skysight-inc/HackerNews huggingface dataset:
It's riskier for a westerner to visit NYC than Iran. More western tourists die in Disneyland than in Iran. I can also pick outlier events, to make as weak a case as you just did, about any country.

There have been millions (yes, millions) of tourists come and go through Iran during the last few years. In reality, travel has some risk, everywhere, but it's laughable to call Iran a "very real risk".

Again, this all says much more about you, than Iran.
By 'wanting to prove something', he caused the vendor to act urgently, instead of sweeping this as a maybe-exploitable-maybe-not bug that would get lazily patched whenever.

By 'wanting to prove something', he showed the shortcomings of multiple security mitigations, all defeated by simple bugs.

By 'wanting to prove something', he also discovered two other exploitable 0days, that wouldn't have been discovered otherwise. Those 0days were likely already in the hands of bad actors, too.

Finally, the reason he even discovered the original bug is because Apple accidentally once or twice forgot to strip function names from a binary. If this didn't happen, that bug very likely would still be out there in the wild.

I'm not sure you understand how security research works.
is there a way to buy Ethereum 2.0 and how would holders of old Ethereum convert to v2.0
Most of Rust's difficulty comes from the borrow-checker. And if you're mostly doing linear work, if you're doing a lot of math, if you have a lot of pretty flat data structures, if you mostly keep things on the stack, then you may not run up against the borrow-checker that often. I would assume (I don't know for sure) that scientific computing tends to do more of this kind of stuff, and not as much heap-juggling/heterogeneous data modeling as, say, a web server.
Why is CockroachDB compatible with PostgreSQL
> It's Apple drumming up absolutely nothing, and from my point of view it's mostly a PR stunt.

Well, I don't think it's quite "nothing". Newer phones don't have access to checkm8, and getting a private jailbreak or exploit working can be non-trivial. And in some cases, researchers may need to avoid reporting that exploit to Apple in order to keep using it.

It's a good step. It's just not sufficient, especially given all the other restrictions.
Yes the redundant orgs will probably be mainly laid off eventually. You don’t need 2 HR’s, G/A, etc. Sales will probably be reduced quite a bit and the engineering team will stick around.
Email sent. Knives have been a hobby for a long time. Got to spend some time, when I've visited the US, in workshops of Chad Nichols damascus, Vegas forge, Tom Krein and Brian Fellhoelter. Great fun.
I spoke with her recently, and she seems like she's at the breaking point because the company is requiring her to work 7 days a week. About a month ago, they instituted a new policy:

You can't say no to overtime if you're asked, or you'll incur a write-up. Three write-ups and you're terminated.

And because of Texas labor laws, an hours over 60 are not paid at double time as they are in many other states. Meaning by the time Saturday rolls around, were she in California, she'd at least be making double time at some point. Instead, they only get double time on a Sunday.

She told me last week, she had 82 hours. For a job that pays $16 an hour. Yes, she's probably clearing $4000 a month, but she's putting in CEO-level hours to do so. The saddest part about all this is that many people are jumping for the chance at these positions because of the insane amount of overtime this company is offering.

The United States should be better than this.
> I do, however, roll my eyes at how out of touch the anti-child rhetoric on the internet has become.

I guess it depends where you look, but here on HN comments seem to lean towards being pro-children - which makes sense, since most people want them and have them.

The most interesting kind of comments, to me, are the ones that try to convey how having kids is great and worth it, and yet - upon reading them - all I can think of is "wow, that sounds horrible". There is one example that is kind of like that in this thread [0].

I know it's because it's much easier to convey in words how annoying or boring something is compared to how it brings this deep, unspeakable (and perhaps, for some readers, yet unexperienced) joy. It's still a bit funny.

[0] - https://news.ycombinator.com/item?id=25271156
At its core, that's a fully accurate description albeit a misleading one (along the lines of claiming that central AC is just window AC but without something sticking out of your window).

