skysight-inc/HackerNews huggingface dataset:
> In conclusion, the empirical research supports the proposition that using memory-safe programming languages for these projects would result in a game-changing reduction in total number of vulnerabilities.

I think this is too strong a conclusion. How many of the major data leaks and ransomware attacks exploit memory safety issues? Not many. The bulk of them target misconfigurations, vulnerabilities caused by bad text-based protocols, logic errors in software, and social engineering.

That's not to say memory safety doesn't matter, and you can get very pernicious and subtle bugs when you get too clever in C-based languages. That said, the languages that boast about their memory safety are written in C/C++ (python, ruby, Java, llvm) and run on operating systems that provide process isolation with memory safety written in C/C++ on top of hypervisors which are also written in C/C++.

You can argue, as the article does, that use of C/C++ inevitably results in many memory safety issues, and that therefore we should use memory safe languages. Except this doesn't take into account the entire categories of vulnerabilities that have been entirely eliminated because of good C/C++ abstractions like process isolation, virtual memory, filesystems, tcp-ip, hypervisors, and so on. But we take these luxuries for granted, and the benefits they confer become invisible.

I think there is a much more mundane lesson here. Good abstractions prevent entire classes of vulnerabilities, and bad abstractions are leaky no matter how careful you are. C and C++ are pretty bad languages insofar they give you limited options for building good abstractions, but with careful programming it can be done and much of the best and most reliable and most complex software is written these low level memory unsafe languages and all major security advancements we've actually made in the real world are still implemented in memory unsafe languages.
Google Tensor SoC debuts on the new Pixel 6 this fall
Vanilla | Full Stack Software/Product Engineer | Los Angeles, CA | Fully Remote | Full-Time
- ReactJS / Familiarity and interest in modern React ecosystem

- GraphQL / Apollo

- Design / UI Focused

- Familiarity with Figma/Storybook/modern design tools

- Rails/Full Stack is a major Plus

- Experience in Digital Product or Agency Setting Preferred

Job is fully remote but HQ'd in Los Angeles - This is in the Legal/Financial Tech World - https://www.justvanilla.com/full-stack-engineer

Email kei.yasui@justvanilla.com if interested.
It's bit early to be sure yet (the UK fall in cases has slowed greatly in the last week), but if that turns out to be true "the models predicted that cases would peak around that time" would still be OK for the purposes of this thread: the point is that it's unsurprising that cases began to fall within a week or two of "freedom day".
World-Record Data Transmission Speed Smashed
Distributed systems that, more or less, are only really needed to run similar social networks as Facebook or Google?

That’s like saying the Cook maybe fat and morbidly obese but look at how efficiently he consumes such a large number of calories every day.
Good question. Maybe someone here can confirm. Is the app store covering so much ground as not being able to access the Google account? Maps, Gmail, analytics...
What can be learned from studying long gone development practices?
Can absolutely confirm that these numbers are negotiable. If you have any amount of scale, ask your processor (places like Stripe or Authorize.net or PayPal for online CC processing). Just bringing it up with sales or customer service, without even having a competing offer, might well get you a "gimme" amount off the public figure. And do shop other providers, if you're processing even tens of thousands a month they might make you a better offer than what you're getting and than the public prices.
Went to Trader Joe's last year and "treated" myself to a fancy jar of honey. I usually buy the cheap stuff, but this was like a $10 jar of New Zealand honey. I probably spent 3 minutes in front of the display deciding if I should buy it or my usual stuff.

