSH also has warts and it would be trivial to come up with a better replacement protocol. We don't need to because we have OpenSSH, a smart implementation that continually discards as much baggage as it can, while still interoperating with a wider ecosystem of alternative implementations.

The fundamental problem is that 1) key management is hard, 2) key management is critical to overall safety and usability. WireGuard sidesteps all of this. It looks great on paper because it's only solving the easiest problem. And it seems great in practice because the ugliness of the ancillary infrastructure isn't counted against it, even though from a wholistic standpoint it should.

[1] https://man.openbsd.org/ikectl.8#PKI_AND_CERTIFICATE_AUTHORI...
DIY PCI expander board for IRAM DRAM-based drives
"we just really wanted to stop using an import path tied to a specific hosting provider"

e.g. github is now owned by Microsoft and it's a little awkward.

If Google won out on their attempt to buy Github, they wouldn't wouldn't be talking about a "specific hosting provider".

Though it's a little weird that people take this at face value, when the majority of the userbase was questioning this since the first release.
> The category of person that is going swap out their ECU cares about sub-milisecond timing. FPGA's are good at concurrency and operating in this domain. 8-bit 16Mhz Arduino's are not.

Depends on their goals. I'd oersonally assume that most people who are considering a DIY-friendly ECU are either looking to replace a carburetor or gain better tunability on a vehicle that has an '80s or '90s era EFI setup.

It's not like anyone's suggesting this be used on a brand new car. It's a relatively inexpensive option for a tinkerer to play around with. I'd be willing to bet that a lot of the cars this will go in to shipped with 8 bit ECUs from the factory. Ford used 'em as late as the early 2000s.

Also for the most part the people who are doing this sort of thing don't need to care all that much about emissions or any of the other things that make production ECUs so much more complicated. All it needs to do is deliver the right amount of fuel and trigger spark at the right times. A carefully programmed microcontroller can do this.

> Check out this HCCI engine tuning algorithm which runs 240,000 samples per second to provide realtime feedback to an fpga/raspberry pi hybrid board. An Arduino just ain't going to cut it

Considering there are absolutely zero HCCI engines in mass production I don't think that's really a concern for anyone other than those developing the technology.

edit: to be clear, of course I am definitely not saying I'm in any way against a DIY ECU project supporting FPGAs, obviously they enable even more potential capability, but I think you're making it out to be way more important than it is for the market that's likely to use these things. This is basically an open alternative to MegaSquirt 2
probably https://en.wikipedia.org/wiki/Magic_SysRq_key
New evidence for a hypothesis is still news, even if that hypothesis is the most favored one.
the first city-wide recycling projects in the USA were faced with this kind of brick-wall reasoning in the 1970s, and yet have built successfully over and over.. the sideways reference to "eco-tax" shows there is an ideological driver here
Apple decided this didn’t fit with their design. People know this when they buy the phone. If they want a removable battery, buy a different phone.
Yep. I moved from Boulder to NYC based on an offer I got from my only post.

I've also worked in a couple of companies that need computational biology, biostats, etc., and I don't think any of them would be likely to reach out to people on HN.
most people implement "block on API response", because that's way easier to reason about, sometimes, even without timeout. Reading through the thread, what I was misunderstanding is that this situation technically gets rolled into what called a "livelock". Fine, but from the higher-level API consumer's POV it's a deadlock.
Indirect funds on grants need to be eliminated in my opinion. The GOP is a disaster at the moment in my opinion but introducing bills to eliminate them is one of the things they've done right. Indirect funds distort the purpose of grants and give perverse incentives to university administration and other funding sources.
Apple team will copy this, please get it IP Protected. Don't be another Alfred.
At 30 frames/second, shooting at one frame every 100,000 years, a film of the whole 4.5 billion years of Earth's evolution would run 25 minutes.

If you wanted more detail, you could shoot every 10,000 years, running a bit over 4 hours.

