skysight-inc/HackerNews huggingface dataset:
Narmi (Techstars NYC '17)| New York, NY (NYC) | ONSITE (normally) | https://www.narmi.com

Narmi is helping reinvent banking in the United States. We create a more accessible and useful financial ecosystem by powering the online banking, mobile banking, account opening and open banking APIs for the 10,000 credit unions and community banks in the United States.

You'll be working on production software that has a real impact on the average American's life everyday. Our software helps them save money on their bills, understand their financial story, protect their families and move money.

Narmi was founded by two Georgetown University alums who previously worked as CEO and CTO of an $18 million credit union and also at some of the largest banks in the world.

Even if you don't think you are an exact fit for one of our current openings, we'd still love to talk. We are always looking for well-rounded engineers to join our team in NYC. Having expertise in python (django and django-rest-framework), vue.js, react native, ansible, terraform, visual design/UI/UX, and/or security are all pluses!

- Software Engineer - Full Stack https://jobs.lever.co/narmi/552795b8-64b6-4673-93aa-e0b91717...

- Senior Site Reliability Engineer https://jobs.lever.co/narmi/c807303d-7fb8-4a98-8c9b-99ae2d7b...

- Senior UI/UX Product Designer https://jobs.lever.co/narmi/2990c914-0f41-462d-b882-2a19840c...

- Talent Acquisition Specialist (Recruiter)
https://jobs.lever.co/narmi/7484b5e6-3d5e-47a6-a019-d0ba363d...

The interview process entails an intro call to get to know each other, a remote pair coding session (for technical positions), and a remote "onsite" half-day.

Some keywords: * Senior Full Stack Engineer, Senior Full-stack Engineer, Senior Full Stack Developer, Senior Full-stack Developer * Senior Front End Engineer, Senior Front-end Engineer, Senior Front End Developer, Senior Software Engineer, Senior Product Engineer, Software Engineer * SRE, Devops * Banking, finance, online banking, mobile banking, open banking APIs, * New York City, New York, NY, NYC, Manhattan

You can learn more on our website (https://www.narmi.com/about/careers). Make sure to mention you found us on Hacker News. Also please feel free to reach out directly to me chris @ our domain.
Perhaps it's about frustration with boring convention, and what that looks like when you render it into a website design?
I almost always understand my code, maybe I’m good at it, not sure. I use a lot of logging and untangle tech debt at first opportunity.

That said, it isn’t rocket surgery. ETL, web services, and FS/image tools lately.
We have so many secret values it made sense to build our own internal product, an audited system which holds secrets in a backed up, locked down database. Apps pull from that system at runtime (or deploy time) but they can only access their own secrets using access control. We also use AWS KMS for AWS related resources.
Talks about draining the swamp, proceeds to swamp the swamp with more swampy swamp-dwellers.
The $500M per year they get from Google isn't enough to pay the bills?
Automatic registration and voting by mail.
Cross Products and the Four Color Theorem
So... what kind of nonsense do I need to disable in about:config this time?
Yes, I'm still confused by the equivocation between facists and antifacsists, and your dodging that question doesn't help.

Please elaborate. Please don't just re-quote yourself. You know, follow the guidelines and engage in good faith. I did, it why I asked a genuine clarifying question which you seemed to ignore.
Well, in the same slide deck it talks about how it recorded the users last access location and "the site has a built-in database of school dormitories and halls". Is it possible that the site was able to automatically determine what hall/dorm you were in depending on your network connection?
>hawking bum dope about AIDS

Odd turn of phrase.
Call them what they are: ads. They are ads, and they were added by default to the home page of Firefox.
Magnesium citrate 200mg(now foods) + animal pak (which includes another 400mg along with a bunch of other vitamins and minerals. I'm a bit over the daily recommendation with those two but most of my spare time revolves around sports since the pandemic so yeah...

Differences:

- Sleep is considerably better.

- Haven't had a single muscle cramp even after something like a 30km walk + 60km bike + gym. Otherwise a common occurrence because genetically I have incredibly strong legs and virtually no body fat on my legs.

