skysight-inc/HackerNews huggingface dataset:
For me, the problem is that Google doesn't work like a charm at all. It used to, but it's been consistently getting worse over the years.
site is down now... but I hope it will be honest and just explain that "they did it just so they could do that one demo of tar'ing one process from one machine, 9p'ing it to another box, untar it and the process graphical UI would resume on the new host as if nothing had happened"
Ask HN: Why are so many domains parked for years on end?
I understand the concept of reselling them to make a profit, but statistically speaking, does this reselling for a profit situation occur on a consistent enough basis to justify buying a domain and leaving it parked forever?
If they pushed back on it I'd ask for a raise in salary due to the opportunity cost of not been able to do things on the side.

A broad exclusive license to and ownership of every line of code I write shouldn't be free after all.
Why not? While sed is chuggng away at assembling your instructions you will have plenty of time to work on the problem. Just bulid a device that plugs into the serial port of your computer, run your sed-word amalgamation in a shell on the serial tty. Configure your device to interpret the ascii sequences from the serial terminal as pixels and output them as physical dots of light. Now for bonus points you can redesign the communication protocol to be more compact.
In my opinion, I find the Tuple patterns the most interesting way to use Switch Expressions. But (and maybe I'm stuck in my ways), I'm kind of on the fence in terms of using this. On the one hand, it shortens some code, but on the other, it's more difficult to read than an if statement (in the case of tuples).
I guess I'm not completely sold on this yet. I know the big argument in the article was that this is a way to ensure your variable has a value when you go to use it. When I hear things like that, my first reaction is "then write better code if you're running into that problem."
Collection of Classic Rolling Stones Interviews
STEMpedia Launches on Indiegogo with an Electronics Kit for Your Child
As someone who works remotely I'll go out to the coffee shop for some brief human interaction. Sometimes it's the only time in the day I interact with people outside my home.

Personally I don't see the draw to a goofy robotic arm that slings espresso. Vending machines are already a thing, coffee included. This just seems like an excessively expensive way to implement one.
Whenever any information needs to be saved or processed by the server, you can perform your server-side logic inline in the event handler (e.g. update the database, contact external services, etc.). There's no need to make an AJAX request and have a corresponding API route. This abstracts away the client-server interface, and you get safety guarantees with type-checking.
Yes and yes... How come huge institutions can't follow password best practices?
I'd probably have to read the entire report to know for sure (too lazy), but I'm guessing that they currently only have such stability because of their interlinks with other electricity markets; see Figure 1 on page 11. And if those other markets start transitioning to renewables in a big way then "problem" for Denmark.

BTW, as I understand it the best-sited windmills only provide maybe 25% of their "nameplate" capacity on average, and even that number is probably too optimistic overall. Plus, windmills in general are only lasting maybe half of their originally expected lifetimes - 10 years instead of 20, or what have you. These and plenty of other factors just seem to be being ignored when people call them "very low cost producers".
In that case, I don't mind, since that dev tool probably has access to my GitHub account anyway. Like Netlify, which automatically re-deploys the site when the watched repo+branch is updated.
> Maybe we could later exchange X with something that only sends bitmaps?

Can we call the followup Wayland because that is the only way to go :)
Not really, before you could firewall it off from the rest of your network - though now you can just masquerade 8.8.8.8 and 8.8.4.4 to your DNS server of choice
The overlap of owners means nothing, as those are mutual funds or ETFs that are the top owners of most stocks on the market.
You see this a lot because conservatives have a hate-on for AOC, but she's not the congressperson for the area Amazon were building in. Queens has a lot of congressional districts.

She also had very little to nothing to do with the decision, but again, you wouldn't know that from watching the conservative commentary.
How well do these compare to Mycroft[1]?

[1]: https://mycroft.ai/
That might be because they are different people. Hacker News commentators are not a homogenous mass, but a collection of individuals who can hold opposing views.
In Queens, Amazon Deal’s Demise Reveals Deep Divisions
So submit a bug report to your favorite password manager.
A feud between France and Italy sums up the deep rift over Europe
Not sure I understand your point here. You need to use your password manager credentials to autofill also (at least for 1Password). The only reason to copy/paste is if you don't think your password manager will put the right info into the right boxes.
I think you and Brad are making different arguments. I think you're both right in different ways.

You're correct that convenience features like this, despite undermining password managers and interrupting power-user security practices, create positive business outcomes. Ditto for things that win A/B tests.

But user experience != business experience. Positive business outcomes don't imply that users are being maximally well served under the winning system. Example: anything by Comcast or Verizon.

