skysight-inc/HackerNews huggingface dataset:
Umlaut | Data privacy engineer, automotive | Full-time | Detroit, currently remote.

We're looking for a subject-matter expert to use data anonymization, pseudonymization and encryption to develop systems that preserve and improve privacy protections as they relate to autonomous vehicles and transportation-as-a-service.

You'll be working with a major auto OEM's project managers, product owners, and engineers. We're looking for someone with solid experience in OO programming, cloud computing, and issue tracking, plus a bunch of other buzzwordy stuff you'll find at the link below:

http://app.jobvite.com/m?3ncEAlwD

I don't work on this team, but I know some of the folks you'll be reporting to, and they're solid. When I saw this posting in our internal jobs system, I was so delighted to see privacy as a focus, I knew I had to post it here. The above link is tracked and will show that you're my personal referral. If you'd rather do without the referral, just go to umlaut.com and click on "Career", then "Jobs in USA and Canada".

We're also looking for a bunch of other positions including cybersecurity engineers (automotive embedded is a heck of a field!), battery industry experts, and more.
I really don't know why this term is thrown around in the news so much without explanation. What I thought at first (and I think is the obvious interpretation) is that with an effectiveness of 90%, 10% of vaccinated people have no protection at all.
I don't need a permanent keyboard. Can someone suggest a good portable Bluetooth keyboard for Android?
How much did IP masking help in this situation versus the data analysis and identification of inauthentic use?

Did you have any experience dealing with residential proxy networks? If so, can you give some examples of any mitigations to inbound requests from those connections?
A web testing deep dive: The MDN web testing report
One problem for me in Software development have been bosses, project managers, product owners, IT architects and so on. Sometimes they get too much power and are allowed to make decisions on how to write software. Bad code can be handled. How to handle software filled with bad ideas is more difficult.
> I have definitely used a remote shell session from my phone while on the subway.

Out of necessity or just for fun/curiosity?
Div and Back End Again. A TypeScript Tale: Part 2 – Type-GraphQL
Fedora, Mint, eOS.

Basically anything that's not Ubuntu.
I started to make money writing in perl when it was long on decline already, in 2005-2007. I've switched to ruby after that. It's not widely known, but perl had a lot of influence on ruby, in much cleaner syntax and without baggage of text-only-processing scripts of early 1980-es
I wouldn't tag China as a communist country for at least a couple decades now.
The primary endpoint is symptomatic infection, not any infection per se. And it's a bit of a kludge, as all the Phase III protocols I've read define symptomatic infection as X no. of symptoms for Y+ no. of days i.e. there are people with fewer symptoms who aren't counted (or even tested to check for infection).

The efficacy is the 1-relative risk of the primary endpoint.
"Beginning on September 30, 2020, for new offers, Opendoor’s service charge will be no more than 5%. Service charge is subject to change, and has historically been as high as 14%." Helped me understand the business model.
> Also, the error bar on these effectiveness numbers are realistically probably +/- 5% or more, so it's not like a 76% is definitely worse than the 80%.

But we're talking 91% vs. 76%.
While the 'working mass' in this case is massless, nevertheless the spacecraft still loses its own actual mass as it accelerates, which is something you might not expect from something labeled as "thrust without reaction mass".
Amazing how the 'almost unreadable' Burton's Thousand Nights continues to sell to this day, even on Kindle. As far as I can gather, there is plenty of sexual imagery in the original manuscript undoubtedly emphasized by Burton. Suggestions of really gross mis-translation or invention by Burton, seem to be thin on the ground.
This reminds me of advice I give to junior devs who over-complicate things in the planning phase: "Start with the stupidest thing that will work".

You need to make something work before you can make it work well. You need to start simple before you dig into the complexity. Sometimes you find that the "stupid" solution is good enough.
SEEKING WORK | USA/World | Remote (working full-time remote since 2015)

Technologies: JavaScript, React, TypeScript, Node.js, RxJs, Angular, jQuery, HTML/CSS, Sass/LESS, Bootstrap, Python, BASH, Webpack, Gulp.js, Go Hugo, Responsive Emails, Puppeteer, Protractor, Git/Mercurial, Linux/Unix, SQL, Docker, Serverless, firebase

https://www.stevenirby.me/resume
hknews@stevenirby.me

I've been on a sabbatical where I finished an around the world trip of visiting all seven continents of the world. I'm ready to get back to work and taking my time to find the right role.

