skysight-inc/HackerNews huggingface dataset:
Great points but email is the easiest thing to A/B test in the world. If you were correct, somebody would have figured it out by now.
Grab one of these:

https://www.amazon.com/dp/B01H2QJTM4/ref=cm_sw_r_cp_apa_glc_...

And put Opnsense on it.

Guaranteed security updates, clean GUI interface, open source. Set it up once then forget it.

If you want an AP there are many options on Amazon. For maximum security prevent the AP from being able to access the internet.
While I agree that the world would be a better place if people refused giving as much information as possible, the specific fix here is to not consider social security numbers private information in the first place - they're clearly identifiers, not shared secrets. There is nothing about them that verifies anything - it's basically the database-friendly version of your name.

But yes, this could have all been headed off if the social security act had prohibited private organizations from requesting, using, or storing these identifiers in the first place, for anything but immediately passing them on to tax authorities. A Customer ID is good enough for all non-credit uses, and credit should require actual in-person verification to issue. But this is the general shape of totalitarianism in the US. The government mandates the barest minimum of systems, companies lobby against any restrictions that would prevent their abusing it, and we end up with a legally-mandated freedom-destroying system invading most aspects of our lives.

PS I've got to wonder about a blockchain solution for keeping a public catalog of leaked PII that gets abused for verification. Make the "exploit" plain as day and companies will have to change. Right now the carding community keep this to themselves, and out of sight is out of mind for the companies that continue to abuse it.
That's kinda where my mind went - even though it's not as exciting to a developer, that'd be a lot more accessible for non-technical people. Worst-case scenario, if you need a more fully-fledged app down the road, you could write a small script to import the .csv into a database.
Did you? Feel free to re-read it and explain what I got wrong. I tried to be fair and non-inflammatory while still making the point.
https://en.m.wikipedia.org/wiki/Relativity_of_simultaneity
I've tried getting into Category Theory many times over the past few years and the only thing that actually worked is Category theory for Programmers by Bartosz Milewski (lectures[1], book[2])

1. https://www.youtube.com/playlist?list=PLbgaMIhjbmEnaH_LTkxLI...

2. https://bartoszmilewski.com/2014/10/28/category-theory-for-p...
The situation in Egypt is different because the USSR supported Egyptian independence against Western powers that wanted to take control of the Suez Canal. See: Suez Canal crisis.
How do inventors decide what to work on? “Pump” Carpenter and the grain binder
Again the maintainers solely responsible for that debacle are blaming others. It's perl6's fault, it's ruby's fault, it's javascript.

Whilst they dont admit they had nicely developed specs and list of features to implement (for perl6), but couldn't manage (technically) to implement even the most simple ones from 2002 to 2021.
Management is not-existing, developers all went elsewhere. You don't want to argue with people you have no idea. Famous is e.g. how Russ Cox was treated when re2 and backtracking DDOS was presented to p5p: https://perl.perl5.porters.narkive.com/guZUVhlv/article-on-p...

Just a few amateurs and system admins, who use it for their job are dabbling with it and keep destroying the codebase. It was unmaintainable in 2002, and it's more so now. The language is fine, p5p (the development process) is totally broken.
Mission Lane | https://missionlane.com | Remote, Richmond, VA, San Francisco, CA | Kotlin, Java, React, Product, InfoSec, Cloud

Mission Lane is a fin-tech company on a mission to help everyone gain access to fair and clear credit. Philosophically, we believe in creating a relationship where everybody wins-- our customers do well when they succeed with our credit cards and we do well when they prosper. It's that simple. Our company is here to provide our customers best-in-class products and service and raise the bar on fair credit access.

Our teams and customers are growing rapidly after a $500M (debt and equity) Series A round last year. Our backend is written mostly in functional Kotlin, but experience in this isn't necessary. Front-end is React. We run on k8s on GCP. We're working on a number of migrations and green-field projects. It's a great time to get in.

worth.becker@missionlane.com <- Hiring Manager https://missionlane.com/careers
Are MikroTik access points still a royal pain to configure and maintain? I use their switches, but not their APs.

