skysight-inc/HackerNews huggingface dataset:
Location: Cincinnati, Ohio
Remote: Yes

Willing to relocate: Not at the moment

Technologies: Vue.js, Express.js, Node.js, JavaScript, Linux, Bash, Python, MySQL, MSSQL, Apache/NGINX

Resume/CV: https://andrewjamesbaker.me/

Email: mr.andrewjbaker@gmail.com
I never mentioned downvotes before though.
Have you been to Dribbble, Behance and other design sites? They have great inspiration for me.
Backups are no longer sufficient - as the hackers now threaten to disclose stolen data to the public.
He is right, why boo him? Ohh got it!
Does anybody know if the current lab leak theories say if it was a natural virus that was released by accident, or was it something engineered in the course of research that was released by accident?
Startup Idea to Launch
What did you want them to say? CEO explained what the company does.
If the pipeline could run without corporate, why would corporate exist?
We still use electricity even though it's deadly and it accidentally kills people every year. Why not use ML even if it has it's own issues? As humans who know better we're responsible to take all the precautions.
The headline might be vague (though I'd personally love to see drone strikes on the scumbags that scam elderly people to of their meager savings) but the article itself talks in terms of priority and effort for investigations into malware attacks. E.g., they won't just shrug and do nothing because they care about other crimes more, like with my stolen GPS case.
But you can still walk if you work from home, and then you can walk wherever you want instead of a particular route.
Given the power tech has over the daily experiences of billions and how many questions of values and ethics it is now directly confronting in society, I'm a little surprised there's just one ethics course and one law course that cover these subjects, and they're electives [1].

We all know much of the learning in engineering is on the job anyways, so the role of formal education is less about particular job skills and more about building foundations for understanding - exactly the time and place to teach ethical frameworks and other critical interfaces with society.

Ten years later you may not remember the details, but at least you'll remember there's some kind of ethical framework or lesson that explains why a course of action your boss is considering might not be right or has implications they're not considering. The world needs more of this kind of awareness from CS grads. Not suggesting this be a major part of the curriculum, but just maybe we could go from 0 required courses covering this to 1 or 2.

[1] https://web.stanford.edu/class/cs182/ and https://5harad.com/mse330/ Yes, STS (https://sts.stanford.edu) exists, but again that's elective and thus involves sacrificing opportunities to take those courses.

EDIT- see epoch_100's link here about Stanford CS embedding ethics throughout the curriculum, which seems to address this concern: https://hai.stanford.edu/news/building-ethical-computational...
Is this a measure, or a target?

If it's a measure, _shrug_, I see it as fairly inevitable in a big enterprise. Some people will leave for good, bad, and miscellaneous reasons. 6% turnover at a big enterprise seems pretty low IMHO.

If it's a target - wtf? Actively forcing out satisfactory staff to hit an arbitrary number is a bizarre way to operate.

I know the media loves to suggest Amazon has horrible work practices, but seeing as one explanation of this number is sensible enough and the other is batshit crazy, I choose to assume they're applying it in the sensible way.
We can store massive quantities of information if we bother to hack our brain/learning process.
Farm to Capital
Requirements are not the same thing as implementation details. 2 + 2 = 4 is a sound abstraction, the fact that 1 + 2 doesn't = 4 doesn't make it "leaky".
*can
Related: "White House Warns Companies to Act Now on Ransomware Defenses" https://www.nytimes.com/2021/06/03/us/politics/ransomware-cy...

or https://web.archive.org/web/https://www.nytimes.com/2021/06/...
At the same time, SS disbursements are capped as well. So both input and output are capped.
It's not that productive to say, but this thread's comments are mostly trash, if you read this comment first, just turn around.
> What happens if you share links with other people? Are URLs now sensitive information?

This is not uncommon - the concept of “per user” signed URLs exists for content downloads, video playback, uploads and other paywall-ish use-cases. The content itself doesn’t contain PII and the content owner may (or may not) make the URLs short-lived via an embedded (and signed) timestamp.
What new features and improvements would you like to see added to Rescuezilla?
-Renovating a cabin and trying my hand at doing the YouTube thing and all its appurtenant editing, etc.: https://www.youtube.com/channel/UCh0YKCZZHcfAIJgX9WwiTmA

-Researching for an article on Google and Facebook's collusion in the ad industry, specifically w/r/t Europe.

