skysight-inc/HackerNews huggingface dataset:
Tech Lead – Chef Technique
We are looking for Tech leads (CS-04) to join our new digital labs at Immigration Refugees Citizenship Canada (IRCC). We are growing our team as we take on the future of immigration in Canada, designing products, tools, and services to help visitors, newcomers, and citizens.

If you are:

A leader – guiding talented employees towards innovative solutions
Hands-on – not afraid to ‘roll-up the sleeves’
Motivated to take on new complex challenges
Adaptable – High tolerance for ambiguity
A Bachelor or a Master in Computer Science (or any related studies)
This may be the job for you!

Why work with us?

Agile practices
Contribute to immigration system so IRCC can live up to Canada’s world-renowned reputation.
Flexible work arrangements
Great benefits

Work location during pandemic: The comfort of your home using IRCC network and equipment

Work location when we will be able to reintegrate the workplace: 300 Slater Street, Ottawa ON

Interested? Don’t miss this opportunity. Send your resume to IRCC.JLHiring-EmbaucheLP.IRCC@cic.gc.ca before October 31, 2020. Why wait for tomorrow when you can apply today!
Last time I looked at it (few months ago) the K210 had absolutely awful documentation (datasheet was basically just a pinout) in English and Chinese.

Not awful but for a high margin product I'd just use a US arm chip (e.g. LPCxx).
> Apart from extensions requiring whitelisting, how is it worse than the old mobile FF?

This is the most important point by far. First-class add-on support was the one differentiating feature that Firefox for Android had over every other browser on the platform. There are a handful of other browsers with add-ons on Android, like Kiwi, but they aren't nearly as seamless as Firefox was.

I'm using Fennec to write this comment because of Refined HN, I just turned off auto-updates. Not going to switch (at least for now) and I love Firefox but who knows where we'll be in a year? If we're in the same spot then I'll have to switch to Kiwi for these use cases.

I have Nightly installed and it's faster - whitelisted uBlock Origin alone solves a lot of problems in addition to GeckoView's massive speed improvements - but it doesn't fit every use case, so I have to keep Fennec installed.

The devs seem obstinate about ever allowing non-whitelisted add-ons outside of Nightly, which is... odd, it's the one feature they have over the competition. They seem similarly obstinate regarding about:config on stable.

There are other grievances (I actually disagree with the detractors on the default position of the address bar - it's far easier to use on tall devices) but this is the one thing that can't be found elsewhere, and it's gone now.

To reiterate, this feedback comes from a position of love, not hate, and I think most other people here feel the same. The devs are getting a lot of heat on places like reddit though, and the Play Store reviews for another. My limited understanding is that Fennec had to go eventually.
This doesn't absolve the owners from running a hospital that doesn't meet fire code, however.
Modern React uses JSX which is then transformed at build time into function calls.

You can write those function calls yourself, but it would be a tremendous PITA.
Scrum Master Internal – Chef de Mêlée Interne
Hey #Techsavvy,

Are you already working for the Federal Public Service and looking for new opportunities? We have the challenge for you at Immigration Refugees Citizenship Canada (IRCC) and are looking for Scrum Masters to join our new digital labs. The Scrum Master is there to coach the team and the Journey Owner in effective Agile practices, lead and/or facilitate Scrum and/or other processes that the team has agreed upon.

If you are:

Motivated to solve complex problem
A born leader to guide and foster self-organization and growth within the team
Strongly experienced with using scrum & other Agile practices and methodologies
Adaptable – High tolerance for ambiguity
A Bachelor degree
This may be the job for you!

Why work with us?

Agile practices
Contribute to immigration system so IRCC can live up to Canada’s world-renowned reputation.
Flexible work arrangements
Great benefits

Work location during pandemic: The comfort of your home using IRCC network and equipment

Work location when we will be able to reintegrate the workplace: 300 Slater Street, Ottawa ON

Interested? Don’t miss this opportunity. Send your resume to IRCC.JLHiring-EmbaucheLP.IRCC@cic.gc.ca before October 31, 2020. Why wait for tomorrow when you can apply today!

