skysight-inc/HackerNews huggingface dataset:
"The random order I don't understand either unless the "keylogger" is also recording mouse positions."

I would bet that that is exactly what they are worried about. This seems to me to be a really hacky way to solve that problem. If you actually need to address the possibility of keyloggers then some sort of 2FA setup would be simpler, more standard, would address a wider variety of potential security problems, and would create less friction for the user.
I’ve assumed the 2018 version of the dynamic library view is bad is that non-operating system dynamic libraries are bad (and operating systems should provide a GUI library), use a web browser, or use the command-line.
This was my first thought too

I saw it on Expensify yesterday

Doesn't this break a best practice? If you input an email address it tells you whethere there IS or ISN'T a user, and if there IS it asks you for their password.

I thought the best practice was to make it unclear whether an email or username is in the system, which would make this a huge regression
Because game theory/prisoners dilemma/the red black game (whatever you want to call it) suggests you would get a better outcome otherwise.
The Halting Problem, maybe?

https://en.wikipedia.org/wiki/Halting_problem

I think The Halting Problem is perhaps the greatest unsung hero and villain of computing/technology. It consequences are manifest in so many areas of computing (for instance, I believe The Mythical Man-Month is a relative/corollary to The Halting Problem, and other's point out that Godel's first incompleteness theorem is itself perhaps isomorphic with The Halting Problem), in so many tech problems the answer to "can we solve this and when?" isn't "yes" or "no" and some clear time interval, it's "I don't know, we haven't already solved it once."

As clean and "simple" as most algorithms seem at face value (when written in nice, simple code), the undeniable truth that we don't actually know much about how they "run" in the real world until we actually run them.
If you want the space saving characteristics of shared libraries but your OS simply doesn't support that, you could probably do the busybox trick of rolling a bunch of binaries into one and changing which codepath gets executed based on which name the monolith binary was invoked with. Of course there are obvious downsides to this approach.
CC fraud is high and will continue to be for the foreseeable future, since it is dependent on a multitude of actors in ensuring that your data is kept safe and secure.

There is always a fine balance between securing systems and providing the comfort that clients are interested in having. If Visa/Mastercard/et al decide to be more stringent in their security process, it is very likely that another actor will come in and provide that convenience, forcing everyone else to follow suit if there is enough market pressure.

I find it odd that CC companies don't provide a way for clients to customize their security profile (E.g. $500 charge-up without signature if cronix so desires), maybe it is easier for the business to create an overall risk management profile for all clients instead of a customize-able one?

Regardless, at some point, their fees can become unbearable to clients, forcing them to find other options. It would be interesting to see us move from a cashless society back to cash
No, I'm suggesting GitLab is not close to an identical clone. It is much better with many many more features and reviewable source code.
Interesting idea. Communicating that functionality in the UI seems like a nightmare. Instructions would have to be available strictly through irc accessible only via tor.
Suggestions and Comments: Collaborate on Observable Notebooks
It would have been a strong statement about corporate handouts if they had refused to play up front or even better cited the philosophy you’ve outline and how they’ve enshrined it in the law. What I pick up on is the elected officials are disconnected from a vocal wing of their own party and NY has significant political uncertainty and a growing tax income problem that is impacting g their ability to address infrastructure needs. Maybe businesses don’t care or maybe they think Dallas or Atlanta is a friendly place to do business we’ll grow there.
All this talk of regulating Google, Facebook, Twitter. What about Visa and Mastercard? How is acceptable for so much power to rest in the hands of such a small number of companies?
I have no real position on whether or not it should exist. I don't know if the positive impact outweighs the cost.

But no one in here is making a strong argument for it either way, and neither are you.

People can say that Amazon has to go somewhere regardless, so everyone should band together and say no subsidies are ignoring the fact that the subsidies might be what makes it economically possible for Amazon to create these jobs in the first place. Maybe the government gives Amazon $5, they turn it into $30, and Amazon pays the government back $7.50. Or the sum of the economic development in the area results in the government getting back $7.50 for the $5 they spent. And by give, I mean 'Doesn't charge Amazon for come tax season'.

Or maybe the government doesn't give Amazon anything, and Amazon or the sum of economic activity still means the government gets $7.50, and they net the whole amount instead of $2.50.

I don't know, I'm not an economist or versed enough in the specifics here to have any real idea. But either option is possible, as well as a broad variety of others, but the a significant portion of arguments in here seem to be 'Businesses should never get subsidies because I don't think they should/Bezos is the richest man in the world he can pay for stuff" or "lol the stupid liberals shot themselves in the foot."
India launched UPI (Unified Payment Infrastructure) which is more like a public utility which does 10x more transactions that Visa and Mastercard in mere 28 months of its launch and is 100% free. More interestingly you can built very interesting apps on top of it and make money.
For starters, the policy of favorably taxing rent-seeking capital gains rather than actual valuable labor or resource generation. Joe's spending was valuable to the economy. Your rent seeking behavior was not.
Satellite Harpoons Space Debris in Test
There's no way the US will pull out of anywhere. Gotta keep the war machine rollin'
Thanks for this. The format of original need to modern alternative is particularly useful.
For the userland, there was only two tools on the post that allows signing. How will handle file encryption?
Within one working life, by investing 10% of income, I can accumulate wealth of over 100 times annual income while someone who spends 100% of income ends up with 0 wealth.

