skysight-inc/HackerNews huggingface dataset:
> 2% dropout rate per day on a quarantine period for all individuals flagged as contacts, which lasts up to 2 weeks. I don't know what they used to come up with that number for dropout rate, but it seems highly optimistic if the information about who has registered as a contact is kept private

Sorry but I don't understand how keeping contact information private or public has any effect on the compliance of people to stay in quarantine?

> So, my — non-expert — conclusion at this point is that privacy-preserving digital contact tracing probably isn't going to be that useful because people either won't use it or won't follow the advice when doing so is inconvenient (e.g. because it puts their employment at risk). But digital contact tracing in general seems like it can help, if you can drive both usage and compliance high enough.

I don't understand why you think an app that can promise to keep people's personal data private would gain lower adoption than one that was explicitly collecting such data. Maybe I've misunderstood what you're trying to say here but it would make more sense to me that an app that can preserve privacy would have higher adoption, higher trust and therefore higher compliance levels.
Tech Legal Matters: South Africa's Covid-19 Regulations
So where can I get a crazy good deal on a new car. I wasn't in the market, but if the price is right...
Mindgeek | NodeJS, React, PHP | Cyprus | Full-Time | ONSITE | EU passport-holders only

We are the industry leader in adult entertainment, owning and running the largest properties (PornHub, Brazzers, MyDirtyHobby etc)

Open positions:

Javascript Developers (Full-stack ) https://grnh.se/7723a7a52us
We are using React & NodeJS but experience in any JS framework will do.

PHP Developers https://grnh.se/417d94792us
We are using Laravel, Symfony components, Microservices
Your compression workaround reminded me of an issue I ran into a while back.

My team at work uses a reporting tool for vulnerability assessments and pen-tests; basically you can import a bunch of data files, review it in the web app, and generate a report.

I would run into cases where I couldn't upload one of my data files. The web app is JS-heavy, lots of things going on in the background without much visible feedback. It turns out that the programmers had implemented the upload as this async task with a hard-coded timeout for completion, and they likely wrote it while they had great network speed.

I'm on DSL, and generally, it gets the job done. However, upload speed is only 1Mbit/s, so with a big file, my upload would time out. It's hard-coded remember, so it didn't matter that it was still functioning when it got clobbered.

It occurred to me that some file formats, like WAR or Office documents, are basically Zip archives under the hood, so I put my large XML file into one, and tried that.... and it worked! Something on the back-end quietly unzipped my upload and imported the file it contained.

Funnier is that when I mentioned it to the devs, this behaviour was not something they expected. Probably built into a library they use.
Can you please explain why this isn't a big problem to you?
I don't like that most of these articles present a binary choice: always work from home or always work from the office.

I've learned two things in the past couple of months:

* I really enjoy being at home when doing task work. I can play music without headphones. I can tweak my surroundings to be just the way I like them. I can meander down and see the wife and kids for lunch. Talk a walk around my neighborhood. (I would be able to run an errand or to, normally, but...)

* I hate being at home when doing design or collaborative work. Videoconferencing is better than nothing, but the latency makes me want to claw my eyes out. And I just deeply miss the conviviality and warmth of sharing a physical space with my team.

But I don't need either the former or the latter every day. What I'd really like is a team that worked together a couple of days a week, and from home a couple of days.
DoubleVerify | Ghent (Belgium), Tel Aviv (Israel), New York (US) | Full-time, Onsite

Belgium: https://doubleverify.gent/careers?gh_src=221704c02
Worldwide: https://www.doubleverify.com/careers/?gh_src=221704c02

DoubleVerify improves the impression quality and audience impact of digital advertising. We ensure ad viewability, brand safety, and fraud protection for hundreds of Fortune 500 companies.

My team in Belgium optimizes hundreds of thousands of video ads per minute. We also do a fair amount of data science. We're a full-stack JavaScript team, but we focus on computer science fundamentals rather than specific tech. In fact, many of our top engineers started out without any JavaScript experience!

