skysight-inc/HackerNews huggingface dataset:
Atlassian does this multi page login and it's shit. Google too though as least their shitty implementation works with password managers without having to fill in the info multiple times. There's a simple rule one can follow: if it doesn't work with a password manager, the login is completely broken and your engineers and product team are morons. If it kinda works with a password manager, the above still applies. Login has been a solved problem for awhile so messing with it just shows what little care the website has for its customers and how out of touch it is with them and the rest of the internet. Such websites should be ashamed of themselves for not getting the simplest part right. I'm looking at you jira. After login it just gets worse and worse.
Don't: Force users to come up with a username separate from their email if they aren't going to be interacting with others under that name. (eg. Hacker News this is OK. Logging into my bank account is not.)

Do: If the username is always the users email, call the field "email" and not "username". (Looking at you, ComEd)
>It seems unlikely to me that the DNS client has the sophistication to know that it's not Google's 8.8.8.8 that it's talking to

I don't know much about DNS but based on what I do know I would think this to be trivial(?). All you'd need to do is make a request for a domain that doesn't exist. Something like "is-this-google-dns-im-connecting-with.google" or <salted hash of current timestamp>.com. Google DNS could be coded to respond accordingly.

So no DNS response, or not the response you were expecting = not Google DNS.
Strongly disagree. The spectrum of transmission is regulated and parcelled out by the government, and it could be used differently. Indeed it is, with whitespace wifi devices. The battle over how many empty adjacent channels should be required for these devices is real, and ongoing. Take away the regulation and TV broadcasters lose. People who have televisions but no working knowledge of computers lose (if spending less time on the TV is a lose). People broadcasting to each other bi-directionally, over longer distances and through thicker obstacles than the current wifi bands allow, win hugely. The media companies are intertwined with the government, sure, but this is fundamentally a government problem.
Greg Kroah-Hartman's Affidavit in the Geniatech vs. McHardy (Linux Kernel 2018)
Mind-boggling, considering that they started as more or less a barter shop for fake Facebook likes.
Just so I'm following properly, do you mean something like how you have {React | React Native | React VR} + a cornucopia of community-supplied custom components? imo it's a system that works well - you have a common system + easily extensible custom bits.

(take my experience with a grain of salt, I've only used React on side-projects, never anything complicated or that I was forced to develop on because of work, and never ran into any perf issues)
Not a coffee shop, but certainly a hotel room, to cast some entertainment on the TV rather than rely on a laptop.
Historically, one approach has been independent component analysis (https://en.wikipedia.org/wiki/Independent_component_analysis).
It's inevitable that tax subsidies, if available, will go to companies that can negotiate the best for them. Large enterprises have more lobbying power, and more ability to play cities against each other. So I think there's little hope of city officials finding the best corporate citizens to subsidize.
Usually ‘the app’ is just contactless payment via Apple Pay or Google Pay.
There's a trick you can do to isolate vocals from some music by essentially flipping one of the stereo channels and combining their waveforms. All the stereo data cancels out and you're left with anything not panned hard center. Recombine that with the original stereo file converted to mono and you then get the vocals, usually a bunch of cruft from the reverb, and anything else panned hard center
I suppose it could be argued that the DOM might change on a page, but the text content is less likely to. We want deep links to the text content, not the DOM element.
You can create chatbot in your own language in minutes
You can check https://www.smatbot.com/blog/how-to-create-a-multi-language-chatbot/
>Using the open source tool IPlocation.net, "I learned that the IP address resides in the Slovak Republic," Madrone writes. "Using other open source tools, I confirmed that the geo-location was the Slovak Republic. Also, I confirmed that this IP address is reserved for that provider based in the Slovak Republic. Based upon this investigation, as well as my training and experience, the complaint sent to Cloudflare regarding CodeIsFreeSpeech.com did not originate from the New Jersey Office of Attorney General or its Division of Criminal Justice."

Does "open source" mean something completely different in this context? iplocation.net doesn't seem to be remotely open source...
https://www.gfmag.com/global-data/economic-data/worlds-riche...

Central African Republic, $712, US average $62,000.

There's a 100x disparity in averages. You don't get shared yacht enthusiast clubs at $62,000/year. High earners distort this a lot, and if you actually save a large percentage of your income in two-earner, high-earning households, you will accumulate a lot of wealth. Should they not be able to save it? Not be able to spend it after they've saved it?

Hence the "crabs in a bucket" mentality. It's OK for me to be way richer than others, but nobody can be way richer than me.
The three most important things in Chinese real-estate, with help from Google Translate:

1. 地点 dìdiǎn (location)

2. 位置 wèizhì (location)

3. 现场 xiànchǎng (location)

The empty units are not where the people want to be (yet). I think maybe the builders were counting on some people wanting a cheaper alternative (but not too much cheaper!) to skyrocketing prices in the places where people already are.

