johnhess

This separates who sees what. Cloudflare (or any OHTTP gateway) sees who talks to who, but can't see the content. The service sees the content but not who you are/your IP.

You can imagine a lot of threat models where who you talk to isn't sensitive, nor is "someone talked to them about X" but knowing both facts is a risk.

Was this an out of sample test of the router or was it trained on these specific use cases/eval suites?

Imagine giving birth to alien intelligence and the best thing you can think to do with it is advertise for laundry detergent and try to displace workers.

We have put the least imaginative people alive in charge of the world.

I worry the answer to "new surplus. who will it go to?" is a foregone conclusion. the surplus is the most surveillable technology imaginable.

The first sentence isn't even a sentence.

decoder ring?

"the law" is the fulcrum this turns on.

if you wrong your employer, for example by failing to do your job well, you are not a criminal to be prosecuted by the state. you may well deserve to lose that job though.

here, wronging your employer is considered a criminal act.

I'd be eager to know if these layoffs are cover for firing "inconvenient" employees. Google's fired Timnit Gebru, labor organizers, and recently folks who protested a contract with the Israeli Defense Forces. It's kind of their thing at this point.

What's wild is that a lot of that equipment (or barely newer versions) is still standard fare at flight schools. It's possible to get a fancy glass panel if you look. But you'll probably still fly a 172.

It'd be nice if the regulations would make designing clean sheet airframes a viable business again.

I haven't switched. I still mostly do software engineering. But I did burn out on my job in a toxic workplace and quit with nothing quite so formal as a plan.

Before picking up more software work ~6mo later, I got certified as an EMT and started volunteering on the ambulance at a local service. It has been a really great choice. I work with excellent people in a job very different from my remote software one. I wouldn't call it manual labor by any stretch, but it has a very different physicality and interpersonal nature than engineering that makes it very rewarding for me.

There's no reason on paper to spend whole days volunteering doing something you're not the best at. Doesn't matter.

Decentralized Storage Researcher | Open Archive | Remote, Contract, FT, 100k/yr

OpenArchive helps human rights defenders to document and archive abuses. Our app, Save, empowers those capturing important mobile media to archive it securely. We plan to incorporate decentralized storage technologies into our portfolio of supported backends in the next year.

We want your help in deciding exactly which decentralized storage solution (e.g. IPFS, Filecoin, bittorrent...) we adopt and how to do it best.

This is a hard problem requiring the technical expertise to assess existing and emerging technologies beyond the "marketing hype" and to square what these offer with the needs of real people in unforgiving situations. Much of what you'll learn and document is interesting to a broad audience and we expect you to engage with the community at large via conferences, blogs, or articles.

Ideal candidates are great communicators who can share examples of their past research (posts, articles, etc.). We prefer folks with a related graduate degree and are open to hiring postdocs or funding academic research.

Decentralized Storage Researcher | Open Archive | Remote, Contract, FT, 100k/yr

OpenArchive helps human rights defenders to document and archive abuses. Our app, Save, empowers those capturing important mobile media to archive it securely. We plan to incorporate decentralized storage technologies into our portfolio of supported backends in the next year.

We want your help in deciding exactly which decentralized storage solution (e.g. IPFS, Filecoin, bittorrent...) we adopt and how to do it best.

This is a hard problem requiring the technical expertise to assess existing and emerging technologies beyond the "marketing hype" and to square what these offer with the needs of real people in unforgiving situations. Much of what you'll learn and document is interesting to a broad audience and we expect you to engage with the community at large via conferences, blogs, or articles.

Ideal candidates are great communicators who can share examples of their past research (posts, articles, etc.). We prefer folks with a related graduate degree and are open to hiring postdocs or funding academic research.

Full posting: https://open-archive.org/RJob

SEEKING FREELANCER | REMOTE | Part Time | iOS or Android development (native)

Hi, I'm John and I'm the tech lead for Save (https://open-archive.org/save/). Save is an iOS and Android app that helps citizen reporters and eyewitnesses around the world preserve, protect, authenticate, and amplify what they’ve documented.

Us: * Open Source * Flexible on location/time-zone. Our tech team is already globally distributed (US, Germany, India). * Working on privacy and human rights tech with like-minded folks around the world * Focusing on bug squashing in our existing apps today, and on integrating really fun & interesting distributed storage tech in the coming months/years.

You (we hope!): * Strong communication skills * Serious experience (mid/senior level) on at least one of Android/iOS with strong references * Ideal * Experience in setting up automated testing/CI/CD in at least one of the two platforms * Ability to contribute to both platforms * Able to start immediately and dedicate 20+hrs/wk through June. * Experience with distributed web tech e.g. IPFS

Please reach out at email-in-profile with a resume, rate, and any reasons this might be an especially good fit :-)

wizardmac.com

The most effective, efficient data exploration tool I've ever used. I'm a data scientist, but I use this before I write so much as a line of code.

