skysight-inc/HackerNews huggingface dataset:
Root Insurance | Columbus, OH / Chicago, IL (Remote Possible) | Full-time | Hybrid Onsite/Remote US ONLY | $100k-$180k https://root.engineering/

Root is an auto insurance carrier, like GEICO and Progressive. We use data science to identify and insure good drivers, reducing insurance premiums for good drivers significantly as a result. We're still a startup — today, we're 1,300 people who have been working on this since March 2015. We've built an iOS and Android app that gathers data on how well people drive. We use that to set insurance prices. To build the best possible product and user experience, we went through the arduous process of starting an insurance carrier from scratch with fairness in mind.

We're focused on becoming a national insurance carrier and are now live in 30+ states. We've also successfully launched both a renters and homeowners product and an Enterprise arm of our core business, all in the last year.

We've raised the largest VC round ever for an Ohio technology company and we're scaling rapidly, most recently launching our $6B IPO: https://www.nasdaq.com/articles/root-insurance-ipo-poised-to...

We're planning on leveraging that momentum to continue scaling rapidly and build something truly unique in the insurance industry. To do that, we're looking to bring on more exceptionally talented engineers and continue creating great teams around strong leaders and experienced problem solvers.

Our tech stack involves Ruby / Rails and Javascript / React Native. However, we're not only looking for people with experience in our stack, but rather, we're looking for experienced technologists with sound engineering fundamentals using any technology.

We're actively hiring in both Ohio and Illinois, where we have offices in Columbus and Chicago, respectively. Although we're all working remotely for the foreseeable future, we have the utmost intentions of returning to our offices when safe. While we know we work best together in person, we're open to remote for those open to working on an Eastern/Central timezone schedule. We're searching for both experienced Engineers and Engineering Leaders who are looking to have a significant impact by building and leading a team from scratch, US only.
Yea. Sucks too because yes, this is gross but their _hardware_ might still be good.. if only you could easily run it at home without their cloud.

But it seems that's been getting more and more difficult. Yeesh.
Growing a Waitlist to 50k Users after Pivoting during Covid
> With git, a cryptographic signature on a commit provides strong integrity guarantees of the entire history of that branch going backwards, including all metadata and all contents of the repository, all the way back to the initial commit.

The purpose of a signature is to add authenticity assurances on top of integrity guarantees (which are necessary to authenticity, but independent). A document is signed by producing a digest of it, and that digest provides an integrity guarantee. The signature of the digest is then an additional authenticity guarantee.

"Integrity guarantees" means that it is vanishingly unlikely that someone can make a maliciously altered clone of that repository, including its history, all the way to the initial commit, including that signature.

The git hashes already provide pretty strong integrity guarantees of this sort. We can be confident that someone re-creating a fake history cannot end up at the same baseline at the HEAD, with the same commit hash. The strength of that confidence could be increased simply by adding additional, stronger hashes as part of a commit's content.

In terms of authenticity, the signature provides confidence (not a "guarantee") that whoever signed that commit held some beliefs about the repository, sufficient to want to put their signature to it

Someone could be duped into signing a corrupted repository, believing it to be genuine, in which case their beliefs were wrong. (And do not necessarily match their present beliefs!)

Someone could be coerced into signing corrupted repository, in which case their beliefs at the time of signing are that the repository is malicious, and that that they will be harmed if they don't comply.

Someone's private key could be compromised, so that an unauthorized agent perpetrates their signature without their knowledge or consent.

An authenticity assurance is not as easily quantifiable as an integrity guarantee. The integrity guarantee rests in the digest algorithm (how difficult is it to produce a document matching a given digest), but authencity assurances involve people problems.
Johannes Gensfleisch zur Laden zum Gutenberg would be displeased.
Some of those connections are at user request and are downloads rather than uploads. For example the article mentions safari contacting Apple even if you don’t run it. Part of Safari’s contract is to show you tabs from your other devices, so it will contact Apple to download and cache this info. I believe chrome is similar.

