skysight-inc/HackerNews huggingface dataset:
> What's the use case for sharing passwords?

For personal use: none for me. Instructions for deriving/obtaining my master password and physical key will be made available in any will or power of attorney documentation I get around to drawing up.

In DayJob there are several, though they are usually only temporary needs, such as:

1. We often get sent password-protected documents by clients, that more than one of us needs to read. It pains me how often I see an attached document on an email containing the password needed to open it… A shared password manager where someone can record the credential and mark who should be able to access it (or better have all credentials encrypted by the public keys of those who should be able to access them rather than just trusting a flag) would be less daftly insecure.

2. Distributing initial credentials for new assets or to new people, where those assets are not integrated with single-sign-on so nothing needs to be distributed anyway.

There are other ways to manage such situations of course, but a password management arrangement with a well-defined way of sharing credentials may encourage behaviour more secure than some of the ad-hoc solutions people regularly use.
Maybe we should set up a naming system just like for COVID variants
> I somehow feel sick and constantly tired.

Have you had a sleep study? Alcohol makes apnea worse, and can cause brain fog and that same feeling you're describing.
No, it's not. Branded vulnerabilities are memorable. CVE numbers aren't.
'Productive' is such manipulation is this usage. In the modern economy, products shipped per employee often has little relation to how hard an employee works. Does not this metric speak poorly upon leadership's decision-making, the increase of onerous busywork and surveillance, and a dislocated world economy?

If you believe Zuckerberg chasing the Metaverse has misallocated resources, his company has shipped less 'product' per employee. Does that really mean employees have been less 'productive'?
Location: Saint Paul, MN
Remote: Yes
Willing to relocate: Yes
Technologies: Python, TypeScript, GCP, MongoDB, Postgres, OCaml, Rust, LaTeX, misc dabbling
Résumé/CV: https://icalculated.github.io/quartz/2022-08Resume.pdf
Email: sasha.hydrie@gmail.com
GitHub: https://github.com/iCalculated
LinkedIn: https://www.linkedin.com/in/shydrie/

Undergrad at UMN with a strong math background looking for opportunities in machine learning. I am currently a full-time student but I'd be interested in taking a semester off to work in spring, potentially through summer.

I have practical experience with ML from competing in several hackathons this past year.[1] Most recently, my team won the education track at HackMIT with a VSCode extension that revises the user's code with an LLM and explains the changes.[2] (We also pitched the idea to YC in their sponsor event and won an anytime interview so that's cool.)

I am currently working through fast.ai and am taking several graduate-level courses on ML theory to solidify my fundamentals. Areas of interest are LLMs, reinforcement learning, multi-modal models, manifold learning, and evolutionary strategies.

Feel free to reach out for anything, even just to chat.

[1]: projects can be seen here, don't mind the goose theme: https://devpost.com/iCalculated
[2]: don't expect anything cutting edge here, it was a 24-hour hackathon: https://spectacle.hackmit.org/project/118
> a good XMPP client on Android

Conversations[1]?

[1]: https://github.com/iNPUTmice/Conversations
Charge $5 a month to common users to experience twitter with all the blue check people filtered out.
That data for people commuting into cities seems pretty consistent with what I said. A minority have a less than 30 minute commute. A significant majority aren’t more than an hour. I certainly agree that more than an hour isn’t common though 10-15% isn’t nothing. I did that part-time for about 18 months and it really isn’t sustainable.

Also presumably the number goes up if you exclude people who live within the metro whereas I specifically excluded that group.
Spoof on

https://www.openbsd.org/
I mean people didn't know it wasn't an accident until another plane hit the second tower...
Protobuf also does not declare its schema. Message parsers can be generated from a schema, but that's also true for REST over JSON. Even ad hoc REST APIs often have better self-declaration of resource types than protobuf.

(I still like protobuf, but the schemas are a terrible reason to like it.)
About $2600 per pound.

Based on this forum thread [1] the marginal cost per pound to fuel efficienciy is about "0.0155 gallons per pound per 1,000 statute miles". Over a 737's life it may fly about 50 million miles [2]. Combining facts one and two results in a fuel consumption per marginal pound of 775 gallons. Current jet fuel prices are about $3.40 per gal [3].

