HNHacker News
TopNewBestAskShowJobs

vicpara

238 karma · joined July 3, 2014

Engineer, data scientist, founder, curious and sporty. Foil fencing.
submissionscomments
vicpara··on Ask HN: Who is hiring? (August 2026)
Dablam | BDR | NY and London | ONSITE (2 days/week) or REMOTE within NY State or UK | Full-time | Must be US or UK work-authorized (no visa sponsorship)

Dablam is an AI-native reputation intelligence firm. We help corporations shape how they're understood in an information environment increasingly mediated by LLMs—surfacing information that's true and under-represented and getting it to the right audiences at the right time.

We expand our team with multiple BDR roles in London and NYC. We're looking for 3+ years of BDR/SDR or comparable B2B outbound experience, AI automation, Clay, strong cold-calling and written outreach skills, CRM experience (HubSpot/Salesforce), and a genuine interest in AI and reputation. Comp: competitive base + uncapped commission + equity, plus medical/dental/vision, 401(k) match, generous PTO, professional development budget.

Apply by sending your CV to careers@ our website. Only natural persons with the right work permits, no recruiters, AI agencies or companies. Expect fast replies.

vicpara··on OpenAI’s accidental attack against Hugging Face is science fiction that happened
There are a lot of technical details that have not been disclosed. No proper post-mortem.

There are a few facts that seem dodgy from the get go.

- stolen credentials Why would there be stolen credentials in a sandbox? How can the model steal valid credentials in a sandbox? So who put them there. If the model recalled stolen credentials from "memory" does it actually mean OpenAI is training on data they shouldn't been training their model on? Data from codex (most likely) ?

- command and control This means the model had the ability to build resilient infra and open bidirectional ports. Create and deploy scripts/apps so it can maintain state across multiple VMs? This again reads that someone went over and beyond to prompt, direct and help this "multi-agent" system to leave the sandbox.

- Pivoting laterally Needs a lot of tools, harness, knowledge and almost malware like scripts to pass commands and execute them. Most of these are already available in OSS. Maybe the FBI investigation can reveal what tools were given in the "sandbox", access, and if OpenAI employees prompted and guided the "attack".

- OpenAI sandbox I'd be curious to find out what kind of sandbox was this since the agent can run and start apps that open arbitrary ports for bidirectional traffic that reaches the open internet. Really? The harness and tools it had access to. This reads almost like someone went over and beyond to endow this "sandbox" with a mighty harness, all CVEs and open source cyber tools to "facilitate" the attack.

- Hugging Face It's not an epitome of cyber security. At the end of the day they run open source models that most users can download even without an access token.

Today we read these news as if everything wasn't enough: https://www.theguardian.com/technology/2026/jul/23/openai-an... https://www.businessinsider.com/anthropic-midterm-donation-s...

vicpara··on Ask HN: Who wants to be hired? (May 2026)
Location: NYC Remote: Yes Willing to relocate: No

I do bespoke clustering for data sets small or big (> Tb): images, text, sound, time-series, code.

Most clustering methods break down when the data gets messy—overlapping groups, spherical clusters have too coarse resolution, unclear boundaries, weak signal. Tools like K-means assume simple shapes. Real data rarely behaves that way.

I build custom clustering solutions that work on difficult datasets, where patterns are subtle but still there. I’ve applied this across biomedical data, legal documents, IoT sensors, imaging, and behavioral data.

If your data has structure but standard methods aren’t finding it, I can help uncover it and go beyond k-means, cosine similarity and random forests.

If an initial data analysis shows there’s no meaningful signal to extract, there’s no charge. All clustering is done bespoke, reviewed by ML scientists.

Email: "v" that works at @ https://denovoclustering.com/

vicpara··on Ask HN: Who is hiring? (May 2026)
Dablam | BDR engineer | Remote or on-site in NYC or London, UK| full-time or part-time

Dablam is a reputation management company that works with top companies to shape their communication, product stories and their impact in the real world. We work with product companies, brands and campaigns for product launches.

We're looking to hire an senior developer specialized in BDR and top of the funnel outreach automation through etl pipelines, openclaw, AI agents, clay and pure software engineering. ML and data science are required as we seek to detect signal in very noisy datasets. We generate our own leads today. We seek to employ an engineer that can own the pipeline stability and the results it produces. This is an engineering role. Experience in lead-gen matters but it's not mandatory.