---

Separately, I believe in the case of Notion specifically, their use of emailed unique strings in place of passwords is a security decision made by them to avoid storing credentials, which they consider riskier than the magic links. While I find this tedious as well, I respect the decision and it's not a frequent PITA.
This works especially well for pop tunes, where the vocal track is by far the most prominent and is almost universally panned dead-center in the mix.
> OpenId was a pretty neat idea twelve years ago.

OpenId was maybe neat except for its little fatal flaw of being a single point of failure outside your control. Your provider decides your account should be taken down and suddenly you use access to everything.
Because of computing power issues - training a good model with a significantly higher resolution becomes a lot more expensive. If you're doing a proof of concept or analyzing algorithms, you stick to lower resolutions; at larger resolutions the algorithm (and its effects) are the same, but you just need ten or hundred or thousand times more hardware and/or time.
Kalashnikov has already created autonomous death robots.

https://newatlas.com/kalashnikov-ai-weapon-terminator-conund...
The "open source" here has the same meaning like "open source" in "Open Source Intelligence" (OSINT). It's a technical term used by the intelligence community (just like SIGINT or HUMINT), and recently also by the infosec people who have studied the same topic. It refers to all information from public available source.

It has nothing to do with open source software. To make the things a little bit more confusing, some infosec researchers and digital-rights activists who study OSINT do have a background of developing free and open source software, and some even have developed open source software to gather open source intelligence...

So, if an intelligent agency is gathering intelligence from public-available information about open source software, it would be "open source open source software intelligence", or OSOSSINT.

https://en.wikipedia.org/wiki/Open-source_intelligence
I have mixed feelings about this kind of news. On its own, it would be a good thing for China's people and the world if the country's economy grew and fully joined the other first-world economies. But their authoritarian government should not be rewarded for its ideologies and policies, and certainly shouldn't become a bigger global power in its present state. Hopefully the current head eventually gets cut off and the body moves forward without it.
He now made a “comfortable middle-class living,” but sitting there with me in the cabin, fretted that it could go away at any time. “This is me working a little network I’ve built using someone else’s social media platform,” he said. “If Instagram changes its algorithm slightly, there goes a bit of my business. If Instagram disconnects some of the tools I use to build and monitor my account, there goes a bit of my business. And if Instagram goes away and is replaced by something newer and better, I need to get there first, just like I did with this account. If I don’t, I’m done. I’m totally dependent on a platform that’s completely out-of-control.”

I think this man is a bit of a canary in the coalmine for the rest of us. Even for those of us who do not depend on social media for our income, enough of human communication is wrapped up in social media to affect our lives in a significant way, whether we want it to or not.
Do you have a good source for those rules in an easily digestible form?
Long-lived connections in a serverless world
As a developer you should support a proper form that works with password managers. Period. Anything else is a failure on the developer's part to create a working login. It's also a massive security hole you've introduced by encouraging people not to use password managers. They will try to remember the password and we all know where that leads to. Sorry, if you think you can develop a login form that doesn't support password managers and call that a decent effort, you're badly mistaken. That's just shit engineering.
So, I get that most folks aren’t tuned in to this and I will sound unreasonable, but I’m utterly tired of robot-like things being given gender. Every time I read “he”, “him” when learning about a piece of software I gag a little.

I know someone will tell me I am wrong. But I’m not asking or telling anyone to change. I just want to share what unnecessary gendering looks like to me. And for the record, all my robots are non-gendered (“Scout, Skittles, Rover”).
Points aren’t managed by visa or MC, it’s the card issuer that does it.
Sure. I’m comfortable describing HPC and on-premises fully trusted computing (another response) as “very niche scenarios” though (compared to the much much much larger markets of large cloud farms on the server side, and consumer devices), to the point where I have to wonder whether or not it’s worth it for CPU vendors to cater specific SKUs to them without the silicon mitigations.
The Breach from the East (2018)
I think the idea is that getting Google to fix this by telling them this is unacceptable is a swifter course of action than hoping Google will notice your individual $35 purchase went elsewhere.
How are you quantifying wealth and power?
"The radiocarbon ages of tree fragments and peat discs found
on proglacial forefields indicate 12 phases of glacier recessions
during the Holocene. Locations and type of occurrence of the
dated samples show that trees and mires grew where glaciers
exist at present and, therefore, glaciers were smaller at that
time. ... their pattern
changed from long recessions (/500 yr) interrupted by short
advances (B/200 yr) during the early Holocene to the opposite
pattern with relatively short recessions and prolonged advances
during the late Holocene (after 3.3 cal. kyr BP). It is important
to recognize that this natural variability of glacier extent, which
occurs on a centennial timescale, is superimposed on a much
longer term, multimillennial-scale trend towards increased
glacier extent culminating in the ‘Little Ice Age’."

http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.483...

