skysight-inc/HackerNews huggingface dataset:
> This thing of countries blaming other countries for attacks is getting boring. In cyber, there are no borders.

Technically correct, and very wrong in all other ways.

Who performs the attack is a very real concern, because unlike some of us, the attackers likely have lofty goals in the real world which are aided greatly by their successes in "cyber."

(I maintain that anyone who uses the word "cyber" seriously today doesn't understand what they're talking about, in virtually all cases. It's fine to not understand stuff, by the way. Just be open to learning more.)

If Russia is able to find holes in Windows, the OS used by nearly every business on the planet, they will use those vulnerabilities to their advantage in whatever ways they require. They will obtain personal information about people, blackmail them, maybe. Who knows. Russia and others WANT to take down those who disapprove of them quite strongly. They potentially want to bring low anyone who has spoken bad about them publicly (if so, I'm screwed) or anyone who could have helped them in some way and chose not to. North Korea, Iran, Saudi Arabia, Russia (perhaps to a lesser extent) have real beefs with the US.

Information gained via incredibly catastrophic breaches like this one give real countries with real weapons real leverage against others, potentially. Especially if the vulnerability opens more doorways that would otherwise not have been accessible.

I've been divorced twice. DO NOT UNDERESTIMATE the lengths that people will go for revenge for even the smallest slights. Some people get absolutely drunk on the slightest bit of power they have over others, and they know that, so they accumulate leverage against their enemies, real or imagined, continually in anticipation of a time when it will be useful.

In short: this is a big deal. It matters who is behind it.
"Chatting" is just another kind of action.
Email: c410.f3r (at) gmail.com
Location: Brazil
Remote: Yes
Résumé/CV: https://c410-f3r.github.io/curriculum.pdf
Technologies: AngularJS, Ansible, Apache HTTP, Apache Kafka, Assembly (x84_64), BIND, C, C#, C++, Docker, Docker Compose, Eclipe, Ember.js, F#, Golang, Java, JavaScript, Kotlin, Lua, MongoDB, MySQL, NodeJS, PHP, PostgreSQL, Python, ReactJS, Ruby, Rust, Scala, Spring, SQL Server, Substrate, Swift, Symphony, TypeScript, Vue.js
Willing to relocate: No

Software engineer with a Bachelor's degree in Computer Science and over ten years of experience in several technologies and programming languages. There are two fields where I mainly act: (1) DevOps; from database administration and data modeling to back-end programming or front-end design all the way to orchestrated deployment with latest tech and (2) Standalone software; involves embedded development in restrict environments, blockchain applications mostly related to Parity's Substrate and plain command-line interfaces.

On the open-source side of things, I regularly contribute to several projects, helping and communicating with other developers. Take a look at the available coding portfolio in my GitHub profile at https://github.com/c410-f3r where my public collaborations over the last fours years are more focused on the Rust Programming Language ecosystem.

Over 30 certified courses have been completed and seven professional certifications that covers a wide range of area were obtained from different organizations, e.g., the Linux Foundation and the Blockchain Training Alliance. Learning is very important to keep up with both old and new technologies, my newest certification is the Google Cloud Certified Associate Cloud Engineer and more certifications will be earned over time.

To finish, IT in general is like a living organism that is constantly changing, that is why I am always looking forward for a new challenge to increase knowledge. For example, my proudest project is a constrained NP-problem solver compiled to WASM (https://c410-f3r.github.io/mop-playground) where I spent years reading scientific articles to write efficient data-structures and algorithms.
I can't speak the the intent of the union in the article but after all of those things you listed you might want to know that your colleagues are getting treated fairly as well. For example, how would you feel about all your benefits if you learned there were contractors that did your same job that didn't have access to the same benefits that you have and haven't been given an avenue to earn those benefits? (https://www.latimes.com/business/technology/story/2019-11-08...)

Or, how would your feel if the product you worked on was being produced with slave labor? (https://www.washingtonpost.com/technology/2020/12/29/lens-te...) Would it be enough to just say, "I'm not ok with that, I'll work somewhere else." or do you think you should have some say about how your work is used?
This is flat earth levels of obviously wrong and part of me feels like the idea that significant numbers of people believed it is itself fake news.
You folks may want to reconsider having photos in CVs.