I’m not trying to defend either megacorp, just pointing out that there is more subtlety than encompassed by this brief article.
In my remote office (which used to be at home, but is now a private, non-shared rented space), I have an ergonomic split keyboard that costs probably 6x a 'standard' one , I have 78" of screen real estate, split across 3 monitors, I have an Aeron chair (used, but worth every penny), my internet connection is completely dedicated to me and is business-class cable with LTE failover.

Typically, as a contract consultant, working onsite would have me provided a 13" cheap crap-top (my personal laptop has 32gb of RAM and 2tb of SSD in a RAID config), and then stick me in the worst "half-cubicle/half-storage/supply closet" that none of their employees would ever sit in.

Even then, there would be a non-stop stream of people dropping by, and/or "shoulder-taps".

And I am a weird introvert/extrovert - so I love in-person meetings, whiteboarding and training/speaking sessions. But I also love the quiet, uninterrupted time in a decent work environment to actually... "get stuff done".
That is squarely and fully leadership issues. I means this 100%. The way to avoid this are fully in management and leadership hands.
https://vimeo.com/471380106#t=105s

The moment when the woman tries to multitask Excel and Slack at the same time is hard to take seriously!
Then you are welcome to opt into tracking. I think the EU's approach of default being "no tracking" is good - you can always decide to opt-in, but the default is safe.
GP is just one voice in this discussion, where others have already addressed the substance of the article. Some context and history is valuable.
Relay by Puppet | Senior Software Engineer | Portland, OR or remote (5 hour overlap with Pacific Time) | Full-time | https://puppet.com and https://relay.sh

Hi!

Relay is Puppet's fast-moving SaaS/PaaS endeavor into the cloud-native arena. Relay is an event-driven workflow execution engine that helps connect service APIs and infrastructure.

We're looking for a senior-level backend engineer[0] keen on DevOps and security to make our workflow execution system robust and powerful. Our stack is pragmatic: lots of Go, Kubernetes (we run untrusted user-specified containers), Tekton, Knative, all in GCP.

In non-pandemic times, Puppet has a sweet office in downtown Portland (but you're welcome to remain remote, too). We're a friendly bunch (well, I'd like to think so anyway) and we're absolutely committed to making our customers' lives better every day. If this sounds like something you'd be interested in, please apply!

And if you have any questions or just want to chat, feel free to shoot me an email at noah@puppet.com.

(Note: No recruiters, please.)

[0]: https://puppet.com/company/careers/jobs/2808521
The reason cultural difference was an issue is one dominant culture enforced by presence culture. Without presence culture there would be no dominant company culture, it would be more distributed around the world. Also, timezones don't make it hard to have meetings, it's the same culture preventing it to happen. In my current company I sit in Europe, and it's easier for me to find a time slot for a meeting with my US and India-based colleagues than with people sitting in the same building with me.
Thanks to some bureaucrats on EU now all the world has to deal with the stupid cookie banners everywhere.
Tackling climate change is a step at a time. First, we support WFH. Then, we can move on to other things.

And yes- I would like to see a total ban on gas guzzling cars in my lifetime. I would like to see cities built around walkability, and ban all types of cars entirely in the city center. Etc. But it's a step by step process.
CouchDB + PouchDB
Its also what most of the entrprisey frameworks do. Spring will do this and I'm pretty sure ASP.NET has some form of it.
Ubiquiti is publicly traded and operates in many states with privacy laws. I wonder if the SEC or states' AGs will get involved
Just to be clear (to address the downvotes) I am _NOT_ anti-vaccine. Just contemplating the affect vaccines have in immune system evolution (in the distant future).
It might be local clothing design, but I haven't seen a back pocket so low that you could actually sit on a phone.

The geometry works out that the pocket is halfway from your back and your leg, so when you sit the phone would be at a 45 degree angle.

Half of it would be under compression from your weight in the horizontal direction, and the other would be in tension from the pocket pulling it into the vertical direction.