-Working on a pair of podcast projects, one related to the first item and another getting stories recorded from older family members.

-At the research stage on an article about the future for GPT-3 in the tax realm.
When I say rich social life, I'm talking about bars and other social venues, and very explicitly saying that work is not a part of the rich social life. So based on your previous comment I highly doubt we agree.
As has been pointed out, repeatedly, Trump was not the only one pointing out the lab leak hypothesis. "Trump made me not take the lab leak hypothesis seriously" is not the excuse that journalists seem to think it is.

Trump seems to occupy a super position in the brains of media types in this country. He is a idiotic buffoon who no one should take seriously and yet he somehow magically and constantly influences behavior that is directly related to their job.
Suppressing the truth because you want to game the outcome is an extremely dangerous position to take. It never ends well for the little guy, who ends up getting neither truth nor the best outcome.
>The only course of action he can take is to convince the bar raiser to accept the new hire even if the candidate is subpar.

I suppose it is much easier to convince the bar raiser if the manager promises/explains that that hire isn't going to be here for long as for the bar raiser there is no point to object in such situation.
Actual hacking into a network with intent should be on the order of breaking-and-entering, not robbing a bank, murder, or committing acts of terrorism. Hacking to rob a bank should be the same as robbing a bank. Hacking to intentionally poison a water supply is something like terrorism.

Cracking, gnireenigne copy-protection, copying a publicly-/privately-available archive of information, etc. should be "speeding tickets" not 50 years in pound-me-in-the-ass federal pen.

Hacking should be seen as an amoral means to commit another act, not a specific criminal, malicious activity in-and-of-itself.
Momentarily forgot what it was called. Thanks :)
Dod something go wrong with the Economist?
I wouldn't say that all GOF research is for bioweapons, part of it is to see where the virus is likely to evolve next and protect against that, which is more on the defensive side of that.

Doesn't mean it's less risky, mind you, and this is convincing me that the experts on this need to reassess whether it's worth the risks and if so, what safety precautions are needed. I would think that BSL-2 is just way too low, but I would defer to the scientists on this and only say that I think this shows that anything done to make something more infectious to humans should be treated as though it already was highly infectious to humans.
The article literally cites a statement put out by a respected medical journal on Feb. 29, 2020, and signed by 27 scientists, "roundly rejecting the lab-leak hypothesis, effectively casting it as a xenophobic cousin to climate change denialism and anti-vaxxism."

Whatever your recollection of "rank-and-file scientists" attitudes is, the narrative on record is to the contrary.
Networks of Trust vs. Markets
Sure. I am talking about calling yourself three John Smiths at three different addresses for example.
Live coding during an interview is a particularly stressful environment that bears little relation to the day to day work of building software. Have you considered that if 90% of your vetted applicants are failing your test that there might be something wrong with your methodology?
Also…

https://www.npr.org/2021/06/03/1002881337/officer-who-sold-p...
> When I started tinkering with JS, I thought of it as slow; but web developers are far more obsessive about speed than any other high-level, dynamically typed language I’ve seen.

Given that, isn't it odd that JS still encourages map/filter array iterations that make multiple passes over a single array? I.e. that it hasn't yet introduced some sort of comprehension or itertools-with-compilation feature that does array processing in a single pass?
Stop making these glorified Markov-chain text generators bigger, and add some actual persistent memory.
It's not in Nicolas Wade's article, which I now see has been unfairly maligned along with David Baltimore who's been selectively quoted to leave out the technical detail of what made the latter say the SARS-CoV-2 is a smoking gun, see the 4) A Question of Codons:
https://nicholaswade.medium.com/origin-of-covid-following-th... If correct, that's getting strongly into bioengineering evidence.