Humans would appear in this long version of the film, in the final 0.667 seconds, or the final 20 frames. The 2,000 years since Christ's death would be a blur on the final frame. All of human history for the past 10,000 years would almost fill out that frame.

The asteroid that wiped out the dinosaurs would appear 3 minutes 33 seconds before the end.

The Cambrian Explosion, about 27 minutes from the end. That's the history of all multicellular life.

At one frame every 100 years, the film would run 17 days 8 hours and change.

And at a frame every decade, 300 years a seconds: 5 months 3 weeks.

YouTube sees 500 hours of video uploaded every minute. If that were to corrspond with our movie of Earth's history, you'd need 150,000 years to upload all of it.

Space is big, as you may have heard.

Time is long.
SEEKING WORK | South Florida | Remote Preferred

Hello World; I'm an experienced digital project manager who is looking for a few good projects to work on. I've managed a large depth of projects, with varying scopes and budgets. I'm looking for more Scrum Master experience and would be happy working in a junior SM role, if such a thing even exists. I've done some web development but find that I enjoy working with my soft skills more than my hard skills. I've worked in the NYC startup ecosystem and want to build a freelance, project based, career.

I'm excellent at client interactions and actually enjoy talking to people.

Find out more about me at www.hireviolet.com.
Coronavirus / Covid-19: A Panic Free Guide for Parents (YC S19)
Fascinating idea! I've been really interested in Tinc, but it seems to be languishing where WireGuard is really taking off. The meshing in Tinc seems quite interesting. Though, honestly, I'm pretty happy with OpenVPN.
( It's not an open source project; just a codename for the rewrite. )
All these programs have textual interfaces only (as far as I know).

Having a GUI doesn't justify 1 million+ LOCs, but just for a sanity check, pgAdmin 4 has ~260k LOCs, without counting its dependencies.
Ditto, though a SNES video game called E.V.O. for me as a child. In the earliest stage/era of Earth in that game it's a water world (and you're a fish).
Indeed, tying the name of a package to a hosting provider is a bad idea! That's why we changed to an import path which isn't tied to one. google.golang.org/protobuf is not tied to any particular provider, and we can redirect it wherever we want.

See "go help importpath" for details on how this works.
This reminds me of a browser based computing environment demo (I believe it was WebOS or MyWebTop) in the late 1990s. We have indeed come a long way in the last 20 years.
Pardon my ignorance, but what are SEC rules for things like this? Do they expect some reasonable availability for trading platforms or do they consider massive outages like this "negligence"?
I remember when Schwab went down just as Facebook went public. Couldn't cancel my order, ended up with the stock at a much higher price and the stock had dropped by a lot by the time I had access again. I can't help but be suspicious of events like this.
We used up our breaking change budget for the next decade with this release, so we'll think about it in 2030.
Nope, they have a plastic lining on the inside to make them waterproof.
Multiple Software Roles | Chicago/Remote | Full Time |

Hey Folks - We are a early stage startup in the logistics space, with paying users and have raised a large seed round. To prove out our product market fit we used php and Laravel. As we move into our growth phase we'll be Shifting our tech stack to nodejs and react. If you are a strong php developer and/or are fimilar with laravel reach out at shiv at newtrul [dot] com.
All of us learn the hard way sooner or later. The key is never playing for more than we can afford to lose.
Webpack 5 and Module Federation Solve sharing of modules in a distributed system
What's the most popular web browser in 2020?
Self-driving tech is expensive. It's costly to design, create, and manage. I wonder how quickly that $2.25 billion will be used up.

For comparison (because I was curious how this ranks amongst other big funding rounds): Uber raised $7.7b from secondary funding in 2017. Airbnb series E was $1.5b. WeWork series G was $4.4b. And in 2018 Ant Financial raised a whopping $14.4b series C!
Tenured positions aren't all they're cracked up to be either.
sick people
Retry, Race, All and Some Calls with Go's Http.Client
Free AMD calls.
Location: SF/Oakland

Remote: Yes

Willing to relocate: Mostly no, but open if it's the right opportunity.