Not a healthy situation for your comfort, your phone's integrity, and the pocket's half-life, regardless of a phone's dimensions. In fact, a larger surface-area phone would work even more as a lever than a vaguely thicker one.

So I just put the phone in the front pockets.
Thanks, I totally misunderstood!
Because people enjoy talking and listening to people talk. Especially when it involves topics they are interested in, or people they are interested in. It is sort of a cross between talk radio and ham radio.
Excellent point. For the same reason, Ruby/Rails is worth mentioning too. The article does mention Ruby, but not Rails.
The spirit of it is good, the enforcement has been significantly lacking and the regulators who are supposed to enforce it appear incompetent or unwilling to do so.
Being GMP isn't about eliminating all errors everywhere, it's about acknowledging the inevitability of error, minimizing error through conscious processes that stop those errors, and testing to assure that you made what you made.

In a situation where maximizing vaccine production sooner saves lives, pinning this on saving a few dollars doesn't make sense. Whatever they were doing cost them quite a few dollars in addition to the lives lost from slower vaccination.

I don't know their process, but suppose the "restricting the ingredients" phase happens. What if the ingredients were swapped at the time of restriction? Same problem happens.
Thanks to some scummy advertising tactics*
So then the real secret is the key, which is provided "externally" ... how? Through command line parameters, some other config file, or environment variables? :P
I agree with this. Deployment of Perl was a pain in the ass. With PHP you literally just FTP’d the files to your normal web directory and you were off to the races.

Even today PHP still has that advantage over many other languages. To my knowledge even now you can’t just upload a bundle of .py, .rb or .jar files into a directory hosted by Apache and go.

That being said these days the other languages become their own http server and are usually fronted by a reverse proxy or two. But still that is like an order of magnitude harder to stand up than PHP.
Recursion Pharmaceuticals | Salt Lake City, Utah | Onsite, Full-Time | www.recursionpharma.com/careers

We have raised over $400M to apply machine learning to one of the most unique datasets in existence - over 12 billion images of cells under a huge number of biological and chemical perturbations, generated in our own labs - in order to find treatments for hundreds of diseases. Yoshua Bengio is one of our advisors, and helps our ML team come up with novel ways of tackling these problems.

Engineering Roles We’re looking for:

* Senior Infrastructure Engineer: Contribute to and promote a DevSecOps culture at Recursion. We strive for a culture where everyone has what they need to deliver and operate software autonomously.

* Senior Software Engineer, Analysis Platform: You'll work with Data Scientists to create a platform that allows them to quickly iterate on novel analyses and research leveraging petabytes of data.

* Senior Full Stack Software Engineer: You'll work with biologists to create experiment design tools ensuring experiments are generating high quality data.

* Applications Integration Engineer: Integrate multiple application systems to further drug discovery while supporting scientists and being a data steward.

http://www.recursionpharma.com/careers for more details and to apply.

Happy to sponsor/extend visas.

Tech: Data Science: pydata stack (pandas, numpy, scikit-learn, matplotlib, bokeh, tensorflow w/keras, etc), a cluster of GPUs for all your research ideas

Software Engineering: python, clojure[script], javascript, go, react.js, kafka, kubernetes (GKE), GCE, AWS

Our team of 200+ so far: http://www.recursionpharma.com/team
The fun starts when you later get blamed for cutting those corners in response to that true business requirement.
I imagine it has less to do with security, and more with backward-incompatible changes.
Don't think transactional e-mail like "your order has been dispatched", imagine "You are invited to our annual conference", "We miss you, here is a %50 discount coupon for your next order!", "You have been accepted to our beta program" or "Unfortunately your application has been rejected" kind of e-mails.

When there's an e-mail about something special(in a sense that it's not happening all the time), I tend find it suspicious if it is not well formatted. If it's going to make me happy, better be formatted happy and if it is going to make me sad better looks like making me sad was taken seriously.
Or the people who went to add ingredients to a AZ/Oxford batch found they were missing.
>Do you send emails through a service that let’s you see if the email was opened?

