skysight-inc/HackerNews huggingface dataset:
I don't manage sales people; telling them how to do their job isn't my job. I can suggest that if the lack of a single communications channel would be crippling for you, you're already in a pretty precarious place and should maybe think about that.

As for what you appear to believe is your gotcha, we don't have sales people, because our business doesn't work that way. I have worked for firms that did, though, and strangely, they somehow managed to do their jobs without spamming.
Something that this article doesn't seem to completely answer is, How much of this is the incompetence of the Montefiore system and how much was inevitable? or maybe, Is Montefiore different?

I sure hope that their irresponsible handling of the Feb 3rd case (and subsequent cases) is an exception to what hospitals have been doing. Yes, people weren't generally as aware of the disease on Feb 3rd, but healthcare workers definitely should have been (and from what I've seen quite a few were).

I feel like a lot of the variation in covid-19 outcomes is going to come from the competence of hospital administration.
FFMPEG is a great tool for any IP video streaming workflow. You can easily define multiple outputs. Check out the live streaming guide: https://trac.ffmpeg.org/wiki/StreamingGuide

I just haven't yet found a good way to export active stream status from the CLI out to other interfaces for the tool I'm working on.
As a citizen of EU member, I don't agree at all. It's good that each member can fine-tune details to their specific situation.

Italy/Spain/France are fucked and they do need super strict measures.

Meanwhile in my country we have relatively few cases. Most of them are imported and good chunk of local cases are medicine personnel. Right now we're far from full lock-down as seen in most unfortunate places. Many businesses that don't have customers on premises are operating more or less as usual. Sports outside are still allowed.

Right now amount of daily cases is not growing. Significant part of them are people coming home from more affected countries. Medical system is far from overrun. Given that the country is relatively sparse and social norms are rather distant, we're looking forward to having fewer and fewer new cases.

If all goes well, some restrictions will be lightened up in mid-April. E.g. outdoors cafes may be allowed to open up given that distance between visitors will be enforced. Next, non-essential shops may be allowed to open up for visitors with masks etc. It will probably take a long time to allow mass events though. But that's relatively small part of economy.

Why should we stay in lockdown if all is good locally, but Italy, Spain or Sweden still have ongoing crisis? We'll obviously keep our borders closed till our neighbours clean up their acts.

Solidarity is having life going on as much as safely possible and making stuff for affected allies. Not staying in lockdown side-by-side.
I fucking hope they don’t save any bytes doing that given that’d mean the passwords are stored in clear text.

Though given what we’ve seen so far once people started taking a look that’s not out of the realm of possibility.
I don't think so. Other messaging apps don't parse strings starting with \\ as links and if they do, they hopefully undo it for the .exe extension.
Location: Atlanta, GA

Remote: Yes

Willing to Relocate: Yes

Technologies: JS (Browser/Node), TypeScript, RxJS, Angular 2-9, React, Ruby, Python, Terraform, Saltstack

Resume/CV: https://www.mikekeen.com/resume.pdf

Email: mwk@mikekeen.com

I'm a full stack developer with 15 years of experience in various languages/frameworks. For the past 5 years I've been working almost exclusively in Angular 2+ with TypeScript and tons of RxJS. I've worked in early stage startups, and larger consulting companies. I love writing software, designing systems, implementing perfect user interfaces, learning new things, and mentoring/training junior engineers. Seeking remote Senior Engineer positions, but open to on-site as well.
It started with the iPhone and the software-ization of all buttons. Buttons were seen as the enemy, inflexible blackberry relics of the 1990s. Tesla took this trend and ran with it, and many other cars, like my 2008 Prius, had already begun with their incredibly crappy touch-screen. Mine broke years ago and the audio is ENTIRELY on the front-right speaker. It can not be changed ever because ONLY the touch screen can change sound balance and touch screen's broken. Welp, at least my co-pilot has ideal audio?
De-paywalled: https://archive.is/PFF6l
No linux version, no. They concentrate on twitch / game streamers. Most gamers are on windows so Linux doesn't even pop up on their radar.
You can't impale yourself on information.
We're in a pandemic. Telecommunications are of paramount importance to people working in emergency and others services throughout the world. So of course, security and privacy are more paramount than ever. But by releasing more and more "problems" with Zoom, it slowly forces organizations to abandon Zoom as a telecommunications option. Eventually people will not be allowed to use Zoom to do their jobs, which will make those jobs even more difficult than they already are. Social distancing by itself saves lives by keeping infection (and thus death) rates down, and this software is a critical part of making that work.