If Belgium's not your thing, we're also hiring talented engineers at our offices in New York and Tel Aviv!
Show HN: I’m making Nicetweeps to make your Twitter consumption more focused
Not at all. In fact the english degree is probably one of the more useful degrees to have. Knowing how to write and communicate effectively is key to many jobs, and is useful over an entire career. I should add, that he told me he even felt this way.

I'm not so sure about the music degree, but I can see the general skills of being detail oriented and working with a team as an IC to create something bigger as key life skills useful in any job.

Meanwhile, I got a CS degree when OO was big and nearly minored in business. I haven't looked at OO in years for programming, but the business courses I took have been key every step of my career. I wish I had taken more writing classes.
Hello hackers, the maker here!

In this kind of work from home situation, there’s no better way to save your time than making sure your Twitter consumption is on point. Thus, we should only read what we gotta read: the more focused timeline or list. That’s the motivation behind the product, to ease you finding the right people to follow based on your interest.

It’s based on NextJS and hosted on Vercel, with styled components under the hood. I also deploy it as static website, since I don’t use any database other than some JSON files.

That said, I’m looking forward to hear what you think. Feel free to give me feedback on the tech things or anything else.

Thank you!
It's BS: Inside the weird, get-rich-quick world of dropshipping
Hy-Vee - https://hy-vee.com | West Des Moines, IA | Full-Stack Software Engineer | QA Automation Engineer | Full Time | ONSITE or REMOTE (US ONLY) | JavaScript, TypeScript, React/React Native, Next.js, Kubernetes, Google Cloud

We are a large retail grocer with 265+ stores in 8 states in the Midwest. We've been in the ecommerce grocery business for 5+ years and successfully compete with the national players in this space. We are focused on making our customer's lives easier, healthier, and happier through our digital products.

Our teams help build the digital products that our customer's use to order groceries for pickup/delivery, refill prescriptions, earn & redeem in loyalty, and order prepared food online.

Our software engineers work in modern stacks including GitHub, TDD, CI/CD, part-time paring, & automated testing. We ship features to a very large, active, and loyal user base on a regular cadence.

We are proud of our teams, our culture, and the products we build & support. If you are an experienced software engineer, are capable of working collaboratively on a product team, and have a passion for software then we'd love to talk with you.

More Info about us: https://innovate.hy-vee.com/

Position Descriptions & Apply Online or send your resume to Amanda at AWittmaack@hy-vee.com

Software Engineer: https://www.linkedin.com/jobs/view/1606763127/

QA Engineer: https://www.linkedin.com/jobs/view/1770603845/
Related: I found this online tool to be very useful for debugging regex: https://www.debuggex.com/
Bluecore | Manhattan NYC, NY| Principal Engineer, Platform Data & Infrastructure | Full-time | bluecore.com

Bluecore is hiring a Principal Engineer to develop high-throughput systems with Go and gRPC on the Google Cloud Platform. If you're interested in leading development on systems that scale on amazing infrastructure, please apply!

https://jobs.lever.co/bluecore/45d79235-034f-4012-90f9-1cc48...
I get Physics Today every month (since I'm an APS member). One of my favorite things about it, strangely, is the ads.
Dropshipping might have worked as a decent side-hustle when the 4HWW was originally published many years ago. I think the space became flooded to the point where I concluded that it was impossible for an ordinary person to make decent money. It's probably also become much, much more predatory since then. It's more lucrative to sell dropshipping advice than it is to do actual dropshipping.
"LLVM IR at some fixed version" seems on the face of it like a reasonable attack on the problem, yes, and you can get close to solving the reproducibility problem that way. But you can't actually solve it, because LLVM IR is two to four orders of magnitude more complicated than Nock, so it's full of definitional ambiguities, which mean that in practice it is defined by the behavior of its implementation, which is full of bugs, some of which must be fixed because they are security holes. Even without fixing the bugs, its behavior will vary depending on what compiler it's built with and what CPU and OS it runs on. Operations as commonplace as sequences of two floating-point additions can give different results, sometimes radically different, for example in the presence or absence of guard digits, to say nothing of non-IEEE-754-compliant hardware like Intel Gen. In this particular case GCC has a flag, -fstore-float, to get deterministic behavior on some hardware, so you can read about the issue.