I got in line, grocer bagged (I usually help, but they did all the bagging last year), paid and left. When I got to my car I saw the jar of honey in the corner of the car outside of the bags; they never scanned it. Instead of going back in and paying for it, I just left. Still feel kind of bad for it.
Recent years? Whataboutery has been around a very long time, it was particularly associated with the Soviet Union.
Lets also not forget that AT&T tried to fix C with Cyclone, and lint was already available in 1979, so they definitely knew what child they have placed into the world.
MongoDB -- NYC or remote North America | Software Engineer, Go Drivers | Full-Time | Base + RSU's
We're growing our Database Experience team and are looking for experienced and passionate golang engineers. In this role, you'd own the building of go drivers, one of the highest impacting and most widely used drivers for the company (Atlas, Evergreen, and ADL all built heavily in go). With a lot of API work and design on the horizon, this is a unique opportunity to work on distributed systems, with the open-source community, and have your work impact thousands of other engineers at both the enterprise and community levels. Interested? Please apply directly at https://www.mongodb.com/careers/jobs/3339171?gh_src=db7d8f6a...
That $ also pales in comparison to sponsorships for the more popular sports. Even the 'medium' sports, Brooke (climbing team USA) is in car commercials now.

Though the small sports can still struggle to even get enough resources to train full time, USOC should work on that.
You can just test if it works when picking it up
Of note in the article: "There are very organized groups where the leaders at the top are recruiting people that are drug-dependent, homeless, or down on their luck and offering them incentives and providing shopping lists to go out and bring back certain products"

In the broader context, attempting to thwart shoplifting directly is essentially treating the symptom rather than the disease.
This is not caused by homeowners looking to save a buck on tools for yard work. It's organized crime taking advantage of vulnerable people.

Social programs to help remove this source of cheap/willing labor combined with thorough investigation-based law enforcement is a better solution than theft resistant tools.
Four years ago, in some of the poorest developing nation markets on earth, the local currency equivalent of $60 Android phones for sale in local stores (random cheap Mediatek chipset and 3.5" screens), were running either Android 4.0 or 4.4
> Health Insurance for better or worse heavily discriminates against the older folks.

Medicare exists only for the elderly.
It's almost like Alex Jones/qanon/alt-right/whatever are the logical conclusions of the conservative ideology.
This is the bookmarks you save in your Google account, at https://www.google.com/bookmarks/. It's not your web browser's bookmarks. It doesn't even sync with your Chrome bookmarks when you're logged in to Chrome.

It does seem like an odd product to kill off. It's one of those things that takes very little dev resources, and it's probably really useful to the few people who actually use it. Another example of Google's odd product decisions I guess.
SEEKING WORK

Location: West Coast, USA

Remote: Yes

I specialize in Ethereum smart contract integrations and architecture. If you're looking to build, test, or launch smart contract based products, I can help. If the past, I've helped multiple YC crypto companies launch and I specialize in Ethereum/solidity. I also run https://www.blocktimize.io/, which automates a lot of the process of smart contract architecture setup if that's of interest. I am also a fullstack engineer with substantial React + React Native + Node experience.

Email: david@blocktimize.io
It might be just the write up, but the article reads like he was playing with the benchmarks until he got a result where Java was faster.

I don’t think anything malicious has happened, just pointing out that benchmarking is hard, and changing parameters just to see what happens is not benchmarking.

I haven’t gone deep enough into the code and the problem, but it looks like this:

What if we swap the Rust HashMap implementation, as they say the standard one I was using applies a cryptographically-safe hash that the JVM doesn’t

Is quite a distinction, especially for the latter cases with lengthier phone numbers.
Yes. The planned directive is a fiduciary duty to maximize profit for shareholders in combination with a lack of protection for those who face the externalities of these incorporated entities. We are maximizing for capital growth rather than happiness, and undervalue life.
15Five | Sr. digital marketing manager & Sr.content marketing manager marketing | Remote (USA, Canada) | Full-time

The marketing team is looking to hire two roles, a digital marketing manager to help manage a growing marketing budget and a separate content marketing manager to drive the content strategy across organic and paid channels. Experience at other high growth SaaS products preferred.

15Five is an employee engagement and manager enablement platform. Ever dream of marketing a SaaS B2B product that feels like it’s changing the world for good? 15Five is a product that makes better managers and improves the work experience for hundreds of thousands of employees across the world.

Join a fully remote team and build a company that is making remote and hybrid work better for others.

