skysight-inc/HackerNews huggingface dataset:
* It uses a single set of well-trusted modern primitives and so avoids the attack surface of negotiation.

* Those primitives are used for a Noise construction, and Noise is itself reasonably well studied and increasingly formalized; we can be somewhat confident WireGuard is skipping over the 2 generations of protocol vulnerabilities SSL/TLS faced.

* Perhaps most importantly, the codebase is tiny and designed to minimize its attack surface; for instance, the protocol itself is designed to be implementable without dynamic memory allocation.

* WireGuard is itself minimal and doesn't implement higher-level features like user management, which means that those features aren't coupled and entangled into the core engine, and can be implemented straightforwardly through a clear interface.

In general, and contra this article, "smaller codebase" usually does mean "more secure".
> As a developer I’m a huge proponent of simpler, more opinionated frameworks

Until you run into the limits, of course. If you control both sides, you can use what you want, but as soon as you implement just one side ...
Flower petals would make an amazing tactile controller
Tutoring kids who don’t need it is a booming business
So I've read the big GE management book written by the folks at Crotonville, and concluded that Welch did a lot right, like moving responsibility within the company to the level where the knowledge is, and shedding units that were fundamentally unprofitable. I think you're right that as manufacturing shifted toward globalized supply chains that a certain amount of pain was inevitable and necessary.

However, it seems like a lot of his financial results came from "shaping" the quarterly earnings and various unsustainable practices. And for whatever reason his the culture he brought to the company has left his successors overseeing a company that has performed as one of the worst in the whole S&P over the last 15 years. Even if you take a pure industrial company like US Steel, which I don't think anyone would point to as being on the vanguard of management or product, GE is not doing all that well. I dunno. My pet theory is that "leaning" an organization is really a one-time thing, and that it's very challenging to do so without also removing the "seed corn" of research and even development of the next big thing. Though, to be fair, Edison himself had a wildly inconsistent financial record.
Do you error check printf?

I don't - the default behavior of simply ignoring I/O failures if, say, stdout's pipe was broken is usually what I want. In fact, I've had bugs in exception throwing languages where such stdout write failures threw, and I failed to explicitly catch and ignore them.

I also may skip error checking malloc. A null pointer exception / sigsegv / access violation "must" be fine if malloc is failing - even if I handle it nonfatally in our code, some of our closed source middleware doesn't, and neither do some system libraries. At best I can make slightly better fatal error messages for a subset of the resulting failures. If I'm trying to build super reliable software, I need to avoid exhausting/fragmenting memory badly enough for malloc to fail in the first place.

I have a decent chance of checking fork() for failure as I'm on the more paranoid end of error checking. I've seen enough weird junk like SetCurrentDirectory on a real directory failing due to NTFS filesystem corruption leading to an infinite loop - that I assume all documented error conditions will eventually occur somehow, as well as some undocumented ones.

But I've never seen it fail, and I'm probably just going to make it a fatal error.
Persona was just some Mozilla experiment. But WebAuthn is alive and well, as far as I know.
Ask HN: Is your product looking to reach developers?
Hi guys and gals,

I've been working on a new product that helps open source devs get paid and helps companies reach a developer audience.

If you're looking to reach developers, I'd love to talk with you.

Right now we can deliver about 25-50 clicks per day at around $1.00 per click.

I'm at andrew<at>sugarkubes.io
National Institutes of Health | Postdoctoral Fellow | Bethesda, MD | Onsite | Full-time

The Laboratory of Cellular Imaging and Macromolecular Biophysics (LCIMB, lab chief: Richard Leapman, PhD), National Institute of Biomedical Imaging and Bioengineering (NIBIB), at the National Institutes of Health (NIH) in Bethesda, MD is seeking a postdoctoral fellow to join a new research program for biomedical computer vision research for electron microscopy.

Successful candidates will work alongside LCIMB staff scientists to research new computer vision techniques applicable to large-scale 3D structural modeling of cells and organelles, with a focus on areas including but not limited to: volumetric segmentation, robust multi-dataset segmentation, and self-supervised pretraining for computer vision neural networks. They will help supervise graduate students, postbacs, and interns working on the project, and guide team members who will integrate new research developments into software tools that microscopists can use for biological research applications.

To be eligible for postdoctoral training at the NIH, individuals must hold a doctoral degree (PhD, MD, DDS, or the equivalent) and have no more than five years of relevant research experience since receipt of their most recent doctoral degree. U.S. citizens and permanent residents are appointed to Postdoctoral Intramural Research Training Awards (IRTAs); citizens of other nations are appointed as Visiting Fellows.

