skysight-inc/HackerNews huggingface dataset:
Anvil Secure - Security Engineer - Seattle, WA (Onsite) - Full-Time

Job Description
Anvil is seeking a Security Engineer to join our team. As a Security Engineer, you will perform tests of customers’ web and mobile applications, networks, and embedded systems. You will also be provided dedicated time for research and skills development.

Job Responsibilities
Assist with scoping customer engagements
Perform penetration tests, solo and in teams consisting of other Anvil Security Engineers
Perform source code audits
Generate vulnerability reports
Participate in Anvil’s research program

Job Requirements
At least two years of experience in information security
Familiarity with penetration testing techniques and methodologies
Ability to manually find vulnerabilities in source code
Knowledge of Java, Python, and C/C++
Excellent verbal and written communication skills

Compensation and Benefits
Annual salary range of $105,000-$140,000
Flexible PTO policy and 11+ company holidays
401(k) plan with up to 4% matching
Employee stock option plan
Medical, dental, and vision insurance for employees and dependents
Life and disability insurance

Apply Here: https://anvilsecure.bamboohr.com/careers/40?source=aWQ9Mzc%3...
Thanks for asking me to hop on a space together @swyx

I didn't imagine so many folks will tune-in, share their use-cases of these new superpowers, share limitations, explore the boundaries (no more running binaries) and then explore the jailbreaks (apparently binaries are still possible to run w/ some tricks!) and more!

Incredibly deep recap as well
On the one hand, they're right that the new user experience needs some attention.

On the other hand: they seem woefully tone deaf on how to do that attending without royally botching the things that appeal to Tumblr users.

Good luck to them, but I'd suggest they scrap this whole plan and go with something drafted by a team who hasn't drank the engagement kool-aid.
...so are terms of use, which often include "you can't share this without my permission" so even if copyright law weren't so awful, the people who would be doing the sharing would still be breaking an agreement to do so.
I think GCC also supports this for a long time already, see -fplan9-extensions and -fms-extensions
True, although given the social situation at the time, those actions were just as transgressive as actively inconveniencing people.

I guess, really, my point is a bit broader than "inconveniencing". What seems necessary is attention-getting theatrics that actively angers those who want to maintain the status quo, and the Montgomery bus boycotts were absolutely that.
Sorry I should have been more specific. I meant a distributed computing system setup
What if NYC had its own public bank?
Oops, meant to write decoder.
AFAIK building iOS apps on Linux is possible if you try really hard, but deploying isn't.
David Goggins have an above average drive and self control. Most of the people have zero, so these motivational things doesn't help shit.
They make good products that people like to use, so people pay them money to use those products.

There are definitely things to disagree with Apple about, and the crowd here leans towards those values a lot more than the general consumer market.

But a lot of the ethical issues can be debated about basically any technology product not soldered and coded by your own two hands in your garage (and even that solution has ethical quandaries from an accessibility standpoint).

Personally I give Apple money and they give me high-quality, stable tools that let me get my work done in a way that feels nice. The alternatives all have most of the same moral issues (made in China using who knows what labor and material sourcing), but I like the Apple ones so I use them. I don’t see the huge conflict there.
To me it sounds like criticism of someone who jumped on it but did not want to read documentation, then also spent second time of the blog trying to have Nix run on an unprivileged account with small quota.

As for devops task, if it is something that you plan to do and many other users already did than it should be fine. If you are not happy with existing solutions and want things done your way, or it is an uncharted territory then you will need to go through the steep learning curve.
Very anecdotally, bot activity on my accounts was increasing in the last month and then it completely stopped after that recent rate limiting stuff.
You get arbitrary length arithmetic for free (the 1401 in the Computer History Museum runs a demo program that computes powers of 2, it only stops when it runs out of columns on the printer paper instead of bits in memory). Also there is no alignment to think about and no padding is necessary, which is nice when memory space is scarce as it was and considering the 1401 uses a variable word length instruction set. Plus it's easier to type into a key punch [0] when programming.

