skysight-inc/HackerNews huggingface dataset:
That issue was... Insane.

Toxic behaviour, misunderstandings of how BSD works, and no interest in working with people doing the hard work for Palemoon.

They demand their own patched versions get included with their browser... With no consideration that they may not even run on BSD.
Key note: U2F isn't currently supported in the API, CLI or mobile apps. Docs are unclear as to what the fallback 2FA is, if there is one. Also, as before, you can only have one 2FA method configured at a time, so say goodbye to your hardware tokens or TOTP configurations for AWS if you switch to U2F.

EDIT: "Fallback" is to have root account remove your IAM user 2FA. If root account 2FA is lost they have a few alternative verification options like email or phone call. [1]

1: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credenti...
That seems like a plausible argument, but there’s a huge portion of the population that’ll willingly believe any realistic-looking video they see, regardless of the evidence. That could have fatal consequences, e.g. as happened with the Planned Parenthood video in 2015. [0]

[0] https://en.m.wikipedia.org/wiki/Planned_Parenthood_2015_unde...
It may be that the zesty quality of pepper outpaces any taste. I’m curious to put it on something bland now to see if I can taste it, but my original comment was meant to convey that I might be blind to the actual taste of black pepper as a result of its cultural omnipresence.
Where do you miss user-definable attributes from? I'm not aware of any analogous ObjC feature.

The `where` keyword is also used when defining generic functions/types. As the expression level, it used to be used in `if` too, but that syntax was changed such that it no longer uses `where` (but still retains the same power). Where else were you expecting it to be used?

You can do a non-allocating `count(where:)` today with `lazy.filter(where: …).count`.
Google-less AOSP is as bad to Google ad-efforts as completely adblocked iOS, isn't it?

+1 for open source I guess.
Well, one "surprise" is that a new thing called "module stability" was invented. The Swift ABI isn't going to be the ABI-thing you are used to from C (or COM) or JVM or, well ABIs ;-)
And sure, they'll give you an ABI. But whether that is going to be a _stable_ ABI is to be seen. I have some doubts given the complexity of the language, but we'll see how it turns out.
Sure, but most of the people SF / Oakland don't live in Sunset. Saying that SF's weather is dismal just isn't true for the majority who live and work here. Which isn't to say that everyone experiences glorious weather daily, to be sure, but it's pretty nice for most people.
> If it is useful in helping people to not harm themselves and others

this is a big if. the way AA is structured (they don't themselves collect any statistics about efficacy whatsoever) makes it extremely difficult to draw any conclusions about how helpful it is.

as other people have said, AA essentially provides free group therapy, which is likely to be at least slightly helpful. i'm not sure there's any evidence to suggest that the 12 steps or higher power aspect yield any benefits over generic group drug counseling.
I’ve used gaug.es for years. Their API is great and they’re affordable. https://get.gaug.es
While interesting, Firefox Monitor is itself leaking data about my online activities by providing this scan service. Anyone with my email address can get access to various hobbies and even potentially learn where to find more information (and what kind).

While they are not primary leaker, Firefox Monitor providing the information this way is disheartening.

Most people in my network do not know about Have I Been Pwned (the source of the scan data), but they _do_ know about Firefox.

This brand recognition and resulting media impact will spread my bits of personal information wider and into my direct network of contacts.

I'd much prefer a qualification requirement. Make me click a link in an email you send when I ask for information about an email address instead of providing unfettered access to a list of (breached) services the email was used for over the past decade.

I expect better from Mozilla/FF.
Can you have more than one YubiKey associated with an AWS account? Or also setup TOTP, or have a set of backup codes in case you lost your hardware device? Seems kind of dangerous if you can only have one MFA method setup
How does the meshing/peer discovery work? Is connection information encoded in the key?
does Shazam also sync up lyrics? I havent used Shazam in years since I discovered Soundhound. Soundhound has a better ux imo and it also brings up the lyrics for popular songs and they are synced to the music as in they scroll by at the right place like karaoke
No. But you also couldn't have a TOTP + Hardware token previously to U2F introduction [1]. AWS has also never had backup codes to my knowledge, other than saving the secret key used to generate TOTP codes. The "backup" has always been maintaining access to the root account to allow that to reset 2FA as needed.

