skysight-inc/HackerNews huggingface dataset:
Location: Portland, OR

Remote: Yes

Willing to relocate: No

Technologies: Ruby, JavaScript, Go, SQL, React, Redux, Postgres, AWS (Lambda, DynamoDB, EC2, API Gateway, S3, SQS, CloudFront and CloudWatch), MongoDB, NodeJS, ExpressJS, Sinatra, RESTful APIs, Git, HTML, CSS.

email: eustisic [at] gmail.com

Projects/Resume: https://www.linkedin.com/in/ian-eustis-1b28a171/

Beekeeper-cli whitepaper: https://beekeeper-cli.github.io/

I am an experienced software engineer, and co-creator of beekeeper-cli, a backend-as-a-service deploying a virtual wait room as a solution to bursty traffic resulting from one off events.
There's a deeper "independence" in American culture that has nothing to do with north vs. south that foreigners can smell a mile and a half away, even (especially?) on "northerners".
Or perhaps the choice makes a difference, but neither is sufficiently secure. Both likely have dozens if not hundreds of undiscovered array-out-of-bounds errors, stack overruns, and race conditions, some of which may have security implications.

I don't think that "re-write everything in Rust" is the final solution in terms of security, but in terms of something like the Linux kernel one can at least see how such a (difficult and unlikely) project might at least address many of the low-hanging fruit so developers can shift their focus to fixing higher-level vulnerabilities.
I would really like to see a move toward purpose built systems and actually software engineering. General purpose operating systems really speed up development time, but I am not sure we need critical infrastructure to be capable of playing Doom or running generic ransomware. In the same vein, it would be nice for the people who built these systems to be able to provide tolerances and document failure cases. This would be mandating memory safe languages, understanding dependencies, mandatory penetration tests, mandatory fuzz testing. We have standards for building bridges but not for computing systems.

Another policy point would be data de-risking. It has been shown time and time again that companies cannot protect their own data, not to mention user data. I think we should make it very costly to be breached and lose PII. It would raise the bar a lot for who could do what, but I do not think companies have really demonstrated that they can handle this data responsibly. These data losses have even become a national security risk. [1]

1. https://foreignpolicy.com/2020/12/21/china-stolen-us-data-ex...
The article doesn’t mention how much natural immunity exists in the community, which is presumably high given the large outbreaks in Brazil.

Is there a study which has calculated a more precise herd immunity threshold, taking this effect into account?
>The east bay has hundreds of people on a waiting list just for shelter space. There aren't enough beds for the night, let alone supportive housing, so we haven't even come close to trying the "build all the houses that these people need" (and make they available) strategy.

That's because people come from all over the country, since the bay area is homeless friendly. The best solution is to make project room key permanent.

>EDIT: FWIW I learned about the waitlist problem while listening to this podcast: https://99percentinvisible.org/need/

I listened to that too, and in the final episode, you hear exactly what I'm talking about. In the interview with K.C., the narrator mentions that she had been in a shelter, but they didn't allow dogs and she didn't like the lack of privacy. Some people won't take the help you give them, and not preferring the solutions offered doesn't give you an absolute right to public land.
Correct there is an income limit for direct contributions to a Roth IRA.

Absolutely absurdly, there is no income limit to do a post-tax contribution to a non-roth-IRA, and then do an IRA to Roth-IRA conversion.

---

With no income limit you can:

- $6,000 post-tax dollars contribution to IRA, then do a Roth Conversion and file a IRS8606.
This is a Backdoor Roth Contribution

- $19,500 pre-tax dollars contribution to 401k.

- $xxxx company matching dollars to 401k.

- ($56,000 - $19,500 - $xxxx company match) contribution to After Tax 401k, then 401k to Roth 401k conversion
This is a Mega Backdoor Roth Contribution

- HSA $3,600

---

Tax implications:

- The money converted into the Roth IRA (the $6,000/year) you paid tax on the principle going in, and are not taxed on it nor on capital gains coming out.