* 2-4 years experience in software development; * Typescript, javascript, python, bash, linux; * familiarity with AI agents, ML and scikit-learn;

Reach out to me directly with your CV and victor that works at dablam.co.uk.

vicpara··on Fix your robots.txt or your site disappears from Google
A lot of websites have robots.txt and sitemap.xml protected by cloudflare if you can imagine that. That's crazy.
vicpara··on Who Watches the Waymos? I do [video]
Pretty cool. How do they get charged?
vicpara··on Ask HN: Who is hiring? (August 2025)
Broadn Inc | https://www.broadn.io | Founding engineer | NYC - USA | Full-time | ONSITE in NYC - US persons only | Full-stack |

Broadn is an early-stage company. We work with USA manufacturers to help them accelerate the configuration, pricing and quoting process for their industrial products. Our customers are manufacturers operating in electronic parts, pipes, packaging, aerospace, defense and metal parts.

Our ideal software developer has an incredible curiosity, experience across full development stack. We expect production environment experience, leading with curiosity, great communication skills and full ownerships over parts of the system . We need to solve problems anywhere from the CNC machine to multi-datacentre GovCloud so we look for a problem solver with solid understanding of algorithms, data structures that can write efficient minimal solutions.

! This is an ONSITE role in NYC.

We cannot work with non-US Persons due to the nature of our work and clients we serve. All technical interviews will be * ONSITE in NYC*. Unfortunately we will not cover travel or relocation expenses.

Skills we seek in candidates for this role:

- Proficiency in TypeScript and JavaScript for backend and Front-End - this is our core tech stack

- Nodejs, typescript, javascript, bun

- any experience with any of: python, java, scala, rust, go, C#, C/C++

- AWS, GCP, AWS GovCloud, Azure

- React, Vite

- OOP, functional programming

- data structures and algorithms

- Experience with dev tooling:, bash, git, Docker, cloud infra, Linux environments, CICD

- Ability to write minimal, efficient code that solves problems elegantly

Please reach out with your resume directly to @victor with broadn.

vicpara··on Ask HN: Who is hiring? (May 2025)
Broadn inc | broadn.io | part-time devops | Contract | Remote

We are hiring a DevOps to deploy and monitor an app in AWS GovCloud. US persons from US territory only please. 5-10 years managing cloud infra / cicd / security / backups / kms / app config.

Apply by emailing [hr] at our domain.

vicpara··on Ask HN: Who is hiring? (March 2025)
broadn | Full-Stack Engineer | Typescript+Javascript + Nodejs | ONSITE in NYC,US | Fulltime

broadn (broadn.io) is an AI-native CPQ (Configure, Price, Quote) platform that helps manufacturers, suppliers, and distributors create quotes and RFQs as fast as possible. Our platform handles large product catalogs (20K+ SKUs) and complex product configurations. We are backed by SV investors.

You'll be the 2nd engineer and working directly with the CTO and CEO.

Apply here: https://broadn.notion.site/1a9d7894dd55809eb4a2f6cd6bea10cc

vicpara··on I'm Peter Roberts, immigration attorney who does work for YC and startups. AMA
Once I get the O1 visa, what paths are available to aim for a green card?

If the company with which I applied for O1 goes bankrupt what happens to my visa status?

vicpara··on Google Cloud Spanner is now half the cost of Amazon DynamoDB
We are a small startup, 12 strong.

Our reason for going all in with GCP was the k8s. We've been using GCP for 2+ years. The trouble we have is with stability and so many of the features being constantly rolled out.

Our experience was that K8s cost more on GCP than AWS.

Just on LoadBalancers alone, you have tons of tricks that are specific to GCP implementation. And we needed a few extra because you couldn't run all the features we wanted on 1-2 per cluster. For example, we have a 3rd party that required all our requests to always originate and respond back from a fixed IP address. We could only pick one not a range, not a list. This was a hard requirement. The service was important so we had to do it.

It took our team several days to find how to do it using online documentation and support. Tech support was useless. We had one guy in our team that spent 2 days on the phone with a paid, local GCP implementation partner trying to get this problem sorted. Nothing came out of it other than being pitched on our dime a lot of services and architecture we didn't need. Eventually we figure it out on our own. I don't even remember speaking about this when we transitioned to AWS.

vicpara··on Google Cloud Spanner is now half the cost of Amazon DynamoDB
Just moved our infra from GCP to AWS. Kubernetes clusters, LB, storage, lambdas, KMS and all of it.

Google runs their tech stack as if it's a startup that builds their CV. Everything is immature, tons of hacks, undocumented features. If you are on their k8s there are tons of upcoming new versions and features that force you to revisit key hacks you put in your infra because of their misgivings. Our infra team keeps tinkering around our infra and it never ends. It's 50:50. 50% of time making sure we are prepared for their shit and 50 % our ambitious infra plans. Good luck with that.

With AWS our bill is 60% of what GCP used to be running 3 k8s clusters.

AWS support is so nice, you can't believe it.

Nah, I don't trust Google with anything. It's a scam. Google's support is horrendous. They refer you to idiots that drag you through calls until your will for life dies. And you're back to the mercy of some lost engineer that may comment on a github issue you opened 20 days ago. We have a bug reported back in 2020 that got closed recently without any action because it became stale and the API changed so much it doesn't really matter. It's that bad.