Decades ago, I was a network engineer working in production data centers. I’m used to setting up switches manually. But I have no professional experience with setting up meshed WiFi networks. I like that the Ubiquiti APs “just work” for the most part.

I’ve started to notice weird AP/client failures with my ubiquiti gear and debugging is a nightmare. It seems that ubiquiti has hidden a lot of useful information in an overzealous effort to streamline UX.
SEEKING FREELANCER | Remote only, any timezone

I am currently working on a large project and may need occasional short-term sub-contracting work. Think initial cloud set-up, mutual code reviews, etc. As far tasks go I'll be assigning work but would really like another senior who can take a feature and run with in. The stack is more-or-less set but there are still a few things left to determine. Most of the work will be short tasks (a week or three) and the project is estimated to be complete by the end of this year. You can be in any timezone, but I am primarily working on this after my dayjob, so approximately 21:00-02:00 UTC during the week. Availability to discuss initial specs during that time is a plus but not required; you can do the work whenever (and where ever) is best for you.

Tech: Node, Vue, Azure CosmosDB, RabbitMQ

My email is in my profile, please send a link to your GitHub profile or other portfolio of work
At the risk of conflating Gmail and email - doesn't gmail download automatically and serve images in emails from a google-owned server? Seems like this would completely defeat this kind of tracking.
Airbnb Created an SEO Moat That Seems Invincible
I have a unique perspective as someone that has maintained unofficial builds for LineageOS, and used both CM and LineageOS as daily drivers. I stick with stock pixel these days for various reasons, mostly security. I think many users of aftermarket firmware were trying to get rid of the awful stock apps (browsers, keyboards, mem hogs) that manufacturers and cell service providers forced onto users. As Android has matured, Google has been enforcing stricter rules for what vendors put on phones. Also newer android versions allow you to uninstall much of the preinstalled apps. That could explain part of the decrease.
How to Practice Medicine Online
LaunchDarkly | Oakland, CA | Onsite and Remote | https://launchdarkly.com

LaunchDarkly is a Feature Management Platform that serves over a trillion feature flags daily to help software teams build better software, faster. Feature flagging is an industry best practice of wrapping a new or risky section of code or infrastructure change with a flag. Each flag can easily be turned off independent of code deployment (aka "dark launching").

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/launchdarkly

We're hiring across the engineering org. Our open positions are here: https://launchdarkly.com/careers/

Tech Stack: Golang, React, Redux, MongoDB, NATS, ElasticSearch, Terraform, Ansible, and Redis
Niche | Pittsburgh, PA | Full-time | Onsite and Remote (USA only) | https://www.niche.com/

Niche is the best place to research U.S. colleges, schools, neighborhoods, and companies. Every month millions of people use our easy-to-read and comprehensive report cards, rankings, and reviews to choose the right schools or neighborhoods for them. As a unique blend of data scientists, engineers, parents, and “yinzers”, we are looking for exceptional talent to grow our company. Your ideas and work will make an immediate impact on our products and millions of users.

Senior Mobile Engineer
https://niche.jazz.co/apply/D47d0Wephn/Senior-Mobile-Enginee...

Sr. Product Manager, Mobile App
https://niche.jazz.co/apply/1ema4sfnTI/Sr-Product-Manager-Mo...

Software Engineer, Front-End
https://niche.jazz.co/apply/8ciWZD7eU0/Software-Engineer-Fro...

Sr. UI/UX Designer
https://niche.jazz.co/apply/wZGMW0T3JB/Sr-UIUX-Designer?sour...
US Considered Blasting Alternate Suez Canal with 520 Nuclear Bombs in '60s
Dictionary.com | Senior Front End and Back End Engineers | Full-time | Remote (US)

Dictionary.com (Also Thesaurus.com) are looking to build the next phase of educational tools around English Vocabulary for all levels of learning. We are looking for Senior NodeJS and React engineers to join us! We are currently distributed between Oakland, CA and Detroit, MI, with the majority being in Oakland.