No.
I'm hoping this spurs the board to oust the CEO who seems to be the one getting the blame for Ubiquiti's shift in recent years away from making highly reliable prosumer focused products to pushing half-baked cash grabs out the door.
I, as an American, am extremely thankful for the latest version of cookie banners.

Yes, the first version of cookie banners was awful and pointless. This latest iteration (of compliant banners) is wonderful, though.

They actually give me functionality that I _really want_. I click the "manage preferences" option on every single one for every site that offers it. I opt out of everything except for strictly necessary cookies for site functionality.

I am genuinely thankful for the GDPR era of cookie banners.
> it won’t be a lazy definition like "Art" is "better than I can do”. Art cannot be limited like that and there are many things people do “better than I can do”, which are not art.

Sure, "better than I can do" is a going-in position, like my default review of anything: "It would have been twice as good if it was half as long".

I like the stated concept of virtuosity. But once the artist is sufficiently decoupled from the structure of the event by their refined genius, are not all 'mistakes' demoted to 'variation'?
You Don't See More Wheelchair Users in Public (2017)
Suggestions on what to replace a Edgerouter 6p with? Ideally something with regular security updates and zero cloud.

I was considering a the Odroid-h2+ from hardkernel. It has an Intel J4115 (4 cores, 10 watt TDP), 2 Sodimms (max 32GB ram), and two 2.5Gbit ethernet ports. Looks like it would make a decent router. There's an optional board to add 4 more 2.5Gbit ethernet ports.

Wasn't sure on the OS, OpenWRT is definitely in the running. Or maybe VyOS (the open fork of vyatta), which is relatively close to what Ubiquiti ships.
Sure, but I don't agree gearing is in the same category of the specific thing I mentioned. Would he also end up in a never-ending series of replies wrt airflow too? If not, it has nothing to do with my point, if so why change the topic..
Resemble AI | Toronto or Remote | Full-Time | UX Lead Designer, Frontend Developer, Full Stack Developer, Business Development Lead

Since HN is full of these posts, I guess we have to really try to get your attention. :)

Hey you! Do you want to help build state of the art technology? Do you want to work with a team that values creativity, autonomy, and was working remotely before it was cool? Well, look no further (seriously, there are hundreds of comments below this).

Resemble AI creates high-quality synthetic voices that capture human emotion. We're a venture-backed high-growth startup that's looking to shake up an entire industry with state of the art AI. Our product changes the way that thousands of brands, media companies, creative agencies, and game studios work with voice content.

We’re a remote-first team that thrives on flexibility and creativeness. We cover expenses for office space, equipment, and all of the other perks and benefits that make you productive. We also believe that to build an enticing product and solid team is by encouraging innovation is by enabling continuous education. That's why every Friday is a day that you can use to work on anything you want, Resemble-related or not.

We're hiring for four (that's right, FOUR!) roles:

UX Lead Designer - The hardest role in our company. We're building AI that requires out-of-the-box thinking when it comes to product design. We use a lot of Figma to run user tests. Javascript knowledge would be a bonus.

Frontend Engineer - Product-driven Engineer that is able to craft beautiful UI. We work with largely with React and pure JS with Rails on the backend.

Full Stack Engineer - Can you break the entire stack? You're the right person for this job. Work on our Rails app, with sprinkles of React, and Python for the deep learning. Everything is dockerized, and we use Kubernetes to deploy.

Business Development Lead - As our lead biz dev, you'll be responsible for guiding our customers from day one. You'll also be responsible for maintaining a high level of satisfaction throughout the customers journey and providing valuable feedback to product and engineering teams.

If interested, reach out directly to me: zohaib [at] resemble.ai
For most of their devices you can run 100% locally.

That said, my UAP-AC-PRO at home has been on the fritz lately and I'm a bit lost on what I should upgrade to.