[0] https://en.wikipedia.org/wiki/Keypunch#/media/File:IBM26.jpg
"Privacy" and "fediverse" are like water and oil: they don't mix.

Meta would have no more (extra) access to Fedi posts than an large Mastodon instance like Mastodon.social would have.
"New Outlook" is so bad. And somehow still makes you go into a different webapp to handle todos?
This article also from NYT, earlier this year, talks more about the used furniture industry and what's happening on the west coast:

https://www.nytimes.com/2023/02/25/technology/office-furnitu...
Any change of getting a non-Windows build? I have no idea but I would imagine the % of HN readers that or on MacOS or Linux is high.
That is the thing when people buy Apple, but actually want GNU/Linux for the actual work.
I loved taking the AOL and MSN discs we received in the mail and using them for updating the browsers on our computer. Saved a ton of time on rural dial-up.
> This is the way cultures and people have changed since time immemorial.

Yeah, because some empire came and killed your people off and conquered your lands and enslaved your survivors and erased your culture so they could replace it their own.

Not because people wiped themselves off the map because they wouldn't have children.
Greger is a vegan fundamentalist who ignores any evidence to the contrary of his chosen vegan lifestyle. That’s not science. At all.
Is the censorship factor high? Has anyone experienced obvious examples?
no true Scotsman delivers value to a customer!

one of the problems with crypto as currency is that currency is not supposed to deliver value beyond medium of exchange and store of value at least long enough to do that.
Hello everyone, the situation is this, exactly a year ago I launched the site http://www.1usdvps.com/ to work with the Racknerd affiliate program, the first 8 months the earnings were not big $5 - $10, this is understandably a new site. In the ninth month, I made $50.. After 9 months I don't understand what's the matter, I earn $1 - $5 per month. In June, there were $9 in the unconfirmed, in early July, these $9 dollars were not confirmed and it turns out that in June I didn’t earn anything at all, a week later $10 appeared in the unconfirmed, despite the fact that this data is not displayed in the statistics! As if these data are taken from thin air! In the statistics every month 3000 clicks on my affiliate link! I contacted Racknerd support - they only say that, according to statistics, everything is fine with them! I conclude - Racknerd scammers!
Has anyone had similar problems with Racknerd?
Recommend a normal affiliate program of inexpensive VPS.
The Diff by Bryne Hobart https://www.thediff.co/ is a finance one I enjoyed in the past
Not every bad person is a Nazi and not every scam is a Ponzi scheme. Most crypto scams are the equivalent of an old school pump and dump on a penny stock.

That’s not a Ponzi scheme.
Show HN: A News Website Generated by AI
Research in English is a website devoted to distilling research into a more readable form while at the same time enabling our audience to dig deeper and learn. Our goal is to increase the publicity of research and improve citizen access to science. We always link to the original paper for users who want to learn more.

I've been working on this site for the past couple months and have 10k+ papers in my database but want to get approved for Google Ads before I really go crazy generating articles.
"Conclusions... Concerning low level programming, C is superior to Ada for its flexibility and for handling pointers or strings"
I found some screenshots of the output of the application here:

https://www.boatdesign.net/threads/freeship-plus-in-lazarus-...
I had to look this up, and I guess what usrbinbash was referring to was the layout of the retina, which places the rods and cones behind layers of transparent neurons.

https://en.wikipedia.org/wiki/Retina#/media/File:Retina-diag...

Edit: ninja'd
> Expanding the number of doctors, and lowering doctor pay and workload, and lowering the cost of becoming a doctor will produce better health outcomes for everyone.

So go do it. No one's cockblocking you. Well, except the AMA. Or are you saying that you'll only do this if you get your socialized medicare-for-all quackery?

Wouldn't be shocked if it was held hostage like that, but no thanks.

> This exact criticism can be levied on the current US system.

I never said it worked. Wouldn't catch me saying that ever.
For Symmetric encryption, it says: 'Current key size: 112 bits'

However the 3 linked examples, AES, ChaCha20 and Camellia all use a key size of at least 128 bits, with 192 or 256 bits also listed as options.

