skysight-inc/HackerNews huggingface dataset:
> There is no excuse beyond “we want money more than a healthy society.”

Socrates's prosecutors called, they want their undisprovable accusation back! Serious any claims of "ruining" or "harming" society are specious and a classic symptom of a moral panic. You would think people would have learned from atonal music, Jazz, rock and roll, and rap alone having already ruined society. Let alone allowing women and minorities to vote and gay marriage and things getting better from a "ruined" society.
The best advice for images is to delete them. There's a widespread belief that meaningless pictures at the top of a post are critical. Here's the first link that comes up on Medium: https://equinox-launch.medium.com/trade-hard-win-big-dopewar... The value added of that image at the top is negative. This is, sadly, the rule rather than the exception.

Edit: This is an even better example: https://medium.com/general_knowledge/top-10-crypto-gaming-pr... How anyone can look at that image and say "that'd be perfect for the top of my next post" is beyond me.
where can one find such 4-day work week jobs? Jobs listed on most portals are either full-time or part-time (contract basis)
Don't forget GraphicsMagick!

http://www.graphicsmagick.org/
I get the cynicism, but not affiliated other than I donated myself.
Justice Centre prepares to challenge travel regulations in Federal Court
Read the actual law guys, it's nothing like that headline.

https://www.ola.org/sites/default/files/node-files/bill/docu...
The article says Chromium replaced this in 2015 in their codebase. (With another memory-unsafe component, granted...)
quick test is actually a bit impressive.
I'd get a 3rd party - one of the big financial planning companies / stock companies and put it there.. have them manage it with your stipulations.. no one can take $$ out unless she's 18, or dead.. anyone can contribute.

don't want something to go sour with parents (relationship or just hardships) and that gets used to bail them out. or lack of access used as punishment if she ends up being less than what the parents expected.

Trust fund keeps coming to mind but i don't think those are typically stock based?
Can you sign up for an IRA that young and just let some big hedge fund manager pick / manage the portfolio.. Or are you wanting to give say 1 share apple, 1 share facebook and whatever happens happens?
I'm not saying it has one, again the point was for people RMA'ing devices in the future to help prevent issues like this. A startup password with encryption could have helped prevent this.
Minor conveniences will destroy the world.
How does that work?

If you sleep 8 hours a day and work for 8 hours Mon-Fri, that's:

- work: 40hrs

- personal: 72hrs

- sleep: 56hrs

Switching to a four day work week would thus result in a 20% reduction in work hours but only a 10% increase in personal time.

I'm going to assume you weren't including non-work hours if they were on "work days", but that seems silly if you have a 9-5 job.
FTA:

> Have you ever been on a really good software team? There’s this feeling of connectedness, of shared purpose. We know what we’re building, and we are skilled at building it together. This kind of team can grow some amazing software.

> When we work at making our team great like this, we look for new ways of working together. The original agile movement scratched out imposed structure and asked the team to make their own. At our conferences, we talk about inclusion, empathy, emphasis on relationships. We talk about endless learning, freedom to fail, curiosity and compassion.

> In software, participatory sense-making means developing a shared mental model of what the software is, what it’s going to be, and how it works. We need to understand what we’re building deeply, with a clear language to talk about it. It needs to make sense to each of us, and to all of us. We construct this model together: that means there’s more of us to work at making it real in the world. It also means the model is richer, fits with more of the real world, and more rigorous. This comes from our many perspectives participating.

> In humanity, participatory sense-making is how we find shared reality in the different pieces of the world that each of us see. We build new concepts that exist only among our minds: money, economy, justice, law, music, conservation, fashion. These are real things that have causal effects on the physical world because we collectively create them.

It seems to me that even software people/communities, who have extensive experience working with complex models, very often fall victim to the same sort of counter-productive bickering when the topic of conversation changes to standard culture war topics. My theory (in part) is that when people are talking about such things, they tend to forget that they are talking about custom models of reality (we each have one within our mind) rather than reality itself....and as one should expect, chaos and strong emotions ensue.
This is my first time encountering this and I like it. I am looking forward to completing these this month.
Do you think it's possible it only appears pointed to you because of your own bias?
Yeah, I should not have used "increasingly", yet what you are pointing out is an example of an improvement in a single module, not the language compiler & llvm. It does not actually prove the original comment wrong.
If you are already doing code reviews, it is trivial to setup.

