skysight-inc/HackerNews huggingface dataset:
Stacklet | Remote Software Engineering Roles | Full time | https://stacklet.io/

We're hiring for both front end and back end engineers to join our growing team here at Stacklet. From the creator of the widely used OSS Cloud Custodian, which is now part of CNCF, Stacklet's mission is to help organizations be well managed in the cloud through the effective and automated management of security, operations, cost optimization, and cloud resource visibility.

You will have the opportunity to work on solutions to help organizations in the world be better managed in the cloud. You’ll work with a team that is kind, brilliant, distributed, and who are committed to building the best products and solutions. We work smart and find ways to have fun together as often as possible. Every day is a great day at Stacklet!

https://stacklet.io/careers
Ask HN: Why do you love programming?
Personally I cannot express this better than what Frederick P. Brooks said.

From his own words:

Why is programming fun? What delights may its practitioner expect as his reward?

First is the sheer joy of making things. As the child delights in his mud pie, so the adult enjoys building things, especially things of his own design. I think this delight must be an image of God's delight in making things, a delight shown in the distinctness and newness of each leaf and each snowflake.

Second is the pleasure of making things that are useful to other people. Deep within, we want others to use our work and to find it helpful. In this respect the programming system is not essentially different from the child's first clay pencil holder ''for Daddy's office." Third is the fascination of fashioning complex puzzle-like objects of interlocking oving parts and watching them work in subtle cycles, playing out the consequences of principles built in from the beginning. The programmed computer has all the fasci- nation of the pinball machine or the jukebox mechanism, carried to the ultimate.

Fourth is the joy of always learning, which springs from the nonrepeating nature of the task. In one way or another the problem is ever new, and its solver learns something: sometimes practical, sometimes theoretical, and sometimes both.

Finally, there is the delight of working in such a tractable medium. The programmer, like the poet, works only slightly re- moved from pure thought-stuff. He builds his castles in the air, from air, creating by exertion of the imagination. Few media of creation are so flexible, so easy to polish and rework, so readily capable of realizing grand conceptual structures. (As we shall see later, this very tractability has its own problems.) Yet the program construct, unlike the poet's words, is real in the sense that it moves and works, producing visible outputs separate from the construct itself. It prints results, draws pictures, produces sounds, moves arms. The magic of myth and legend has come true in our time. One types the correct incantation on a keyboard, and a display screen comes to Hfe, showing things that never were nor could be. Programming then is fun because it gratifies creative longings built deep within us and delights sensibilities we have in commonwith all men.
Annoyingly, Google doesn't actually support app-specific passwords for accounts that don't have two-factor authentication enabled. So for use cases that require a password (eg SMTP), there's literally no other option available.

(Yes, 2FA increases security, but if someone doesn't or can't have it enabled, for whatever reason, that's no reason to prevent them from using app-specific passwords)
VERY unconvinced.

RIPE's response is all that matters, not mine. Attempting to remain neutral in conflicts like this is important. Leave possible avenues of communication open so that diplomacy may happen.
I wish especially AMD would offer Java Card support through their PSP to the operating system, at least if the PSP is resistant to MMIO attacks on the integrity of the Java Card memory.

Being able to open a Diffie-Hellman encrypted, mutual-signature-authenticated channel to a remote device to then receive an AES key for disk encryption is far better than some TPM header that can easily be sniffed with physical access.

Would be even better if NVMe SSDs were able to authenticate themselves and let you transfer in a key over a DIffie-Hellman channel so sniffing the PCIe bus wouldn't deliver the key (or a non-PFS-encrypted encapsulated form of it) to an attacker.
The speeds of NVMe SSDs unfortunately prevent LUKS from being cheap, and TCG Opal is kind of a joke from a security standpoint (doesn't even (seem to) specify that the provided "password" is used to derive a key, suggesting that it may just be used via a password hash to compare against a database entry to decide whether to unlock a disk encryption key).

Even TPMs don't seem to encrypt the communications channel they use with the CPU/PSP, and they are often socketed which makes MITM attacks easy with physical access. If they'd offer Java Card, they'd at least be somewhat useful...
>>spam got "mostly solved" well enough.

