skysight-inc/HackerNews huggingface dataset:
Location: Tbilisi/Georgia
Remote: Yes
Willing to relocate: Yes
Technologies:
Docker/Kubernetes/Rancher/ELK/Prometheus/Grafana/CICD(Gitlab/Jenkins/Code
Pipeline)/AWS(EKS/EC2/CloudFront/
Elasticbeanstalk/ELB/RDS...)/Bash/Ruby on Rails/CloudFormation/Terraform.
Resume/CV: https://www.linkedin.com/in/pheikrishvili
Email: giapheikrishvili@gmail.com

CKA/Terraform Certified DevOps Engineer with 6+ years working in Development/Operations.

Mainly focusing on creating scalable/highly available infrastructure in cloud as well as on premise servers with security in mind.

Always trying to automate processes as much as possible using Jenkins/Gitlab/CodePipeline.

Looking forward to hearing from you https://calendly.com/giapheikrishvili/30-min-interview-with-...
I've been using copilot to write markdown files for a while already and it's really useful. Like the Gmail/Google docs autocomplete but way better.

It's also nice that it uses the structure of the current file and (I think) context from your codebase, so i.e. if you're writing structured documentation, it's occasionally able to write out the whole function name with arguments with descriptions, all in the right format. Very impressive.
> there isn't a clear way to define DDoS either

It isn't clear to me that there is. The difference seems to lie in intent.

You could maybe nail a group making many requests without using the data for anything as making many spurious requests and hence having ill-intent, I suppose. Maybe having dedicated servers for such a tasks prove it even more?
Yeah I feel like this would be mostly used for nefarious purposes since it wouldn't be obvious it was there. Other than that I can't think of any way that it's better than just a raspberry pi.
Sometimes i write a little function, think "hmm, i remember i did something like this before", do a search, and find a function with the same name, and exactly the same implementation. That is always really pleasing!
Who says you can see the side they swapped the optic on? For datacenter cross connect links, its not uncommon for the other side of the link to be somewhere you can't see/have access to.
Ah, yes. That is a different point than the one I thought you were making.

Both the symmetric and diagonal cases are lucky ones where the constrained derivative is the same shape and size as the original (as the constrained manifolds are flat). Keeping it as a Diagonal in code then just works.

This is in marked contrast to "unit vectors", "orthogonal matrices", or similar non-flat manifolds. The derivatives in these cases although locally are the same dimension as the manifold, usually must be represented as something that spans the entire containing space once you deal with derivatives at multiple points.
You don't need to be a conspiracy theorist here: producers and filmmakers are humans too, they are impacted about constant bashing from media, social media and others than sell/promote fear such as terrorism, global warming, refugees, disasters of all kind. Also social media in our pockets tends to exacerbate the alarmism with every bad event reaching us instantly, and the good ones never really do. Filmmakers, being artists, they tend to express themselves, so they might be some of the first to show this new trend.

Media and especially social media are not a conspiracy either: they want to sell and they are also humans.
I have only seen this issue when running pfsense. and then to fix it i set up rules for the switch to ahve the type of NAT it wants.

When i use a router from my ISP it always just works.
Attacking RDP from Inside: Remote Desktop Named Pipe Vulnerability
Why is a browser extension required to access research papers?
There are a series of subreddits concerned with machine learning topics. In those subreddits there is an organization named CatalyzeX that is constantly promoting their browser plugin to access the latest ML papers, code, etc.

Here is one such post of theirs: https://old.reddit.com/r/LatestInML/comments/s2l10i/given_a_single_video_of_a_human_performing_an/

My question: why a browser extension? This really smells fishy, because a browser extension bypasses any browser security one may have, and has access to one's entire computer. What valid reasoning could there be to justify a browser extension for this purpose?
I don't think the replay capability is as well integrated as other SaaS.
Without Windows and Office, there would likely be no customers for Azure.
Well, them reading this data is a known fact, mostly from Snowden's leaks.