[1] https://www.flyertalk.com/forum/travelbuzz/712294-anyone-kno...

[2] https://www.usatoday.com/story/travel/columnist/cox/2012/11/...

[3] https://www.iata.org/en/publications/economics/fuel-monitor/
Ask HN: GitHub Actions Architecture for Workflow Orchestration?
Greetings!

Does anyone know what GitHub Actions uses internally for Workflow Orchestration?

Context: Building some workflow orchestration jobs that have similar async needs, and want to build something similar. I love the features that I observe such as concurrency limits, failure handling, etc.

I feel like Argo (https://argoproj.github.io/) is similar, but would love to know if they're using something generally available to the rest of us!

Let me know,
Thanks!
Yeah there is a startup that does this, they buy lotto tickets for you in app for a fee.
I enjoyed seeing it 15k km per hour but i was trying to figure how it accurately measures velocity or is it not that precise?
Anthropic | Core ML Systems Engineering Manager, Senior Infrastructure Engineer, Systems Researcher and more | San Francisco, CA or Remote | Full-Time |

Anthropic is an AI safety and research company that’s working to build reliable, interpretable, and steerable AI systems. Large, general systems of today can have significant benefits, but can also be unpredictable, unreliable, and opaque: our goal is to make progress on these issues. For now, we’re primarily focused on research towards these goals; down the road, we foresee many opportunities for our work to create value commercially and for public benefit.

We are a small, highly collaborative group of researchers, engineers, policy experts and operational leaders, with experience spanning a variety of disciplines. If you’re interested in working with us, please check out our careers section -> https://www.anthropic.com/#careers

If you have any questions or would like to chat, feel free to drop me a note: landon at anthropic.com
Overleaf (https://www.overleaf.com) | REMOTE (UK/EU/US/Canada) | Full-time | Senior Analyst (Business), Product Manager (Technical)

Overleaf builds modern collaborative authoring tools for scientists --- like Google Docs for Science. We have over ten million registered users from around the world. Our main product is an online, real-time collaborative editor for papers, theses, technical reports and other documents written in the LaTeX markup language.

We have two open positions:

- Senior Analyst (Business): help us get the most out of our data, answer important business questions, and generate insights to shape where we go next. Apply here: https://apply.workable.com/overleaf/j/5025DD8529/

- Product Manager (Technical): lead product discovery and development initiatives for one (or more) of our customer segments; own research, understanding and delivering value to our authors. Apply here: https://apply.workable.com/overleaf/j/4691B28FD2/

Some reasons you'd enjoy working with us:

- Working hours can be flexible to your needs. Our core hours are 2pm--5pm UK time. Applicants in the US, Canada and UK/EU are preferred.

- Remote is a first class citizen; even before the pandemic, all staff worked remotely. We get together 2--3 times per year for valuable face-to-face time.

- You’ll be a part of a cross functional team to help our users create their best work on Overleaf.

- We're substantially (around 80%) open source, so your work will often be on open source.
What is a fulfilling life? I would say most technology I'm using has given me a more fulfilling life.
How would this even work? Get it out of the app stores, fine. But presumably the URL would still be accessible? Likewise sideloading it onto Android devices?
Hey, we want to use machines to steal people's creative work, take away their jobs in the future, and create more algorithm generated garbage since it worked so well for news sites and promoting videos/posts/social media. We also want to pretend that computer generated graphics are created by an 'artist' for the sole purpose of being able to assign copyright to our machine works, but be able to ignore artists and copyright in every other way.

Why do people seem to have a strong opinion against this? It's just stealing the most intimate thing humans create (art) so that we can create soulless algorithmic versions of it for our own uses because evil artists won't let us just do what we want with their works and won't let us profit on their work. Artists are jerks.
Try

dnf install --setopt='install_weak_deps=False' diffoscope
QED: modern versions of "god told me" are false?