Not only are people going to be very strongly biased by race, ethnicity etc., but also by the trivialities of presentation: dress, apparent attitude, choice of background. All of those things signal 'personal brand'.

These things are becoming 'far too important' in terms of how we evaluate each other and this development is really lacking in self awareness for a generation of folks who are supposed to be against this kind of stuff.

Secondarily, I'm wary that overall, this is just contributes to the 'life resume BS' competition of filling up your professional profile with rubbish to make you seem engaged - much like 'GitHub commits' as some kind of signal of validity.

At least with LinkedIn it's considered to be 'professional' i.e. this is your 'work presentation' - the casual nature of these new CVs tries to blend some personal and aspiration aspects so as to make the individual seem more 'authentic'. This is a creeping cultural problem and might be the source of a lot of baseline social conflict in the office. It's a 'place of work' - your hobbies are nice, but not relevant.
Red Canary | Multiple Engineering Roles | Full-Time | Denver, CO | REMOTE (USA)

-Senior Software Engineer, Ruby/Rails

-Software Engineer, Ruby/Rails

-Engineering Manager

-Senior Software Engineer, Rust/Go & Linux

-Senior Production Engineer

We primarily work with: Ruby/Rails, React, PostgreSQL, Rust, Go, AWS, Kubernetes, Terraform

Red Canary is a fast paced security company, headquartered in Denver, CO. Our technical roles have been remote/dispersed across the US since we were founded in 2013. Red Canary is private (Series B), roughly around ~250 employees.

Red Canary is a security operations ally to organizations of all sizes. We deliver outcome-focused solutions that can be deployed in minutes to identify and shut down cyber attacks.

Product Demo: https://redcanary.com/products/managed-detection-and-respons...

Apply Here: https://redcanary.com/careers/
Hello from Vancouver! Great work.

One piece of feedback - would be great if there was an "import from Linkedin" feature. It seems like a lot of the information has already been populated, and it's annoying to c/p it over.

Hit me up if you need some help.
This resonates deeply with me.
Why SpaceX Wants to Make Landing Super Heavy More Difficult
Interview Schedule | Remote (USA) | Full Time | https://interviewschedule.com/careers/

Want to join a lean, ambitious, and fast growing startup? We're a team of 8 changing how companies hire. Our first product streamlines recruiting scheduling and coordination, saving teams hundreds of hours a month. We support fast-growing companies like Twitch, Duolingo, and Segment. We have our sights set on making hiring a great experience for candidates, hiring managers, and recruiters. We’re building the platform to fix the $200 billion per year hiring industry.

We found product-market fit, have strong revenue growth, and are well funded by top tier investors. This is an exceptional opportunity to transform an industry with powerful and easy-to-use products customers love. We offer competitive Bay Area salaries no matter where you're located, along with significant equity and full benefits.

Open Roles

- Full Stack Engineer: https://jobs.lever.co/interviewschedule/cd8555d4-e7f9-4ca2-9...

- Growth Marketer: https://jobs.lever.co/interviewschedule/251d12fd-ba45-4c52-b...

- Account Executive: https://jobs.lever.co/interviewschedule/b12bfc30-b46c-44b3-b...

- Customer Success Manager: https://jobs.lever.co/interviewschedule/6974d4e7-7590-48bb-9...
Well, also, Cameron would never have expected to be in a position to hold the referendum. He made it as an election promise in an election where pretty much no-one expected a Tory majority; at best they were expected to be part of a coalition. Then things changed, and here we are...
I built https://BetaList.com specifically for this purpose. Helping pre-launch startups get their first signups. (Although these days we also include recently launched ones)
I have never heard of anyone paying back signing or relocation bonuses if they didn’t want to. It’s usually not worth it for the company to pursue.
Bitcoin is not a software program it's a protocol. It's better to compare it to HTTP which also hasn't had exploits.
my only gripe is that it takes too many clicks to change your profile photo, otherwise looks amazing!
I did address this above but you ignored it.
Usability: Radio Buttons vs. Dropdowns
The malicious version had items in place that would cause it to not activate if certain anti-malware software is present or other environmental conditions were not met (like not joined to an active directory). This reduces the number from 18k to something less (still probably huge) but 18k is the max if perfect conditions are present.

