Hacker News new | past | comments | ask | show | jobs | submit | AlphaJack's comments login

FINN (https://finn.com/) | Senior Data Scientist - Pricing | Munich, Germany ONSITE | Full Time | 73-85k€ + equity

FINN offers convenient and flexible car subscriptions, bringing a true e-commerce experience to car ownership and accelerating the arrival of electric mobility.

As a Senior Data Scientist in Pricing, you will be at the forefront of developing and transforming FINN's pricing strategy and implementing state-of-the-art pricing algorithms. You will leverage advanced forecasting and optimization models to uncover demand and price trends, predict outcomes, validate impact and provide actionable insights and recommendations for our pricing team.

Requirements: - Quant Master / PhD - 3+ years in e-commerce (leasing, rental, airline, hospitality are a plus) - Skilled in data and time-series analysis, statistical modelling and implementing forecasting and optimization models from scratch - Experience in E2E implementation of pricing strategies and building POCs

Post: https://jobs.lever.co/finn/e8fb0360-11c1-418a-af53-a317fb5d6...

For more details or submit your application, reach out to me at <giacomo dot coletto at finn dot com>


I have a friend which is really happy with EndeavourOS, I am hearing only good stuff about it. Back when I switched to Linux, the choice was either Manjaro or Antergos, and Manjaro had a far wider community.

Antergos was eventually archived, and from my understanding EndeavourOS become its spiritual successor.


I found TPM + PIN to be more secure than TPM automatic unsealing, and faster than typing my long passphrase. I haven't tried pam_autologin yet, but I see the convenience of it.


The threat model is the Evil Maid Attack. I found Secure Boot + UKI + TPM PIN (God forbids automatic unsealing) + FDE to be great for both security and usability.

[0]: https://en.wikipedia.org/wiki/Evil_maid_attack


This is the step-by-step process I followed to install Arch Linux on my laptop with the following features:

- Wayland - Plasma 6 - Plymouth - PipeWire - LVM on LUKS - Unified Kernel Image - TPM PIN unlock - Secure Boot

Let me know what you think!


Thanks for sharing!

Leaning on and only waving to yay might do the reader a disservice and cause more confusion by making the context very easy to skip over, and without that it will probably just be frustrating to keep using Arch and keep treating yay like a traditional pacman-style package manager... Doing it via makepkg first gets you some understanding of "what's going on under the hood" and what's basically the same regardless of which wrapper you use. Might be a game-changer in X years whenever the community moves on to the next wrapper.

You have some cases where yay is being used to actually install repository packages (not AUR). Would recommend changing these from yay to pacman. Like from:

    yay -S mesa mesa-demos mesa-utils vulkan-intel intel-media-driver intel-gpu-tools
to

   pacman -S mesa mesa-demos mesa-utils vulkan-intel intel-media-driver intel-gpu-tools
It looks like aside from the nvidia drivers, the post is not actually installing anything from the AUR?

Could consider instead an approach like "There's this thing called AUR ([Link]). [Brief explainer]. Some people use a helper like yay([current link]) aurutils or aurch. [Proceed to show manual build-and-installation via git-clone and makepkg, as well as how to rebuild/update later]"


Thank you for the feedback! As you and other have suggested, I removed the "yay" requirement and added a brief explanation that its install instruction can be found in the other guide


Nice write-up! My install process is slightly different (I suspect everyone who uses Arch ends up having their own little procedure built up over the years that varies slightly, since the flexibility is part of the appeal), so I'll try to focus on substantive feedback rather than feedback on hyper-specific choices that don't matter:

* For something as nebulous as specific cryptographic settings, I think it's worth elaborating on _why_ you pick the settings you did for `cryptosetup`. I'd imagine it's probably very possible for someone to pick a bad set of arguments that either degrade security or don't improve it but make it much slower. I suspect you didn't do this though, so as someone who just uses the defaults that `cryptsetup luksFormat` uses, I'd be super interested to hear how you decided on the options you used!

* It looks like you linked to another post explaining your use of `yay` as a pacman wrapper/AUR helper, but I'd worry that a lot of people this guide would be useful too (i.e. newer people to Arch) would be confused when they try to follow it and suddenly run into the issue where they don't have anything called `yay` installed or know how to install it (since it's not something you can get from the default repos). From what I can tell, the only two AUR packages you reference in this post are `plymouth-git` and `plymouth-theme-arch-breeze-git`. Maybe for the purposes of this post, you could stick with `plymouth` and `breeze-plymouth` in the main repos (and possibly link to the section of your other article where you detail AUR stuff)?

* The stuff about how to configure secure boot is super interesting; I've never found it worth the hassle and just turn it off on all of my machines, so I wasn't aware of all of the tooling available like `sbctl` and `sbsigntools`. A standalone post on how to configure secure boot on Linux would definitely be worthwhile!

* I love the section on the specific packages for each GPU combination. This is definitely something where a lot of people will benefit from a concise list rather than having to comb through the details in the wiki (which are useful when you need them! but often you just want the packages to install)

* For unmounting all of the stuff post-install, you can use `umount -a /mnt` to recursively unmount all of the nested mounts. Super small change, but it's nice not to have to type all of it!


Not OP, but thank you for real feedback. Most of these posts are just noise to the less-informed.


Thank you for the valuable feedback! I applied your suggestions, in particular sticking with pacman and explaning my encryption and PCRs values.


Great attention to security -- but what is your strategy for backup, as preparation for recovery from loss of the hardware?


I wrote my own python wrapper around Rustic and RClone to achieve 3-2-1 file-level backups: https://github.com/AlphaJack/rusticlone/.

I first tried Rustic's native RClone support, but performance were awful. Backups are automated and run on a daily basis. To restore all my repo (or just one) I run a single command, if I have the repo configs in place.

To backup the repo configs I manually make a second backup by putting them, among all other configurations for my devices, in an encrypted .7z archive, which I upload in a remote cloud storage.

To reinstall Arch, I turned my notes into an automated script that does that in few minutes. The guide in the post derives from it, so it's quite up-to-date.


FINN | Engineering Manager (React/Typescript) | REMOTE / Munich | Full-Time | 105-106k€

FINN drives change for people, organizations and the planet through frictionless mobility. Offering convenient and flexible car subscriptions, we bring a true e-commerce experience to car ownership and accelerate the advent of electric mobility. Join our fast-growing scale-up to make FINN the natural choice in Germany. We work with the best car brands in the world and are backed by leading global investors.

As an Engineering Manager in our Growth department, you are directly responsible for building and improving our online shop with the Discovery team. You will hire and lead an international, world-class team of engineers. This is a cross-functional team with both Frontend and Backend developers.

Typescript | React | NextJS preferred | 3+ year as manager | 5+ year as software engineer

Details: https://jobs.lever.co/finn/afbf67bd-3925-4f8c-825d-6efb192a0...

For more details you can email me at giacomo dot coletto at finn dot com



Now that's a GPT to remember.


Hi all!

`toc` is a command line utility that generates the table of contents of a file from a special kind of comments.

Think it as a `tree` for the contents of a file, instead of a directory.

With version 2, I rewrote it in python for consistency and maintainability, and I added the possibility to embed the output in the original file


Hi all!

I wrote this simple tool to help me organize in sections my scripts and LaTeX files. It uses comments to generate a table of contents (toc).

The output can be copied and pasted at the top of the original file as a comment.


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: