skysight-inc/HackerNews huggingface dataset:
"Likewise, I just "opted into" into NextDNS a few days ago to block ads so I didn't have to set up a Raspberry Pi-hole."

This is a fantastic idea - I can't believe I never thought of this ...

I'm sorry to hijack, but about the nextDNS product ... how do they determine who is a paying customer ? Do you have to log your IP-space with them ?

I also have no idea, in the context of modern web browsing, how large or small 300,000 DNS queries per month is[1]. It seems quite large to me - as if even my entire household would never possibly produce 300k DNS queries each month ... but perhaps I underestimate how many queries modern web pages produce ?

Can I run my own very simple local resolver and use NextDNS as my upstream such that only one of my systems (my DNS server) is talking to NextDNS ? This would allow me to use NextDNS globally without them tracking me all over the world ...

[1] https://nextdns.io/pricing
Why should they give something seperate?

Their charity is among the most effective. Should Bill be willing to let people die whom their foundation could have saved just to please those who think it's self-serving?

B&M Gates recognized most charities aren't particularly effective, and that there were few places they could convert their cash to QALY's. They created a foundation which effectively does that and now pour their money into it.

I don't exactly understand what they should have done instead. Settle for a worse charity that would save fewer lives?
>US for profit company
>privacy
That's a literal oxymoron. All US companies are subject to data snooping whatever they say themselves is irrelevant. Lavabit is the prime example how the US gov will force you to either hand over keys or go out of business. And since Cloudflare didn't have any problems with Gov yet it's obvious they are handing over all keys without court orders.
How much of this is related to the software though and how much is related to home internet speeds, camera quality, microphone quality, etc.? Most laptops ship with really low quality webcams and mics, and that’s predominantly what people are using.
Would it be possible for you to list out some of the easier tasks that you have on your to-do list, and solicit coders to work on those. i know that bringing in other devs is a huge step, but you've put together a very solid platform, and it'd be great to see it keep growing.
How do you propose that the salespeople, without whom your employer or employers would go bankrupt, reach out to new prospects? How would that work? Am genuinely curious. By definition it seems to involve cold outreach of some type
I don't see this as related to the job post or the posting entity.
Victory Garden
Super helpful. Thanks. Will get that to the team.
Due to quarantine remote working, a lot of people are obliged to use Zoom. To some Zoom has a reputation of not taking security seriously, so they feel forced to compromise the security of their computers. Personally I think this reputation is justified.

You can access Zoom meetings through a pure web interface without installing anything. The experience is somewhat reduced.
Bullshit. If you resort to coersion, it's quite the opposite of neglect. And it's not going to work - it is extremely easy to find porn if that's what your kids want to find, and there is nothing you can do about it.
You could buy a license?
Choices are already being made. We're not all confined to our homes with the military distributing rations, even though that would probably be the most effective way of stopping the disease.

But it's a pandemic, not a war. No infrastructure will be lost in the next few months. The economy should be reasonably fine, once we can safely go out again.
Free Math Foundation | REMOTE | Frontend and Full-stack engineers | Currently volunteer basis

Pre-funding edtech non-profit seeking early volunteers, with the opportunity to convert to a paid position when funding source is secured.

This might not being the spirit of the thread, as I cannot yet pay people, but I am looking for passionate people that could earn their way up to co-founder status with meaningful contributions to the project.

The Free Math site allows students to record digital step-by-step math work for a wide variety of grade levels and subjects. The site is open source and saves files that are easily collected using any existing course management site. Grading is done in bulk with similar student answers shown in groups. Teachers can quickly grade correct answers and see full solutions to give detailed feedback to incorrect solutions.

https://freemathapp.org

Contact:
developers@freemathapp.org
I agree to a large degree, your analogy about storm drains is spot on. As a person that does cold outreach sales spam bothers me too because it makes the job harder for people that are doing valuable research and targeting their prospects with greater purpose.