As it turns out, UX matters and Slack delivers far better UX than IRC since one single entity can control the entirety of the communication pipeline (from protocol to how messages are displayed).
How to write a business plan in 2021 – Ultimate guide
How to write a business plan for an investor, a bank, or a business partner with step-by-step parts through the traditional and lean startup plan business plan.
Location: Europe/Copenhagen
Remote: Yes
Willing to relocate: No
Experience: Senior 30+ years
Technologies:
* PHP, Go, Python, C, JavaScript, HTML, CSS, XML, JSON,
SQL, Shell scripting.
* Debian, Arch, Void, Alpine, OpenBSD, FreeBSD.
* Apache, NGINX, MySQL/MariaDB, Galera, Sphinx,
PostgreSQL, MongoDB, Redis, SQLite, OpenSSH, Git,
Mercurial, DHCP, DNSMasq, Bind, Unbound, NTP, PF,
iptables, ZFS, Btrfs, GlusterFS, NFS, Samba,
OpenSMTPD, Postfix, SpamAssassin, Dovecot, GnuPG,
rsync, ProFTPD, PureFTPd.
Websites:
* https://unixsheikh.com
* https://openbsdrouterguide.net
* https://phpthewrongway.com
Resume/CV: Request via email
Email: [job] at [unixsheikh dot com]
Thanks for digging up the concrete data backing up my claim. I was certain that I correctly remembered every observer that counted being blindsided by SpaceX’s success, in spite of their announcing their progress and stating their intentions time and time again.

One really has to be meticulous to stay honest when looking at things in reterospect. And, by extension, when looking at lofty-sounding predictions about the future.
> Investors seem to not like that idea

Because too many businesses fail for the model to work without multi-billion-dollar home runs, I think?

> but customers would love that idea

Sounds like an opportunity. :) There are many domains where small-ish scale SaaS is extremely profitable. The typical HN reader is usually not the target market, so we don't hear about them.

The real problem is when VCs think there's a billion-dollar business in your market, but there's not. And you have to spend millions in VC money just to compete with "we'll-make-it-up-on-volume" free services, and poof goes your nice margin. There were app-based delivery services long before DoorDash, GrubHub, etc. -- where are they now?
Ring Fit Adventure
> If your package does not build on the latest version of R, it becomes unavailable.

Wow. This would definitely make packaging much much easier, and it’s so cool R is able to do this.

I can’t imagine how angry people would get if Python ever goes there though. Each community has different tendencies, and one of Python’s I’ve observed is people really get pissed when you force them to upgrade anything.
It's considerably more difficult than Python, people just get misled by the similar syntax. The advanced features that you're mentioning aren't optional in Julia, especially if you care about performance.
From your phraseology, I take it you were in the US military. I'm in a different military with a very different culture. We have Americans working with/for us. They are very happy. They never want to go home, always trying to extent their time. Right now, at the height of covid worries, there is no job I would rather have atm.
Just want to point out that later in the paragraph they said AsmJIT now roughly matches the performance of HiPE for Dialyzer.
> And the hardware is, well, not the best out there

After the new MBP this sentence seems dated.
Yes it's nice. But not sure it's $25B nice...
Chat is mostly ephemeral, so there isn't much lost in switching providers even at large corporations. If a better chat app takes off in the next year there isn't much stickiness in the current app, especially when individual teams start using the new product. This is how I've seen both AWS and Slack become standards and large corps–the innovating teams start using it regardless of the corp standard.
Feedback Loop | REMOTE USA | Full-stack Engineer, Senior Full-stack Engineer, QA Engineer | FULL-TIME | $120 - $180k | https://feedbackloop.com

Feedback Loop (feedbackloop.com) is a growth-stage company whose agile research platform provides rapid consumer feedback to inform and accelerate innovation initiatives. At Feedback Loop, we change the way companies develop products for their customers by providing a platform that lets researchers and non-researchers alike learn faster and innovate smarter. We work with some of the largest B2C companies across industries including finance, insurance, healthcare, and media.

We’re looking for engineers who are curious about product development and consumer behavior, want to work on related challenges, and value opportunities to explore new technologies that execute against a robust, collaborative product vision. We use Typescript/NodeJS, Ruby, VueJS, Postgres, Mongo, Redis, Kafka, GraphQL and many other technologies, but we don't think it matters if you've used similar technologies on a different stack. Our engineering teams tackle a diverse and evolving array of challenges; from architecting and scaling our microservices to handling real-time data streams with Kafka and using machine learning and natural language processing to empower real world business solutions. This position is full-time and remote (within the US), though remote engineers may be asked to visit our NYC headquarters occasionally when it is safe to do so.