If you’re using microservices + monorepo, you need exactly the same thing, otherwise people will just commit in your service.

If you’re relying on multiple repositories, you can just split things within libraries and have the exact same effect. You can even have separate deployments with this arrangement.

Not to mention it is also an “uphill battle to get things set up properly” with microservices, so there’s really no advantage in using them for enforcing encapsulation.

But most important: a team unable to enforce encapsulation and code ownership is not ready for microservices at all.
Teaching thread management with puzzle games
Banyan Water | Director of Engineering, Junior Software Developer, Embedded Engineer | Austin, TX Onsite or Remote | Full-time | https://www.banyanwater.com /

Banyan Water is on a mission to use technology to help businesses save water. We’re a small company that’s found product market fit and profitability, but are still hungry to scale. We’re expanding our technology teams to help imagine and build new features and product offerings for our industry leading water management platform, Banyan Water Central. We offer competitive salary and benefits including savings matching and strong health offerings, and the opportunity to have ownership over important work on a meaningful mission with a small and capable team.

Director of Engineering:
https://banyanwater.com/dir-engineering/

Junior Software Developer:
https://banyanwater.com/junior-software-engineer/

Embedded Engineer - Water Conservation IoT
https://banyanwater.com/project-superintendent-project-manag...

you can see all of our opportunities and brief descriptions at https://banyanwater.com/careers/

email me a resume and brief introduction at bsmith (at) banyanwater (dot) com and mention HN in the subject.
> What's special here is the bug is a memory corruption, and memory corruption bugs in such libraries are usually instantly security bugs.

Is that special? Are there buffer overflow bugs that are not security bugs? It could be just my bubble as a security consultant, since (to me) "buffer overflow" assumes remote code execution is a given. It's not my area of expertise, though, so perhaps indeed not all reachable buffer overflows are security issues. (Presuming no mitigations, of course, since those are separate from the bug itself.)
JupyterHub 2.0
The goal in the D programming language is to allow the programmer to do unsafe things (no way to implement malloc() in safe code!), but it is not by default and isn't going to happen by accident. The programmer will have to positively do something.

It's also done in a way that a programming manager can mechanically verify the absence of such code. Exceptions can be flagged for special review. Often there are safe ways of doing the equivalent.
Understanding Cohen's Kappa in Machine Learning
Recently I've just punted and begun searching SO and Github directly.

One thing Google has gotten really good at lately is knowing that when I search for "John Smith" I mean John Smith the baseball player not the video game character or vice-versa.
Are you proposing that increased surveillance of mosques is to protect them? That requires a certain level of imagination given the full context of the quote:

> "Certain things will be done that we never thought would happen in this country in terms of information and learning about the enemy," he added. "We’re going to have to do things that were frankly unthinkable a year ago."

> "We’re going to have to look at a lot of things very closely," Trump continued. "We’re going to have to look at the mosques. We’re going to have to look very, very carefully."

----

And once again, it kind of doesn't matter. An increased focus on monitoring places of worship is monitoring people based on their religious identity. I don't know a single Christian who would argue to me that monitoring churches isn't the same thing as monitoring Christians.

Mosques and churches are not abstract concepts that are divorced from the people inside of them. When you monitor an institution, you are necessarily monitoring the people inside of it, and it is reasonable for them to be concerned about the government taking an interest in their religious-identity. To argue otherwise requires someone to completely divorce religious identity from the practice of religion, and that's just not a reasonable argument to make.

----

> Details are important.

Not in the context of the original statement, "ordinary people often do have something to hide, and should care about privacy." Look, whatever, you trust Trump. You shouldn't, but you do. Fine.

Do you trust Biden? Do you trust the current government not to attempt to monitor you based on your vaccine status?