What part of this are you going to make illegal?

Individual choices, even with absolutely equal starting conditions, yield unequal outcomes.
I started something similar 2 years ago and I'm now actively pushing for a release date 1-2 years from now.

https://github.com/glouw/andvaranaut
I can't comment on how accurate translation is, but I'd say the field has come far as you can now hold up your phone to a bunch of text and get real time translation. You can also use an app to get real time speech recognition plus translation.
Why don't you respond to one of the comments that point out sensible reasons why a website might do this instead of using this as an opportunity to suggest that people are just incompetent?
I redirect all outbound DNS queries from my untrusted/IoT and guest VLANs to an internal caching DNS server for this reason. I use Pihole [1] which also blocks ads in mobile apps and such, very convenient.

Providing a DNS server via DHCP is insufficient as many IoT devices ignore it for tracking purposes. Similar deal with blocking port 53 outbound, they just refuse to work.

[1]: https://pi-hole.net/
Do those accomplish the multi-generational social fitness testing I described? I've never been to a conference that did.

Sounds like more of a distraction than a religion.
The Chinese store I buy from offers me discounts if I pay in cash. He offers me 5% discount on furniture and also gives me a proper invoice (so he is not really defrauding the tax authorities either).
These mutual funds and ETFs actively participate in corporate governance, and the overlapping ownership of most stocks in the market is a very underrated problem.

Economists have found evidence that as ownership concentration increases, firms act more like a monopoly.

See this paper for one example in the airline industry: https://onlinelibrary.wiley.com/doi/full/10.1111/jofi.12698
Just a Drop in the Bucket (1994)
I was really impressed with this, while it is only a test it shows you can build a tungsten penetrator type harpoon and latch a line on to space debris. Once attached adding a small delta V even with something like an ion thruster could accelerate the deorbiting of space junk.
it was so bad in Hainan they had to institute pretty strong quotas
> If there was a causal connection, you'd expect the US to have a much better quality of life than, say, Sweden. I leave it to you to judge that.

I don't think you've been to Sweden to make that claim, and perhaps you've been listening to socialist propaganda suggesting that Sweden is socialist. It isn't! Sweden is capitalist, and was in fact, one of the pioneers of free market capitalism. I strongly suggest taking an hour out of your time and watch this documentary for an image of Sweden which is a bit more grounded in reality: http://www.freetochoose.tv/program.php?id=sweden

There are certainly some benefits from living in Sweden, but there are many other benefits from living in the US which you would not have in Sweden.

> I'm just not a fan of "let them starve, as long as I got mine" libertarianism, and apparently a lot of people aren't either. I'd wager that most libertarians wouldn't be either

You would be correct, libertarians do not hold this view. They hold the view that people are better at spending their own money than the government is, and this includes charitable donations. Government is an inefficient machine of waste, where a big slice of taxpayer money gets pocketed by every individual who has the opportunity. Direct charity from wealthy people is direct, and comes from understanding of the real problems, because it is usually local and focused. What do some bureaucrats in Washington know of the troubles of people on the street of downtown SF? Why would people on downtown SF want to give away more of their liberties to those people
Instead of getting a $50M car, I would hire a small team of scientists to optimize the middle-class purchasing decisions I already make.
I have had a Mycroft Mark I for about 6 months, and have a Mark II on order since I ordered them as a special bundle about a year ago. My feeling is Mycoft is aiming to be more of a stand alone product, closer to the base level echo or home as opposed to a framework to build things.

I've looked at some of the other projects, but one thing that appealed to me about Mycroft was they offered a complete hardware device. The Mark I is just a raspberry pi in a 3d printed case with custom lights, where as the Mark II is going to be more custom hardware (I think) whenever its finished. If you buy one of their devices you you could get it running just using their web interface and buttons without any knowledge of git, or ssh.

They have some ambitious plans, but their execution leaves something to be desired. The base level functionality is pretty good and has been reliable for me on a daily basis. It has a fall back to Wolfram Alpha and Wikipedia so you can ask it general questions like unit conversions, ages of famous people, weather and such. The results are no where near as polished as Alexa, but surprisingly responsive on random subjects.

