skysight-inc/HackerNews huggingface dataset:
ID.me | Sunnyvale or Washington DC (Tysons Corner, VA) | Full-Time | SDE III, SDE IV, SDE V, SDM-III | No Visa Sponsorship

ID.me simplifies how people securely prove and share their identity online. The company empowers people to control their data through a portable and trusted login, which means they don’t need to create a new password when visiting sites that have the ID.me button.

The COVID-19 pandemic accelerated digital migration for many critical services. Those services require a trusted identity to safeguard against fraud and help ensure people are who they claim to be. With ID.me, login and identity credentials move with people, which can reduce the time and frustration of having to verify at multiple sites and set up multiple passwords.

ID.me is a credential service provider compliant with federal standards for digital identity verification.

We're hiring for SDE III/IV/V (tech lead) and SDMs. We're looking for dedicated, experienced engineers passionate about scalable system architecture, able to lead initiatives in areas like monitoring, automated testing, experimentation, and infrastructure as code. Ideal candidates will champion innovative solutions and exhibit leadership in these critical domains.

Our Stack: Ruby on Rails, Sidekiq, PostgreSQL, Redis, React, Terraform. We'll be introducing GoLang soon.

Check out all our roles at: https://boards.greenhouse.io/idme, all roles are available in both locations, Sunnyvale and Tysons Corner, VA.

I'm an engineering manager on the team, if you have any questions you can reach me directly at sergey.cherman+hn AT id.me Please no staffing or recruiting firms, individuals only.
So your answer is to put all the responsible in the hands of a single party? And that doesn't make you get a case of "be careful what you wish for"?
I just came here to say I was still bitter about Google Reader. Thank you for this candlelight vigil I can participate in. :-)

It's hard to believe it's been more than 10 years since google Reader was shut down.
> I think in a centralized environment (workplace), it could be argued that immediately triggering all the build failures and having good hygiene in cleaning them up is actually not a bad thing.

In abstract I agree. However when I'm trying to get my code working having test failures in code that isn't even related to the problem I'm working on is annoying and I can't switch tasks to work on this new failure when the current code isn't working either.
That's really interesting. I wonder if the setting was automatically set to 'open Task Manager' when there was only one, unsecured user (and therefore nothing to lock or sign out of). I don't remember changing it, but this was of course well over a decade ago now.
Wind and solar do seem to be underrated in what they’ve been able to achieve. It’s remarkable really. I don’t think the energy companies wanted us to celebrate it so the success story has been suppressed.

The fact I can buy a 550W panel for less than $200 is a wonderful thing.

I can install 8 of them on my roof, 8 wall mounted type on my south facing wall , backed by a battery and hardly have to pay for electricity again. In fact I can sell electricity and make money from it.

That is nothing short of incredible, unimaginable even 10 years ago at that price point.

The sun is the best and cleanest reactor we will ever know! We just have to understand how to harness that energy better.
Google’s recommendation to switch to YouTube podcasts has been pretty lackluster in our experience. Every podcast episode gets uploaded as a video and included in the main “Videos” tab of your channel in addition to being under “Podcasts.” So when you have dozens of podcasts with thousands of episodes, your main video feed really gets messed up unless that was your intention to mix the two.
> How do you know this is due to AI and not poor economic conditions?

What poor economic conditions? The economy is doing just fine. The markets are doing fine. Profits are at record highs. This isn't like 1991, 2001, and 2008 - all of which I was present for. We're seeing software developers being let go by the hundreds of thousands across the industry in a comparatively strong economy. There's your sign.
"I'm still salty about Google Reader"

You're not alone. I just came here to participate in this candlelight vigil for Google Reader myself.
“Follow me” luggage exists

https://www.aristavault.com/products/follow-me-smart-luggage
My pointing is, if you are a consultant, then make sure everyone else knows what as well. You don't want anyone thinking you're some disposable, generic, freelancer.
> How endless choice is creating unlimited demand —CA

Guess there was a limit, after all?