We are looking for candidates with a PhD in computer science, applied math, or a similar area, with a focus on image processing, computer vision, and/or machine learning for imaging applications. Candidates should be comfortable working in a Linux environment, with basic Bash scripting experience. Candidates should also be familiar with Python and common scientific computing and deep learning libraries. Experience with high performance computing is preferred. Exposure to biology is preferred but not necessary. Supervisory experience is also preferred - for current graduate students, supervision of undergraduate or summer students is ok. Candidates should be able to effectively communicate their research activities to a multi-disciplinary research team of biologists, microscopists, and data scientists.

To apply, applicants should submit their curriculum vitae, a cover letter describing research interests, and names and contact information for three references to Dr. Richard Leapman (my boss) at leapmanr@mail.nih.gov. Anyone with questions can message me at matthew.guay@nih.gov.

The NIH is dedicated to building a diverse community in its training and employment programs. We encourage applications from members of underrepresented or marginalized communities.
Thanks. I assumed it was more densely populated than that, but now that I think about it it's obviously a human-scale set of passwords.
Covid-19: tips for employers: Should I pay staff who self-isolate at home?
I'm impressed by the Norwegian health authorities' response thus far, and society's receptability. We have 19 confirmed cases, and more or less everyone who has met a confirmed infected individual is (strongly) encouraged to self-quarantine for two weeks. Working from home if possible, staying off work if not. This means that 100-300 people are self-quarantining at the moment.

It's costly in terms of lost time, but it's much less costly than a full-scale epidemic will be. Will be very interesting to see whether these measures work. My gut feeling says we'll have a full-scale epidemic regardless, but hopefully with a lower peak that the healthcare system will be able to handle.
Cool. So here's what I'm trying to understand...

Usually when I write code, I assume it's my job to ensure the code works as designed in all reasonable circumstances. That requires understanding the failure modes of any external code I'm calling, at least as far as if/how it could fail.

IIUC, your approach is more like what I'd call prototyping. I.e., you accept that the code might be wrong, but you prefer to deal with that if/when it comes up in testing, so that you can move faster up-front.

Is that how you reason about it?
Natives in California can still be harvesting in November and can see the ground all year round except in the mountains. Natives at the far north might be done with harvesting by late September or early October and might not see the ground again until April. Not even remotely comparable in terms of the severity of the issue and the impact to survival.
I'm not sure they are "well aware". Many of us have been told that, once or twice, so we're aware on some level, but we don't have the image in our mind the image of some person in the government being able to essentially sit at our mailbox and read our impolite, hateful or lewd messages.
Gmail continuously disconnects from the internet in Chrome
Here is an analysis how well various browsers respect privacy:

https://www.scss.tcd.ie/Doug.Leith/pubs/browser_privacy.pdf
Good call, I occasionally forget how much Acme was inspired by Oberon. As for mice, I am currently using a Logitech 3-button "MouseMan" mouse via a PS/2 to USB converter, but if you want something more modern I find the Kensington Expert Mouse trackball an acceptable alternative.
I feel the same. Recently I started using Reddit for finding niche topics.
>I've read that 20% of people who get infected will need ICU treatment.

That number is far too high, and likely comes from an under counting of mild cases. Of the 705 infected on the diamond princess only 43 are or have been in critical condition and the people on board skewed much older than the general population. Also only 705/3200 even got infected despite almost everyone likely being exposed.
It did not make win32 windows animate when they opened or closed.

Edit: multiple people mentioned windowblinds. I used it too in the late 90s. My point stands.
TestFit | Software Engineer | Dallas, TX | Full-time | Onsite

We design buildings in milliseconds. Desktop software written in plain old C. See it in action here: https://blog.testfit.io/.

If you like managing your own memory, optimizing algorithms to run in under a millisecond, and solving tough problems using 2D vectors and trigonometry, then we might be the company for you. Being prone to ranting about how much RAM Slack uses is also a good sign.

The full job description and application link can be found here: https://blog.testfit.io/engineerprogrammer
Oh no, I understand your point, no misunderstanding here. It's one of the reasons I keep a technical blog, as an engineer, if I learn the hardest thing I've learned this $timeperiod, I want to share it, as clearly and understandably as I can. I fully support and encourage knowledge sharing, and it hurts just that little bit more when I see it being hoarded.
I'd argue that best practices often get overlooked in the search for putting one's mark on things & designers and engineers can often be bullied into capitulating.

I'm not advocating a sterile one size fits all grey dystopian outfit equivalent for everyone. But when you look at the landscape of software, I'd argue that teams forget what the equivalent concepts of what pockets or zippers are.

Similar to how many orgs will spend $100k's to have a half baked mobile app when a web app or off the shelf CMS would not only suffice but be a better solution for the end users's needs.

Point being - get the basics right, leverage the immense value that's been provided by the open source community and then & only then do you start redecorating.
Ooh. This is good. When I write my best selling Management Genetics(R) book filled with cellular jargon to describe The Business Double Helix(R), I am totally using this. With attribution, of course.
> Don't want your society transformed by outsiders by force? Don't start wars with them that you're going to lose in the end.