Are you interested in the technical pros/cons, or the pros/cons for your user community? What's your company do?

This is a shame, and says more about the consolidation of the tech industry than Hipmunk's product.

One of Hipmunk's founders spoke to a course that I was in about their experience as a founder and how they were running their business. A few weeks later, a well known founder of another travel search company visited the class and said outright that if Hipmunk did have any success, that they would copy those features and that Hipmunk couldn't threaten their position. That is exactly what happened.

To boot, Hipmunk was acquired and shuttered by another travel conglomerate.

"Things I wont work with" is a great concept that tech should borrow from chemistry. Some things, while they carry possible returns on investment, are simply not worth the risk.

I wonder what "Things I wont work with" would be for tech. I can imagine particular technologies (e.g. predictive policing) or types of data (e.g. I refuse to put digitized therapist's notes on the internet).

Perhaps the reason to make it accessible is not because of market share. It turns out that other audio and (yes, even video!) mixing software is accessible, so it's certainly not insurmountable.

Ironically for the name, ableton turns out not to be accessible for the blind.

> Google likely spends more money on editorial control for issues of racism than for any other thing that doesn't make money.

Is there evidence to this effect? There are a lot of things Google spends money on.

Link to Buffett's proposal?

The point of the article is that by making something scarce free, the company was in effect "rationing by the queue", an inefficient way to handle things. Those unwilling to get there early had a bad time.

Instead they said, "Hey, we were giving the average employee $100/mo in parking. We're gonna keep doing that in the form of cash. But, to fund that extra 100 you're now getting in cash, anyone who wants to use the lot has to pay its market value." In short, instead of providing a "flakey parking availability" they provided cash. It's a lot (a lot... get it?) like selling the lot and giving the proceeds to employees.

This isn't always the best idea (sometimes, similar schemes can be socially unjust), but from an efficiency standpoint, it's hard to beat.

I hear what you're saying about pissing people off, but this should do the opposite. Sure, some folks might irrationally like jockeying for position or be early risers. But the company never intended to say "this benefit is for early risers". The intended it as a benefit to all employees and now it is.

Mentors.

I learned a lot from HN, much more from side projects. But a mentor helped me clear the chasm between "writing code" and being a software developer.

Honorable mention goes to quitting my job (with savings) to start doing development and data science consulting full-time.

Is there data (say a drastically increased flag rate, number of flame wars, etc.) that show that today is different than 2 months ago?

Why is this flagged? Yes, there are real criticisms, but this is published, reviewed research. There is a real intellectual contribution.

I'd much rather see a discussion of flaws (there's already a healthy discussion here) than burying a study that speaks to important issues.

Criticism

https://www.washingtonpost.com/news/monkey-cage/wp/2014/10/2...

The original authors defended their research in the Washington Post

https://www.washingtonpost.com/news/monkey-cage/wp/2014/11/0...

I love this very honest appraisal of how pay-for-performance incentives ought to work, and I wish more companies would step back and ask themselves if their "traditional" incentive structures have the motivational factor they're "traditionally" assumed to have.

While startup performance is less correlated to market performance than an established firm, the concept of setting the bar as outperforming the industry/market is brilliant, and I wonder if there's a good analog in the startup space, particularly for employees.

Bonuses and stock options are all well and good, but they incentivize the firm's survival and success. A single employee may be unable to change that, even if they perform exceptionally. Those incentives are great for "share the wealth" and "all for one, one for all" camaraderie, but they don't incentivize individual performance.

It's also unclear why they compare to the C-17 instead of the C-5, which is larger and handles a heavier payload (by about 100,000 lbs). Heck, even a 747 has a higher payload than a C-17. Being the biggest wasn't the C-17s goal.

Might as well tell us how much more payload it has than a Cessna 172

tl; dr.

Two distinct attacks, likely related, possibly coordinated took place. The first was observed in March 2014 and thought to be expelled in late May 2014.

Before that expulsion, a second attack began. While OPM thought it was in the clear, the 21.5M records were exfiltrated in July 2014. As late as August 2015, that same attack vector was used to steal fingerprint information as well.

Interesting to see the steps they took to expel the APT (physically verifying the identity of account holders on account resets, taking services offline, resetting networking equipment).

Even more interesting is that had confidence they'd actually expelled the APT. Of course, they hadn't totally eliminated a related APT already in place.

This wasn't a "provision a clean box and run a build" reset... it's a massive, heterogeneous system. I can't even imagine how many vectors a nation-state APT could use to maintain a foothold.