I do, however, disagree that great or relevant service will present itself without a proactive salesperson.
If you are looking for self-hosted desktop streaming with OBS via nginx and RTMP, you might find some insights in my recent blog post: https://bitkeks.eu/blog/2020/03/desktop-video-streaming-serv...
The nginx module also supports DASH encoding, which can be delivered by dash.js - I have it in production, but not yet updated the article. Next I'll try setting up SRT.
SEEKING WORK | Europe | Remote

I am a freelance consultant, specialized in Microsoft technologies, especially the application development parts of Azure.

I help my customers by providing valuable technical and architectural guidance as well as hands-on help with the implementation of their projects targeting many different client-side technologies (React, ASP.NET Core, Microsoft Bot Framework) and the underlying infrastructure for all of them: Azure. I also support my customers transforming their software development process to follow Agile best practices by utilizing Azure DevOps.

LinkedIn: https://www.linkedin.com/in/peterbozso/

Blog: https://peterbozso.com/

GitHub: https://github.com/peterbozso
No, I haven't watched TV in almost two decades, except when visiting relatives or friends.
My kid is 2.5 and especially now when we can't get her out of the house, we're relying on a tablet for some of her socializing (seeing friends and family on video chat). We often use this while we're cooking and cleaning. Amazon looooooves to push ads to her tablet and the kid friendly mode they offer is a nightmare to try and use. I filter content for her because as much as we'd like to, we can't always be watching.

She's 2.5. Lots of things in her life aren't voluntary. It's my responsibility and choice to keep her safe. You can let your kids watch all the lemon parties they want but I'll just keep that stuff blocked.
Location: Sarajevo, Bosnia and Herzegovina
Remote: Yes
Willing to relocate: No
Technologies: Android (Java & Kotlin), Swift, Dart (Flutter), JS, Rx, git
Résumé/CV: https://www.linkedin.com/in/menilv/
Email: menil@gekkotech.io

I spent the last 3 years working on fin-tech and health-tech startups, most notably NAGA Social, so I can contribute in a fast-paced environment, but I am not exclusive to startups. I am willing to work as a mobile or backend engineer.
Stay safe.
Location: London

Remote: Yes

Willing to relocate: Yes

Technologies: Go • React • TypeScript • Python • Postgres

CV: https://nikitavoloboev.xyz/cv.pdf

GitHub: https://github.com/nikitavoloboev

Email: In CV
ONSITE on Abbot Kinney, Venice Beach, LA Los Angeles (but remote for now).
AE Studio is looking to hire software developers with sufficient social skills to communicate with some interesting clients

The role is a hybrid individual contributor/manager role with a lot of interesting challenges involved. We've found that the people who succeed best in them are entrepreneurial developers who love to code but also feel like they should try out "management" or have some freelance or entrepreneurial experience.

We have a pretty fun team of developers, data scientists, designers and PMs. We build products for startups like Protocol Labs and large companies like Samsung, and work on cool stuff in house. We’re particularly passionate about building products that increase human agency.

We’re currently building things like a COVID-19 test platform and computer vision to do home test, a customizable merch platform with some cool computer vision and nlp behind it, and computer vision for preventative medicine pee sticks.

Apply at https://ae.studio/join-us

Or apply by solving this lighthearted programming challenge to save Tom Hanks from COVID-19: https://challenges.ae.studio/
Smallpox became endemic (https://en.wikipedia.org/wiki/Endemic_(epidemiology)) long before fast international travel. If a disease like it emerged today (high R0 factor, high mortality) we would absolutely need a shutdown.

> Like having everyone in a hazmat suit and do massive testing.

That'd require a shutdown in order to produce enough PPE and tests. Just like we're currently experiencing.
Crematoriums tend to operate at capacity, just 5-10% increases in death rate would easily overwhelm them.
I'll ask again.

What is the threat model?

To me, all this looks like people knowing that signing is somehow good and demanding it in a context where it isn't clear that it makes sense. And given that the top post in this thread is about skeevy domains, how the heck would signing scripts achieve anything? Even the reposted tweet says "don't think you could weaponize".
We know it's deadly but not that deadly. The numbers from Korea, Italy and the Diamond princess are not good but they are not world-ending either. They are painful but that's it.

I am unclear on what you mean by "not that deadly". So let's discuss exactly how deadly we are talking about.