Did it though? Gmail is still having a tough time blocking all spam.
Navier - Electric Hydrofoil Boats - Alameda, CA - Help decarbonize one of the major modes of transportation!

Careers page: https://www.navierboat.com/careers

We're looking for the following roles:

Embedded Software Engineer

Robotics Software Engineer

Simulation Software Engineer

Mechatronics Engineer

More info here: https://techcrunch.com/2022/02/07/navier-seed-raise/
Thanks! If you can recreate the installation steps in the Dockerfile (https://github.com/growthbook/growthbook/blob/main/Dockerfil...), it should be possible to run it yourself on a shared host. Basically, install NodeJs + Python + dependencies and run the build scripts.

A lab tutorial for uberspace sounds awesome! We're happy to help you get things set up if you run into any issues.
Oh didn't see that. Page was refusing to load at first.

Well this restores a bit of confidence if they actually manage to get customers. Though, I still think they won't make their initial investment back and then they will kill the product. Hopefully I am wrong.
It looks like they brought the security fixes to all versions via the launcher. https://help.minecraft.net/hc/en-us/articles/4416199399693-S...
Nobody in this thread mentioned cutting off communication, aside from you. One poster mentioned they worked on a "device to block cell phone usage in prisons".
I saw these comments and thought people were being grumpy about change for no reason, as usual. Then I opened MDN and... yeah no. Any way to get the old design back?
It was not clear to me from the terms and conditions: is anyone aware what data they do or could collect? And what the business model is (I know they have a paid plan, but that doesn't stop selling my browing info). I have no interest in a browser that's aggressively harvesting my data, and in the absence of clear indications to the contrary, I assume it is
Not sure what you mean, there wasn't a dump since this wasn't an info leak.

Maybe you're referring to an earlier leak done by NB65?
If it becomes an issue ARM probably will change dramatically, however keep in mind RISC-V let's you licence hundreds of probably pretty crummy cores (and a handful of good ones) whereas ARMs are battle tested, verified, and come with documentation. RISC-V docs are still a bit 1980s i.e. as far as I'm aware there's no official online source of HTML docs, and not as much blessed software as arm (i.e. compilers tested in-sync with the ISA). Oh and people to sue...

I also trust the ARM ISA designers more than the RISC-V ones, but I don't know enough that you should trust me.
Learning Linux kernel exploitation – Part 1 – Laying the groundwork
The revolution of internet as knowledge transmission platform is as important as was in the past the invention of writing or the print by Gutenberg. It accelareted our technological and scientific advancement for the mankind by an order of magnitude like the ones seen after the adoption these two previous inventions. Denying such key technological shift to a whole group of people is the equivalent of cultural, technological and intellectual genocide. The objective of the proposal to remove the .ru top domain name is nothing less than that.
sorry, I was afk.

Yes, that's exactly what the article is saying. If you burn calories doing exercise, the body will spend less on stress response. But if you burn less (or none) on exercise, then it will spend more on other things, eventually coming to roughly the same calorie expenditure (as they measured). Which is why exercise helps with depression - your brain has less calories available to spend on stress responses and generally messing with your mood.

You really should read the article.
Was going to say. 12px is way too tiny.
I’m of two minds on this one. Starting without notifications as an option in my devices would help me tremendously in my day to day life. But that’s just me. There are so many different brains out there. How does a company make a product that sells to a sufficiently wide market to make it worthwhile? The only option I see is… options. User-specific customization.
Enigma Labs | NYC, Onsite | Visa

Enigma Labs[1] is the first well-resourced team of technologists to build a dedicated data, community and research platform for UAP/UFOs. Our founding group is made up of engineers, investigative journalists, data scientists, and physicists.[2]

---

We're massively ramping up hiring following a year of silent building.

