skysight-inc/HackerNews huggingface dataset:
Show HN: A search engine for jobs using game dev skills
For the past few years I've been working at building seriousgamesjobs.com into a resource for job seekers with Unreal, Unity, Godot and other game development skills to find work beyond entertainment.

I'm working on a revamp of the site and would appreciate any feedback from anyone either trying to hire or get hired in this niche.

What are your three biggest problems right now, and does seriousgamesjobs.com help address any of them?
Emissions embedded in trade

https://ourworldindata.org/grapher/share-co2-embedded-in-tra...

Trade adjusted emissions per capita

https://ourworldindata.org/grapher/consumption-co2-per-capit...
Viable? Effective at reducing emissions, but is stopping all industrial output viable?
Really libre open source? Is the binary blob number 0???
So you get a few benefits from being a reviewer but it's pretty limited.

One benefit is that you generally get free access to the journal in question for a month or two while you are reviewing. So if you are regularly reviewing papers, you get free access to that journal. If you are part of a big org you probably already have access but it is a nice little benefit for people outside big academic orgs.

You can also include it on your CV if you want and there are a variety of small recognitions you can get for doing it.

And some publishers will also give you a fairly substantial discount (25+%) on texts purchased through that publisher as well as similarly substantial discounts on publishing and editing services provided by the publisher. Sage does this for example and their services include things like translation services, editing, infographic & artwork design, and animating video summaries for papers. They seem like they are quite nice services so getting discounts on them would probably be a good selling point for some people.

Another reason is just because you'd be reading the journal anyways and you don't mind doing a deep dive every once in a while on a random paper in your field. This reason is mostly a "well why not I'm already spending the time" kind of reason but it's a decent justification.

And the main reason is just because it's kind of expected of a lot of PhDs and being good at reviewing is a useful skill to have, especially if you are going to eventually be someone else's advisor or just in general if you want to be able to effectively critique your own works and the works of those around you. Being a reviewer for at least some times means you know the system and you can help keep your own papers and the papers of your colleagues from getting rejected for dumb reasons or oversights.
It's insane why critical facilities use Windows OS rather than Linux/*BSD, which is rock-solid.
relevant discussion about the Natives in Tech article from over a year ago:

https://news.ycombinator.com/item?id=34327455
If what they do isn't good, why would we want them to keep doing it?
Are you a time traveler from 1990? China effectively doesn't have anyone in extreme poverty ($1.50/day). They have about the same or lower rate than the US.
They do have people in poverty, 24% below $5.50/day ($2000/yr) line.

India has also decreased extreme poverty, down to 2% in 2023. At $3.20/day, they declined to 21%. At $5.50, they are at 81%. Most people are poor, but less poor than they were.
There are no good firewall in the market. It's always the pretend-firewall that becomes the vector.
^^^ THIS

If you're part of the minority Hindu and Christian community in Bangladesh you support Hasina, because the opposition made a coalition deal with hard-core Islamists (JeI) who are supporting the gold digger wife of the former (1980s) Military Dictator who was a puppet (like every other politician in Bangladesh sadly)

This does NOT mean Hasina is good.

Anything but.

Authoritarian quasi-secularism means the only organized opposition is fundamentalist, like in Central Asia like Tajikia, Uzbekia, Kyrgyzia, Afghanistan,
Parts of Pakistan, etc, or the India my parents grew up in during the 1980s.

Sheikh Hasina (literally) based her public persona on Indira Gandhi. All the Desis on HN know what that implies.

Sheikh Hasina is a left-leaning autocratic. She protects the Hindu, Christian, and Buddhist minority, but her authoritarianism against the religious Islamic community of Bangladesh (plus Khalida Zia's and moreso Shaibur Rahman's Pakistani funded bullshit) means the only organized opposition are non-secular.

As a Koshur-Hindu American, Hasina (and her enabler across the border) are playing with fire.

Bangladesh has strong institutions , diaspora, and economic relations (most factories in WB moved to BD because of bad policies and the FTA). Hasina is squandering them because of her childhood traumas.

