skysight-inc/HackerNews huggingface dataset:
Location: DFW, USA

Remote: Yes

Willing to relocate: No

Technologies: Cloud Security Architecture, Experience building and designing security architecture within cloud environments, industry security frameworks (ISO, SOX, SWIFT, OWASP, NIST Cyber Security, etc, AWS Architecture certification, Security Speciality, Understanding of API and Service Mesh security - specifically on common controls for API security (SSO, OAuth, Threat Protection

Résumé/CV: www.linkedin.com/in/sidvar

Email: sidvar9@gmail.com

Summary:

Seasoned Cloud Security Architect with 14+ years of experience in
AWS, containerization, middleware, and enterprise-level security
controls.

Architecture Reviews: Guided cross-functional teams in designing
secure cloud patterns, orchestrating large-scale migrations, and
ensuring alignment with our Enterprise Security standards

Security & Governance: Developed security guardrails, vulnerability
management strategies, and best practices for container
orchestration.

Compliance & Controls: Oversaw NIST, MVA, and InfoSec guardrail
reviews; integrated threat modeling, identity management, and best
practices for APIs and service mesh security

Automation & Cloud Expertise: Developed Python-based
solutions, worked with AWS (ECS, ECR, IAM, S3), and leveraged
CloudFormation & Terraform to standardize resource provisioning.

AWS Certified (Developer, 2 x Solutions Architect, Security
Specialty), HashiCorp Certified Terraform Associate, Docker
Certified Associate.
Did you visit their website? https://www.monasticacademy.org/

While I cannot judge them outright, their article "Cyborgs Need a Trustworthy Religion" can appear cultist as they try to intertwine technology and religion.
That's despicable. What a clearly grotesque thing for a cop to be able to do, forcing people to involuntarily spend their own money to accomplish police business. If they want the tests, the least they should do is pay for them!

Mind if I ask what area he lived in?
That's right - I turned off the flags when I saw the article. I didn't see it yesterday.

(I also edited the title to be a bit more neutral.)
Some context for USAID

https://youtu.be/qe47hTyUh5g?feature=shared
Some people in the us government are very afraid of China.

Whether that fear is justified is a totally different topic
That's what reporting on public figures entails, especially when their public actions are legally murky at best. Or are you proposing they're not actually public figures (in which case why do they have access to the systems they do?)

But really, yeah, lets talk about questionable people creating questionable lists......
Can't it communicate the opposite as well? You could read it as, I take this seriously so I will invest money into looking my best?
A New Postgres Block Storage Layout for Elasticsearch-Quality Full Text Search
Location: Seattle, WA, USA - general metro area / REMOTE OK
Remote: Yes || hybrid || 'Onsite'
Willing to relocate: no
Technologies: Linux, go (golang), shell (sh, bash), SQL (PL/pgSQL), C, C++, Python, HTTP (nginx)
Résumé/CV: https://mproj.net/Resume-MichaelJamesEvans.pdf
Email: mjevans1983@gmail.com
NOTE: Please include Ask HN 2025-02-03 in the subject
A state-owned social media for the US? And is the idea to buy or to expropriate?
"Refer to us any questionable conduct or details that you find or notice..."

Is there a hotline to report Nazis?
So the concept of "doxxing" doesn't apply to anyone who works in a government job? We can just publish the private information of any low-level employee?
No, they are not. This is a bizarre and highly illegal coup by Musk simply because he can, and who's going to enforce the law? Trump's corrupt DOJ?
GPUs need an audio driver to send digital audio over HDMI or DisplayPort, I haven’t seen GPUs with an analog audio out (no DAC).
I hope you don't think that this administration wouldn't deport a citizen. They have said they would deport people that were born here - birthright citizenship which is outlined in the constitution, based on their parents status.
US Navy releases photo showing USS Preble firing HELIOS laser weapon
Of course it's flagged, this site is an altar to worship at the feet of the American oligarchy. It's as rotten as the rest of Silicon Valley.

