skysight-inc/HackerNews huggingface dataset:
Ask HN: How do you avoid signing on with a bad manager?
In considering positions, what can you do to land with a good boss and avoid terrible ones? Or at least increase your odds?

I ask because I've been burned a couple times with people who seemed great, including someone with a reputation for building culture, only to discover they were terrible to work for, and then you're in the wrong job. And from my conversations and answers to my questions, I was excited to work for these people.

I know we can't guard against people outright lying, but beyond that, if you can't find someone who's worked for them and will give you the unvarnished truth, what are other things people can do when considering working for someone?

Or is this ultimately just a risk one has to take?
Show HN: Build simple yet powerful open-source semantic applications
I was referring to something more along the lines of what the above comment mentions (rebalancing with beneficial bacteria), but there are companies working on something like a dishwasher for teeth, one example is below:

https://freshhealth.com/
On some systems errno is not set by a failed call to time() in which case the only way to check for an error is if the returned value is (time_t)-1 which makes it impossible to unambiguously represent 1 second before the epoch.
Show HN: Gpucsl – Python library for causal structure learning using GPUs
I have two guesses:

When runners are being featured, their preferred pronouns are displayed on screen.

Their events were remote during the pandemic, the recent event last week required everyone attending to wear masks.
I just found out from Arstechnica and was checking for submission;

other submissions are on Androidpolice - https://news.ycombinator.com/item?id=31994662

and TheVerge - https://news.ycombinator.com/item?id=32000599
With the bear market in full swing, Ethereum whales are stockpiling their holdings. However, there has been some departure from the usual, as new coins appear to have piqued the interest of these huge investors. The top 100 Ethereum whales remain positive on meme coins, which continue to generate whales. As a result, some of these whales’ largest holdings are now in the form of meme coins.
Terraforming Mars (https://boardgamegeek.com/boardgame/167791/terraforming-mars)
I was surprised to notice something similar last month, for the first time in memory.
The people in this review seem to think they're alright, but they look very silly to me: https://www.youtube.com/watch?v=tB4DDM8VHVg YMMV. But hey, maybe you can ask them for their design.
Hi Judah, I wrote a blog about parents being teachers, largely inspired by your comment. I hope that it's helpful to you.

https://www.modulo.app/all-resources/parentsarethebestteache...
That may be true, but Reuters reported that Apple had a plan for it (which means they felt it was workable) and dropped it due to pressure from FBI/DOJ.

https://www.reuters.com/article/us-apple-fbi-icloud-exclusiv...

Also, there are many users who would benefit from e2ee iCloud backups who are not targets of NSO Group-type attacks, so I don't think it makes sense to make it only available in "Lockdown Mode".
depends on the group of people I'm with but Citadels has been great fun
Google removed the install-time permissions dialog because they replaced it with runtime permissions. This makes sense - some users wants PayPal or WhatsApp to access their contact list, and others won't. It also fixes "permission blindness", where users blindly accept a long list of permissions because they need the app, or just stop caring because it's too much to comprehend all at once.

Obviously, this isn't perfect, especially since Google removed the internet permission and allowed all apps to access it. Allowing advanced users like us to toggle off internet access in the "App info" permission page would be a good compromise, and I hope and Android team does so to match Apple on their security efforts.
To initially not do this is fine. Otherwise now you have two hard problems to solve concurrently.
This is very impressive. This may actually be the only 3d web application of this type I can recall that has ever worked completely correctly on my phone.

They always have one or more of these problems: zooms the page when trying to zoom, can’t rotate, can’t move, moves extremely slowly or quickly, jumps around when trying to zoom, randomly freezes or goes black, takes up either a quarter of the page or has 3/4ths cropped out, has the wrong aspect ratio, unusably slow, or something else.
In my experience, Fusion and Logic both quite well on M1s with 16GB of RAM, no other changes. One variable makes a ton of difference.
Google hiding information about apps in the app store is a big problem - but its not as big a problem as not having a Little Snitch equivalent built into Android. This alone is a reason for real capital to be spent on startups in the alt-android space. Imagine a company that lets you use your current Samsung or Google or Sony or ASUS or whatever flagship phone, but with a truly open-source fork of Android with a Little Snitch built in, and security updates guaranteed for as long as you stay current with your subscription, which is like $5/mo. (Maybe that's too low). Maybe you could even wipe your device and mail it in to have the software installed if you can't be bothered to do it yourself. Or maybe even a partnership with a phone repair chain. (And if you don't want to pay the fee you can always install updates yourself manually, from source.)
Never did that in NJ in the 90s
I've always thought that the companies coded the "zero day exploits" in, and then sold them for profit.
Usually in these “all-hands” type of meetings, nobody considers the “all-hands” audience and instead crams their presentation full of jargon and acronyms. This is usually because they recycle decks from other meetings.

