skysight-inc/HackerNews huggingface dataset:
> If you're only going to do the things you're REQUIRED to do when you're threatened with rejection/revocation, then you shouldn't...

Have you dealt with public sector before? That's essentially status quo across the board.
On what basis do you predict the US will destroy the factories?
The idea that LLMs will kill Google seems to me completely absurd. Name any other organization as well-positioned to create and exploit LLMs.
(1) Install tor

(2) Search reddit/internet for marketplace on tor

(3) Be very sure that you have actually reached the marketplace. Lots of scammers MITM them and steal your crypto by changing the pay to wallet

(4) Buy crypto (which kind depends on merchant & market place)

(5) Place order on marketplace

(6) Send crypto to the address they give you

(7) Encrypt your shipping info with the merchants public key and send it to them

(8) Drugs show up 1-2 weeks later
> US workers are unfortunately lazier and slower and more expensive

I guess we just kinda stumbled into being one of the wealthiest and most developed countries in the world while having the lazier/slowest/most expensive workforce.
Mozilla | Multiple Positions | REMOTE | Full-time

https://www.mozilla.org/en-US/careers/listings/

Hiring Senior and Staff software engineers for Android, iOS, macOS, networking, security, Credential Management, SRE, and more
0x Labs | Remote-first, with SF office | Full-time | https://0x.org/

At 0x Labs, our mission is to create a tokenized world where all value can flow freely. We're a highly technical, remote-first, and fully distributed company, with team members located across Africa, Asia, Australia, Europe, North American, and South America. As early pioneers in the space, we’ve made significant technical contributions to various Ethereum standards over the years, including helping to establish the NFT token standard (ERC721).

We recently raised a $70M Series B (Greylock, Pantera, Sound Ventures, A.Capital, Jump Crypto, Open Sea, Coinbase, and others). Read about it here: https://blog.0x.org/0x-labs-raises-70m-series-b/

0x currently supports 7 major blockchains: Ethereum, Polygon, Fantom, Avalanche, Optimism, BNB Chain, and Celo; and we’re actively expanding our reach across the DeFi ecosystem: https://blog.0x.org/0x-ecosystem-update-17/

Join 0x in laying the foundation for the crypto token economy in DeFi:

Matcha -- our consumer facing the search engine for tokens https://matcha.xyz/

0x API -- our two-sided infrastructure supplying multi-chain aggregated liquidity as a service https://0x.org/api

0x Protocol -- the open-source, global backbone for decentralized exchange http://github.com/0xproject

Open roles here: https://0x.org/about/jobs

Software Engineering: full-stack, front-end, and back-end engineering

Protocol Engineering: solidity development, cross-chain development, integrations, and security engineering

Growth and community development: Social Lead, Product Manager and Product Marketing

DevOps: infrastructure and data platform development
Not being aware of how vulnerabilities are detected and despite being a big fan of Rust, I wonder if there are other variables that drive down the ability to find bugs in the short term. If a researcher is only familiar with C and C++, is it possible that they're just ill equipped to find similar bugs in Rust?
I hope TrustCor takes WaPo to court for libel. That's what needs to happen in situations like this.
What surprises me is the kid-gloves treatment he's getting instead of the Bernie Madoff or Enron executives.

Contrast and Compare with how they treated ~45k "insider trading" they could not even prove with Martha Steward. FBI got all mad and aggro about 45k "lying". But this guy and billions and we hear crickets...

See how they treated Aaron Swartz
I only follow this topic casually but the impression I get is that the existing cryptocurrency offramps are not dependable -- they're either nonfunctional under heavy load or intentionally shut down at the drop of a hat; there isn't an entity like the FDIC to step in to gracefully shut down failing institutions, and let customers get their money out ASAP.