Blackmail happening is harder to prove, but it would approach incompetence if the NSA at least found no opportunity to blackmail someone using the data we know they have access to.
My point is that even speedrunners are just booting up the game and playing it. Something transformative would be something like taking the binary representation of the game and turning that into an image to be a piece of art. Even though it's a derivative work, it's no longer is just the game.
Like Lost
HyperTIES Discussions from Hacker News:

I’m putting this lightly edited archive of a bunch of different discussions and email about HyperTIES, all together in one place here on Medium. Please forgive the rough wall of text and redundancy, but I haven’t yet had time to distill it all down into one sentence. I will just include the email I sent to Ben Shneiderman summarizing the interesting posts and links, for now. Here goes:

https://donhopkins.medium.com/hyperties-discussions-from-hac...

[...]
YAGNI is a good principle here. Whenever I've found myself thinking about reaching for a parser library, I was over-complicating or over-generalizing the problem. Write the code you need to solve the problem you actually have.
Speaking of which... when is the final season gonna come ?
> What happens when a vulnerability is discovered? What happens when the library's dependencies gets deprecated?

The same as what happens with non-shitty code, you fix it.
Open source version is quite stripped down and enterprise was about $500 / mo or so iirc.
Slightly tangent but one thing that these code practices languages often miss is using the language to its fullest. Most beginner developers who are not very used to the language reinvent the wheel for a lot of in-built functions. For example, I've seen stuff like:

`
const arr = [];
for (let i = 0; i < anotherArray.length; i++){
arr.push(someOperationOnEachElement(anotherArray[i]))
}
`

instead of

`const arr = anotherArray.map(someOperationOnEachElement)`

Not knowing what your tool/PL can do can lead to hard-to-maintain code. One should really leverage the expressiveness and syntactic sugar wherever relevant.
When biometrics can be outsmarted this way, we need to talk
HN really exaggerates these things.

The mythical 50-100% pay bump can happen if you’re making the leap from some local, no-name small business to a FAANG type job, but it’s not like you can continue repeating that over and over again. It’s kind of a one-time leap that people make from average jobs to top paying jobs. Going into the $500K type jobs isn’t as automatic as people here like to make it sound, unless you’re looking at people who started at rocket ship startups before the stock took off. Even those engineers struggle to get back to those compensation levels when the dust settles and their RSUs go back to normal.

It’s also not as common to find remote work combined with sky-high salaries as HN suggests some times. While I do know a lot of people with remote FAANG jobs, it wasn’t easy. Basically years of working their way specifically into those positions with hard work and building a reputation to warrant it.
Bad or under-performing managers will always be there, unless you work in a utopia. If you add un-fireable employees to the mix, you only compound the problem. Un-fireable employees also amplify the dead-sea effect: where good people will leave anyway after a while, but bad employees never do...what do you end up with?
That's an interesting point of view to explore. Is it worth more to attract a few highly capable developers or a lot of middle capable ones?

Your code practices will probably resonate differently on each of those groups, so you will probably have to choose. And I don't think there's a generic correct choice like you imply.

Also, by how much are people even capable of choosing the (required) expertise level of the code they create? I'm not sure we can deviate a lot from our natural level.
I read TFA. It was a roundabout experience.

The cookie policy is explained as if there is some semblance of user choice, but actually there is none. You have to accept performance cookies, functional cookies, and Targeting cookies because they don't offer opt out at all, despite offering what looks like a UI tier. But they only offer this guidance:

> We have divided the Cookies we use into the following categories: Strictly Necessary, Performance, Functional, and Targeting. Under each category heading below you will find a general description of the Cookies in each category. You can change your browser settings to block, delete, or alert you to Cookies. The Help menu on the menu bar of most browsers will tell you how to do that. However, if you do, you may have to manually adjust preferences every time you visit a site and some features may not work as intended.

The article itself has a headline that seems to suggest cellular death processes have been found to be reversible, or at least, not irreversible. But the text reveals that the research finding is not anything to do with reversibility. Rather, it is about interruptibility.