- The pre-tax 401k dollars (yours & matched) you did not pay tax on the principle going in, so you are taxed on the principle and capital gains coming out

- The after tax 401k contribution, converted to Roth 401k, you paid tax on the principle going in, and are not taxed on it nor on capital gains coming out.

- The HSA you did not pay tax on the principle going in, you are not taxed on capital gains or principle going out, as long as it is for qualified medical expenses.

---

Extra Notes:

- Do not get tricked into rolling over old employer 401k plans to a traditional (non-Roth) IRA. If you do this, there are very complex tax implications when doing backdoor Roth contributions. If you have an existing Traditional (non-Roth) IRA, do lots of reading or buy a couple hours of time from a "Fiduciary Financial Advisor". Do not ever trust a "Financial Advisor" under any circumstances. They do not have your best interest in mind, they have their commission in mind. Fiduciary Financial Advisors don't make a commission from your decisions. Make sure that if you go this route, you find someone who only does Fiduciary advising (and doesn't split time).

- You should carefully evaluate timing on doing a 401k to Roth 401k conversion of your withheld earnings and company contributions. If you have a year that you have lower income (back to school, travel, year off), you should probably do the conversion then. The money will be taxed as ordinary income, but then treated as Roth dollars coming out.

- Beware of employer provided retirement plans with high expense ratios. Anything over about 0.30% is a ripoff and you are wasting money. You have to dig deep into the fund information to find the expense ratio.

- Shockingly, many default investments are target-date plans, and they charge outrageous expense ratios, I have seen as high as 0.90%. Compounded over 30 years this will cost you a literal fortune.

---

If you are a high earner with no health issues, you should be saving $65,600 per year in the above tax advantaged strategies.

Look up the BogleHeads wiki and guide for where to invest the money (Total Market LOW cost, unmanaged mutual funds).

This is not financial advice, hire your own fiduciary financial advisor
Ohhhhhhh I think I'm getting it. Then they grow up into a big tree and that's where Apples come from?
"I don't think you would in prod, unless you were happy with it all running on one host."

1) create a VM, set it up with docker compose to auto start -- have it reference code on a network drive.

2) take a an image of 1)

3) create a load balancer, balancing that image. GCP load balancers/instance groups even a way to rollout images.

That is %80 of k8s right there (endpoint, scaling, containers, rollouts).
> If I may ask, why don't you like C#? I totally get the php thing - I cannot stand it at all either.

I'm just not good at it -- I came in expecting it to be better Java (better async ergonomics, slightly less verbose, etc) -- but after working with it (while working with a client no less) I found that I disliked it just as much as Java and had a relatively rough go of it. There are a lot of things that I think contributed:

- .NET4 was becoming .NET core / .NET standard while this project was happening

- I needed a windows VM to work on the project (dotnet was not ready for prime time yet, so I couldn't depend on it to build the legacy code)

- Packaging was uncomfortable and a source of pain (also had to do with the core/standard transition) -- after you've used NPM/yarn/cargo/stack(haskell) nuget+chocolatey (IIRC?) felt like a huge step backwards, basically had to be IDE driven.

- EF was so incomplete (due in part to the core/standard transition), and so much worse than my then-and-now favorite TypeORM.

- The async paradigm and how they handle results are a little weird, IIRC awaiting a task would mean you received the task, not the result of the computation of the task?

- IIRC there was no Option type. Java learned this lesson in 1.8 IIRC (and it rocked my world a bit, in a good way), but C# not taking it up is weird to me.

- The codebase was just like you'd expect an old Java codebase to be -- i.e. terrible notfun.

- Everything was heavily IDE/visual studio driven which was not fun for me. Visual studio is an amazing tool no doubt, but a lot of it is unintuitive to me at this point after years of straight emacs/vim and occasionally sublime/atom/vscode. This is more personal than any other reason.