Senior Full Stack Engineer: https://grnh.se/643cb2fe2

Full-Stack Engineer: https://grnh.se/e94adfdd2

QA Engineer: https://grnh.se/2a52a5172us
same ends as usual? I don't think this is a secret or anything:

- supporting allies of the USA

- support Israel (not just an ally!)

- putting a damper on powerful non-ally hegemony (Russia / Iran)

- ensuring stability of resource extraction in the region
I'd expect that I would send a Dockerfile once and have that compiled into a lambda for me which would then run in perpetuity unless I sent over a fresh Dockerfile to over-write that deployment, so non-reproducible Dockerfiles wouldn't bother me.

I'm OK with developers needing to understand that a Dockerfile may build differently each time if they don't take extra steps to prevent that (like pinning installed versions etc).
Location: Boston, MA

Remote: Yes (Preferred)

Willing to relocate: No

Technologies: Front-End focused - svelte, tailwinds, js, node, responsive design (including email), sass, React, ReasonML

Résumé/CV: https://demo-hspindesign.com/r/about/

Email: gs@hspindesign.com

Over 15 yrs exp., an eye for design (figma), command line enthusiast, crypto know-how (web3, some solidity). Ready to build.
Oracle XE is free for production use, but it only makes sense if

a) you are already familiar with Oracle, and

b) you have a very small data set:

“Oracle Database 18c XE supports up to:

3 Pluggable Databases

2 CPUs for foreground processes

2GB of RAM (SGA and PGA combined)

12GB of user data on disk (irrespective of compression factor)”
Bingo. There's zero excuse for writing global system data for user-specific needs.
But you don't care about performance with Julia. You just write your thing. Then you complain to the community that it's slow, and they optimize it for you! Only half kidding.
Yeah, you are right there is a mistake. I made a typo in Avogadro's number. Sorry about that!

The power density is correct, but the number of reactions is too low by a factor of 10^10...
Hmm, where would you get that idea from?

https://louwrentius.com/cryptocurrencies-are-detrimental-to-...
New for AWS Lambda – 1ms Billing Granularity Adds Cost Savings
Location: Istanbul (US Citizen)
Remote: Yes, remote only from UTC+03:00. (I pay taxes in the US, so there are no tax / immigration concerns as long as you do not have an office in Türkiye outside of the tekno parks).

Willing to relocate: Barcelona or Copenhagen

Technologies: "DevOps", Terraform, AWS, Puppet, Chef, CI/CD

Résumé/CV: https://www.linkedin.com/in/nomadicengineer/

Email: cruftyold@gmail.com

Greetings! I've been working as a systems administrator / entrepreneur / devops engineer for about 25 years now. I'm a US citizen living in Istanbul and working remotely for star-tups and mid-sized companies in the USA. As long as you do not have an office in Türkiye then there are no tax or immigration concerns. I'm a US resident and taxed as such.

Over the past 25 years my career has run the gamut from tech support at EDS to co-founding a successful managed operations / devops company called BitPusher, and everything in-between. I've worked with several YC start-ups, started two other companies (A failed music start-up in '98 and a small exit from a api-driven anycasted authoritative dns service called DNSWorks).

I'm seeking DevOps work focusing as much as possible on Infrastructure As Code with Terraform, CI/CD and configuration management in the cloud (AWS primarily). I also really enjoy building and managed internationally distributed / offshored teams.

I'm somewhat of a digital nomad, and am only seeking remote work, primarily from Istanbul. I'm willing to travel up to 10-15%, but preferably in Europe / Near-East / Asia. I could be convinced to relocate to Barcelona or Copenhagen and possibly Amsterdam.

My dream position would be working for a consumer-product, gaming or music company focusing on large-scale cloud management with Terraform and AWS.
This is so awesome. Wish I found it earlier. Thanks for posting
Writing the majority of a kernel in those languages is certainly possible.
That was fun. Good luck to you.
> You're mixing arguments here. It's not the occasional 5-second long request, it's "the app doesn't start serving requests for 5 seconds".