Glaciers in the alps have been advancing and receding for the last 10,000 years, with the last few thousand years primarily advancing through the little ice age. They are now retreating.
Bingo. This is why we went with a stepped process. Did you log in with Google, Twitter, Enterprise SSO, or Email? Do you even have an account, maybe you need to create one?

It frustrated everyone.

Since we've implemented the stepped process (and made other changes) complaints have all but disappeared, and the number of failed sign in attempts has been significantly reduced, successful logins has increased slightly, and overall login attempts dropped.

It's not perfect, but all indicators are it's better than a screen full of options - it allows us to guide users to the correct action.

Sure, it can still be annoying, but less so than what it was.
You're not required to use TypeScript. As janpot mentioned, the library is transpiled prior to being published on npm, so you can use it with regular JavaScript. This is true of most TypeScript libraries.
Yet Another Phone System(YAPS) Is Born
I think I agree. I used to write a lot of C# v2 and loved it. There didn't seem to be anything 'missing'. Each version since then has added nice things but are they really necessary? Now the language looks huge and complicated and because of that, I'm not sure I'd ever want to use it again.
Webauthn is creeping along gradually. Things like fingerprints and browser accounts should eventually be added to it as auth mechanisms and it will be glorious the day you just go to a website already signed in via your public keys that are available cross device automagically from your Mozilla / MS / Google / Apple account.
There was a story in the past about AWS employees buying apartments in NYC before NYC was announced... I wonder what happened to those apartments?
"All that really matters are the results that services get from different flows."

That's definitely not all that matters.

"you can so easily get real data?"

"Real data"... on subjective matters. Your attitude seems entirely the target audience of this article.
Which is exactly what "trend" means.
I've not tried it myself, but the title does say the device won't start without it.
Maybe something like
(# of comments upvoted - # downvoted) / (total # of comments)
or
(total # of upvotes - total # of downvotes) / (# of comments)

You could tweak this to say that downvotes get heavier weight, say.

You could also look at number of replies, but a flamebait comment could also get a large number of replies, so that might not be a good metric.

You could also look at the number of times their posts have been flagged.

None of these are foolproof. You're probably going to have to experiment to find something that you think gives sane results.

I admit that I'd like to see your results...
Haven't looked at MyCroft before. It looks like MyCroft exposes less of the nuts-and-bolts of modeling? I'm not sure where I would plug in a custom entity extraction or intent detection model, but I do see that it lets you add custom 'skills'.
That’s true to a certain extent. Once in a while a system won’t like a drastic change like going from an AMD chipset to Intel and
you may get a bluescreen on reboot.
> Well there are nearly infinite ways to route traffic to/from YouTube.com, that is how the internet works.

I'm talking about the endpoint. YouTube.com resolves to a finite set of IP addresses, and accessing YouTube requires that outgoing traffic is allowed to all of them. All of this is entirely under the control of Google, so how does adding one small additional dependency on 8.8.8.8 affect the end user's control in any way? It's just one more IP address that has to be allowed to be able to use YouTube, and it's equally as documented as the others (i.e. not documented at all).

Additionally, 8.8.8.8 uses anycast routing to distribute the requests over many servers. So it's not like having "one fixed IP" is any worse than having one fixed domain, as you seem to be implying. It's not a single point of failure.
Nice set of rules for laying out flowcharts. That said there's a reason flowcharts are passé as a form of documentation.
The fact that they know there's an issue with replication suggests they're using the scientific method. Their experimental design might need work, but they're working within a scientific framework.
> don’t put logins in modals

LastPass fills out my username and password on modals just fine. Tested it out on Hertz just now. If other password managers don't... then they should be improved, no?

Why should a site bother with a slower page load when an instant modal works just fine, as long as it's properly implemented?

> don’t split login across multiple pages

I've never seen this done except when it's necessary because depending on the account identifier (username) a different authentication method is used -- e.g. redirecting to your institution's authentication page.

Of course if you have a direct account you have no idea and it just seems annoying. But it is a feature, not a bug.

I'm not convinced the author has really done their full research here.
Nothing on a physical anything has access to an infinite tape. So nothing is a turing machine and the phrase is meaningless?
I read "Id" as " i'd " and thought this was the the most bizarre sarcastic comment. Time for more coffee
I miss HotBot. Anyone remember that?
Well, not $0. NYC is a desirable place for many companies, and others will move in to the place Amazon intended to occupy. It might take longer and the companies may be smaller, but it's not like there is now a giant black hole in Queens that can never be filled.
Most smartphones shift phases on the left/right channels to make it sound better in headphones (simulating bigger room), this means you can combine the two channels (by connecting the positive wires or just wiggle a little in the headphone jack half way in) to extract the vocal track. Not as fancy as a CNN but I’m guessing it would be better to do something with the stereo information in preprocessing before training.
Because that one password is pretty long and secure, and you enter it only on your own machine, into one known binary, no-where else.