- Generally I'm less moody and far less likely to (╯°□°)╯︵ ┻━┻ when something stupid happens at work for instance.

- No exhaustion whatsoever.
Well, that URL doesn't have an `fnid` in it. It looks to me like they just guessed their `id`, which is simply an incrementing identifier. They're still using GET for upvotes, but they include a CSRF token.

Using GET to change state, like they're discussing in that thread, is really more of a style issue than a security issue. You need a CSRF token, whatever verb you use.

And that was a few years before my recollection of upvotes using an `fnid`. (I could also be misremembering.)

In the case of password resets, I don't think there's a functional difference between using a map of closures with random tokens and comparing random tokens stored in a database, as is the more conventional approach. If you can guess the random token, or if you can extract them via a side channel, then you can reset passwords. And if you can't, you can't.

Which isn't to say it's not worth having a look :)
See: “Better note-taking” misses the point; what matters is “better thinking”

And: People who write extensively about note-writing rarely have a serious context of use

Once loaded, scroll all the way to the right:

https://notes.andymatuschak.org/About_these_notes?stackedNot...
How Hong Kong’s Protesters Evade Police and Keep the Demonstrations Alive
It's supposed to be lighter for purely local installations with an single binary, and was the default mta for Debian for a long time for mostly that reason.
some of the points made doing that decision is available here https://wiki.debian.org/Debate/DefaultMTA#Comparison

For the most part postfix/dovecot have become the default for full scale mail servers but back when the Debian defaults were decided there was still some uncertainty about what would replace sendmailNG as the lightweight default mta.
Fortunately, you can turn it off if you don't like it.
I just wanted to chime in and say we are hiring for many more positions than just Data Science, and they are all remote.

My team as well is specifically looking for Security Engineers/Analysts/Developers, however we don't have the posting up yet, so feel free to send me a message (my email is in my profile).
Domino Data Lab | Staff Software Engineer | SF-Onsite AND NY-Onsite OR NY-Remote (East Coast) | https://www.dominodatalab.com

We're building the platform that enables thousands of data scientists to develop better medicines, grow more productive crops, build better cars, or simply recommend the best song to play next. Data scientists are being called upon to solve ever more complex problems across every facet of business and civil life. Domino allows them to develop and deploy ideas faster with collaborative, reusable, reproducible analysis.

Our stack is Scala/Java, Play, Kubernetes, MongoDB, and React. Ideally, we'd like someone who's comfortable with these technologies, but we're always excited to meet great engineers who can quickly learn new technologies.

If you are interested in learning more, check out https://www.dominodatalab.com/careers/engineering/ to see this opening as well as others we are actively attempting to fill.
The biggest Fab factory company in the world is Dutch [0]. TSMC, Intel and friends are customers of theirs and use _their_ equipment and IP.

So the Intellectual property seems to be there? It's just that we don't have any actual factories in EU.

TSMC seems wholly dependent on Europe here.

[0] - https://en.wikipedia.org/wiki/ASML_Holding
I've found this tiny utility a great help. It provides haptic feedback for all touch bar presses (BetterTouchTool also has this feature).

https://github.com/niw/HapticKey
The biggest item on my wish-list is still a user-option to restore the previous (sensible) click behavior for the address bar: one click places the cursor, double click selects (all, but if I need to triple click for that it would be fine, too).

Sadly, this wish will probably not come true any time soon... or ever.
Very possibly, though in this case the lack of convention doesn't help me understand what the website is about.
I've had an XPS 13 and XPS 15 and both suffered from coil whine, bad graphics and overheating. I would steer clear if I was you.
My current dev laptop is a Razor which has been a much better experience than the XPS.
aha, sounds fair.

I don't judge too harshly- anyone who has black and white principles on these matters has never worked in any other industry most likely... all you can do is your best to steer the ship and convey the downsides.

I think it's important too because it helps us understand how much friction people will tolerate.