What would be once-per-decade anomalous events with real money seem like an everyday failure with cryptocurrency exchanges.
Yes I think that's a good way of putting it. Extism's primary goal is universality. I think the idea of having a plug-in system that is truly universal is exciting. Now we can share and maybe even sell plugins into different ecosystems. No more silo'd environments. I hope to see a future where standards can be built on top of this and plug-ins can outlive the applications themselves. Think VSTs if you are into music software.
Plenty of people spend time on facebook which is basically one step away from "digital heaven where the role of God is played by Mark Zuckerberg and you can do anything you can imagine, including “work” and “shop”."
OpenSpace | Full-time | 100% REMOTE
OpenSpace provides next-generation 360° construction photo documentation software, powerful integrations and the smartest analytics tools in the industry. We completed our Series D funding round earlier this year at $111 million and we are hiring for many roles.

I am the Director of Engineering for the front-end and I'm hiring Engineering Managers and Engineers for Web and Mobile. Our stack is Typescript, React, React Native, three.js, React 3 fiber and Cypress.

Company perks: 100% remote, competitive pay & equity, 401(k) + match, 90% healthcare coverage for employee and 75% for family, free vision and dental, $100/month DoorDash with free delivery, $1000 home office stipend, great work/life balance, flexible time off

Front End Engineering Manager: https://www.openspace.ai/careers?gh_jid=5225788003

Senior Front End Engineering Manager: https://www.openspace.ai/careers?gh_jid=5407175003

Senior Front End Engineer, Mobile: https://www.openspace.ai/careers?gh_jid=5364420003

Senior Front End Engineer, Web: https://www.openspace.ai/careers?gh_jid=5225788003

Senior Back End Engineer (Java): https://www.openspace.ai/careers?gh_jid=5383089003

Senior Dev Ops Engineer: https://www.openspace.ai/careers?gh_jid=5398296003

Senior SQA Engineer: https://www.openspace.ai/careers?gh_jid=5391039003

All Roles (Sales/Marketing/Customer Success/etc): https://www.openspace.ai/careers/
PostScript: A Digital Printing Press
The Computer History Museum has just announced the release of the source code of the original version of Adobe PostScript (https://info.computerhistory.org/aoc-postscript). It is not open source under the OSI definition, however; there is a license agreement that must be signed to get access to the code, and (among other stipulations) the license only allows non-commercial use, and I don't believe it can be re-uploaded to another site such as GitHub.
Any open-ness to remote for this or is it exclusively onsite in the locations listed?
This site is basically Reddit now. Really stupid comments from people with no insight.
So the defense to crypto being expensive to transact in is to...use another network on top of the crypto instead of the crypto I actually want to use.

THIS IS WHY CRYPTO DID NOT TAKE OFF. It's too complicated and expensive to use for all of the supposed use case; it's objectively worse than comparable fiat options.
Podcast Index LLC is a software developer focused partnership that provides tools and data to anyone who aspires to create new and exciting Podcast experiences

isn’t' it better to use more open standards [1] ?

[1] https://www.w3.org/WAI/media/av/transcripts/
Well, I've dug around, there's no hostname associated with it or pointing to it.

There's no obvious connections to any orgs or sites, and no entries in virustotal or abuseipdb, however there is an open port 179 (looks like BGP??).
Rust (despite the common understanding) is not a memory-safe language in its entirety. It is a language designed to have a strict division of safe/unsafe which makes it easier for developers to compartmentalize code to achieve memory-safety.
A point about gradient-free methods such as simulated annealing and genetic algorithms: the transition (sometimes called "neighbor") function is the most important part by far. The most important insight is the most obvious one in some way: if your task is to search a problem space efficiently for an optimal solution, it pays to know exactly how to move from where you are to where you want to be in that problem space. To that point, (the structure of) transitions between successive state samples should be refined to your specific problem and encoding of the domain in order to be useful in any reasonable amount of time.
Location: Berkeley CA

Remote: Preferably fully remote, though willing to do 2-3d/w (or, preferably, 1w/mo) in a Bay Area office

Willing to relocate: No

Technologies: Python, Java, AWS, Git, Docker/Kubernetes/Helm, SQL, Linux

Résumé: https://file.io/INdqmWrzkRiJ

Email: scubbojj@gmail.com

I have 10 years of experience at Amazon (Music and Video), most-recently tech-leading the Amazon Music Metrics and Data Platform org (~60 ICs across 2 countries, responsible for almost all systems that enable customer-data ingestion, sanitization, storage, processing, distribution, compliance, and experimentation). I'm particularly enthusiastic about SRE (I was a regular proponent for testing and resiliency best practices both in my org and across the Amazon Music business as a whole), Learning from Incidents (I founded and led Amazon Music's Incident Review Bar Raiser group), and process improvement to reduce toil.

