skysight-inc/HackerNews huggingface dataset:
MedSec | Multiple roles | Miami, FL | Remote (US) | Full Time | medsec.com

MedSec is exclusively dedicated to the unique challenge of medical devices and healthcare cybersecurity. MedSec partners with medical device manufacturers and healthcare delivery organizations to help address cybersecurity in medical devices throughout all stages of the device lifecycle. With medical device manufacturers, MedSec leverages its cybersecurity expertise, coupled with its intimate knowledge of the healthcare regulatory and operating environments to offer support in design, architecture, verification, penetration testing, risk assessments, regulatory filings, and execution of security best practices in the development of new medical devices as well legacy systems. With Healthcare Delivery Organizations MedSec leverages its intimate knowledge of medical devices to offer software solutions for cybersecurity and asset management of connected medical devices in hospitals. MedSec is an active participant in helping move the cybersecurity healthcare community forward and participates in a number of standards and best practice committees involved in furthering cybersecurity for medical products.

Roles:
Principle/Senior Pentesters, Senior/Mid/Junior Software Developer/Engineers, Mid/Junior Researchers

Overview:
We’re growing quickly and are looking for a few great people to join our Services, Engineering, and Research teams. An ideal candidate in any role would have a passion for learning and sharing knowledge as well as strong problem-solving skills. We have a great culture with some amazing people who have been in multiple industries (Finance, Security, Medical, Startups, etc…) working together to build a great company to help address medical device and healthcare cybersecurity. Reach out to me for more info! (Address below)

Everything else:
We are a distributed team, primarily operating on East Coast hours, and are fully remote, though the ability to travel for client engagements is a requirement for this role.

Find out more:
Please visit our career portal to learn more about our available roles - https://medsec.breezy.hr/

Please reach out if you are interested in further details in this role, please reach out to me directly - henrybeaudin at medsec D0t com or @henrybeaudin on Twitter.
> whenever you see "think tank", you should think "propaganda sockpuppet"

this is a myopic view.
When I was making accounts for my kids, I used friends phone. Cause my kids did not had own phone. It was ridiculous.
I think the real value isn't so much to do with the Free-As-In-Beer aspects, and more to do with the Free-As-In-Freedom aspects. Having so much open documentation and off the shelf capabilities is like a superpower, and you're starting to see it with stories like these:

https://riscv.org/blog/2020/11/13-year-old-nicholas-sharkey-...

We've got kids designing their own cores. That was a bar that previously was out of reach to anybody without a nine-figure engineering payroll. That's amazing.
(New?) title of article is a little less evocative:

> Why you probably do not need OAuth2 / OpenID Connect
Comments like this are off topic in a who's hiring thread. Please see the rules at the top.

We detached this comment from https://news.ycombinator.com/item?id=30515831.
SEEKING WORK | Pittsburgh | C++, Python, Robotics/Automation

Need help building or scaling your robot software? Need to rearchitect a prototype into a product and pay down some technical debt? Need some advice on best practices for robotics programming?

I can help with everything from high-level system architecture, to ROS programming, to pulling off the 3D math required to get your robot moving.

A Carnegie Mellon grad with expert C++ and Python skills, I’ve programmed robots as a robotics software engineer for over 8 years. Additionally, I can tap my network of roboticist friends can help solve any challenge.

Send me an email with a bit more about your problem or goals and we’ll go from there:

hn@fpw.33mail.com

Note: able to assist with other C++ or Python work if robotics isn’t your industry. Just ask!
Do you have proof? Most knowledge came out of discoveries with the scientific method, which is not perfect but rigorous enough to avoid those human errors.

What you are describing is inherently human, biases affect both the educated and uneducated, but only one group was trained in critical thinking - at least that was the purpose of education (less and less today)
I am familiar with that page. (Although I'm not sure how to interpret your "You mean like[...]" phrasing. It doesn't make sense in response to what I wrote.) There's good reason not to go along with the security theater it describes.