Please please please become a Indonesia instead of a Myanmar
Many X-Rays (MRIs, CT scans, etc.) are read and interpreted by doctors who are remote. There are firms who that's all they do - provide a way to connect radiologists and hospitals, and handle the usual business back-end work of billing, HR, and so on. Search for "teleradiology"

Same goes for electronic medical records. There are people who assign ICD-10 codes (insurance billing codes) to patient encounters. Often this is a second job for them and they work remote and typically at odd hours.

A modern hospital cannot operate without internet access. Even a medical practice with a single doctor needs it these days so they can file insurance claims, access medical records from referred patients and all the other myriad reasons we use the internet today.
No, the truth is that the people of Nigeria will be the big winners if Nigeria bans Meta's widely deceptive, manipulative, and harmful amalgamation of spyware, malicious and unethical secret psychological manipulation experiments, and socially destabilizing engagement-farming algorithms. Instagram is very nearly a biological warfare agent against the mental health of young women - Meta hires a surprisingly large number of neuroscientists and behavioral psychologists to make their products as addictive as possible, with no concern for the mental health ramifications for Meta's victims.

None of the positive capabilities Meta offers are unique to Meta products - there is not a single capability in Meta's entire lineup that cannot be met by competitors with a less malicious and untrustworthy past.

Meta's conglomeration of psychological poison truly is the "cigarette makers" of our generation.
here is a recording from 1885: https://youtu.be/y2z34uYXF5I?t=20

It is a recording in Makkah of the religious leader reciting the Quran.
but what if I am not a Finnish twin woman?
AlphaGo was playing by very specific rules. What are the rules for LLMs to do the same?
100% what we seen in the last couple of decades is the march of normies into the techno sphere to the detriment of the prior natives.

We've essentially watched digital colonialism, and it certainly peaks with Elon musk wealth and ego, attempting to buy up the digital market place of ideas.
Why would they? Cybersecurity insurance doesn’t cover “we had an outage” - it covers a security breach.
How to Fix the Crowdstrike Issue
The necklace in the right photo is a more obvious giveaway, whereas you have to look closely at eyes to see if they match.
Why AI gets better when we let it explore
Scihub? Libgen? Why not name?
It sounds like you are maybe describing a dominant strategy? Oh, wait, no, you are saying that if you play the Nash equilibrium, then no other strategy among opponents will do better against it than the Nash equilibrium would, and therefore (as the game is zero sum) the worst their choice of strategy can make you get on average, is breaking even?

Ok, now that I (I think) understand your comment: I don't think you have to know exactly what non-Nash strategy someone is playing in order to exploit it. I don't think trying to estimate how someone is likely deviating from the Nash equilibrium, in order to try to exploit it, is necessarily a mistake. I think it could be feasible for someone to get better returns on average by noticing off-Nash patterns of play in other players, than playing Nash regardless would? (Not that I could win this way. I couldn't.)
It doesn't really matter to me that it's possible to configure your way out of Microsoft's botnet. They've created a culture of around Windows that is insufficiently concerned with user consent, a consequence of which is that the actions of a dubiously trusted few have impacts that are too far and wide for comfort, impacts which cannot be mitigated by the users.

The power to intrude on our systems and run arbitrary code aggregates in the hands of people that we don't know unless we're clever enough to intervene. That's not something to be celebrated. It's creepy and we should be looking for a better way.

We should be looking for something involving explicit trust which, when revoked at a given timestamp, undoes the actions of the newly-distrusted party following that timestamp, even if that party is Microsoft or cloudstrike or your sysadmin.

Sure, maybe the "sysadmin" is good natured Chuck on the other side of the cube partition: somebody that you can hit with a nerf dart. But maybe they're a hacker on the other side of the planet and they've just locked your whole country out of their autonomous tractors. No way to be sure, so let's just not engage in that model for control in the first place. Lets make things that respect their users.
> We can play semantic games with per-capita consumption, but the fact of the matter remains that even if the entirety of the planet, except China and India, went 100% carbon neutral overnight, it would still be impossible to avoid hitting catastrophic climate change thresholds due to GHG emissions from those two countries alone.