Hiring for many positions across sales, marketing and design. https://www.15five.com/about/careers/ to see the job roles.

Feel free to email [sterling.beck at 15Five.com] about any of the sales or marketing roles after you apply.
No recruiters, contractors, or sales pitches.
Those phones are insecure.
I wonder how his relationship is with Amy today.
Just a warning if you do embedded work with Linux (RPi, Beaglebone, etc)... this guide doesn't cover the Devicetree APIs. Doesn't even acknowledge their existence.
No Crabs, No Scallops: Seafood Is Vanishing from Menus in U.S.
Asia/Pacific region consumes, on average, 154 minutes per day of all media, compared to North America's 293.

I'm old enough to remember the general optimism we in technology had about the unlocking of human productive potential as automation and globalization freed us from the constraints of scarcity. Marshall Brain, Clay Shirky, and many others write extensively on this zeitgeist.

But that's not what ultimately happened. the zombification of our attention that began in the 1950s has accelerated in the last two decades. We're not volunteering our free time to space exploration collectives, life extension self-experimentation in biohacking hackerspaces, or even traditional enterprises like Habitat for Humanity.

We're clicking heart icons on posts bemoaning billionaires conducting private space exploration, getting angry at CRISPR researchers on Twitter, and passively consuming "marathons" of Hollywood renditions of dystopian future worlds.

This is to say nothing of the fact that we don't even have all that much more free time to begin with. Not because we're all working for SpaceX or in cancer research laboratories, but because the vast majority of the very people CAPABLE of doing so (IQ is in limited supply and not evenly distributed) are actively recruited to make iphone apps more addictive, make pornography engagement higher, and make front-running retail options order flow faster.

Apropos of Netflix (or in this specific example, Amazon Prime Video): There are likely 40 million hours passively poured into marathons of The Expanse in North America, by people with an average IQ in excess of 115 (just by virtue of the type of audience). What if half (approximately the NA/Asia split) of those hours were instead poured into activities that actually got us closer to the technologies depicted?

Well, the Chinese are doing it. We're not.
Pretty much. Even outright police abolition doesn't propose simply shrugging our shoulders and ignoring crime, for that matter, just that we should figure out how to address crime with institutions whose central paradigm isn't threatening and committing violence. That's a tall order, and I gather there's plenty to criticize in the movement, but most arguments against it come across more like arguments against Thanos snapping all police officers out of existence.
Location: Leeds, UK

Remote: 3-5 days

Willing to relocate: no

Technologies: python, matplotlib, pandas, html, css, js

Linkedin: https://www.linkedin.com/in/matthew-o-neill-8b479082

Email: oneill_91@hotmail.co.uk

Just finished a PhD in Chemistry and I'm looking for a data-engineering or software development role in Yorkshire. I have a lot of experience in ETL of scientific data, data visualisation and webscraping. I love programming so if you have a programming job that straddles science please get in touch.
It's a pretty interesting idea! If you were implementing it in hardware, it would probably be faster. In software, I suspect that my suggestion of composition of linear forms in the ring ℤ/nℤ would be more efficient.
Ask HN: Why aren't there more case study type interviews?
Instead of wasting a few days with phone screen, remote technical, then a day of 4-5 interviews, why not just do one screen interview and skip straight to case study that's a couple of hours?

I used to work at a big law firm during college, and noticed lawyers would come and go for interviews and the format was case studies. Lawyers seem to be saturated, and this was how the best of the best (this was a top big law firm) would be selected.

Why can't we do this in tech? For example, if you had some huge performance issues and you fixed them a certain way, you could share the problem with your interviewee and spend a couple hours going from ideation on a whiteboard to putting together a system design or something of the solution. You could gauge how the candidate thinks, and if they've faced the problem before cool and if not at least you (interviewer) know how it actually worked out and can have a technical conversation.

Sorry but at this point in my career I'm kinda done wasting 2-5 days per interview. I'd rather live off my passive income and do something else if this continues lol.
As it should. It's incredibly unfair that as a young person I'm forced to subsidize the healthcare costs of older colleagues
Static modules with elided lookups is completely nonsensical in Python.