When they install an optogenetic switch in the organism to trigger the process, it functions as an On/Off switch. But there is no reverse switch, in the same way that there is no On/Off switch for the tracking cookies.

TFA, on one level, is an exercise in creating expectations for switches that don't exist.
OK, fair enough. I guess you can minimally complicate this by updating an exactly identical machine/boot drive first, and then immediately alerting if health checks fail on that. But it really doesn't seem that bad to me. I've run a VPS that's been self-updating continuously since Feb 2019, and I've not had many breaking issues with the OS.
This seems so nice for NSA-like implants...
If you think of installing it onto HDD/SSD/NVME, then never since a few years.

I'm booting it into RAM from USB-Keychain or SD-Card, do updates in RAM, and occassionally 'remaster' that back onto the (removable) boot media.

Benefits: everything is always f...ing FAST!

Disadvantages: limited by available RAM. Starts being practical with 8GB, where 'OS' can take anything from about 700MB to 1.8GB, depending on my needs.

Good for uptimes of 3 to 4 months on 'Desktop', after that a kernel-update seems prudent anyways. Anything else can be handled by stopping everything and logging out, then logging back in. Takes a minute, or so.

Spoken from Antix- & MX-Linux.
"if it does not break, don't fix it. If you fix it it breaks, you must hold both ends"
set up rules in your firewall for the correct NAT type either for your whole network or just those devices - unless something has changed recently.
Fully agree. I have a background in C/C++ and a bunch of other languages, I'm probably in a better position to write native apps, and am no Electron fan, but I never got into native GUI's for a reason. Certainly if they have to be portable, it's an absolute mess. I already did throw together basic VueJS web apps for management interfaces for another projects, and now I need a similar interface, but with some OS-level access. My choice right now is not between a native app or an electron (or something similar) app, it's between having an actual viable project/product or having nothing at all.

I can't afford to waste time and money on native apps for multiple platforms. And I know that once my thing would bring in money, I could easily find someone not too expensive to take over the work on that UI.

Native apps cost a LOT more money, not to mention organisational overhead to bring feature parity to all. Bringing something native to 4 platforms is nowhere near an x4 cost, optimistically it would be more like x8.
I don't think Angular targets small projects, but enterprise projects.

> It's like all the horrible sides of OOP and abstraction, but on steroids.

Can you go more into detail?
I also find that hypothetical "interns" are great for this. Something about "this person without a degree, who probably hasn't been working for very long, who doesn't know your organization or who to ask, and is probably very scared of looking or sounding stupid."

It doesn't necessarily imply or require stupidity, but in my experience on both sides of it (writing docs now, and having been that intern), they actually make pretty great litmus tests for documentation and how accessible organizational knowledge is.
I hear this a lot - it’s a non starter. There are only a few places that are walkable in the US, and they are all expensive.

The suburban hellscape where you can walk to a church more easily than a bar is simply not a substitute, even if housing were free of charge.
Ha! Interesting, I had noticed the horses seemed off. In the comments it looks like the author was playing with CGI and modeled it on the Dutch failure video. I'd obviously just posted results of a quick search for short vids.
For packages that have images and css, it reads css and extracts image files to be bundled.
Not using indices at all when iterating whenever possible completely eliminates the cognitive overhead.
we can assume this also exists in SFP devices aswell. SFP's are relatively simple devices with room to spare, especially for a nation-state actor.

The issue is this is completely undetectable.
That's a fair point though in that case someone with physical access can do essentially anything with the cable anyway - this "just" makes it easier.
Everyone reacts badly to this when they first hear of the concept. Then at some point you realize, that you actually don't like the scripts that won't fit too well to this. It's like a fashion sense, hard to describe the thing.

A friend of mine, when he heard about this in the class, argued "but I want to create something unique that doesn't fit to this or anything else, like... the Matrix!". The professor was speechless for a moment but could keep his calm :)
A recruiter related this story once at a former employer. I have no idea if it's true, but it remains incredible to tell.