Technologies: React, JavaScript, HTML/CSS, Python

Résumé/CV: https://gavinfynbo.com/

Email: gavin@gavinfynbo.com

Github: https://github.com/gfynbo

---

I have experience working with a large company and communicating with product and design teams to deliver a product. I'm still in an entry/junior level role looking to work somewhere I can provide a bigger impact ideally at a smaller company. I can deliver quickly when needed but prefer maintainability. I am happy to work on whatever is needed including documentation as well as delivering good code and I am open to help/criticism via code reviews and will work hard. Due to my age I don't have extensive experience in anything but am a good learner and see myself mentoring someone else in front-end and back-end engineering in a few years. My interest is mostly in a 'full-stack' or generalist role, but open to most!
> But, all that being said, it still has a ton of features. It's not your father's IRC client sending text around and failing to transfer files through NAT/firewalls.

Meh. It displays text, pictures, and videos. That's about it. This is just Messenger we're talking about here, not the full-blown Facebook app. The only state to keep track of is "Have you received message UUID?".

> And they also had their own UI framework.

This is where I suspect the bloat occurred.

Writing your own JSON parser and so on doesn't add up to any 1.7 million lines of code.
You've been breaking the site guidelines repeatedly, both in this thread and unfortunately in others (and we've had to ask you about this before). We ban accounts that do that. Would you mind reviewing https://news.ycombinator.com/newsguidelines.html and sticking to the rules when posting here? The intended spirit is curious conversation.
If you know of a way to get me to stop touching my nose that lets me keep my life and all my fingers, I'll pay you $470 for it.
I'm surprised the author contacted KMPG to run M&A for a small independently run website..? Not sure what I'm missing here.
This is similar to how Foxconn issues are always headlined "iPhone factory does XXXXXXX", despite iPhones making up just a minuscule faction of Foxconns total output
Modo Labs | Ruby, QA, other software engineers | Cambridge, MA | Onsite preferred

Modo Labs provides no-code and low-code environments that allow admin teams in universities and corporate workplaces to publish mobile apps and content. Our platform can and has been opened up to students and employees for a crowdsourced mobile campus experience. If you like the idea of building technology to improve student life in higher ed and enhance culture at the workplace, you should definitely check us out.

Our products are built on a broad range of web, mobile, and server technologies. We have developers working in PHP, Ruby, Java, Swift, NodeJS, Angular, microservices, big data, and devops. We value critical thinking, attention to detail, and intellectual curiosity. We are a small team that accomplishes big things and offers newcomers the opportunity to make a big impact.

We currently have job postings for a Ruby on Rails engineer and a QA engineer on our careers page (https://www.modolabs.com/about/careers/). However, we are always in need of strong engineers with experience in the technologies we use. If you are interested or have any questions, please reach out at careers+hn@modolabs.com
Open vs. Closed Protocols (2015)
No, because this expands colours to ones that cannot be expressed with sRGB, no matter if it's encoded as 16bit linear, or with the sRGB transfer function. You cannot express a hue outside the Rec.709 triangle, no matter how much precision you add (1).

Display-P3 uses points in CIE xyz space for its RGB channels that are farther apart than sRGB, allowing it to express more hues, which sRGB monitors and colours cannot. It's still not the full spectrum humans can see, but it's much better.

(1) technically you can, if you allow channel values to be negative, but that breaks compositing.
Not an expert, but I'm pretty sure it is drawing power from the wall. My understanding is it is not great for the battery to act as a pass-through for power.

Many cheaper devices warn you not to use the device while charging, because they don't invest in the circuitry to bypass the battery while plugged in.
I thought the general consensus on protocol buffers was "Meh"?
This is an example in favor of the fact that abstractions can't paper over performance characteristics. Users may depend on them.

In the unlikely event that there was a change to the implementation of the State monad, or to one's compiler, such that the State monad was not optimized away, it would be disruptive to users. It would probably be treated as a bug, even if the only change in behavior was in additional CPU and memory usage.