App Passwords are not really passwords in the conventional sense. The format makes it difficult to actually use them like a password. They're 16-digit sequences that Google generates for you (you have more control over your child's SSN than you do over these non-passwords)—hard to remember, and that's because you're pretty much not expected to. You're expected to key it in approximately once and configure the relevant app to save it in perpetuity, rather than typing it in. What these things actually are should be familiar to the people here. They're API tokens (and pretty weak ones at that, relatively speaking)—just billed under a different, more familiar name, for a non-technical audience who wouldn't understand that term.

If you are currently using a strong but nonetheless memorable password for Gmail and have your mail client set up to always prompt you for it rather than storing its own copy, then switching to one of these app-specific tokens will actually make your email less secure.

Furthermore, in comparison, a 16-digit sequence has less entropy than a passphrase comprising 6 words chosen from even a very small 1000-word dictionary.

In summary:

- worse experience than an actual password

- less secure

A less cumbersome approach to address the threat Google is pretends to be concerned about here? Allow people to deconsolidate their accounts. This would actually have other happy knock-on effects, such as mitigating the impact of the now-familiar phenomenon where people get locked out of significant parts of their online and offline lives when something goes wrong with their account. Also wouldn't hurt their image in the current conversations about legally imposed breakup.
From the linked page:

* Available for a wide variety of platforms including Linux, Android, Raspberry Pi and Windows

And:

* Linux, macOS and Android desktop builds for off-target content development
> unfortunately one can see self-hosted Minecraft Java server development halted as well in foreseeable future.

As someone who's an idiot and doesn't know what they're talking about, how hard would it be to make Minetest compatible with Minecraft servers?

Edit: I recognize you're talking about 1st party Minecraft server development now, there are 3rd party implementations though, correct?

Presumably there would need to be modifications to the Minetest engine, but it seems easier than re-implementing Minecraft from scratch - and would be a great screw you to M$.
Since I see many people asking questions about the migration process, here is a link to their FAQ:

https://help.minecraft.net/hc/en-us/articles/360050865492
Microsoft Comic Chat was literally IRC though, it was my first IRC client.

( I quickly learned about mIRC from other people on there of course ).

It's a testament to open protocols that you could have something very functional like mIRC and something "fun" like microsoft comic chat interoperate.
Enzyme | Full Stack Developer(multiple) Senior Project Manager | YC S17 | Full-Time/Contract | 100% Remote | https://www.enzyme.com/

Automating FDA compliance and approval. Think TurboTax, but for FDA compliance.

We are a remote-first company with a 20-person team all over the world.

Our stack is Elixir, Ruby on Rails, AWS.

Happy to answer any questions. Email in profile.

Learn more about us on our angelist profile https://angel.co/company/enzymecorp
What is developer productivity and how to measure it?
>I dislike being held to increasingly arbitrary and opaque metrics of what Google defines as "safe"... because that is anxiety inducing, what will it be next week?

Unfortunately, that's the nature of computing in the era of the Internet; being connected online exposes one's accounts to every bad actor on the planet. Google has to keep adapting to the attacks that are successful against their most vulnerable users, and since attackers keep getting more savvy, countermeasures increase in complexity. I won't be surprised when Google mandates 2FA for everyone.

But you're right that it puts a burden on the end user, and increases the odds of false-positive attack prevention kicking in. There really isn't a way off that anxiety-train I'm aware of that isn't "migrate to a different, far less popular service provider that won't be as large an attack target for bad actors," with all the negative consequences such a migration entails.
We basically had to fork the official Dockerfile for 5.7, switch to ubuntu-provided packages and change the debconf options + some tzdata problems to work around this.

For 8.0 there are some arm64 images already on Docker Hub, just the oraclelinux variant.
Rethinking Microservices
> Microservices are serving us well in many ways. But in some ways, we can do better. Having learned a bit from Functions as a Service, containers, and now WebAssembly, we can rethink some of our assumptions and perhaps devise a better way for creating microservices.
It doesn't seem to me that this is a very solid argument. First off, it's essentially just cherry picking people over history who have made the argument against expanding NATO. Whilst there were people making the argument against expanding Nato and some of them are respectable, it's far from some consensus among everyone who knows the topic. Even the people this thread claims oppose the expansion of Nato aren't wholy clear on it - Clinton's defence secretary was opposed to the timing not the principle for example.