Senior Front End Engineer - https://www.myrocketcareer.com/ShowJob/JobId/486951/SeniorFr...
Senior Back End Engineer - https://www.myrocketcareer.com/ShowJob/JobId/501661/SeniorBa...

Apply online or shoot me an email mathew.piccinato[at]dictionary.com
How to Kill a Zombie Fire
I could actually believe Oracle _thought_ they had acquired this. Like that time they declared themselves "leader in cloud IaaS" :(
I installed Lineage 17.1 on a Fairphone 2 yesterday. If only I had waited one more day...

I can +1 the recommendation though. Lineage runs much better than the original OS and breathes life into what would be e-waste.
Tyk | Full Time | REMOTE (see tags)

At Tyk.io we are building the best API management solution.

We really value work-life balance and equal opportunities to everyone.

I can't imagine the better team to work with.

We are looking for a lot of roles at the moment.

- Consulting Engineer - Americas

- Min/Senior Go Devs - EMEA

- Product Owner - EMEA

- UX Designer - EMEA

- Customer Education Lead - EMEA

- Strategic Account Manager - APAC

- Sales Development Representative - Americas

- Account Executive - APAC

- Support Engineer - EMEA

All open roles can be found here - https://tyk.io/current-vacancies/
Fair enough, but there is a very clear trend that informs the assumptions. This "mess" would only have been the tip of the iceberg of anti-union activities. I would not be surprised if they had been manipulating social media in a more subtle way.

https://news.ycombinator.com/item?id=26635652

https://news.ycombinator.com/item?id=20602962

https://news.ycombinator.com/item?id=26010662

https://news.ycombinator.com/item?id=18077434

https://news.ycombinator.com/item?id=25189167

https://news.ycombinator.com/item?id=14566059

https://news.ycombinator.com/item?id=26268147

https://news.ycombinator.com/item?id=26186094

https://news.ycombinator.com/item?id=24700936
Yes, it's a gigantic link in like the third paragraph. But here: https://github.com/kgsws/doom_ace
Issues of fairness and pay are the very reasons unions are formed. Setting fair boundaries on jobs is within the scope of many unions touching the entertainment industry.
Normally you'd think the burden of proof would be on the side requesting considerable resources and infrastructure to send something that doesn't render properly under the most basic privacy settings and cannot be displayed text-only (like in notifications).
Steps to building a secure mobile banking app
If you have 2FA enabled are you protected from this?

I suppose an automatic firmware update with bad code in it could still hit me?
The Nokia E72 was my favourite phone form-factor. I really wanted to try Android but was so resistive to keyboardless-phones that I bought a HTC ChaCha, regretted it immediately, and finally relented. I still miss a keyboard.
Why Your Calc() Function in CSS Might Be Broken
This seems completely mute if the user has opted-in to the email in the first place, you can just condition this data-capture in the T&C?
In my experience Google encourages good security practices. I'm interested in hearing if you have a different experience.
It’s not a lie at all, since it is specifically talking about the rendering algorithm, not the entire program.
Not to discount the threat, but 'vms spun up in their cloud' is ...exactly what coinminining attackers do. It's so frequent, it's even called out as a 'thing to watch your bill to notice' in amazon security talks/etc.
Gain access, launch N VM's, where N is as many as your credential and the cloud account limits in place allow, mine coins 'for free', and move on.
I've looked, haven't found anything clearly better. Just got a Unifi Wifi-6 LR AP. Seems reasonable to just block APs from internet traffic and run the AP management software locally (also with traffic blocked from the internet).

If you find something better, please post.
It's all nice and stuff, but does it support VoLTE ? With impending shutdown of 3G networks in USA next year, without VoLTE, you can't really use phone part of the smartphone
I don't want to be the guy who just complains about everything and provides no solution, but eOS is, at the end of the day, just Ubuntu, which is just Linux.