What does this current NIST key size recommendation (effective as of 2019) of 112 mean then? Does anyone use this size?
And color passthrough, albeit not a great one. Still good enough to build and test experiences already!
I'm not convinced on the first part. That it won't be broken by improvements to prime factorization.

https://www.ams.org/notices/199612/pomerance.pdf has a great writeup on the history of the work around this. Essentially when you see improvements in complexity of the form

Old best: Quadratic Sieve: exp(c(log n)^1/2(log log n)^1/2)

New best: General Number field sieve: exp(c(log n)^1/3(log log n)^2/3)

I can't help but feel that's an exponent there that we've moved to 1/3 that could be moved further. Sure we don't know how and we've been stuck here on the current best for just over 25 years but i just feel that if you give me two methods and one moves a term like that there's a good chance there's a way to reduce that term further. It'd be weird for that complexity statement to stay as is. That's telling me "the universe doesn't allow factorization any faster than a term that's raised to a power of 1/3rd" and i'm asking "why is 1/3 so special?". So i'm not convinced that there's not more here. I don't have a clue how of course. But the history of RSA going "256bits is secure" to 512bits to 1024bits to 2048bits being needed has me worried about the safety of prime factorization.
There are always unanswered questions, legal FUD, and a lack of case law when a new technology brings up previously unanswered legal questions. This is just how law works. It doesn't necessarily mean that all of those things are illegal, or that the foundational law is fundamentally flawed. Yes, more case law is needed. Yes, some small tweaks could be necessary to clarify what 'copying' really means on the internet. But no, the underlying concept of copyright is still very necessary to protect creators from those with the power to exploit them.
Right now, a copyright holder has a monopoly on their IP: they alone can decide who can use their works, and at what price, for the entire duration of their copyright. My suggestion was that that monopoly should only last a couple years (5? 10?), and then after that, it's a free-for-all. Re-print the book, adapt it to a movie, whatever, with the caveat that some fixed share (say, 1-5%, idk) of your revenue is owed to the creator.

The way I see it, that's the best of both worlds. If your goal is non-commercial in nature (e.g., game preservationism), then you're free to redistribute for free. If your goal is commercial, you're making money off of someone else's work, pay some token royalties, but, here's the big "but": the original author doesn't get to say "No, you may not adapt my work this way".

It even works for software copyright, with the caveat that you'd need to put some thought into how to deal with multiple claimants of royalties would work (since owing 50% of your revenue to 25 different authors seems excessive). Maybe have a cap of, say, 10% that, after reached gets subdivided based on some criteria.

18 months is flatly too short. Most creative works take longer than that between completion and market. You have to give artists some time to attempt to extract value from their work. Listen: J.K. Rowling is an evil bitch, but the world loved her work, and she was compensated as such. I feel the same way about Notch, of Minecraft fame. Guy's a dick, but it's hard to say he stole much of his fortune.
Here are some latency measurements, showing you are correct: https://www.reddit.com/r/oculus/comments/jgfoco/oculus_link_...

I guess my notebook is the bottleneck, at higher bitrates, not the Quest!
Use Opera Mobile, still the only browser with working text reflow in 2023.
Indeed. Works for me, but I'd love it to be an about:config setting for power users, or maybe even a View menu item.
More detail on progress towards quantum factoring of RSA (among other things):

https://sam-jaques.appspot.com/quantum_landscape

I'm not super concerned. Cynically: one big driver of research into PQ cryptography is that it's a full employment program for academic cryptographers. Not that there's anything wrong with that! I like a Richelot isogeny as much as the next guy, or I would if I understood what they were.
And yet I doubt you would be willing to bet against the sun rising tomorrow.

Our understanding is based on imperfect models, sure. That doesn't matter most of the time. It wouldn't matter in this bet.

