skysight-inc/HackerNews huggingface dataset:
> In this kind of web, it would also be quite possible for a single developer to run a site as big as Youtube without needing tons of up-front cost. Bandwidth is free from the perspective of the site developer,

How would that work? Blockchains are far too inefficient to host video files and nobody is hosting that much data for free so you still need to set up a paid hosting environment or learn why P2P video hosting has failed every time it's been tried in the past. You can charge people to host their video, at which point you'll learn that it's really hard to compete with ad-supported hosting because the number of people who say they want to pay up front for their stuff and actually do so is a rounding error of the number of users a major video site will have.
Nah, not many are, it's being prescribed by doctors on the hope that maybe it kinda sorta works. (It probably doesn't.) It's a safe and widely used drug so on net it isn't a terrible idea if you have an extremely high risk person. Though my understanding is the evidence in favor has gotten weaker over time.
Google would have been a frontend at first.

Retail banking is so currently heavily regulated.

etc. etc.
Just don't mix the two up.
The only reason that they want an ineffective pill that doctors rightly won't prescribe, but not a safe and effective vaccine, is as you say, "politicization".

It's still a bad idea, on multiple levels: taking Ivermectin
for COVID in the first place, taking the horse paste version, self-administering, and guessing the dose.
Idk why you're being voted down. It's a genuine design principle. Some ideas that come to mind that fit with "human first":

- offline-first

- human curation instead of algorithms (or at least transparent algorithms that are customizable)

- the user is not the account number. the account is just the mech that the user climbs into. user can have multiple mechs.

- leverage existing social fabric to provide better user experience. account recovery, etc.
Yeah, these companies sell unlimited connections despite not having the capacity to deliver and then have the gall to be offended when we start using what we pay for. Based on their marketing I should be entirely justified if I wanted to saturate their links at maximum speed 24/7. They assume most people won't do it but they deserve absolutely no sympathy when their assumptions are proven wrong.

Lashing out at Netflix and bringing them to court for their own failings is such an absurd course of action. They should try upgrading their networks instead so that their service stops sucking.
Found | Frontend / Backend / Fullstack / Product | Remote (US Only) | Full-Time | https://found.com/

We're building Found so self-employed people have the support, structure, and confidence to work for themselves. Our founding team has hands-on experience with taxes and accounting, financial services and FinTech, self-employment, and scaling startups. Our team is dedicated to taking care of business banking, expense tracking, and tax saving so self-employed people have more time to do what they do best. We recently raised our Series A from Sequoia Capital, and today we are expanding and scaling a product experience that thousands of Found customers use to run their businesses.

Tech Stack Includes: Rails, Kubernetes, React, MySQL, Typescript
Benefits Include: Paid medical/dental/vision, parental leave, unlimited PTO.

Hiring for senior engineers across the stack, product managers, designers, marketing.
Apply here: https://jobs.ashbyhq.com/found

(I'm the Head of Engineering and you can find me here: https://www.linkedin.com/in/aabhassharma/ or https://twitter.com/shars17)
I totally agree. Other than Brave, it will be years until web3 is seamlessly intergrated.

But, my point about L2 solutions is that with those you have a work around.

web3 requires that you use secp256k1 ellptic curves. Those are not available in any browser. So, you cannot sign transactions. You cannot participate in Ethereum from a browser.

But, what if the L2 network does not require that curve? What if it accepts WebCrypto signed L2 transactions? Then, you can participate in Ethereum through L2. You might give up a little in terms of absolute security (these still have much better security than anything else out there, by the way), but for certain applications that might be a tradeoff worth having.