The same flaw (for this purpose) is present in JVM bytecode, i386 machine code, ARM2 machine code, CIL, and wasm. (e)BPF and the Z-machine might be plausible bases for a solution on those grounds, but you'd still need a lot of work to be sure you'd rooted out the sources of irreproducibility.

Now, as I said, I'm not convinced that Nock in practice solves the problem it sets out to, and Faré's criticisms that you have helpfully linked to are a major reason for that. But nothing that existed does in fact set out to solve that problem, much less succeed. It's true that some other computational basis would also have worked, given enough effort; but I think you are seriously underestimating the amount of effort required.

I do think my previous comment already explained why I think rigorous computational reproducibility is valuable.
One German manufacturer recently explained how their company has already outsourced almost all parts and manufacturing phases that can be easily scaled. The company does design, final assembly testing, calibration and quality control. I suspect that the internally used testing and manufacturing equipment and protocols are the hardest thing to scale.
Ask HN: Can we discuss about Martin Fowler's “Distributed Data Mesh” vision?
I'm referring to this Martin Fowler's blog post [1] about Distributed Data Mesh, posted May last year.

This is 5th time it's posted on HN [2], but all previous submission didn't generate any discussion/comments. As the article is very rich and interesting to one working with data architecture, I would love to get HN's experts' opinions on that.

Please, if you work with data processing, data warehouse, data lake, etc. do you agree with Dehghani's and Fowler's vision?

Where do you see data platforms going?

[1] - https://martinfowler.com/articles/data-monolith-to-mesh.html
[2] - https://hn.algolia.com/?q=https%3A%2F%2Fmartinfowler.com%2Farticles%2Fdata-monolith-to-mesh.html
Not to be flippant, but the example used is Nissan, which has been circling the drain in the NA market for a couple years now. This wouldn't have surprised me if it happened 4 months ago.

Now, are ships full of Toyotas and VWs also unable to unload?
Essential Jenkins Plugins
Two Lives, One Death and a Mystery
I am still squeezing life out of my mid-2012 MacBook Pro and am very much pro right-to-repair. But given the complexity of professional DSLR cameras, and Apple laptops since I gave that example, I have to question my own belief that these decisions are purely profit/shareholder-value driven. There has to be something else at play here, maybe someone familiar with the high-tech manufacturing process can shed some light.

Alternatively, what stops these companies from offering technical education on repairing their products, and allowing the graduates to setup their own repair businesses? I don't think it's sustainable to keep forcing customers to pay up for $2k+ laptops or cameras every 3-4 years.
That doesn't seem to be what was said.
I'm curious what measures you considered draconian?
Sourcegraph (https://sourcegraph.com) | Software Engineer, Engineering Manager, Security Engineer, Product Manager, Product Designer | ALL REMOTE

Sourcegraph is building Universal Code Search so developers can focus on solving problems instead of struggling to find and understand code. Read our master plan to learn more about what we’re building, and why it matters: https://sourcegraph.com/plan

With Sourcegraph, you can instantly search across both your company’s private code and public open-source code with inline code intelligence providing go-to-definition and find-references. Developers at Uber, Lyft, Yelp, and many other companies use Sourcegraph regularly every day.

We just raised a $23M Series B and are growing our team to keep up with customer demand. If you are passionate about making the world better through software, come join us!

Sourcegraph is an equal opportunity workplace; we embrace diversity and welcome people from all backgrounds and communities.