StopIteration is special-cased and has negligible overhead. See here (https://www.python.org/dev/peps/pep-0234/) for why exceptions are used.
Yes, thanks! I just corrected it.
A Trucking Crisis Has the U.S. Looking for More Drivers Abroad
“Organized retail crime costs retailers an average of $719,548 per $1 billion in sales”
Seems like a lot of work for 0.07%
Nope, the responsibility is on both parties (Home Depot and the purchaser) to avoid mistakes like that, because we're all human and we all make mistakes.

Home Depot is partially at fault for a checkout interface that allows the error to be made in the first place.

OP no more "stole" later on than the store "allowed him to take it". It's a gray area where neither party has preponderant fault.

It's going to cost the consumer time/money/effort to return the item, just like it would cost Home Depot time/money/effort to build systems that would avoid more of the mistakes in the first place.

In other words, the consumer has no more obligation to return the item than Home Depot does to prevent the mistakes in the first place. And in the long run it tends to even out -- for every free item you accidentally get from Home Depot that wasn't worth returning, there's probably another item you bought that failed to function as advertised that also wasn't worth returning.
Also for me was the scariest movie I saw growing up even against Child’s Play, Halloween, Friday 13th.
To be clear, this is not Chrome's ability to save bookmarks and its useful ability to synchronize bookmarks across devices when logged into a Google account.

This is an older bookmark service provided here:

https://www.google.com/bookmarks/

In my case, I see a bunch of locations from Google Maps. It would be nice if those continued to be supported in Google Maps in some manner after Google sunsets the old Google Bookmarks service.
>Makes a lot of sense, you could solve all these questions without knowing specific algorithms as long as you are good at problem solving - which is, I assume, the intent of the process.

That's just absurd. If someone with no "algorithm" experience who was a good problem solver had to work out an answer from scratch for the interview its almost certain they're going to find the brute force answer and FAANGs pretty universally want the most efficient one so these people would routinely fail.

Its totally clear that what FAANG hiring optimizes for is recent CS graduates who passed tough Algorithm weed out courses at well known colleges in the past 18-24 months. They are young with no families or obligations and are happy to work 12 hour days at Google because they have hip open offices and ping pong tables.
In my mind, calling something "open" means that everything on offer is open. Anyone is free to do whatever they want, of course, but I wouldn't call freeware (software) "open" even though it's free to use without payment.
I am a fifth-year Ph.D. student in CS, interested in scalable machine learning algorithms and their applications in bioacoustics.

Location: New York, NY
Remote: Yes
Willing to relocate: Depends on the location.
Technologies: Deep learning (Python, Pytorch), GPU kernel dev (c++, CUDA)
Email: me aaat enisberk.com
Looking for: Summer internship

Résumé/CV: https://drive.google.com/open?id=1UfcgXX6Qrwn-o91NAi_8X0hcFe...

Linkedin: https://linkedin.com/in/enisberk
If you could safely (on the hardware level) replace image of the phone with another, it would be easy to guarantee that you can get a rootkit-free phone - all you need is a trusted image.
Full Stack Ruby on Rails Dev
Location: Mexico
Remote: Yes
Willing to relocate: Yes
Technologies: Ruby, Rails, Angular, React, Postgres, MySQL Node, Express
Résumé/CV: https://www.linkedin.com/in/carlosmcastro/
Email: carmoicast@me.com
Dollar stores make up nearly half of all new store openings in the U.S.
SEEKING WORK - Remote US - DevOps

DevOps is a culture, not a role. Invest in your team's knowledge of DevOps best practices and make a team of internal experts within your domain.

In the past, I've:

- Saved a company $500k a year in CI infrastructure costs.

- Worked with several hundred engineer organizations to migrate from Jenkins to GitHub Actions.

- Introduced configuration as code and GitOps best practices to teams.

- Built dynamic review environments triggered on a pull request.