Iraq was invaded by the US and its allies, especially in 2003, under the guise of baseless WMD. Yet, the political leaders in the US and its allies never faced any ramifications for their actions, that directly resulted in the deaths and mutilations of hundreds of thousands of people over time. But hey, they're just "brown people", so who cares, right?

> not without preparing people for a generation

"Preparing" meaning brainwashing, correct? Again, what gives the US the right to "prepare" people of other states and countries, especially since we see the failures of US-style "democracy" and "secularism". Face the facts, people in the Middle East are generally conservative and religious, and they don't see Western style democracy or secularism as a solution, particularly when many aspects of those directly contradict their religion and culture. Furthermore, we saw what happens when the local population elects someone not in line with US's interests (see Morsi, etc.).

The US is now forced to declare peace with the Taliban, after all it's put Afghanistan and its people through. Countless lives and trillions of dollars later, and it's back to where things started (almost).
If you write code implementing a unix function (fork, sleep, blah, blah) you should know how the underlying function works and implement it properly and with correct error checking.
Minimax Labs | Full-stack, Research engineers/scientists | London, UK | ONSITE/REMOTE, INTERNS, FULL-TIME | http://minimaxlabs.com

We optimise complex, global operations for billion dollar businesses worldwide with a focus in the energy industry, creating massive value out of thin air and a little cloud.

To support rapid growth, we’re looking for full time employees to work on several exciting new projects and development of our industry leading technology and product. We seek strong full-stack engineers and scientists who want to have a real-world impact to join our elite team in our central London office. We also have internships available for the summer.

Full stack:

- comfortable building clean RESTful APIs (e.g. with Spring-boot)

- experienced in at least one statically typed high-level language (e.g. Java, C# or C++)

- know at least one common front-end framework (Angular 2+, React, Vue, etc.)

- able to design systems with distributed front-end/back-end logic (microservices, Docker, AWS/GCE)

- familiar with one scripting language (Python, bash, etc.)

- Experience in (or passion for) UI, UX design or data visualisation is a plus.

Research Engineers/Scientists:

- love working on challenging, complex real-world problems and high performance applications (Java, AWS) for real business users.

- experience solving hard optimisation (e.g. NP-hard scheduling) problems .

Get in touch at hiring@minimaxlabs.com for more details.
Why it is the best time to travel during the Coronavirus outbreak
It must have been a glitch on GitHub.
> At no point did I argue that we understand everything about nature. My point is just that every single thing in nature has turned out to be eventually accessible to rational modeling and understanding.

I'm having a hard time following this explanation / statement - it seems to contradict itself and yet is used to justify your subsequent point:

> To carve out a niche for certain areas and argue that these will eventually turn out to not follow that pattern has been a losing strategy throughout the history of science.

However, we have the obvious examples of pre-big bang ontology, as well as the origins of life and the evolutionary process, as "things in nature" that arose and yet do not appear accessible to our methods of understanding.

The observation "if you don't know how to do it, then you don't know how to do it with a computer" comes to mind here. I've yet to see any research indicating that we have or are on the verge of having a theory that describes a consciousness-generating mechanized process; assertions to the contrary seem to rely upon enlarging the definition of the word "machine" to a scale of abstraction that renders it unintelligible.
I don't know enough about the legal nuances to discuss or to challenge the PEO, but these are the facts as I know them.
A major security vulnerability in Google + was the nail on the coffin, If I remember correctly. May be they worried G+ was not worth sued over by EU.
I touch my face and even chew on my fingers as a nervous habit (hey, better than smoking or vaping, right?). If a mask kept me from habitually touching my face I'd consider that a win.
Is Rust better in the browser wrt "callback hell" in your view?

In ClojureScript you can use core.async to write async code in straight-line form. But I find myself using it pretty seldom, as handling events explicitly in functions feels pretty natural in Clojure especially given how naturally closures work in the language.
Load Balancing PHP-FPM with HAProxy and FastCGI
Active Desktop was just a HTML desktop (it didn't animate the window forms) and it part of Internet Explorer 4 so quiet late into the life of Windows 95. Probably around 1997 if I had to guess. There certainly wasn't anything like that on Windows 3.x which is what people would have been using in 1993.
PubPub | Boston/Remote | Full-time

The Knowledge Futures Group is hiring a software developer to help us build PubPub[0], a collaborative and open publishing tool for the academic web. We want an internet full of publishing tools that empower researchers rather than preying on them and more fully capture the research process in the final product — so we're building one. PubPub already hosts over 500 books, conferences, and journals, from annotated editions of public-domain works[1] to cutting-edge German theology[2] to the Harvard Data Science Review[3]. Right now we're hard at work building features focused on editorial review, data portability, and institution-level scalability.