Of all the countries China is doing the most to curb its emissions.

> Global annual renewable capacity additions increased by almost 50% to nearly 510 gigawatts (GW) in 2023, the fastest growth rate in the past two decades. [..] In 2023, China commissioned as much solar PV as the entire world did in 2022, while its wind additions also grew by 66% year-on-year. Globally, solar PV alone accounted for three-quarters of renewable capacity additions worldwide.

https://www.iea.org/reports/renewables-2023/executive-summar...

The western world is shifting away from China to India and the rest of Asia for manufacturing, so I think the desire for cheaper products and ‘national security’ are going to increase emissions somewhat. But even still, with the glut of renewables, and soon the glut of batteries, emissions free energy is going to be the cheapest option for manufacturing anyway
That's kind of orthogonal to the issue here. Many academics would not mind if their research is free. They do mind very much if some entity takes their research and republishes it without attribution.
Yet another successful loser who somehow continues to ascend corporate ranks despite poor company performance. Just shows how disconnected job performance is from C-suite peer reviews, a glorified popularity contest. Should add the unity and better.com folk here
not all regulation is bad regulation, but all regulation contains some percentage of bad regulation. you can't have more regulation without more bad regulation. sometimes that's still good on net

there are a lot of people who think 'tech is under-regulated', which is to say, more regulation would probably overall improve 'tech'. that point of view is implausible in light of regulatorily-induced disasters like this
Why measure only death, as if it is the only terrible thing that can happen to someone?

That doesn’t count serious bodily injury, suffering, people who were victimized, people who had their lives set back for decades due to a missed opportunity, a person who missed the last chance to visit a loved one, etc.

There are uncountable different impacts that happen when you’re talking about events on the scale of an economy. Which is why economists use dollars. The proxy isn’t useful because it is more important than life, it it useful because the diversity of human experience is innumerable.
Communal spaces are fine, communal spaces will continue to be fine. Forums are fine. IRC is fine. The only thing that's dying is Google. Google is not the Internet.
A reasonable strategy is to wait a week after release before applying an update, unless it's a zero day fix.
Greed and MBAs have colonized the far ends of the techno sphere.
Oh, i thought it was tied to OS updates. So Windows is not to blame, if that's the case.
New journal offers alternative to traditional academic publishing
I wish I could link to a transcript.

The gist is that instead of the usual peer review process, submitters post the article to the journal and actively solicit feedback (from any reviewer). After several iterations, the paper is ready for publication and published, with the reviewers listed as "Collaborators". Obviously, they are not anonymous.

The decision to publish occurs via a vote. It's not up to the whims of only one or two reviewers.

Reviewers sign up in advance, and are notified when a new submission appears. They can choose to review or not.

I imagine it also solves the concern about whether a paper is "good enough" for the journal (i.e. whether it should be submitted to a "lower" journal). If no one is willing to review it, it's boring enough not to get published. If many review it, it is interesting enough to keep it in the pipeline.

Interestingly, whereas peer review was considered a chore in the traditional academic world, it's exciting in this format: They get to have conversations with the authors, discuss ideas, etc. Academics are eager to sign up to review other papers.
If it didn't pay off to be a jerk, less people would be jerks.
Think "publish" in the 1940's magazine sense - which is pretty much the distribution model for all "traditional" academic journals. If Famous_Author publishes an article in The Saturday Evening Post - maybe you're a subscriber to The Saturday Evening Post. Or you head to a brick-and-mortar library which subscribes, to read the article there. Or you pay Cover_Price, in cash, to a news stand or drug store or whatever, to get your dead-tree copy of the issue in question.
Headlines (at least in mass media) have always been a hook to get the reader interested. Back when you had competing newspapers for sale on a stand, people would glance at the headlines and maybe buy a paper if it looked interesting enough.
You're being nice.