In a past life, he'd been hired to find a cybersecurity expert in a very niche field, where there are really only a handful of people with the proven chops. Naturally, all of them are happily employed and unlikely to switch, so he decided to get clever.

He zeroed in on one target. First, he thought, let's find out contact information. A quick Google search turns up nothing (no email, no phone number, no social media handles), but a more advanced one with boolean filters brings up a link to a personal website that had long since been taken offline.

So my recruiter used the Wayback Machine to inspect the link, and finds, to his joy, it's been cached. In the About Me section, there's a small snippet about how he enjoyed playing chess and a social media handle.

Now the recruiter gets even craftier. He uses the Foursquare API to track his check-ins from the social media handle. Over the course of a few weeks, a pattern emerges - every Friday, maybe a Thursday, the expert would check in to a local bar. So this recruiter simply shows up at that bar on a Friday, and waits for the guy.

He lets him sit there for a bit, nursing his drink, and then sidles up to him and starts a conversation about chess. They bond over it. The guy invites the recruiter to his local chess club, who meet every Sunday. Over the next few days, the recruiter gains his trust, learns what this guy wants. Then finally he pitches the company he represents, addressing everything the guy had brought up to him in the conversation. He walks away that evening with a willing candidate who would go on to get hired.

I have no idea how true this story is. This recruiter was an unusual fellow, and he only stayed for a few months at my former employer.
Do you think your company would have the same reaction if engineers ask for a substantial (5-figures) bump in stock year over year?
It looks like this makes Fathom Analytics the only provider for website analytics that you can use if you don't want to maintain a locally hosted version if an open source product – which blows my mind. A small company is the only service that is able to comply with the rules while huge ones simply fail.

I assume that this regulation is also coming to other services soon and analytics isn't the only service that needs to be replaced when a business is in the EU and can't ignore these rules without risking fines. The team at Fathom wrote about alternatives for lots of services here: https://usefathom.com/blog/degoogle
* Scenario 1:

Malware running on your network requests port over UPnP. Router accepts it. Hacker has direct inbound access to code they control.

* Scenario 2:

Malware running on your network requests port over UPnP. Router denies it (UPnP is disabled). Malware doesn't know how to open a reverse tunnel. No inbound access.

* Scenario 3:

Same as 2, but malware sets up reverse tunnel. Hacker is in.

* Scenario 4:

Buggy and/or sloppy firmware that's not otherwise malicious requests port over UPnP even though it doesn't need to receive connections from the Internet. Router allows it. Hackers know about this slop and other CVEs on device. Network compromised.

* Scenario 5:

Same firmware from 4, but this time UPnP is disabled on router. It's safe to say this non-malicious firmware doesn't set up a reverse tunnel. No inbound access.

This is obviously a very simple threat model but from here you can see that 2 out of 5 attack scenarios would have been prevented by disabling UPnP on the router.
Also, the screenshot makes it pretty clear he's aware of the risk of this device.

https://blog.benjojo.co.uk/asset/xaTe0Gf3Az
Oh wow, that is nasty.
If your data is in Russia, the Russian government can do what they want with it, within the limits of Russian law (at least theoretically). If your data is in France, the French government can do what it wants with it, within the limits of French law (at least theoretically).

Now, most countries have close to 0 protections for non-citizens' data - particularly, the USA has 0 protections for a French person's data sitting on a Google server. If a US government agency wants to read this French person's data (of any kind, including, say, medical records), they can ask Google for access to it and, if Google agrees, they can just use it. If Google doesn't agree, they only need a warrant against Google, not against the French citizen in question.

The same is NOT true for a US citizen's data - which is more or less sufficiently protected, at least theoretically. But foreign nationals' data that happens to reside in the USA has 0 legal protections from the US government.