Lambdas cold-start during requests. So the unlucky request that triggers a cold start eats that cold start.

> Using data science tooling in a lambda seems iffy, especially ones that are not production ready.

Nonsense, there are a lot of lambdas that just load, transform, and shovel data between services using pandas or whathaveyou. Anyway, don't get hung up on data science; it was just an example, but there are packages across the ecosystem that behave poorly at startup (usually it's not any individual package taking 1-2s but rather a whole bunch of them scattered across your dependency tree that take 100+ms).

> And good luck getting such libraries in go.

Go doesn't have all of the specialty libraries that Python has, but it has enough for the use case I described above.

> Python cold booting an interpreter 3 seconds faster than Go is a big deal, especially if your target execution time is <50ms and you've got a large volume of invocations

According to https://mikhail.io/serverless/coldstarts/aws/languages/, Go takes ~450ms on average to cold start which is still up a bit from Python's ~250ms. To your point, if you're just slinging boto calls (and a lot of lambdas do just this!) and you care a lot about latency, then Python is the right tool for the job.

> not being silly and importing ridiculously heavy dependencies into a lambda for no reason other than to make a strange point about Python being unsuitable for something nobody should be doing.

Not every lambda is just slinging API requests--some of them actually have to do things with data. Maybe someone is transforming a bit of audio as part of a pipeline or doing some analysis on a CSV or something else. Latency probably matters to them, but they still have to import things to get their work done. And according to https://mikhail.io/serverless/coldstarts/aws/#does-package-s... (at least for JavaScript) just 35mb of dependencies (which will buy you half of a numpy iirc) causes cold start performance to go from ~250ms to 4000ms.

My rule of thumb (based on some profiling) is that for every 30mb of Python dependency, the equivalent Go binary grows by 1mb, moreover, it all gets loaded at once (as opposed to resolving each unique import to a location on disk, then parsing, compiling, and finally loading it). Lastly, Go programs are more likely to be "lazy"--that is, they only run the things they need in the main() part of the program whereas Python packages are much more likely to do file or network I/O to initialize clients that may or may not be used by the program.
I want bug bounties to rise to their market value. I'm willing to accelerate that outcome by pointing out the current market inefficiencies.
Scientist are not turning to rust. Scientist, if they are turning, are turning to the scientific standard compute language and its plethora of platforms and libraries: Python.

Rust is fine, but it will never catch up or replace Python. Python is just good enough at what it does and will only become better.
Device details? As in, operating system and version, cpu, etc. That seems super reasonable for support purposes...
Market is also betting on Elon to make it all happen. Only time will tell if all these speculations are sustainable over a long term - beyond Elon.
The issue in my eyes is that things like Mastodon are pretty well designed for what it is. A main feature of ours is the personalization and separation which we could have hacked into such a protocol but ends up being a worse experience for the majority of the users. Personally I wouldn't want to use a fragmented network to connect with people I know in person (Friends, family, co-workers), but I have no issue with it for online communities. In the end though, I think fragmentation doesn't help simplicity and simplicity is what the majority general social network user is looking for.
Pachyderm (YC W15) -- San Francisco -- SF or REMOTE (within North American time zones) -- https://boards.greenhouse.io/pachyderm Positions:

* Enterprise Sales Engineer -- Work with Pachyderm's OSS and Enterprise customers to ensure their success. This is a customer facing role that bridges support, product, customer success, and engineering.

* Core distributed systems/infrastructure engineer (Golang)- You'll be solving hard algorithmic and distributed systems problems every day and building a first-of-its-kind, containerized, data infrastructure platform.

* DevOps -- Pachyderm is hiring a deployment and DevOps expert to own and lead our infrastructure, deployment, and testing processes. Experience with Kubernetes, CI/CD systems, testing infra, and running large-scale, data-heavy applications is important.

* Partnerships/Business Development -- Pachyderm is hiring partnerships and business development specialist who will be tasked with building and growing our strategic alliances within the data science ecosystem.