If you have any questions or would like to have the full description of the job requirements, contact us.
Sure, how do you define does very well in China?
FYI the EEPROM page in the Raspberry Pi docs still says:

> USB boot support is currently being beta-tested. See
> the "USB mass storage boot" section of the Bootloader
> Configuration Page for further details.

But in general, it seems like it works without having to change your 'FIRMWARE_RELEASE_STATUS' setting from 'critical' to 'stable' anymore.
You don't think this implies deeply rooted, systemic discrimination against opposite-sex marriage?

Edit: Corrected same-sex to opposite-sex, which is what I meant to write.
Interesting music with a few novel techniques (a rarity in modern music), but it hardly has any physiological effects.
It's a big pain, but surely they'll find another way to keep in touch, though?

What do western people do in China to keep in touch with their families back home, when all the western social media apps are banned?

It's hard for me to believe that a state-backed communications app is the only option available to Chinese expats.
What way do you think is the right way to do it?
Inequality? What exactly do you mean?
I be curious if more same sex couples are childless and there for make more money.
It's nice but I'm honestly baffled that it's seen as such a big deal as it's pretty trivial to make grub boot off USB, leaving the SDcard only being used doing the initial boot.
Is it just about the convenience?
Given the proliferation of IT in everyday life, we need to change the language and remove "cyber" from cybersecurity and cyberattack. So subconsciously accepts that this is what a modern meaning is.
Yeah, as someone who wrote a good chunk of a CSS layout engine (Servo) I can confidently say that this comment demonstrates a huge lack of appreciation of what the scale of work involved is.
Thanks for that link!

We might be arguing past each other. He says this:

> Unfortunately a narrative kind of built up around all this stuff that Gecko developers were a bunch of bumbling idiots who were just maintaining a bunch of outdated bloatware, while the Servo project was where all the action was.

This is precisely my complaint. Firefox really did need some sort of strong direction to save it, and Servo was all they came up with. I don't think it was just a few self-important Servo devs, I think (at least part of) management was in on it too. In fact, the blog post above was signed by Brendan Eich, which I find really disappointing (I thought he, at least, was smarter than that...).

Anyway, once Servo sucked all the other oxygen out of the room, Firefox was really doomed. Now Servo is dead and we have... a few incremental improvements to Gecko to show for it. I definitely feel bad for the guys working on Gecko the whole time. That said, they could've came up with some "response" to Servo, but they didn't.
> By default, authentication key has only 16 bits of entropy. (I wish I was making this up…)

It's a PAKE being used for Socialist Millionaire-style interactive authentication. So that key needs to be successfully guessed by the attacker. If they guess wrong they don't get any further attempts, game over, all three participants (the sender, receiver and this attacker) learn it didn't work. That's just not an attractive attack.

I've written on HN before that I think this is too few bits on balance, but that's because of social effects (a million people use it, one person gets very unlucky, that impacts take up for the same reason people don't review products that were fine, they're either 5/5 best in class or 0/5 this product killed my cat)

Setting code length 16 means you want a 128-bit PAKE. You've noticed that 128-bit secrets aren't very convenient for humans. But you don't seem to have thought any further than that, just convinced it should be "fixable" without introspecting about the core problem.
Recently caught a similar one from Alec (Mr. Connectify) of https://www.youtube.com/c/TechnologyConnections who described a mechanical component as "circular, like most arguments on the internet".
Agreed, it's happenstance that it's an issue they could piggyback on looking for "tough on China" propaganda all for appearance purposes.
why would anyone who was alive in 2003 even pretend to believe that a "UN Inspectors" offer from the US is made in good faith?
I really hope *all" natural gas plants emit less CO2 than coal. Joule for Joule, burning C produces more CO2 than burning CH4.
I encourage you to try Linux straight up -- Proton works wonders. It's not a perfect solution but I can play every game I care about, and don't have to worry about WSL's impotence.
I was talking about on the remote itself. In the Twitter thread, it was clearly discovered that the UI on the remote is written in Flash.
This is such a misleading title. 2 and 3 have had this for a while, one can do this with 4.