Our stack:

- GQL / Hasura, with Weaviate-powered search and analytics
- iOS (Swift, Mapbox, Matrix client SDK, Apollo)
- DS team analyzing in Python, BYOStack
- k8s backend, powering distributed OCR and NLP
- Matrix powered messaging (seeking engineer for Matrix client implementation)

We have open roles on all of our teams:

- iOS (Team Lead & Junior)
- ETL engineers
- CV architect
- Data visualization

The Enigma Labs team is growing fast, seeking domain-diverse, talented and driven contributors. We're actively sponsoring visas. On-site in NYC is a requirement for senior positions.

Please send resumes to apply[at]enigmalabs.io

[1] https://blog.enigmalabs.io

[2] https://news.ycombinator.com/item?id=30516586
Cargo ship carrying cars sinks in mid-Atlantic
"Just focus on Firefox" will lead to stagnation and eventual death.

The essential problem here is that a web browser is nothing without content, and much of the most popular content on the web is found through Google, a company who grows closer every day to locking down a vertical monopoly. Firefox would have to be ten times as good as Chrome to even be on equal footing, and while it does have some marginal advantages, nothing is enough of a deal breaker that I would stop visiting YouTube just to avoid using Chrome [1]. Firefox really was that much better than IE6, but Firefox isn't competing with abandonware this time around.

Mozilla needs to stimulate the creation and viewing of content outside of Google-owned walled gardens. Pocket Recommendations were an obvious attempt at this; just make sure all the recommended articles actually open correctly in Firefox. This was probably also the biggest reason why they bent over so far backwards to accommodate NetFlix, who would have been happy to make sure Firefox worked correctly just to avoid being vertically integrated to death by Chrome and Google Play Movies/TV.

The relationship between Steam and Linux comes to mind. Funny how Linux became a viable gaming platform right after Microsoft announced the Windows Store.

[1]: This will, of course, change once uBlock Origin stops working.
> You mean like google's "Application Specific Passwords" that have been around for a VERY long time, and are not affected by this announcement?

It's not actually documented anywhere, but app-specific passwords cannot be used with non-commercial Google accounts that do not have two-factor authentication enabled.
Companies that are willing to pay terrorist groups will have no qualms about doing business with Russia, which is why all of the talk of sanctions is usually pointless. Nobody keeps to them on things that matter. If there's money to be made, companies will deal with terrorists no problem and as we've seen from past sanctions on nation-states, governments will carve out all kind of exceptions for the well connected and turn a blind eye to even more, only giving a slap on the wrist to those who get caught.
> How it is my responsibility?

He might mean that since you live there, you have better chances to do something about Putin, than people outside. And you might know more about what makes sense or not.

Just as if you're inside a house burning down, you're in a better position to do something about it (say, saving a kid who had hid in a closet), that someone far away.

Although none of it was your fault
SFTP makes sense here, that's why OpenSSH is deprecating scp because SFTP is much better defined.

I actually wrote all my scp-style scripting with SFTP for years, so much so that I think projects I did this for lived their entire lifecycle and are gone (but I don't know anybody who still works at the place I wrote the earlier ones) without running into the problem I feared - it's just not clear what scp means for non-trivial cases.
Yeah it does, pretty certain you upload custom ones too though I've never tried it
A list of how countries are supporting Ukraine
Most issues are due to sensing humans/new human behavior, not localization. It would be difficult to make a universal system of tags/reference markers that comes close to a decent HD maps solution, even one out of date.
I'm not sure what happened over there but they completely lost the plot with hooks. And now you're not "correct" or "modern" if you don't use them. They're ... fine, I guess. Most of the time. But not at all in line with the fairly clean and consistent vision of early React.
1) The worst polluters are countries like China and India and 3rd world countries that dump trash directly into the ocean.

2) But... it's "PER CAPITA" pollution that is the _actual_ problem.

3) ???

But then we stop right before the truth is that the 1% are the biggest polluters on the planet.

https://phys.org/news/2020-09-richest-emissions-poorest-anal...

https://inhabitat.com/1-of-global-population-causes-50-of-al...

https://www.theguardian.com/environment/2021/nov/05/carbon-t...

https://www.oxfam.org/en/press-releases/carbon-emissions-ric...
Hmm, Cloudflare maybe? https://www.cloudflare.com/products/registrar/
Orchest | Front-end Engineer | The Netherlands | Full-Time | Fully remote (UTC +-3)

Orchest lets data scientists focus on what matters. It’s our mission to free data science teams from infrastructure tasks and complexity. We make the data platform team obsolete by automating the plumbing and making it easy to work in a cloud native way as a data scientist.