1: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credenti... ("You can enable one MFA device (of any kind) per root user or IAM user.")
How database indexes really work
I find this annoying. I'd like to use U2F for my AWS accounts, but it seems like the drawbacks are pretty hard to deal with.

With TOTP, you could still use API keys to interact with the API. Is that also true of U2F?
Uggh. That makes it useless if you require mfa for command-line access (using assume-role).
I hope this kills (or helps killing) the 100+ thread count I have always seen in macOS. It surpasses any other thread count from far more important/sophisticated processes.

I'd say that's a waste (if not abuse) of the system's resources and scheduling system.
> I do know what you mean though. Even "fast" Java applications have this vaguely clunky feel to them. I think this is the overhead of starting the JVM, or possibly GC. You see something similar with CPython desktop applications.

Why don’t we see this in say, .NET GUI apps like Paint.net? C# has all the same baggage as a Java runtime, but somehow just works without tuning a crapload of GC settings.

Even Electron apps seem hugely more responsive and useful than anything I’ve touched built with Java GUI frameworks (and I’ve touched a lot over the last 20 years).
It doesn't even have to be realistic, people will believe outrageous claims or lies that conflict current video evidence because it fits a narrative they want to be true.

It seems that trying to actually determine what's true as opposed to just attempting to frame issues in support of your team (or what you already currently believe to be true) is a relatively rare quality.

I guess the silver lining is that while high quality fake videos may make things worse, there's already a pretty deep divide between people who will try and figure out what's true and people who don't. Higher quality fakes may only grab a small percentage of additional people.
Google is a more recognised name than Chrome. Its not the same for Firefox.
As annoying as that is, if I can run U2F on the root account and the few console accounts I have, I'll feel like we've covered thing most likely to be phished. People are unlikely to type API keys into a phishing site.
This is a good one too (archive link since the original seems to have been taken down): https://web.archive.org/web/20171214004829/http://www.nytime...
For anyone interested, Great Basin National Park in Eastern Nevada is a fantastic place to visit for dark skies at night and wonderful trails during the day. They have an annual astronomy festival [1] and on weekends with new moons there are several telescopes set up for public stargazing.

I've been there several times over the years and the dichotomy between lush sky island of the mountains and the seemingly lifeless desert of the Great Basin below never fails to impress.

[1] https://www.nps.gov/grba/planyourvisit/astronomy-festival.ht...
Poor people don't use wood stoves as much anymore. A lot of the more rural areas look about the same. The cars are 30yr newer but still 30yr old.

The captions remind me all the stories you accumulate when you hang around with poor people that are completely unbelievable and unrelatable to more well off people.

A lot of this has to be earlier than the 80s. There's a lot of pictures of blacks with guns in public and semi-public places sprinkled in there. After they passed all sorts of gun control nobody was gonna stand around and let a white man, from Denmark or not, take pictures of them with their piece. There's a lot of pictures that look like they might be from late 60s anti-war protests as well.

I think the photographer didn't like the cold. None of his pictures are in poor areas in northern states in the winter.

Edit: I think most of these pics are late 60s to early 70s but some definitely go up to the late 80s and early 90s
The law isn't there to make the company's job easier.
They mention Yubikey a lot by name in the post. Has anyone tried a U2F device from a different manufacturer?
Sorry I don't follow what's the false narrative?
Shh don't tell them. ;) In Kansas City I rent a _house_ with a large back yard within walking distance from a lot of neat things. I've built a metal working shop in my basement and a forge out back. My rent is 700$ a month. Work the first day of the month pays that if I take a long lunch.

Every SF salary range I see is significantly below what I made last year. I'm not even taking cost of living into consideration here. Just absolute terms. I interviewed at Amazon a few years ago when they were doing some game design stuff and didn't make the cut. I learned that I'm not ambitious enough to make less.