I think we just solved a lot of problems ;-)
National Renewable Energy Lab | Full-stack, back-end, or front-end | Golden, CO or Remote | Full-Time | https://www.nrel.gov

Hi! My team at the National Renewable Energy Laboratory (NREL) is looking to hire additional web developers who want to help make an impact on the future of transportation and climate. We're a US Department of Energy national lab focused on renewable energy research. Our team works on web sites, tools, and APIs to help disseminate transportation-related data (eg, where are all the locations you can charge an electric vehicle) or help consumers, fleets, and policy makers understand various options in this space.

Our team mostly works in Ruby on Rails, Vue.js, and PostgreSQL. Here are the full job listings with more details, or feel free to reach out to me if you want to chat (nick.muerdter [at] nrel [dot] gov):

https://nrel.wd5.myworkdayjobs.com/en-US/NREL/job/Senior-Sof... https://nrel.wd5.myworkdayjobs.com/en-US/NREL/job/Developer-...
Sometimes society established norms when doing a thing was very rare and expensive, and honestly barely needed any control because it was so unusual.

If that thing becomes a lot cheaper and easier, and it starts being done a lot more - perhaps we realise we actually need different rules even though the difference is purely quantitative.

One guy juggling chainsaws on main street - how entertaining! No need to ban that. Dozens of chainsaw jugglers on every street, 24/7, the issues are easy to imagine.

To say that "Oh, you were OK with one chainsaw-juggler therefore you would be OK with 100,000" is IMHO a line of argument that obscures more than it clarifies.
Can you explain what the difference is between a standard and a reference?
been using the beta - really love it
Does a reputable VPN service for business use exist?
I have been traveling a lot and am looking to be able to use public wifi hotspots at hotels, coffee shops, and coworking spaces. I would use a mobile hotspot device or even my phone's hotspot feature, but the connection quality really seems hit or miss depending on location. I considered running my own VPN server, but I don't want to have to worry about misconfiguration or other security problems. I really just want a trusted solution from a trusted company that gives me the ability to conduct serious work and send/receive sensitive business data over a variety of connections in a secure way.

It seems virtually all of the VPN companies are questionable in some way. And most of them appear to be operating outside of my country's legal jurisdiction (the U.S.) which feels uncomfortable for a business use case. Are there any reputable brands which cater to the business user who isn't trying to route traffic all over the world and just wants security and relatively decent privacy for boring business purposes?
Sample bias. HN crowd != people I know in real life.
Bizarre aye-aye primates take nose picking to the extreme
What in the -- Freudian death drive? I'd wager it's far more simple: run of the mill selfishness. NIMBYs want to keep the gravy train flowing while they're here. Increased housing stock threatens the currently astronomical prices and returns. NIMBYs are "anti-growth" because their pocketbook demands it.
Is not too late at all. If you remove the "is not my responsibility what my users publish" for forums beyond X thousand users, every forum will stay under that limit and twitter quickly will become thousands of independent sub-twitters ala reddit. No home page aggregating everything, no suggested tweets, no
country-scale public square
this is less a free speech issue than a security issue
There's a great kids magazine called Cricket that I cherished as a child. It's still in print here in the US.
The DoJ security assessment about Multics refers to PL/I bounds checking capabilities as why it got a better evaluation mark than UNIX....
> Anyway, just my personal opinion. It's become a very 'us vs them', lines-in-the-sand argument these days, and it'd be great if the conversation could be less heated and more philosophical.

It's heated and less philosophical because many artists are worried about their livelihood while a multi-billion dollar company is working towards making them obsolete often using their own work.

I don't understand the confusion people have towards this issue.
What you just said doesn't change the fact you painted an inaccurate picture. Will Shopify ditch Ruby one day? Maybe...not likely imo but maybe. For now there's zero signs they're doing that. They're investing tens of millions of dollars in Ruby as I said ... I looked at their JIT team and these guys don't come in cheap. I have no idea what this Remix purchase means but I find it hard to believe it's about rewriting everything in JS.

