skysight-inc/HackerNews huggingface dataset:
I read it. He doesn't. Read it again.

> To prevent attackers from knowing whether an account exists or not your signup must only take an email address and provide no feedback in the UI if the sign up succeeded or not. Instead the user would receive an email saying they’re signed up. The only way an attacker would know if an account exists is if they had access to the target’s email.

> Barring that, “username or password incorrect” is just bullshit.

What he means is the only way it would make sense is if and only if a website's account registration page responding with something like:

"You tried to sign up for me@example.com. If that account didn't already exist, a registration email has been sent to it."

But nobody does that! Registration pages just say "Sorry that email is already in use", which is what makes this whole thing bullshit.
If the username exists, how does the app know whether the user typed the wrong username or password?
Dropbox uses encryption.
Belarus to create a regulatory environment for circulation of cryptocurrencies
Given that your counter-argument is a trivially obvious one, a little further thought would have led to the conclusion that the StrongTowns bloggers might have thought of it too.

Since you just read until you thought of an objection to their thesis & then stopped, you failed to find the articles where they do the lifetime cost analysis over a whole town (i.e., both "suburban" and "business" districts) and find that this pattern of development means that the profits from the high tax business districts fail to make up for the costs from exurban / US style suburban development.

Have a trawl through the Best-Of lists. In particular: https://www.strongtowns.org/journal/2017/12/8/the-real-reaso... stands out.
So, as per the author, sites should first check if the user exists and then check the password? Why? What if the username belongs to someone else?
How we use big data can reinforce our worst biases, or help fix them
And we silly humans in any other country think we are free ??

What a joke! More facebook and google ghettos we need.
Signup and login should behave the same, and provide no information wether the email is registered or not. And username should be treated as public.

So for login: always say "email or password is incorrect".

And for register: as he said, always say "we sent you an email to verify your email".
I wasn't using their product (found the data wasn't that great), but I really like their daily newsletter - I hope it'll find a new home.
That's correct. They were generated from the genesis account and then distributed through a faucet that ran for a long time. I'm distributing because I wanted to show the top poster that there are cryptocurrencies that show a lot of promise in addressing the problems s/he mentioned. Also, I'm sending very small amounts of money ($USD 5 * 0.001), so it has no impact to me financially, my time is more valuable. However, I really like the technology and would like to see it progress (I'm a cryptocurrency enthusiast).
> When it comes to Bitcoin, I think of Linux as an analogy.

I've read Bitcoin is like email, Bitcoin is like TCP/IP, Bitcoin is like the entire Internet. Now I've read Bitcoin is like Linux.

At one time few people had heard of (random thing from thin air) New Kids On The Block.

Some didn't understand the new fangled (boy band) concept, some thought existing bands/music were good enough, some thought they'll take over the world, and some just thought they could get rich off it all before it collapsed.

Bitcoin is something that happened to catch on (entirely, by design, due to profit motive), which is why it's superficially similar to other things that happened to catch on. (Even things that catch on because they're actually useful, and not just a potential route to get rich quick without any effort.)

Once upon a time Denmark, like Bitcoin, didn't exist.

Danes (like Bitcoiners) were a strange bunch, famed and feared for their involvement in crime to make money. Slowly their influence started to spread, however, despite - but in some ways because of - their criminal behaviour.

Many legends were created... Ragnar Lothbrok, Ivar the Boneless, Magical Tux and Free Ross.

Then along came Christianity[1] (Coinbase/Winklevii) which provided more legitimacy with other, less beardy, groups. The true believers didn't like this, of course, but most people recognised the social and economic benefits of selling out everything they were supposedly all about.

The similarities end there, sadly, because today Bitcoin consumes even more power than Denmark. A fact which is completely batshit insane, but since Bitcoin hype and hysteria is even more insane, and increasing with every $1000 price pump, nobody cares.

