skysight-inc/HackerNews huggingface dataset:
NCC Group | Security Consultants | Full Time | Remote OR Chicago, Seattle, Austin, New York, Boston, Sunnyvale, San Francisco, and Waterloo (US and Canada only)

NCC Group is a global expert in cyber security and risk mitigation. Through an unrivaled suite of services, we provide organizations with peace of mind that their most important assets are protected, available and operating as they should be. We are passionate about making the Internet safer and revolutionizing the way in which organizations think about cyber security. We are a collective of tinkerers, researchers and security addicts from all walks of life. We are looking for security-focused engineers to join our security consulting team.

Job duties will include penetration testing, security analysis, and cutting-edge research into current technologies and attacks. The following technical skills and experience are important for being successful in this role: Web application and web service testing, Network infrastructure penetration testing, Mobile application security testing (Android and iOS), must be able to perform security-focused code review in 2+ programming languages, must have familiarity with secure configuration of Windows, Linux and MacOS systems and familiarity with cloud platforms such as AWS, Azure and Google Cloud Platform.

Apply to our open positions here: https://nccgroup.wd3.myworkdayjobs.com/NCC_Group or feel free to send your resume to tylir.russ@nccgroup.com (I recruit for our teams here in North America only).

We support US based remote work and will not require relocation post-covid but we are also looking for consultants in locations near our various offices listed above. Unfortunately, we are unable to support visa transfers or international relocation at this time.
The buffer holds 2K, so this limit alone which exceeds the buffer by 8K'ish didn't blind the fuzzer. It's not clear a larger input would've caught anything due to other "what went wrong" items, specifically "each component is fuzzed independently."
React native desktop is still experimental, the current version is 0.66 and not really that stable.
BLE has a privacy feature that enables MAC address rotation, but it isn't a requirement. Apple products and Android phones use the privacy feature, but other than that most products don't. The possibility of tracking someone via the MAC address of their Bluetooth devices is very real.

But you are correct that regular apps can't address the MAC address of connected Bluetooth devices, so the tracking vulnerability that OP is suggesting isn't really possible.
>"Defund/abolish the police" policy goals aren't evidence based.

This is absolutely false. Community groups have been putting together actionable, concrete and evidence-based abolition-centered strategies since the first slave-catchers were paid by the state. Educate yourself.

https://www.mpd150.com/
Kinda tangent, but when I was browsing NSS' repo ( https://hg.mozilla.org/projects/nss or mirror: https://github.com/nss-dev/nss/commits/master ) I found that the latest commit has a much older date (7 weeks ago) than the following ones. Why is that? (Sorry I don't know much about git other than push/pull.)
Merit America | Software Engineer, Growth & Admissions | Remote (US) | Full-time | https://www.meritamerica.org/

Merit America is a non-profit that has been named by the New York Times as “a glimpse of the hybrid future of training programs for the disadvantaged.” We want to build the most effective large-scale education-to-employment program in the country by helping Americans without Bachelor's degrees land jobs in tech.

We're looking for an engineer to join our growth and admissions team. This role will engineer growth experiments and build out tools to help our team handle tens of thousands of applicants this year (and hundreds of thousands next year). We're looking for someone with experience rapidly building for the web, who has an interest in user acquisition. This is the first engineer at Merit America — you’ll have a lot of autonomy and freedom over the tools/languages used, and a lot of growth opportunities.

We're a small team that cares a lot about making a positive impact. At Merit, you'll experience the best of start-ups and nonprofits: we move fast, but we also have work-life balance while help thousands of un/underemployed Americans build upwardly-mobile careers.