However https://www.thelancet.com/journals/laninf/article/PIIS1473-3... is a research paper published 2 days ago. Their median estimate for the infection fatality rate is 0.66%. Which, applied to the US population, suggests on the order of 2 million deaths. (More if everyone gets it, probably a bit less since only most of us would be likely to get it.)

If half the world population gets it, make that about 20 million. Or about a third of the total deaths in WW 2.

These kinds of evidence based numbers are rather worse than I would describe as, "...painful but that's it." But maybe your standards are different than mine.
(I wrote the below before I realized that you said 'monitor with minimal interaction', but I'll post the comment anyway.)

There's this for 3D printing protective visors:

https://3dverkstan.se/protective-visor/

They print their own visors in Stockholm and distribute them to hospitals. They also act as a hub for amateurs that can help print, and companies with 3D printers with spare capacity, so that the hospitals have a single point of contact. I don't have any more details than what's said on the page.
The ability to type whatever date one wants is often considered to be a bug. The ability to post-date reports a month into the future sometimes is, too. (-:
Researchers find AI is bad at predicting life outcomes
Generate data to help beat the coronavirus (Covid-19) pandemic
If not email, then what kinds of alternative methods do you find acceptable/permissible for someone to connect with you in an effort to introduce you to a new product or service?
> I'm guessing that a large number of rounds of a secure hash function on 32 chars is more secure than a smaller number of rounds on 64 chars (given that most passwords are well under 32 characters long).

The number of rounds increases brute-force complexity linearly.

Adding more characters increases complexity exponentially.

Exponential is exponentially better than linear...
These are valid attacks for bypassing Gatekeeper on macOS, but they're not root-level privilege escalations attacks (the user still needs to enter a password) and they don't provide remote code execution.

It does show that whoever manages security at Zoom should go back to school though. Operating system security features are not an obstacle but a tool. Trying to work around them reminds me of the age of IE6 toolbars and "system optimisers" who won't let you uninstall them.
Dailymotion | Sophia Antipolis, Nice Area, France | ONSITE | Junior / mid-level JavaScript developer | Full-time

My team (video player core & performance) is looking for someone with ~1-3 years of JS experience. You need have some decent level of familiarity with vanilla JavaScript and be willing to learn. No knowledge about video stuff or any specific frameworks required.

Note: you should be eligible to work in France (EU citizen, have a Schengen visa etc.)

We're currently 14 people in the Sophia office, including 3 in my team. The two main sites are Paris and NYC with ~400 people. Dailymotion is owned by Vivendi, a huge media conglomerate.

I'm not a hiring manager but feel free to ping me for details - my info in HN profile.

https://jobs.smartrecruiters.com/Dailymotion/743999707567491...
Finding the Right Balance of CPU and GPU for Ansys
Primity Bio | Remote; part-time or consulting/contract okay | QA/Test Engineer

We're seeking a QA/test engineer to help build out and improve our testing for a data analysis Web application. Must have strong knowledge of Cypress.

We're a small, all-remote team with membees in the US and Europe.

Email: my username at primitybio.com.
I disagree here. I don’t think a total shut down of the economy is necessary, and I would like to see the nations billionaires stepping up with more cold hard cash. I appreciate what Bill and Melinda have done through their foundation, but I’m a little suspicious. I guess I just like to see more from him then shut down the economy and everybody stay home in our mansions… I mean homes.
For newbies, it also comes with a ton of demo content and setups (pre-roll, transition, etc), to ease the learning and spin-up curve. Agree that doesn't make it more robust (see my other comment). I have no affiliation with either project, just an Old Guy learning/doing some streaming projects.
If we get a 1.1.1.4 with all of easylist ad blocked.. that would be smashing! Pi-hole for the internet.
Mods: Had to editorialize because everything stock from the article exceeded HN title limits. Do as you see fit based on article contents.

Title: Researchers find AI is bad at predicting GPA, grit, eviction, job training, layoffs, and material hardship

Abstract: A paper coauthored by over 112 researchers across 160 data and social science teams found that AI and statistical models, when used to predict six life outcomes for children, parents, and households, weren’t very accurate even when trained on 13,000 data points from over 4,000 families. They assert that the work is a cautionary tale on the use of predictive modeling, especially in the criminal justice system and social support programs.