So much of what any lifeform does is based on past experience, even though that experience isn't the direct driver of future effects. Turns out that bets based on experience work really well.
There's practically no reason to think that AI will greatly accelerate the development of new algorithms.
Interesting. There's that too.

I assumed it was because of the phonetic similarity.
The text attempts to summarize the Hilbert Transform for electronics engineers in telecoms applications just going to the point.

It was written by me, and I am human.

I think I got my purpose. But obviously the text will be useless for many people and very useful for others. Anyway, please take into account the context and the topic of the blog.
So are you taking back the original answer?

Those are not my words.
I had to move my blog off Tumblr shortly after moving on when I realized I couldn't access the archive when logged out. There's no way to turn this off. And as far as I can tell, there's no way to convince it you're logged in when viewing under a domain. I was logged in, but it still showed a logged out view. Something to do with cookies, I'm sure, but this was with default security settings. I'm sure I could fix it for me, but I can't expect everyone who visits to do that.
Two things I've learned over 30 years of programming, but mostly the political landscape of software engineering in general are:

1. The code the is used to implement languages or the main "library" of said languages and your code to implement products don't have to and probably should NOT mirror each other.

Other ways to think about it: Just because Java standard library has a generic List -> LinkedList or ArrayList etc..., doesn't mean your software related to managing Patients does NOT mean you need this complication:

Human <- BillablePerson <- Patient (this is somewhat whacky).

I often see developers do things like this because its "a best practice" and maybe there's a 1% of your code that will take advantage of something like that. In reality it makes a lot more sense to just generate a Bill and send it to an Patient. Whether they are a BillablePerson or not doesn't really matter. Anyone opening the user interface can see a payment screen, right? You can flip the status on a Bill to paid, right?

Yes the pedants will come running. And yes if you're app is a framework for medical billing software (you're not a billing company but a company that makes billing frameworks) _maybe_ this is useful? But my answer to that is - even in that case, more and more we're outsourcing screens and concepts to other cloud systems. The concept of polymorphism is neat to iterate a LinkedList and an ArrayList, but it's not buying much for an invoice that gets paid in freshbooks and a patient managed in some EHR software.

So as much as it's nice to "wrap all the things" the software we write is increasingly outsourced to yet another API call.

Last two companies I worked at the config.json file was 50 lines, almost 90% of which is API tokens to various cloud SaaS vendors that take care of billing or email or storage or uploads.

Wrap all the things? It's just not feasible anymore.

2. Second thing I've learned: Don't react to Everything.

Have a bad deployment? Have some requirements that were lost? You can definitely implement a process or two especially for repeating issues. But don't react to everything. If you make a new policy or process or 2-step program for any frown you generate, you'll never get back to coding up the solution. You'll drag your software developers through red tape.
Please advise a good affiliate program of inexpensive ones VPS with the withdrawal of earned money to PayPal. Thank you in advance!
Finding the profile directory is as easy as opening about:support (also available via the Help menu).
That'd be a little tricky and probably have undesirable collateral damage. The Oculus side of this is a general-purpose streaming VR app called ALVR that's mainly designed to stream desktop VR apps running under SteamVR (which Oculus do dislike enought that it has to be sideloaded, but there's not really a clean way to do the same with the desktop Oculus runtime). This also means that in theory you should be able to stream to other headsets like the Pico or even an Android phone used Cardboard-style, though the set up and compatibility on that last option is a bit of a pain.
There are a couple open source projects that expose llama.cpp and gpt4j models via a compatible OpenAI API. This is one of them: https://github.com/lhenault/simpleAI
Do whatever libc's getauxval does to find the aux vector. Then env array is just below it, and the argv is below that iirc.