You're fighting over the idea that "your guy" wouldn't surveil ordinary people, but this also kind of doesn't matter because your guy isn't in the Whitehouse right now, and I can guarantee you that Republicans are never going to have permanent power over the government. No party wins forever. You have as much reason as anyone else to care about personal privacy, why are you fighting over who specifically is a threat? Does it change anything about the overall privacy debate?
I always reply to these comments because well they are simply wrong for regular Raspberry clusters (this one is stupid though, but still fun to watch):

1) The Raspberry Pi 4 is THE cheapest 2Gflops/W computer ever made and probably that will ever be made in the future too! Peak of energy/resources/lithography/architectures and velocity of money against that, will most likely make it so.

2) You can scale the Raspberry cluster as you want it, only power the nodes you need, it's modular, one breaks you still have a few left, same for the SD cards which BTW while being so slow a Raspberry 2 (2W!) can saturate them they are SURPRISINGLY sturdy (my original SanDisc (every other brand has been a complete scam) are on their 7th year of 99.999% uptime, down when my power company cut the electricity for an hour).

3) The Raspberry cluster is smaller, cooler and silent (if passively cooled, it's the most powerful device that can be fully passively cooled at 100% CPU (7W) without becoming too hot to wear early) and wont fail because of failing fans!

4) For battery backup there is nothing better because beyond total of 100W for 24 hours you start to see the limits of what is practical to manage on a individual basis.

I post this picture every time: http://move.rupy.se/file/final_pi_2_4_hybrid.png (this is how you cool a Raspberry 2/4 hybrid cluster)
> But at the same time, I always hope that people recognize that these things are really not great solutions in general. This contraption idles at 15W (per the article) and pulls 24W during a benchmark. Within that power envelope you can pick up a more powerful tiny x86 board that takes up less space, probably costs less overall, and performs much better without requiring you to coordinate your project across 4 separate tiny computers.

I agree with all of this and if you really need to have multiple separate systems (such as to test/develop some clustering thing) you can easily turn a 25W-35W max TDP, x86-64 motherboard and cpu combo into a xen or kvm hypervisor, on debian or centos.

And put as many VMs as you need on that.
Direct links to the papers:

https://www.nature.com/articles/s41586-021-04086-x "Advancing mathematics by guiding human intuition with AI"

https://arxiv.org/abs/2111.15323 "The signature and cusp geometry of hyperbolic knots"

https://arxiv.org/abs/2111.15161 "Towards combinatorial invariance for Kazhdan-Lusztig polynomials"
wouldn't that be a good place to put him then? most of us aren't happy with most of our elected officials (both democrats hating republicans as an example and democrats not being democratic enough for some of their base)
Source (https://angel.co/company/sourcenetwork)| Toronto: Onsite, Canada: Remote | Full-Time | https://careers.source.network
Decentralized applications are a fast-growing market expected to reach $368B+ by 2027 and Source is pioneering the foundational technologies to help it get there and go beyond. We are building the future of data management and are the first database provider to receive backing from Dwight Merriman the founder of MongoDB, the predominant cloud database and a global roster of Web3 investors. Join our team and be at the forefront of innovation and creativity.

Our database, DefraDB, empowers developers to build edge and decentralized projects to scale fast, survive anything, and thrive everywhere while ensuring their users’ data privacy. Built using Peer to Peer infrastructure, Markle DAGs, CRDTs, and an array of new cryptographic primitives. Working closely with our CTO and co-founders, you will be part of a collaborative culture striving to make user-centric data interoperable across Web3.

We’re growing fast and are looking to fill the below positions:

ENGINEERING

-Software Engineer, Backend (Database) - https://bit.ly/3mMTnmO

-Rust Engineer, Backend (Database) - https://bit.ly/2WHKy2s

-Go Engineer, Backend (Database) - https://bit.ly/38sNvXw

-Full-Stack Engineer, Developer Experience - https://bit.ly/3BwCtgl

-Technical Writer (Developer Documentation) - https://bit.ly/3xMXQt1

GROWTH

-Full-Stack Engineer - https://bit.ly/3CKV5u6

-Product Designer - https://bit.ly/3xJmNpk

-Product Manager - https://bit.ly/3rrHJzX
I'm really curious why static analysis didn't catch this. If they weren't doing static analysis, I would probably have asserted that static analysis would catch this fairly easily.