As for the JIT progress here are the stats https://speed.yjit.org/. I think they've been working on it for around 1.5 years they're definitely not done. Its not fantastic yet but almost 40% faster is nothing to sneeze at. If JS became fast why can't Ruby or Python? What you said about Dropbox is interesting, why is Dropbox the ones making the effort? They are not that big. There are huge companies running millions of lines of Python code - Instagram is a Django app and Google probably has a bunch of Python. I'd expect these companies to make the effort ...guess there's no economic incentive yet.
It probably serves them better that they haven't. It'd turn it into a meme like Heartbleed that would not be forgotten for the next decade.
> Feels like there's a difference between artists as drops in a vast ocean of training data, vs explicitly creating a model on one person's work.

I don't.

Stability.ai did the big training sets and it is coincidence that it remembers the names and categories accurately.

If you want to leverage this tool more fine tuned then you add these modules with more accurate naming.

I would be for some way to compensate artists, like if the use of a module gave them a royalty, but I don't think it is an ethical, legal, or social norm to enforce. If it happens in a uncircumventable way, I would be for it. If it doesn't, I'm for that too.
Just get the 7th path from `Get-Location` and `Set-Location` there, e.g.

function Set-StackLocation ($Position) {
(gl -Stack).Path | select -Index $Position | cd
}
Thanks. I just went to the companies' career sites and find all the engineering jobs. I have about 3000 companies on file. API is free to use BTW.
You seem to have missed this part.

> They trick people with the “just set this env var” to turn it off, and rely on people doing it wrong, forgetting to do it in certain environments, etc. it’s intentionally complicated, when a frigging Boolean setting in next.config.is would be better. They refuse to do it. That’s what evil companies do.
This is somewhat similar to how Reddit currently works funnily enough
Gotta ask for the AAA discount.
Research paper

https://zslpublications.onlinelibrary.wiley.com/doi/10.1111/...
Location: Ontario, Canada

Remote: Preferred. Or on-site/hybrid in west-end GTA/GTHA, Ontario

Willing to relocate: No

Technologies: C++, Rust, "systems" eng. Other langs.

Resume: On request

GitHub: https://github.com/rdaum (mostly hobby stuff)

Email: ryan [dot] daum [at] gmail [dot] com

Experienced software engineer with 20+ years in the industry, including 10 years @ Google. Generalist with a systems focus. Background doing both embedded (MCU and ARM SoC, consumer hardware) and high performance distributed backend dev. Most recent $work -- and most recent personal interest/emphasis -- is in database internals (current nerd excitement for Umbra & LeanStore papers, for example.) Currently working full time in Rust, but extensive C++ background and plenty of other languages as well. Available on short notice. Open for fulltime or consulting work. No cryptocurrency/blockchain/web3/defi.
Now I won't lament the overkill in hardware (512MiB RAM for a password manager?), but the lack of protected memory (Smart Card or otherwise) makes this approach imho quite questionable. Lose the device, lose all your passwords?
RNBO: Export Max-Like Patches to C++, WASM, VST, Max Externals & RPI
I don't see how it can be a straw man, when Ive seen the claims it's debunking being repeated here and elsewhere. Sure, people knowledgeable on the topic might not make such claims, but it's a fact that they are often made.
If congress asked Intel to build a computer meeting specifications from 50 years ago, regardless of how stupid that request is, and they somehow failed to do that in a resonable amount of time or budget... it would be an astounding display of incompetence. And failing to even try to create a new showcase technology of something better is just additional incompetence.
A Nix package can do this easily!
When I went to IBM to give a talk, back in grad school, there was a wall like that. The caption was "One Year of Patents".
See edit
Also good to know these patterns if you're dealing with a lot of legacy code, particularly 199x - 201x code that implemented a lot of these patterns.

Some of them are straightforward (factory, adapter). Some of them are almost never used (flyweight). Some are more particular to a programming language; you might see a lot of visitor patterns in C++ code, for instance, but IIRC, that wouldn't come up in Smalltalk because it supported paradigms like double dispatch out of the box.
It seems like the protocol question is adjacent to the actual problems that messaging apps solve for users: mapping a particular device to a trusted identifier within some namespace.

iMessage has a unique mapping between iMessage account and phone number. Signal has another. WhatsApp has another. If you want to message 650-867-5309, who should receive the message?
But then you can't put "led implementation of a highly-scalable $80m/yr cloud-native solution" on your resume. And bigger numbers mean bigger salary.