Learn more here: https://meritamerica.applytojob.com/apply/4g2rXkNwm3/Product...
Maker B crafts their videos as beautiful and well structured as their machines.
The Look of Cars Is Driving Me Out of My Mind
SingleOps | Sr. DevOps Engineer | Remote-US | Full time

SingleOps is looking for their first Sr. DevOps Engineer. In this role, the outcomes you will drive are identifying and address scaling bottlenecks in our systems. Improving our CI/CD process. Modernize parts of our software stack that’s fallen behind. Improve the observability of our systems for proactive monitoring and incident response. Develop and communicate Best Practices for deploying and maintaining our Cloud Infrastructure. (Sorry, we're not sponsoring at this time)

Some basic requirements...5+ years experience in a DevOps role; 3+ years of experience with AWS; 3+ years of Linux experience; Terraform; Agile

If interested, reach out to Taaj Alston at taaj@singleops.com. Here's the JD to learn more https://boards.greenhouse.io/singleops/jobs/5632081002
I have this problem, and contrary to a lot of people I don't protect a lot of my PI from Google. It used to be Google was good at giving me stuff I wanted in ads, especially in gmail but they don't really anymore. You would think the more they knew about you they would be able to give you better results, so maybe a large scale test should be done - if Google knows your PI do you get better or worse results, or doesn't it matter at all.
The problem is that the search space grows (exponentially?) as you increase the fuzzer’s limit. So there’s a cost, and likely diminishing returns, to raising that limit.
I started doing mine in Elixir last year but it was a very steep gradient combined with everything else going on in life. So excited to hear this! I will be watching every episode for sure.
I don't think these skills scale up to larger levels of human organization. Heck, the Agile folks often make that point specifically with regards to team and corporate structure.

We cannot be equally understanding and empathetic with everyone.
Ask HN: What were the most interesting events in your life?
I've been thinking a lot lately about the things in life that I enjoy looking back at. It seems to me that they're mostly weighted to be between my late teens and mid 20s. Is this a universal rule? What were the most interesting projects or events you have been involved with?
People from someplace it takes years to get here from reveal themselves (only) by playing games with US naval fleet training exercises?

Not even close to passing the smell test. Even Lovecraft's benthic Deep Ones from Y'ha-nthlei [0] are a more plausible explanation. At least They have some reason to care about boats putt-putting around the continental shelf.

[0] https://en.wikipedia.org/wiki/Deep_One
My office shutdown this year is three full weeks, from the 20th to the 7th. Nobody is burning PTO.
librsvg 1.0 was in 2001. Federico Mena-Quintero started switching it to Rust in 2017 (well technically October 2016), the rewrite of the core was finished early 2019, though the test suite was only finished converting (aside from the C API tests) late 2020.

So... carefully and slowly.
Serverless | Full Time |100% REMOTE | https://www.serverless.com/

The Serverless Framework has been an open-source project since 2015. It has quickly become the leading way developers deploy cloud applications on any FaaS provider. Serverless allows developers to focus less on administration, more on driving business value to end-users, and enabling organizations to innovate and get to market more quickly.

We are a team of 25+ globally distributed, fully remote, and Series B funded startup. We’re actively looking for product-driven engineers to join our team.

Here is what we are looking for:

-Frontend Developer/Designer - We build in React, but technical skills are not as important as your UI/UX portfolio and desire to build the next generation of software development tools and experiences. https://jobs.lever.co/serverless/23a8fae4-a87f-455b-ac8b-371...

-Senior Data Engineer - We’re looking for engineers with experience building streaming data processing architectures using a mostly AWS/serverless stack along with ElasticSearch and Timeseries data
https://jobs.lever.co/serverless/5927a860-92ad-4f58-a03b-fb8...

Feel free to reach out directly to us to start the conversation! joseph[at]serverless[dot]com
Gamebuntu
"Please don't comment about the voting on comments. It never does any good, and it makes boring reading." - The Hacker News Guidelines (https://news.ycombinator.com/newsguidelines.html)

Given that there's an extremely simple and straightforward answer to your question (smart TV manufacturers sell data obtained from spying on users, and they need a way to get that data from the TV to their servers), I would encourage you to give some thought before making such an empty and vapid comment about voting habits on HN.
Every "native feeling but glitchy mess" app I've had the displeasure to use turned out to be RN.
Committed locally long ago and recently pushed?
Holy crap that sounds shady. Can you point to the transaction on chain?
This looks really interesting. Very curious to see how it will end up working.
5 Days x 6 Hours = 30 Hours per Week

4 Days x 8 Hours = 32 Hours per Week
A Visual Workflow Library for Python
> He completed his 2 year diploma course in IT/Technical support. After the course, he did not get the interviews due to lack of Canadian experience.