This is a corollary of Hyrum's Law.
I get the same impression to some extent, but I'd be hardpressed to say I wouldn't cave and do the same thing to be completely honest.

Who wants to work a 9-5 their entire life? I personally don't.
Find a home for every imaging data set
Linux/Mirai-Fbot – A re-emerged IoT threat
Instacart (YC S12) | San Francisco, CA and Toronto, ON | https://www.instacart.com | VISA

Since 2012, Instacart has been focused on making grocery delivery convenient, affordable, and accessible to everyone. We bring fresh groceries and everyday essentials to customers across the US and Canada from over 25,000 stores across 5,500 markets. Instacart is available to more than 85% of us households in all 50 states, and more than 70% of Canadian households.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/instacart

To see all of our positions: https://grnh.se/25760b6d1

Some of the key roles we're hiring for include:

* Android Engineer (SF): https://boards.greenhouse.io/instacart/jobs/1924570?t=25760b...

* iOS Engineer (SF): https://boards.greenhouse.io/instacart/jobs/1924578?t=25760b...

* Senior Security Engineer (TOR): https://boards.greenhouse.io/instacart/jobs/1924590?t=25760b...

* Software Engineer, Front End (SF): https://boards.greenhouse.io/instacart/jobs/2008462?t=25760b...

* Manager, Data Science (SF): https://boards.greenhouse.io/instacart/jobs/1924580?t=25760b...

* Senior Data Scientist (SF): https://boards.greenhouse.io/instacart/jobs/1924595?t=25760b...

* Manager, Engineering (SF): https://boards.greenhouse.io/instacart/jobs/1924582?t=25760b...

Tech Stack: Rails 5.2, Ruby 2.3.7, Python, R, PostgreSQL 9.6, React 0.17, AWS, Docker, RabbitMQ, Sidekiq, Snowflake
Location:London

Remote: Yes

Willing to relocate: Yes

Technologies: iOS (Swift, Objective-C, SwiftUI)

Résumé/CV: https://adamfallon.com/cv, https://adamfallon.com/projects

Email: adam@adamfallon.com

Would love to move to full time remote after ~4 years of the hellish commute into Central London .
Epiq Calls in the Feds After Ransomware Attack – But ‘No Client Data Accessed’
I think you’re over constraining the solution. Why does the solution need to benefit the manufacturer? Coca Cola is a corporation with no feelings. The environment is a real living entity. If the costs of the corporation go up but the environment benefits this seems like a win. The corporation will balance out operations whatever costs are unless the restrictions are so onerous it can no longer operate, and I don’t think that’s the case. If anything the cost of soda would rise, which some places are already doing for public benefit through consumption taxes. If people drink less soda because the cost is slightly higher, that wouldn’t really be a negative outcome.
Please do not post nationalistic flamebait, or any flamebait, to Hacker News.

https://news.ycombinator.com/newsguidelines.html
You work at it hard. Like, really hard. Hard enough that you start to sweat. Then you've got moisture on your hands...

;-)
"825 lines of code" is a bit misleading, when you look at the whole kitchen sink of dependencies in that package.json.

I mean, if we ignore dependencies, then I could claim "OAuth2 API gateway in 1 line of code" and that would be a pointless claim.
Some people get lung cancer rather than change bad habits.

There is a nonzero chance that my nosepicking habit kills me over the next couple months. Yet for some goddamned reason it doesn't stop me.
PicnicHealth (YC S14) | San Francisco, CA | Full-Time, Onsite | https://picnichealth.com | Can transfer existing visas

PicnicHealth works with patients to collect, digitize, and manage their medical records, empowering them to monitor and control their care via a personal health timeline. Through partnerships with biotech, genomics, and pharma companies, we also aggregate and organize data from big groups of volunteers, which helps power some of today’s most cutting-edge medical research.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/picnichealth

You can see all of our open roles here: https://grnh.se/3b566ba92

* Data Engineer: https://team.picnichealth.com/careerdetails?gh_jid=465624300...