I'm particularly looking for opportunities in quality-focused orgs, where building the long-term sustainable system is prioritized over rushing out a barely-satisfactory feature and ignoring the growing mountain of unpaid technical debt.
It was given an IP via DHCP (but not that specific IP, that was more for illustrative purposes).

I'm currently ruling out that it is any other device given I'm seeing the traffic from my desktop, and it shouldn't be acting as a router for another physical device. But I'd like to know if I could be wrong about htat.
Idk tbh.
People bought or earned crypto 5+ years ago and want to spend it.
That’s still true (although green bins are for compost/yard waste and blue bins are for recycling.)

https://www.recology.com/recology-san-francisco/your-three-c...
9. You just can't win can you?

Eat meat, increase risk of heart disease. Eat soy, decrease fertility.

Life is weird to me. Humans have one of the longest lifespans among mammals, yet we seem to start breaking down not all that far into it. We don't tend to consider 35 "old", as we regularly live 80+ years, and even if you consider the "generally well functioning" span of your life to be your years up to 60 or so, 35 is barely past half way.

Oh well.
I'm a customer and fan of interviewing.io but I'm also disappointed in this post. It's not actionable information for candidates.

A lot of the interview prep industry deliberately stokes interview anxiety to drive sales. I appreciate that you folks have a product (and marketing tone, usually) that emphasizes results over hype, but I think this post falls short.
Do you have a corporate laptop or computer? Things like crowdstrike love to scan your network and phone home.
Don't forget to include the conversion fees. In the example shown in the blog post, it looks like using ETH to pay that $10 bill costs $1.63 vs. the $0.59 it would cost to use a credit card for the same transaction.
Helio Oiticica is brilliant. His interactive and tactile works are really fun. My children always loved his work.
They will work but not as well.
You might want to contact your senators, and if they aren't responsive, I would not be surprised if Sen Elizabeth Warren's office wasn't interested [0].

This sounds like an egregious and intentional management decision to ignore the law. Generally not appreciated by those who write the laws.

[0] https://www.warren.senate.gov/contact/office-locations
I wasn't attempting to dogpile, and am sorry if it came across that way. I agree that this scheme would, if used as a replacement for cookies in the manner described by the OP, be a strict improvement on the current state. That's the first step in evaluating a proposed privacy improvement.

However, that is only sufficient if you already trust the operator of the server to maintain that same implementation. That may work for some threat models, such as a website that is currently run by a trusted individual that may later be bought by a malicious actor, but it isn't sufficient in all cases. Across the entire ecosystem, there's a sequence of questions that needs to be asked.

1. How would a non-malicious actor implement the proposed system?

2. What is the minimal amount of information that must be provided for a non-malicious actor to benefit from the proposed system?

3. What could a malicious actor do with that minimal amount of information?

4. If a malicious actor could use this information, are there additional steps the user can take to mitigate those effects?

Together, these questions help to predict the effects of the proposed implementation becoming the standard. Applying it to this article:

1. As described in the original post.

2. The browser must cache files according to the cache policy requested, and the browser provides accurate information about its cache for subsequent requests.

3. Answered in previous comments, that malicious actors could use this to reproduce the same information as is stored in cookies.

4. I'm not sure yet, but I'm picturing an approach where the "if-modified-since" header is deliberately varied for some requests, and abnormal results cause the caching policy of that website to be ignored as untrustworthy.