That's one explanation.

Truth is a degree or a visa doesn't check for employability (unlike in America where someone has to be able to secure employment to come or stay in the country).

> To counter that, he modified his resume and added 2 fake experiences from top companies as Network Engineer.

So he lied about being an engineer after doing a two year tech support degree? That would be a pretty big red flag to me (and by claiming he's a real engineer, he might get afoul of the law).
Is the ability to fork the essence of what makes a project open source?

Why did you stop using it?
I actually did find it useful. Yes its obvious that destroying a phone would prevent photos leaking, but it didn't occur to me that this might be a good default position for me to take when considering sending in my phone for repairs, as horrific as that is. I would probably have just trusted google/apple too.
baeldung is the worst offender for java echosystem
My employer does this, and is the only one in town who does. It isn't deducted from our 4 week of vacation either. Its the only reason I stick around despite subpar pay.

It turns out the HR books are right and pay isn't the primary consideration after a certain point. The problem is that most HR people take that and say, "We're already soooo generous, we already offer unlimited vacation (lol), so we don't have to pay people too!"
Are there many resources available for someone who has an interest in putting together a basic OS on top of older hardware? Lets say 6502 for an example - where would someone who is experienced with much higher languages (C#/Java, etc) begin to even learn something like that?
Welcome.tech | Sr Rails/Full Stack Engineer | Principal Rails/Full Stack Engineer | Full-Time | REMOTE (all TZs) -or- Santa Monica, California

We are https://welcome.tech, a group of Gen -/+1 immigrants creating a suite of products to help the newly immigrated backbone of America succeed. Our bread and butter is our POPDERcard banking Fintech Product (occasionally, we have hit the top 15 rankings in the iOS App Store under Finance), enabling the unempowered masses to access banking. But we have way more products we have been working on that create exciting network effects. We have a small, intimate, and highly accomplished four-person engineering team. We are looking to scale this team with other skilled, humble, and quirky engineers.

==Our Tech Stack==

-AWS

-Ruby on Rails

-React.js

-iOS/Android (Swift/Kotlin) apps using simple native wrappers

-Lots of Fintech integrations. Right now, we are building a bank from scratch.

==Please apply here==

Senior Role: https://jobs.lever.co/urwelcome/b8e39212-8686-42a5-a2ea-bfa8...

Principal Eng: https://jobs.lever.co/urwelcome/654789ee-bb7b-4ea1-b0a6-63f8...

==Additional Info==
We are a B-corp that serves the community. Something that you won't find anywhere else. We also pay well.

(https://www.prnewswire.com/news-releases/welcome-tech-recogn...)

(https://techcrunch.com/2021/04/21/softbank-bets-big-on-a-dig...
By default, all satellite operators are blocked in India. I haven't checked in last year or 2, you cant even use Garmin emergency devices which are becoming common in west outdoors. To use the satellite phones, you need to apply to the federal gov (called Central gov in India) and you can rent the phone from ministry. Atleast, thats the process for tourist or who are entering India from other countries. There are some changes happened in last 1-2 years, few satellite companies got the lic to provide services, but I am sure all the devices and services are highly regulated.
I wish I could take a month off from my client obligations to jam on stuff like this. I always get started - make it a few rounds - and then get crushed by the pressure of everything else. These sorts of games are so fun with TDD. Red. Red. Red. Red. .... Green!

Anyone here currently on any kind of sabbatical to just decompress and learn new stuff?
What's somewhat interesting is memory safety is not a totally new concept.

I wonder if memory safety had mattered more, whether other languages might have caught on a bit more, developed more etc. Rust is the new kid, but memory safety in a language is not a totally new concept.

The iphone has gone down the memory unsafe path including for high sensitivity services like messaging (2007+). They have enough $ to re-write some of that if they had cared to, but they haven't.

