skysight-inc/HackerNews huggingface dataset:
They're interlocking conceptual problems.

First and foremost: Password managers create a huge single point of failure. Every password manager has had security vulnerabilities, and of course, if it's cloud-based, it's far easier to gain access to it. You think password reuse is bad, try a password manager, where all of your passwords are only exactly as secure as your master, your only real password. And this leads you to treat all your accounts similarly, when in fact, many of them are more important than others.

So password managers are a bad solution, and they're a bad solution to a problem that otherwise takes over the password reuse issue: Security exhaustion. When confronted with extreme complication, frustrated users will fall back to something poor to keep themselves sane. (See the common "season + year" password format that constantly defeated password rotation as being a good idea. It met complexity requirements and rotated, but was a terrible password.)

There are passwords that should always be unique, your email, your web hosting, your bank, etc. But rather than waste effort ensuring every account known to mankind has a unique password, you should consider how many of your accounts matter. Your HN account probably doesn't matter. If you don't store your credit card details with a site, your random retailer account probably doesn't matter. (Go ahead, log into my Target account, see what you can do with it that harms me. You'll learn I once bought a Taylor Swift album, and everything else was already contained in public records.)

You are far better off reducing the impact of an account breach affecting your security and privacy than trying to ensure your account on any given website is ironclad. And for most people, I'd recommend a scrap of paper in their wallet with some key passwords over a password manager.

Also, a bonus fun fact: I changed my email address about three years ago, and have yet to receive an HIBP breach notification for it. So while I'm regularly getting breach notifications for loss of passwords from time to time, none of them are tied to my current email address for the past few years. Which is to say, if you do have a handful of reused passwords, and you rotate them every couple of years on whatever accounts you're currently interacting with, even your low security accounts are very unlikely to be breached because the data that gets passed around tends to be fairly old.

I'm not trying to say I'm the definitive expert on online security by any means, but treating the currently accepted practices as the be-all-end-all is bad, and bullying people for disagreeing with them is even worse.
You're assuming nothing like the Nikkei index from 1989 - present will ever happen to a US stock index. I agree with you but stock market growth is not a law of nature. Other tactics (e.g. dollar cost averaging) are also needed to ensure a secure retirement.
Btest: a language agnostic test runner
The Syrian Air Force has multiple Russian fighter jets. All sides have anti air craft capability.

If you weren't so polemic, you would be able to understand that quadcopters are a cost efficient and highly effective form factor.
I think that's what the grandparent commenter meant. Early startups with large growth opportunity used to be abundant on the stock market. But now the burden is too great, so only larger companies can IPO. I even hear phases like "dump it on the public market" - the public market is where you go today after you have milked most of the major opportunity out already.
I've got a hot tub, and I've always thought that a 5-10 minute dip in 105 degrees gave me the benefit of a fever without the caloric expenditure. Plus, it really makes the joints stop aching.
Squashing inclusivity bugs in open source software
I can't comment on raw numbers (because I simply don't have them) but at least for the service I work on, replacing Stubby with gRPC wouldn't really move the needle even if it was 2-3x slower (it might be faster, this is just for illustration) -- we spend our time waiting on IO from other services or crunching numbers in the CPU. Being a Java service, gRPC/Java might well be just as fast or faster than Stubby Java, but I could understand that Stubby C++ has been hyperoptimized over the years vs. gRPC C core which might have a ways to go. By the latest performance dashboard [1, 2], gRPC/Java is leading the pack but gRPC C++ doesn't seem like it's slouching too much either. I seem to remember the C++ impl crushing Java at performance a while back, so I'm sure that'll change in the future.

Honestly though? It'd take a _very_ demanding workload such that your RPC system was the bottleneck (so long as they're within constant factors of each other). There are services like that, but they're the exception and not the norm. Most services don't need to do 100kQPS/task. Even then, at that point you're spending a lot of time on serialization/deserialization, auth, logging, etc.. Your service is more than its communication layer, even if that's important to optimize it's still just a minor constant factor.

The real problem is inertia. There's a lot of code/tools/patterns built up around Stubby and the semantics of Stubby (including all its features which likely haven't been ported to gRPC yet) and that's difficult to overcome.

Our #1 use of gRPC so far I would imagine is at the edge. gRPC is making its way into Android apps since it's pretty trivial for translating proxies to more or less 1:1 convert gRPC to Stubby calls.

[1] https://performance-dot-grpc-testing.appspot.com/explore?das...

[2] https://performance-dot-grpc-testing.appspot.com/explore?das...
/fit/ and /g/ on 4chan
We have large "private" markets today, the sectors financing companies outside of public markets. This is less regulated, and a lot less transparent.

I agree with you that there are trade-offs.