* DevOps Engineer: https://team.picnichealth.com/careerdetails?gh_jid=429762800...

* Engineering Manager: https://team.picnichealth.com/careerdetails?gh_jid=437728600...

* Front-End Engineer: https://team.picnichealth.com/careerdetails?gh_jid=429755900...

* Full-Stack Engineer: https://team.picnichealth.com/careerdetails?gh_jid=429692900...

* Machine Learning Engineer: https://team.picnichealth.com/careerdetails?gh_jid=429760100...

* Data Scientist / Biostatistician: https://team.picnichealth.com/careerdetails?gh_jid=466020200...

* Product Manager, Patient Product: https://team.picnichealth.com/careerdetails?gh_jid=437728800...

Tech Stack: Our main web service is in Node.js, and most other services are in Python (mostly machine learning services, using Keras, Tensorflow, etc). Our frontend is React + Redux, database is PostgreSQL, and services run in a Kubernetes cluster hosted on Google Cloud Platform (Google Kubernetes Engine).
If someone needs to read up on color profiles: https://bjango.com/articles/colourmanagementgamut/

Eg. important to configure ones design tools like Sketch and Photoshop correctly so that it interprets RGB values as intended rather than just in the current color profile
Search Nurture | Remote Only (US) | Full-time

Search Nurture is a full-service digital marketing agency with a focus on B2B Tech & eCommerce expansion for CPG companies. We are currently looking for an SEO Account Manager. Search Nurture offers competitive pay, medical/dental/vision, and the ability to work with a remote-first team.
Please don't post unsubstantive comments here, regardless of how you feel about blockchain.

https://news.ycombinator.com/newsguidelines.html
Follow Latest Coronavirus Status/News in the Country You're Currently Staying
This is incredible.

It's impressive enough to draw a single, static, flat shaded unlit triangle at 1k fps. It wasn't that long ago that this wasn't possible.

I can't imagine how much yak shaving went into this. There are so many little things that would have to get changed. Is there a write-up to read or a talk to watch?
I wonder what the valuation was. When they don't disclose the valuation, it's usually a low valuation.
They seem to have made the rounds in bottle shops in recent years. The first time I ever saw Fosters anywhere was in a bottle shop in Hobart after having lived in Queensland for 10 years.
Tim Cook and Apple Bet Everything on China. Then Coronavirus Hit
Location: Toronto, Canada

Remote: Yes

Willing to relocate: No

Technologies: Go, Typescript, Docker, Kubernetes, Serverless, Cassandra, Postgres, Elasticsearch.

Résumé/CV: Email

Email: sean@drumm.ca

Github: https://github.com/sjdweb

--

I'm relocating to Toronto, Canada in March and actively seeking local or remote contract opportunities. I'm a seasoned senior developer with team lead experience. I mainly work with distributed backend Node or Go systems, and also have strong DevOps experience. Would love to build out my network and discuss projects for 2020.
ORY | Munich, Germany | On Site | FULLTIME

We build stuff for an emerging cloud infrastructure. It’s security, zero trust, hardcore bullet proof engineering. It’s Golang, K8S, React, Hashicorp etc. - no more buzzwords! Just drop us a short introductory email to jobs@ory.sh. We believe that great engineering deserves to be paid accordingly.

Our open positions (all full-time in Munich, Germany):

Software Engineer / Go;
Software Engineer / React;
Software Engineer / SRE

Our GitHub: https://github.com/ory

Our Website: https://ory.sh
Re-use implies non-plastic containers. We only prioritize plastic because we accept the myth of recycling. If we do not accept that myth and we prioritized re-use, we’d choose glass for drink ware as some other countries have mandated. Yes there are different costs associated with glass, but the environmental cost of plastic is not insignificant either.
I'd say it's generally a good idea to stick to "bolt on" style modifications at most for any vehicle you need to count on. Save any real deep tinkering like this for something you can afford to have out of commission.

Personally I'm now contemplating fuel injecting my gokart as a way to learn.