You are of course more likely correct about the alignment issue, I can't find my source now, and the above is probably much stronger evidence. For the alignment you'd have to be a virologist, probably one specializing in coronaviruses, to be able to really judge this. Of course a whole bunch of biologists have shifted their focus to coronaviruses in the last year and a half.
One might want to take a look at the following Dewey Lecture by Tom Nagel:

https://youtu.be/MwYZURDU6dA
As someone quite familiar with SCSI and who watched the rise of NVMe essentially throwing out SCSI in favour of doing something new, I feel like this was a foreseeable need in retrospect.

SCSI is split into an Architectural Model, a Primary Command Set implemented by all devices, several device type-specific Command Sets, and various interconnect standards. This reorganisation of NVMe into a core document, various transports and various command sets seems to basically do the same thing, but flipping briefly through these specs, I suspect SCSI is still better written, especially the SCSI Architectural Model document.

It's interesting to note that there was a competing proposal to NVMe, SOP-PQI, essentially a standardised PCIe interface for SCSI (e.g. SAS) HBAs. Arguably this was long long overdue with even today every single SAS HBA's vendor using its own driver rather than providing a standardised interface. Some companies threw their support behind SOP-PQI, some behind NVMe. Ultimately NVMe won and it's hard to find much information about the competing SOP-PQI proposal; this was around 2012 as I recall.

Ultimately I wonder whether it was a good thing to throw out the SCSI architecture wholesale. Was it desirable to start with a fresh sheet and none of SCSI's legacy concerns, or was it (as is not uncommon) just new generations of developers wanting to throw out an old and venerable (but well designed) system because they don't understand it? It's claimed that NVMe, by being "designed for flash from the outset" is able to be faster than SCSI, but I'm skeptical about this if we're comparing like for like (i.e., NVMe vs. SOP-PQI).

Not only that NVMe is now getting support for HDDs, as though focusing on supporting only flash was a mistake. The assumption of SSD-like read latencies also causes a problem IIRC with e.g. AWS Nitro, where block devices are exposed as emulated NVMe devices, even for magnetic storage; as I recall, AWS's own docs advise you to manually increase the read timeout on NVMe accesses via Linux kernel arguments to work around this.

Is there anything about the SCSI architecture that would actually preclude SCSI over PCIe from being as performant? People repeat "NVMe is faster because it was designed for flash" but I'd like to know what the substance is to this.
Why is the lab leak theory so taboo? I dont understand why this would want to be glossed over? If a mistake was made why are we not learning from it? Why would China care? its not like anything would change if they admitted a mea culpa here. I just feel like so many factors point to this not being a 'wild' virus it just didnt make sense to not investigate if this was a lab leak. Lets learn here and do better.
I know this to be the case but it was still first thought to have originated in Spain.
This feels like one of those studies where someone figures out kids like toys.

Money can be used to procure food? Hmmmm, sounds fishy.
The point isn't "Ebola came from a lab" but rather "the fact that we can't pin down a natural origin doesn't prove it's man-made."
As someone who has mainly done web apps and desktop development for near a decade, I am interested in maybe a career in cyber security.

Any tips or ideas?
You continue to sidestep and move goal posts. Ah jeez.

You cling to an obvious typo instead of addressing my questions. Ah jeez.

Your obvious (and frankly cringeworthy) Fauci bromance aside...

From the paper:

> Scientists working in this field might say – as indeed I have said – that the benefits of such experiments and the resulting knowledge outweigh the risks.
At least this is what I told the students when I was a TA for a class teaching prolog!
This blog post from Stephen Wolfram which was featured on HN a few days ago seems relevant:

https://writings.stephenwolfram.com/2021/05/how-inevitable-i...
Is that the inner medium of a 5.25" floppy disk?
For conflict of interest, please see Fauci's wife.
Supreme Court reins in definition of crime under controversial hacking law
There is nothing inherent in notebooks that prevent the use of tools like git.
Media and threshold of evidence? You need suspension of belief if you even want to consider it for a moment. The case of 5g causing corona being covered recently, without instant ban like lableak theory, is a case in point.
We haven't moved away from that until about yesterday. UK variant, SA variant, Brazil variant. These were in the news you know?
It used to be that many companies were stuck with IE because they bought complex products that only support IE (and an older version of IE at that) to manage their business with. Fortunately a lot of the worst of that stuff has gone away. But it's still out there (though in many cases the employees use IE only to talk to BogusLegacyProduct and use Chrome for everything else).
This was a great listen. I encourage everyone to check it :)
> First, most common symptoms of COVID are indistinguishable from common cold.