On one hand, making it harder for companies to go public creates a more QA-ed public market and prevents some very questionable fundraising. OTOH, the stricter criteria & controls exclude smaller companies from public markets altogether, either because they don't qualify or don't want the extra hassle, transparency or outside scrutiny.

Public markets are more transparent and more open to the "retail investor." So, there are real reasons to worry about trends towards staying private.

However.... I don't think this is all or mostly about securities regulators or policy. First, wealth is increasingly concentrated. "Retail" investors are not as important a source of finance. Where they do need access (pensions, etc.), this can be had 2nd hand via the complex "corporate structuring" of most large piles of aggregated wealth.

Basically, the problem that public markets centralize and solve is proportionally smaller in this generation than the last. If public markets didn't exist today, "private" alternatives could probably fill most of the void comfortably.

I do think it's time for fresh ideas. I would not object to a more active regulator, but in different ways, than we've seen up to now. How about regulators inventing new types of securities, instead of leaving this to the shadow sector.
Stair Climbing https://www.meetup.com/Stairclimbers-LA/
I think the point is if early-stage growth was still part of the stock market, index funds & the like would all perform better for it. The argument is by removing early-stage growth from the market & conducting it privately, the entire open market as a whole is less lucrative.

Even more simply, just imagine how the market might look different if you could invest in a VC. You don't pick startups, you pick a VC- kind of like picking a fund today.
"But strontium turns out to withstand the heat," ... what a surprising discovery!
Over a 40-year career, assuming 4% real capital growth after inflation and a 3% safe withdrawal rate in retirement, a worker has to invest 25% of their gross income every year to have the same net income in retirement (assuming identical taxation rates).

The median annual household income in the US is around $60k.
True, but frankly it is Git’s model that is broken, or at the very least overcomplicated.

I do not care whether files are staged or not up until the point I actually want to commit, so personally the IntelliJ way of doing it is perfect.
Over 1K LOC I'd want to be using a proper programming language rather than shell scripting, whether it was Windows or Linux.
He didn't say it was a problem.
I have a few handwritten notebooks on CS and it was a mistake. You're right about the improved retention, but I cant search my notes or reorganize them very easily. I've started using cherrytree instead and having the ability to search through years worth of notes with regex is very handy.
Not sure if this is addressed in original paper: The cost of regulatory compliance has massively increased. This is not a judgement of whether those regulations are good or bad for society, just a simple fact that regulations increase the cost to run a business, and large corporations are better able to distribute and manage those costs - sometimes lobbying for additional regulations which become barriers for small companies.
What are other viable peer-to-peer encrypted communication tools? Is Tox the only alive project in this space?
Java/EMCA scripts are extremely far behind and sort of going backwards. Keeping up means slowly re-implementing the entire normal OS stack in a browser. If you really want to keep up you can just develop native applications and use webpages as webpages instead of apps.
> He's still there.

He's not. After everything he went through, he moved to Germany.

Criticizing Ai Weiwei as a person of privilege who's able to get away with things conveniently ignores the harrassment and subjugation by the Chinese authorities that he's endured. It sounds rather like you're condemning him for somehow not suffering enough, in proportion to the severity of his dissidence?
Tokenization of assets
> One big issue is debt payments are counted as an expense

The interest portion only, not principal. This deduction was also limited substantially in the recent tax reform. See:

https://rsmus.com/what-we-do/services/tax/lead-tax/broad-new...
I'm kind of a doubter on this. Because there are less companies does it mean it's actually shrinking or just that the number of companies nationally in shrinking as consolidation and buy outs are rampant. I would like to see this as a percentage of GDP.
Oops indeed you are right! I was mistaken on the GitHub organization names for a second.
Indeed, all us US taxpayers and, more importantly, citizens are complicity with the myriad heinous crimes of our government. They do them in our name, with our money, and in most cases with our vote.
This is a very interesting concept. I especially love the ability to sort-by expertise.

I feel adding more content to the platform (the security topic has just ONE question, for example) would make it more formidable for places like schools and other institutions.
Glad to hear! Feel free to ping me on IRC (nick: lkurusa) anytime you feel stuck or just want to chat. We are happy to help you get going!
The indexes themselves might underperform an index+VC strategy though if they don't have access to high-growth companies that are staying private.

Even if investors shouldn't pick stocks, it might be wise for them to invest in an index of companies that they are now prevented from investing in.
Why doesn't control panel have a roll-back function?
Ironically, one of the core reasons for less IPOs is Sarbanes-Oxley, which was meant to protect retail investors but instead has had the second order effect of reducing the number of IPOs and limiting the available higher growth / higher risk opportunities these same investors.
QE bought a lot of long term junk-ish bonds (full of "AAA housing"), no?