If you can manage transactions in a vanilla browser using WebCrypto (or bundling your own crypto in JS with browserify or something -- that's what I did), and the API is over HTTP instead of into an Ethereum node, then you can participate in a vanilla browser.
It's a program that incorporates itself into another program while at the same time corrupting the program, and after several iterations there is a catastrophic failure.
Intel Introduces 2nd Gen Neuromorphic Research Chip: Loihi 2 on 4 EUV Process
That's not a bug, it's how they were designed. Someone could steal your secret key and make an unauthorized transaction with cryptocurrencies too. Only, then you would have practically no recourse.
Next time you get in a car accident maybe the police should throw you in jail for wilful destruction of property. It doesn't matter if you did not intend to damage the other car since intentions don't matter. You did the crime you should do the time.
Why do people here always want to reduce the equity and income of pharma and biotech scientists?
California to require students get Covid-19 vaccine
It's not really high scale / high performance, but Apple's notes.app uses state based CRDTs internally for conflict resolution. It is perhaps high profile, since a lot of people are using it.
GunghoGolf.com | Austin TX | remote or onsite | PT or FT

Prefer a software engineer with a passion for golf and some experience with golf tech. RoR and iOS dev a plus. Our small team of three is innovating in the indoor golf space, which is booming. Email ron at domain above, reference HN in subject.
I don't think it's a win that a significant portion of the population will only take a medication if it's wrapped in a conspiracy theory.
I don't think investing money necessarily transfers the ownership of things bought with that money to the investor. The government could put in their contract "we get all your drugs that you invent" if they wanted that. But this would be like startup VCs getting 100% of your company, or your bank getting the appreciation on your house when you sell it, etc. They could ask for those things, and you could say no... and most people do say no.

The government wants to focus research into particular areas, not compete with the pharmaceutical companies. (At least the money isn't for making a new advertising platform, which is probably something a VC would fund in a heartbeat. Drug discovery is too risky for them.)

You may disagree with that, but that's their intent. If you want the government to be discovering drugs and testing them, definitely tell your elected representatives that that's what you want, and the system can change. (Or get rich from an advertising platform and do it yourself! ;)
TPMs are pretty slow; the LPC bus they sit off of is basically run at ISA bus speeds.
I think the fetishization of blockchain technology demonstrates that most of its proponents don't understand the Internet. The Internet isn't powered by mere ownership claims but by the ability to distribute content with little effort by its users. To augment enclosure of the "digital commons" is going to make the Internet worse off than it ever has been. The more they try to monetize and commodify computing technology the more they just reinvent what already existed and diminish both the established forms and the new ones.
> So… that seems like a huge jump as percentage.

Their estimate would require stress testing it every second of every day. Even if you game 4 hours every day (which would be a lot imo if you have a 9-5 job), you're looking at peak usage of 150-200W (most games won't utilize 20 threads), which using OPs costs numbers comes out to $3/month.

Fwiw I pay extra to get my electricity from wind and ride my bike ~25 miles round trip anytime I commute to work or the gym, which alone saves me over $3 and prevents ~20 lbs of CO2 per trip.

But it's not like what we do on an individual level really matters anyway. :/ The idea of a "carbon footprint" was BPs clever way of shifting climate responsibility from corporations to the consumers. I at least hope every little bit we do does help.
TalkJS (https://talkjs.com) | REMOTE (Europe/Middle East/Africa) or Eindhoven (the Netherlands)

TalkJS lets developers build a perfect chat feature in just a few hours. We power communication in online marketplaces, community sites, trading platforms and so on. We're product driven and we care tremendously about quality: We're out to build the tool that every developer worldwide will use to build chat/communication features.

Currently in the market for:

* Mobile Developer (iOS/Android/Flutter/React Native)
* Senior Fullstack Developer
* Senior Backend Developer
* Senior Web/Product Designer (web/ui/ux)
* Technical Writer

Our stack is mainly React, TypeScript, Elixir and PostgreSQL. Nearly the entire company is product people. Founders are a designer and a programmer.

TalkJS touches millions of people and is growing quickly. We want to be the tool that every developer thinks of for building communication features, a bit like what Stripe is for payments. To accomplish this, we give great engineers the maximum amount of freedom to ship fantastic SDKs, APIs and features. This means a healthy work/life balance, no meetings, no red tape and a lot of responsibility. Sound good?