EDIT: I agree it's ugly, I'm just not sure if is fair to call it brittle
They have the best product for what I need.
I assume you’re aware, but for clarity: it’s not possible to sic the bitcoin network on anything, even cracking sha256, which it uses internally, due to hard-coded ASICs that incorporate specific quirks of the proof-of-work.
Honestly, as much as this argument has been beaten to death, they just need to allow explicit NSFW content. This is Twitter's edge right now, and Reddit maybe. Let people post freely, and they'll return.
Are you talking about gatekeeping what software I can run on my own device? If so, yes, that's one reason why I don't buy Apple products, generally speaking. I would love to use an iPad Pro as a VSCode machine just as one can do on a Mac but in a much slimmer package, but no, Apple doesn't want me compiling my own software for some reason, so I'm stuck with a laptop.

Same with the Vision headset, it is absurd that the only way to do real software work on it is to literally stream a Mac display onto the device. At that point, why not use the Mac itself?
While generally I think that your approach is the best approach to discovery, I think it is prone to privacy complaints. I’ve certainly looked at… things… on social media that I wouldn’t want close friends or family to get recommended to them, even worse if they know they got recommended it because of me. Not everything everyone interacts with on a social media platform is meant to be shared with everyone else.
The horror! The president of a country under foreign invasion lied about opsec. I think I'll buy myself a pearl necklace just to have something to clutch.
This seems likely a garbage-y study. It's a narrative study, not even a meta-analysis, so it's more of proposing a hypothesis rather than stating a fact. The current science shows that seed oils, and omega 6 (aka linoleic acid) fatty acids, are either benign or healthy. There was a very popular hypothesis that the omega 6 to 3 ratio was important for health, popularized in the early 2000's and getting revived now by counter-culture nonsense people, but the science has not backed that case up.

They study they link to citing neuro-development issues is https://pubmed.ncbi.nlm.nih.gov/28420388/ - which is based on a food intake survey, and it's not a controlled study, it's looking at cohorts from another study. All they checked for was linoleic acid intake, and unless you're specifically checking for food source, this usually means it comes from processed food, which is more likely the culprit than the 6 to 3 fatty acid ratio.

There is no known effect of seed oil / omega 6 intake on inflammation, which is shown in quite a few controlled studies. Seed oil intake replacing saturated fat intake has also been shown to significantly reduce CVD outcomes.
I feel the same way. Don't know if it's because of the algorithm or something else but Twitter these days seems to be 80% bots shilling crypto and/or simping for Musk.
Self-hosted photo and video backups directly from your mobile phone
What quantities are we talking about? A daily serving of tofu, or ???
That's not the worst part. Rich families had their kids legally emancipated prior to age 16 so that the kids could legally show zero income and zero family net worth on their FAFSA applications.

The FAFSA is such a load of horseshit I don't even know where to begin with it.
Unless I misunderstood the article [1], it describes this very same HW-based method of power glitching the chip at a crucial time using an external STM32F0 controlling the Vcore going to the nRF. Basically preventing it from checking if it's correctly locked or not at boot.

After managing to connect through glitching, they dump the FW, then turn off APPROTECT, reflash, and have open debug access.

>Our attack setup thus consists out of 1) a transistor connected to the CPU core supply voltage and ground, 2) a dev board to control the glitch timing, and 3) a debug probe to try to access the debug interface.

[1]: https://www.emproof.com/attacking-microcontroller-readout-pr...
I've recently implemented a project to test and compare analytical databases, including cloud services: https://github.com/ClickHouse/ClickBench/

It compares Redshift and Athena as well.
Is Docker swarms easily reproducable? If so, how?
"we have not been able to stop those things even when using guns to shoot people doing them."

I assume we have not been able to stop people from creating and using carbon-based energy because a LOT of people still want to create and use them.

I don't think a LOT of people will want to keep an AI system running that is essentially wiping out humans.
…and a depth sensor. Not sure why they cut it last minute
Uploading the work itself doesn't seem like it would work in a lot of cases. I'm picturing e.g. Google trying to upload their entire monorepo with hundreds of thousands of file changes per day -- to what end exactly?
Well, yeah. There's a reason these drugs all have side effects, and that the first principle of medicine is, Do No Harm.

We have a long history of interventions leading to worse outcomes. It's just sometimes those bad outcomes are worth it by evading worse outcomes.