I'm currently using a recent MicroSD card on my Pi 4 though, haven't had any real issues with it.
Remember when they sued Samsung over rounded squares? Or the swipe-to-unlock patent?
IIRC, enabling usb mass storage boot involves setting some OTP bits, which permanently disables usb host boot. But AFAIK, the 3B doesn't support usb host boot anyways. Is there any feature you could lose by enabling mass storage boot in this case?
CRA cyberattacks impacted four times as many accounts as previously believed
Just imagine what a state-level actor is cable of doing to a countries health care / power / transportation infrastructures when damage is the goal instead of money.
I don't see how higher income is an outcome of discrimination?
Quantum was a marketing name for various improvements that landed before support for old extensions was removed.
App Consoles
Yes, it's the beauty of RISC-V: eventually, it's going to cover all the niches. From RFID energy-gathering chips up to desktop / datacenter CPUs.

Right now, its use is still very fragmentary, but Kendryte K210 chip shows that Chinese chip designers already got some real experience with RISC-V, and it's safe to bet it will be more chips with RISC-V coming from China every year.
Honest question, why couldn't you do this before, having the boot loader on an SDcard and everything else hanging off USB?
"Finally available for the RPI4 in the default bootloader" is probably more accurate.
(not the parent)

2) I'll concede the technical reasons. But it's been something like four years now, and you still haven't caught up with what the previous extensions could do. There's still no way to remap keys without waiting for the current tab to load, for example. This is a very important UX feature!

4) The problem is, when you force users to go through the Mozilla gatekeeper, it's all the more important to get this right and not have that gatekeeper sleeping on the job.

Second, the failure behavior was not fail-safe. Users had their previously-signed addons disabled when this struck. Many of these were necessary to protect their privacy, which was then compromised.

(Proper fail-safe behavior would have been to allow already-signed addons to keep working or put up a warning, so don't tell me it would have needed a huge investment of resources to avoid that catastrophe.)

How many other browsers have had a sudden global feature outage like that?

And, to make it worse, your leadership thought it was somehow reassuring to say, "Oh, don't worry, we broke the promises of the user experiments feature to push out a forced update that fixed this!"

>A decision to not sign addons would have consequences as well -- which we knew intimately, because they were very, very real and growing rapidly.

Mozillians keep insisting this but I have yet to see evidence. Has there been even one case of a user a) who is technically adept enough to enable unsigned add-ons, and b) sideloaded an extension, and c) suffered a security catastrophe that merited Mozilla intervention? Most of the naive users you're claiming to protect can't even get past a).

Chrome allows unsigned addons just by toggling developer mode. Where are their massive security breaches from that?

The original promise of Firefox was to give me back control of my machine. Having to go through Mozilla for my custom extension just feels like the days of getting software from shrinkwrap at Best Buy again.

My parody: https://www.youtube.com/watch?v=taGARf8K5J8
When I was in Europe in 2018/2019 (where they still had decent 3G network coverage unlike my provider here in the USA) I used my Nokia N900 as my daily driver, not as a smartphone but primarily a feature phone with a full keyboard and a Linux terminal for bash scripting on the go. In fact, I used a bash script to track my cash expenses rather than a dedicated app.
You could argue this doesn't really count as preventing though. It's preventing a symptom instead of the underlying problem.
Then do we have IT code? Pun not intended.
Often it is a robot that says that, do the robots hang up or do you wait for a human?
> Nvidia has done very well financially out of preventing use of consumer graphics cards being used in datacenters through licensing restrictions. An open source driver eats into that.

Yep, that's my guess exactly why they are such jerks and hinder Nouveau reclocking.

> And remember, Google/Amazon don't even need a complete working opensource driver

Google or Amazon don't need Nvidia. Google already went with AMD for Stadia, and they actually mentioned open driver as one of the major reasons.
It hypothesized that cellular life evolved in deep, dark, warm places in the ocean. Geoboiologist Robert Hazen experimentally found that most stages of basic metabolic citric cycle and RNA reactions do not require enzyme catalysts to proceed there. Then as life expanded to cold, low pressure bright sunlight areas they developed enzymes to assist metabolism and protein synthesis there.