My guess would be too many (false?) positives on bounds-checking causing them to disable that check, but I can't be sure.
The degradation of Google Play Music into YouTube Music has to be one of the most disappointing product merges in history. All of the power functionality disappeared. I can't even find the music I want anymore without great effort.

As a consequence, I'm listening to my favorite artists less frequently, and haven't even thought about concerts, festivals, albums, etc.

A dumb but rich tabular music + metadata store would be a game changer. Add in tags and multi-dimensional ranking, and I'd be in heaven. Add an API, and I'll gladly pay $50/mo.

I want iTunes 1.0, but with the ability to sync between the cloud and all of my devices. With smart playlists that can operate over my tags and ratings.

That's it. No music videos, no real need for album art or lyrics, but certainly no UI removed for simplicity or dumbing down the product.

I want to index and traverse my music in my own way.
Looking for finance/strategy/ops positions

Location: Bentonville, Arkansas
Remote: Yes
Willing to relocate: Prefer remote but open to relocating

Technologies:
- Targeting finance/strategy/ops positions, but have experience in tech/data science
- Worked on Wall Street in tech investment banking, and then as an investment professional at both a growth capital firm and a hedge fund
- PhD in financial accounting / capital markets
- Bootstrapped a data analytics business, which unfortunately did not survive the pandemic
- Experience with Python, pandas, SQL, data science

Résumé/CV:
- https://aseda.co/resume.pdf
- https://www.linkedin.com/in/kevmbutler/
Email: gmail kmbutler
Five space mining patents you're allowed to use
It's cool that redundancy is a built-in feature at least.
OPSEC is about lowering the probability of things going sideways, there are no guarantees either way
‘Matrix Resurrections’ NFT Website Crashes After Overwhelming Demand
The ones in the office do the same. They just spread the day of not-working over the whole week and have the added stress of having to pretend to work some of the time.

Though actually it's more like 2-3 days of not working, spread out, more often than not.
This title has a typo - should be One-more-re-nightmare.
Parity Technologies | Berlin, Germany or London, U.K. or Lisbon, Portugal or Remote (relocation available) | Full-Time or Contract | https://www.parity.io/jobs

Parity is a core blockchain infrastructure company. We're creating an open-source creative commons that will enable people to create better institutions through technology.

We are hiring across our entire company for both technical and non-technical roles. Positions which we are looking to fill ASAP include:

- Core Engineers (Rust, Go, C, or C++) (https://boards.greenhouse.io/parity/jobs/4030037003)

- DevOps and CI/CD Engineers (https://boards.greenhouse.io/parity/jobs/4544227003)

- Internal Tools Developer (https://boards.greenhouse.io/parity/jobs/4030025003)

- Full-Stack Engineer (https://boards.greenhouse.io/parity/jobs/4328483003)

- IT Support Analyst (https://boards.greenhouse.io/parity/jobs/4439154003)

- Security Analysts (https://boards.greenhouse.io/parity/jobs/4766044003)

Please apply directly to a position you are interested in on our website (https://www.parity.io/jobs). If the position you're interested in is not listed or you'd like to reach us personally, you can email recruiting@parity.io.

If you email, please include the position you're interested in and some profiles to check out your work such as LinkedIn, GitHub, a personal website/blog, etc.
I wouldn't say it's a scam exactly so much a high pressure sales. Take a look next time you're at a funeral home or on a used car lot. Essentially the same cast of characters.

Unethical but legal. Depends on your definition of scam.
There's also https://512kb.club/, which ironically is on https://250kb.club/.
Gitcoin ( https://gitcoin.co ) | Senior Engineer, Product Manager, Project Manager | REMOTE | FULL TIME | https://gitcoin.co/jobs | https://gitcoin.co/results

Gitcoin's mission is to "Build & Fund the open web". Gitcoin is a toolbox of blockchain-based tools that help open source repo maintainers fund, incentivize, and manage work in Open Source Software.