Today, we’re focused on drastically simplifying how batch data science pipelines are built by focusing on intuitive abstractions, seamless integration of the canonical open source data science stack (e.g. Jupyter notebook support), and single-click productionization.

To that end we’re looking for a Frontend/TypeScript Engineer that will help us develop the user facing parts. Are you someone that gets excited thinking about combining a clean React based component hierarchy, TypeScript, Web Workers, and CRDT sync to create a perfect user experience?

We raised ($4M+) from top investors like Gradient Ventures (Google) and Basis Set Ventures (SF-based AI & ML fund). In addition, we're a fully remote company (team of 8, ex-NUMFocus, ex-GitLab) with async communication to allow everyone to get into flow state and do their best work.

More details about our open source project can be found here: https://github.com/orchest/orchest or check out our AngelList listing https://angel.co/company/orchest/jobs/1690887-front-end-engi...

Interested? Reach out to me at rick@orchest.io.
It absolutely did, but that's not the point I'm making. I'm pointing out that the oligarchs who fund the tory party don't appear to be under any sanctions at all. From this piece [0] "On Tuesday 22 February, the UK authorities sanctioned three oligarchs and five Russian banks" - all three oligarchs were already heavily sanctioned by the US and basically unable to operate in UK financial markets anyway.

He's sanctioning the ones who aren't funding everything he does, anyone giving him money is still absolutely free to do as they please. Just because that man says he's doing more than anyone else, doesn't mean he is. In fact, it's generally safer to assume truth is the opposite of what he claims publicly.

[0] https://www.opendemocracy.net/en/odr/uk-russia-sanctions-ukr...
Can you clarify? Do you mean python/ruby wouldn't exist if people asked why not use an established language?
The difference between WW2 and post Soviet Russia was the Marshall Plan- where the US pumped incredible amounts of money to build up the post-war economies of Europe and Japan. The same didn't happen post Soviet collapse Russia, in fact, I'd venture to say Russia was treated more like post- WW1 Germany- forced to assume all Soviet debt, a collapsed economy and social structure, with predictable results (the rise of Putin).

If this situation ends up with the collapse of the Putin regime, I hope that the West doesn't repeat the mistakes of the 90s and actually comes with real help to create a strong, confident, freer Russia.
ThirdAI (thirdai.com) | Houston, Bangalore, or remote | Full time | Senior Software Engineers

We are a startup building high performance machine learning systems on CPUs. Our core technologies are hash-based algorithms that accelerate neural network training and high dimensional near neighbor search. We are a new and well funded company (we just raised $6M of seed funding), and already have more customer interest than we know what to do with. We pride ourselves on a collaborative, open, and idea heavy culture. Our perks are great, including 401K matching, free lunches, and substantial equity.

For location, remote works, as long as you can travel some days of the month to our office in central Houston or Bangalore.

We are looking for engineers with 3+ years of experience building and shipping high performance systems. Machine learning, C++ and Rust experiences are a big plus, and definitely tell us about any AI publications you have, we’re interested! If building a new set of machine learning algorithms from scratch sounds fun to you, get in touch! Feel free to email me vaidhy [at] thirdai.com. Our website is under active reconstruction using Hugo (that’s how early stage we are), but feel free to find out more about us at https://www.thirdai.com
The onboarding part is the most crucial to keep new clients, but i touch it last.

I want to use these tools, but two thing are my pains; pricing and the analysis it needs to set up onboarding correctly
Looks great. I think every hypergrowth startup I've worked at has gone through the use commercial tool => tool gets crazy expensive as you scale => "let's just roll our own, how hard can it be?" => "oh crap, this actually is more complex than we thought" cycle.

There are _so many_ types of services that were similarly disrupted by solid open-source implementations due to their price: business intelligence (Metabase), live chat widgets (Chatwoot), monitoring/observability (Grafana). This feature set is even more crucial than the ones above so I'm surprised a default open-source implementation hasn't emerged.