(If https://news.ycombinator.com/item?id=39902688 be true, 270 billion hours/day would be an upper limit for attended streaming demand)
every monorepo I've seen suffers from a shit CI solution. Other teams break your builds. Builds get longer and more complex. Feedback loops slow down. Engineering velocity slows down. It works at Google because they spent, literally, hundreds of millions of dollars getting it working.
One of the investors in our pre-seed used angel list to push their investment. They had a small fund ($10m) and I think they used it for the legal structure. The platform is legit, but I am your ymmv on the startups that raise money there. But that is true for any startup you are investing in.
There was an article by some well known CTO that hits the nail on the head for me. Essentially they said that monorepo makes sense at small scale and enormous scale (eg Google) but anywhere in between that microservices make more sense. Knowing when you are going to be at those scales is key.

In any event, as has been alluded to in this thread already, any complaint about microservices vs monorepo and switching between them is almost always a tooling complaint. Companies will invest in one of these “philosophies” around code organization then won’t take the time to build the appropriate tooling to support them and then three years down the road some enterprising architect will switch from one to the other and the cycle begins anew
I'm pretty sure Google products last, on average, longer than startup-y services or hobby projects.
It’s what makes the precision/recall tradeoff a no-brainer if you’ve worked in spam. I worked in Abuse Detection at FB in 2016: there is a consensus on how to use binary classifiers responsibly in the presence of lame attempts at fraud.

Sophisticated fraud, that’s complicated.

But most fraud is dumb.
It boils down to a few key points:

Mature Libraries: C++ has a treasure trove of well-established libraries. For niche or legacy needs, C++ might be your only option.
Performance Control: When you need to micro-manage performance, C++ gives you the nitty-gritty control that can make all the difference.
Industry Norms: In some fields like game development, C++ isn't just preferred, it's expected. Sticking to industry norms can sometimes outweigh the benefits of newer tech.
So, while Rust has its perks, especially around safety and concurrency, C++ still holds its ground where its deep-rooted ecosystem and granular performance control come into play.
https://www.businessinsider.com/safety-not-guaranteed-meme-2...
I think the skepticism towards internal testing is because Ubisoft is known to often release broken games that need to be patched up after release. I can't fault people for not trusting them to do internal evaluations if the public releases are in such state.
Every interaction with the IRS I’ve had has been top notch, if sometimes excruciatingly slow.

That includes the “you forgot cost basis in day trading so you made fifty million dollars” letter a friend got, to the “you are an idiot and filed wrong, here’s the few grand we owe you unless you really want to contest” because of forgetting withholding.
Doesn't google have a lot of internal tooling to make that monorepo actually work for them?

The issue isn't so much that large monorepos don't work, it's that you are trading one set of issues for another set of issues. And most popular open source tooling (and I assume all debian-specific tooling) is built around solving the issues of many repositories rather than solving the issues of monorepos.
>I was never able to accept the increasing inequality, pointless wars...

>I feel like I'm the one taking crazy pills.

Years ago, someone on HN made a comment to the effect of, "I feel less and less a part of this world. Like the world is just moving away from me."

I understood the sentiment perfectly. And, this was before the madness of the last 9 years or so.

Funny thing is it seems that a large number (perhaps the majority) of people feel this way, yet powerless to do anything about it. I think the things you mentioned represent a very short list of the total dysfunction to which people of conscience cannot (and probably should not) habituate. And, I wonder if it's really the sense of powerlessness in the face of these things that is actually the depressing bit.

Of course it seems that the sentiment has been weaponized, with a third to half of the U.S. (and some significant portion of other countries), now incited to destroy it all, including their fellow citizens whom they have been convinced are part of the problem.

While this superficially sates their disaffectedness by channeling it into a kind of frenzied bloodlust, their behavior further demoralizes those who consequently feel more powerless in a world that is now more hostile and even less sensible.
I have ranted about Google dropping products before and I will continue to do so.

