skysight-inc/HackerNews huggingface dataset:
I think 5 is pretty spurious at this point. I don't think any serious businesses are trying to replace most of their devs with ai yet. Otherwise you got a lot of the reasons. I think there's a few more. There's probably pressure being placed on leadership at a lot of companies by VCs, investors, and shareholders to trim the fat. That's why I think a lot of these layoffs seem pretty random, with situations like people's manager having no idea their direct reports were getting let go. The layoffs are coming from a fairly high level in these organizations. You mentioned this but this has a lot to do with the perception of the money people more than it has to do with reality, imo. That's why you can have extremely profitable companies like Google firing 10% of their workforce. Hugely destructive imo.

Additionally, January is the end of the fiscal year. Companies want to make cuts to their budget before February.

I've been seeing a lot of action in terms of recruiting outreach however. There seem to be a lot of very small startups getting created with a different financial attitude, eg trying to focus more on balancing profitability with growth. Rough time to be a late stage start up that just spent the last 8-10 years collecting debt and losing money on every new user. Supposedly the fed is going to cut rates at some point this year, so maybe that changes the calculus here eventually.
What exactly does the feature do? Share (some of?) your data with people you seem to be related to? If that data is sensitive, it seems a pretty risky thing to share even with relatives who you know quite well.
It’s funny how nobody there complained about all the engineering work required in order to track and share their users’ data.
The article is terrible. What are commenters even discussing without having additional context?

The hackers initially got access to around 14,000 accounts using previously compromised login credentials, but they then used a feature of 23andMe to gain access to almost half of the company's user base, or about 7 million accounts, the company previously told Business Insider.

This is the only actual 'information' in the article. The rest is just finger pointing. But what does this mean?

What feature? Does 'gain access' here mean all the data you would have as if you logged in as that user? How does 14K become 7M? Is it that case that an average user has access to the data of 500 other users on website? (7M/14K)
Some Unintuitive Properties of Polygenic Disorders
I mean any type of energy is just as intangible as potential energy, so I don't see that the energy stored by doing work (i.e. interacting with one four forces) is that different to the idea of energy stored by being in motion. You never measure "energy" directly after all, but it's a useful abstraction - after all, everything in science is an explanatory position.
Satellite reveals previously unknown colonies of emperor penguins in Antarctica
Deus Ex: Mankind Divided – Building Prague
Nobody has mentioned that these projects have another intention/effect: they make poor people more dependent on global supply chains and the monetary system. Instead of using cheap/free, local, sustainably grown wood, or cow dung, they’re required to purchase LPG containers or pellets produced in distant factories (probably from unsustainably harvested wood in other countries). Or they’re dependent on the electric grid, which may be unreliable and expensive.

These projects may reduce emissions, and they may improve health outcomes, but they also keep the poor subjugated by the global industrial system. That must be a factor in the programs’ popularity — it’s another way to extract wealth from the poor.
I'll posit an unpopular one. Elon's mass-firing at Twitter showed CEOs that many tech companies really are overstaffed and can get away with far fewer employees (Twitter's troubles now are due to dumb policy decisions, not their tech stack falling off a cliff).
It might be legal for them to call the cops, but it still does not absolve them from moral responsibility for their actions. Including all the distress it would cause the child's family, and the likely ongoing PTSD from the incident.
DEI and diversity hiring incentives are much less popular due to Harvard's statements on free speech and also the supreme Court decision regarding the legality of not hiring white/Asian people due to their race.
Companies operate under a set of constraints. If your hiring is currently constrained by revenue (meaning “we have plans for what we could use more employees for, but can’t support hiring them”), an influx of sales could release that constraint and spur you to hire.

Later, as constraints change, you might find that you have picked up a conflict between the constraints and your current business approach and need to make an adjustment (or delay a while and hope things improve).

I think it’s not that different from people upgrading their house, car, and travel as they make more income (“lifestyle creep”). What you used to drive and where you used to live obviously sufficed, but was constrained by your income. When that constraint relaxed, you adjusted your consumption to reflect that.
This isn't cynicism. It's intelligence - making an accurate prediction of future events.
- The password may not be exposed at the time it is registered

- That doesn't work, see my sibling comment where I did the math on what authentication rate you'd need to trigger at https://news.ycombinator.com/item?id=39116531

- 2FA sounds like a good suggestion, but is bad for business so they'll never do it voluntarily (maybe now that they need to save their reputation)

- Isn't that the three above points combined? Or what does "credential stuffing protection" amount to?

---

> Any security assessment would have pointed that out.

I don't think you're familiar with security assessments

That's what I do for a living and we'd have recommended only the first one because it's a simple thing you can implement on the server. About 1 in 10 customers actually follows through on that hardening advice to some extent (e.g. by downloading a top 10k passwords list or adding zxcvbn), even fewer use a huge database like HIBP even though we recommend that.