As for why the attackers did not proceed, resourcing probably had nothing to do with it and more along the lines of many of those customers were not interesting. Proceeding to load further malware stages in those uninteresting customers increases the chance of getting detected and given that the attacker was targeting long term persistent access to highly valuable targets, the attacker by design more likely simply left targets without valuable information alone.
Whenever I hear this argument, I wonder what the power consumption is for keeping fiat currency going.
Overall would recommend leveraging the schema from JSONResume (https://jsonresume.org/schema/) that supports all of the above
Maybe Solarwinds is just another Crypto AG? The name a bad joke, who knows ;->
SEEKING WORK, Brazil, Remote OK, c410.f3r (at) gmail.com

Software engineer with a Bachelor's degree in Computer Science and over ten years of experience in several technologies and programming languages. There are two fields where I mainly act: (1) DevOps; from database administration and data modeling to back-end programming or front-end design all the way to orchestrated deployment with latest tech and (2) Standalone software; involves embedded development in restrict environments, blockchain applications mostly related to Parity's Substrate and plain command-line interfaces.

On the open-source side of things, I regularly contribute to several projects, helping and communicating with other developers. Take a look at the available coding portfolio in my GitHub profile at https://github.com/c410-f3r where my public collaborations over the last fours years are more focused on the Rust Programming Language ecosystem.

Over 30 certified courses have been completed and seven professional certifications that covers a wide range of area were obtained from different organizations, e.g., the Linux Foundation and the Blockchain Training Alliance. Learning is very important to keep up with both old and new technologies, my newest certification is the Google Cloud Certified Associate Cloud Engineer and more certifications will be earned over time.

To finish, IT in general is like a living organism that is constantly changing, that is why I am always looking forward for a new challenge to increase knowledge. For example, my proudest project is a constrained NP-problem solver compiled to WASM (https://c410-f3r.github.io/mop-playground) where I spent years reading scientific articles to write efficient data-structures and algorithms.
ActiveState | Full-time | REMOTE | https://grnh.se/772329f92us
ActiveState Platform - made by developers for developers! We are reinventing build engineering with an on-demand SaaS Platform and CLI tool that lets developers automate the building of any runtime environment using any open source language ecosystem on any platform. Right now we support Python and Perl and we're hiring to add more languages and packages! We’re building an ambitious language distribution platform so that no engineer ever has to suffer dependency hell again, and we need your help to build it.

The Build Engineer positions are coding positions where you work on tools that do distributed builds. We're also looking for an Elm Developer.

I'm a Team Lead here at ActiveState, though none of the open positions are on my team right now. Please email me at autarch@urth.org if you have any questions.
Having made gears for 5 years, the idea of two non-rigid, non-involute surfaces lasting for more than a few seconds while rubbing together just doesn't seem plausible as a "backup when overloaded".

It makes for a nice toy, but there will be losses, primarily through eddy current. Any time you move an magnet past a conductor, it sets up currents in the inductor which oppose motion, those currents create heat while losing energy. You see magnets approaching and departing each other, there will be some current induced, and thus heat generated, and loss incurred. It may, or may not, actually be less friction than proper hardened ground gears properly meshed and lubricated, but I doubt it.

