skysight-inc/HackerNews huggingface dataset:
As one old enough, and went to a school poorly-funded enough, to have run on a cinder track, I'm truly surprised at a mere 1.5% performance loss. Perhaps pro-level tracks in the 50s were better taken care of than our high school track, but I'd guess (and this is from memory quite some time ago) double-digit percentages of loss. When we had a home meet on our cinder track, we just ran for place because the times wouldn't even be in the neighborhood of the worst all-weather (paved/hard-surfaced) track. To run 4 minutes on such a thing with 50s nutrition and training? Unimaginable to me.

Let alone compared to the rubberized-surface of a (what used to be) high-level track. Even the local Redmond high school track is miles better than the best I ran on in the 80s.

As for what the "cinders" were made of, I'm pretty sure ours was made from literal cinders. The output of coal-fired power plants, IIRC. It wasn't brick rubble, that's for sure.
I'd also like to see updates to IMAP, SMTP and FTP to name a few.

I would really like to see each of these disappear to be replaced by new ways of doing things. The whole concept of e-mail needs a new thought. FTP should have already gone the way of the dodo if for nothing else the firewall issues its has.
I use FreeCAD and OpenSCAD (especially "automated" file generation) and like what they stand for but unfortunately neither really compares to a standard CAD program. Maybe I'm too used to the big three CAD software.
> what you're describing isn't a quorum read/write scenario -- what do you mean by "a wins"? Also where is the prepare phase for 2 phrase commit/any consensus algo?

There is no consensus; that requires a leader system. The paper you link appears to require a multi-phase lock; the quorum itself does not guarantee serializability. Explicit preparation via quorum can guarantee serializability (but not strict serializability, I don't think), but cleanup of locks is a big performance problem in practice.

> Replica A shouldn't be reporting an unacknowledged transaction to coordinators -- the write hasn't been quorum acknowledged.

Acknowledged by who? The replicas can't block on the other replicas; they just tell the coordinator when they applied the write.

This is worth a blog post.
Your hypothetical situations are fair, but the author never said that no-one should ever play the short game. They are simply highlighting the (possibly) under-appreciated power of the long-game, and encouraging people to try and favor it more when they can.
What was the previous "computer science" definition of "debug", "virus", "platform", etc. before someone coined it? But as time goes on, if you are part of the profession, when someone starts a conversation about the merits of "serverless", it's not helpful or insightful to keep with the tired response "the code is running on servers not via magic pixie dust".

That response is about as insightful in 2018 as saying "I don't know why they are calling it debugging. Don't they know there are no physical bugs in their code"?
The evolution of the Emacs tooling for Clojure (2014)
Modern TLS is less complicated than SSH, but even if it weren't, running two competing cryptographic transports is more complicated than just running one.

SFTP also provides what is in effect a shell (or, charitably, a remote filesystem), baked into the protocol. For example, SFTP has SETSTAT, which lets you set file attributes. None of what SFTP allows you to do is particularly difficult in HTTP (some of them are made harder by browsers, but that argument doesn't cary any weight since SFTP already requires you to use something other than a browser), but at the same time, none of them need to be baked into a file transfer protocol, either.
>it's just that the current state of the technology does not have the same throughput as other technologies in regards to payment processing.

This makes it an extremely poor currency. It is also an extremely poor distributed linked list with that throughput. If you use the energy resources of a small country just to get 7 transactions per second max recorded in a ledger, you've failed as a system designer.

If the intent was to create a currency, Satoshi failed. If the intent was to create a white elephant, Satoshi succeeded beyond their wildest dreams. If our largest institutions are buying in, we will be collectively saddled with the maintenance of the network for the foreseeable future.
PHP hypertext preprocessor I believe?