Because midwest tech, I have no debt. In fact, I can crunch for a month, take the money and go buy a few acres to shoot my .50 caliber anti material rifle. Few SF residents will know how expensive it is to buy match 750 grain ammo, or know the pain and suffering of putting a clean hole through an engine block you tore out of a mercury tracer from 1000m away on a tuesday at 11am. It's terrible.

The central limit theorem corroborates the fact that the 500,000 people in KC basically don't exist and it's just one big cornfield. The 800,000 people in San Francisco are burdened with the knowledge that everything east of them til' the coast is flyover country. I feel for them.

If you're in tech move west, definitely.
This presumes the company is frequently in arbitration. That is not frequently the case. With few exceptions, most companies want to (and do) avoid these kinds of disputes. My critique of arbitration is that, under AAA rules, it's not actually much cheaper than just going to court. The only real advantage is that it cuts off appeals, but that cuts both ways. These days I find clients are relatively ambivalent about whether to include arbitration in B2B contracts.
Google might get rid of the controversial automatic login feature in Chrome
Hard to answer that one as Shandong province is the most populous province in China. Its also the third richest, the eastern parts especially so while other parts of Shandong not so much.
They specifically only support YubiCo at the moment, to the point that Chrome asked me if AWS could read my Security Key manufacturer and model when I pressed the button on my 4C Nano.
Golang: Go 2 Error Handling Requirements
That can't last (i.e., not more than one). The main reason being you can lose a key, forget it, have it stolen, break it, etc. Without a second you'll be living on the edge. They're gonna have to support more than one.

I have a Yubikey for my LastPass. I lived with a single key for over a year. I finally got two more. I'm not sure why I made myself so nervous / stressed those 12+ months.
>“They do feel silenced by just the general swirl of what they perceive to be the broader percentage of leanings within the company, and I don’t think that’s fair or right.”

I can't think of any reasonable solution to the problem as I see it: San Francisco is a city full of liberals, Twitter HQ is in San Francisco, therefore Twitter is full of liberals.

I guess Twitter could try to import people from like Utah, but that may not work because they might just end up importing more liberals (tech workers willing to move to SF). Also, it's not necessarily Twitter's job to equalize the political beliefs of a city.

They can't ask "are you liberal or conservative" on an application, it's currently comically illegal and also I'd say horribly unethical and therefore should not be made legal.

Therefore, I think the only solution is the exact one that's in place - if a person at work feels threatened for any reason, they should be allowed to get a resolution, either via HR or the law if need be. That being said, "everyone else has a different political opinion than me" doesn't necessarily seem threatening to me, and I say that as a declared liberal that grew up in the deep South.

I'd be very interested in learning more about why the Twitter employees that presumably reached out to Dorsey feel uncomfortable expressing their opinions.
> in particular not having loops

Well, almost.

> The main object of this patch series is to support verification of eBPF programs with bounded loops. Only bounds derived from JLT (unsigned <) with the taken branch in the loop are supported, but it should be clear how others could be added.

https://lwn.net/Articles/748032/
How has the work on Nebulet's IPC layer progressed? In theory, a kernel-mode wasm interpreter could make IPC as fast as calling a function in a shared library through a vtable. Of course, this has to be mediated properly to avoid letting processes mess with each others' memory!
Oh my sweet summer child.

You don’t need to use one exploit if two that interact are common enough.

How about a nice pointer arithmetic bug in any reasonably common version of the webasm runtime?
How does WebAssembly fix hardware issues? For example, take Rowhammer. I don't see how running your code in a VM fixes Rowhammer; surely there would still be some mapping of data in wasm to RAM, and I don't see why a sufficiently motivated individual couldn't determine and subsequently exploit that mapping.

Or what does WASM do about the concerns that major CPU vendors embed a second co-processor running untrusted, unauditable code with ring -1 access alongside the main CPU?¹

¹which may or may not be active, depending on CPU model and configuration. I've never really fully understood when it is, or isn't, but I think it's somewhat moot.