The billing day is a monthly reminder you're paying entitled devs to do subpar work other companies do a lot better.

No, we don't miss them already.

vicpara··on Lean – Theorem Prover
Why on earth they had to invent a new language with another crazy syntax that reinvents everything? With such an incredible team at MSR that did everything from new languages and compilers, couldn't they have know better?
vicpara··on Show HN: Semantic search engine for Lenny's Podcast
Podcasts become very conversational which make it pleasant to listen to. Long chats reduce the signal to noise ratio and waste listeners' time.

The Lenny's podcast semantic search gives me the chance to find only the 'filet mignon' of the content without much faf. I love it as I built it to satisfy a personal need.

Disclosure: I helped build it. We are adding more content to it. What shall we add next and what needs do you have around searchable podcasts and expert knowledge?

vicpara··on Lab-Made Coronavirus Triggers Debate (2015)
We'll find out in 90+ years what really happened when the documents get unclassified.

This line of thinking wasn't yet authorised by the US government so it must be fake news until approved.

vicpara··on Named Pipes in .NET 6 with Tray Icon and Service
I didn't use named pipes since 2010 but last time I checked named pipes are great for Inter Process Communication on the same machine. Great in terms of performance and access to a standard interface. WCF can be configured to use named pipes on local machines. Last time I checked named pipes were also available on the network and visible by other machines with some overhead.

Security can be achieved not at channel level but at message level: If cannot decrypt the message then it's not for you. At the expense of overhead you open the door for flexibility.

Ultimately it's a tool. What it matters is how you use it. Definitely better than using shared memory for IPC. Files are by default not secured either. Anyone can write into it.

vicpara··on Ask HN: As a new SaaS business, how do you find your first 10 paying clients?
This seems indeed the key to most sales, almost regardless of what the product does (to some extent). Talking to the right people internally, showing how they can make more money and save time.

Getting there thought might take quite a while :)

vicpara··on Ask HN: As a new SaaS business, how do you find your first 10 paying clients?
Yes, you are absolutely right.

In the same time, you cannot go wrong with selling to 10 clients if this is something withing the reach. In the same time this can be very strenuous when you run on small budget and the runway is within sight.

vicpara··on Ask HN: As a new SaaS business, how do you find your first 10 paying clients?
Yes indeed. This seems the only solution that emerged from everything I tried and I wondered if I'm doing something wrong.

These 10 clients, are also the ones that are going to allow me to raise capital from a VC.

It's quite brutal to be honest.

vicpara··on Ask HN: How do startups get their first customers?
Thank you.
vicpara··on The Pretty JSON Revolution
JSON is mostly for machines not people. When needed, developers format their json in their code editor of choice or bash.
vicpara··on Margaret Mitchell fired from Google
So what? Why is this important?
vicpara··on So, You Want to Learn to Break Ciphers
It is also very educative to read the AES selection methodology for the best symmetric encryption algorithm. Multiple criteria were used to find a good compromise between security margin and implementation convenience. What is also a curious thing is that Rijndael was not the algorithm that provided the largest security margin, Serpent was yet it didn't get selected.
vicpara··on YouTube bans Steve Bannon's podcast channel
Another typical US approach to public opinion: cleanse the news channel of annoying opinion bearers instead of educating the masses to apply critical thinking and getting them acquainted with a larger spectrum of ideas.

How funny to have this coming from a country that advertises freedom of speech as its core values.

People with radical ideas and from the extreme ends of any spectrum deserve the be maintained in the conversation and deserve a voice. Always. The issue isn't they have a voice therefore banning them cannot be an acceptable solution. The large number of people that resonate with those extreme ideas are either in deer life conditions or massively uneducated. Why not start debugging the problem there?

Silencing voices is never a good idea. It's also quite a shame you allow Google/Youtube/Twitter/FB and other big commercial tech companies to decide on your behalf what is socially acceptable and what is not. These are the same companies training your brain with their apps to respond to their commercial interests.

Also, there is a gigantic space between demanding people to take any type of action and becoming violent. Maybe you should stop all Hollywood productions that involve people threatening/killing/inciting each other to commit acts of any sort of violence too.

Lastly, the American society, does cultivate from early days fanaticism. As a European that lived in US for the last 12 years you cannot not see this. Fanatical support for your local sports team, high school team, university, political party and/or faction, city and country is something that is being cultivated and developed from the youngest age. People take pride in bearing a label for generations the label being anything from political affiliation to sport team fans. Continuing the tradition is being perceived as more important than the ideals/ideas one stands for under that particular label.

vicpara··on Gig economy companies spent more than $200M to bankroll Proposition 22
What a typical American law and counter response.