> Because Wardle dropped detail of the vulnerabilities on his blog, Zoom
> has not yet provided a fix. In the meanwhile, Wardle said,
> “if you care about your security and privacy, perhaps stop using Zoom.”

This is not the time to release 0-days in telecommunications software, people need this software to save lives.

If you work in InfoSec, or just idle in random hacker channels, please push back on this kind of behavior. It would be "irresponsible" at any other time, but in this era, it's literally life-threatening.
I absolutely choose not to believe people that show zero proof XD
Gemini | New York, Chicago, Portland |ONSITE| Frontend/ Backend/SRE | Full-time

Interested in Bitcoin and cryptocurrency? The Gemini team is building the trusted future of money. We believe in the transformational power of digital assets to solve meaningful, real-world problems; and we know that a thoughtful, rules-based approach will get us there. No prior crypto experience necessary. Privately funded company.

Can view specific openings here: https://gemini.com/careers

I work on the frontend team, happy to answer any questions, feel free to email me at matt dot tyndall at gemini.com
> I mean zoom is not unique in this sense, many of the everyday apps we use share at least some of these issues.

Very few. Zoom is written with a total disregard to security.
Location: Colorado, US

Remote: Yes

Willing to Relocate: no

Frontend: Vue.js, JAMStack, Laravel

Backend: PHP, Lumen, Laravel, NodeJS, Serverless, Headless CMS, WordPress, Drupal, etc. etc.

DevOps: Terraform, CloudFormation, Serverless, Kubernetes, GitOps, AWS, CI/CD on multiple platforms, Docker, etc.

Resume: Ask and you shall receive

Email: jc@technomanci.com
------

Software engineer focused in the Python/Django ecosystem. I've designed, maintained, and supported mission-critical applications and services for clients including Cisco, Eli Lilly, NIH, Stanford School of Medicine, as well as startups and several federal agencies.

------

Location: California / Amsterdam (US Citizen)
Remote: Yes (100%)
Willing to relocate: No thanks
Technologies: Python, Django, Flask, AWS, Postgres, SQLAlchemy, Plone, JS, Linux, MongoDB, Cassandra, Spark, Jupyter, R
Email: HN2020@davidsiedband.com

http://davidsiedband.com

https://tinyurl.com/siebo-cv2020
SEEKING WORK | Central Europe(EU, CET+0) | Remote | https://getivor.com

I'm a seasoned web development expert with a knack for UX design. I specialize in front-end(React), but also do back-end(Node).

I have extensive experience in architecting, building, and delivering large custom-made web applications.

Over the last decade I helped several US/EU based clients build Airbnb-like platforms, real-time GPS vehicle tracking suites, healthcare/finance/construction apps, and more.

I mostly collaborate with tech companies, but also have a lot of positive experiences assuming CTO-for-hire roles to work with non-technical founders.

Tech stack: React.js, JS/TypeScript/Babel, Node, Webpack, GraphQL, ESLint, Cypress.io, styled-components etc.

• Read more on my website: https://getivor.com

• View recent project - Jira Clone (4,5k stars): https://github.com/oldboyxx/jira_clone | Live demo: https://jira.ivorreic.com

• Passion project from 2014 (100k monthly visitors): https://movieo.me/movies

Get in touch: ivor@codetree.co
ObieCRE (YC S19) | Product Engineer & Our First Designer | Chicago | Full-time | REMOTE currently, ideally ONSITE eventually

We're looking for our 1st designer and engineer #4 to help build our product, our team, and our company. A small pivot has led to great product-market fit, and we now have acres of green field that need designing & coding.

How we make money: If you own a building that leases to office or commercial tenants, you need insurance. This is true if the economy is growing or crumbling. And as a result of this mandatory nature, it has not evolved to use modern technology. Workflows are manual. Communication is messy and time-consuming. People often don’t know what they’re buying or why. Obie sells commercial real estate insurance in a new way, once which emphasizes transparency and human-centric automation.