When people try to figure out what malicious acts could be done, it's moving the conversation from the first two questions and toward the last two questions. It isn't malicious, or reading into the original poster's intentions, but is an attempt to predict what malicious actions will eventually occur, and to implement mitigations as soon as possible.
How is your desktop connected to the switch (ethernet or wifi)? If the computer is wired, maybe you have a virus on it and that is somehow using the wifi to get another IP? I would suggest you backup your user data and wipe/restore the desktop. If it comes back after that, I'd bet someone has cracked your wifi password and is getting in that way, or some other device on the network is the culprit and reinfecting your desktop.
At least block the external IP and ports where the transfers are happening. Change the router password, some neighbor might be in the network.

It sounds like it might be part of a DDoS campaign, as well. Hard to diagnose here.
Do you happen to have a mobile phone with AT&T and are near Fremont, CA?
If you want to integrate both text and freeform diagramming, the diagrams.net tool will support embedding Mermaid:

https://www.diagrams.net/blog/mermaid-diagrams

They're not editable afterward, but it sometimes comes in handy if you want to render them out as an image for a document/presentation.
The Greatest Films of All Time
Yeah... I feel like a lot of people on HN are seeing a wall of text, not reading it, and jumping on the bandwagon.

Don't fault a person for giving a comprehensive answer when you ask an important but complicated question.

If people knee-jerk from that, that's a listener problem, not an answerer problem.
“ While there are reports of individuals that seemed to have the potential to produce both types of gamete,[173] in more recent years the term hermaphrodite as applied to humans has fallen out of favor, since female and male reproductive functions have not been observed together in the same individual.”
Ask HN: Would you prefer email notifications in a different inbox?
In many ways yes. We need to re-invent many things for this new world. But I'd encourage you to read a bit more about how Wasm is different. It's true it is a stack based virtual machine but that's about where the comparisons end.
Discord’s Creator Portal
I'll be downvoted for pointing out that comparing C++ with Rust without further context can be made into a false dichotomy.

Some people are posting the article around the Internet as evidence that Rust solved security. Instead, there are many other memory safe languages around and there has been thousands in the past. Additionally, many security issues are not due to memory safety.
Please keep that in mind when making comparisons.

EDIT: of course, 2 minutes and I'm downvoted down to -2
The acid in carbonation will eat the oxide layer, so soft drink cans get a thin plastic lining. Alcohol cans often are not lined.
There's definitely a learning curve for looking for vulns in Rust vs C/C++, especially compared to C. Exploitation in particular will be the trickier part, imo, since it requires not just understanding the vuln but also the context and reachability.

That said, there are a ton of ways that auditing for vulnerabilities is just as easy or way easier. In particular, most tooling for C/C++ can be applied to rust - fuzzers and sanitizers, for example. Additionally, one only has to "grep for unsafe" and work from there to find Rust vulns, which largely amounts to "what are the assertions for this unsafe block, are they complete, are they held?".
Closest I've seen is when UAE's Darkmatter was revoked as a sub-CA. Darkmatter claimed their "Trust Services" business unit was separate from the business units accused of spying for the UAE government.

https://bugzilla.mozilla.org/show_bug.cgi?id=1427262
I don’t see how one way of checkmating could be worse than another way of checkmating? Do some engines give different scores for different check-mating moves? (Different moves from the same position I mean)
Why stop at the firmware? Shred the hardware altogether. /s
Might as well add fiat-to-pork-belly-futures, when there's no real world use for crypto, its just a tradable commodity without the real world application of commodity goods.
Ask HN: Close Integration with Tester?
I really appreciate working with testers but the usual workflow for testing is something like

[i make pull request] -> [manager makes change to test system] -> [tester tests it]

This cycle takes a while, at the very least an hour but sometimes a few days. I find I spend a good chunk of time testing things thoroughly before I send it through this workflow because I don't want to waste the time of the team and start a cycle because of a "stupid" error on my part. I feel though that if I worker closer to the tester I wouldn't be testing things myself so much and could spend more time designing, coding, etc.

I also find that I spend a significant amount of time setting up test data on my dev system. Sometimes it is maybe 10% of the effort on a task but it is sometimes 90%.