About Pachyderm: Love Docker, Golang, Kubernetes and distributed systems? Pachyderm is an enterprise data science platform that offers Git-like version control semantics for massive data sets and end-to-end data lineage tracking and auditing. Teams that find themselves struggling to maintain a growing mess of advance data science tasks such as machine learning or bioinformatics/genomics research use Pachyderm to greatly simplify their system and reduce development time. They rely on Pachyderm to do the heavy lifting so they can focus on the business logic in their data pipelines. Pachyderm raised our Series B led by M12, Microsoft’s venture arm (https://www.pachyderm.com/blog/pachyderm-closes-16-million-s...), so you'd be getting in right at the ground floor and have an enormous impact on the success and direction of the company as well as building the rest of the engineering team. Check us out at: pachyderm.com http://github.com/pachyderm/pachyderm
I use diamond plates to flatten my whetstones mostly, because masochism.

They're also great on blades. You wanna look for DMT / Dia-Sharp. All the big online knife shops should have you covered here (epicurean edge, etc)
is it really that hard to automate things on macos? I would have thought you could put most of the install instructions for everything you listed into a bash script? is macos locked down in some way?

why is logging into things an issue if you have a password manager to auto fill things?

on linux I just make a backup of the firefox folder so I don't have to reinstall the extensions on my new computer.
all the settings files I want to keep are kept in syncthing folder then i have a bash script to create softlinks where those settings are supposed to be.

doing all that manually every 3 years would be my idea of "really, really hard". with a script you just add the instructions once and then you can keep reusing it without any effort
Writing to the block should be expensive. But there won't be a problem because it'll only be used to settle Lightning Network transactions very infrequently, and could be massive amounts... not for small transactions.
Newfront (YC W18) | Remote (US) | https://www.newfront.com

Newfront is building the modern platform to transact insurance. No 20-page applications, confusing policy terms, or painful renewal cycles; Newfront's experienced brokers and technology remove the headache from business insurance. We believe in human-computer symbiosis that empowers, not replaces, people.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/newfront

Our open positions:

* Backend Lead Software Engineer: https://jobs.lever.co/newfrontinsurance/1ef7d406-b918-4232-a...

* Engineering Manager: https://jobs.lever.co/newfrontinsurance/51c08b9c-f5ed-4714-8...

* Frontend Lead Software Engineer: https://jobs.lever.co/newfrontinsurance/f02a8b26-b228-4c63-b...

* Sr. Product Designer: https://jobs.lever.co/newfrontinsurance/b513858c-3cb1-4b60-8...

Tech Stack:

* Backend: Node, Typescript.

* Frontend: Next.js, React, Storybook.

* Infrastructure: AWS, Docker, CircleCI, DataDog.
Wow. No helium required either
> FDA approval is a very strong signal at least.

FDA approvals of medical devices essentially breaks the software update system.

So one of my possibilities was tweaking how thats done on devices. People seemed to decide to disagree on my post based on whichever possibility they didn't like, and ignored the possibility they wanted to discuss.
I've found wrist based hr to be extremely unreliable to the point of uselessness when exercising.
Show HN: Next.js API Routes Middleware Library
> And in some cases, researchers may need to avoid reporting that exploit to Apple in order to keep using it.

And this will continue to happen until Apple just starts selling the damn things to anyone who wants them, instead of trying to gatekeep them to people who are playing by their ridiculous security disclosure rules.
My ROI argument is approximately that allocating $200 for health watches for everyone AND cutting $2,000 across the board everywhere else in healthcare would lead to the same health outcomes.

It's a good point about how the cost of healthcare is unevenly distributed toward the end of life. I really like the newish term "Healthy Life Expectancy".
On this note, don't buy things that are squarely in the recipient's domain of expertise unless they have stated exactly what they want.

I like photography and outdoors and I'm extremely picky about my gear in both, and definitely do NOT want others picking out gear for me that I will end up never using.

On the other hand, do buy things that are in your domain of expertise that the other person has shown interest in learning about.
They have an app that's absolute garbage compared to Slack - or even Discord, which is just embarrassing for a company like Google, frankly.

I'm sure it'll die off soon, like everything that Google attempts that doesn't have a stellar launch and rapid growth rate.
I had the apple pencil connected which may affect that decision.