For the engineering role: our stack is Typescript, Node, GraphQL, and React. You should have ample experience in at least one of these technologies. Several years in overall coding experience is preferred, although the quality of this experience will be valued more highly than its duration.

For the design role: we're looking for someone who knows how to take a product from 0 to 1. Experience with phasing and sequencing of key features is highly desirable. A nice to is experience designing complex, B2B workflows.

To apply (or if you're just curious) please email careers@obiecre.com.
some work without dns though!

battle.net comes to mind... that always connected, even if my providers DNS failed.
Yep. You do want a limit though as you don’t want random attackers to DOS your login server by feeding megabytes you your kdf.
And the rest of us need a lifetime supply of adderall for a single day to focus at home instead of at a office :(
Just because you are hot and breath a lot it doesn't mean you are suffering, you are just working more. You start to suffer when you work over your limits, like when you overclock a computer too much and starts to glitch because some parts of it cannot handle it.
Feels like this whole week has been attack Zoom week.
…that’s just one of the security issues with Homebrew.
SEEKING WORK | Amsterdam, NL | REMOTE

Technologies: Java, Spring Boot, Python, PHP, HTML, CSS, JavaScript, Web Components, Angular, Jenkins, Docker, MongoDB, MySQL, Elastic Search, Logstash, Kibana, Redis, Apache Tomcat, Apache Kafka, & Linux.

Resume / CV / Portfolio: available upon request

Email: vaggdan[at]protonmail.com

Since 2014, I am offering custom Mobile, Software, and Web Application development consulting in order to build world-class applications, tailored to your needs, that is built with love.

Would you like to have a chat? Hit me up @ vaggdan[at]protonmail.com
US seems to be going through different stages of denial.
First it was that only Chinese will spread the disease.
Then it was dismissed as mere flu.
Now they seem to have acknowledged the severity of the situation.

It is disheartening to read in this thread some comment taking the human life so lightly.
Is not that the US going to support those going through unemployment with cheques and other benefits?
Is it not more important for the people to be healthy so that the economy can be restarted once all this is over?
It is depressing to read the comments from citizens of the wealthiest country in the world.
There is a duality between affordable and performance. For example, the Hack RF is pretty great and has a large frequency range and wide bandwidth for a relatively small cost. But for HF transceiving you need probably need better filtering, which has to be specific to the band and mode, amplifiers both ways, although, with transmission you probably need several stages of amplifiers and filtering in each stage as well. So all of those things would be costly and depending on what you want to do it may be better to buy a regular radio.
Same for me, doing okay, but kinda getting to me. On the other hand, my partner is an extrovert and has cried multiple times saying "Imagine how you would feel if you were forced to go to a crowded party every day after work. I feel stressed and overwhelmed".
------

SEEKING WORK Software engineer focused in the Python/Django ecosystem. I've designed, maintained, and supported mission-critical applications and services for clients including Cisco, Eli Lilly, NIH, Stanford School of Medicine, as well as several startups and federal agencies.

------

Location: California / Amsterdam (US Citizen)
Remote: Yes (100%)
Willing to relocate: No thanks
Technologies: Python, Django, Flask, AWS, Postgres, SQLAlchemy, Plone, JS, Linux, MongoDB, Cassandra, Spark, Jupyter, R
Email: HN2020@davidsiedband.com

http://davidsiedband.com

https://tinyurl.com/siebo-cv2020
A lot of people may think this blog post is either over complicating stuff or stating the obvious. While slightly true, you'd be surprised at how many people miss the points highlighted by the author. I get so many cold emails that don't hit any of these points and I just end up deleting them immediately.
80/20 rule, probably. Most of their revenue is coming from a handful of places, and and increasing the money coming out of other parts of the market might not be worth it.

Easy to support a couple hundred whoppers who pay big money on the coasts -- and who also have the time and money to really learn the tool. Expand that out to 100,000 customers with lower costs and greater support needs and it doesn't make sense.
Thanks for trying and some profound thoughts around it!

Yes, we do learn from our surroundings and at an early stage in our lives. Nothing is totally novel.

However, the AI is intended to augment than replace and sometimes enhance our capabilities. Being predicable isn't such a bad thing after all!