Your audience isn’t going to know specific finance, marketing, or engineering jargon, so use it sparingly and make sure to define it. The new-hires and interns (and even senior people) will thank you as they learn a little bit more about a field that isn’t their own.
Recessions, inflation, social media, and loss of communal gatherings also are present in other countries, where mass shootings are rare. In fact, almost all proposed causes of mass shootings fall apart when you consider that the "cause" is also present in other countries that don't have USA's mass-shooting problem. Almost all, but not quite all...
Hi there,

RE: KYC: For better or worse, KYC is necessary for a project like ours to prevent bad actors from creating duplicate identities, from which they could either A) launch a sybil attack or B) claim multiple UBI drops.

We understand that this is going to be a barrier to entry for some folks, but optimistic about progress on this front for a few reasons -- remittance companies are increasingly exploring crypto, mobile internet access is expanding rapidly, etc.

RE: skipping the crypto bit: something important to clarify here is that in the GLO model, the funds for UBI are a byproduct of people adopting GLO as money. The goal is to push the adoption of a new currency, and the printing of new money -- which ensures that there's enough of that currency in circulation -- is how GLO generates UBI. We understand that this is a bit more complicated than 'take $1 from one person and give it to another,' and therefore hard to explain pithily -- if you have any feedback on how we do so in our white paper we'd be glad to hear it [0].

Thanks for the great questions!

[0] https://docs.google.com/document/d/1E09fdrvBr_TgsUqODq-MROfo...
> Phillips Sonicare

Which of them? There are many models, right?
It's called the pension and everyone who has paid tax more than ten years and over a certain age (it's migrating over time, basically 65) who is not means tested out on income and assets is eligible.

But there is a grey area where you partially qualify, the ideal retirement strategy can be to spend your savings at a rate to allow a comfortable life then at a certain point you drop down into pension eligibility and then you supplement your own savings with the pension.

Unfortunately, in the parts of the zone of grey the way it works out is if you earn too much the combined impact of income tax and reduced payments is equivalent to a tax rate of 70 or 80%, so it sort of makes it an incentive not to work in those cases unless you really like it for some reason, but there is every chance you are 75 or 80 by then so I think you've probably done your bit by then and entitled to take it a little easy.
Scythe and Eclipse - I played Catan a lot when it came out, now these two games took its place. Highly recommended!
The same is true on iOS (https://www.theverge.com/2018/7/10/17550316/apple-iphone-usb...). Lockdown mode just prevents you from enabling it.
Seems like there would be market demand for a super locked down PDF viewer that basically ignores all the silly extensions/additions that Adobe has added to the format over the decades. The vast majority of documents don't need Turing complete code capabilities or embedded videos or interactive 3D models. Something that safely (using sandboxing and other methods) turns the document into totally static pixel data that still feels nice to read would mitigate this extremely common attack vector.
API Friction Complicates Hunting for Cloud Vulnerabilities. SQL Makes It Simple
the ones that only service other banks hence only people working in higher level banking are likely to have heard about. e.g. the bank for international settlements

I only found out about this bank because the former president of the mexican central bank -- Mr. Carstens, left the central banking gig to go to that bank.
Trudeau government tyranny? Give me a break
You are all across comments section repeating this again and again.

Does a criminal ever accepts his(her) crime?

AltNews is free to write anything on their website OR on their own page on RazorPay, that doesn’t mean a thing.

There are several hundreds other payment processors and ways that they can avail to get money from foreign nations.

As of current state of investigation, Police say that he has already accepted taking money from Pakistan and Syria.

https://indianexpress.com/article/cities/delhi/alt-news-co-f...
Reminds me of a classic https://xkcd.com/538/.

For the vast majority of users the most realistic threat is simply being ordered to unlock their phone under the threat of force (from a criminal, a cop, a CBP agent, etc). This is way, way more likely than being attacked through an unknown JIT compiler vulnerability.

What would be really helpful is Apple implementing a way to have multiple iPhone profiles with plausible deniability (a la VeraCrypt) or some sort of compartmentalization (a la 1Password travel mode).

Of course that would mean people can start sharing their phones instead of buying one per person from Apple, so I'm not holding my breath.
ESPECIALLY the disabling of JavaScript, because … malicious JacaScript.
Analyzing My First Five Months Earnings as an Uber Driver
Expensify | Software Engineer - React/JS/PHP/ReactNative/Java/C++ | Remote | Full-time|

https://we.are.expensify.com/#workwithus

Join our passionate team of top-notch engineers to solve a real-world problem, and help people spend less time managing expenses and more time pursuing their real goals. As we revolutionize the way people manage their expenses, being part of the Expensify team means building the easiest, fastest, and most efficient platform to automate everything expense-related.

For the best possible fit, we are looking for someone who:

* Has experience writing real-world software to solve real-world problems.