As JWZ put it:

"A venture capital company's fan club, finance-obsessed manchildren making the world worse"

Slightly NSFW source: https://cdn.jwz.org/images/2024/hn.png
And nobody outside of the US cares about what's inside those official databases. If Trump changes the name of China to "Smelly Food Country" it might be required to change this in US Google Maps But if this propagates to Google Maps in other countries people will just laugh at them and might stop using it.
It didn't get taken away. Not sure why you didn't see it where you expected to but there's no issue with your account.
Small Language Models (SLMs) Can Still Pack a Punch: A Survey
Jitter (https://jitter.video) | Senior Software Engineer | Full-time | ONSITE (Paris, France) and REMOTE (EU timezone)

Jitter is a fast, simple, and collaborative motion design tool on the web. We help designers create high-quality animations for communication materials, videos, apps, and websites easily, while collaborating with all the stakeholders involved in the creative process: teammates, clients, marketers, engineers…

· 2023 Design tool of the year on Product Hunt: https://www.producthunt.com/golden-kitty-awards/hall-of-fame...

· Top 100 most used Figma plugin: https://www.figma.com/community/plugin/961270034818256057/ji...

Job desc & apply here: https://go.jitter.video/i7cyfk
How long of videos do you recommend this for? How many flips are the books good for? Any tips on keeping them in good flipping condition, in your experience?

Also, your title is missing an "a" before "living". Love the idea and execution!
Funny enough this engine is based off the same one they used in Diablo immortal which also has this issue
Q: Why are there (still) classified documents at USAID?

https://www.nytimes.com/roomfordebate/2014/04/15/when-is-for...:

"U.S.A.I.D. was created in 1961 to help the United States win the “hearts and minds” of citizens in poor countries through civic action, economic aid and humanitarian assistance. As a cold war policy tool, the agency was, at times, used as a front for C.I.A. operations and operatives. Among the most infamous examples was the Office of Public Safety, a U.S.A.I.D. police training program in the Southern Cone that also trained torturers."
The Whiz Kids, for all their flaws, were duly and lawfully appointed. It wasn't this.
Have Elon Musk and all these engineers sworn oaths as required to be a federal employee? https://federalnewsnetwork.com/commentary/2019/10/the-oath-o... If Elon is "just advising", under what statute or directive does he have specific authority?

If they are accessing TS/SCI information and places like SCIFs have they filled out their SF-86? Are any of them dual nationals and do they have any ties or vulnerabilities to hostile foreign states?

Basic questions given the enormous access they are being given, far beyond frankly any handful of people have generally had in US government history.

Also, they have apparently plugged in their own private server at OPM. Has this already been compromised by Chinese/ Russian agents? Has the NSA had a look?
I don't think you can, necessarily, except by basically declaring bankruptcy on the old trust root on the systems and teaching everyone not to trust the old root.

As long as the vulnerability doesn't let them actually extract the secrets necessary to simulate completely arbitrary operations including with any future keys, I _think_ you can trust the new attestation chain afterward?

I've not been paid to work on this, though, and it would be pretty easy to have accidentally built it in a way where this is a world-ending event, and truly paranoid workloads in the future are going to insist on only using silicon that can't have ever been compromised by this either way.
See perhaps "The bro-ligarchs have a vision for the new Trump term":

> All of these men see themselves as the heroes or protagonists in their own sci-fi saga. And a key part of being a “technological superman” — or ubermensch, as the German philosopher Friedrich Nietzsche would say — is that you’re above the law. Common-sense morality doesn’t apply to you because you’re a superior being on a superior mission. Thiel, it should be noted, is a big Nietzsche fan, though his is an extremely selective reading of the philosopher’s work.

> The ubermensch ideology helps explain the broligarchs’ disturbing gender politics. “The ‘bro’ part of broligarch is not incidental to this — it’s built on this idea that not only are these guys superior, they are superior because they’re guys,” Harrington said.

[…]

> The so-called network state is “a fancy name for tech authoritarianism,” journalist Gil Duran, who has spent the past year reporting on these building projects, told me. “The idea is to build power over the long term by controlling money, politics, technology, and land.”