Thanks again!
Ruby on Rails Security Best Practices and Vulnerabilities
Last week, HN's front-page featured "Proposed bounty for adding virtual camera" [0] that ended up generating an RFC. [1]

You might find some encouraging and helpful information there, if you haven't seen those links already.

[0] https://news.ycombinator.com/item?id=22682022

[1] https://github.com/obsproject/rfcs/pull/15
I'm seeing some negative comments that focus on the article specifics. So I thought I'd say well done Patrick for reaching your goal using creativity and the right kind of persistence. Thank you for showing the actual steps you took and sharing your thought process.

I've been in software almost 20 years and due to some incredibly poor timing am in need of finding my own door of opportunity, so I found your post inspirational. Thank you.
There is actually a reason (though 32 seems pretty short. Something like 256 is probably more reasonable).

Several thousand characters (or worse, unlimited length) opens up your attack to a form of DDoS where you can exploit the fact that password hashing is a computationally heavy operation. See here: https://arstechnica.com/information-technology/2013/09/long-...

> Django does not impose any maximum on the length of the plaintext password, meaning that an attacker can simply submit arbitrarily large—and guaranteed-to-fail—passwords, forcing a server running Django to perform the resulting expensive hash computation in an attempt to check the password. A password one megabyte in size, for example, will require roughly one minute of computation to check when using the PBKDF2 hasher. This allows for denial-of-service attacks through repeated submission of large passwords, tying up server resources in the expensive computation of the corresponding hashes.
Wait a minute there young man, your password can only possibly be safe if it contains lowercase, uppercase, numeric and non alphanumeric characters!
There was plenty of criticism before. Remember they were the company that ran an unauthenticated web server bound to localhost so that any website could make requests to it and get the video stream. And they made it so that an uninstall wouldn't remove that.

That was July.

https://www.schneier.com/blog/archives/2019/07/zoom_vulnerab...
Location: Toronto, Canada
Remote: Yes
Willing to relocate: Yes
Technologies: C, shell, Linux, networking
Résumé/CV: https://alxu.ca/resume.pdf
Email: see resume
^ Trump Derangement Syndrome.
I've noticed this too. It's also on other news sites like Slashdot. It comes off like a smear campaign
Ok, we don't have fruiting plants. So that can make a difference.
Aren't you talking about the difference between nice and mean police? They are still there to enforce.

Since UK police can be so nice, is there a difference between UK police telling you to stop doing something, and a HN person doing the same online?
For the type of influencer you are referring to I prefer to use the words "product endorser". Because that's really what it boils down to. Of course influencers are not a fan of that term.
SEEKING WORK

Location: Amsterdam, NL

Remote: Yes

Willing to relocate: No, but willing to travel

Technologies: Java, Spring Boot, Python, PHP, HTML, CSS, JavaScript, Web Components, Angular, Jenkins, Docker, MongoDB, MySQL, Elastic Search, Logstash, Kibana, Redis, Apache Tomcat, Apache Kafka, & Linux.

Resume/CV: available upon request

Email: vaggdan[at]protonmail.com

Since 2014, I am offering custom Mobile, Software, and Web Application development consulting in order to build world-class applications, tailored to your needs, that is built with love.

Would you like to have a chat? Hit me up @ vaggdan[at]protonmail.com
Put it inside an app bundle?
Simon Data Is Hiring Senior Full Stack Engineers NYC or Remote
Simon Data is the enterprise Customer Data Platform (CDP) that empowers brands to deliver data-driven, personalized customer experiences anywhere. The platform leverages enterprise-scale big data and machine learning to power customer communications in any channel.

We have several Senior Full Stack Engineering positions open. Role can be on site in NYC or remote! Our tech stack is a Django app using tools like React, Typescript, Hooks and GraphQL.

On the backend we rely on Lamda, Jenkins, Redshift, EMR, Spark, Docker and Slack to power through petabytes on a daily basis.

To to apply/learn more, please go to this exact link! https://grnh.se/a1bbbc142us
I like this:

The price is trying to go to a level to force companies to keep the oil in the ground. If it has to go negative to incentivize that behavior, then it will.
SEEKING WORK | Backend Services; Data Engineering; Systems Engineering

Location: Boston, US | Remote: Yes

I'm an experienced software engineer looking for part-time and short-term contracts.