Google keeps fumbling the opportunity to own large swathes of the web experience while cutting into competitors. Although Google Podcasts probably looked like a minor loss on the quarterly balance sheet, the intangible brand benefits and especially the analytics that could be garnered from having a large population using your product are hard to overstate.

Even apple realized this when they relaunched their podcast app.
Stop Using Floating-Point Numbers to Store Money
The 2024 Periodical Cicada Emergence
Firefox won't try to actively break your AdBlock extension (which should be uBlockOrigin)

Firefox won't implement cohort user tracking. if they do, probably not in incognito like chrome, which just sets a new set.

Firefox doesn't preload hundreds of links from the page your reading, using google's dns serves despite your dns settings.

so many reasons that people here just ignore and pretend they know anything at all about browsers today.
This was not my first programming job and I didn't mean to imply stupidity. Maybe you could give some examples?

I had seen it in some contexts: distcc, networking, seti@home. At least to me it didn't seem as common a tactic as trying to scale up the hardware on the machine or designing a different algorithm. That's generally what I saw at Microsoft in the years before.

Maybe it was more the power of combining it with a "cloud" and containers - being able to change just the value of --mapreduce_machines= to something like 10000 and seeing it happen. That's the first time I had been exposed to that.
There have already been a lot of points by other commenters, one point that I'd like to add:

It allows to solve "problems of scale" with technical solutions rather than process solutions.

For example: Let's say there's application app-A and app-B, and they decide they want a library lib-1 that they can share.

If they are in separate repositories, this means multiple pull-requests, it means separate pipelines where the pipeline of lib-1 likely won't include the tests of the applications, it means there will be pull-requests to the library which won't immediately be integrated into the applications so that some poor sod has to take care of breaking changes down the road, etc.

If they are in a monorepo, each application can set up tests that need to be fine with the library-code "as is", so any change to the library needs to work against existing application-tests. The price one pays however are pipelines that perform well - nobody wants to wait hours to get pipeline-feedback and such. A monorepo also allows ambitious folks to shine - it's easy to touch many things at once, or to touch things used by everyone, on a pull-request with high visibility, which is an easy platform to get "street creds" as an ambitious engineer.
In their 0.1 version of the spec reproducible builds was one of the requirements. Unfortunately, they reduced the scope and now this req is part of their “future directions”.

I highly appreciate the idea of reproducibility. It is one of the ways to provide (and verify) integrity. And unfortunately, this is not widely adopted and in some cases even difficult to achieve…
Wow. What’s the massive computer he has in front of him?
The same as what the ant colonies do when one of their own gets infected by the Ophiocordyceps unilateralis fungus.
Yeah whatever. Closed source software is much easier to subvert, just have your agents join the company and they can push whatever they want without any external (or even internal) review.
That's naive. There's plenty of excess in the budget added by both parties. And both parties are happy to sign-off on an ever expanding DoD budget. Yes, the GOP loves to cut taxes. But again, both are adding to the excessive spending. It's not a one-party problem.
> The complaint specifically calls out Apple's dominance as potentially harmful to speech.

I'm sure this incident helped that perception...
Apple Researchers Reveal New AI System That Can Beat GPT-4
The stealing part is related because in this case, his project is "stealing" (or injecting a backdoor"). Does that make the analogy clearer?

To be exact, he didn't do it specifically, but the non-profit is usually locked but he unlocked the door to let someone in and that person ended up stealing from the non-profit.

I really don't understand why people do not see that if you cause a giant mess, you have some responsibility to clean up after yourself. Again, I'm not saying that they should be obligated to do work. But this isn't "working". This is cleaning up an issue that you have caused.

> No. No one forced the society to use the work that somebody was doing for free. And if society decided that it's fine to use it, it's on the society to take the associated risks. Everything else is a good will of the maintainer.

If I voluntarily baked a cake for you for free because I was nice and I mistakenly poisoned you, would you say "Oh i decided to take the risk of eating your cake anyway, not your fault"?