As an European is fascinating and mind numbing how much you guys are squezeeing the ones in need through crazy lobbying and sophisticated mechanisms. You keep inventing new ways of paying people less than the legal hourly rate just because you got them by the .....

Then you have a principled, transparent, democratic approach in your congress trying to fix social injustice.

This article was on the first page of HN today with this article: https://news.ycombinator.com/item?id=25083315

The same step by step, slow moving ratched applied not to systematic genocide but to corporate benefits and squeezing whomever you can for one extra penny. Well done you. Surely you have already forgotten how you ended up with Prop 22 in the first place.

vicpara··on Xi Jinping personally halted Ant's IPO after Jack Ma snubbed government leaders
This articles speaks of Xi Jinping as if he is taking all the decisions. There are a lot more people behind him that are assessing the situations based on merits rather than personal whims. It's only the Western ignorance that makes us see every economical, fiscal and foreign decision to belong to one man be it Putin or Xi Jinping. It also reinforces us the ideas that were sold to us by our own government: China is ruled by a dictatorship and everything they do must be wrong. Everything China does must be wrong because it's not a democracy and people are not free.

The internation banking rules force the banks to adhere to a set of conduct, regulations and rules that make the banking environment predictable for all actors. Looking at money flow: speed, volume and diversity, it is in China's interests to have a predictable and understandable banking landscape rather than continuing on this path of reinventing the wheel. The more Western banks trust the banking system within China, the more predictable and easy it will be to keep the economy growing. ANT's move is only establishing a state within a state and certainly hurts national security by creating a gap in one core service within any modern country: the financial system.

vicpara··on Jim Keller to Depart Intel
It's so funny to hear the interviewer explaining to Jim what he understands. All this happening after in the first part of the interview he couldn't compute the answer Jim gave when explaining predicting branches. Also he's in no position to push back on ideas. As if I really care what the interviewer care or not.

It's such a pity the interviewer didn't prepare more technical questions that touch on the new architectures, compilers, cache, TPUs and his design experience. I only care about him asking good questions.

Jim equally seems incredibly engaged and patient with the questions sometime moving the game to a lot higher level than at which the question was posed. Without breaking a sweat.

vicpara··on Ask HN: Best sleep trackers?
I have a Garmin Fenix 6 Pro and I find it pretty accurate. I set the watch to watch for sleep between 10pm and 8am. Recently with COVID-19 I've been going to bed past 2-4pm. In the morning the first thing I do is check the sleep stats. I find them very accurate. They correctly track my pit stop runs in the middle of the night as well. Today I woke up at 11.43am and the watch got it right. Interestingly after I wake up and lay in bed for a few more minutes, while I'm still in bet, I also start to get bazillion of notification from phone on my watch. I feel very confident about the watch's ability to track the start and the end of sleep right. I cannot tell about the REM time but it seems within the correct ball park. There were some rough nights where it showed no REM at all. The truth is that I was pretty low energy in those next days and not at my full potential. However, when the watch tells me I had >2h of REM, I'm an energy bomb.

The body battery is another thing that is quite magical in indicating my resources. Two days ago I found myself at 10/100 midday. At 4pm my concentration and deep thinking ability was almost inexistent.

From the engineering perspective I noticed that the SP02 sensors attached to the finger, to the smart watches and other devices tracking pulse, O2 and heart functions they use pretty much the same technology to read the pulse, blood oxygenation levels etc.

There is a lot of software and signal engineering that lays on top of the sensor readings that differs on each manufacturer. To get these settle to accurately predict REM and VO2 and other more advanced activity labelings they do need a lot of data and iterations. Fitbit and the Apple watches went through thousands of data points and they do seem to be miles away now.

So far I found that with each software update the Garmin Fenix is getting a lot better at these predictions. Certainly for all these devices there is a learning curve and we are quite frankly at the beginning of it.

vicpara··on Ask HN: What are you reading or learning during the isolation period?
I'm learning how to draw, sketch and doodle. Something I always wanted to do.

On top of that I have three books I was always too intimidated to start reading:

* Deng Xiaopong and the transformation of China - Ezra Vogel

* Leonardo Da Vinci - Walter Isacson

vicpara··on Volkswagen explores using 3D printers to produce ventilators
What would be interesting to understand is how do they bootstrap the production process and what design methodology they use for the ventilator.

Do they just go to Siemens and ask for a basic schematics they are happy to share that could potentially pass the certification process? How does the factory organises itself to change the production lines. I'm fascinated about this topic.

There is an open source effort to create a ventilator that can be produced in high volume: https://www.notion.so/1-Million-Ventilators-1035c5cf946445a7...

What is VW's approach to this and how do they plan for it. Grateful if anyone has more insight into this topic.

Page 1 of 3Next →