Serious question (which will go largely unanswered in favour of turning this text white) for people who seriously think Bitcoin ranks in importance/significance with email/Internet/Linux/Denmark:

Now in its tenth year[2], what has Bitcoin actually achieved, other than a sickening energy waste and crazy price fluctuations and speculation?

[1] Which is also Bitcoin: https://twitter.com/larslfe/status/909192006362005506

[2] See creation dates for bitcoin.com/net/org.
The main problem is not the thermal limiting - it's the tablet battery draining while being connected to the AC, which is counterintuitive and undesirable.
sent :)

https://raiblocks.net/block/index.php?h=806B96AD9057EC3A7525...
Not just bitcoin though is it. There is more red on gdax than santa outfit
There are two kinds of software engineers.

1. The cautious engineer who joined a big corporation immediately after finishing university and who might change companies maybe once or twice in their whole careers. They never take risks, never get fired, achieve steady career progress, steady bonus every year, steady pay raises, steady promotions every couple of years, can spend hours learning algorithms, never having to spend any time to strategize their next negotiation or career move...

2. The risk-taking engineer who joined a startup straight after/before/during university and who went through companies like toilet paper for the first 10 years. Always directly exposed to market forces, ready to jump ship at any time; always keeping one eye on the lifeboat. Always looking for a big opportunity, willing to network hard, change countries, get exposure; do everything they can to stay independent of anyone else and completely self-reliant.

After finishing university, I started with path #2 but was exhausted after the first startup I joined failed so decided to try #1; unfortunately my past experience had made the corporate environment way too depressing for me. I just couldn't relate to the other employees there so I had to go back to path #2. It was difficult and painful but I got to build up my character and my confidence.
The Ursids Meteor Shower and More That Will Light Up Night Skies
Oh man, Freedom Fighters was great. I wish we had a sequel but IO Interactive never seemed interested in revisiting that IP.
Sure but everyone does 1, and not 2, so it's bullshit. Also what is a bigger annoyance? People can slowly use emails to look up if you have an account on a website, or it being a pain in the arse to log in?

Except on some sites, e.g. dating websites, this is a stupid theoretical security gain that just pisses everyone off. Like requiring numbers in passwords (basically everyone adds a 1 at the end) or making you change passwords frequently.
I could totally feel this blog post, not just read it.
Raiblocks is a minerless currency. All coins that exist and will ever exist were created in what is called the "genesis account". These were later freely given via faucet for a period of time until the supply was exhausted. If you'd like to learn more I recommend going to the website: https://raiblocks.net/ and reading the whitepaper. Also checking out the founder's recent AMA at the subreddit could also provide a lot of valuable info!
People tend to underestimate the age of working knowledge a lot.

Shazam wasn't an original invention, similar things were implemented in hardware in the 80s, and original research in this area done even much earlier.

Sure, though, as you go back in time, the probability that the environment you could get exposed to that knowledge in overlaps with academic circles probably increases.
To hype bitcoin so that more people buy into it so that someone else can hold the bag.
I wonder if reporting on Bitcoin's random walk is really newsworthy these days.
sent :)

https://raiblocks.net/block/index.php?h=DC5DAFDDDF7F27992FCD...
That is a cool visualisation! One thing is that the page is in spanish (thanks google translate), I would assume not everyone will understand it.
A good predictor if the latest bubble has burst is if the suicide hotline number is a sticky on the bitcoin subreddit.

Currently it isn't there so we have a while yet.
Except that when you are signing up, unless the service is using some draconian password formatting rules, any "email or password is incorrect" error can be inferred as the email is incorrect, and if the email format is correct, it's must likely because the email was taken.

"email or password is incorrect" is bullshit is right.
sent :)

https://raiblocks.net/block/index.php?h=9D679ED1277C5DD6B29E...
Is it? I thought it was about sites that say "Username or password is wrong" when they know the username does exist! After all, the author is using his own, correct, username in the examples!
Because some businesses generate very large volumes of documents that have to be stored
You should clarify what part of the problem is solved.