Paper: https://www.eurekalert.org/file/jrnls/pnas/pdfs/pnas.2019150...
This is exploitable if you have code running as an unprivileged user and would like to obtain root privileges or access the camera surreptitiously.
Hacking Your ELF for Fun and Profit
On the one hand, all the attention (if pride is removed from the equation) should be win-win since remote workers might end up less spied on or hacked and zoom still makes a huge profit.
[0]There are services that do this. Of course, this goes against TOS for affiliate and partnered streamers on twitch. As of my last check, it's not an issue for other platforms yet.

Being able to do this is actually the number one reason why I strongly believe nobody should ever become a Twitch affiliate.

[0]https://restream.io/
It's especially relevant to me and my family; as the room-moms in my children's classrooms want to use Zoom to set up playdates so the kids from the classroom can interact, since they really miss each other (and don't get to see each other otherwise).

None of this is contrived; and all of it is serious when you're the parent of a school age child.
redistribute the modified zoom installer from your own domain. Send meeting invites with a link to the modified zoom installer.

You get the zoom signed package installing your unsigned code.
LPE has always been trivial on OS X... for the longest time, the passwordless-sudo timeout was not specific to the tty. So all you had to do was wait for someone to use sudo, and you would be able to get root.
Applied Intuition | Software, Sr. Software, Sr Frontend | Bay Area, Detroit | Onsite, VISA | Full-time

Help determine the future of autonomy. Applied Intuition provides the infrastructure to safely develop, test, and deploy autonomous vehicles at scale. We've raised funds from A16Z and General Catalyst.

Applied Intuition equips engineering and product development teams with software that makes it faster, safer, and easier to bring autonomy to market. Headquartered in Silicon Valley with offices in Detroit, Tokyo, and Munich, Applied is composed of software and automotive experts from the top companies in the world (such as Google, Amazon, Apple, Waymo, Tesla, Delphi, GM, and Bosch).

We have a few priority roles we are actively hiring for:

- Frontend - Senior & Mid-level

- Senior SWE - Game Engines

- Sensor Simulation Engineer

- Software Test Engineer

- DevOps Engineer

- Security Engineer

- SWE (Detroit)

- Product Designer

- SWE Generalist (Bay Area)

I am a recent addition to Applied, and have only great things to say about the culture[1], the product, and the team. Our tech stack is cutting edge and a blast to work on, our pace is fast but sane, and our customers love us (and demand a lot from our product). If you're interested in bringing a deep software skillset to autonomous vehicles, Applied is a fantastic place to land in this industry.

Apply online, every application is read: https://www.appliedintuition.com/careers or email me (def + @<company address>) with any questions, but do not send me your resume (please apply instead online).

[1] https://www.youtube.com/watch?v=vM3-k-g3CV4
The Mac solution for that is to buy more Macs and Mac software licenses.
Some of the EGL portions of that PR are actually included in the one I linked :) At some point my plan is to go through and merge these all together if no one else does it, but streaming has not been a priority for me at the moment.
SEEKING FEEELANCER

Primity Bio | Remote | QA/Test Engineer

We're seeking a QA/test engineer to help build out and improve our testing for a data analysis Web application. Must have strong knowledge of Cypress.

We're a small, all-remote team with membees in the US and Europe.

Email: my username at primitybio.com.
Yugabyte PM here. Yugabyte SQL query layer is a fork of PostgreSQL 11.2's query layer. This query layer runs on DocDB, a distributed document store whose sharding, replication and ACID transactions architecture is inspired by Google Spanner.