QE was the bridge between the two sides of the chasm, hence it's not visible on the graph. We see a rapid fall, a smooth bottom and a nice rise, but it could have been simply a big crash at the bottom and nothing for a decade.
Tesla Mobile Experience
2x compared to a simpler problem, not compared to the optimum.
This is an extremely interesting and underrepresented story.

I only know of the self-destructive story of the Japanese radical left, the United Red Army, RAF sympathizers, which is depicted in Wakamatsu Kōji's masterpiece "United Red Army". Crazy times.
to be fair, you should mention what North Vietnamese government did AFTER the war: concentration camps, "New Economic Zones" that forced land from South Vietnamese, and the resulting boat people...
The Elon Musk style private founder is not really a new thing. Plenty of companies have been started & run privately, and in Elon's case there is a strong argument for that- it gives the founder more control of the company which can be necessary for the success of a risky business.

Dell's privatizations comes to mind. It was taken private temporarily, not to hoard all the gains, but to allow a single stakeholder to call all the shots and attempt a turnaround. Now it's going public again.
Censorship is evil, regardless of who it is directed against.
I was looking for a comment similar to this before I commented my own. Going public means you give up a ton of control and incur a recurring cost. Being public has its own costs.
No, verwirren comes from the same root, it's not the source of war. Your statement is the etymological equivalent of saying that humans descended from modern chimpanzees.
> I've reread the technical paper just now, and recalled the (internal, with colleagues) discussion I had in the past, from which I had this conclusion - "whole protocol version" is an emergent property of wireguard, not a a designed one

No, it's not merely emergent. The handshake identifier string explicitly has a "v1" in it, and message types have explicit type identifiers.
Passports aren't mandatory in the US so it's common for someone who doesn't travel internationally not to have one. When I went to Asia in the military in the 90s, that was the case for me, but they let me in and out based on my military ID card. I doubt that would have worked if I'd tried to fly to a third country.
>Even if you manage to reduce the hard stuff to 1 mile out of 200, you still need to deal with it.

I think the minimum required to deal with it is to have the car pull over when it identifies a situation it can't handle. Even an onramp to exit car that pulls over if it sees construction will be extremely valuable to anyone routinely doing highway driving.
Avebury is remarkable. You can walk among the stones and touch them. People took some of the stones for building materials. And there's a modern road that cuts through the circle.

https://www.google.co.uk/maps/place/Avebury/@51.4289196,-1.8...
A company that owns theme parks doing research in materials science and robotics? Doesn't look like anything to me.
Self-driving people talk about this because, even if the tech worked, the costs of the hardware involved is currently so prohibitively high (~$100,000s per car) that a taxi model is the only one that makes sense.
Hm, then I do not understand it. "But you have been given information about the door he didn't open" was what made me comment.

If I chose a door before, then something happens that leads to only two doors being left, both those doors have the same probability so I could just choose the same door again.
Maybe the publishing companies are doing something useful in other fields, but in my own field the only reason we bother with Springer is that they have brand recognition among university administrators. Nobody I know sees any value beyond that, and some have even complained that Springer's paid editors have reduced the quality of published articles (at one CRYPTO conference a few years ago, someone pointed out several instances where Springer had introduced spelling errors). At a few IACR members meetings people have questioned the need to bother with Springer, given that the IACR is more than capable of organizing things.

"If these numbers sound totally bogus to you, maybe you should jump in to the publishing business and undercut everybody with superior service?"

I think you misunderstood my point: I think publishing companies are completely obsolete and that we should do away with them. Once upon a time publishing companies were necessary to distribute research papers on a mass scale. Today we have the Internet, which serves that need at far lower cost and also makes it easier to organize things like peer review.

Prior to the printing press there were no scientific journals, and knowledge was spread peer-to-peer and at great expense. Things changed because of what was a new technology at the time. Now we have another new technology that is changing how scientific knowledge is spread, and scientists will have to change accordingly.

"it's going to be a long struggle to get authors...to change their established field-specific workflows."

If that is what keeps the publishing companies relevant, I would say they are a dying industry and that we should hasten their death.
Ask HN: What are some good ways of securing one's home WiFi network?
It allowed them to create more money. Fractional reserve requirement is something like 1/20, no? But usually the capital (bank company equity) requirements (like Basel III) were the harder to meet, so who knows how much new money banks created. (Actually it can be easily looked up, and not much, because inflation did not jump.)

Usually QE allowed banks to roll over mark-to-market assets that turned into garbage into sane cash to satisfy solvency and liquidity requirements. And of course this led to price stability.
I, too, just have Vudu, Netflix and Prime for my video entertainment. The TV's in our house mostly sit dark anymore - my wife and I can each watch a movie or episode on one computer screen while we play a game on the other. I have a third screen that shows the security cam feeds and live weather radar.