If they can show a system efficiency, then I might be interested. Until then, it is a fairly nice object of art.
In a lot of cases, once there's a union you're either in it or unemployed. Unions have a lot of benefits and a lot of negatives. But voting to have one without knowing what _this specific one_ will have either way, knowing that you _must_ be part of it if it passes... that's not a clear decision.
The Nature of Overfitting
You’ve been on HN since 2009, surely you know who dang is.
Last I checked 6 or 7 was also the number of reported Covid deaths in Thailand.
The message is a contradiction. When you say that websites starting to break "has only become true in recent memory", you're just confirming the truth about the stability of the Web mentioned earlier, nothing else. You're playing with definitions, but not much more. If that kind of play is valid and your post is truly meant to describe an ethos of "saying no" (though sounds more like more retroactive argumentation), then there's nothing that stops "Gemini" from being defined as an intersection-by-proper-subset of HTTP, etc. Go ahead, commence with calling the 2005-era Web "done" by just saying "no". You'll be able to do with it whatever you want to do with Gemini. If you find that's still too much, then just say "no" more aggressively, right?

But that's not what's going on. As of today, what's written above about Gemini is true. Gemini is NIH, and it's definitely not a picture of stability. Despite the entire "ethos" of the project, it manages to project a worse sense of its own dependability, right from the beginning, than the Web does. Given all the bad stuff that can be said about the Web, that's saying a lot. Here's what you can't say about the Web or Gemini: that it's "Becoming a tool which 'just works' and can be depended on without a second thought". But the reason you can't say that about the Web? Because that's what the Web already is. There is no "becoming" involved. This is unlike Gemini, for which there is also no "becoming", but that's because that would imply there's a possibility that Gemini will ever get there, of being anything more than the computational equivalent of a fidget spinner that it is. Here's the best you can say about Gemini, even if you're predisposed to look at it with unmerited optimism:

Hey, folks. Step up and build your world around the opinions and whims of a bunch of people who showed up yesterday and decided to make something new because it felt like a good way experience self-fulfilment at the time. It's not the Web, because, you know--because of bloat. And it's important to say "no". Ah, yeah, that makes sense. Sounds good, too. So we're gonna go with that. And it's not Gopher, either, because... well, just because. But pay no attention to that! Gemini is the product of brilliant programmers who think the right way and are totally committed to dependability.
Location: Baltimore, MD, USA
Remote: Yes
Willing to Relocate: No
Technologies: HTML/CSS/JS, Node, React, Ruby, Rails, SQL (Postgres/MariaDB), Java, Spring Boot, Git, Bash, various testing libraries.
Résumé/CV: https://linkedin.com/in/davisra
Email: rdavis.bacs[at]gmail[dot]com
GitHub: https://github.com/radavis
Blog: https://radavis.github.io

I've been building web applications for 7 years. Rails was my first framework, so I definitely appreciate a well-organized codebase. I have experience building applications with Section 508 Compliance and Accessibility in mind. I don't have a keen eye for design, but I can style HTML/Components to match a design. Writing automated tests is my jam.
"It's not speculative, it's literally what he and his lawyers said. "

Then it's the most absolutely biased possible thing upon which to rule.

Assange's isolation was a) self imposed and b) considerably better than any 'prison' than he would face in Sweden, the UK or the USA. You don't get to 'not go to jail' because 'it will be depressing'.
Variants and Vaccines
We boosted our traffic by 504.17% with a SEO-Friendly Web Story
you can also lead by example instead being verbal and deliberate in your communication.
Sixty Minutes Episode Is Pure Misleading Moral Panic About Section 230
To be clear, that's about moving equipment, right?

(I've had that issue as well, where the people who managed the equipment were in a union)

Note: I think that's a misapplication of their grievances - it's one thing if your employer makes you move your office equipment to avoid hiring movers, a single person updating their desk or location should be an explicit exception

But I agree with you!! Unions can cause bad policy, and this is a reasonable example.
I (the author) am native Spanish speaker (Costa Rica) so thanks for your patience reading the article :)
Maybe we've reached the point where startups are just really expensive spikes.
The 1920s-1960s were also, taken as a whole, a time of enormous economic growth!

You can argue that recessions of the 19th century are okay because other growth balances them out.

You can argue that recessions of the 20th century are bad because of their immediate consequences.

You cannot argue both.
Hey Andy, good job! The app looks really clean and nice to navigate through.