My main problem has been with the plugins. I got it working with Kodi and Home Assistant and life was good, but as they have upgraded the project at various times these plugins have randomly stopped working for months at a time, and delving into why really drags you into more complicated troubleshooting. Other times it will randomly update and hang until you login via ssh and apt update the system to get it going again.

That said since they got their plugin marketplace working recently it has been pretty reliable and easier to get new plugins working.

You can build their product on your own, I believe you could even build the complete Mark I, but they have some odd "premium" options like donating 2$/month to get their newer voices.

They have a goal of privacy, but I believe the default processing for voice is Google, so big brother isn't far away. They are working, on a private backend https://github.com/MycroftAI/personal-backend and you could choose other voice backends so it should be pretty decent from a privacy perspective. At least good enough for me.
> No one was sending you encrypted emails anyway,...

Ouch, the unfortunate truth.
see also, Toronto condo market.
Amazon's "Whatever, here's some products you'll probably buy that are totally unrelated to your search" back-fill has always filled me with rage.
Yes that's all possible, just a lot more expensive.
Was the Automat staffed with machine waiters?
It sounds like they learned password security from Runescape.
>Merchants don't pay sales taxes

That’s cute, but not the way the Law works generally. Maybe you can point to a single state where the law is different, until then I’ll just say the general rule is if the merchant makes of $x they are required by law to collect sales tax. Where or not the merchant does, they will be liable to the state for payment of the same, not the individual consumers.

If the law worked the way you represent why would any merchant collect and pay sales tax to the states?
Thank you! I feel gaslit even talking about this!

Mention this online, and you will get a torrent of people telling you that you must be doing something wrong, and even if it is true Google probably has a good reason that is just beyond our understanding.

I just talked about my experience with Chromecast here a few hours ago in another thread. [1]
The Google product forums are way worse.

It is not reasonable that I should have to do packet injection to not let my Chromecast connect to Google's DNS servers, especially if I just want to watch locally streamed videos.

Google has slowly been carving features off of the Chromecast for the last four years. I only use it for local video content, so why must I update when it has burned me in the past?

What really kills me is how we wouldn't let Microsoft or Facebook pull this crap.

[1]: https://news.ycombinator.com/item?id=19171115
Most statically-typed languages don't verify types at runtime either. As long as you enforce types at the boundaries between typed and untyped code, you should be fine. And enforcing invariants at the boundaries of your code is pretty important for all languages.
Well, 5/6ths of the subsidy Amazon was going to receive is open to quite a lot of businesses.

https://esd.ny.gov/excelsior-jobs-program
He personally benefited from skipping the last year of high school and attending a university early. That was the first time in his life that he actually found school interesting more often than not. I could sympathize with that because I too thought that school was almost always a boring time-waster before I started attending a university; I almost didn't go because I found school so often pointless for the first 12 years.

"Go to college early" is only a solution for a specific, unusual kind of troublemaker. I sympathize more with his teachers. His teachers and fellow students shouldn't have had to endure that behavior from him. Apparently many public school districts, whether poor or affluent, don't ensure that disruptive students can be removed from the classroom. That's what is necessary for teachers to actually teach. What to do with the disruptive students after they're removed from classrooms, I'm not qualified to speculate about. I'm just saying that leaving them in the classroom is also sabotaging all the students who did initially show up willing to learn, and it's hell for the teachers too.
Agree need to use 1TB EBS volume (the smallest volume that removes bursting limits) and an EBS optimized and enhanced networking instance to be accurate. I'll be the first to admit that AWS has a serious problem with overcomplicating things though. You really shouldn't have all these different options and gotchas.
It doesn't change anything. If the email doesn't exist, you can always redirect to the password form.

If the user is confused about their credentials, they'll have to use the "I forgot" system in both cases.
They do that for the same reason that a carpenter I used to know had a Corvette as his company car. Deductible tax expense.
N.F.L. And Colin Kaepernick Settle Collusion Case
I would like to try Plan9. Is it feasible to get 9front running on a ThinkPad X220?
I'm going to go all Australasian Coffee Snob here: They may well be correct for Berkeley, but they've got a large barrier to acceptance outside of the US.
This will only last until Google pushes its devices to use DNS over TLS/HTTPS.

https://developers.google.com/speed/public-dns/docs/dns-over...

>To address these problems, Google Public DNS offers DNSSEC-validating resolution over an encrypted HTTPS connection using a web-friendly API that does not require browser or OS configuration or installing an extension. DNS-over-HTTPS greatly enhances privacy and security between a client and a recursive resolver, and complements DNSSEC to provide end-to-end authenticated DNS lookups.
This is an interesting approach. I'm not sure I'd call it bootstrapping if you are taking external funding. Having access to mentors is good though.

I bootstrapped my first company to several million and revenue by doing contract work on the side. Later, I decided to use the money from my bootstrapped company to launch another startup. Once we got some traction I decided to take company #2 the VC route. 0/10 would not recommend! :-) I'm working on a blog post about why bootstrapping can be much better for founders.