I didn't have to bake the cake. But since I decided to, I have basic obligations including not putting poison in it.
> Similarly, once you are too popular a library in a monorepo, you will never do any atomic breaking API changes since it would require updating too many downstreams.

This happens no matter which repo type. Even worse if a project chooses to update after a while, its far more painful having to do the changes after losing the context you had when you did the original changes.

If you want a monorepo, libraries being on the same version is a feature, and it keeps you from diverging.
Experienced people know better, newcomers get burned and end up learning through experience or knowledge transfer from others. If you’re investing your time or resources into using a new Google product at this point, that’s on you.

To help others you know DeGoogle their life is a public service.

https://github.com/tycrek/degoogle
Maybe one of the outcomes of this could be a culture change in FOSS towards systematically banning rude consumers in Github issues, or, just in general, a heightened community awareness making us coming down on them way harder when we see it happen.
Sure, this sounds like a great deal for you.

But...what are you bringing to the table? There's 27 million software engineers. Let's say 99% of them are trash. That means there's 270,000 amazing engineers this mythical sales-machine-with-a-big-audience Founder could partner with.

Do you have any successful exits?

Have you built [Saas, B2C, Hard-tech] from the ground-up yourself before?

Have you built & managed a team of engineers?

Have you ever fundraised before? Do you have any connections?

Do you have any audience?

Do you have any product design taste?

Etc.

And let's say you do tick all those boxes. Then that's maybe an even bigger problem. Because if both of you are so amazingly talented and in-demand, are you really going to stick to it when the going gets tough (which it will)? Especially with a 500k/yr do-nothing middle management FAANG gig as your opportunity cost?

What's most likely is neither of you will tick most of those boxes, and it won't actually matter, because the market and your product's fit will weigh much heavier on your success. Better to pick a co-founder with some of those qualities that you already know and have a good level of trust with. You can absolutely figure out the rest.
Maybe I missed the satire, but this seems like a low bar for an enterprise products company.
Ah, I think my purchase predates the web app so I'm not entitled to plus. Makes sense.
In all fairness, this is what most blogs everywhere are. We all market. We are all driven to have our voices heard. We all want our positions to improve.
Fun fact about that film, the broadcast studios in that film aren't props; all the sound equipment was borrowed from Radio Caroline's real-life pirate radio ship Ross Revenge.
> Arm wrestling a toddler?

The most common designs of six-axis robot arm don't have the 'rotate forearm sideways' joint needed to arm wrestle.

> - Handwriting notes for small jewelry brand?

Possible: https://en.wikipedia.org/wiki/Autopen

> - Drink mixer?

Possible: https://www.makrshakr.com/ (arguably more of a showy entertainment item than anything else)

> - Handing towel when in the bathroom, then getting a new one?

Manipulating flexible materials is difficult. As is navigating through a house with locked bathroom doors and suchlike.

> - Setting up my morning espresso?

Depends if you're willing to broaden your definition of 'robot' to include bean-to-cup machines.
The Biggest Bug Emergence in Centuries
Last I looked Soulseek was still going strong. Try the Nicotine+ client.
I wonder, once the attacker gained commit permissions, were they able to rewrite and force push existing commits? In that case rolling back to older commits may not be a solution.

If my speculation is correct then the the exact date on which access was granted must then first be known, after that a trusted backup of the repo from before that date is needed. Ideally Lasse Collin would have a daily backup of the repo.

Although perhaps the entire repo may have to be completely audited at this point.
Don’t bank with a bank. Bank with Fidelity or Schwab and be amazed when someone answers your call in seconds and actually knows what to do.
Can't say to how it compares as I never trusted the Google option to stick around, but I've used podcast addict for years and have no complaints.
That is where hardened with SELinux comes in. The outermost login method only capability beyond communication in the initial connection should be to open a tunnel to the next level, so any remote code execution could only execute the code to open the tunnel.