We don't recommend 2FA for all users (only for administrative accounts) because clients never implement it. Adding suggestions that are seen as unrealistically paranoid makes the rest not being taken seriously anymore

We also don't buy a botnet and simulate credential stuffing attacks. Maybe we should, but then we'd need the customer to deploy not one staging system with two test accounts per permission level but thousands of accounts, and some way to simulate having thousands of residential IP addresses.

These things are not standard procedure and I haven't heard of any other pentest company requesting such a test setup (based on working together with other companies on one scope, chats at conferences, or looking at public pentest reports to see their setup or if they ever reported this finding)
If you have any blood relatives who signed up with 23andMe then you are automatically involved, even if you've never heard of 23andMe.
Ah I love a Dutch barge, does yours have functioning leeboards? Very surprised you didn't need a postcode for the address on the birth certificate - although I suppose if it's 'place of birth', it could be anywhere really and that place might not have a postcode.
No one talks about money more than English socialists
Related: If any OSM GIS engineering enthusiasts, we have a small OSS repo we are looking for an assist on that should be fun for the right person: Spin up a big box, quickly render planet-scale tiles at a decent level (maptiler), and restart as a more reasonably-sized zoom level for serving. We did the core infra/devops, and are looking for someone to help tweak the perf knobs etc. See my profile on how to reach.
Well there was a blowout so Ryanair... - https://youtu.be/UfIY24BErBE
How many have law degrees? The majority of CEOs in the top 100 were not engineers it seems.
And performance is stock performance/TSR, if I understand correctly.

Edit: How is it sea lioning if your link is not establishing what you claim? An intrinsic link between being an engineer and being a high performance CEO would, for example, be that proportionate more engineers than MBAs, etc. are good CEOs.
YouTube isn’t sharing your data with a third party to enable that targeting. They have all your data themselves.
yeah that's my attitude during working hours. maybe a person cares, but a corporation can't. i expect a corporation cares about making money, and to some extent that correlates with not killing me, but who knows.

the code i write at work is open.
What is a split point? I use Textract a lot and from my testing, always beats out any of the open source tooling to extract information. That could also be highly dependent on the document format.
When I was a teenager I would pour Coca-Cola into the school computers after seeing a fellow student get into trouble for similar stuff. Never got caught for that. It's acid and worked especially well against powered up electronic equipment.

I wouldn't be surprised nowadays they would just start a rumor about the teacher's sexual misconduct or grooming of the students, in response, instead. And the accusation could spread and escalate, completely destroying the life of the teacher.

A certain percentage of the population will just make stuff up if they have the opportunity to do so, and "juicy" gossip can spread virally. So if they ask for "witnesses" to come forward, they will. Sex offenders are hated so much in society, they get beaten and abused in prison all the time, so it's essentially torture in the end.
Be sure to speak with a lawyer to confirm that this can be easily accessed when needed. My grandmother passed away a couple years ago and when her account went into estate nobody was able to get into her safe deposit box until well after everything has been situated and properly transferred to the person managing the estate.
In fairness, this is just doing something automatically that you could have done manually anyway. It's a good change because defaults matter, but it's always been possible to strip debug symbols from Rustc-generated binaries, and all the guides I've seen to reducing binary stuff have mentioned this already.

It's also important to remember that in embedded software, you're probably working in a no_std environment anyway, which means that the Rust standard library doesn't need to be included in the binary, which will already significantly reduce the size of your binary.

A lot of this is about tradeoffs, and I think the article does a good job of explaining what tradeoffs are relevant here. Yes, binaries should be as small as possible, but shipping multiple compiled standard libraries is also not ideal. The Rust team seem to have gone for a good default for people who are beginning, with lots of ways to tailor the build process for people who don't need debugging information, or who are willing to accept longer install/compile times in exchange for smaller, more optimised binaries.
The article should break out 2022 by quarter. It shows a tiny number for January 2022 but a fairly large number for 2022 overall. What actually happened was the first 3 quarters of 2022 were good but then the layoff wave took off early in Q4.
Superman and Batman will be in the public domain in 10 years
Node.js: Use Biome as Formatter
Surprised this is still news, Meta not caring about anything but user engagement !
Spinning is a nice trick.
Well, it's probably worth your while to update it then.
> Will Nebula Genomics share my genetic information with othrr corporations or law enforcement?

yes, as it is stated in their website they have to comply with U.S. laws.
It is if the future is stupid.
Probably projection. Maybe also motivated by office jobs having tons of people freeloading and genuinely not giving a fuck, which just doesn't work in labor jobs.
That's true, which is why it's now being stripped.
Thank you very much for this. This is so good.