PHP3 was the first "real" version of PHP, it came out in 97, and wasn't called personal home page tools then. O'Reilly didn't have a PHP book until 99 if I remember rightly.
Related reading is Cringely’s long history of writing about IBM

Blog:
https://www.cringely.com/tag/ibm/

The Decline and Fall of IBM
https://www.amazon.com/Decline-Fall-IBM-American-Icon/dp/099...
Do you think 4chan also be moderated in this way and users purged for using abusive language? And how do I become the moderator of language? I sure would like to be the gate keeper of acceptable speech.
I would like to differ w.r.t to hardware price front, concurring with my initial point; my Windows use-case was only casual Gaming & an upgrade to Xbox One X has been impressive for my use as a casual frugal gamer.

1. Freesync support over HDMI gave good stutter free gaming experience on a low end Ultrawide PC monitor. (I didn't have to switch between my workstation setup).

2. Hardware is power-efficient & silent; I'm extremely power/noise conscious & specifically select extremely low TDP CPU's for my work. I'm not sure if I would have been able to build a PC of such low power/silent feature-set & get same gaming experience albeit; for the value.

3. Value - A new windows machine for similar gaming experience actually costs more in my country (at-least was at the time of my purchase).

4. OS - I didn't have to deal with the gripes which I have with full-fledged Windows OS; a toned down version only for gaming such as the one on Xbox is turning out to be a good fit.

5. Apps - Youtube on Xbox plays 4K without dropping frames; where as my 7th gen intel core i5 U series CPU couldn't. Youtube on Xbox is actually has less distractions than one on the web (Like comments, Ads).
Probably not bothering a large enterprise who thinks you are cutting into their IP’s profits.
I've yet to discover a 2FA implementation where the TOTP secret was human-sourced.

A language without a secure RNG (e.g. PHP before 7.0, unless you have the right extensions enabled) might be a source of concern, but that's relatively rare.
Bitcoin's Energy Consumption Could Increase Global Temps 2 C by 2033
A Simple Intro to React Hooks
It was determined by design. If the sandbox were trivial to bypass, why have it at all? The sandbox has to meet those conditions or it's a non-starter. And regardless, it would certainly be easier to audit the security of a small component like a sandbox versus the entirety of the Windows Defender application.
Amazing Hstorical photos of Pinsk-city
FDA Grants‘Breakthrough’Status to Psilocybin Mushroom Therapy for TRD Depression
Not sure what you mean by any of that. There's a bit more info here if you're interested in digging deeper:

https://www.bbc.co.uk/news/magazine-27298505
https://www.theactivetimes.com/does-first-four-minute-mile-p...

I can't find the book I was thinking of. I don't think it was "Running: A Global History", but perhaps it was.

(I though this stuff might be interesting for some people. Am I breaking some rule by mentioning it in this context?)
With trivial method() functions, you could speed through that loop a million times in a millisecond.
Making Creepy Music Give You Goose Bumps
Intuition is not an absolute thing. Intuition changes as we learn.
Sometimes we learn things without building an accompanying intuition.
This post is about building a sound intuition for something learned.
I think Twitter's move to 280 characters led to a massive improvement in overall quality -- I rarely find myself bumping into the limit, and I find that threaded tweets can read as well as short articles. A good use of the format can be found in the BBC's "Anatomy of a Killing" investigation into a military killing in Cameroon: https://news.ycombinator.com/item?id=18060709

I enjoy and have learned more from the discussions on HN than on any other platform. But what Twitter lacks in quality it more than makes up for in diversity and quantity. There's no where else I can get into a discussion/argument with anyone from Elon Musk to randos in Indiana and India all in the same thread. As crappy as the discussions can get, I have a hard time imagining how much better any such service could be without making tradeoffs on audience and ease of engagement. Mastodon, for example, seems to have limited scope and scale inextricable in its design. Which is not to say that that makes it a worser service -- just one that is inherently different from Twitter's model.
You'd need Chrome to do some SRV experiments for a few years before proposing it.
Note to self: Read more thoroughly next time...