I've since gone back to company #1, where I own 100%, and pivoted it into a service to help engineers go from FTE -> contract -> truly bootstrapped startup. Of course, you are could always just go from FTE -> contract if starting a business isn't your thing.

We've got quite a few devs in our network now.

More info: https://blog.facetdev.com/the-facet-developer-network-the-fr...

To sign up: https://www.facetdev.com/work
> Hardcoded DNS servers are common.

Indeed. And they're terrible. Maybe making a stink about a big player like Google doing this might encourage others to rethink the practice.

Probably not, of course, but the alternative of just shutting up and taking it isn't any better.
Sorry I didn't word it well. I'm not suggesting the baristas are contemplating the temperature and air pressure, but rather those things will affect an espresso shot and the level of extraction, and thus the barista will need to test the espresso throughout the day to determine if it is pulling differently (more/less extraction resulting in sour or bitter notes) in the afternoon compared to the morning due to weather changes. So I don't think it was unrelated debate.
https://en.wikipedia.org/wiki/Timeline_of_the_far_future Maybe someone from the future could update this for us.
Am I wrong to assume most fraud is online? How does Europe deal with big data breaches and the like?
When you run your own DNS server, then you don't need ECS, since it will have the real IP address at the authoritative server.
Maybe. But for an application opening html documentation, the convention already exists.

xdg-open [URL]

Opens the URL in the user's default browser, which is a wholly reasonable and expected way for a program to behave. Moreso I'd say than using shared libraries to pull up some sort of kludgy KHTMLPart thing.
Show HN: RoadGoat – Map Where You've Been. Import via Social, Wearables and More
> I find it very disingenuous to suggest it's either a wall or no security at all.

The narrative they're trying to sell is that the state of America's border security has been so thoroughly undermined by leftists and socialists and Democrats who want to rig elections by welcoming illegal immigrants that thousands or tens of thousands of people are literally swarming over the southern border every day raping and killing with impunity and stealing our jobs and diluting our culture and only a wall can stop it.

The wall is not about actual, effective border security, it's about selling America on xenophobic panic and anti-progressive propaganda through a manufactured crisis that needs "emergency measures." It's shock doctrine.
I don't remember stale indexes being a problem with AltaVista, its interesting to hear about that. When I switched to Google, it was because I was reliably finding good results within the first few entries. I'd forgotten about it until now, but it used to be a normal thing to page through several screens of search results - performing some kind of human relevance/ranking task on results that were simply too noisy.

From the article:

> This move away from AltaVista’s streamlined search experience made AltaVista more similar to its competitors. Users gradually began to switch to a newcomer, Google, for the simple search they missed.

I don't think this was the case at all. People switched because they got better results.
They absolutely do not. Interns are adults, not children.
On this issue, unequivocally yes.
South Korea to Explore Floating Offshore Wind Opportunities with Equinor
It's not a dependency that I expect of browsing devices. I expect to be able to use eg. a TV, a radio or an ebook reader entirely without relying on the vendor, save for technical support maybe.
But please, do enlighten me as to whether a computer can determine if coffee tastes good.
Because google is any different from facebook? So sick of the google PR here. Facebook is following in google's footsteps. Anything facebook has done, google has done. Not only that, google has far greater ties to government and a particular political party.

Google's real motto is "Be as evil as I can be". Facebook's motto is "Be like google".
I would not take pattern matching as the right example. I learned pattern matching at the university and always missed it in C#. It is easy and straightforward. When you love lambdas and linq, so C# 3.0, pattern matching is easy.

However, when it comes to modern C# and memory management I also think that readability suffers a lot. Memory management on that level is well known to the professional C/C++ folks but most of us are just overloaded with it.
Yeah, haven't had problems with Firefox's manager either.
Is there any technical reason that a password manager cannot be made to work with split logins or hidden fields? Shouldn't they have access to the same web browser that user does? I'd think that could be scripted to handle these things. Obviously this makes it more complex for password managers to auto-enter passwords, different websites will have different scripts but I see no reason for this to be an insurmountable issue.
One thing I ran into recently: a signup form that did not allow pasting a password (one generated by my password manager). It was very annoying to have to type it in manually.
I think we have a crossed wire here. A border wall won't prevent any nurses from entering the country. A border wall is explicitly for illegal immigration, legal immigrants just come in the front door. Typically when people say "They do the jobs that Americans won't do" they are talking about things like dish washing, construction labor and farm work. The fact of the matter is Americans won't do those jobs (at the price offered) because they have other options that pay better, offer greater advancement, job security or are less damaging to their bodies. I posit that if you gave illegal immigrants the same options as Americans they would probably make a similar decision.

Allowing skilled labor to enter the country is generally beneficial, having two sets of rules for different co-existing populations is not.