* https://www.vox.com/future-perfect/395646/trump-inauguration...

Also maybe "Why big tech turned right":

* https://www.vox.com/politics/397525/trump-big-tech-musk-bezo...

General right-wing plan:

* https://www.bbc.com/news/articles/c977njnvq2do

* https://en.wikipedia.org/wiki/Project_2025
You haven't lost the ability to vouch.
https://en.wikipedia.org/wiki/Frequency_illusion

Maybe the ads were already there the whole time?
Not sure that’s necessary. I don’t recall the last Tesla story I saw that was positive.
You're going to have to do something to buff the hobbits or everyone is going to want to play as Uruk-hai.
It's also only when you get older that you see how rife the existing system is for "abuse" (if you want to call it that). Maybe the young upstarts have other motives for dismantling the existing system than simply blind ambition, especially if the existing system is set up with entrenched patronage networks that are basically inaccessible to the "young ambition kiddos".

Your example is pretty unpersuasive. It is already that case that "influential Treasury recipients" are called upon to "help" those in power. How else can you explain the various volte face moves by seemingly apolitical economic actors. I think the kiddos might finally be getting wise to how the game is played and how it is rigged.
Hi, I'm one of the authors and yes it was :)
They only shared it now because Asus accidentally leaked it in release notes for a BIOS update Beta.
Bennie sells discs at the disc golf course. Bennie is the guy who arranges timed skiing races up on the mountain. Bennie is just the placeholder of 'if you do this a lot locally, you know XYZ who is always around' and hence you are 'part of the scene' IE you have actually engaged with it on some level. Nowadays that might be substituted with 'do you watch XYZ streamer'.

The t-shirt didn't represent having a personality. It represented than 'I am around this community enough I have at least interacted with Bennie'. Someone wearing a Kmart t-shirt saying 'ah did you get that from Bennie' would be the exact cred/personality as having a Bennie shirt.
In production environments that won't give you root access, you won't be exec'ing inside of a pod if you aren't an operator or sysadmin.
It's a genius idea to run the process in a isolated network namespace!

I'm more interested in the HTTPS part. I see that it sets some common environment variables [1] to instruct the program to use the CA bundle in the temporary directory. This seems to pose a similar issue like all the variants of `http_proxy`: the program may simply choose to ignore the variable.

I see it also mounts an overlay fs for `/etc/resolv.conf` [2]. Does it help if httptap mounts `/etc/ca-certificates` directory with the temporary CA bundle?

[1] https://github.com/monasticacademy/httptap/blob/cb92ee3acfb2...

[2] https://github.com/monasticacademy/httptap/blob/cb92ee3acfb2...
> it's entirely fair to report on these 19-24 year olds

Of course it is. As it will be to go after them through the criminal justice system in years ahead. I believe OP’s point is they don’t realise the jeopardy they’re getting themselves into.
The extra complexity adds failure modes that just don't need to exist. I know someone with even a simple system (Lutron + Alexa) and it interferes with the basics (turn on a light) especially for guests. The only feature I really love is the "turn off everything in the house".
> Houses are not durable goods. Their value should go down as they get older (this is in fact how housing is valued in Japan for example).

Um, yes are you familiar with depreciation of the built structure? Durable doesn't mean immortal. Perhaps you don't know what durable good means in this context.
Much like how sarcasm in real life usually misses a chance at contributing to the conversation, I feel like you've done the same here. If you have something to say about the quotes or American Compass, then say it, or point to something else that's more credible, otherwise it's just internal dialogue
Clojure's Multi-Arity Functions
Show HN: A Prompt Octopus in VSCode
Hey HN, I’m Ben, and I’ve been tinkering with prompt-iteration tooling for about a year. My first idea [1] was an open-source tool that lets you try different variations of prompts, but even though I used it endlessly for the first 5-ish days, I… never used it again.

I wrote other scripts, compiled personal eval sets, and subscribed (then unsubscribed) to a bunch of online tools. Nothing seemed right.

Until last Friday when, talking about side project ideas with my girlfriend, she said, “What if it was in your code editor?”

And I thought, wow, I love this woman.