Secondly, this conflict hasn't coincided with a particular push for Ukraine to join NATO. There's just no merit to the claim that Nato was a proximate cause of the invasion. Notably it is however, a pretext that Russia used in the build up to the invasion, so what you have here is essentially people pushing a Russian propaganda line.

Finally, it's important to consider the counter-factual. If Nato hadn't expanded maybe the US would have more cordial relations with Russia, but it wouldn't have changed the fundamental view that Russia has that it should control Ukraine, nor would it have changed the economic factors that make Ukraine a target for Russia. Given a situation where Nato is far from Ukraine and the US is disinterested in the region it seems far more likely that Ukraine would be run over by Russia at the first opportunity. Maybe you can argue that the result of that would've been less likely to lead to Nuclear war, but it's hardly a great principled stance to decide to appease Russia, and at that point you have to ask yourself which countries in Europe are you willing to defend as sovereign nations? Or is the answer none?
> Encrypted email stays encrypted until you decrypt it to look at it. I like to call this "encrypt once". People complain that they can't search their encrypted emails. You can make the user enter a passphrase to search (slow) or create an index and encrypt the index with the passphrase.

That doesn't have anything to do with whether it stays encrypted once it's sitting on the client device. You don't know that an email client isn't fetching the encrypted email, decrypting it, and then storing it in plain-text on the device. And there's nothing in the protocol that forces them not to do that.

You might want them to store contents encrypted on the client device, you might think it's best practice for them to do that, but you don't know that client will do that.

> They are much more likely to do that than enter a passphrase to see if there is someone on instant messaging they would like to talk to.

They're not going to do either of those things, it's like asking if I'm more likely to swim the Pacific or the Atlantic ocean. Neither scheme actually works in practice for a mass communication platform. People do not use email asynchronously, they treat it like long-form text in a messaging client, the same way they treat SMS or Signal or Element or whatever.

----

There's nothing special about email that means people are more likely to use a passphrase every time they want to access it on their phone. And even if they did (which they won't), there are risks other than client device access that forward-secrecy protects against. "On the network" in this case means that your encrypted emails are getting stored on a server that can be either compromised or accessed with a warrant. It is not true that the only way to gain access to E2EE archives is through the client device itself.
I'm in a similar situation. From what I could find the easiest way to resolve the issue is to report the original transaction ID [1], if you still have access to it.

They list the instructions for PayPal:

> The PayPal transaction ID is a seventeen-character alphanumeric code: 1AB23456C7890123D

> To locate this transaction ID, log into your PayPal account and find the ID in your transaction history. If you no longer have access to your PayPal account, or if you made a purchase that doesn’t appear in your transaction history, you must contact PayPal to request the ID.

[1] https://help.minecraft.net/hc/en-us/articles/360029977371-Wh...
Why, you don't need javascript for anything.

Maybe for killing the user's battery?
My experience is that when mentioning Open Source I get FUD pushback.
Guess I won't be playing Minecraft anymore. At least not in online mode.

Pretty gross how they gave a cape to everyone to shut them up. (historically capes were a rare privilege to own)
$1200 to feed one person is $40 a day, what do you do, eat out every meal?
The US Federal Reserve's ledger *is the money*, in exactly the same way that the Bitcoin blockchain is the money.
No Kindle app = Not useful to me. Do either of these support kindle?
I wish someone would do this for Google, I'm still on a 6 month cooldown with Meta. Also, I'd wish I could simply apply for L3/E3, I know I have a few years under my belt, but I'm happy to take a paycut and not do the systems design interview.
Bolt Logistics | Remote (Toronto) | Full-Time | Multiple Roles | https://gobolt.com/
Bolt Logistics is a leading Canadian logistics and last-mile delivery provider for e-commerce shops to large retailers. Bolt provides a customer-centric and sustainable approach to fulfilment, including reliable warehousing, pick-and-pack, shipping, and last-mile delivery with facilities across Canada. Bolt also strives to be carbon negative by 2023 and is building Canada’s largest electric vehicle fleet. We’re looking for engineers who can bring fresh ideas, lead technical discussions and project implementation, and provide insight with regard to project planning, estimation, and prioritization.