Technologies that we use: Go, TypeScript, React, RxJS, GraphQL, Postgres, Docker, Kubernetes

We’re hiring for many different roles. Apply here: https://github.com/sourcegraph/careers/
They are saying it is a big problem. A problem much bigger than the already awful "journalists will have hard time protecting sources".
If you are using the Serverless Framework to build your serverless application, we actually provide a full CI/CD solution as a part of the Serverless Framework Pro Dashboard that is free to use. You can easily sign up at dashboard.serverless.com and it includes a lot more than just CI/CD; monitoring, debugging, local development via the cloud and a ton more!!
Hit the max nesting depth, but to reply about why,
because winrt::import! is reading (arbitrary?) filesystem paths and there isn't an equivalent for build.rs emitting 'rerun-if-changed'.

So, neither cargo nor the compiler really know of the paths, and cannot accordingly rebuild the sources when they change.

Perhaps they can only change when a corresponding version cargo does know about changes, anyhow, bypassing the build/module system with a proc macro is probably not something to be done lightly.
> Walking your bike 200m to the closest bike shop?

This also illustrates a secondary benefit of these €50, namely that bike repairs are hyper-local. In addition to making bike repair more affordable for some and helping keep the momentum going on bike commuting, these euros can also drive more commerce to local small repair shops, helping them stay in business.
PyCon 2020 Online
Tesla shares fall on Elon Musk “stock price too high” tweet
Hello,

I'm the tech lead for Kubernetes at DO. Just wanted to jump in and provide some clarification around the security issues you brought up.

The blog post you're referring to came out in December 2018, shortly after we released DOKS as a Limited Availability offering. By the time we announced our General Availability release in May 2019, we had done the following:

1. Changed our node bootstrapping process so that etcd information is no longer necessary in the metadata API, and removed said etcd information from metadata.
2. Firewalled off etcd so that it's accessible only inside the cluster.
3. Shifted how we run the CSI controller component so that a DO API token no longer needs to be stored as a secret in the cluster.
4. Switched from Flannel to Cilium as the CNI plugin, which allows users to configure network policies. We don't configure any network policies by default, but the option is there for users who want to use them.

These changes fix the vulnerabilities explained in the blog post. We do have further hardening measures planned, including limiting the scope of API tokens (one of the suggestions from the blog post, and also an often-requested feature from DO customers), but that's a big project so we can't provide a firm timeline for it at this point.

Hope this clarifies the current situation. If you or anyone else finds new security issues with DOKS (or other DO products) we would love to know about it. Our security team is always accepting vulnerability reports via their disclosure program: https://www.digitalocean.com/legal/contact-security/
I work for a financial institution using openshift in cloud. Learning it now.
Complexity is like entropy, not energy. It increases, unless you spend a significant amount of energy removing it from a small area, and in the process increase the complexity somewhere else by a larger amount.

However, any degree of functionality requires at least a matching degree of complexity. In that sense, some complexity is 'essential' and that complexity does need to live somewhere in your project.
SiriusXM not shutting down yet?
SEEKING FREELANCER / Remote / US/Pacific time preferred

Looking for a front-end developer who's a React expert and is good at figuring out tricky browser interactions. Fabrica is building a no-code web-based visual editor for web apps.

Please, no recruiters or teams/firms.

Website: https://www.fabrica.dev/

Contact: eric+whoishiring@fabrica.dev
Corrected! (Covid brain) Thanks.
Journalist centered articles far too often have a bad habit of that sort of selfish attitude of thinking protections should be limited to them by some sort of credential and not a "universal press" despite the obvious backfire potential involved with it - or their sources for that matter.

Hell even the article is lukewarm criticism instead of speaking truth to power and saying that it is bullshit and so is the purported goal.
If you want to stop child molesters you stop the molestors first as opposed to the byproducts. And even though the byproducts do their own damage cracking down on the bulletin boards is completely removed from being helpful.
There is no need to "subdivide" because the exact volume of the object can be calculated exactly to any arbitrary detail.
The FBI’s Director, a Critic of Strong Encryption, Once Defended It
Can Tech Startups Fix Food Supply Chains?
Interesting! But isn't this a "there's no honor among thieves" issue? My understanding is that this sort of trading is not permitted by the platforms.