I was under the impression that the symptoms were quite different to the common cold and more inline with influenza (fever, dry-cough, aches, no mucus production – symptoms that are rarely caused by the cold).
Atari VCS Game Console Finally Launches June 15 with Eye-Popping Price Tag
Yep ^^^
Neural Factorization of Shape and Reflectance Under an Unknown Illumination
TiDB 5.0: A One-Stop HTAP Database Solution
It's interesting that this isn't like a Tesla turbine, but that its periodic vibrations create enough net suction to hold it in-place.

https://en.wikipedia.org/wiki/Tesla_turbine
Incredible, thanks for sharing. I felt sorry for him just reading the synopsis alone.

I hope he's rich somehow given what the studio put him through. Seems heart breaking.

> In April 2020, Nasuga tried to persuade people to cooperate with the self-disciplined stay home during the COVID-19 by citing his own experience.

This makes me believe he's a really good guy and that there is still hope for humanity.
Trump has been gone for half a year.
‘Fast, Cheap & Out of Control’ is a fun and wild Errol Morris documentary that, in part, covers a naked mole rate specialist.

https://www.imdb.com/title/tt0119107/
Finding bugs in OpenMW with AFL++ and honggfuzz
Similar story about someone from VN. Person left their dog to be watched while they went away for a few days. Came back and went to get the dog. Sitter claimed the dog ran away. Someone else ratted out the dogsitter saying they had barbequed(?) it.
I have a similar story except I didn't move anywhere to reduce burn, I just worked a full time job and built the company in my off hours. But I did prototype, charging a small fee, for almost 2 yrs too. Once I launched the v1, I went from 1k MRR to 20k MRR within 12 months. Congrats on your success. It's always hard work.
The more important takeaway is don't shout down those who are skeptical if you haven't actually investigated the authorities' credibility yourself. Get comfortable with not knowing, with being agnostic on a lot of issues, because it's often the only reasonable position.

(The most important takeaway is to ignore Twitter - not "social media", but specifically Twitter).
Fauci's email was not "leaked".

Several media organizations (washington post, buzzfeed) submitted FOIA requests for the emails, and as per federal law, they were released. No leak, normal federal government policy process, driven by mainstream-y media outlets AFAICT.

Twitter has not banned discussion of the theory. Here's a thread from May 27th (Nate Silver) discussing it in some detail:

https://twitter.com/natesilver538/status/1397869883585708034

Here's Ryan Delk from May 23rd saying it even more clearly:

https://twitter.com/delk/status/1396583148524212226

They did have policies related to the lab leak theory, but it seems like a mischaracterization to say that the banned discussion of it.

The only person I can find who has lost their account over related matters is a NY Times reporter who closed her own account after making some fairly dumb remarks about the theory.
> We should regulate and punish, not subsidize.

I agree to a point, but to continue the physical-security analogy: while private businesses should not be negligent in securing their property, a patrolling police force should also exist to discourage theft and vandalism at large.

I think the private and public sector have both been negligent when it comes to cybersecurity. Both need to improve. (Like you, I'm willing to bet the private sector is hoping to sit back and let the taxpayer foot the bill for everything. This is a problem too.)
I'm from Python and JavaScript lands and I'm currently learning Rust very slowly.

There are many reasons why I feel Erlang or Go or Rust shines brighter in many situations but my issue is that I not only need to get up to speed, build scrappy prototypes fast, but also hopefully, hire other engineers including juniors.

There are many ways one can build systems with multiple languages and take the benefit that each has to offer in specific cases. Python itself calls C in multiple libraries to speed up code.