And China has decided it would rather let speculators buy up units and let them remain vacant, than have them still owned by a near-bankrupt developer, and either still vacant or facing pressures by existing residents to keep prices high on the unsold units.
Someone has a reading comprehension problem. Here, let me help you:

"I think it is just as foolish to assume that humans are more deserving, more important, and more valuable than any other life simply because you are a part of that group as it is to assume the same about your race."

> Humans are more valuable because we have more power.

And Nazis were more valuable than Poles for the same reason?

There are reasonable arguments to be made about why we should consider human life more valuable than other life, but you're not making them.
Much of those houses in China are not built in desirable cities but in ghost town that have little to no people living in them. There aren't million of chronically vacant units in Shenzhen. One could just as easily point to vacant houses outside Detroit.

Housing isn't just about the number of houses in a given country. It's about having available housing where the demand is growing.
Before the law changed discounts for cash were pretty common especially at gas stations. In my part of the world (Fla) I don't see them anymore, anywhere.
Can you elaborate? Are there literal legal rights that are only afforded to people who own property?
When Brad Pitt Tried to Save the Lower Ninth Ward
An Open Letter to Game Developers from America's Largest Labor Organization
Pricing should be much more sane than Delphi's current model - Xojo is $99 for one desktop platform (without SQL plugins), or $299 for cross-compiling to all desktop platforms.

Ignore the "per year" pricing - you can choose not to auto renew & keep using the version you've purchased. You only need to renew if you want IDE / compiler updates (they typically release 4 updates a year).
What's the benefit of doing it that way?
Small banks are quietly enabling the tech takeover of the financial industry
When you put it like that, suddenly it starts to make a lot more sense to me why Google seemingly relinquishes projects to their graveyard; they probably have a lot of competitors for each abandoned project that do the same thing as well, or better. It would be nice if Google had a default policy of allowing exports of stored data to said competitors, though..
You confuse Einstein model of physics which is powerful and help us count and build things with what actually the reality is. We use many different models in math or programming without believing they are reality.
Rugby En Direct: Actualité, Matchs Et Transferts Rugby Sur Rugbyrama
https://qiita.com/Wanted/items/7f86279e02cdb8b499d8

https://qiita.com/Wanted/items/8313e660bcf65c0f5756

https://qiita.com/Live24hd/items/a6f928675302cb80a077

https://qiita.com/gundaRj/items/0b5910c90df28f7b5a92

https://qiita.com/SmKnoBolod/items/d0dcd234288297f47730

https://qiita.com/Lalu_Mama/items/50567a9eaa2ffb9b3448

https://qiita.com/BacchuVai/items/22eec9203053503253be

https://qiita.com/HaydarKaku/items/f33aec85234a239f013e
Similar subject areas to HN:

https://www.256kilobytes.com/

Only posts removed are spam and felonies.
The alternative to cash is not necessarily credit. It can also be debit. Which means I don’t have to line Visa’s or MC’s pockets for it. My bank is already getting its cut for offering me a form of electronic cheque.

So the fact that cash incurs a cost (it does, especially for the merchant) is not the scarecrow argument that would justify Visa or MC boosting fees or even using a credit card.
I guess I jumped the gun a bit in my comment above.

In terms of the possibility of exploit, as I understand there isn't at this point any isolation between processes.

In terms of the ease of exploit, being able to run untrusted code in the same process as the victim helps quite a bit. Otherwise, you have to find a gadget (i.e. qualifying bounds check for v1, indirect branch for v2) in the victim process that you can exploit from the attacker process. Possible, but quite a bit harder than making your own gadget.

This all ignores the forward looking reasons process isolation is a good idea. I can't keep track of the latest mitigations in Linux, but they pretty much all will only help between processes by flushing various hardware data structures. And hopefully someday we will have hardware actually designed to restore the guarantees of isolation between processes.

I'm pretty sure this is accurate, but I'm just a random guy on the internet so don't trust my word for it too much.
Despite its simple appearance, login forms bring in a bunch of usability failures that so many sites suffer from, actually most of them. Social media login hasn’t necessarily helped matters either.

There’s a whole book dedicated to good, simple, mobile input-friendly and accessible forms at https://www.smashingmagazine.com/printed-books/form-design-p... and it has a whole chapter dedicated to good login forms... sorry for the plug, but I think it’s a really good book — I learned a whole lot while reading it!
Show HN: Share and Critique Each Other's YC 120 Application Videos
As per [1], this space is for people to exchange and critique each other's YC 120 application videos.

Applicants:

Post the link to your YC 120 video in a top-level comment. See [2] for instructions. Minimize extraneous text: YC 120 applications don't leave a lot of room for additional text anyway, so it's best if your video can stand on its own.