This VSCode extension instead lets you highlight your prompt text and run it against any and all models [2]. You can toss in your API keys, which are only stored locally, and use it for free.

Any feedback would be invaluable - this is my first extension!

I’ll be adding the same highlighting functionality I have for prompts to schema validation, where you can highlight any form of schema (pydantic, zod, json), and I’ll use a small llm to parse it + format it for different providers.

[1] https://github.com/benguz/prompt-octopus
[2] https://promptoctopus.com
40GRID - Full-time Remote | React Native Mobile Engineer

Our mission is to empower field-service companies to grow by modernizing and automating their business operations. Every company we work with has unrealized potentials — our task is to build the platform that empowers growth and helps them unlock opportunities.

Email: jobs [at] 40grid.com (no recruiters or agencies, please put HN in subject line, thanks).

Tech: React Native
Access to the Treasury that is normally highly-restricted is the furthest from "low-level employee" that you can get.
Would love to float in the dead sea slurping on a pina colada right now.
Got it.. I will admit to being unfamiliar with the challenges of ADHD so I apologize if my suggestion appeared to disregard said challenges.

If I can ask a follow-up question: Is it the act of writing it down, or the whole recall aspect of it that is challenging? Or something else?

I've personally starting using audio transcription with a voice recorder to capture ideas more easily when I'm not at my computer (I hate typing on my phone keyboard) and that has made building these kinds of diary/log/notes documents a lot easier because I can just speak my ideas into the recorder whenever it is convenient for me, instead of waiting until I'm at a computer.
Post-Modernity in Fast Networked Cities and Slow Physical Worlds
Life imitates art:
https://imgs.xkcd.com/comics/random_number.png
> [Apple] had a greater impact on user privacy than f-droid ever will.

Sorry, that's nonsensical, unless you mean a negative impact. Apple's privacy is pretend only, as this article makes quite clear.
About 500 megatons.
7e9 humans * 0.075 tons/human / 1e6 tons/megaton
Interesting, I had never heard about min-p until now. From what I understand, it's like a low-pass filter for the token sampling pool which boosts semantic coherence. Like removing static from the radio.

Do you have any benchmarks of min-p sampling with the new reasoning models, such as QwQ and R1?
Censorship is often applied on the easiest, most popular access methods even though the information is theoretically public, and it has a real effect. Suppose for some reason you wanted to make sarin. You could spend hours poring over research papers, or you could ask Google or ChatGPT "how do I make sarin?"

And later, as ChatGPT becomes the only interface to the world's information, the gap between information that can theoretically be accessed by anyone and information that can actually be accessed by anyone will only become wider.

Even having to take a college class, even if anyone can take it, is a pretty big barrier.
Exactly this. If you worked in the office, then went remote after Covid and the company made no promises about being permanently remote, I have no issues with that.

In my case, Amazon Retail reached out to me in mid 2020 about an SDE position. They made it clear I would have to relocate eventually. There was no way in hell I was going to uproot my life and move to Seattle for Amazon already knowing there reputation.

They then suggested I apply for a role in Professional Services that was “field be design” and that would be permanently remote. That department was exempted from the first round of RTO requirements while I was still there.

As of this year, even those positions are required to be in an office even though it’s more than likely no one on a project will be in the same office and the clients will definitely be remote. It means you are either at a customer site or on a call with a client from the office. I got Amazoned in late 2023. The RTO mandate from them just came into affect this year.

The equivalent positions at GCP are also hybrid. They reached out to me. But when they said that, I said no thanks
LLM are "great" in some use cases, "ok" in others, and "laughable" in more.

Some people might find $500 worth of value, in their specific use case, in those "great" and "ok" categories, where they get more value than "lies" out of it.

A few verifiable lies, vs hours of time, could be worth it for some people, with use cases outside of your perspective.
When enough of tech bros move to Texas - is there any chance we can we start referring to tech bros who live in Texas as "Texas tech bros" instead of "Silicon Valley tech bros"?