I just felt like it was so much worse than Typescript/Javascript for questionable gain -- I had worked with this same client to deliver a JS codebase that was easy for them to work on, on time and at budget. The C# side felt much worse to work on, and I just took it to mean I'm not good at C#, and I have no desire to be. The ecosystem you're almost forced to accept (appveyor, windows machines + powershell, etc) is just not my cup of tea.

I'm spoiled for choice these days -- if I need performance for a backend thing (and need to hand the project off to someone) I can choose Go. If I really need performance I can pick Rust. If I don't need performance-per-say I pick Typescript (it's still generally better perf than Ruby/Python). If I want to get it right (and really craft software) I pick Haskell (and of course it's near impossible to hand that off to most companies).

In the end C# is a great language (whether I like it or not), but it fell short of my expectations as a "better java". If I'm going to do Java I'll just do Java/Kotlin/Scala/Clojure. I think I could go my whole life without ever touching C# again, so was an easy rule to make for myself.
It's a change, certainly, but mobile devices are a much bigger risk to your internal network than a Echo device is. Both are general-purpose computers inside, but the attack surface of a phone is way larger, and there are plenty of recorded instances of phones being compromised. The Echo devices have a good security track record, and I feel they remain much less likely to be compromised than any mobile device.

The number of prior vulnerabilities is totally relevant. Your threat model required a vulnerability to be found in these devices allowing them to access your network maliciously. I am presenting data showing that the such a threat is unlikely, especially when compared to mobile devices that you (presumably) already grant unfettered access to your network.

Sure, if you feel that an Echo device is now a larger threat than it was before this feature was enabled, you may want to get rid of the device. I don't feel that way, I think the small increased threat to my network is outweighed by the value of being able to find my dad's keys when he drops them (and the attached Tile locator) outside the home of someone with an active Sidewalk device.
This might sound crazy but I have one giant .md file with an entry per day with notes of whatever I was working on.

Days are divided with (-) character like:

-----------------

At the start of each day I just write a list of todo's and check them throughout the day.

I then copy them to the next day if not completed.

Have been doing this for several years now. I always keep it open as a tab in the IDE.

Will periodically truncate the file and archive it to avoid getting to big.
75% of population getting a vaccine with 50% efficacy could induce heard immunity, it depends what the reproduction rate is. Covid has a fairly high reproduction rate so it seems unlikely (although the 50% number might be incorrect), but as a general principle its possible for 75% of pop with 50% efficacy to trigger heard immunity if the viruses reproduction rate was low enough.
Seems apropos:

" We are at the end of a five-thousand-year-plus historical process during which human society grew in scale while it abandoned the early indigenous wisdom councils and communal decision-making. Power was centralised in the hands of increasingly specialised 'elites' and 'experts' who not only failed to achieve all they promised but used secrecy and the control of information to deceive the public into allowing them to retain power over community resources that they ultimately looted."

⇐ Robert Steele, The Open-Source Everything Manifesto
>Will it be illegal at the point where one is purchasing a product or service and determines where their money will go based on an opinion they hold?

But we are not talking of a personal choice to boycott, or even to persuade others to boycott. That action is passive in nature and falls entirely within an individuals liberty to withdraw consent.

Cancel culture involves aggressive mobs that will use covert and unethical means such as targeting a company's advertisers, clients and suppliers, or relentlessly harassing the HR department in order to induce them to fire somebody.

As the OP in this thread noted, this is comparable to vigilantism.

>Good news! These laws exist.

Libel laws are hard to use against anonymous callers and letter writers calling you a 'Nazi.' It is most unlikely that the recipient of such a call will be persuaded you are a literal Nazi, but they will be influenced and intimidated by the strong hostility and disapproval expressed. It would be hard to prove in court that you had actually been libeled, even if you could bring that person to court, but you will still have been damaged.

>When "your side" starts advocating that people should not have, hold or act on opinions, you might start wondering who you're on side with.