* Communicates well, both interpersonally and in their code.

* Is a natural problem solver, knows how to solve problems by automating their solutions.

Understands the role and impact that programming can have on the organization as a whole.

Wants to develop and grow their skills in programming and leadership within the organization.

We are looking for people who have a strong understanding of algorithms and design patterns that can apply those concepts into a production level codebase. Knowledge and experience with Javascript, React, React Native, PHP, C++, Java, iOS or Android is a plus.

Please visit https://we.are.expensify.com, and we can’t wait to meet you soon!
My favorite board game is Gloomhaven. It's a cooperative dungeon crawler with a "campaign" of sorts. There's also a slimmer version of it called Gloomhaven: Jaws of The Lion that is less expansive and expansive, but is a great introduction to the game and feeds into the main product. It's also fun in its own right.

Not strictly a board game, but very board game adjacent, I have recently been playing a lot of Magic The Gathering and having a lot of fun with it. I have had bouts of playing it over the years, essentially one a decade since I was born, and it feels as good as ever.
> Apple is saying "we operate at the same level as nation states; we are a nation-state level entity operating in the "digital world": It's a flag-raise

Maybe. But these security “features” feel like things that should have been there from the beginning. Windows 11 has already had a much wider and deeper array of security options. Sure, it’s not mobile, but many of those security options would be unlikely to be needed against unsophisticated attacks.

Flag-raise or marketing gimmick? You be the judge I guess.
I think most managers are afraid to think how the people who like them are using them. That fear is intensified by past decisions around liking: when you've promoted someone who was good at manipulating you, terrible at the work, and now everyone associates their success with your success.

One reason why good judgement becomes essential the higher up you go. If you just "believe in management", managers below, above and across from you will saddle you with likeable and incompetent people.
> PulseAudio doesn't code defensively against those kind of bugs.

That's a reoccurring pattern across Lennart software. He gets an idea of the way things should work, maybe from the spec or maybe just from his own subjective biases, and has his software expect things to work that way and fail when it doesn't. Every time, he'll say it's the other guys fault. Sometimes his software even fails unsafe and he still blames everybody else.

The '0day' username bug in systemd exemplifies this. Lennart decided that usernames beginning with numbers weren't valid, even though Linux permits it. Systemd was found to run service files with User=0day specified as root instead, not as the user 0day. To Lennart this was not a bug because in his subjective opinion the rest of the system was in error for permitting a username beginning with a number. Even if he were right that usernames beginning with numbers shouldn't be valid, the mere fact that they can occur is reason enough to code defensively around it. At the very least systemd could fail safe when it encounters such an 'invalid' username. But no, he thought there was nothing wrong with failing-to-root. It was everybody else's fault, of course.

https://lwn.net/Articles/727490/

https://github.com/systemd/systemd/issues/6237#issuecomment-...
Oral-B Pro 1000, don't even look at the more "premium" versions, all it has is extra bells-and-whistles like bluetooth that really don't anything to its basic function.
Metaverse FAQs 101
And if you computed the per-capita GDP?
I'm not saying it never happens, and I don't want to assume anything about your background, but I think most people who work in software would agree there's no need. Plenty of problems get in on their own.
Or the dev could be simply setup to take the blame. Everything’s possible. Or an ex employee could have surveyed the system and shared data with a larger group to perform the operation.
What is Bitwarden Send and why should you be using it? – Bitwarden Blog
Honestly, this is bad news, because it means Apple is no longer capable of offering both security and all features, but now needs to spit them into groups, presumably because they need to keep up with (the clearly less secure) Android...
>Apple is saying "we operate at the same level as nation states; we are a nation-state level entity operating in the "digital world"

Making mountains out of molehills.

I'm pretty sure they are saying that they will "offer specialized additional protection to users who may be at risk of highly targeted cyberattacks from private companies developing state-sponsored mercenary spyware".

There is a looooong list of things which nation states can do which Apple cannot, some examples of that are in other comments in this thread.

>but this is the first public announcement, and tool, from a corporation with more spare, unrestricted capital than many countries.

Google & Microsoft have both had fairly long-standing tools and procedures (which were publicly announced) to both alert users and aid users against nation state attacks.
I mean, since your phone was made there by a Chinese company, what's to stop the government from just forcing a backdoor in at the factory?
Lee Kwan Yew's Friendly Advice to America (2013)
It can be reduced by 50c for every dollar earned, plus you can be taxed on earnings, in some cases.
In fact, the study is not about UBI at all. The post headline is misleading (presumably deliberately).
I'm trying to imagine a setup at any company whose primary business is controlling extremely valuable digital assets having a security setup that could be entirely undone with keyloggers, and it's difficult. No necessary VPNs, keys on devices, or other non-password authentication? One engineer's password should not be the keys to the kingdom.