Now, if you wait for someone else to do this then you swoop in and cut that spending by 90%... now you're talking. Then the next person can reverse what you did and we all keep making money digging holes then filling them back up.

Pay it forward.
You can have both. All large social media platforms have the technical capability to selectively block specific content in certain countries based on the user's location. They have been doing this for years. It's a necessity just to be allowed to continue operating in some countries.
I don’t think the people who defend the territory where ~90% of every Mac, iPhone, iPad, and many other products are created is an “adversary”, any more than the police in Cupertino are.
Thank you for catching this mistake on my part, fixed.
fun application of gpt-3 and great name!
usually the way people do this is just running a vpn onprem on company equipment

alternatively cloudflare zero trust
I have a 5 year old Sony Xperia ZX which has had "battery care" enabled (possibly by default) since I bought it.

It charges the battery to something like 85% until shortly before my alarm is set, or the expected time I'll unplug it if no alarm is set. There isn't a way to manually control this, beyond changing the alarm time.

However, the battery is still going strong after 5 years.

(I wish they'd make a decent compact successor. The latest "Compact" Xperia phone seems to be 2.5cm taller! https://www.gsmarena.com/sony_xperia_5_iv-11838.php 15.6cm vs 13cm)
That doesn't work because people just sign up again with a different email, bots can do this all day for free. Its the up-front payment method that makes it possible to effectively ban people.
Screw one person? A great offense. Screw lots of people at once? A great innovation.
LogicLoop | Full-Stack Engineer| San Francisco Bay Area
https://www.logicloop.com
LogicLoop is democratizing "low-code" and empowering operations teams to set up alerts & automations on top of data without needing engineers. Our CEO was #5 at Instabase and our CTO was a founding engineer on Stripe’s Billing Team. We're backed by Accel & First Round along with execs from Brex, Quora, Plaid, Coinbase, Benchling, Oscar & more.

We’re looking for engineers who thrive in fast-paced environments, wants to take ownership and can wear many hats. As an extension of our founding team, you’ll have the opportunity to shape product, infrastructure, culture and more. You will work across the stack on backend, frontend and systems. We use React, Flask (Python), Postgres, Docker and AWS.

Email your resume to jobs [at] getlogicloop.com.
Thing I don't get is people post on public internet and then somehow expect that that information is somehow protected from uses that they don't want.
If you don't want your data mis-used, don't post it on the internet.
Decisions and Teamwork in Software
This is part three of a three-part blog series on decisions and creative work I wrote: http://prog.blog/tags/decisions/
Nah, that would increase open access to information, which was never actually Musk's goal.
SEEKING WORK, Ontario Canada, remote or west-end GTA/GTHA local

Experienced software engineer with 20+ years in the industry, including 10 years @ Google. Generalist with a systems focus. Background doing both embedded (MCU and Arm SoC) and high performance distributed backend dev. Currently working full time in Rust, but extensive C++ background and plenty of other languages as well. Available on short notice. Open for full-time or piece-work/hourly consulting.

Email: ryan [dot] daum [at] gmail [dot] com
How to animate multiplayer cursors – Liveblocks blog
This Hollie Mengert’s style is (nice, but) not at all original. There are thousands of cartoons that look exactly like this. You could never even tell that anything like this is similar to “her” style.

But, even if she did have a distinctive style, there is nothing illegal or unethical about learning that style and producing your own similar artwork, whether you call it “in the style of”, or not.
Every business implementation of a VPN I have seen in my career were self hosted by the business so they could document and audit all of the controls and firmware versions. I do not foresee many businesses trusting 3rd party VPN solutions, though I am sure some do. third party data processor legal controls

Do you have an existing relationship with network gear providers such as Cisco, PaloAlto, Fortinet, etc?

[Edit] Or if your business is very small and just starting out perhaps you could set up an isolated zone with Linux or BSD VPN nodes and use something like Wireguard, Tinc, Strongswan, OpenVPN, whichever suits your needs. Then create firewall rules in your company to permit the VPN nodes to reach the required services.