Most viruses dont contain the mechanisms to resist damaging solar radiation
Instead of downvoting me, maybe you could explain what I'm missing?
52 Years Ago, Thelonious Monk Played a High School. Now Everyone Can Hear It
K210 has a decent AI accelerator (0.8 TFlops by their specs) that can run TFLite models at 300 mW). LCPxx are not even remotely capable of that.
I've tried tiling and it just doesn't feel right to me --- not being able to resize windows to the right dimensions is frustrating. I guess that's one thing I agreed with Microsoft about; the earliest versions of Windows had a tiling WM.

Also, by comparison I meant reading comparison, not visual comparison. But even the latter is easier with separate windows: resize them to the same dimensions, then put them on top of each other and increase the transparency of the top one.
Well, it seems ridiculous to say that, because there have been 3g microcells (openbsc, for example) forever. It seems bizarre that we couldn't have a switch in every truck that turns it into a mobile microcell for <$100. The backhaul is the problem, because normal microcells are connected to the internet via hardline IP communication . . . . which could be done with modern satellite. The problem is that if you are selling anything to any kind of government agency, you absolutely want them _not_ to be able to use any commodity component like a "cell phone"
got weird ads on the site.
A donation from or friendship with the Koch brothers or George Soros is not a good reason to stick your head in the sand when you notice a dissenting voice.
>I've never seen purposefully redacted content like this, targeting multiple platforms.

When your user base consist of different personas, doing distinctly different job to be done, one option is to tailor the application for each scenario.

Depending on the consequence of the app and the business need, ideal UX needs for each persona may no longer seem superficial to ignore. A normalized experience may be a show stopper. In that case it's worth it to invest in building/maintaining different view / functionalities, specific for the user agent type. If you go even further in this direction, then you invest in building a mobile app, to suite the use case of mobile and desktop.
No. It is not responsible.
That's why I never placed blame on IT. This is a management problem, not an IT problem, front line staff do as they've told.

It is management's responsibility to assess the risks and to decide where money should be spent (in this case on patient critical infrastructure).

To use another poster's example: It is like them failing to upkeep their sprinkler system and part of the hospital burning down.
> I don't dislike history, but the way it is taught, as a list of important people doing important things on important dates.

You might find interest in recent Howard Zinn thread https://news.ycombinator.com/item?id=24510079
Wouldn't be a problem if homebrew gamer PCs were FCC compliant and didn't have gaping RF holes in them.
Nihilistic Password Security Questions (2017)
tbh i use it when i don't really care and whatever rando app required a login for some reason. For that purpose it's fantastic and no different then google/fb/ect except more private. for anything i care about i use a real email/password
He would call the new single party in control libertarian socialists. Currently the Democratic party is closest to that dream vision. Clearly the shortest path to a country ruled by libertarian socialists is to empower the current democratic party then transform them from the inside.
That's pretty stupid. Correct me if I'm wrong, but the device presumably has no idea what the impedance of the sink is, or what the sink even is. AUX port on your car that requires max volume out of your iPhone to have reasonable dynamic range? Doesn't matter. Audiophile high-impedance headphones that need a bit more oomph to be usable? Doesn't matter.

The angle on this tweet annoys me quite a bit, though.

> Here‘s my reason to jailbreak as soon as one is out. Do I own my iPhone or does it own me? #patronage

Really? We're going to assign blame to the closed ecosystem here? Really? I love FOSS as much as anyone but the screenshot attached to the tweet shows clearly where the blame should go:

> In certain regions, these notifications cannot be turned off due to regulations and safety standards.

The problem is Big Brother government, the bureaucrats who think that they need to impose on your life to improve your life, and the people who vote them into office and keep them there. Apple is just doing what they're legally required to do.
I think there's a legal difference between declaring an entire country and its citizens subject to these sorts of restrictions (which is allowed), vs. singling out specific companies.