Under individual 1099 wage treatment in the US, the healthcare cost shift is generally not in favor of the employees in older cohorts. If you are claiming to use actual individual freelance-style contributors engaging with clients as 1099, then you should look at the pricing and coverage constraints of individual healthcare plans in the US for older employees.

1099 corp-to-corp is done all the time of course, but that simply shuffles around the pieces on the board. The cost only appears to get magicked away in most 1099-oriented arrangements because the vast majority of 1099 individuals I've worked alongside and gotten to know have compromised pretty extensively on their benefit plans, compared to most conventional big group-based benefit plans. In the US, volume discounts don't cover just price, but all sorts of other transaction factors that simply do not show up in economic statistics.

There are some individuals out there who are comfortable doing 1099 work, while meeting or exceeding benefits plans of big groups, and I've done it myself in the past. It takes a lot of discernment, judgement, and work to navigate the thicket of options and constantly-changing regulatory landscape from many different jurisdictions. It's easy to wave the magic wand of the free market and say make everyone a free agent, but in reality it's not for everyone, and I would not promote it as a general policy for the general population. Ronald Coase's work on the economic effects of transaction costs at individual and firm level illuminates some rationales behind why encouraging individual 1099 transactions would not produce optimal results.
Thanks! As a noob, this will be a great learning resource on local storage.
This is true for existing user with wrong password, but that message would be wrong if the user doesn't exist. In this case, the error clearly would be the username, not the combination user+pass.
No taxes (until 2023) on mining, selling/buying tokens. Here are details:

• The rights of physical and legal entities in terms of token circulation are defined. Legal entities are
entitled to possess tokens, create and list their own tokens through HTP residents; buy, exchange
tokens and perform other operations using tokens only through the cryptocurrency exchanges and
cryptocurrency exchange operators.
• Individuals are entitled to possess tokens; perform mining; exchange tokens, buy and sell them for
Belarusian rubles, foreign currency, e-money, as well as present and bequeath tokens. The mining
activity of individuals, tokens purchasing and sale shall not be considered entrepreneurial activity.
• Tokens and revenues from operations with them shall not be subject to declaration by the
individuals.
• Turnovers, profits (income, proceeds) from various operations with tokens are not recognised as
taxable items until January 2023.
How many people on the Shazam team needed to come up with the fourier analysis? How big was the Shazam team? What did the rest of them do?

This is my problem with only hiring comp-sci to build software and get stuff done. They all want to hire the John Carmacks of the world, but Doom would have never happened without John Romero. It's a waste of a PhD to spend it porting low level driver software from one architecture to another, but that type of work needs to be done, even by companies like Google.
> With your 'throw it all in a box' system, you have a high barrier to finding documents in the future and this discourages you from doing so.

In fifteen years of keeping my mail I maybe had once or twice to go back in time more than a month or two ago.
I also imagine that it's certainly possible that at another time he may have been hired at a large behemoth like Google for another role, but by writing such a public letter, hiring him would be kind of silly now; the atmosphere is kind of poisoned.

Luckily Apple decided to hire him.
If only arena isn't payed with gold too.
This sounds very interesting. Which database is it - mongoDB, mySQL,...? It is not very clear.
Exactly. You got it.
facebook and cia, is same organization.
Haha, that's cool with me.
A business model is by definition "bad" if it doesn't make sustainable profits. Of course you have to allow for time, but Twitter isn't a startup.
I'm not affiliated to the cryptocurrency, I hold a number of raiblocks which I bought some time ago. I really like the technology and am a cryptocurrency enthusiast, so I'm giving a little bit freely to let people see that there are interesting projects in the cryptosphere that show promise and that might be really revolutionary.