Mea culpa.
Previous posts of this same article:
https://news.ycombinator.com/item?id=18324359
https://news.ycombinator.com/item?id=18316647
Mind you: to wit, the TOTP RFC defers to the HOTP RFC, and that insists on at least 128 bits or something, so 16 pseudorandom bytes, not 16 ASCII bytes as you said :) But if you grep the article for "10 byte", you'll see the part where it claims that confusion about byte counts of encoded or unencoded secret results in the 10 byte claim.
Meh, so does caloric restriction (even in numerous mammals like rhesus macaques) but it doesn't appear to remotely have a comparable effect in humans.

Even if it did translate to humans ok you might live lonver but what about your mental health, what about your memory, what about your joints, what about your vision?

I'd rather die at 40, 50 or 60 than die at 150 blind as a bat unsure of who I am or where I am 23 hours of the day being pulled around in some sort of neutral buoyancy contraption that keeps me from getting bedsores because my joints are so deteriorated even standing is quite painful.
Well, I see forcing member states to be fiscally responsible (Italy's current expenditures - after removing debt/interest repayments - are curiously forever increasing even under the worst "austerity") something a union should do. The problem is the Euro is not enough to do so.

Devaluation won't fix Italy's problems in the long term, it just shifts them into the future. The devaluations of the lira in the last ~30 years of the last century and the flattening economic growth in the '90s are there to prove it. You cannot keep drugging your economy forever, you'll pay for it in the end.
I'm not a biologist, but wouldn't an immunosuppressant's "life prolonging" effects be negated in a non-petri-dish-environment by bacterial, viral and fungal infections to the recepient?
Cool. I wonder how much effort it would be to make it compatible with PyTorch.
The article says at the bottom that Google Authenticator uses 10-byte secrets. Is that wrong, or is there something about the topology that's different from what's described in the article?
Microsoft Says It Will Sell Pentagon AI and Other Advanced Tech
Machine Learning and CrateDB, Part One
There is a difference between someone convincing people about killing ALL wives vs a particular one.

The first one obviously needs medication, and will be ignored. The second one - depending on the specificity of the threat - a request to take the video down or a police visit.
Watch people here flock approvingly around a PG thinkpiece about the value of "unsayable opinions", though. It's like grappling smoke.
The main reason it’s simple is that someone else wrote the most complex code for it: A TCP stack in the OS. Without it, it would be quite painful. With Http2 one can do the same and rely on other people’s implementations to deal with the complexity. There are in the meantime good implementations for nearly every ecosystem.

What I would E.g. agree upon is that http2 is a pain for exotic systems or E.g. microcontrollers, due to the window size and buffering requirements that the protocol imposes. But those systems are still free to stay with HTTP/1.1 for as long as they like. Nobody is going to remove support for it anytime soon.
NPP’s hypocrisy annoying – Mahama
The first thing that comes to mind after reading this is the story about AI startups using humans to fake results. :)
I feel like services like Primephonic and Idago feel more like I’m offline in a classical music library, no flashy graphics and random pop songs with similar names don’t get returned in search results.
Yeah, there's no reason to believe that the Telegraph would have the exclusive scoop on this. Even in the few sentences shown in the paywall preview, it's clear how thin the sourcing is:

> Founder Jack Dorsey last week admitted at a Twitter event that he was not a fan of the heart-shaped button and that it would be getting rid of it “soon”.

That's the only news or "fact" in the lede -- the content that immediately follows is boilerplate:

> The feature was introduced in 2015 to replace “favourites”, a star-shaped button that allowed people to bookmark tweets to read later. Similar buttons to “like” or show appreciation of people’s status updates, pictures and videos have become a central function of every popular social media service since Facebook introduced them.

> But psychologists have suggested that they may be causing social media addiction.
We should move towards application architectures that allow recording app behavior in a reproducible way.

If every application had the ability to record input, output and state for a given interaction then reproducibility wouldn't be such a huge burden.

Is this really a pipe dream?
It's not confusing on purpose. Coordinating law, economy and movement of people across 28 countries is just fucking complex.
FYI, I tried this with tyranny and while it didn't work with steam play (started but super slow and crashed) it did work nearly at native quality using steam itself running under wine with play4linux.

So with the windows binary for the steam application running under wine, the game worked better than the Linux steam client running wine under the hood. Unclear why, but maybe worth trying both ways if one fails.