Are there markets with this kind of trust asymmetry that aren't up to something totally dodgy?
Interesting point re: the long tail, but isn't the same true of all the hyperscalars? It's certainly true for Amazon and Microsoft, who both have a better reputation for keeping the long tail of products alive than Google. So if anything, that would point at Google having optimized for this scenario better and earlier.
The wiring thing highlights the problem I think. He was the hardware manager but he didn't actually have control over the direction of the hardware team. That's a terrible position to be in.

Also, don't underestimate wiring in a quantum computer. I don't know the details of Google's system but Quantum computers uses analog RF pulses to interact with the Qubit system which are then later digitized. The design of a wiring system in a Quantum computer is similar to what you would see designing a high end phased array radar system with the need for everything to be phase matched, highly stable, and temperature controlled except that a quantum computer is also extremely susceptible to cross talk at the interfaces. Wiring a system of Google's scale can easily run into the $100k+ range in just material and manufacturing costs. If the other person didn't have any experimental experience like Martinis says, then he would almost certainly run into problems.
MJD speculated on much the same thing: https://blog.plover.com/prog/design-patterns.html .
How were A and C constructed?

Were they constructed from the derivative work? Or did they choose or generate A and C so that A xor C produces the derived work?

In all of those cases, they are still derivative work.
It should probably be noted in the title that this is a podcast. A 93 minute podcast with no transcript or even timestamps. No too-long-didn't-listen summary.
The WSJ editorial board is garbage and will fall over themselves to side with corporate America even if it means making untenable arguments.
Passenger Pigeon De-Extinction
Thanks! A few quick thoughts:

- We've done exactly this for Github <> Tara. We have a bi-directional sync with Github issues, and active issues are converted into tasks in Tara. Basically, if a user wanted to, they could just use Tara as a Github issue tracker.

- We wanted to start with Github, then work our way through more git/source control platforms, and then move to Jira. Interestingly, structuring incoming data from Jira requires a few months of work on data models IF we don't want the user to spend a ton of time labelling. Jira's data structure can be a hot mess to deal with.

- If the sync took a day or even a week of configuration, would you find it worth your time to invest and go through that? Or would yo expect the sync to work instantaneously (like Github <> Tara).

- What would be your expectations on mapping for histories?
Wanted: CTO/Co-Founder (f/m/d) | play, Austria | Video, Deep Learning, Computer Vision | Remote Ok

Join the founder’s team.

play is about automated video production- and postproduction.

We will develop Software and Hardware for Consumers and the Broadcasting/Streaming Industry.

Therefore we are looking for a CTO (f/m/d) who loves the medium video, can build and lead a team and wants to
transform an entire industry.

Sounds ambitious. It is. This is exactly why we founded play.

Interested? Great.

Just follow our inviting “call to action”: Find out what we are working on and how you can be part of: https://www.playsys.at/cto-wanted/
Monzo recruits former Amex exec Sujata Bhatia as its new COO
I notice that there's a kind of complexity that seems to straddle the bounds, related to the way it easily turns into effort-reallocation politics. Would it be useful to consider “coordinative complexity” a separate type that's intermediary on the essential–accidental axis but also has other properties?
And in France as well (leboncoin.fr), I guess the idea here is to encourage people who needed a push to fix their tires or breaks to make the move and use all those bikes left collecting dust.
Add ubiquitous & fast testing into the mix - is contact tracing valuable then? Because testing on demand is what a lot of governments are looking at.

I’m thinking the app giving me a notice of close contact with a confirmed covid case will also increase my chances of getting a test even before we reach that scenario.
It was also pretty clear when people were pushing hard for ventilator production that they were a month too late once you consider even aggressive design, supply chains, lead time, etc. I doubt there will really be a surplus because a lot of these are under-tested and hastily assembled.

We've been a month+ behind on a lot of the response. Now's not the time to talk about ventilators, it's the time to start working out logistics of vaccine production and distribution.