Currently, working on:
- react / firebase / serverless stuff for my side-project – https://randomdailyart.com

- a ton of cool automation stuff with Huginn, n8n, etc.

- a video course on automation stuff. (https://howtoautomate.dev)

I would love a place to work for the foreseeable future.
This is the key point that needs to be conveyed when the J&J 1-shot starts to be distributed. It has a 66-75% efficacy at preventing symptomatic disease, but 100% efficacy at preventing hospitalization. In situations where the 1-shot is ideal, patients being scared off by the lower efficacy rate could be an issue.
Spill | Senior and Principle Engineer | Remote (UK+/-3) | https://www.spill.chat/
Spill is a mental health company that offers free access to emotional support to employees. We work with over 200 companies including Typeform, Depop and Bulb and currently deliver over 1,000+ hours of therapy each month.

Our product is accessed by over 10,000 people and shapes the companies we work with and their culture.

Technologies we use:

* TypeScript + JavaScript + React
* Postgres
* Node + Express

You can find our job descriptions + application form at: https://www.notion.so/spill/Careers-at-Spill-93c02882604b4b3...
I had a preference for the mRNA vaccines because the immunity appears to build faster.

It's not enough of a difference to wait for one of the others, but it would drive my choice if I had an option.

When I made my appointment, the clerk warned me that they only had 2 dose vaccines, apparently enough people wanted the 1 dose that it was worth mentioning it.

So it can be pretty situational which one is 'better'.
Compiling Containers: Dockerfiles, LLVM and BuildKit
>That doesn't look like someone just tooling around to me, that looks like someone recreating a build process.

This is quite the leap in logic.
Ask HN: If Google can block any website, then Google knows every opened website?
Is that true?
I'm going to agree with ehutch on this. Don't try to cover a multi story house with a single AP. Would you attempt to cover the house with one music radio? No, it would be way to loud near the stereo and way too quite far away. Also you spill signal into neighbour's location and blast excess noise into the spectrum.

3 APs on a lower setting would give you much better performance.
> What the hell? I can’t believe I spent time for this. It’s just elevator music.

Is it not wonderful to find out by some hacking that elevator music is broadcast via UDP in the hotel? It's a fantastic project for a hotel room!
> Building a 10 mile tunnel under a city is still a multi-decade affair.

That is almost purely a function of political ill-will for infrastructure, and not any issues regarding construction itself. Actual construction times tend to be pretty short: it takes decades to get the politicians to agree to fund construction, but only a few years to actually build it.

> A lot of US commuter railways are still using electronics installed in the 1930s!!

US commuter railways, you may be shocked to discover, are not at the cutting edge of railway technology. Or railway operations. Of course, the US has a reluctance to admit that it's not the best at something and to actually look at foreign countries for innovations that occurred in the past 100 years that it might have missed out on.
Very much OT, but maybe it’s worth a shot... I wasn’t able to do a full backup of my Galaxy (encrypted, stock, unrooted) so installed TWRP. Now I’m stuck in the infamous boot loop and can’t get out. Knox is tripped.
I kind of really need to get in to get some files in there. Should have known better but it’s a bit frustrating that it was precisely trying to perform a backup that made this happen. Can’t find stock firmware anywhere and even if I did I’m not sure if it’s possible to flash it without wiping ...

I don’t suppose anything rings a bell?
It sounds like the commission was picked precisely to achieve this conclusion, by appointing members who had already said the same thing:

https://www.bbc.com/news/uk-politics-53428248

I honestly don't know how you solve the problem of picking objective people. It's a thorny problem and it's always possible to shade the statistics to show whatever you want it to show.