Our tech stack:

* Code: Ruby/Rails, Node/NestJS, Golang, React

* Infra: Heroku, GCP (GKE, App Engine), Docker

We're hiring for the following roles:

* Software Developer

* Senior/Staff Software Developer

* Software Development Team Lead

* Engineering Manager

* Senior Product Manager

More information here: https://gobolt.hiringplatform.ca/list/careers?category_id=28...

If interested, feel free to apply through the above link or reach out directly to me: vincent.li [at] gobolt.com
The "proper" way to take money off the table is for the founders to sell some of their own equity in a secondary sale. This way it's all above board, done in plain view of the investors (who might buy the equity themselves), and most importantly isn't extracting cash out of the startup.

Investors invest in companies to give them runway and for hiring. If the founder is extracting that money back out of the company to line their own pockets (beyond a reasonable salary) then it doesn't help the company at all. Founders should be selling their equity, not withdrawing from the company's bank accounts.
I believe any of the `-oracle` tags from https://hub.docker.com/_/mysql?tab=tags will provide arm64 builds. For example, I'm using `mysql:8.0.28-oracle` on an M1 Pro and arch from within the container reports aarch64.
You shouldn’t do that kind of work from the rendering thread, and you should use occlusion culling to only render the needed DOM
If you are looking for a backup option for Microsoft 365, then you may not find one. Why? Because it simply does not exist. Does that mean that you need to use a personal office 365 data backup? If you ask this question to experts then you are likely to get a wide range of answers.
That actually makes sense. There's no reason they couldn't have done a check mark/giant X along with the version number, though.
The second reason is changing requirements and future-proofing.

This is a great point. "how am I going to maintain this?" or "how will someone else maintain this?" are often the most important questions and are often overlooked.
So it's fake news? Ok, Donald.
One Note had something similar in the early 2000s, I'm not sure if they still expose it.
Lack of good "official" ARM image support in some key places is something the Docker on Raspberry Pi community have had to deal with for some time. I'm hopeful that more people add ARM builds to their publishing processes for their container images now Apple have introduced a huge number of developers to "desktop ARM" for want of better name. There are some tricks (QEMU etc) that allow you to build your ARM container images on any existing x86 build infra you are already using too:

https://www.docker.com/blog/multi-arch-images/

Ability to use cheaper ARM based VPS instances are another reason to really want this too.
Adacore | Software Engineers | Full-time | Remote, New-York, Paris, Bristol, Toulouse, Tallin, Grenoble, Vannes...

Adacore is the maintainer of GNAT, the Ada compiler originally based on GCC (but now with many more backends: LLVM, Why3, JVM...). We also have a lot of tools revolving around the Ada ecosystem (IDEs, Coverage tools, Static Analyzers, Formal proof tooling...), everything we build is open-source and we make money by providing support, trainings, certifications...

We are looking for a lot of different profiles:

- GNU toolchain developpers ( https://app.hellotalent.com/vacancy/gnu-toolchain-developer-... )

- Compiler Engineers ( https://app.hellotalent.com/vacancy/compiler-software-engine... )

- LLVM Compiler Engineers ( https://app.hellotalent.com/vacancy/llvm-compiler-engineer-e... )

- QEMU/Cross Software Engineers ( https://app.hellotalent.com/vacancy/qemu-and-cross-environme... )

- Certification Engineers ( https://app.hellotalent.com/vacancy/certification-engineer-e... )

- Devsecops people ( https://app.hellotalent.com/vacancy/senior-software-develope... )

- QA Release Engineers ( https://app.hellotalent.com/vacancy/qa-release-engineer-ed94... )

- Web Designers ( https://app.hellotalent.com/vacancy/web-designer-ed9948804 )