Like Peter Thiel hasn't lived in Silicon Valley for seemingly a decade now but he's still referred to by the media as a Silicon Valley tech bro when he's actually just a billionaire who happened to live in Silicon Valley for awhile.
> Given the amounts involved, I wonder what kind of concessions they're getting in return.

Half joking when I say I would not be surprised if it's a $600M franchise tax break.
What would a "canonical registry" include? Like, biometrics of every citizen?

I am from a european country, and when I had to renew my id card I had to prove my identity through answering questions about a part of my family tree my immediate family and I have been no-contact since ever. I had no idea about the names of these people, and the police officer was visibly frustrated. Nothing bad happened in the end but I can imagine if I was acting weird it could have had, because the whole id process was actually a failure.

My experience with other european countries is not much different either in terms of the process, likeprevious residence addresses, people you live with or similar info they have on you, most of which is not very private. Or a witness to testify which actually is the easiest. That's nothing that would have prevented a case like this on its own, without further investigations.
In your case that was true. General explanation here: https://news.ycombinator.com/item?id=42902318.

I didn't see much misuse of vouching in your recent history so I've removed that penalty from your account now. But please make sure that the comments you're vouching for are respecting the site guidelines (https://news.ycombinator.com/newsguidelines.html).
I don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,th...
I found this Raspberry Pi Zero based bike computer project: https://github.com/hishizuka/pizero_bikecomputer

This seems pretty nice in terms of features, but would probably need a bit of polish.
Magic links don't work when Outlook "safe links" are enabled (2020)
Never appropriate. The actions are entirely unconstitutional. If the US decided to disband USAID it would have to be an act of congress, unelected friends of the president don’t come close to being able to make that call.
Can you explain what is illegal? Aren’t the people that Wired doxxed actually being paid by the government?
Yes, good point, maybe that is the blocker.
Not sure why this is being downvoted as Musk & co's actions are clearly bizarre and illegal.
We make exceptions for fascists. We have to.
> This means that it cannot encode arbitrary code that could be executed by the host machine.

But the host machine still can, so it's not as big of advantage in that regard. If you could somehow deliver a payload of native code and jump to it, it'd work just fine. But the security you get is the fact that it's really hard to do that because there's no wasm instructions to jump to arbitrary memory locations (even if all the host ISAs do have those). Having a VM alone doesn't provide security against attacks.

It's often the case that VMs are used with memory-safe languages and those languages' runtime bounds checks and other features are what gives them safety moreso than their VM. In fact, most bytecode languages provide a JIT (including some wasm deployments) so you're actually running native code regardless.
The Modernity Machine
Splitting the atom: Why saying who was first is complex
Powerful AI technology being deployed against users to apply non-transparent and unaccountable censorship to their usage of these tools. Not exactly the brag they think it is.

It wouldn't be much of a concern except for their efforts lobbying the California government to outlaw access to open models.
You were not able to use context clues to figure that "demo" in this case is short for "demographics"? Sad
OK somehow I missed that interpretation of your comment.
How are people surprised that Luigi Mangione is considered a hero?
Vivint | Home Automation - IoT, making cool stuff | Boston, MA | onsite

At our Boston Innovation Center, we're delivering an integrated platform, award-winning products and the industry's first artificial intelligence for the smart home. Check out our openings and join the #SmartHomeRevolution

We are looking for designers and engineers across multiple functions, but here are just a few:

- Android staff engineers

- Backend Python/goLang engineers

- Product Managers

Check out all of our openings here: https://www.vivint.com/company/careers/team/technology

Technologies we touch: kotlin, swift, golang, python

Please email matt.deangelo1@vivint.com
I have been close to multiple people who made similar paranoid allegations while psychotic. It is sometimes hard for people to understand the allegations are false or part of an illness. This can include judges and mental health professionals.
You seem to be over qualified if anything. Why do they need a desktop app? A webview window with a search box seems pretty simple.
> And extrapolating to the next few months I'd say the next administration will likely have an obligation to attempt to send anyone associated with DOGE to prison for the rest of their lives.

If they get pre-emptive Presidential pardons, nothing can be done (unless you go with state-level charges).