Has anyone worked in a situation where you have very close integration with a tester, that is, the tester is at a desk next to you and the cycle to throw something over to them is a few minutes instead of a few hours?
I don't see the danger you are afraid of. The same artifacts you are proposing (skepticism, verification) should already be put in place with any pubic expert.
Yeah, I feel like the soy myth has been disproven time and time again but won’t die already.

This and seed oils get hit with the exact same playbook, then disregard significant chunks of the world that have zero issues with them.
Bytebeam | REMOTE | https://bytebeam.io

Bytebeam is an IoT focused cloud platform. Bytebeam aspires to be a one stop destination for all the makers out there building new age smart & connected products.

Think of AWS but focused on IoT.

We are super passionate about solving the tough problems faced by the developers in this space. Some of the key use cases we solve for are:

* Collecting large volumes of data over unreliable networks

* Over the Air updates to improve device functionality over time

* Real time data visualisations and logs for insights and debugging

* Device and mobile SDK’s to sync data in real time between device and mobile

We have a highly skilled tech team with a collective experience of 40+ years working with startups & large enterprises like Flipkart, Samsung, Intel, Bosch, Juspay, Grinntech, Sandisk, Hasura, Ather Energy & more.

Bytebeam founders, in their last stint, built the connected & smart vehicle infrastructure at Ather Energy.

We are hiring for a bunch of roles: Senior Product Marketing, Embedded Engineers, Rust developers, Full stack developers to name a few. See our careers page for more: https://bytebeam.io/careers/
> "NYC doesn't have the political will to do anything"

> "NYC recently hired McKinsey to conduct a 20 week study"

I mean, do I have to say anything else? The joke writes itself.
Not only that, they are also comparing new code with pretty old code.
Not talking about end users wanting to run "any software" (which you can if you really wanted to), but do you really think that the companies and devs who want to force Apple to "open up" are fighting for your sake?
It's on its own axis because the blue line represents the number of open tech jobs across all disciplines, whereas the red line is engineers only.
The heart disease thing is probably bogus https://bigthink.com/health/red-meat-cancer-not-health-risk/
That's part of why the Root CA certs are

A) Long lived

and

B) why having an untrustworthy root CA is the most calamitous outcome possible.

Because the algorithm that yields the answer to your question really only answers the question "Does the cert I was handed cryptographically validate back to a trusted root?"

If you can pwn the routing/DNS sufficiently around an AS, you could MITM all the authoritative sources, and with something like TrustCor, willing to issue duplicitous root certs and cert chains, while being trusted by major OS and software package maintainers, you can, in theory, pull the old switcheroo, and the software will still tell you "seems legit, hoss".

This is part of why the Internet is architected as a "collective network of networks composed of Trusted Agents".

At the end of the day, you're depending on every middle box routing your packet to do the job to get it where it needs to go.

The type of Trust you're looking for is incompatible with technologically facilitated networking in a sense. The network cannot prove the trustworthyness of the network. Trust has to start outside it.

The trust we've rooted from is from the integrity of the institutions we've established. Something that has been eroded more and more over time as the Internet infrastructure has slowly been civically infiltrated to shape it into a surveillance tool by governments.

If you're feeling heartburn over this, the problem isn't the Internet per se. It's your Government, and your institutions, and for places that like to think they are populace driven, the people around you.
I'm not familiar with that definition, I typically see debouncing used as any means to filter out the state as it is changing from the mechanical action.

I've seen simple BSP debounce example code that affects latency for both press/release. For example you can make sure the IO hasn't changed in X ms before accepting it as settled and reporting the event up. This way would incur latency on both press and release. In fact, the first answer I see on google does this:
https://www.beningo.com/7-steps-to-create-a-reusable-debounc...

You could report the event right away when there is an activation, and just not allow a deactivation event to be reported until the debounce time has expired. I suspect this is what you mean by debounce only applying on deactivation, but I'll bet some of the keyboards tested on that list are not doing this.