Weren't older language like Ada or Erlang memory safe way back?
RudderStack / Full time / US Remote / https://boards.greenhouse.io/rudderstack

RudderStack is a warehouse first customer data platform (CDP) built for developers. We make it extremely easy to collect/transform customer data and send it to over 100 different marketing, product, analytic applications all with one snippet of code.

We’re backed by Kleiner Perkins and S28 and have raised $26m in funding and working with companies such as Stripe, Crate + Barrel, Acorns, Hinge, and Wynn Casino.

We are completely remote, looking to hire talent across the US, and internationally.

-Product Manager: https://boards.greenhouse.io/rudderstack/jobs/4189024004

-Product Designer: https://boards.greenhouse.io/rudderstack/jobs/4114763004

-Customer Success Manager: https://boards.greenhouse.io/rudderstack/jobs/4108604004

-Lead Developer Advocate: https://boards.greenhouse.io/rudderstack/jobs/4114739004

-Senior Technical Writer: https://boards.greenhouse.io/rudderstack/jobs/4144626004

-Conversion Rate Optimization Specialist: https://boards.greenhouse.io/rudderstack/jobs/4176514004

-SEO Specialist
https://boards.greenhouse.io/rudderstack/jobs/4176525004

ALL OPEN JOBS: https://boards.greenhouse.io/rudderstack

We're a fast growing team, and our roles are constantly changing, so if you're interested and don't see a role open please email us: roshni@rudderstack.com
This is not completely true.
LSM does not just convert random write into sequential write.
It also reduce the number of write IO when the dataset is larger than memory.

With B-tree inserting a random entry require reading all b-tree page from disk until the right page is found then writing the updated page (4KB) back to disk.

While in LSM if you are trying to add a new entry that is 300byte you only need to append 300 bytes to the top level file on disk.
Spoilers dude! I haven't started yet.
I went directly with Flutter so I don't have any experience with Xamarin. However I have read a lot of bad comments about it, they say it's buggy and frustrating.
Don't think for a minute this wasn't on purpose.

Project Zero exists for the sole purpose of trashing and defacing Google competition.

In the absence of actual process failure to report on they just resort to a disparagingly memorable title.
This entire argument hinges on the assumption that male pattern baldness is curable with 50 year old technology. If someone could prove that then they could develop a treatment with 50 year old technology.

What's far more likely is that the 'cure' for baldness will be the merger 21st century technologies including tissue engineering and genetic modification to make perfect and long lasting hair follicles for automated transplantation.

The argument you're presenting is akin to saying that people in the 15th century didn't go to the moon because there wasn't an economic purpose for doing it and not because there is no way to go to the moon with craft made of wood and iron.
Yeah, this makes sense. I'm optimistic and would like to say we're already half-way there. From my PoV very few new projects were written in C in recent years, except those inherently-C (their purpose was to call some other libraries written in C, or libc) and/or embedded (code size and portability requirements).
I actually extracted out the WAL listening bit of code from Supabase and use that to listen to changes in Postgres then do callback style business logic in Elixir. If you like Elixir, this could be an option.

I haven't had time to work on it myself until recently, but I brought up the idea of making that bit a separate library (and I understand that the Supabase folks are super busy).

https://github.com/supabase/realtime/issues/146#issue-874855...
If you consistently like/heart songs as you go along, put your Liked Songs list on shuffle sometime - you'll find great old gems!
The date of the commit is metadata which can be pushed later than it was made or even altered.

If you look around you can find cute tools to alter your repo history and have the github commit history graph act as a pixelated billboard.
To provide some context for my answer, I’ve seen, first hand, plenty of insecure code written in python, JavaScript and ruby, and a metric ton - measured in low vulnerabilities/M LoC - of secure code written in C for code dating from the 80s to 2021.

I personally don’t like the mental burden of dealing with C any more and I did it for 20+ years, but the real problem with vulnerabilities in code once the low hanging fruit is gone is the developer quality, and that problem is not going away with language selection (and in some cases, the pool of developers attached to some languages averages much worse).