Some of the safety related paradigms are really practical but to adopt a new language means a lot of risk for the startup too. Not every tech leader is so capable as to juggle both the delivery stress of features and building idiomatic software in a new language, I know I would struggle.

So I keep learning and I will wait for when specific cases demand me to use another language and use something like gRPC in between my existing codebase and the one in a new language. I do not (should not) have to move away from what already works well to adopt new tools or paradigms.
FWIW, I've never seen any value whatsoever in these ethics classes (note: I'm not saying it's not an important topic, it's extremely important).

The hypotheticals and situations presented and discussed in many of them are very similar to yearly mandatory classes we have to take at FAANG (and many other workplaces I assume) and it boils down to having a checkbox that says "I'm not stupid".

Real world ethics is much more subtle and difficult to teach imo. Like how do you do trade-offs around cost/societal issues/potential financial consequences and do it under pressure with your job on the line.

In Canada, we have the iron ring given to engineers to remind them of their duties to society, I think that serves as a good reminder even if it's symbolic.
Big discussion, currently on the front page: https://news.ycombinator.com/item?id=27382752
Buildkite might be an option in a regulated environment.

They don't get access to your code (BYO runners, they manage pipeline config / logs / notifications). You run their (open source, easy to build yourself) agent on infrastructure you control.

It's really nicely put together.
I would say pulling off this massive conspiracy is looking less and less likely.
this was a fun read, thanks for sharing.

FYI, the transfers from pageable memory almost certainly do not go to the storage device in your system, unless you have high memory pressure. "pageable" (as a cuda-ism) does mean that the buffer may be paged out to storage, but as a result it means that (more importantly) even if the buffer is in RAM, the GPU cannot access it directly.

so for pageable copies the flow is probably not:

storage → buffer in RAM → device,

but rather:

original buffer in RAM (inaccessible to the device) → intermediate buffer in RAM (accessible to the device) → device.

also, in several places you use the term 'stack' where I think it should just be 'RAM' / main memory.
From my perspective, you didn't address what I said at all and just got extremely emotional very quickly. I venture a guess that you sometimes find these conversations frustrating because it is you who isn't listening.
htmx is great. Thank you for making it.
>even if the USA for example had actual evidence of a lab leak, they would be better off using this as leverage over China secretly than releasing it publicly.

That seems unlikely to work.
You're twisting "I am deeply sorry to anyone I offended" into "Sorry you're offended".

Those are obviously different phrases with different meanings and intents. You might want to reevaluate your beliefs, because this is a glaring mistake with troubling implications.
Does anyone else think that “Boom” is a poor choice for an airplane company?

Maybe the next vehicle manufacturer will call themselves “Crash”
The long term answer is to switch to Capability Based Operating systems such as Fuchsia and Genode, however these aren't ready for prime time, and are a few years out from being viable choices for production use.

In the meanwhile, backups that are physically offline are your first step. Then you should have offsite backups that are also offline.

Start by buying some new hard drives, and use Clonezilla or whatever is popular now to make copies of your existing drives. Put your old drives in the safe, and run on the new ones.

A backup that hasn't been tested is a prayer. You MUST test your backups, regularly. You must have sufficient spares to be able to stand a new system from scratch and your backups. That new system just has to function, it doesn't need to be as fast as the current one... it just has to actually be good enough to run things for long enough to get proper replacements up and running.

If it is a truly critical system, I.E. people will be harmed, or the business will go away if it stops working, it should not be on the internet, and it should have a backup system ready to start at the flip of a switch.

Data diodes are network gateways that can only transmit data in one direction. These should be used to ensure you can monitor a system, but never control it from the outside. (You set up a host inside the critical network to poll data, put it in a ring buffer, then send that buffer with forward error correction though the data diode to another server outside the network that reads the data, corrects for errors and dropped packets, and serves requests for data to the outside world)
What are your requirements? The most recent CI/CD system I've used was Concourse, and using it was great - it's very flexible, if a bit barebones. (I didn't have hand in the initial installation for it, so this is only for using it)

https://concourse-ci.org/