In many cases, even a small amount of friction will cause people to stop functioning completely; I recently tried setting up vault and it was a nightmare, I understand why people avoid picking it up.

That doesn't mean we should not try; we have to become the advocates, arbiters and helpers for those systems.

Good luck, you're not alone.
> some people say 'protests', others say 'riots'

Both are happening at the same time in similar places. Plenty of people are using the correct term for the group they mean, which others are twisting to conflate into one mass group. Don't fall into the same trap.
Just another option:

V-Server from https://netcup.de ca. 3$/month

.space domain ca. 2$/year from https://gandi.net

(I am not affiliated with any of them)

I wanted to a little bit more e.g. having my own calendar, and hosting my own Mercurial server (since almost nobody supports that anymore, maybe GitLab in the future). Found than out that this offer is good enough for my own VPN and even having my own tiny cloud storage.
I don't have any questions but I'd just like to say how much I love what you're doing, thank you.

When I was a kid I loved geeking out with my scanner I bought at radio shack, your site relights this flame for me and it's awesome to explore all of broadcasts going on in the world through your site.
They could use the donations to improve Firefox, to pay the salaries of the engineers, instead of all the political nonsense they do with the foundation. Yes, your donations go towards that.

And they could cut the salaries of management instead of giving themselves raises.

Instead we got ads in the home page.
I didn't know about envwarden till you mentioned it here.

We migrated from bitwarden to offline client machine for the reason that we didn't wanted a copy of our encryption key be available anywhere else online.
Heck, I'm impressed that enough people are running an MTA that touches incoming mail for this to be effective. It was never "easy", even in the 90s. Back then it was an issue of having a performant, secure config. But these days, it's way more complex and too much money.

I wouldn't think that many people are using fetchmail + local MTA anymore, but maybe I'm wrong.

I used to do it for my family, but maintaining an MTA, spam filtering, IMAP/POP, webmail, CalDAV & CardDAV is rough. And supporting folks hooking up their devices that increasingly needed to go 8 menus deep to punch in the settings for something that wasn't gmail/hotmail/outlook was just too much.

And then you can't run it out of your house, unless you pay money for static IPs, or you pay for hosting and make sure you keep yourself off blocklists. Just the cost of doing it made it not worth it unless you hit economy of scale number of users.

That said, sendmail did improve my M4 skills FWIW.
Lawsuit over online book lending could bankrupt Internet Archive
There's a big community around self-hosting at reddit on /r/selfhosted. The sidebar has links to specifically hosting your own website.
It's dangerous to depend on a single company (that also happens to have a competing product).

What happens if the money stops coming?
> Today, Muzinich retains financial ties to the firm through an opaque transaction in which he transferred his shares in the privately held company to his father.

It's a top gov official using the exact same scheme as Tiger King.

And that is even before any of the 3trillion part even begins.
Maybe, but that does not mean that they should put all their eggs into one basket.
Anyone know of a good hub that works that way?
The business of tear gas
The director's name is Masaaki Suzuki.
> America doesn't have a serious lobby that believes in those things.

I've gotta say, the NRA has been getting closer to fitting this.

https://www.opensecrets.org/orgs/totals?cycle=2012&id=d00000...

https://www.nytimes.com/2013/04/03/us/nra-details-plan-for-a...
I'm sure the bugs you mention about Windows exist and are terrible, but I made the switch to Windows after converting to Mac ~9 years ago and I haven't experienced anything but very minor annoyances.

I still prefer the Mac OS experience, design, and usability, but the price premium for Apple products is not worth this modest improvement. I still have and enjoy my Iphone Xs but might consider switching to Android in a couple years whenever I need to upgrade.
So simple and beautiful.
Yeah there's a whole different level of automation between your car and what's being advertised by Tesla. EyeSight does do a bit of driving for you at higher speeds but it's not the stop and go capable 'Autopilot' of the Tesla.
As a former long-time Ableton user, just want to recommend Bitwig Studio[1] as a viable (improved?) alternative that runs natively on Linux. I've used it for live performances and label-released music for over four years now and other than the typical setup issues related to Jack (one time thing resolved in an hour or so) I couldn't be happier.