I plain cringed when I saw the headline. This sounded like a tool designed by some evil entity to bring destruction upon the World.
Of all the countries China is doing the most to curb its emissions. Not sure what else you expect them to do

> Global annual renewable capacity additions increased by almost 50% to nearly 510 gigawatts (GW) in 2023, the fastest growth rate in the past two decades. [..] In 2023, China commissioned as much solar PV as the entire world did in 2022, while its wind additions also grew by 66% year-on-year. Globally, solar PV alone accounted for three-quarters of renewable capacity additions worldwide.

https://www.iea.org/reports/renewables-2023/executive-summar...
Nvidia transitioning to open-source GPU kernel modules for Linux
This blows my mind because none of this requires windows, or a desktop OS at all.
Inverse:
“CryptGPT: Privacy-Preserving Language Models Using Vigenere Cipher”

https://huggingface.co/blog/diwank/cryptgpt-part1
No, it’s a valid point, which I didn’t interpret as literally “we’re working on eyeballs today” but rather “we’re scaling up these imperfect methods to a trillion dollar GPU cluster”, the latter of which is genuinely something people talk about. The models will learn to mimic more and more of the long tail of the distribution of training data, which to us looks like an emergent understanding. So there’s a theoretical amount of data you could provide for them to memorize physical laws.

The issue is practical. There isn’t enough data out there to learn the long tail. If neural nets genuinely understood the world they would be getting 100% on ARC.
Modeling study proposes a diamond layer at the core-mantle boundary on Mercury
What If We Stopped Pretending? (2019)
Passkeys are advertised as more convenient form of private / public keys approach. So how is that any different from other usage of private keys which are considered long term secrets? Incompetent users can compromise them now too.

It doesn't mean it should be easy to do, but it's also completely unacceptable to make a requirement like "users are forbidden to access their private keys".

> by anyone at all

What do you mean by anyone at all? By the owner of the private key. Not by anyone.
Start using statically typed languages and don't write tests.
This seems powerful. What would be interesting use cases? I can dl youtube with yt-dl, but this seems to do more.
If you are using open source you can always support your own old versions ~joking but not really~

Of course security updates are very hard, but if an old version has some good community you have the option of forking or upstreaming the updates yourself
This could happen if there was a test for the above QA test. Such a meta test would necessarily have to write a test file to the same path as the build path. Unfortunately, the meta tests could have got incorporated into the same suite as the regular tests. Someone then could have decided to activate a test order randomizer for fun. The random order finally hit the anti-jackpot.
Yeah they have been very obfuscatory in calling this a “fix.” I watched the CEO on Cramer and he kind of danced around this point.
zero trust means absolutely nothing. Just a term void of any meaning.
... for the reasons the other guy said: https://news.ycombinator.com/item?id=41011627

DoS attacks attempt to overwhelm your system or your system's connection by sheer amount of packets. And here you are capturing those packets and keeping them in memory - this just makes your system fall over faster.
Not so hypothetical. PayPal supports passkeys, but does browser sniffing to only enable it in Safari on Mac. I could tell my browser to fake it's UA to use 1password's passkeys, but to what end?
Simply incredible that this thread ends with this guy suggesting it's a wokeist conspiracy to push rewriting everything in Rust. Twitter blue checks are really something sometimes
When I fed that prompt to my Claude 3.5 based CarlinBot, it refused to write a poem and instead wrote a rant about why it hates tangerines (warning, profanity):

Fuck tangerines, man. Those little orange bastards are a pain in the ass to peel. You spend 10 minutes trying to get that leathery skin off, your fingernails getting all sticky with that goddamn citrus juice. And then when you finally wrestle one of those fuckers open, you got all those little white strings hanging off everywhere. It's like dental floss from hell.

And don't even get me started on how those tangerine slices always shoot juice in your eye when you try to eat them. It's like getting maced by a tiny orange asshole. You ever get tangerine juice in your eye? Shit burns like the fires of hell itself. Makes you want to claw your own goddamn eyeballs out.

Nah, fuck tangerines and their whole stupid family tree. Oranges, clementines, satsumas - they can all go straight to fruit hell as far as I'm concerned. Give me a nice safe banana or an apple any day over those sadistic little citrus grenades. Tangerines are the work of the devil, plain and simple. Fuck writing poems about them little torture devices.
> Why would one prefer a language with a GC?