I recently installed eOS because I was excited about the following things: paid app stores, a simpler and more intuitive UI, and a resource-light desktop. Target machine was a Dell XPS laptop with 8GB RAM and a previous gen i5 - outdated but far from 'old'.

Sleep and hibernate did not work because the installer did not add a swap partition. It took me forever to connect my Bluetooth headphones and the sound quality was really flakey. The touchscreen didn't work well and didn't support gestures or scrolling. Battery life was horrible compared to Win 10 or even Ubuntu. The native apps like Mail looked good but would often freeze or crash (esp when searching).

Without a focus on fundamental stability, there's no way for me to appreciate the UI or the paid apps. I went back to Kubuntu.
The GDPR delegates the specifics of the requirements to the DPA of member countries.

The French CNIL, for example, has already fined Google and Amazon $100M+ for this very issue: https://www.huntonprivacyblog.com/2020/12/14/cnil-fines-goog...

GDPR is a nightmare and a case study in how regulations can terrorize entire industries or the abilities of individuals to innovate freely. Just read the chronology of events in that link above and try playing devils advocate that the CNIL did not amend those laws to specifically target these two companies. It's scary.
If your product is super abstract or requires research and new tech, that’s even more reason to test the waters first and make sure there’s a market you can sell to before embarking on months or years of work.
This is the Accellion breach, not a problem with their internal systems. This box is used for 'secure' large data transfer. Like a Dropbox appliance basically. Except Accellion write rubbish software and the devices were ruthlessly shelled. Insert :Cheeto lock: meme.

Arguably, the hundreds of Accellion clients should have separately encrypted their data and used some sort of PKI to exchange public keys. But try getting users to do that properly.

Unfortunately, since Broadcom bought Symantec there hasn't been any good PGP solution for corporate file exchange.
Doesn't gmail block this since ever?

IIRC gmail doesn't allow any outgoing requests of email stylings. It strips it out or rewrites it to a re-hosted URL.
I wasn't advising him to not explain things, I was pointing out that he's saying something that's false when interpreted with standard terminology.
U.S. Home Prices Rise at Fastest Pace in 15 Years
The larger tech companies give everyone an office. Microsoft started the trend back in the 80's.
Back in the 2000’s Perl was my bread and butter.

The thing about perl6 was it over promised and... well... never delivered. It was to be a from scratch rewrite. It was gonna have all these space-age feature like a VM to host other languages like what .net or Java does. It was gonna try to fix years of baggage. It was gonna be super hot. But it never shipped in time.

Meanwhile python was an excellent alternative. Ruby on Rails was just coming around. C# was becoming a real contender (c# remains one of my favorite languages...).

All those languages were getting tons of community support. Perl’s community was starting to slow. It’s top devs were busy with v6. V5 was not getting any cool new features. And it was made quite clear that v6 had many breaking changes from v5.

I dunno. I file perl6 in the same bucket I file Netscape and Winamp. Proof that doing ground up “from scratch” rewrites are great ways to kill forward momentum on your product. Rewrites take much longer than any estimate. To pull it off you need to have unlimited budget and the ability to support and improve the current version while also building a brand new version whose scope constantly creeps to maintain parity with your current version. The second you stop maintaining and improving what you have in the market today, your competitors will eat your lunch.

It is what killed Netscape to a large extent.

It killed Winamp to a large extent.

And it put a couple nails in perl’s coffin too.
A-greed
I dunno man, before that paper, it was very very difficult to discuss the fact that almost all papers sucked monkeyballs, and afterwards it got much, much easier.

I really appreciated his work, and like the OP, am pretty disappointed in his behaviour since the pandemic started.
> What if it requires research and new types of engineering?

This is even more reason to do market research before sinking a bunch of cost into R&D!