Sounds like a bad RPG plot. "Because of its danger, we broke the Obsidian Key into 9 pieces and divided them across the realm, each protected by a powerful, mystic dungeon. Also, Dave can access them any time he says the secret word."
It is functionally for anyone living hand to mouth.
I explored installing a custom ROM on my android phone, but ended up questioning the utility of them. There appears to be many banking apps, random apps (McDonalds??) and others that will not work if the device is running a custom ROM.

That makes my phone useless to me.

Our only hope is a proper Linux phone with an Android emulation layer
From the way she was carrying on I was expecting this to be about her son. Her husband seemed oddly unaffected though. As she continued discussing his habits, I slowly pieced it together. Morning walk, careful hair brushing, just the right food, not too wet, not too dry... I had to interrupt her.

"You're talking about your dog? I don't do dogs." I said.

At this point, the husband slid an envelope across the desk filled with cash. It was at least twice my daily rate.

"Look," he said, "I need this done, and I need it done discreetly. Find the dog, or bring me its collar." The woman began to object, but a glare from her husband stopped her.

This was more than a missing dog case. It had to be, no one put up that much, in cash, up front just for a dog. You put up posters in the neighborhood, you don't hire a PI. Alarm bells were ringing in my head, but the rent was due, and Aberlour isn't cheap.

I opened my desk drawer and casually slid the envelope into it. "Do you have a picture of..."

"Beaumont. His name is Beaumont," the woman supplied.

...
Dupe: https://news.ycombinator.com/item?id=32002057

(Currently #2 on frontpage, 369 points, 202 comments)
Tell that to Mumble! OCB is still one of the fastest / ‘best’ encryption from algorithm perspective, if you can ignore the patents
It slightly degrades some experiences, so I see why it's disabled by default. Disabling JIT JavaScript is going to make web browsing more painful. And incoming friend requests are useful because it simplifies things when two people are adding each other to their phones - one sends a request and the other reciprocates.
Just ask questions. If you don’t know what something is - ask. Forget about everyone else in the meeting - chances are someone else feels exactly the same way and is also too nervous to speak up and ask for help.

Let the meeting driver keep course, if they don’t want to take the time to explain, let them say so and ask to “take it offline” for follow up.

The whole purpose of meetings is to get aligned. If you’re not clear on what it is to even be aligned with, that’s step one and that is totally fine, there is no shame. You have to put yourself out there and speak up, otherwise you will get left behind, because only you are looking out for yourself. No one is going to drag you along besides simply inviting you to the meeting. Take the opportunity into your own hands and demand clarity. Either you get it, problem solved, or you receive pushback, at which point you’re clearly not needed in the discussion and so you dismiss yourself to more important things.

In your example, “I don’t know what any of those things are, can you explain?” is a perfectly valid piece of feedback. Rinse and repeat until you get clarity or someone tells you it’s out of scope for the discussion (which means “catch up on your own time”). If anything, this is valuable feedback to the meeting driver that maybe not all communication is taking place as it should be, why are team members not informed? This leads to learnings, which is why it’s valuable for everyone involved if you speak up.
Displays do not connect over PCIe; GPUs do.
No, a device I bought from them is very much not their hardware, but mine, I should do as I please with it.

And can we just stop this “you can buy android” bullshit? 2 is not a choice, and there are fundamental reasons why a 3rd competitor can’t exist right now, so competition can’t produce a better product, hence we are left with market regulation by governments to not let this oligopoly get away with everything.
Organizational theater. Turn down the volume and watch a Jonathan Blow video instead? Or fix a bug? Read WikiPedia articles on obscure areas of mathematics?
In a case like this, where it's just a partial substring of an arbitrary string of characters, Fastmail would not do any better.
I recommend scrolling down to the discussion of stratification and New Foundations, which over the years has felt more and more like the correct resolution to me. ZFC uses a mighty cop-out: "welp, guess there's no set of all sets". But NF's resolution basically boils down to "you fool, 'x is a member of itself' isn't well-typed; being a member of a thing means you have to be somehow smaller than the thing; why would you even think that this was a subset selection criterion you could try and use".

More concretely, it introduces a (very weak and permissive!) type system onto the subset selections you can make, and declares that you can only select "the subset of X which satisfies property P" if P is well-typed. No more selecting the set of all x which are not members of themselves, because the "member of" relation can only be formed when there exists an assignment of types such that the thing on the left has a "strictly smaller" type than the thing on the right. Of course, x has the same type as itself, so "x is a member of x" is forbidden.

This is thought to result in a consistent set theory, Quine's New Foundations, although Randall Holmes's proof of this fact is subtle and is not generally agreed to be solid.

A very cute factoid about New Foundations: the first proof of the existence of an infinite set in NF was by the curious route of disproving the Axiom of Choice. Since Choice is true over finite sets, that means there must be an infinite set.