I also couldn't figure out how to report this, sadly. If it works better in play4linux steam than directly it seems like it should be straightforward to copy some configuration settings to improve things.
I mean technically this scales all the way up towards starting a business school.
If something like that is an option, just don't ever send any.
You provided some understanding from the article, which is appreciated.

As a friendly reminder, the guidelines state: “Please don't insinuate that someone hasn't read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that."”
This may be a minor nit to pick, but I am finding it harder and harder to manage my TOTP keys.

I have now got 4 different TOTP apps on my phone, variously from my own need (ie grab Google Authenticator to use 2FA for Github) and mandated by clients / companies (use the RSA / Symantec / foobar app and scan this QR code)

It then turns out that every 2FA provider assumes your 2FA app will have only their code on it. So the setup process never uses the label function, and I am left with half a dozen ticking clocks, guessing which one is the right one for this site.

I have even doubled back and re-signed up just to be able to enter the long password manually so I can then enter the label manually.

(I think this is a long winded way of saying i want a TOTP app that allows me to edit a label post-hoc, or i want TOTP apps to force providers to enter a web site name in the QR code creation step)

I am eagerly looking for signs of a FIDO surge, but I am doubtful.
My concern is about relative speed. When going down a hill, everyone is going faster. I'm more worried about unskilled and inexperienced riders blowing past slower riders on the way up the hill.
This claim by mst is patently false.
While it may be true that some people in the Perl community disagree with Reini Urban (AKA rurban, creator of cperl and co-founder of Perl 11), by no means does Reini alone constitute "most" of the Perl 11 team. In fact, Reini is only 1/3 of the co-founding Perl 11 team, which includes Ingy döt Net and myself. At this time, we have a significantly larger number of people involved in various Perl 11 projects, including my own RPerl compiler.
SO LET'S BE CLEAR!
mst does NOT speak for the Perl community in any official way, and his opinion is (in this case) grossly inaccurate.
Agreed. My theory: the market will only sustain a finite amount of revenue by open source software creators. That amount grows 20-30% per year as competing business models collapse and as customers learn the value proposition, but there is a ceiling. Red Hat has been brilliant about identifying the market segments that were ripe for an open source player, and entering those markets (often via acquisition).

There might be room for another Red Hat now that Red Hat will no longer be independent. IBM may have just legitimized Red Hat as a top-tier player.

That is, of course, if IBM still has the clout and capitalization to be considered a top-tier player. 20 years ago, it would have been considered funny to say "IBM is great and all, but they're no Apple". My oh my have times changed.
The diagram at the top of this article is amusing.
SDL+wayland+server side decorations
Understanding Change Detection Strategies in Angular
I agree that this article doesn't really have anything to do with Google Authenticator.

> The article assumes you know the topology of the secret. This is a completely unrealistic assumption for TOTP.

There's at least two kinds of attackers: 1) people trying to break into as many accounts as possible more or less indiscriminately, 2) people trying to break into any of a few very targeted accounts in order to achieve some objective.

Clever indiscriminate attackers will just find the 5-10 server-side TOTP libraries that seem to be used most often, figure out their defaults, and feed those 5-10 default secret topologies into hashcat and they'll be pretty well off.

Clever targeted attackers will do the above and on the off chance that that doesn't work (because their targets aren't using the defaults provided or something), they'll pour resources into both discovering the topology and also just bruteforcing more patterns in hashcat.