Given that the query layer reuses the native PostgreSQL code, it is wire compatible with the PostgreSQL binary protocol and already supports an extensive set of PostgreSQL language features (including partial indexes, triggers and stored procedures). Most tools from the PostgreSQL ecosystem work without any modification. However, PostgreSQL is an extensive language so claiming 100% coverage is not accurate . For example, GIN and GIST indexes are not yet supported since more work is needed to integrate those language constructs to the underlying distributed storage layer. The more accurate answer would be that YugabyteDB has the best PostgreSQL compatibility in the realm of distributed databases and continues to increase coverage with new releases.
Location: United States

Remote: Yes

Willing to relocate: Yes

Technologies: Python (celery, flask/django, numpy/ pandas/scipy, sqlalchemy, asyncio/multiprocessing/threading, others), Go, Javascript (Node.js, Jquery, React), R, AWS, Azure, GCP, Hashicorp Terraform & Vault, Databases (SQL, NoSQL, BigQuery, Redis, Cassandra, others), Message Queues (RabbitMQ/Celery, ØMQ, Apache Kafka), Big Data (Apache Spark, Airflow/Kubeflow, Beam, Snowflake, Dask), Machine Learning/Natural Language Processing (Sklearn, Tensorflow, Pytorch, Gensim, NLTK, Spacy, ElasticSearch), Web Scraping

Résumé/CV: www.linkedin.com/in/ryansmccoy

Email: hn (at) ryansmccoy (dot) com

I've spent the last 13 years designing and building mission-critical software, data, and cloud solutions for customers in the Financial Markets, including Fortune 500 companies, Investment Managers, Hedge Funds, Venture Capital, Private Equity, and Data Vendors.

I've successfully developed cloud based web apps, custom dashboards, distributed financial data pipelines, low-latency and high-throughput market data systems, natural language text analytics, software/data architecture including micro-services, front, middle, back office automation, network security/encryption, automated trading algorithms, quantamental process automation, and ETL systems;
I have this same fear. Small businesses suffer immensely while large corporations thrive. I think also based on the hiring thread last week on HN, tech companies are disproportionately unaffected.
Location: Munich, Germany

Remote: yes

Willing to relocate: no

Profile: Engineering Manager

Experience: Software engineering background (Java, Web), project management experience, Consulting/Requirements/ProductOwner, Solution Design and Architecture. Recruiting, training and mentoring junior devs. Domain knowledge in ecommerce, PIM and DAM.

Resume: https://elmar.files.wordpress.com/2020/01/schraml_elmar_resu...

Email: elmar.schraml@gmail.com
what technology stack did you use?
This is linking to a source on twitter https://twitter.com/hackerfantastic/status/12451333712626196... with a short demo on youtube https://www.youtube.com/watch?v=Om1w4DVkkEU

From what I can gather. You can send a message in zoom with a link like "\\host.example.com\calc.exe". Zoom will highlight it as a clickable link.

Assuming you can get the user to click it:

1) It will fetch the remote executable and run.

2) It transparently transmits windows authentication of the user to the remote server, expecting a network share that may require authentication.
Mediasmart.io | Senior backend developer| Full-time | ONSITE Madrid, Spain

Mediasmart.io is a mobile advertising startup in the real time bidding programmatic landscape. The company is already profitable, +20 employees. Our bidding product handles near 1M bid requests per second using a combination of Node.JS and GoLang stack

We are looking for someone seasoned in backend development, preferible with a startup background. The candidate will be part of the development team [he/she will code], someone seasoned the rest of the team could turn to for guidance, mentoring, best practices, coding standards, etc

We require experience in backend [Node.js preferred but golang would do], we value experience in scalability/performance scenarios, as well as DevOps and administration skills

The position is based on Madrid but it is open to remote for candidates living in Spain

If interested or have further questions please contact us via email to "jobs AT mediasmart.io" including the subject line "mediasmart.io head of backend [seen on HN]"
He’s a bit sensationalist, to be sure, but the bugs mentioned are ones that should be fixed. (If rather trivial to find…)
China Concealed Extent of Virus Outbreak, U.S. Intelligence Says
> "What is 'we' to us (and whatever other life is out in space) could be 'me' to the universe..."

i'm skeptical of collective transcendence but it's pretty easy to see humans becoming the neurons of earth's brain over time. and as other planets become similarly sentient, they'd become the cells of an even larger galactic organism. and maybe galaxies form a universal being, and this universal being becomes a cell in a multiversal being.

it's cellular recursion all the way down.
I have never seen the wikipedia "bad image list" before - and I am confused ... after clicking on a few of these images, randomly, every single one (under File Usage) reports:

No pages on the English Wikipedia use this file (pages on other projects are not listed).

... so why do these images persist in the wikipedia ?