More info on all positions + how to apply: https://talkjs.com/jobs/

(no recruiters/agencies please)
You just awoke an ancient TV memory in me:

https://www.youtube.com/watch?v=B48hQm5fIbU
California's Data Breaches List
One thing that cryptocurrencies achieved is they introduced a private key authentication at scale. For a moment, there was a hope that we can move to private key authentication mechanism. But, unfortunately, it was quickly rolled back by introduction of custodial wallets and we got pulled back into world of passwords.
Ask HN: How to prepare for a probable internet outage?
After the Cyber Polygon(2021) event, which combines the world's largest technical cyber security training exercise for corporate teams and an online conference with senior officials from international organizations and leading companies.

How to prepare for a probable internet outage?
This solution works then, right? So given this implementation (and not a play store or ios download), one should be safe from xzy snooping?

Edit:
As someone that has heard of forward secrecy but not how it relates to pgp, these were helpful reads:

https://signal.org/blog/advanced-ratcheting/

https://signal.org/blog/asynchronous-security/
> I disagree. TOTP-based 2FA is leaps-and-bounds more secure than SMS based 2FA and will stop nearly all attempts to access your account.

At present, you are right. In the future, this may not be true, especially the "will stop nearly all attempts" part of what you are saying because the weakness in any security strategy is people.
The Google Pay thing is a bit odd, because the new one is only actually available in 3 of the 40 countries that Google Pay supports - most places are still using the old one.
Link to the original article in Arxiv:

https://arxiv.org/abs/2106.10599
Metabase | https://metabase.com | REMOTE | Full-time | All Roles
We're hiring for multiple positions across the team. Metabase is open source analytics software that makes it easy to ask questions of your data. It works with most databases / data warehouses (BigQuery, Redshift, Snowflake, Postgres, MySQL, etc) and has a simple and powerful UI and UX that lets anyone in your company ask their own questions.

Tech stack: Clojure, Javascript, React, Redux, AWS (ECS, Autoscaling, Aurora, RDS, SecretsManager, S3)

Roles: Engineering Managers, DevOps Engineers, Frontend Engineers, Software Engineers, Software Engineers in Test, Success Engineers,Data Analysts, Product Managers, Tech Writers, Account Executives

See https://www.metabase.com/jobs/
University of Michigan | Research Software Programmer | Ann Arbor, MI | onsite | full time

The Technology Services department in the University of Michigan's College of Literature, Science, and the Arts is hiring an entry-level Research Software Programmer to join our team in creating custom software for researchers. If you've ever thought about a role where you can see what's going on in research in a wide range of fields, work with a customer to create a project from start to finish, and have the chance to broaden your programming skills, this could be the job for you.

One note: the description says "mobile, Python", but this is mobile OR Python--we're looking for somebody who can do at least one of these and is ready to learn more!

Read more about the Research Software Programming group here: https://lsa.umich.edu/technology-services/services/research-...

Job posting and application site: https://careers.umich.edu/job_detail/204649/research_softwar...
Unfortunately the music field never had such collaborative effort to build a unified ontology, so each big player have its own ontology, and they are not very compatible. From personal experience, building software that consumes data from multiple sources in music is a nightmare, it is impossible to design a data model that fits all the incompatible ontologies.
Are you familiar with the streetlight effect?

That is why.
> It's really patronizing to say, "Oh, those primitive foreigners, we have to excuse them for posting offensive jokes on a technical forum."

That's patronizing because you're thinking of them as "primitive foreigners that posts offensive jokes", while you could think of them as "different people in a different culture that may not share every values with you". I don't understand why Americans are so afraid of swear words and jokes, but I don't think they are primitive or stupid or too uptight for it, they are just different.

Just look at how judging you are: "undisciplind repositories or technical mailing lists". Repositories are undisciplined because there are offensive jokes? Aren't repositories about code? "most of us do not want to read people's jokes, funny, offensive, or not, when we are on a technical forum": who is "us" here? People from the USA? You and an imaginary group of people? The whole world? I certainly don't mind a good joke, and I like some humor that can be considered too much in US culture.