We are a team of 35 that is funded well by Consensys + Paradigm, and have distributed about $40mm to the Ethereum ecosystem since launch in November 2017.
Neat. Curious if you looked into using AI for summarization?
Lean is getting the most math buzz of late. The HoTT people instead use Coq, which has to be adapted to their purpose. The differences could be its own thread. I love how you allow that dependent types are now "vanilla"; perhaps more people will migrate from Haskell to Idris.

The HoTT book is the trippiest read.

I said "perhaps", and what's an opinion worth if it's not obviously an opinion? Eilenberg has category theory and homological algebra to his credit, those are entire subjects that have shaped the last seventy years of mathematics. I'm happy to throw him into the debate.
Thanks! Title updated
And what was the point?
Is DRM applied to iTunes Match too now? That's unfortunate.
Whoa, this looks great!
Boom and Bucket – Most Trusted Used Equipment Marketplace for Buyers and Sellers
I am a large burly man with a beard. I noticed right away that my interactions with people completely changed when I got glasses maybe 5 years ago. Way more random conversations with people in public. Way more friendly looks. It's very interesting.
I often see subtle misuses of interrater reliability metrics.

For example, imagine you're running a Search Relevance task, where search raters label query/result pairs on a 5-point scale: Very Relevant (+2), Slightly Relevant (+1), Okay (0), Slightly Irrelevant (-1), Very Irrelevant (-2).

Marking "Very Relevant" vs. "Slightly Relevant" isn't a big difference, but "Very Relevant" vs. "Very Irrelevant" is. However, most IRR calculations don't take this kind of ordering into account, so it gets ignored!

Cohen's kappa is a rather simplistic and flawed metric, but a good starting point to understanding interrater reliability metrics.
That's because these are "lessons learned" for how to catch these bugs, instead of "how to write more secure code".

Because you can't.
Meta comment: this is a instance of where the NH comments are more interesting than the original article.

I was reminiscing about how much time I used to spend at the library as a child and how my children are missing out on that.
> Some of the closest bonds I've built with other engineers happened at 5AM on a Monday morning because we need to debug a server failure live in prod. All hands on deck! Raise the hacker flag and pass out the RedBull!

See, this is exactly the toxic work culture this is preventing. I don't want to be working at 5AM on a monday morning, and I don't want coworkers to do so either, creating cultural pressure I do.

There shouldn't be "personal responsibility" when it comes to workers rights and (self-)exploitation.
ImageMagick is an incredible bit of kit. It really is a piece of magic that surrounds us daily, that most people don't ever think about, but is easy to use, and insanely powerful.
Yep, and I think we should apply the same principles to consumer technology. You should be free to do unsafe things - but it should not be possible to accidentally do unsafe things.

It should be harder to have your photos be unencrypted on device, accessible via any USB connection, than it is to have them to be entirely inaccessible at rest.
This is why I find it extremely irritating when non apple users can’t understand why I use apple stuff. On many levels, not just music, they offer things others don’t.
I don't know about using a CLI to edit images, but one of the best thing of having imagemagick installed on my workstation (it's an absolute essential) is the 'mogrify' CLI tool to batch resize, manipulate or change formats of a whole directory full of images.

https://imagemagick.org/script/mogrify.php
> You always have to assume ignorance over malice first

At a certain valuation (namely, well before yours or Patrick's), ignorance becomes malice. With the resources Stripe has, it is outrageous that there have been a non-zero number of cases where for example references haven't been checked before an offer letter was sent. That Patrick is ignorant about this, as you claim, is even more damning, as it suggests no one knows what is going on at Stripe.

So I guess thank you for your scathing review of Stripe's hiring process, and for giving us the notion that Coinbase is probably an equally toxic workspace?
Hi,

I’m sorry if it appeared that way, it was quite difficult for me to covey properly my thoughts on this subject.

I wanted to portray that it just makes sense that music software isn’t made that way anymore since a lot of people do not follow that kind of paradigm anymore.

I don’t think there is only one good answer about how to tackle music software.

I hope my answer cleared this up!