[1] https://www.bitwig.com/en/home.html
I've dropped out of a PhD programme in the UK (many years ago) so perhaps I can help.

It is usual for PhD students to have tuition and a small stipend for their living expenses paid for by government. The government knows perfectly well it needs some supply of researchers, the old ones eventually die so you need to train new ones and a PhD course is how you do that.

A particular university Computer Science department might have say, six slots this year for PhD students. It needs not only the money (which you could if you're wealthy just pay for yourself) but also experienced staff willing to supervise these students which may be a more limiting factor. If it has eight capable applicants versus six slots then yes, you might get refused, but it's rare for there to be a huge imbalance between the number of applicants and available slots such that you'd need to be a "genius".

If you have a good (say first or upper second honours) undergraduate degree in the same or closely related area, and you can find a PhD topic and a doctoral supervisor, in Computer Science they can probably make the money happen.

You will not be wealthy (the stipend is small), but you should be too busy to notice and you're hanging out with other students who haven't got any money anyway.
Developing more than one revenue stream is likely to be a more resilient strategy than hoping that Google is happy to keep paying a competitor browser to stay in business
Right, iterating on your workflow is a normal part of work.

> I see a similar trend with org-mode users. It's great and all on a technical level (I've used it myself in the past) but it's easy to fall into the elisp and customization rabbit hole.

I think part of the issue is that people try to jump into the middle of something which has evolved without going through that evolution themselves. In other words, they need to go to the starting line and iterate from there rather than pushing through to the finish line. I have seen some complex workflows in Org mode, but those flows were built up over years.

The software analogy would be premature optimization. Developers attempting to use tools which are meant for scaling without knowing the how or why of these tools. If you don't know why you should use something, then you might not be to the point where you need it.

I learn the most about how to tackle a problem once I stumble across the need to fix the problem. The best tools are those I find when I then go in search for the fix.
Why do you need a sworn officer with arrest powers to come out and record your bike's serial number? Most quality of life crime could be handled by the equivalent of an unarmed zoning enforcement officer.
did they fix the issue with websockets over a forward proxy?
If you did 1/2 of what the other cops did, you’d already be in jail pending trial. If you’d done 1/10th of that to a cop, you’d be lucky to survive your arrest.

Part of the outrage is how blatantly unequal the treatment of cops and and civilians accused of crimes are. It’s especially galling because not only are they given the power of the state, they are also given extra rigorous training in the safe application of force. If anyone should have reasonably known that kneeling on someone’s neck would be lethal, it would be the cops.

Oh, and all the bystanders who clearly recognized what was going on. Apparently they’re more wise to the dangers of kneeling on a restrained human’s neck than the police are.
Anecdotal disagree here. I have a system that would probably be deemed complicated by anyone that would look at it (even more so than the OP article).

While I wouldn't consider myself the most successful person, I've got a lot done, and I attribute a lot of it to my system, notes, and organization. The system wasn't immediately complicated either, it has been developed and refined over 10 years to suit my needs. And for me in particular, it alleviates a lot of mental overhead and allows me to just focus on whatever it is I'm working on.

But that's just me, I think you do have a point to some extent. It depends on the person, YMMV.

Here's an article that goes into more about these concepts, the author calls it a "Second Brain":
https://fortelabs.co/blog/basboverview/
Now we see the violence inherent in the system!
Here's what works for small and medium organizations for data which needs to be encrypted at rest, but is not often accessed (so, backups):

1. Buy a bunch of Yubikeys, minimum of 2.

2. Create GPG keys and store them on YubiKeys. Follow this guide: https://github.com/drduh/YubiKey-Guide (if you want to, keep the secret keys, but in case of multiple YubiKeys I would not keep them anywhere). Remember to set the keys to always require touch.

3. Use GPG to encrypt your backups to multiple recipients (all of the YubiKeys).

4. Take care of the physical keys with proper storage and procedures. Do not store the keys together, have at least one in a really secure location, check if you have all the keys regularly, etc.