What I'd like, at least, would be to have the headlines tailored to highly the differences from the predisposed conclusion. The headline here is spectacularly suspect: the entire point of accusations of systemic racism is that it's not deliberate. It's baked unconsciously into the system, in ways that make it hard to point to any individual incident but which collectively and consistently produce worse results for some people.

Each thing that you point at seems not so bad, or "just one racist guy", but the effect adds up to be significant. So the words "not deliberately rigged" sounds precisely like the kind of thing designed to tell everybody that things are fine when it's not.

Even just refocusing the headline to "Commission recommends things that can still be done about racism" is more productive, and true to the existing report.
They did: https://www.litmus.com/blog/the-results-are-in-a-b-testing-h...
I have an Archer which stops handling non-VPN traffic multiple times a month and seems to drop telnet packets. I'm done with TP-Link.

I think part of the problem is that effectively everybody has flaws, so you're forced to choose who has the least-broken approach for your needs...and you can't do that without a lot of research.
I saw a presentation at Schmoocon around 2005 where streaming video over DNS was demonstrated.
Wish they had kept that design for the ER-X. The flash memory on mine failed after 3 years which is a pretty common problem with the ER-X.
This post is an ad for Bonsai. Ugh.
I've been trying to follow along and I'm not super confident in my answer, but Pfizer and Moderna both seem to be doing incredibly well, either one is a safe choice as "this is the best I can do for myself"

AstraZeneca seems to be lagging behind, and what little data I've seen on J&J seems to suggest that it's better than AstraZeneca but still not as effective as Pfizer or Moderna.
Elevator music is generally played under a license that allows for public performance (fun trivia: it's a copyright violation for businesses to play the radio in public spaces in the US which is why they pay for elevator music services). I imagine the case here lives on the edge of the license agreement, but presumably it's the music provider's software/hardware that's doing the broadcast and they would either look the other way at what the OP did (perhaps feeling that an unofficial device listening in is within the scope of the license) or, depending on local copyright laws, might file an infringement claim. Most likely, a single case like this would not be worth their effort to do more than send a sternly-worded email/letter, but if, say, someone published a tool to allow downloading the music for offline play, legal action would almost certainly be invoked.

But in all of this, IANAL, so I'm probably wrong.
I'm concerned with 'I have credentials in my environment block and just dumped the whole thing to a log file'. Avoiding storing the credentials in the environment block obviously avoids that.

To be fair, unsetting sensitive environment variables after consuming them would probably also avoid that eventuality. I can count on the fingers of no hands the number of times I've seen developers do that! :)

Some other part of my process (or a child process I might launch) deliberately hunting for credentials in order to leak them is a different problem with other solutions.

In between these two cases we have mistakes like "dump config object (containing credentials) to a log file". That, too, can happen and should be avoided, what more can I say?
pip didn't start from scratch with Python 3, so the py2->3 was a much less breaking change
Iacr.org Website Taken over by Satoshi
Evidently some professional societies know what today is. ACM just wastes theirs with a post about the Turing Award.
@c0nsumer

Without going into detail because, well, you never know who's reading ....

TL;DR "WatchDog End User Support" is now mandatory for Unleashed and is sold and priced on a per AP per year basis.

The pricing is not too scary (two digit figure per AP per year). But I'm told the requirement is (will be ?) enforced so its unlikely to be a case of being sneaky and paying the first year and "forgetting" to pay the renewal.
Unless we are talking about API, then you add getter and setter. You might even be able to refactor all callers automatically via IDE. I mean, I dont mind getters and setters in java, it is standard at this point.

But origin of it is in EJB specification, it is not something that would be interently needed elsewhere. It just "feels wrong" to programmers (including me) at this point.
> a proud member of 1% for the Planet, we give 1% of our annual sales to nonprofit organizations focusing on protecting the wild places

I LOVE THIS - thank you!
My layman's understanding was that "91%" "effective at preventing disease" (from the TFA) goes something like this:

- Take two identical[1] populations of people
- Wait for some people (100 for easy math here) in the unvaccinated group to get the disease. Probably measured by a PCR test indicating presence of the virus and ignoring symptoms since they say "preventing disease" and not severe symptoms, hospitalization, death etc.
- Count how many folks have the disease in the vaccinated group[2]. In the "91%" case we would expect 9 people to test positive, meaning 91 of 100 people we would expected to get the disease did not.