I just wanted to share a couple of "views" that I created to express my career in a different way. I'm sharing just for your inspiration. (content in Portuguese, but I bet you can auto translate it)

Experience view; years of experience per theme/subject.
https://rodolphoarruda.pro.br/experiencia/

Projects & cultural context in chronological order (notice the flags)
https://rodolphoarruda.pro.br/eu/lista-de-projetos/

I decided to make those views available because I stopped believing the standard CV/LinkedIn format for presenting myself and my career.

Cheers and keep up the great work!
The Breaker team is joining Twitter
The UK is also "literally an island", though 4 times as big as Taiwan. Taiwan banned flights from China early on, and now only allows entry to residents and those on business. The UK has still not stopped international travel. Quarantine on arrival in the UK is weak and unenforced, compared to Taiwan where the only way out of the airport is in a quarantine taxi to an approved place and you get tracked by your phone for 2 weeks. By consistently refusing to take timely action, and refusing to take things seriously, the UK forefeited its island advantage.
RE: front page scarcity and avoiding repetition, one of the few things I like about stack overflow (which is also present in Notational Velocity and its descendants, and there’s other prior art) is treating the title input also as a search to help minimize duplicates. I know HN doesn’t like to have a lot of in page interactivity but maybe if a title or link seems to duplicate another recent submission on submit it could prompt to upvote or comment the earlier submission in lieu of submitting the duplicate?
Margins for hardware tend to be thinner than software which typically means less salary, not as nice offices, and more bean counters.

I imagine there are exceptions to this rule (Nvidia).
Thank you! It started as a side project but I have a few ideas on how to turn this into something a bit more real.
I believe the person you're replying to was talking about how non-union members would be treated by union members. And, at least in the US, the answer is "horrible". The people in the unions are widely known for coming out hard and strong, with considerable bile, against anyone that so much as expresses the opinion that the union might not be the right choice for them. Rats, scabs, etc; pick your insulting name, they're called it.
No, EMail has fundamentally bad UX for a lot of use case slack and similar are used for.

> problem IMO is how to replace SMTP.

Sadly SMTP is probably one of the parts of Mail which have aged best. Enforcing the usage of some (currently by design optional) features wrt. authentication and similar at the cost of backwards compatibility and you have all you need from the delivery protocol.

BUT:

- IMAP and similar is much worse.

- Mail bodies are a big mess it's always fascinating for me that mail interoperability works at all in practice (again you can clean it up a lot, theoretically, but backwards compatibility would be gone).

- DMARC, DKIM and SPIF which handle mail authenticity have a lot of rough corners and again for backward compatibility are optional. Again it's not to hard to improve on but would brake backwards compatibility.

The main reason mail still matters is because it's backwards compatibility, not just with older software but also with new software still using old patterns because of the (relative to the gain) insane amount of work you need to put into all kinds of mail related components. But then exactly that backwards compatibility is what.

(Yes, I have read the "Why TMTP?" link and I have written software for many parts around mail including SMTP, and mail encoding. The idea that SMTP is at the root of the problem seems to me very strange. Especially given that like I mentioned literally every other part of mail is worse then SMTP by multiple degrees...)

EDIT: Just to prevent misunderstandings one core feature of mail is the separation of mail delivery and mail authenticity, in the sense that you don't need the mailman to prove the authenticity of a mail. At most the legal/correct/authentic delivery.
So your theory is, because they didn't release the Cozy Bear signatures, that it must be CIA/NSA? That's a huge stretch to the opposite side of the conspiracy. How do you explain the hacking of the Treasury and other government agencies in your scenario?
Is your argument in favor of bitcoin as an asset class is that its value doesn't skyrocket when stock and property values skyrocket?

(My assumption when you said "inflation" was a drop in purchasing power of a given asset, not a rise.)
It's Easy As 1,2,3 [pdf]
I think you're right, very interesting, that means I can do a whole lot better in the visual quality I get out of these e-Ink displays.

Well damn, I'm excited I found this article! Thanks @dassurma!
I would have recommended TheoTown but apparently they moved to a time based IAP model with their mobile app. The steam version is still a single time purchase and a great game for the low price.

While checking out TheoTown on the App Store I found out that there is a paid Tropico version that seems to be a full game.