I'm available to:

- Reduce the costs of your CI infrastructure so that you can free up your infrastructure budget.

- Help you migrate from Jenkins to a more modern CI platform, like GitHub Actions, to reduce operational overhead and iterate faster.

- Help your team evaluate emerging technologies and processes. CircleCI or GitHub Actions? Kubernetes or Nomad? GitOps or ChatOps? How do you know what's likely going to be a fad and what's not? I can help your team avoid costly mistakes when adopting new tools and processes.

- Scale your DevOps processes. Should your company adopt full-stack teams that own the entire delivery pipeline, or should a specialized team of internal experts own the pipelines? These are the questions I can help you answer so that you can decide on the right trade-offs that make sense for your company as it scales to avoid future expensive migrations.

- Do implementation work. Maybe you're a small team that doesn't have enough DevOps resources. I can augment your team, dive in, and start delivering fast. I'm well-versed in terraform, Kubernetes, docker, etc. I can help you build repeatable pipelines, documentation and provide a smooth hand-off to your internal team.

- Need something else? Please don't hesitate to reach out.

GitHub: https://github.com/cbui

Contact: chris@cbui.dev
Apple | Full Stack Engineer | Onsite San Diego | Full-time| https://jobs.apple.com/en-us/details/200265541/software-engi...

My team has an opening for a full stack engineer that is well versed in Django, Reactjs, Typscript, and AWS. If you think you are a great fit for this role, ping me on LinkedIn (link in hn profile).
And also not to mention the Ubuntu GUI software store is slow as fuck. Zero attention was put into making it a snappy user experience. It has in every way been an afterthought. If I double-click a .deb file to open it, it takes a good 7-8 seconds. On an i7 8th gen. That's not acceptable. If it needs to process something it should show up in 0.1 s and show a progress bar.

I don't use it because it's faster to open a terminal and type `sudo dpkg -i foo<tab><enter>`. Most Linux users today probably do it that way, so nobody cared to optimize the GUI "alternative".
"The company always wins."

You're replying to a story where the company lost.

There's a ton of consumer protection laws. I agree companies might have the upper hand, but I think consumers have a lot of recourse here in the US. There's tons of laws, the ability to do chargebacks, etc.
With significant difficulty! I was very bought into the idea that glasses make your vision worse. By the time I got my glasses, I couldn't read the menus that fast food restaurants post overhead or enjoy board games with friends (requires reading small text on the playing pieces).
Sourceability | Software Engineer | Full-Time | Irvine CA, Berlin, or Remote (US)

Sourceability is an international Electronic Component Distributor currently building a Global E-Commerce Marketplace and related tools for our customers. Our e-commerce website can be found at https://sourcengine.com.

Join a team of enthusiastic software engineers working on digitizing the Electronic Components industry through a Catalog system that is utilized by both internal and external consumers to create/access information and inventory for over half a billion electronic components.

Our application ingests and exposes millions of records per day through various APIs. You’ll have the opportunity to work in an environment where tests are essential, and performance is critical. You’ll work closely with the Product team to understand the business’s requirements and create solutions for their problems.

Since our application is a cornerstone of the ecosystem you’ll have the opportunity to influence architectural decisions across the ecosystem through collaboration with other engineers.

Our team’s development process is designed so that every engineer on our team has an equal opportunity to add value to the organization through architectural decisions, participating in planning, completing code reviews, and helping to steer the direction of the product. Our team collaborates closely with each other and the other teams to help everyone to succeed and achieve their objectives.

Our tech stack: PHP 8 (Symfony 5), RabbitMQ, Elasticsearch, Redis, Postgres (> 1 billion records), Citus (500M+ records), Docker, Kubernetes

Just send your resume to klaus.silveira <at> sourceability <dot> com
I'm curious about the DRM food, but I can't tell what's happening in any of those photos. Can you provide a translation?
People are starting to realise.

I'm starting a project and while i prefer google's cloud platform - i'm gonna use AWS. They have no respect for their users.