One thing less to worry about.
none of your comment makes any sense. possibly it was generated by a large language model with no understanding of what is being talked about
> Is the 10x thing really only about speed?

As long as they're moderately competent, yes. They need to know how to debug normal things, but they don't need to handle every esoteric niche. The thing that matters is ability to put out tons of productive code.

Often that means a speciality where they're an expert, but it doesn't have to mean that.

> When I think of 1x (or less) devs they are usually the type that don't get things done because they can't (without a lot of help), not because they are slow. I.E. overall technical chops, not just speed.

It sounds like you're taking "1x" as a dismissal. Isn't it supposed to be a pretty ordinary dev?
Leading to the conclusion: those few people (government) who have the greatest influence over the problem (over the countries with the largest emissions in real terms, not per person) somehow don't have the responsibility.

It's true that if a country splits into two countries, that doesn't give them a right to emit more collectively. However, it does mean that each country now has little control over what the other one does, and less ability to actually solve the collective problem we want solving, which was the objective here.
> Wouldn't this be an attack vector?

Isn't DoSing your own OS an attack vector? and a worse one when it's used in critical infrastructure where lives are at stake.

There is a reasonable balance to strike, sometimes it's not a good idea to go to extreme measures to prevent unlikely intrusion vectors due to the non-monetary costs.

See: The optimal amount of fraud is non-zero.
I'll bet 50% aren't delivering code that can stiff millions of PCs.

And given Crowdstrike are, and data validation neglect is so common, why have they not already learned this lesson?
Found this post on 4chan's technology board:

What actually happened was two-folded:

Step 1: CSAgent.sys is a certified durgasoft kernel driver that parses clownstrike virus definition files

Step 2: Clownstrike never fixed cases for malformed virus definition files that could trigger an invalid memory access in CSAgent.sys

Step 3: Clownstrike ships the buggy CSAgent.sys and it works for months without problems on customer computers with good virus definition files

Step 4: For some reason the webserver serving virus definition files to all endpoints started serving malformed virus definition files, sometimes they were all blank or filled with random bytes

Step 5: All clownstrike updaters now download malformed LE NEXT GEN APT PROTECTION CLOUD AI LIVE UPDATES into C:\Windows\System32\drivers\clownstrike

Step 6: CSAgent.sys reloads virus definition files

Step 7: CSAgent.sys parses them and crashes with PAGE_FAULT_IN_NONPAGED_AREA (in kernel that means memory at an oopsie address was accessed)

Step 8: Computer BSOD and reboots

Step 9: CSAgent.sys loads virus definition files

Step 10: Goto Step 7

The kernel driver was a ticking timebomb just waiting for a bug in the CDN. I think it was some funny caching bug with le cloud http loadbalancer.
Users reported that their C-00000291-00000000-00000032.sys contained random shit and actual real files that were a completely different part of the software, like US localization files.

You can see it in the diff between CSAgent.sys_18511.sys and CSAgent.sys_18513.sys, they changed size checks and increased sizes of buffers so that future malformed virus definition files wouldnt crash.
> we push software to your machines any time we want, whether or not it's urgent, without testing it

... Just, no... HOW does a vendor get away with that? No rolling releases allowed? No hostclasses or placement groups? No local cache or proxy?

The more I've learned over the past day or so, the more crowdstrike keeps edging towards the malware side of the malware/anti-malware spectrum for me
clownStrike does make cool commercials though

https://www.youtube.com/watch?v=8gatiYW5kWs

https://www.youtube.com/watch?v=p4OGQQPMiXQ
Login.gov is adding the capabilities needed to meet IRS’ identity and credential proofing requirements.

Will require biometrics in some form, with fallback to in person proofing at USPS.

(no affiliation, just a fan)
This is a terrific and very convincing explanation. Thank you! I think I'll give it a try.
If my job didn't include clicking random links I get via email all the time, I'd be much more successful in not clicking random links I get via email.