Non-clever attackers get lucky sometimes.
It's not clear to me what that even means. Google Authenticator is the client, it doesn't get to pick the secret. I'm guessing it means "people did it wrong for a while and Google Authenticator had to compatible so it allows secrets that are technically not allowed by the RFC"? In which case: still a site bug, not a GA bug :)
Yes, I started off my comment referring to Anthem purchasing Aspire Health the previous commenter referred to which is vertical, but then I abruptly transitioned to talking about horizontal integration. I was trying to convey that because of the horizontal integration, the next step is to go vertical like insurance is doing with providers and PBMs and pharmacies.
> "If you work hard and save, one day you'll be a millionaire"

I've always been surprised how much traction this saying gets. If you look around, not only is it untrue, it's actually the opposite. The hardest, most boring, most unpleasant jobs are generally the lowest paid: custodian, service industry, tellers, cashiers, csr's, etc. The most fun, desirable and easiest jobs are generally the higher paying ones: management, tech, academia, etc. Optimizing life for hard work is misguided and reaps only coincidental benefits. It's more directly about value, moving up the value chain, which generally ends up reducing "hardness".
Tesla Parts Online Parts Catalog Now Available
Are you making 5hat assessment simply because of the glass doors?

Because grocers use glass door freezers that are opened and closed all day long and it doesn't seem to be a problem.
The Turk played against quite a few prominent people known for their intellect. Amongst those willing to take on the Turk were political leaders, e.g. Napoleon.

In today's world I very much doubt our Western political leaders would know the rules of the game well enough to rise to the challenge. They certainly wouldn't have the patience or be queuing up to play.

We might have brilliant computers able to defeat any human opponent at chess, however, I think we lost something along the way by not having leaders able to take on The Turk.
Merkel to Step Down from Party Leadership
Google Authenticator (the app on ios/android) doesn't generate secrets, it consumes secrets that you either scan through a QR code or type in the raw base32. It can use 10-byte secrets if that's the kind you feed it.
I find it works best if 'the long game' has short term appeal --

1. i.e. exercising in a way I find fun (jujitsu, dancing, swimming)
2. plan going out in a way that develops my social skills
3. save money but buy nice things that have low amortized cost (quality clothing, vacations, a computer that works...)
4. I think there's also value in making mistakes
I did the same thing during an internship where tensorboard wasn’t available on our training clusters - instead I just dumped all of the training metrics I needed into a tsv and made a gnuplot ascii graph. Worked brilliantly and took no time to set up.
The Tiny Chips from Chinese Hackers: When Falsifiability Meets Public Perception
I think they're from 2003-2005 System requirements: Pentium 166 or better. Windows 95, 98, ME, 2000, or XP. Standard installer, nothing special. They are on PC cd-rom. Got them used for a bargain, mostly learning type games. Could probably run them in an emulator, for example emulating windows XP in the browser. But you shouldn't need to be a sys-op to install a game. And you don't want to fiddle around if you have inpatient children waiting. My point is that the games specially made for Windows, doesn't work on Windows. Byt they do just work on Linux after installing Wine, most of them.
I had exactly the same problem (exacerbated because Latacora: 4-5 secrets per client x N clients == too many secrets) and I started using the Duo Mobile app because of it (yes, it does Duo push, but it'll also read TOTP).
As in the modern world, it seems the science and the technology are so developed, that the hi-tech products like microchips are so broadly used as there are many of them inside everyone’s cell phone. But the scientific thinking is yet a very unpopular idea, and theories like falsification are heard by very little people. The science things have already arrived in our life, except we haven’t thought deeply about them, we only know that words “the science things” have come.
Where does one draw the line that it's markedly different? Expansions? Major patches? When 8.1 is released are we allowed to emulate 8.0? 8.2 means 8.0 is fair game? Or the day after Wrath of the Lich King and the Burning Crusade?
Are there still people who pronounce linux lie'-nucks?

And Linus Torvalds[1] originally pronounced it with a bit more ee and oo (almost lee-nooks) than he does now[2] (lih'-nucks).

[1] https://youtu.be/uK0xXFZtJ8Q

[2] https://youtu.be/5IfHm6R5le0

And gnu and gnome and Debian and nginx and SQL and GIF and ...

The industry is full of made-up words with non-obvious or disputed pronunciations.
You should be able to use andOTP for all those use cases, it allows you to edit both the label and the icon.
>it's a naive view of money.

The link you provided actually contradicts this statement.
Show HN: XProm – free cross-promotion service
Voice-Controlled Web Visualizations with Vue.js and Machine Learning