I like to think of it as I am ~1/10th as likely to get the disease as I would be if i had not been vaccinated.

Is this what they mean in this?

[1] Doing your best to create identical groups by controlling for population differences such as gender, age, and other known risk factors,
[2] We need also to control for time in the study etc.

[Lots of editing for formatting etc]
Isn't this pretty expensive?
"whichever one is available to you" is still the right answer since as some other comments suggest there isn't enough data, yet. For sure one is likely better than the others. If we had the data we'd make the choice, but it seems it's not possible to know yet. The better one may be the one that protects against the variant that is forming via mutation right now in some person in Iowa. But yeah, we don't know yet. So you can wait until we know more, for sure eventually in retrospect we may see there is a clear vaccine winner. But really today just get one, or wait and see which one is the winner, with the risks associated with waiting. I think that's the free-agent adult pants decision.

Also, let's say you get vaccine A today. And in 6 months, it turns out you really wanted vaccine B since it's way more effective it turns out. Why can't you just get vaccine B in 6 months? I imagine if vaccine B is the clear winner, they are going to crank up production on that one as much as they can?
Kettle | wearekettle.com | NYC, SF, LA (REMOTE)

We’re a digital-native creative agency with offices in New York City, San Francisco, and Los Angeles. We’re a team of makers, doers, and passionate problem-solvers with a simple mission: using design and technology to make the world feel more human. We ask the tough questions, because that yields the strongest solutions and best designs. We use the latest tools for our creations, and if a tool we want doesn’t exist yet, we build it! Our strengths are creating user-centric products, keeping it simple, and telling great stories.

- Senior Front-end Web Developer (remote): https://wearekettle.com/jobs/apply/senior-front-end-develope...

- Mid-/Senior- Full-stack Web Developer PHP or Python (remote): https://wearekettle.com/jobs/apply/full-stack-web-developer-...

- Technical Producer (remote): https://wearekettle.com/jobs/apply/technical-producer-287971...

We're also seeking a freelancer with Craft CMS experience.

jacob {at} wearekettle.com
Its my understanding that the mRNA (pfizer and moderna) had better efficacy numbers from the phase 3 trials than J&J. 94% vs 72% when comparing similar phase 3 trials with >30k participants.

I am interested to see if there is any difference in how long the protection lasts for. Hopefully we will get that knowledge as the long term studies continue.

https://www.nytimes.com/interactive/2020/health/pfizer-biont...

https://www.nytimes.com/2021/02/27/health/covid-vaccine-john...
https://www.nytimes.com/2021/02/27/health/covid-vaccine-john...

Disclaimer: I worked on the tech side of the moderna trial so I'm biased.
Map the Banks
> The trackpads for years were mediocre, but it’s a ThinkPad; you’re not supposed to use the trackpad. I’m used to a trackpoint, after all.

And then of course there's also trackpoint drift.
Aside; 'Bitter Lake' documentary by Adam Curtis (2015) https://www.youtube.com/watch?v=84P4dzow1Bw
I'm a committer to the Apache Superset project (http://superset.apache.org/), which can talk to any SQL speaking database through SQLAlchemy: https://superset.apache.org/docs/databases/installing-databa...

Majority of Superset users use the no-code Explore UI in Superset to create charts.

We recently wrote about the big 1.0 release here (https://preset.io/blog/2021-01-18-superset-1-0/)
Major League Hacking (MLH)| VP of Engineering | Full-time | New York / Seattle | Rails & Next.js

Major League Hacking (MLH) is rethinking technical education for the modern world. Now that every company is a technology company, we need faster and more effective ways to train the talent that everyone depends on. Our unique hands-on, community-driven approach has helped more than 500,000 technologists worldwide launch their careers and stay up-to-date with the latest trends. If you're passionate about technology, education, and the future of work – this this the place for you!