Excited to see how this progresses!
I put together a script using JBang (Scripts in Java https://jbang.dev)

https://gist.github.com/evacchi/7fb37056d92f72ae88157adcbb2f...
This is a meme now. Maybe we should take every projection and estimate and automatically assume that it's actually much worse.
>> Now it's up to the Russian people to make theirs.

> There's nothing we can realistically do.

Then you get to collectively carry the responsibility for that "inability"; for, by not rising up as one against the dictatorship, passively allowing it to continue. That's what was seen as appropriate for the nation you fought in your Great Patriotic War, so why shouldn't it be appropriate for yours?
I don’t really see the proposition value other than runtime. For most awk commands the syntax is succinct and works well. This unnecessarily makes it much more tedious and verbose to… save time not learning basic awk syntax?

The awk manual is a pretty light read.
I am using Tailscale, it is a pleasure, it works like a charm and I have recommended around me. Keep it up!
SEEKING WORK | Austin, TX or remote

10+ years experience in python, both scientific (numpy, pandas, matplotlib, statsmodels, jupyter) and web (django, flask, sqlalchemy). Also experienced in R (experiment design, linear and nonlinear analysis, graphic presentation of data). Able to work W2 or 1099, remote or in-person (as long as it's in Austin). Currently available for up to 15 hours/week. https://www.rosshartshorn.net/RossHartshornResume.pdf
Bad, I'd prefer native scrollbar, but only option for now is I added extra styling to improve
No, many administrators, like myself, disable the SFTP protocol, even if they always use the up-to-date OpenSSH.

I also always remove scp because I use only rsync over ssh, which does not have the inherent bugs of scp and sftp and is also much faster.
Are the existing gas pipelines shut off? Europeans could become the change they want to see and endure a couple of cold years and stop buying gas from places like Russia and Azerbaijan.
That's interesting, because personally I seem to dislike Tabletop Simulator; I feel super slow and constrained by it, as if I was having my hands tied, and much prefer playing the same games live with friends (or solo!) and manipulating real physical objects. Additionally, I much prefer the fact that real board games give me one more reason to unglue myself from a computer screen. I'm really curious why mine and yours reception seem so different!

Though I didn't have an opportunity to play it in VR using VR goggles - is this the aspect that is important here? Does your whole family play it with VR goggles?
Deepest sympathy for the Nadella family as they grieve the loss of their son.
slice (https://sliceit.com) | Backend, Full stack engineers, Engineering Managers | Full-time | Bangalore

slice is India's best credit card challenger to pay bills, manage expenses, and unlock rewards. Our members love us and swear by us. We're reinventing how traditional credit cards work by offering a simple and transparent app to help our members transact easily. We have about 4 million registered members with an average age of 23, making us a market leader in a niche and growing segment.

* We are looking for Backend SDE 3 and SDE 4 engineers who have are interested in building large scale distributed systems.

* We are also looking for Engineering Managers who have experience in managing small teams of 5-7 engineers.

You can find more openings here: https://www.sliceit.com/careers/

More news about our recent round of funding can be found here: https://techcrunch.com/2021/11/28/slice-220-million-fundrais...

Note: Please mention that you are applying in reference to this post in HN. :)
That is a fair and valid correction :)
but um global warming...err, I mean climate change...
Ambassador Labs | Principal Software Engineers and Engineering Leads | Remote (US/Canada/South America/UK/Europe) | Full-Time | getambassador.io/about-us/careers/

Ambassador Labs is building the future of Platform Engineering, which is rapidly becoming the new DevOps or SRE. Our engineers are building the modern day developer control plane on kubernetes. If you have golang, kubernetes, team lead or management experience (see roles below), reach out to Scott: shand@datawire.io.

Principal Software Engineer: https://jobs.lever.co/AmbassadorLabs/6ec9e64b-497b-4007-8bfc...

Engineering Manager: https://jobs.lever.co/AmbassadorLabs/bca57470-99ed-42b3-9953...