But unfortunately the executive has been granted a lot of ambiguous and murky power under the guise of "national security" and things like that, so I wouldn't be surprised if these actions are indeed legal, but the root of the legality is something other than ITAR or OFAC.
Considering that China already did ban Facebook along with quite a few other US-originated apps, I'm not sure what your point is here.
So...if I naively parameterize the inputs for my queries (select blah, blah, blah FROM customers WHERE id LIKE @id) and have the incoming request just check for an id parameter and make a SQL parameter named @id, with value = whatever the input is, am I 90% there?

Or are there still vulns/exploits for that kind of usage?
No, not an investor. Without giving a way too much, we are a company in the technology space. They paid us a fee per user. They paid us fees based on these fake numbers of users that they submitted to their investors. Which means they essentially over paid us what is a lot of money for our small company. We made business decisions around that money in the past and for the future. Now it looks like that not only will we get no more money, but they also want like 90% of what they paid us back.
Why are people making such a huge deal about who they were targeting and who not? Ransomware is digital extortion. There’s zero honor to it in any case.
Well, obviously yes if you're a cynic and think our goal is to destroy the planet, then that. But that seems... extreme.

Conversely, if you're optimistic, then you might imagine that all the people trying to save the planet are using the coordination and information that cellphones enable to gain more influence and achieve that.

Five hundred years ago, I'm sure people made the same arguments about books -- that they kept our concentration from the immediate present, and could be used to achieve bad things. I'm pretty sure books turned out to be a net positive. I feel the same way about cell phones.
Holding a university ransom is not much better..
Tau Prolog 0.3.0
What? The U.S. failed to create competing social apps?

You realize the only reason WeChat exists is because China didn't let western companies compete, right?
Apple Watch with LTE mostly fulfills this. And the screen is so small that it’s not worth it to port more addictive apps.
You can. See the other comments.
I put my phone in "do not disturb" mode for the entire day. Removing notifications altogether was a great improvement, without getting rid of the phone altogether. You go from responding to picking it up when you decide to.
As an owner of both, it's hard to see them as the future because they are not accessible or democratized unlike the Quest product line.

Let's start with cost. Both headsets alone run around $1000 - $1200. If you build your VR ready PC, it's about $1500. If you pay Dell or HP, then it costs about $2000. We're already at $2500 minimum and we haven't even added the costs for Vive's wireless option which runs at an extra $350, so with wireless the cost is $2850 minimum; for the non-technical it could skyrocket to $3250 vs the Quest's $299.

Now let's talk about the "initial hill to climb" that most techies forget about. If you must deal with wires, then you have to do ceiling based wire control, where you mangle your room with ceiling hooks. For base stations, unless you have the perfect room with perfect furniture and you don't mind drilling into walls, it's a pain to set it up just right. It took me a lot of trial and error before I got it working flawlessly all the time. Let's also not forget that you need to install a wireless card for Vive's wireless accessory. Not everyone has both the skill and patience to deal with these time consuming annoying things.

Sure, there's no option for full body tracking, visual fidelity isn't as good, and nothing beats external tracking performance; but with Quest, it's $299. You put it on your head and you can play. I can buy a Quest for my mom.

Don't get me wrong, I really love both the Index and Vive Pro, but I am not forgetting about the work and costs associated with either platform

EDIT: I forgot the ritual I have to go through to get Vive and Index to work

1. Turn on computer

2. Put wires on ceiling

3. Turn on each base station

4. Turn on VR HMD

5. Turn on controllers.

vs

1. Turn on Oculus

2. Turn on controllers

It's bad enough where my SO "doesn't want to hassle" me just to play VR.

https://youtu.be/sXmY26pOE-Y?t=3830
Source on the (by replacing Mali) part? Why wouldn't the two coexist? Mali and GeForce are very different products targeting different markets, and Mali, love it or hate it, is the world's most ubiquitous GPU..
From a user security standpoint, absolutely. But given that Europe relies on the US for military protection and trade, it’s unlikely to happen.