Anyway I know a thing or two about the technology, so if you have questions let me know and I'll do my best to answer or point you in the direction where I think you'll most likely find the answer :).
From my perspective, a strong and honest leader that learns from their mistakes, listens and considers advice, but importantly can stay on top of the finances. Basically the opposite of my last boss.
sent :)

https://raiblocks.net/block/index.php?h=48A89FFF86154A0E4B7B...
Hahaa, this is funny, cool!
sent :)

https://raiblocks.net/block/index.php?h=98D8A6A0E5119E7A140B...
I have an argument for "username or password is incorrect" messages: it's possible that the password is correct, username exists but isn't the intended one. Then "password is incorrect" message would be lying, as the issue is actually with a username.
Of course, it's from Greek. I'm not saying it should be used to mean cryptography, nobody's claiming that.
I'm just saying that throwing it around as a shortened version of cryptocurrency is the most ill-conceived usage you could possibly make of it. Both from an etymological and lexical standpoint.
sent :)

https://raiblocks.net/block/index.php?h=A5A68D3FD07F339E8378...
It's too bad he can't joke about sending a scientific probe to Mars and then doing it.
> Try throwing Putin into prison.

You can't thrown Putin in prison because he's not a resident of a country you control.

Likewise, you can't steal his money, even under the current system.

Can we present the argument without appealing to a fear of the evil Russian boogeymen?
You'd be surprised how useful having all of your documents digitally available can be.

I've been doing this for years already (albeit using Google Drive - yes, some people dont trust Google - I understand that, but doesn't bother me) and these are some of the common use-cases where I find it really useful:

* Tax returns. This alone makes it worthwhile.

* Call-centers. You'll often have the reference/account number/etc you need quicker than the operator at the other end can look them up.

* Travelling. Pulling up travel insurance etc details from your phone when you're stranded in an airport is so useful.

* The inevitable "we need to see a copy if your birth certificate/driving license/passport/last 3 months of bank statements/bill from a utility to validate your identity" requests. Either email the PDF directly or print out and go - no box rumaging.

* Health Records. Looking up the name of those pills you were prescribed 18 months ago, or when you had vaccinations etc.

* Those moments when you're convinced you've already had your car serviced/paid that bill/renewed the warranty on your washing machine/dealt with something but cant quite remember. Tap-tap yeah there is the confirmation from the appliance manufacturer saying I am still covered by warranty - emailed it to the support people. Ball is now in their court. Job done - whats next on my to-do list?

It comes up surprisingly often. Sure, not every single day, but certainly enough to justify the very very very small time investment of scanning it and uploading the PDFs Google Drive (I am sure there are alternatives that work just as well). When you retrieve something, the time-savings totally make it worthwhile.

As someone else has said elsewhere, often when you need these documents it is a stressful situation - a death, an illness, an accident, something "wrong" going on financially etc. You dont want to waste time frantically digging through dusty boxes of paperwork trying to find something when you can just tap a few keys and get it in seconds with zero hassle.

I highly recommend it.

I "bootstrapped" my archive by heading into the office at the weekend and using the huge printers to scan in boxes full of old paper documents to PDFs. Now I top-up with a home scanner attached to my LAN - if you're looking to buy a scanner for home, make sure you get one with an automatic document feeder that can do both sides at once so you can just chuck the papers in and hit go, then collect the PDFs from your network drive.
What if a username does exists, but isn't my username.

Imagine both 'dave' and 'davr' have an account. I'm 'dave', but I accidentally type 'davr' and my correct password. Now the site will tell me that my password is wrong. So I retype and retype my password over and over again and still can't log in, because the problem isn't the password like the error message says, but rather that I typed the wrong my username.
They also need a decent database to find the song from a five second sample occurring anywhere in the whole up to say 8 minute song, for their whole song library
Have you taken a look at nats? (https://nats.io/)

Otherwise, the cloud native landscape has some similar projects listed in the same category as kafka: https://github.com/cncf/landscape
sent :)

https://raiblocks.net/block/index.php?h=54B9B7AF1311CD9BDB17...
“A Field of Strangeness”: Anna Kavan’s “Ice” and the Merits of World-Blocking
Scheduling in Kubernetes, Part 2: Pod Affinity – Koki – Medium
sent :)

https://raiblocks.net/block/index.php?h=6CFAB78CCD8315390E5A...
Yeah, they relaxed one of the criterion’s for Leary solutions (the energy inequality) they’ve proved that these solutions are energetically unstable, and that doesn’t strike me as very profound (I need to go read the paper though, I haven’t had time yet).