This news comes on top of a lot of issues I've had with them lately, mostly around firmware updates and broken promises.
What was the main drive for Ubiquiti customers to buy Ubiquiti? I don’t mean this as a troll question, but as an engineer myself I always preferred my TP-Link mesh which serves my entire house and garden perfectly blazing fast internet and I never had to go to the cloud like Ubiquity customers. What do they offer for so many technical people to willingly undoubtedly compromise their security by using their cloud as well?
Biden broadband plan will be hated by big ISPs, welcomed by Internet users
Judging from HN discussion, his audience was offputted by article.
What happens if a node fails?
The sad thing is we already have a privacy friendlier alternative to spy pixels: Read Receipts, defined in RFC 2298. They are already user opt-in. Don’t most mail agents support them?
Some monitoring is for operations. Apple needs to know your phone number of iMessage (if you have that enabled with most people do). Google and Apple will track the location for the "find my device" features that many of us use.

There are potential security reasons Apple may be using the information, too. For example, if more than one phone has the same phone number, IMEI, etc... it may be that one is spoofing the other. Do they look to catch that?

One of the things we don't talk enough about (or look into) is what info is being collected and how it is or can be used. Some of this is a black box at the companies and we need to go on reputation. It would be great if more of that use was opened up to people.

For reputation, Google is known to use all the data they can to influence behavior to make money. There have been books and papers written on this and the history of it. Apple is not known for this. So, their reputation is a little different. Just for context.
Citymapper | Multiple Engineering Positions, growing team | UK REMOTE, HQ in London

Hi - I am Marius, Head of engineering of the transport data team @Citymapper, responsible to expand our transport data coverage around the world.

We provide an urban mobility app, getting our users from A to B across all modes of transport - from trains to buses to cycles to private transport providers to walking and more in 70 cities (and growing, we are expanding, hence recruitment).
Join us and work on an app that is a daily use-case for you, your friends and millions of city-dwellers around the world.

See all positions posted here: https://citymapper.com/jobs

Some of the above listed jobs:

- Transport-data engineering team: We are increasing our coverage of transport data around the world. For that we are building scalable systems allowing us to deal with messy datasets by building build tools allowing us to maintain a high transport data quality while expanding to new countries. https://citymapper.workable.com/jobs/1459093

- Full-stack engineers: We are looking for multiple full-stack engineers. We have a user facing web app - however we'd really need you to be working on our internal tools products that help us build high quality transport data.
You should have experience in backend tech (Python or similar, Node, deployment of modern web apps, ...) and frontend (Javascript, React, UX thinking). https://citymapper.workable.com/jobs/1392898

- iOS Developer: We're looking for experienced developers who enjoy building high-quality custom UIs to help expand our award-winning app: https://citymapper.workable.com/jobs/7972

It is best to apply using the above links - but feel free to contact me directly at marius@citymapper.com if you have any questions.
I have a Unifi LR AP I want to replace. I have a three level home and this AP really struggles to provide coverage. I think my mistake was getting a directional AP.

Are there any decent consumer alternatives if I'm done with Ubiquiti?
Lol just 94 people protested this contract at msft. I don't want to debate if it's the people at Microsoft or the suppressed voice by upper management. Either way Microsoft gets away with a lot of contentious business decisions as employees are more inclined to keep their head down.

Also about salaries, try creating a spreadsheet for salaries at Microsoft. I guarantee you, you will be fired within the week.
Nothing in any of the literature you've shown suggests that this could lead to a cure of one specific type of cancer.

All the literature speaks of that this technique can be used to treat cancer in general, even though the treatment's nature itself relies on the specific properties of specific cancer cells as to not be as destructive as most treatments that exist today.
Other countries do not requiring their citizens to pay for common medical emergencies, which is often considered "better".
This is the type of practical experienced based advice that was missing from the original post.

I completely agree with you.
Isn’t it like being a radio station with 5,000 listeners but claiming to have 50,000 listeners and charging advertisers on the basis of having 50,000 listeners?