The two cases where you can spend big on R&D without much in the way of market validation are:

1. The product is obviously useful, e.g. self-driving trucks

2. You are going for a patent / aqui-hire play

Point (1) is particularly dangerous when you get attached to your product idea.
Outschool (YC W16) | Remote | Full-time | Senior & Mid-level Full Stack Software Engineers https://jobs.lever.co/outschool/

Since 2015, we’ve been growing a community marketplace for live classes that inspire kids to love learning. Now we’re scaling it quickly to support distance learning for kids affected by school closures. Our business is growing explosively and as of last month, 700,000 learners have taken more than 4M class hours. We recently announced our $45M Series B funding round, led by Lightspeed Venture Partners. Our sales have grown 2000% in the past year to reach a run-rate of more than $100M. We're also making $1M+ of live online classes available for free to families in need and adding thousands of new teachers in weeks.

We need senior and mid-level full stack software engineers to build up a complex product for a highly engaged audience. We have a pragmatic culture that promotes focused collaboration and iterative development.

Stack: TypeScript, React, Node/Express, Apollo GraphQL, PostgreSQL, AWS CDK, CloudFormation, AWS Batch, AWS Fargate, SQS.
> I get inconvenienced by other people's code all the time, but it's so easy to assume when you're looking at the bug "they should have known this was going to happen / tested for this" when you started your investigation knowing the trigger for the bug.

When I was a junior dev I had a tendency to want to rewrite everything. I remember thinking that most the code I was working on at the time was overly complicated and could be done with far fewer lines of code. Recently I realised I might now be the guy that now overengineers and writes overly complicated code. I think this is common trend for devs too, as you mature you get really good at anticipating future problems so tend to write code that doesn't just meet the current requirements, but can scale into likely future requirements.

I feel like I've kind of gone full circle and now and I'm starting to question if there is a middle ground between the simplicity of writing simple code to solve a very specific problem and the extra time required in writing code that scales. The reason I say this is because I realised devs working on my code often don't fully understand the reasoning behind what I've written anyway and I and the devs working on my code often don't have the time to read / produce documentation explaining the code in detail. I also can't guarantee I'm always available to review PRs and ensure the code quality is maintained, so perhaps most of the time it's wasted effort.

Also often you just don't know what kind of constraints devs are working under. I know for a few projects with tight time constraints I've been asked to do the bare minimum to patch certain bugs or add some functionality so we can ship ASAP. I'll normally push back on this if I feel it's a bad idea, but code quality isn't always the most important consideration.

I realise I'm much more open minded when reading code now because after 15 years as a dev I'm still not sure I always do things right myself.
In theory, that's true, unfortunately often "professionals" write poor code like amateurs and then spend all their time in debugging :-(
> Stealth messages could be sent without taking the phone out of your pocket

Remember when phones were predictable enough that you could remember where everything was and navigate anywhere through memory alone?

Nowadays you need to be very skillful to even open the app you meant to, let alone press the right keys on a keyboard.

Heck, sometimes between all of notifications, video overlays, recommendations, ads, frequent redesigns, non-deterministic search results and whatnot, you might congratulate yourself for being able to do the thing you meant to at all!

(And no, I don't have any physical, vision or mental impairment, and I have grown up with technology)
That's just MikroTik, their shipping is always wonky / not what we're used to with other consumer electronics.
386 protected mode was not tied to 'boot from floppy'. It was more of a do these set of instructions and you can flip the cpu in the 386 mode. Many of us had an extra boot floppy that would not load xms or ems which would conflict with protected mode (as it wanted the same memory as those extenders). I personally used a 4dos script that would turn things on and off with a set of prompts if needed. Special boot floppies were pretty much the norm for other systems though as they used it as a form of copy protection. Many of the later origin games would flip themselves into protected mode so that special path was needed. It may have been one of the first as that was right around the time many games started using protected mode (ultima 7 was another if I remember correctly). As memory prices has started to fall a bit and and it was 'only 150 dollars per MB'