I wish you had a feature that allowed for bookmarking problems & comments like HN.
> I work in embedded software

But embedded Rust usually does not use stdlib. This thread started with:

> It's really a shame that Rust includes the stdlib piecemeal in binary form, debug symbols and all, in every final binary.

Which is not case for embedded.
Lovely! I'm Irish, we don't have it as much. But I'd love to do a canal boat holiday. Doddleing along the canals, stopping in a lovely english country pub... oh I can dream.

I made WaterwayMap.org, and one of the view is for anything OpenStreetMap considers “boatable”: <https://waterwaymap.org/#tiles=planet-waterway-boatable> I know nothing about this topic, so if there's anything missing, I'm willing to add it.
How can one guarantee once tightened bolts remain tight forever?
That's entirely possible. eBay is a very mature product, and it has been like this for years. Among the e-commerce platforms, it's still one that empowers the little people and serves a goal. I hope they won't "disrupt" it.

Alternatively, they could be in a crisis.
If you think that governments are not already building gene pools of their populations, I can color you a hip shade of naive, too, if you consent of course.
Drop-In Replacement for ChatGPT API
I saw some Netflix documentary a while back where they said after their merger with McDonnel Douglas. MD people took over, moved their head quarters out of their engineering place(in Seattle). To keep the decision makers and bean counters away from engineering culture, and pivot the company's culture from being engineering driven to be (more)profit focussed than it already was.

With that of course comes things like firing Quality Assurance staff, and thinning out the need for safety and quality on the very long run.

There also seems to be some sort of a feeling in these companies that might have maxed out of what they can do with passenger airline segment of products. So they have to pinch dollars to make more money.

Once you arrive there, I do expect a long term slump in quality and trust.

You don't arrive here in a day. Nor do you recover quickly from here, that is if you can recover at all.
Really admire what you’ve built with Tarsnap. Seems like a very durable business with a great reputation
Physics probably has more to with the tapering than number of people transported
>I mean for the 14,000 accounts accessed with compromised login credentials, yes that's logical that it's their fault.

The provider has a responsibility here as well - after all, a breach like this followed by the negative public fallout (and potential lawsuits) represents a risk to the business itself. There are things they could have done to mitigate this risk ... Like enforcing 2FA.

And they did mess up, and they know they messed up. Do you know how I know? Because they just started enforcing 2FA (and not in 2019) [1]

[1]https://blog.23andme.com/articles/enhanced-customer-security...
Even a broken clock is right twice a day. Intelligence is being able to _consistently_ make accurate predictions of the future.
Was not aware that you can flash unifi ap with open-wrt. This turns it into a POE wireless router/switch with control over the two eth ports? Sounds awesome has anyone tried it?
That does not sound like it could make any money though...
Yep. Made the mistake of not paying attention to the material so I actually received the aluminum version. Was happy to find this and exchange for it.
True. That is not a good customer, but what if that customer is representative of most customers? All those billions of dollars “loss-leading” customers may not pay off in the end as the company tries to raise prices while providing less for more money.
Business insider is a trash publication. I wouldn’t waste my time reading it. Their content is always some combination of over stated, inaccurate or flat out made up.
You are blaming the wrong party. They’ve gotten that perspective from experience not thought vacuum. There are many industries, commercial airlines included that do not have competitive capitalist environments. There are typically 3-5 big players, typically heavily in bed with the gov whose incentives aren’t aligned. Telco, domestic automakers, insurance come to mind initially.

There is also a corporate greed, which is leaking into tech with commoditization, problem in America where fewer and fewer companies treat their employees as assets and rather treat them as cogs. People are loosing their tolerance.
That just begs the question of why body decoration jewellery should be expensive and/or exclusive.
> An FBI analyst at his trial testified that there was just a one in 10 million chance that the hair found on a stocking mask at the crime scene belonged to someone other than Tribble.

He spent 20 years in prison
> Camaro is not a small 2 seater by any means, it’s a rather big muscle car

It is small, in the context of a conversation about SUVs and pickup trucks. Yes, I am aware that it is not “small” in the context of 2 seaters, where you can go for miatas/brzs/911s/etc.

> Many sports car have bad visibility due to the mid engine blocking the rearview.

Sure, and that I can forgive. What I can’t forgive is the frontview having that same awful tank-slit visibility, which I’ve only encountered on a Camaro so far.
For the canals in the UK there's https://opencanalmap.uk/
I made WaterwayMap.org. I wanna make a watershed map too!
Acuracy does not factor into whether a statement is cynicism.
What made your old Node code not work? I've picked up old node projects from up to 10 years ago and they all still work just fine, so I'm unclear what pain you encountered?
Because building planes is an engineering task.

Let’s use your argument: Would you hire a lawyer to captain a ship? Why not? It’s not like the captain actually steers the ship or oils the engine.