Further, this assumes the runtime (which is not just the WASM runtime: system calls and other functionality will inevitably need access to the actual, underlying hardware in order to do their job) from being buggy, and since the code is now in ring 0, you get all the consequences of that. (Full, unrestricted access to everything. At least previously, you'd need to find some root exploit to get that.)

(Also, as another poster hints below, since everything is running inside the same protection layer from the CPU's point of view, what prevents you from just running the same attack, in spirit, as Spectre? Only now, there is no protection — everything is ring 0 — so the CPU is "correct" to speculate a read. Sure, the VM will deny it to the code inside the VM, but that didn't matter in the case of Spectre?)
I can't be sure without reading the docs, and I don't care to at the moment TBQH, but it may be possible to remove MFA via API keys for the account.
> Also, as before, you can only have one 2FA method configured at a time, so say goodbye to your hardware tokens or TOTP configurations for AWS if you switch to U2F

AWS makes it super quick and easy to remove lost 2FA devices using the root account, so it doesn't really matter as much as losing your 2FA for a crypto exchange or whatever where it's going to take at least a week or two to reset. Just keep TOTP on the root account, since you shouldn't be logging into that on a regular basis anyway.
不再为变量名发愁
Hey, somebody should build a beowulf cluster of Raspberry PIs running patchfoo and offer some sort of cloud/SaaS for everyone else.
The main thing that I miss when using Qutebrowser is extensions.

On Chrome I rely on 3 extensions: 1Password, uBlock Origin and Vimium. I obviously don't need Vimium on Qutebrowser. I could possibly get by without 1Password if I switched to something like Pass. However, I can't give up uBlock Origin. I run it in "medium mode" (3rd party frames/js blocked by default) and I can't give this up.

I would pay decent money to be able to run uBlock Origin on Qutebrowser.
Is this like zerotier?
That's fair, even C has chars and char arrays. I don't know about strings, since every language has its own idea of what a string is. Even something as simple as an "array" has different behaviors between different languages... some languages only have maps that also act like arrays, some index from 1 rather than 0.

If Webassembly wants to remain as agnostic as possible, I don't think there's much more complexity they could add.
An ABI can't really be "additive". If you add stuff to an ABI, it's a new ABI. Unless you tweak the definition of ABI to your liking (like introducing new concepts as "module stability").

Let's say you have an iOS application written in Swift 5 and you are using AlamoFire. The original promise of an ABI (like the C ABI, the ObjC ABI, COM, JVM, etc) is that AlamoFire could choose to switch to Swift 6 because of the great new async/await features, and you could still use that binary in your Swift 5 application. Because, you know, there is a stable ABI ;-)
If you enhance the ABI, that won't be usually possible. E.g. the Swift 5 program won't understand the "new mangling and calling convention" mentioned in the link. Presumably it could be bridged somehow, or maybe not in a useful way ...
The linked tweet is from the official BBC account, @BBCAfrica. I did Google around for the article page on the BBC's site [0], but submitted the Twitter link because the BBC page isn't an article, but a 10 minute video (which also wasn't playing correctly on my phone). The Twitter thread is fairly easy to read as an article.

[0] https://www.bbc.com/news/av/world-africa-45599973/cameroon-a...
Similar to people thinking they have a policy from the processor rather than their employer, health providers are completely unaware that my employer pays the bills. If the providers don't get paid according to the contract, they'll go after the processor. The processor wants a buffer, insists on escrow or something.

As employees, people are seldom under the delusion that they work for, e.g., ADP. My last company paid me through a processor. My direct deposits showed as coming from the processor. To any bank, it looked as if I was employed by the processor, but the employees knew who the employer was. Should the employer suddenly cease to exist and owe employees anything, employees will go after the employer, not ADP.
I can see that perspective, I too thought the wording was negligent.
Huh? Viruses can affect human genes? How come I never learnt this in biology?
You do realize that generics are coming to go right? Do you post this to every thread about a language with generics?
Each of those three looks half-assed (or half-apped). I guess Shazam would be Apple's first serious Android app, except probably not. :P
Looks like a decentralized version of ZeroTier[1] (No affiliation)

Would be interested in hearing from Adam[2] the trade-offs between fully and partially decentralized architectures

1: https://www.zerotier.com/

2: https://news.ycombinator.com/user?id=api
Obviously I understand the purpose of a COGS analysis to calculate gross margin, but an equally valid way to look at things is that for a mere $1249 you get to use a device that cost billions in R&D in order to develop the technical capability in order to produce it.