It strikes me as sensible advice.

Connecting your password manager to the browser for auto-fill already compromises the security, granted, but what other flaws have there been otherwise?
Product Hunt pre-launch
Yeah. Works fine to have a modal based login form for those with JavaScript and a static page version as a non JS/general fallback, and that'd be the best of both worlds.
> How is this functionally different from a shared object?

Because it's a separate process, so when it crashes your application can put up a "SSL failed, reconnecting" message and carry on. Also when your application has read-something-somewhere security vulnerability, it can't compromise your SSL keys.

Nitpick: it's not one process, but one executable; you can have multiple SSL daemons using the same (read-only) binary, so a attack on one only gets one set of keys. (The same attack will probably work on every instance of the same version of SSLd, but shared objects don't fix that.)
Circular logic is "No person would be on BOLO without credible cause, and the credible cause is that they're on BOLO". What they're saying is that there is a valid reason for each person on the list to be on it. You can take issue with that as a matter of factual accuracy, but there's no tortured use of language happening.
I know gmail is different than search, but if you do a quoted search for a string in gmail that has zero matches, it will return a few "close" matches.

This really confused me, because I was trying to find something specific, and it found a few emails, so I read them, and then was confused that they didn't actually take about the specific thing I was trying to remember. Then I realized that they I included one of the words from my string.

In this case, a close match was completely useless, and ended up wasting my time reading irrelevant results. A message saying "we didn't find that, but here's a few close matches" would have been more helpful and avoided wasting my time.

The reasons in this thread about non precise search results are half the reason I stopped using Google Search about a year ago. I get why they've done it, but I don't like it.
Because there are only 2 companies in the industry with huge moat - https://www.jstor.org/stable/4225650?seq=1#page_scan_tab_con...

It's the same reason why airlines don't compete with each other.
And here we go again, do you feel surprised that Slack admin can read all private slack messages sent between the members?

When will Facebook bashing stop. It's well within FB right to read their employees evil scheming tricks.
1password deals with this just fine.
> However, it is up to merchant banks if they want to pass on the fee hike to sellers, or absorb it themselves. Similarly, it is sellers’ discretion to pass on the hike to consumers or not.

Of course, we know what will happen! This whole scheme is like indentured servitude. They not only get more of your money, but also sell your habits to others and make even more money creating or helping others create profiles of you. And you have no control over this as long as you take it with resignation.

What consumers need is a disruption on electronic payments by moving to non-conventional non-electronic/non-digital payments (cash is a good option, but it needs to be encouraged more and made to look sexier).
With a few exceptions new construction is high end.

There are a few areas that were designed as slums from the beginning: Lower East Side in Manhattan, parts of the West Side in Chicago.

Taking Silicon Valley, if 25,000 high end apartments were built, that would take a lot of pressure off low end, because well paid people wouldn't be taking them out of desperation.
Cool, I'll be sure to tell my mother-in-law that if she's concerned about her privacy, she just needs to use NAT "bro".
PageRank is using the stationary distribution of a random walk; that’s very different than just incoming links (which AV did have)

In a way, it ranks a link by its own incoming links (which are ranked by their incoming links etc). It was possible to game AV by setting up 100 sites that points to your own.

In pagerank, you essentially had to convince already popular pages to link to yours.

For a while, google effectively had no spam, and AV had lots. Eventually, spammers learned to game pagerank; the arms race is still on.
/
/
/

Trend

/\
/ \

Wave
And if anyone raises a concern about accepting and transferring arbitrarily long passwords to the backend: Just take a quick digest hash of it on the client side (SHA512 or something) and send that UNcryptographic hash of the password to the backend to be properly cryptographically hashed there like regular. The digest hash becomes the password and the user is happy to not encounter any arbitrary restrictions on length.

This is how dropbox does it: https://blogs.dropbox.com/tech/2016/09/how-dropbox-securely-...
(OP of complaint)

This matches my understanding as well.

05's answer about security and rogue devices is a good one. It makes a lot of sense. For my (and I expect most people's) threat model, google's prying eyes are a more credible concern than my neighbor's, and I wish they hadn't changed it, but it's nonetheless a defensible reason for making the change.
> I expect any specific person's opinion of the percentage breakdown of those factors depends a lot on which group they were in at the time.

I feel like that tells me where your percentage would lie...

EDIT: I apologize, it was intended as a joke to lighten the mood. It's never a good thing to lose one's job or have a company fail, even that long ago, so my response is to attempt humor.
Nonviolence is a luxury afforded only to those who are already physically safe. Some lucky people never have to learn this.
the split sign up fields is actually a security design
Exactly, it's Brave New World and 1984 married--the jackboot on the neck plus the self-drugging anodynes.