Critiques:

Attach critiques as second-level comments under the videos you're critiquing. If you need additional guidance on how to critique, I recommend Mary Robinette Kowal's excellent infographic on the topic [3].

Replying to Critiques:

Reply to critiques only for clarification. Avoid defending yourself; arguing doesn't accomplish anything. I recommend [3] if you're struggling to figure out how to interpret feedback.

Others:

Avoid discussion of YC 120 itself; there have been other posts for that and you can start a new one if you want to discuss it more.

Good luck everyone, and don't forget to enjoy the journey!

[1]: https://news.ycombinator.com/item?id=19028916

[2]: https://blog.ycombinator.com/yc-120/

[3]: https://www.patreon.com/posts/manuscript-arent-11552026 (while intended for novels, much of it is generally applicable)
I also don't understand why Mozilla killed these projects. The original persona (BrowserID) was a pretty solid idea, but I think it's pretty expected for these things to take years of advocacy to pick up.

I wonder if it was changed and canned simply because they didn't hit their early metrics.
More like giving the web facing application full access to the payment database vs having a separate internal service with a very limited API. A problem with the frontend does not always immediately compromise the database.
You also maybe should know that I could have texted that to him as well. It's not as if we don't know each other.. i may have even been to his home previously :-)
Already exists: https://www.w3.org/TR/credential-management-1/

All we really need is a few password managers to implement support for it (I think Chrome's built-in password manager already does), then sites can start using it to progressively enhance their login process.
The problem is likely more rooted in wealth inequality. As a smaller group of wealthy individuals control a larger portion of the nation's wealth, they will inevitably acquire all sorts of investments (stocks, real estate, etc) driving prices up.

If there weren't luxury multi-million dollar apartments to buy, they'd be buying the brownstones anyways. And given that the multimillion dollar units sit on the market far longer than the more affordable housing stock, is there even really high demand among the wealthy to own premium housing?

Luxury housing gets built because it's the only thing that's profitable to the builder once you take into account zoning and permits and regulations that need to be satisfied in order to build. What we really need is relaxed policy that allows for the profitable building of run-of-the-mill, average housing.
Environmental benefits of solar energy
True. The pipe dream would be that this weakens their authoritarian government, but a more conservative hope could be that it forces them to open up to foreign investment.
Evernote is guilty of this. They don't create the password field until you've typed in your username, breaking every login manager. This along with their synchronization getting worse over time has effectively caused me to stop using it.
At that point, you might as well just move to full public-key based authentication. https://www.w3.org/TR/webauthn/
No, that's not how it worked - you got a code on the screen you could use to activate the device with google from any browser - much like many many many TV apps use (visit foo.com/activate and enter code NNNN). You weren't browsing to any local devices...
Social Engineering a Free Dinner at Outback Steakhouse on Valentine's Day
Right but that's because the compiler is emitting code into the binary that exists verbatim in the GCC source.
We have a solution in Denmark, thats cheaper called Dankort, litteraly everyone over 18 has one (Works just like any credit card). Jointly created by all Danish Banks. Works pretty much flawless, but the banks jointly sold the company behind it, and now looks like some banks wants to let it die... So they can instead get kickbacks from Visa/MasterCard.
It's an "open source" of information, I think is the usage here.
Well there are nearly infinite ways to route traffic to/from YouTube.com, that is how the internet works. However for this product there is a very hard dependency on this one specific IP address, which isn’t documented and is pretty unreasonable
Accept Serverless Payments with Stripe and PubNub Functions
I have to admit there are times when I miss Altvista, particularly since the quality of Google's search results has plummeted for me to the point where DDG is at least equally good.

I really, really miss those boolean operators.
Maybe when this genie is out of the bottle everywhere it will convince us to re-prioritize face to face communication and simpler lives with less computing.
Show HN: SpotDJ – Synchronize Spotify Players with Your Coworkers/friends (OSS)
It's actually even worse than that: they keys on the virtual keyboard are displayed in a random order instead of QWERTY.
How do you design a subsidy program that actually benefits everyone if one of the criteria is likability? The more grey areas you introduce into a program like this, the more cronyism and corruption kicks in which more than likely results in an inefficient use of taxpayer money.
Sounds like a scenario where that friction would actually be desirable. If they got far enough to file a complaint they can obviously handle it, they're just lazy complainers, which is exactly the type of user I'd rather didn't make it to the support page anyway. Like you said, their problem usually boils down to plug, charge or reset and they were just too lazy to search the knowledge base for basic troubleshooting, something that should be possible without logging in. Them getting in to re-ask an already answered question is just a waste of someone elses time and useless noise on the support forum.
Right, it's about the health care industry, which includes insurance companies and other segments of the industry. It shows that health insurance CEOs are paid better than CEOs from other segments of the industry. It is in response to the assertion that insurance execs are compensated more conservatively than execs from other large companies, specifically compared to segments of the same industry.
That's fine, but I think what I would find more convincing is an example of actual complicated program mocked up in this manner. I'm all for using toy examples to sketch out the basics, but if you're proposing a system to make software systems easier to understand, you should probably demonstrate it actually makes at least one software system easier to understand.