Just mentioning at the bottom of the article “yeah now we are going to see if the same thing applies to proper Leary solutions, we think it does” means close to nothing, honestly.

And even if it does, the article’s author is right when he remarks that this can be seen entirely as a warning against using approximations that are too broad or coarse.

I’ll add that I find it funny that nowhere in the article (that I can see, but I am reading on mobile Safari, so maybe...) is the Navier-Stokes partial differential equation even displayed, and the relationships it defines are not explained (other than some waffle about ‘derivatives’).
Many of these stories are ginned up a bit, as they are PR for civil engineer societies.

My wife worked for a water utility in an old city. Outside her bosses office was a lined wooden pipe that had been in place since 1680 or so, and was removed during a construction project.

Unless the pipes are riveted, they have a surprisingly long service life, and techniques exist to spot at risk pipes and even make some repairs without digging.
>Our ability to produce material goods (even in the supposedly hollowed out US manufacturing sector) really is greater than at any time in history

Can you provide a source ?

The only thing I could find is this

>The Institute for Supply Management said Friday that its manufacturing index slipped to 58.2 last month from 58.7 in October. Anything above 50 signals that U.S. factories are expanding. American manufacturing is on a 15-month winning streak.

Nothing on it being the greatest time in history, I believe that was during and after the 2nd world war, but I could be wrong.
If you think AI is terrifying wait until it has a quantum computer brain
Precisely this. The title of this article should probably be renamed because it's looking at specific examples where the whole process (ie login + registration flows) hasn't been implemented properly.
The title is "bullshit". The real problem is that they leak the information they try not to leak anyway, on a different form. This is a common, but not universal, problem.

It's not OK to leak information, even if that information is maybe leaked somewhere else already.
Edge case: For services which uses an additional account name/alias (separate from email), where you can login with either account name or email; An attacker could find a target account name through signup, using an email the attacker owns.
Optimizing for the common case seems prudent here.
We built landing page for Dyframe.com using its own technology
"password is incorrect" would be technically correct, perhaps not as helpful as it could be, but certainly not "lying".
Can you please give an example? I don't think I understand what you're saying.
Either you or I misunderstood GP. I understood it as if (as long as any email format validation allows the address) the service only outputs "sent you an email for confirmation", even if the email is registered. The attacker wouldn't know if it was the first time or the 50th time that message had been shown, as it's always the same.
There is some overlap with the IPOL journal : http://www.ipol.im/

It is an image processing journal where the source code of the articles is peer-reviewed, and all the algorithms can be tested online.
True.

For this I would recommend adding the mention "your username will be publicly visible" during the registration process.
As you intuit, there is no reason to presume that Navier-Stokes would be unreliable at macro scales relevant to meteorology, simply because it is so thoroughly tested in experimental settings and to such sensitivities that it is known that all relevant factors are accounted for.

(Of course, why would one presume that if it is inaccurate at planetary scales, it biases observations towards the climate change narrative? It's just the typical “God of the gaps” kind argument.)
If you are really interested, somebody has bothered to make a special-relativity & quantum-indeterminacy compatible formulation of Navier-Stokes suitable for calculating shockwaves in extremely dense mediums such as the neutronium neutron stars are thought to be made of (where the speed of sound is comparable to the speed of light in a vacuum, hence the relativity, and the matter is degenerate and in states of superposition, hence the quantum indeterminacy). I don’t have the reference right with me at the moment (mainly because I just looked at it and though “oh horror!” and averted my eyes) but I know where and how to dig it up for you if you want.

Of course... for obvious reasons it hasn't been experimentally verified...

For the record: I also saw it coded in FORTRAN. Yeah. It's like catching grandma in starkers.