- Techincal Marketing Engineers ( https://app.hellotalent.com/vacancy/technical-marketing-engi... )

- Sales Contract Manager ( https://app.hellotalent.com/vacancy/sales-contract-administr... )

- Account Managers ( https://app.hellotalent.com/vacancy/account-manager-ed994b90... )

Some of these roles involve working with Ada, some don't (we use a lot of different programming languages: Ada, C, C++, Python, Ocaml...), so it's fine to apply even if you don't know the language!
Can it even be boot-unlocked? AIUI, this was a big issue with previous Nokia Android devices.
Show HN: HackerPen – practice to ace tech interviews
Consumption taxes are regressive and punish the poor, but there's a case to be made for taxing transactions, primarily because government is expected to intervene if transactions go wrong. Same for property and wealth taxes, because the government creates property by deciding who owns things, deciding what that means, and intervening in any dispute.

There's less of a US case to be made for taxes on wages, but just because the US shits on labor and spends almost no resources in defending it or the health and security of the people who provide it. Other countries that do more have a better case.
So, is this how the web becomes free and open?
The author said he wanted to build something that incorporated the things he learned while going through some "How to build a compiler in Go" books, not necessarily for anything particularly useful.
Taking into consideration how long it's taken the ARM industry to get a single decent laptop/desktop processor with the M1 since ARM64 was published. And it's yet to be matched by any other company.

Odds are good we're going to be waiting for a while.
Ask HN: Non-Traditional Equity Grants?
We're trying to settle a bet here at the Rutter (YC S19) office.

Is anyone aware of a startup that granted equity to a dog?

We're trying to find out if there ever has been a company which granted more equity to a dog than a full time employee at some point in time; this is a hard question to Google.

PS: we're hiring! https://rutterapi.notion.site/Rutter-is-hiring-173edb891d5548fba527a38d00fa8193
I guess the parliamentarians that vote for this and the members of the commission are send to the front and see the law implemented.
Putin did already, year 2014
The fact that there are sanctions is newsworthy.

Enumerating the effect of the sanctions is not. We do not need a thousand articles stating that companies have complied with the law. We already know all of this.

A donation of $2m for humanitarian aid is similarly not noteworthy, for exactly the reasons described above.
But is still being pulled into Microsoft accounts.

Enough is enough, I'm done with this.

The only game that I'm willing to play with a Microsoft account is the MCC - and that's because I bought it knowing I would need an account, then made a throwaway email and MS account to play it with.
I’m both eternally thankful and also slightly broken for new projects that I spent some time working for GDS, who have the requirement that all code produced is open source, unless you’ve got a very good reason why it should be closed.

https://www.gov.uk/service-manual/service-standard/point-12-...
What's really weird is they also fired all of their browser developers working on VR support. So Hubs basically works best in browsers that aren't Firefox.

It's been a while since I used Hubs. Are they still artificially blocking Chromium on desktop for starting a WebXR session? I know they allow it in Chromium for the Oculus Quest, because Firefox Reality is basically unusable. Pico Neo, HTC Vive Focus, and really any standalone VR device that isn't the Oculus Quest, there are no browsers available other than Firefox. So that means the only WebXR experience you have available to you is a broken one.

Hopefully Igalia can move quickly with Wolvic.
MobileFuse | REMOTE | Full-time | Mobile Software Engineer | https://mobilefuse.com

MobileFuse is a fully remote, fast growing tech company in the mobile advertising space. We have a tight-knit team of talented software engineers and we're looking for a new team member to help us explore new ways to grow.

You'll be joining a small mobile-focused team that is responsible for building exciting new technology that directly contributes to the growth of the core business, and building tools to support our other teams.

We're looking for somebody who's really passionate about software engineering, writing clean code, and problem solving. You'll have the opportunity to contribute directly, guide decision making, and to provide a meaningful and direct contribution to our company's direction through your expertise.

We use tons of different languages and technologies, so some mobile experience is a plus, but we're most interested in finding a good fit for the team and culture, experience is secondary.

Learn more and apply here: https://apply.workable.com/mobilefuse/j/735410F2C3/