How much would it cost to produce exactly one iPhone XS Max? But through the magic of economy of scale, I get to pay a mere $1,249 and appreciate the full benefit.

Arguably even the benefits of having the device increase with scale, due to network effects.

The same thought process applied to that 60” OLED TV or the latest Android phone. It’s just worth stepping back and appreciating the incredible things we get to play with for such a relatively small cost just because a billion other people are also stepping up to buy one too.
Διπλά και γκολ μας πληρώνουν την Τετάρτη
I recently did a lot of interviewing and found the levels.fyi numbers very accurate to the offers / potential offers I was seeing.
Do you have evidence for this?

What I've seen is that typically a banned conservative will do something like target someone without the resources to defend themselves (for example, Alex Jones calling children that are victims of a mass shooting "crisis actors"), whereas hordes of liberal citizens voicing their distaste of Trump is just How It Be To Be President.

I would love to see evidence contrary. I report violent comments no matter the target and Twitter is good about sending a message back about action taken, and I've yet to notice a trend.
Feature request for way, way down the line: auto-integrating product work into daily/weekly standup meeting invites.

If I have committed something, updated a ticket, run a deployment, resolved a pagerduty issue, moved a work task from Planning to Doing, etc, then automate retrieving this work log and pre-populate it in the meeting invite. All members of the meeting can see the work and can ask about it if they need to. The individual then doesn't need to state what work they did, but only mention their blockers.

I believe this would benefit virtually any group with a stand-up meeting. It's a lot of integration work, though. Might already exist, I'm not sure.
It's frustrating that they only allow a single key. I use 4 different hardware U2F devices. Google, GitHub, Dropbox, and every other service on which I've set up U2F have always allowed me to attach all of my security keys. It seems like AWS is about 3 years behind on this stuff.
Being the best in the market isn’t an antitrust issue.

There isn’t any credible alternative to Google because they’re head and shoulders above everyone else.

There are other search engines, they just don’t measure up.
The Poles set up a cryptography program for mathematics students at Poznań University in 1929[1]. I believe Marian Rejewski, Henryk Zygalski and Jerzy Różycki we're all associated with that program.

[1]: https://en.m.wikipedia.org/wiki/Zdzis%C5%82aw_Krygowski
Rejected Then Recruited: Our Journey into Y Combinator
It is my understanding that this is pretty established law (arbitration clauses). But in any case if it isn't, then I think a less pejorative headline would be "Uber Ruling Strengthens Arbitration Clauses" and not "Uber Forces ...."
Professors Around the World Beg Ontario to Revive Basic Income Pilot
The Scion xB is one of the best vehicles I have ever owned. I traded in my 2001 Jetta VR6 (mystifying mass airflow sensor issues VW could never fix for more than a couple weeks) for an xB in 2004. It had its flaws, but for a daily driver, I think you'd be hard pressed to find a better car than those first generation xBs. Mine is currently owned by my parents and has 300K+ and the only major service has been a new clutch at 175K.
Nah, you tried to set up a straw man with the "So you are saying {{straw man}}" to knock it down.

I was parodying you with a reference to "lobster" logic.

And giving counter-examples is not poisoning the well, unless you personally have a history with violating child pornography laws that I'm not aware of.

I'm going to be charitable and think you're trolling here, not hilariously lacking self-awareness.
I guess they changed the algorithm or tweaked its parameters.

One specific thing I recall is that more false negatives started popping up - which is bad over UX (vs. no matches at all).

The change was (perceivedly) strong enough for me to stopping using Shazam.