You see? It’s not that hard to think a tiny tiny little bit.
This has been the default for thousands of years and I wouldn't expect any less from our current government.
The point is that Quality flows from the top down. If the people on top of the organization don't take it seriously, then it's hard for the actual working engineers to get the support they need to do their jobs. Having an engineer as the CEO at least makes it likely that that person understands what is needed and makes it happen.

It's not a guarantee, but I'd trust an engineering organization with an engineer at the helm a lot more than someone with a sales background.
Hellen Keller was deaf. How could she _develop_ the ability to listen to a spoke language?
We only highlight the cases where the cynicism paid off...and in this case praising someone who is saying something pithy _after the fact_.

It's easy to throw out cynical opinions. It's also easy to come along later and say "I _knew_ this would happen"
Cynicism is often a coping mechanism for people that have seen too many such events happen. It's actually only a problem when it guides choices from decision makers ahead of time, there's nothing wrong with some cynicism as long as it doesn't guide your actions.
True, and that 500 number is way too low because that calculation imagines there is zero overlap/duplication.
A bit miffed that there was no mention of L4S though.

Prior HN discussion: https://news.ycombinator.com/item?id=38597744
Isn't their price around $5,500? That's not very incredible IMHO.
This is how capitalism works, right? Public companies are under a constant squeeze. Profit, profit, profit. Growth, growth, growth. If the CEO doesn't deliver they get removed and the board simply installs a new one. The growth machine must never stop, even at the expense of employees and customers.

Experienced, knowledgeable employees costing too much? Get rid of them. Q2 profits fell short of expectations? Hike the prices. Supplier too expensive? Find another one.
1. Find relatives you didn't know you had and inform them of the fact, perhaps destroying families by revealing long-concealed/previously unknown secrets

2. Identify DNA sequences and genes associated with various diseases, then contact you AND your relatives to advise seeing a doctor and consider using drugs made by the new owners of your genetic data

3. Sell your data to insurance companies who would pay plenty for early evidence of breast cancer likelihood or Huntington's Disease so they can avoid insuring you
Sadly, I have to agree. The amount of convincing I had to to try (and fail) to stop friends from using this specific website before the leak…
The sad thing is that it’s not necessarily about malice that you should be wary. Stuff like this is a risk too.
But yeah, I was a bit harsh, it’s true.
A lot of layoffs seem to be on the news but the unemployment rate is still not that high according to https://www.bls.gov/charts/employment-situation/civilian-une...
They bought beat studios back in 2019.

More recently they also bought Supernatural (fitness app)

Meta are playing the long game with this, they are building out the eco system and the devices. They are doing a great job despite it being a money pit, the Quest 3 is an awesome device. It just needs a bit better software and better marketing around those killer apps, like fitness etc.
that's promethean.way /at/ protonmail /dot/ com
Why? They are different populations that engage in different behaviors; one group engages in more antisocial behavior than the other. It’s natural to want to avoid troublemakers.
Sounds like the hackers used recycled logins to gain access to 14000 accounts and then for each account gained info about other related accounts.

I can see how you can get 14000 compromised accounts even though it sounds too much to me. Cant see how you can get info to so many related accounts. a 1 to 500 ratio.

But if it is true then there is a little blame for the costumers too.
I've given up disabling JS for my most visited pages, but you can still disable JIT if you want to drop a million LOC of attack surface. The slow-down is barely noticeable. At least not on the sites I visit, including GitHub. I still use NoScript, of course.
How is one not cynical today?
Why is it always MBA vs engineer? I never advocated for that.

As you point out lots of other choices.
I don't have scientific metrics but I've found the quality much better than most. It does a pretty good job to pulling data from text and tables.
If you look into those, they aren't really safety deposit boxes. The bank isn't obliged to actually protect the contents or to reimburse you if something happens.
I just recently started doing UW contest math problems with my middle school aged kid— they're definitely not "core" material but are excellent for enrichment and building lateral thinking:

https://cemc.uwaterloo.ca/contests/past_contests.html
Don’t forget the CEO overseeing this program was his own chairman of the board at the time all this got started.

https://www.cnn.com/2019/10/12/business/boeing-ceo-chairman-...

I emphatically agree with you about it being a board first, CEO also situation, but when the CEO is also in charge of the board it’s difficult to see how effective second guessing of a CEO’s decision can reliably happen.

Obviously this is legacy, and ironically the CEO at the time was a qualified engineer, so perhaps my statement was rash.

But I do think a CEO and board who will put some teeth back into engineering is required right now, however that is accomplished.
This doesn't just affect 23andMe's customers. It affects every person who shares DNA with their customers.

For instance, police have been able to match DNA samples of an unknown perpetrator against these DNA services. Matches against their extended family (who have used the service) is enough to identify them, even though they've never been a customer. And while that's a good thing, the more general case is true for every one of us all. We're all represented in this DNA data to one degree or another, even if we've never used the service.