But cancel culture is intolerant of other's right to freedom of conscience, and it goes beyond mere disapproval to active personal destruction.
...am I the only one having ansible deploy compose across machines?
> If they were even a little bit serious about ever getting power out, they would not be starving everything except hot-neutron fusion.

> Actions speak louder than words. Their actions are deafeningly clear.

Yes, their actions are pumping money into it, and dismiss that without a source by saying they are doing so “simply to create jobs”, which is an absurd idea when they could have created those jobs with other research.

They are pumping money into it because they hope it will bear fruit.

> We already have a solution to all energy problems for the foreseeable future: the cheapest ever devised, with costs still plummeting. All we need is to build it out. Building it out slower delays the full solution, in exact proportion.

No we do not, wind and solar can not currently supply entire countries, even on a theoretical level, the way a single fusion reactor could theoretically supply an entire country from a bucket of sea water per year.
I know you're not going to like it, but you can make it go away by switching to a slightly lower resolution. So the external monitor will be doing the scaling. It's slightly fuzzy, but the quietness is golden.
vs a what?
Same. I don't mind paying for content, which is the flipside of ruthlessly blocking ads. And I don't have time to read the WSJ site each day.
You really trying to say it isn't the vaccine. When vaccine availability is the only positive thing that changed?
"You know what's great about getting COVID? Afterward, you have increased immunity to getting COVID!"
In 1978 I could get 0.4gallon of milk and 4.8 first class stamps for the price of one gallon of gas (0.63)

I can get 1.4gallons of milk and 5.5 stamp for the price of one gallon of gas (3.04).

In summary, gasoline is more expensive now then it was in 1978 and does not match the graph.
Many developers have been harmed by large cloud providers turning their software in SaaS and killing their source of income (or even small donations).

Some moved from weak licenses to AGPL. Some, like MongoDB, to closed source.

Based on this evidence, it's very likely that Linux has been protected by GPL.
Yip, same here, 4K is not affected, but QHD is.
You can’t opt out of Sidewalk after June 9. You can opt out of Apple’s Find My network any time you want on a per device basis.
How do you know you know Dallas is not a high vaccination area? We only have data at the state level. It may be that the urban areas have high vaccination rates while the rural areas have vaccination rates.

The big improvements are for sure a combination vaccination, natural immunity and people who are still using masks and social distancing.
Firebird 4.0 Is Released
The motor basis for misophonia (selective sound sensitivity syndrome)
In the US, this depends a bit on which state you live in.

For wage garnishment usually it is the LESSOR of 25% of disposable income (income after taxes and involuntary deductions) OR the amount that your income exceeded 30 times federal minimum wage (currently $217.50/week).

Nintendo could still go after other assets (bank accounts, property, etc) and the defendant can also declare bankruptcy.
I regularly go out and have picnics with my wife and have never once been harassed about sharing a bottle of wine with our meal. My family goes camping over Memorial Day weekend to state parks all over Ohio and it’s pretty common to have alcoholic drinks but, as long as you’re not bothering anyone, nobody cares. We’ve been doing this for as long as I’ve been alive and not once has anyone cared in 30+ years.

The US has open container laws but they primarily exist for a pretense to arrest people for being disorderly, in my experience.

Edit: The person I’m responding to isn’t even in the US how is what they are saying more valid then my actual life experiences in the US?
So both comments here are off the mark.

Food carts in Portland are extremely informal and very much a thing for everyday people, including people with low incomes by local standards. In fact it's one of the main drivers of their popularity here.

It's not a matter of wealthy people adopting "poor people's food" as a novelty. It's just good food no matter your situation in life. Matt is charging on the higher end, and a complete meal is still under $20. The best burger in my area is a double bacon cheese for $4.50 that uses really quality ingredients.

I've talked with customers at Matt's that live out in the country and make an hour plus drive to come by every once in a while.

People do value authenticity in my town. The big corporate chain restaurants are a lot more sparse here, exactly because the local places are just as cheap, far higher quality, locally owned, and using local ingrediants, etc.