On the other hand, the US government can not (legally) obtain data that resides in France or Russia, unless they work with the French/Russian legal system to obtain access to that data.
Actually aggressively promoting "diversity" (like forcing people into diversity trainings) would count as toxic workplace culture to me.
People are also human, and as employees we tend to expect management to be perfect.
Why? Unless you’re sure that the stock price will tumble, it makes no sense to increase your base pay aggressively. Most higher engineering levels will top out their base in the 200-300 range and all the rest of compensation will be via RSU.
The hospitality sector is run the way it is due to the vast supply of labor that can and are willing to do that job, in conjunction with the weak minimum salary laws.

Wages and working conditions will get better if supply of labor is reduced and/or minimum salaries are increased.
Show HN: 24hourcharts.com – Make Charts from Any Website Table
>show large-scale action

There are many large panning/sweeping shots in this series, such as when the ents attack Isengard, orcs besiege Helms Deep, when the fellowship runs through Moria...

Sure there are some quick cuts happening in some swordfighting scenes. And I agree it could have been better if these scenes were shot in a different format.
We could call it GDPR for short.
Thank you for hilariously illustrating how bubble-y the current moment feels.

If you think dramatically increasing compensation is going to continue in the next decade like it has in the last one, I think you might be disappointed.

Now that companies are comfortable with remote, HR departments are eventually going to realize that services like Deel exist, and that its not actually that hard to hire employees overseas.

Once job ads start removing the "US only" part from the requirements, comp is going to come crashing back to earth.

A remote worker in the US being paid 4-5X as much as a remote worker in Europe is a massive market inefficiency just waiting to be arbitraged by companies.

As the tech giants growth inevitably slows over the coming years, they're going to have to start looking more closely at their cost structure to meet investor expectations.
We were very close to doing the same but then we discovered Svelte. Svelte has been a dream to work with so far.
The military in the US is a great opportunity for young people (just out of high school) who can't afford college. They identify and promote talent. I know several ex Army guys who served and they are top notch people to work with. The Army paid for them to get masters and phd degrees. They also turned them into great managers who get things done. If you are young and poor but have ambition and drive, the US Army is a great choice.

I also admire the overall benefits program. Great health care, pensions and perks such as USAA memberships are really valuable. So it's difficult to put a number on their total compensation. It's much more than it seems and passes down (somewhat) to future generations. For example, my children can be USAA members because my father was in the Army in Vietnam (50 years ago).
Data Science is all about writing shitty code. Most of the time you're just digging for data in a notebook, and then you can write things out proper once you've got something that could work.
Ah, again? Happens to me all the time.
Rich Hickey's Book Recommendations
Didn’t flappy bird make 50k a day
I think all of those things are rewarded, it's just that the rewards are intrinsic. If you do any of those things well, it will be enjoyable for you.
Centrly | Senior Full-Stack Software Engineer | Remote (USA) | full-time

https://centrly.com/ - An early-stage, VC-backed startup upending the traditional strategy consulting model with deep market intelligence.

Who we are - an eclectic group of MIT engineers, board gamers, long distance runners, and puzzle-solvers.

Who you are - a generalist who gravitates towards hard problems, executes in the face of uncertainty, and learns continuously. Things you'll help build -

- Information extraction systems that track and structure the world's business & technology news

- A category-defining product that helps people unravel and understand complex markets

- The AlphaGo of corporate strategy

What we offer - competitive salary, benefits, equity in a growing seed-stage startup, full remote flexibility, team board game nights, and a commitment to your personal/professional growth and well-being.

Please contact ted.nichols@centrly.com for more details!
Exceptions don’t prove a rule. There are engineers who are also similarly valuable - and they get paid well. But exec/manager/admin pay is always inflated, regardless of that value. I say this from personal experience and insight into salaries at various kinds of companies, FAANG included.
Those references ultimately go to Christian scholars who are looking for evidence for their beliefs, not secular historians. And they are basing them on the same records I mentioned (all written well after Jesus was said to have lived).