5. Test restores at least once per quarter, with a randomly selected key.

The advantages of this solution is that it is simple, works pretty well, and gets you a lot of mileage with relatively little inconvenience. You don't have the risk of keys being copied, and guarding physical keys is easier than digital ones.

You still have the problem of guarding the passphrases to the Yubikeys (if you use them), but that is much less of a problem than guarding the encryption keys. A passphrase without the physical key is useless.

This setup works for organization from size 1 up to fairly large ones.

Note that some recently fashionable security consultants crap on GPG from great height, but do not provide an alternative. It's a tool that while having multiple flaws, does many jobs better than anything else out there.
During the first test, the brakes didn't work and it knocked down a brick wall. It was in Paris close suburbs, not in Paris intra-muros.
I am not aware that he was thrown in jail for that, it seems unlikely.
Having other sources of revenue outside of a benefactor whose interesting in you relies on having a relevance in the browser market with them also actively engaged in implicitly or explicitly undermining that with a product of their own doesn't seem like too bad of an idea.
CalDigit TS3+ is the one that solved my issue.
No, we're not getting it back.

I filed a bug, thinking this was an inadvertant side-effect of the new address bar, but it was closed WONTFIX. The old user setting was never really supposed to be used on Windows, just as a workaround for something I don't remember, and the use case is invalid.

I still wish I'd get that distinction between single click and double click back.
Looks cool!

I was playing around with weird/edge case inputs and came across this one that gives a strange result: `(200000 * 23323 * 2423 * 4223 + 30%)` => `62048638409419990,62048638409420000,62048638409419990,62048638409420000` I don't know if this is some sort of thousands-separator or a list of numbers, but I'd be interested to learn how the parser sees this.
For reference, both `(200000 * 23323 * 2423 * 4223) + 30%` and `(200000 * 23323 * 2423 * (4223 + 30%))` give sensible results (once you get how the percent operator works).
My Grandmother had a police scanner that she used to listen to drama going on in her small town in Virginia. Old ladies with police scanners is still quite common. It sparked an interest and my parents got me one as a Christmas present. I spent many years in the IBM ecosystem as an technical SE, but developed an online database (RadioReference.com) in the late 90's that consolidated frequency information for all the municipalities around the world. When online streaming came to the Internet, I purchased a small business that was putting scanners online and launched it as Broadcastify.

The business is wildly successful. Revenue is a split between paying subscribers, license and royalty revenue, and advertising.

About 90% of the feeds are provided by volunteers who simply connect a radio to their computer and broadcast to us. The other 10% are actually provided by the agencies themselves. We probably turn over 20 feeds a day, so coverage comes and goes all the time. There is a lot of work going on in the ML / AI space around the content, but it is a hard problem to solve because the quality of the content diverges wildly. Vernacular differs. Coverage comes and goes. Organizations like Citizen, which have HUGE funding (60 MM lol!), are trying to solve this, but they still end up just employing armies of workers to sift through the data and audio and normalize it all.

We're doing a lot of innovation in the space on our end, including using SDRs to vacuum up wide swaths of RF and then store call data, which is going to be the next "revolution" in our space. Interesting times...
The scientific consensus tends to suggest a serum level of Vit D ~ 30 ng/mL as optimal. Bone abnormalities are expected with levels < 12 ng/mL. However, studies looking at serum levels in otherwise healthy individuals show most people at <20 ng/mL. My take on the reports is that you want supplementation if it's below 10 ng/mL, with diminishing returns past that. The supplementation required to achieve 30 ng, or even 20 ng/mL for most people probably isn't worth it, and with unintended health consequences. Brown and black people likely have significantly lower "healthy" levels that don't warrant supplementation.
IMHO, Exim's configuration is horrendously complicated. That's not to say that Postfix is a piece of cake; however, Postfix has fewer bells and whistles. For example, I struggle to comprehend the "router" system: https://www.exim.org/exim-html-current/doc/html/spec_html/ch...