I tried to do this with a JS library: http://glench.github.io/fuzzyset.js/ui/

It looks like since this paper the author(s?) have developed it further and built some real stuff. Here's a screenshot on their website: http://drakon-editor.sourceforge.net/folder-parrot.png

Is this an easier representation to read and understand? I'm not so sure.
That would be consistent with everything I've seen from them as a developer. One of the most common recurring requests on the Facebook Developers Facebook Group is when someone has all of their privileges for app development on the FB API revoked because Facebook found they were using a second "company account" or "developer account" for managing their app. Facebook sees those as "fake accounts" which are prohibited under their policy/TOS. You get only one account for anything personal or business-related, and doing otherwise risks having everything thrown into the black hole of "everything has been revoked, and no human will tell me why or how to fix it"
(You'll probably want this link instead: https://en.wikipedia.org/wiki/Cycle_(graph_theory)#Cycle_det...)
I guess? it's a weird stretch. There's nothing specifically protecting what a business decides to censor other than the fact that the government can't engage in censorship.
I would think the fix to this would be manually entering the credentials into the password manager rather than having it read the credentials from the site.
I took a first class flight to Japan during peak Christmas season on points from one credit card that I earned the bonus on by paying my rent with a credit card...it would've cost $15k out of pocket (even economy flights are almost $1000 one way during the holidays...)
> And the workarounds of clicking the "must contain" link (or surrounding all of your search terms with quotation marks) are a seemingly unnecessary inconvenience.

Plus, they're inadequate.
You're right, there's validation for the WebSocket messages sent to the server. For certain events (e.g. submit), the validation of user form data is left to you, just as you would normally be responsible for.
This is what Facebook has done and it works.
Folk Etymology
Wouldn't PowerShell's JEA (Just Enough Admin) effectively be able to do most of what sudo does, including limiting command parameters provided to the elevated commands?

I just recently discovered JEA but haven't played with it much yet.
Thank you very much for your answer! Both the most predictable and the most interesting thing IMO is the factor of your existing network in the success of the product. More and more I'm seeing the compound returns of network reach in the careers of my peers who have spent their entire lives working with large teams/customer bases. If I had to restart my career today, I would spend the first 5-10 years in enterprise and then go startup, instead of the reverse.

Wishing you the best – really great to have an income stream like that, buying you room to make even more successful bets.
> We need more workers of all skill levels

I never understood this argument. Don't you wind up with the same problems as before, only with more people? "We need more workers" - but it's not the rivers and forests and houses that need more workers, it's the people. So won't those extra people end up needing more workers of their own, in perpetuity?
Atlassian to make Jira invisible to developers while plugging into their IDEs
what did you browsed the web with?

or as relevant at the time: how did you communicate via msn/aim/yim/icq? I hope you're not one of those condescending Unix types that only had online interactions on irc :P
Same! It worked because BabelFish would 'translate' an entire website for you. So if you set it to `Spanish=>English` and then entered an english language URL, it would proxy all the content 'converted' with no real changes.
The issue with D, I guess, how do you find gigs? :)
The post office would be a good host for such a network, among other banky things.
Thanks for sharing your experience, that sounds awesome!
> does it work well if you put the individual words in quotes

No.
HP ProBooks have included fingerprint readers for a decade as well. It's time.
I've seen some CVEs where malicious websites induce your browser to autofill (basically steal passwords).

So the intention is that I stop some script from siphoning my passwords.

This admittedly opens me up to phishing, but to mitigate I also have containers set up for various facets of my life.

(So it's a big red flag if what's supposedly my bank doesn't open in the "bank" container".)

Edit: I also value storing the database locally versus "in the cloud"
This is no different than the late 90s, when the Internet was AOL for a huge number of people. In 20 years it'll surely be some other platform, too, as long as the relatively open "Internet" foundation persists.
If by "....in many places...." you mean the majority, then I agree.
Your web browser doesn't have any connection to your password manager. Who knows what your web browser is doing, why would you give it any access to your credentials?
This seems like brad coming up with a list of things that annoy him, without any data to back it up. I also like using password managers, but all that really matters are the results that services get from different flows. Magic links, for example, have almost certainly been a/b tested by the services using them, and most likely lead to better outcomes. There are a lot of genuine issues with passwords that password managers solve, but I would guess most people still don't use a password manager. For this kind of thing, doing experiments and following the numbers seems like the only way to do it. Why trust your gut when you can so easily get real data?
I love this kind of stuff.

I like the domain I program in but some of the problems in areas like this are straight up nerd sniping[1].

https://xkcd.com/356/