Building security in depth correctly is not simple. It takes work to construct layers so that one compromised layer do not cause whole system failure.
AI Companies Running Out of Training Data After Burning Through Entire Internet
Hugging Face Transformers is your best bet. It's pretty straightforward and has solid docs, but you'll need to get your hands dirty a bit with setup and configs.

For squeezing every bit of performance out of your GPU, check out ONNX or TensorRT. They're not exactly plug-and-play, but they're getting easier to use.

And yeah, Docker can make life a bit easier by handling most of the setup mess for you. Just pull a container and you're more or less good to go.

It's not quite "idiot-proof" yet, but it's getting there. Just be ready to troubleshoot and tinker a bit.
The parent is downvoted because the original comment contained some stretch logic talking about possible confusion with Raft consensus protocol due to naming similarities, the current comment is after the ninja edit.
I started working on a similarly sized arm. I've got a use-case, long time friends with a glass blower. I was thinking of using it to make faceted glass pendants. They've got a faceting machine but it is manually operated.

The hard part is repeatability. You need tight tolerances and each joint in the arm adds inaccuracy the further you get from the base. If the base has 1mm of wiggle, the 20cm arm has 4mm wiggle at the end, and the arm beyond it has even more.

You also, for faceting purposes, need much finer resolution than an ungeared servo will have. Gearing it is tricky because you want backlash to keep the join tight, but not so much that it has high friction when moving. You don't really want to use a worm gear because they're both slow and overly rigid. So a cycloidal gear is the best bet for the gears in the arm. You also need real servos with some amount of feedback because grabbing at glass is sketchy at best.

I was estimating 1-2k build cost, bulk of that is in the gearboxes.
We have ample computing power today to be rid of floats altogether and use integers, fractions and natural numbers.
It can be. Sugar and other food staples are drugs, and can be habit forming.
The same feature recently added to GitLab
That's odd and I agree entirely.
The comparison to the false theology is really apt. That goes back to at least the 11th century and it’s part of an even older tradition[0] trying to tell rich people that they can ignore a pretty clear biblical injunction. It’s been interesting seeing how as atheism becomes more popular there’s been a rise of secular thinkers selling an almost identical message that it’s okay to be basically as selfish as you want as for your entire life as long as you end with a grand philanthropic act to balance it out.

0. 2nd century softening: https://www.academia.edu/40130012/Widening_the_Eye_of_the_Ne...
I admire your video production values :) Nice job there, One thing is, what gear do you guys use? The audio was really good for what was probably a shotgun mic?

Can you tell I don't use bun yet? Because none of my questions are about the release. But I tried it out a few weeks ago on my NextJS project and it didn't work, but will try bun 1.1.
What makes you think that the accounts were not compromised only recently?
Same here. One of the few non open source app i'm pretty sure it will never let me down (Fingers crossed). If I remember correctly they perfectly behaved each time they could have screwed up the relationship by the past.
How does that work with upstreams that often needs patches?
Hoy: Continue to manage scrum updates with todo-list
Hoy: continue to manage scrum updates with todo-list.

"Hoy" is a professional solution for team collaboration and task management. Each team member can create their own personal to-do list and easily share it with teammates. Moreover, "Hoy" provides collaborative features based on the to-do list, enabling team members to participate and collaborate on projects seamlessly.

Key Features:

- Personalized to-do list creation and management

- Real-time sharing of to-do lists

- Collaborative features based on the to-do list

- Scrum board available for daily scrum meetings

Who is it for?

- All organizations seeking to enhance teamwork and collaboration efficiency

- Development teams, design teams and business teams who want to manage daily tasks efficiently and effortlessly while maintaining attention to detail

- Teams aiming to improve the efficiency of daily scrum meetings

Elevate your team's collaboration and task management to new heights with "Hoy"!
https://news.ycombinator.com/item?id=39904034
Leetcode made me a better engineer
not-MSNified link https://twistedsifter.com/2024/04/mit-claims-theyve-figured-...