Don't just assume that you're in the right and in the position to judge people.
I wonder how the lead of an ambitious project like this one gets wind of an upcoming project cancellation? Is it changing business needs, or political winds shifting?
A point very well made by Mitchell and Webb: https://www.youtube.com/watch?v=CS9ptA3Ya9E
> do not want to be vaccinated What's the reason for this? The vaccine has been approved fully by the FDA and hundreds of millions of people have received it.

It's none of your business why they don't want to be vaccinated. If science demonstrates that COVID survivors have strong immunity, why should they be forced to be vaccinated as well? We do not force people who can show immunity to measles, mumps, and rubella to get the MMR vaccine.

From the CDC: https://www.cdc.gov/vaccines/vpd/mmr/public/index.html

> You do not need measles, mumps, and rubella (MMR) vaccine if you meet any of these criteria for presumptive evidence of immunity*:

> You have laboratory confirmation of past infection or had blood tests that show you are immune to measles, mumps, and rubella.

> Sure, and people who have had covid and get it again as well. But why risk sick days, lost productivity, severe illness when there's an effective, safe alternative. The capital cost of caring people who get sick with covid is far higher on a per capita basis for those who are unvaccinated.

You are distorting the science by trying to lump people who survived COVID in with the unvaccinated. They are not the same group.

From Israel: https://www.medrxiv.org/content/10.1101/2021.08.24.21262415v...

> SARS-CoV-2-naïve vaccinees had a 13.06-fold (95% CI, 8.08 to 21.11) increased risk for breakthrough infection with the Delta variant compared to those previously infected, when the first event (infection or vaccination) occurred during January and February of 2021. The increased risk was significant (P<0.001) for symptomatic disease as well. When allowing the infection to occur at any time before vaccination (from March 2020 to February 2021), evidence of waning natural immunity was demonstrated, though SARS-CoV-2 naïve vaccinees had a 5.96-fold (95% CI, 4.85 to 7.33) increased risk for breakthrough infection and a 7.13-fold (95% CI, 5.51 to 9.21) increased risk for symptomatic disease. SARS-CoV-2-naïve vaccinees were also at a greater risk for COVID-19-related-hospitalizations compared to those that were previously infected.

> This study demonstrated that natural immunity confers longer lasting and stronger protection against infection, symptomatic disease and hospitalization caused by the Delta variant of SARS-CoV-2, compared to the BNT162b2 two-dose vaccine-induced immunity. Individuals who were both previously infected with SARS-CoV-2 and given a single dose of the vaccine gained additional protection against the Delta variant.
Regarding your edit: there isn't any shortage of covid-exposed people right now.

Often, trials lag because not enough participants fulfilling the criteria can be recruited. This is especially pronounced in rarer diseases.

Plus, you will know outcomes of covid pretty quickly. Compared to diseases such as Alzheimer or multiple sclerosis, covid develops fast.
Well that ship already sailed. My point about the win is that the memetics of a safe, effective pill imply to me that it will actually be widely adopted by unvaccinated and will also calm a lot of people down who currently are having a bit of a mental crisis over the existence of said unvaccinated people. So we should be happy for several reasons of this news.
DeFi bug accidentally gives $90M to users, founder begs them to return it
I'll simply refuse to use such sites then. Just like I often turn off javascript because NYT or Wapo demand I login to see an article. No and no. If your site is online without authentication restrictions by default then whatever content you host outside of that authentication process is free in my opinion and you have no right to soft block me and others into giving you something for it.
Ivermectin is not just for control of parasites, the anti-viral properties it has is because it's a protease inhibitor. It prevents certain viruses from binding to cells.

How effective it is at inhibiting binding is the question. This pill in the article and Pfizer's prophylactic are most likely more effective since it's not a by product but the intent. Also more profitable because of patents.
Avoid code duplication with parameterized Python unit tests
The inspections might differ, but most states that require vehicle inspections do so yearly.