Would I ever use C again? No, of course not. I’d use Go or Rust for exactly the reason you give. But to be real about it, that’s solving just the bottom most layer.
I don’t understand why the “lessons learned” doesn’t recommend always* passing the destination buffer size (using memcpy_s or your own wrapper). It has been a long time since I wrote C++, but when I did this would have been instantly rejected in code review.

*…with, I suppose, potential exceptions in performance-critical code when you control and trust the input; I don’t believe that this code qualifies on either count.
I’ve just disabled JavaScript. The site works fine and the prompt never appears.
Content Pulse _ Official
<a href="https://https://www.jazala.info/2021/10/blog-post_74.html">س... فيراري - افضل السيارات و مميزات و صور </a>
<a href="https://www.jazala.info/2021/11/tahoe-chevrolet.html">سيارة تاهو - مواصفات و مميزات و صور السيارة</a>
<a href="https://www.jazala.info/2021/11/blog-post.html">منصة العمل الحر - فري لانس نصائح و افضل المنصات</a>
<a href="https://https://www.jazala.info/2021/10/blog-post_74.html">س... فيراري - افضل السيارات و مميزات و صور </a>
<a href="https://www.jazala.info/2021/10/blog-post_54.html">هاتف سامسونج - افضل الهواتف و المواصفات و الموديلات</a>
<a href="https://www.jazala.info/2021/10/blog-post_38.html">فوائد العسل - فوائد جبارة لكامل الجسم</a>
Fullscript is hiring full-time developers remotely in Canada

JavaScript Engineers | Ruby Engineers | Technical Leads

We recently announced a $240M strategic investment. This partnership is a testament to the immense growth of integrative medicine and the dedication of our amazing team. We’re still small enough that a single motivated engineer can have a substantial impact on the trajectory of our platform.

Visit https://fullscript.com/careers#jobs to learn more
>On the other hand, why not a monolith and single instance?

Single points of failure are bad. I agree its orthogonal, which is why I inquired further about the, imo, odd suggestion.
One of the genius things about advent of code is that the server never needs to touch unknown, potentially malicious, code. The server just compares the claimed answer to the stored answer.

Maybe one way it could do the performance testing is: 24 hours after the puzzle is announced, a "speed test input" becomes available. The speed test input would be substantially larger than normal inputs. Because people have had time to write the code, all they have to do is dump the input into the code and put the output into the box the fastest. A notable bottleneck is that every problem does have to be solved by the server ahead of time, and if it starts taking ten minutes to solve each instance then that's expensive unless you use very small pools of inputs.
How do any of those things fix slavery? Or are you using a different definition for "willing" more akin to "would strongly prefer to".
Music is probably one of the only services where I get value out of being tracked and logged; I listen to enough different artists that it's very easy to lose track of something, and to find myself in a rut of listening to the same 10 artists for weeks on end. One thing Apple Music does pretty well is providing a bunch of different gradually-learning thingies that keep the rotation fresh.
But performance! Rust and other languages with bounds checking go out of their way to not do it once it is proven that they don't need to. It would be hard to do that as a data structure.
Senior Django Developer – Muck Rack – Remote
Muck Rack is the leading SaaS platform for public relations and communications professionals.
As a Senior Django Developer you’ll work alongside the CTO, fellow software engineers, product managers, and designers, to execute major technical projects on Muck Rack, lead the building of new features, and help shape our engineering culture and processes. Our engineers are not siloed to any particular part of the application–everyone contributes everywhere. You should be excited about working with large amounts of data.

Our tech stack includes Python, Django, Celery, MySQL, Elasticsearch, and AWS. Our technology team is focused on scale, quality, delivery, and thoughtful customer experience. We ship frequently without sacrificing work/life balance.

If any of this resonates with you, let's talk!
> Microservices, as a philosophy, is encoding your org design at the networking layer

Def the best/worst reason to use it, but it does - practically - make sense. Anyone who has had cross-team-monoliths will welcome this.