As our VP of Engineering you’ll be responsible for building out a team who will create and maintain engineering products that help aspiring software engineers level up and launch their careers. Within your first year, we’ll expect you to have hired a small team of developers and worked with them to create a successful and efficient engineering team. You’ll have added key features to our existing products driven by the needs of our team and feedback from our users.

https://careers.mlh.io/o/vice-president-of-engineering
The Mom Project | Multiple Roles | Remote (US) | Full-Time | https://themomproject.com/

The Mom Project is a community and platform that connects talented women with world‐class employers that respect work and life integration.

Our team is growing as we push to rewrite the narrative for working women at every life stage. We believe women should be able to choose both a successful family life AND career aspirations without sacrificing one over the other.

We are currently hiring for a number of roles, our top priorities are:

• Sr. Full Stack Engineers (multiple openings) https://themomproject.com/projects/senior-software-engineer-...

• Sr. Software Engineer, Data https://themomproject.com/projects/staff-software-engineer-d...

• Sr. Software Engineer, Backend https://themomproject.com/projects/staff-software-engineer-b...

• Sr. Data Scientist https://themomproject.com/projects/senior-data-scientist-1d9...

We are also interested in experienced:

• Product managers

• Product designers

• Devops/Infrastructure engineers

• Full Stack engineers

For more job listings, visit https://themomproject.com/careers?capabilities_category_ids%...

Tech Stack: React, Ruby on Rails, AWS

Please apply through our platform. You can reach out to us at workwithus@themomproject.com with any questions
The companies have every incentive to publish the good results and the media doesn't care about explaining things clearly.

I'm not sure I can envision a reasonable way to embargo the numbers.
Oh man, this would be fun to do. Interleave at random moments an MP3 of sinister laughing.
This worked better for me too, so far. But it may depend on what the OP is working on. I'm in a similar situation as the OP, and asked people I know if they know anyone in the target or related fields. And then further asked those people if they knew anyone, at the end of the call. I'm still in the middle of this process right now, so let's see how it goes.

I don't ask if they think my product is a good idea. I ask questions about how they work, delve deep into the mundane details of their work, understand what the challenges are. Finally I make my own assessment of whether my product will truly be valuable to them. I do plan on pitching to some of them later, once I've a fairly good understanding of how my target users work.

Importantly, I was clear with everyone (including my friends) that I wasn't selling or pitching anything, and that my goal was to understand how the target users work. The product idea I have is just the context explained in the first 2-3 mins, the rest of the call is just listening and understanding their workflow. The conversations usually tend to be 30 mins to 1 hr.

+100 for 'Four Steps to the Epiphany'. All of what I did above was lifted straight from that book. I've been internalizing it for years, and still fail to follow it properly. It's an amazing book :)
GoFundMe isn't big tech
That still leaves the option of using a GSI of whichever distribution.

https://github.com/phhusson/treble_experimentations/wiki/Sam...
It was a sincere question, thank you for the sincere response. When I asked my question I was narrowing thinking of account security and data leaks (which I still think Google does a decent job at) but it is clear that the issue of privacy is much broader than just that one aspect.

The examples you gave are great examples of how privacy is not given the respect it deserves in these data collecting companies and design decisions can have catastrophic effects for their unsuspecting victims.

> their business model is built on selling information about you to advertisers.

I don't mean to be pedantic but their business model is selling your attention to advertisers not the data. Selling the actual data that they use for targeting is against their best interest since it would allow others to do what they do.
Microsoft is supplying 120k HoloLens-based headsets to the US Army
RemoteLock | Senior Full-stack Engineer (Ruby on Rails) | Full Time | Remote (Americas Only) | https://remotelock.com

Are you an experienced full-stack engineer who loves elegant code and clean architecture? Are you fluent with Ruby, Rails, JavaScript, and take great care in the design and maintainability of server-side API’s? RemoteLock™ is looking for talented full-stack engineers to help us grow our enterprise-class product line of IoT access control devices and web & mobile software.

More details here: https://weworkremotely.com/listings/remotelock-sr-full-stack...

Apply here: https://airtable.com/shrLJrejGyREfi5PM