I've most recently worked in the data-analytics backend-stack: from ETL to database design to web-api to devops. One of my major projects is an analytics engine for web applications using Rust and Clickhouse (https://github.com/hwchen/tesseract).

However, I'm naturally curious and happy to work in any domain which requires high performance and maintainable code. I've worked with a distributed worker system, debugged async database drivers, and implemented text layout primitives.

Primary Skills: Rust, Python, Linux, Google Compute Platform, ClickhouseDB, Postgresql

Production Experience with: Python/Pandas, Node/JS, AWS, Docker, Redis, MySql, Nginx

Github: https://github.com/hwchen

Contact: hello@hwc.io
I'm not sure if a VM is an option given the need for a camera. If it is, I think that's a pretty good option.

By default I would recommend a dedicated laptop for Zoom. Don't use it for anything else. Also shut the laptop down completely when it's not in use.

This means there won't be anything to snoop on, and the hardware will be turned off when you aren't using it.
OK, 2 million dead. Most victims are fairly old -- lets say average life expectency of victims without COVID is say 15 years.

That's 30 million years of life without a lockdown. In the U.S. a year of life is under $150k, so that's an upper "value" of lockdown of $4.5T

U.S. GDP is 21T, so a 25% drop in GDP caused by a lockdown would not be value for money.

"How can you equate money with life saved"? Ask that when nobody is uninsured.
Where in the brain does creativity come from? Evidence from jazz musicians
Point out any socialist/communist country where this hasn't happened.

Oil was pretty much their only market, you can definitely blame how the country turned out based on how the government ran it's market, and btw the Venezuelan government committed much worse atrocities than just running their market into the ground. They even killed their own people trying to get aid from other countries.

https://www.pbs.org/newshour/world/5287-people-killed-during...

https://www.theguardian.com/world/live/2019/feb/23/venezuela...

https://www.foxnews.com/world/venezuela-uprising-turns-viole...

https://www.nytimes.com/2019/02/22/world/americas/brazil-ven...

But yeah, maybe it hasn't been implemented properly yet /s
Yugilator – Flutter app that calculates your Yu-Gi-Oh health points
Yes. Having explored information flow in Indian healthcare system in detail, I can say significant number of deaths due to particular disease will not go unnoticed.
Liquid helium to cool superconducting magnets in MRI machines is also at a premium. This may use a much less expensive machine.
if the best predictor of the future is past behavior then it doesn't look good.
Excuse me, what the f? Link? edit: Thanks
Because many more people have started using it and are running into a multitude of issues... with everything.

It doesn't help that Zoom has a history of bad practices. Just last year Apple had to issue a silent security updates to macOS to patch Zoom's zero day vulnerabilities Zoom denied existed.
They're now asking for new passwords:

* minimum of 8 characters

* one uppercase and lowercase letter

* one number

* one special character

They should just allow any character instead of requiring characters. At least they allow longer passwords...
> Evidence to date outside Asia is, zero flattening

That's not true.
"new daily deaths" are fairly flat in Italy over the last week, not doubling geometrically at all.

https://www.worldometers.info/coronavirus/country/italy/

If the lockdown is working in other countries, then a similar state will be reached 3 weeks afterwards.

Daily new cases is down in Italy since peak on 21 March - that's a leading metric compared to deaths, although it is less precise because it can be swayed by changes in testing.
Location: Chicago, IL

Remote: Sure thing!

Willing to relocate: Yes

Technologies: JavaScript (Node.js, React Native), Python (Flask, Django), C# (.NET Core, WPF, and APIs), SQL (SQLite, Postgres, SQLAlchemy), AWS, Shell Script, Git, Figma, PM software (Jira, Trello)

Résumé/CV: Can send via email!

Email: heja@iu.edu

---

In my last year of university, current experience includes development of web applications & leading a React Native dev team for a local startup (current), as well as producing blogs (generally Flask but recently React) and Shopify sites for student organizations. Self-taught, but looking for opportunities where I can help make something awesome in a group of folks that I can learn from as well. :)
I am really struggling to come up with a situation where this would actually matter. I guess if for some reason the first 32 characters of my password got leaked but not the next 32? But why would that ever happen, and who wouldn't change their password in that situation anyway?
April Fools and the Broken Promises of One-Off Hacks