The genesis of the food cart scene here was the city has some smart policies about making it affordable to start these businesses. Many people who dream of someday having a restaurant start out this way. You can make a serious shot at it with just $50k or so, which is tiny even by small business capital standards. They price their food accordingly.

It's true this place is getting more expensive, but I assure you, if you go out to any of the pods, you'll see a roughly even mix of people who are middle class, and young people that probably make barely enough to cover rent at a service industry job. Everyone will be hanging out, friendly and chatting.

Please don't project your own assumptions onto this scene if you've not been there. This town is pretty grossly misrepresented by a wide swath of media.
Location: Norman, OK

Remote: Required

Willing to relocate: No, but open to scheduled trips

Technologies: Laravel/PHP/TALL stack, IoT, DevOps/applications at scale

Résumé/CV:

* Site: https://bryson.cc

* PDF: https://bryson.cc/files/bryson-reece-resume.pdf

Email: hey@bryson.cc

---

I'm currently Head of Software Engineering at a startup I helped take to ~$10M as engineer #1. Have experience in edge technologies and building out multiple large platforms that have been successful. Looking for a fun team where I can shape the culture of early start ups while working on meaningful technology.

Specific skills are all over the place as I'm a full-stack dev in every sense of the word. I have plenty of experience working in every "layer" of technology, from PCB design and manufacturing to firmware, web-based backend/frontend, devops/infrastructure work, computer vision, etc. I'm super passionate about coding in general and always love a challenge.

Reach out if you think we can build something interesting together.
Reddit has introduced a policy where you can be banned merely for upvoting an offending opinion. You may have fallen foul of that.
Reward Is Enough [video]
All this really says is that there has been a ton of devaluation happening to the US dollar.
Show HN: A remix of old school forum software–Cafayo
https://data.democratandchronicle.com/covid-19-vaccine-track...

Dallas does not seem half bad in terms of vaccination rate.
I don't think that's simple bigotry.

China made several 'traditional' vaccines instead of using mRNA technology like Sinovac. They have significantly lower effectivity numbers from what I've seen (~60% vs. ~90%). On the plus side, I think they also have fewer side effects.

That said, it's worth clarifying that their lesser effectivity comes from technological differences, not merely from being Chinese in origin.

I think it's more helpful to clarify that point than to discuss motives because it's true that some of the vaccines that happen to be Chinese in origin are provably less effective according to published studies, it's just not true that their Chinese origin is in any way causing this difference.
Where is the clever Chick-fil-A ad? Or prolly sus. ;)
Risks of automatic newspaper publishing (1995)
Micro Men! Great little TV movie, and really interesting story of the rivalry between UK golden-age home computing giants Sinclair and Acorn (Acorn being the company behind the BBC micro, and also originally the "A" in "ARM").
See my sibling reply.
Creative Commons explicitly warn against using Creative Commons licenses for software:

> We recommend against using Creative Commons licenses for software. Instead, we strongly encourage you to use one of the very good software licenses which are already available

> Unlike software-specific licenses, CC licenses do not contain specific terms about the distribution of source code, which is often important to ensuring the free reuse and modifiability of software. Many software licenses also address patent rights, which are important to software but may not be applicable to other copyrightable works. Additionally, our licenses are currently not compatible with the major software licenses, so it would be difficult to integrate CC-licensed work with other free software. Existing software licenses were designed specifically for use with software and offer a similar set of rights to the Creative Commons licenses.

https://creativecommons.org/faq/#can-i-apply-a-creative-comm...
Perhaps it is not customers that need to be taught something but developers that need to be taught something.
Lol, science is not be something we have to believe in. There should be straight forward proof of this new virus as an example but there is none.

Having to believe is not science it's a religion...
Yet a world with all freedom and no security would suck. No law, no police, no military. Jungle rules - survival of the strongest.

There's a reasonable balance to be struck. That's essentially the tradeoff we make with the state - trade some freedom for some security.