And most include an emissions test, which reduces the need for complex mechanical inspections, and largely negates differences in inspection "quality".
Hijacking: Can someone ELI5 me why two pockets of differing air temperature create such violent weather patterns? It feels like dark magic.
Looking at his other comments, he's speculating. The document talks about obtaining an SMS verification token, they say "we updated our SMS Account Recovery protocols to prevent any further bypassing of that authentication process", and have not removed SMS as an authentication option. I see no reason to think this vulnerability was a SIM swap. Him stating it as if it's a fact in his original comment is very misleading.
Prusa Research unveils autonomous 3D printing farm
Signal | San Francisco or Remote (US Timezones) | Full-Time, Remote-OK | https://signal.org

Signal is making private communication simple. As an Open Source project supported by grants and donations, Signal can put users first. There are no ads, no affiliate marketers, no creepy tracking. Just open technology for a fast, simple, and secure messaging experience. We design open protocols, develop Open Source software, and give it away for free.

Here are our open roles:

-Server Engineer: https://jobs.lever.co/signal/2a5fee8b-5875-46d4-a41d-773a28a...

iOS Engineer: https://jobs.lever.co/signal/5d866dff-b979-4a90-9a53-f581eee...

Tech Stack: Server: Java and Rust; iOS: Objective-C and Swift

Please email us your resume to: Workwithus@signal.org
It's been well-documented in the news, including people being hospitalized after overdosing on the stuff:

https://www.mississippifreepress.org/15002/person-hospitaliz...

https://www.usatoday.com/story/news/health/2021/08/25/iverme...

https://www.fda.gov/consumers/consumer-updates/why-you-shoul...
If the metric is lethality, they certainly are very effective.
It was not a simswap/simjack attack, they exploited an oversight in coinbase's password-reset 2fa to send the challenge code for one user to another user's phone number.
You sound like someone in the 90s talking about web1
Well now that you mention it...

I had been thinking of Github and Cloudflare, but I actually just checked both of them and they do now allow multiple keys to be registered. So I guess that's gradually getting better.

It's still pretty amazing that AWS still doesn't allow multiple 2FA methods though.
Is that true of the Manhattan Project? The fundamental science that the bomb was potentially possible had already been worked out (which was why they launched it in the first place). Most of the work there was physically building the bomb, acquiring and working with the raw materials, performing tests, etc.; most of the complex work was still working from what scientists had already written.

Consider that it took Newton and Leibniz to invent calculus, but, once invented, we expect high school/college students to be able to learn it.

I think for almost all roles in the Manhattan Project (possibly everyone except Oppenheimer himself, and there were plenty of other candidates for even that role) you could hire and train anyone with a baseline level of competency in the work needed. It wasn't the sort of work that required genius, but at the same time, it was novel; nobody came into the project deeply experienced in refining uranium or whatever. So as long as you structured the project in a way that people could get up to speed quickly you were fine.
What if the users had no 2fa at all? attackers still had their passwords and their emails, and their sms numbers
I'm building a way to accept microtransactions on regular websites inside regular vanilla browser.

https://finneyfor.com/

You can see transactions delivered using this method when I started this four years ago.

https://etherscan.io/address/d2bb82d40c8bcf50d008e39ecb9e44d...

Those were $1 transactions at the time. Now that ETH is worth $200+!

Transaction costs are such that I'm refactoring it to use L2, but my solution works inside vanilla browsers without a browser plugin.
This is as close as I could find (Amazon Canada, out of stock): https://www.amazon.ca/Beaver-Olde-English-Mustard-360ml/dp/B...

Must be discontinued, but I wonder where the author of the article found it.
No, you grab metaphorical pitchforks.
Sounds like we should tax people enough that they can't get "private jet rich", in order to disincentivize those harmful behaviors.

Nobody should have the power that having a billion dollars gives you
One popular example of a monad is a type constructor that extends the given type - a “wrapper”, if you will, where a value can be wrapped in a trivial way (e.g. x -> {x} or x -> x?), and a double wrapping can be trivially unwrapped (“naturally transformed”) into a single one: {{xyz}} -> {xyz}. (Note that unwrapping the last remaining layer will not be always possible - e.g., while {x} -> x does indeed make sense, {x, y, z} -> … or x? -> x do/may not.)