"The Expanse" was the best Sci-Fi series I've seen in a long time. Another that I've started that seems good is "Killjoys".
I believe this started as an off-shoot of some discussion on 4chan's /g/ board numerous years ago. I mention this because while it is a really cool project, it's definitely hobbyists working on it, and hobbyists working on security software should definitely give some pause.

Personally, I hope it succeeds in the longer term. We need good, decentralized protocols and software. Decentralization comes with its own costs, and it may never overtake the centralized web. But, protocols like Bittorrent have proven to be super powerful even with their flaws and limitations. To me, it is a no brainer that we need end-to-end encrypted chat, and it would be ideal if it could be peer-to-peer.
I used the ide interaction then moved to the terminal once I realized there are really only a subset of commands you need to know. There are visual things that are still handy that the ide does, but to perform commands, I feel like the terminal is more explicit and you know what subsequent steps you’re taking (relatively, of course).

Same with vim. Too many options. Poor UX. Eg. Why are there two way to scroll down? Just use ctrl-d which helps you retain the context of the code you’re navigating.
From what I understand, artificial ECMs can be more difficult to build in some ways, but if you can figure out how to incorporate the right signaling factors into an artificial collagen matrix, you can avoid a lot of challenging biocompatibility/immune reaponse problems. Also, I believe most cells are differentiated before being seeded onto the scaffold.
> What if animations started at a slightly slower speed, and gradually increased in speed the more you used them?

Ubuntu's Unity does this; it keeps track of the number of times you've minimised a window, and as you minimise windows more, it progressively speeds up the animation (maxing out after 100 times).

Source: https://ubuntuforums.org/showthread.php?t=2204321&p=12923084...
Excuse me for this one, but the entire article is an exaggregated bullshit and complete ignorance of a russian forum culture, language and level of practiceness. While this particular site probably has nothing to do with Raymond’s hackers, it feels like TFA goes for Evil Russians all the ways round.
This. The public mkt used be the source of capital for companies like Facebook. Now it’s all private until most of the growth juice is squeezed out and now the public mkt is a liquidity event for the private investors. If/when they want to...
Idealists like you are why 100 million+ died due to communism in the 20th century.

We've gone from borderline stone-age medical treatment where basic surgery was impossible and simple infections untreatable to where we are today in less than a century. Is everything perfect right now? No, but it's improving steadily and I think with the current advances affordable health care will be possible within the next 10-20 years without government mandating it.
The best nowadays seems to be rspamd (https://rspamd.com/).
My last call was a month ago, this was for a general home page of a site. If what they told me is not true, or what they told you is not true...Google needs to get their employees on the same page. But it appears from some of our experiences that it has helped rankings, which I find annoying and a bit baffling.
Star Trek did have Captain Pike in a wheelchair.
Oh cool. Yeah, I looked around from "Music Composition Constraint Solving/SMT/Z3" stuff and didn't find anything which was surprising. I'll take a look at Rosette too, I've heard of it a couple times but never dug in
It's an interesting idea, but I think it would prove to be equivalent.

As another commenter pointed out, the efficiency of this operation really only matters in higher dimensions.

I bet a generative model would work, though it's tricky enough for me not to be able to think it through on the spot. Something like:

1. Pick a subset of points thus far generated at random.

2. From this subset, pick the point with the furthest distance from the origin.

3. Form a new unit sphere where r is 1-d of the picked point (ie, make a new sphere that is a subset of the parent sphere with a single touching point of the parent sphere).

4. Generate a new point in this subsphere using the normalized vector method.

Not exactly the above, but something like it. The downside of the above approach is that I think it will create a distribution of points that may be unnaturally uniform. It would be interesting to define a set of equations that could benchmark different approaches for how well they compare to the in-cube strategy.
Mari Kita Selamatkan Gempa 8,7 Yang Akan Menimpa Jakarta

Bersama Relawan UN SWISSINDO
Most business ideas aren't rejected for any kind of compact reason. The decisionmaker typically has other things that are higher priority, or they just kinda avoid giving a green light until it's interpreted as a rejection.
You're operating under the assumption that if this is turned on by default in the future, everything will go to CloudFlare.

While CloudFlare is being used for the opt-in study, you have no evidence that they will be used in any on-by-default scenario. Nor do you have any evidence that only a single DoH provider will be used globally.

Perhaps you should monitor Mozilla mailing lists.
Where can I find a £4/year VPS?
> Lowering interest rates decreases inflation, not increases.

This is very much context dependent. But since there's enough brave money chasing after even marginally sane investment opportunities, it's not surprising that the interest rate level is not effective.
Or dell is in the option of insiders under valued and you can take it private at a discount the a few years go ipo again and make $bank.
On the Washington Post? No way!