We are a small team looking for a full-stack web developer ready to work with a React frontend and a Node/Postgres backend. Lots of our engineering problems are related to performant, collaborative rich text editing and marshaling a pile of the publishing industry's tools and standards into a coherent user experience. The larger challenge of PubPub is to invent new, healthier social dynamics around publishing while meeting practical needs, so we're looking for folks eager to contribute to design- and product-level decisions toward that end as well.

As a member of the team you will also be a member of the Knowledge Futures Group, which is loosely based in Boston/Cambridge. But the PubPub product team spans the UK, the US, and India, and we are interested in honing a remote-first culture. If you're interested, please drop us a line: hello@pubpub.org

[0] https://www.pubpub.org/

[1] https://frankenbook.org

[2] https://cursor.pubpub.org/

[3] https://hdsr.mitpress.mit.edu/

A longer version of this job description: https://www.knowledgefutures.org/jobs
This is partially a thing that happened organically. People who don’t come from a low-level background hear “compiler checks your work!” and think “I need a lot of help, that sounds great!”. People who come from a C or C++ background hear it and think “great, something that will get in my way”, and also sometimes think that they know better when they actually don’t. It used to be pretty common for people to jump on IRC and say “ugh I know I’m right how can I get the borrow checker to shut up” and then have something they were missing pointed out to them. The compiler was right, in the end. (This is of course not true all the time but it is a lot of the time...)
Very nice writeup. It's fun to see linear algebra out in the wild.
Texas closes hundreds of polling sites, making it harder for minorities to vote
7 years of Experience at Startups in various Technology Roles and 10+ years of Project Management Experience. SME in the Banking, Real Estate, and eCommerce Industries.

Location: Los Angeles

Remote: Yes

Willing to relocate: No

Technologies: Javascript, Typescript, Angular, Node, etc..

Résumé/CV: https://bit.ly/39guEhd

Email: shawn@shawn.digital

Website: https://shawn.digital
Lateral | Berlin, Germany | Onsite | Full-time | https://lateral.io/

Lateral, a machine learning startup, is looking for a front-end developer and a junior back-end developer to join our growing team. We are creating production systems around cutting edge machine learning and deploying them to help a wide range of industries, be it building physical infrastructure or drafting proposals, to optimise existing workflows. We are passionate about UX and design and strive to create the best experience for the users of our tools. We are based on Potsdamer Straße in Berlin with an international team, we have a commitment to a healthy work-life balance and regularly have social team events.

Front-end developer | You will be writing and maintaining production Javascript code that’s deployed to a range of clients, integrating with our custom back-end APIs to create user interfaces, maintaining a shared component library that is used across our ML training interfaces, ensuring the code is functional through testing, collaborating with designers and back-end developers to realise the products goals and working independently but also with supervision and help from the team when needed. Get in touch if you have at least 3 years working in the industry, a passion for programming and a desire to learn and develop your abilities!

Junior back-end developer | You will be writing and maintaining production Python code that’s deployed to a range of clients, integrating with third party APIs (such as SharePoint or Google Apps), writing components to synchronise data from external applications, interfacing with SQL databases (PostgreSQL), collaborating with designers and front-end developers to enable creation of innovative interfaces and working independently but also with supervision and help from the team when needed. Get in touch if you have at least 1 year experience working in the industry, a passion for programming and a desire to learn and develop your abilities!

What we offer:

- Competitive and equal pay

- Budget for learning and conferences

- Urban Sports Club membership

- A friendly atmosphere

- A great office

- Team events

We are looking for candidates to work with us in Berlin full-time. We do not provide relocation assistance but can help with the visa process.

Lateral is committed to creating a diverse environment and would encourage people of all genders and from all backgrounds to apply for this role.

We look forward to hearing from you :) Just send me an email: max at lateral.io
So as I understand:

- H&P does a very good job of giving updating arch knowledge, but it's mainly "theoretical"

- In order to build/simulate modern arch features, a lot of work needs to be done.

So we have simulators like gem5. Do you think what's seriously lacking is, for some expert to sit down with H&P and gem5, implement a ton of modern features, analyze them, and write a big textbook about it along the lines of 'Practical Computer Architecture'?
Why Elliot Management Wants to Oust Twitter CEO Jack Dorsey
Stripe is using this, and it's great. There's a few gaps in terms of messaging and flexibility (notably, which type of payment request is being sent -- apple pay, google pay etc.) but it makes it much, much more developer friendly.
Persona was a Mozilla project first and foremost. Nobody is going to just hand over one of the most critical parts of web-apps to their competitor, especially not a minor one.

Any standard can get adopted in two ways: either imposed by a dominant player, who can effectively force others to follow; or pushed by a wholly-independent 3rd-party that is completely neutral. Persona could not follow any of those strategies, and it withered, predictably.