skysight-inc/HackerNews huggingface dataset:
For me Chrome password management works fine. I have all passwords on my work Mac, had to switch Macs about 9 times due to Apple's quality issues in the last year and passwords were always available after logging in to chrome.

And they are also always available on my Android.

But. I need to trust Google.

I also have 1password (without cloud sync). Works great on my Mac. But switching devices is a pain. And syncing to mobile doesn't work at all currently.

So my state with managed passwords is somewhat of a mixed bag.

PS: Well, due to policy changes I need to create a central password for logging into my computer and company systems in the future. And I need to type it multiple times per day. And need to change passwords regularly. I am not really looking forward to that form of "security".
China dreams on hold: heartland city feels chill of economic slowdown
Andreessen was loved by the entire core Mosaic technical team. Management did not like him, because he was a leader they could not control: opinionated, outspoken. The core Mosaic tech team all left Mosaic project on the same day to join Marc at Netscape, and pursue the pure vision of what browser should be. Mosaic project never recovered.
Source: I was Mr. MacMosaic.
Disclaimer: I work in politics professionally, as a digital consultant.

ActBlue is better at security (and just in general product) than NGP, but neither supports physical 2fa keys.

I don't want to speak too publicly about NGP VAN but I think this area is very ripe for disruption, but it would be hard to get the finance side 100% correct, automated FEC & compliance and all. This built up moat I personally believe lets them stagnate on technology. I think their API is proof they know the weakness or are afraid of easily better tools built on top (no important data in and out).

One attack vector I dont see mentioned is locking down domains and websites. Campaigns are incredibly cheap, it only took a few consultants selling shitty pre-built wordpress themes and now it's tough to get a Congressional to pay much or anything. We now build static websites for clients who pay, but I'm still worried about some actor uploading a google-verification.txt, or updating DNS to send better phishing emails.

Emailing passwords in plain text and shared twitter passwords for candidate accounts which are 'victory!2020' are VERY common and we've been trying to correct this behavior.

Though this isn't perfect we have been sending one time links with no authentication info in email plaintext. If anyone has a better solution? (remember non-technical (no PGP) campaign staff and not in same geo a lot of time).

In writing up some campaign plans this cycle I made some security notes, especially for a top 5 race target client we have (if win primary) I suggested separate senior staff office in a more secure location which no volunteers know about. This wont work at Congressional level, where anyone can get access to call time room or CMs office if they try..

Yes because I'm overly paranoid but also sadly because security in politics now means protecting from some random nut bag with a gun. Which is really scary to me.

But mostly I'm surprised at Maciej's willingness to spend money (and valuable time) doing this. Sadly I think the willingness to help anyone including 'Green Party candidate in a district the Republicans carried by 60 points' combined that with the general (and I can understand and am not judging) attitude that 'the system' is broke, is probably a factor to why he was not taken as serious as I think he would have liked.

Sorry this got really long.. I could go on and on (if @Maciej or is it @idlewords ? sees this would be happy to chat on DM).

love seeing politics on HN a topic I have specialized knowledge in for once ;0
Right, but the solution is probably automation and not overworked to death franchise owners.
I would add more ... when it comes to chronic diseases, modern medicine is about treatment after the fact, after the damage has occurred and not about prevention.

And while it’s incredibly efficient at treating acute conditions, it fails miserably at chronic ones because it’s treating symptoms instead of underlying causes.

And sometimes those symptoms might actually be part of the body’s defenses against inflammation, which doctors suppress with pills.

The perfect example is elevated LDL cholesterol. This is a marker for heart disease, however it can be high due to hypothyroidism or due to inflammation. LDL cells are actually part of the body’s immune system and by suppressing their synthesis or by accelerating their clearance, the body could be less effective at fighting infections or at repairing arterial walls that have been damaged. Plus pills are a blunt tool with many unintended side effects.

It is no wonder then that people taking statins don’t have a reduction in all cause mortality and personally I’d rather die of a heart attack than die of cancer or dementia.

Also the DASH diet, the one that is supposed to prevent CVD, is effectively poison as it’s encouraging people to eat ultra-processed food and oils high in omega-6, due to encouraging a big chunk of energy to come from “whole grains” (i.e. products which are often a lesson in chemistry and that might not even contain whole grains due to weak regulation), plus the phobia for saturated fat.
Yes, it is such a foundational thing that it has to be woven into how you run your infrastructure. Can't just drop it in in most cases. If my memory serves me well, Google basically re-started their entire codebase/infra from scratch - google3 (version 2 was skipped, apparently) to accommodate this shift.
At least the Libyan government can only MITM .ly in DANE world, and not a Libyan CA and consequently every other domain in existence.
One of the things that made switching to a password manager difficult was the lack of a smooth and secure automation workflow.

Do you think a standard/protocol for communication between platforms and password managers would help solve this problem? Basically your password manager could hook into events from Android/Chrome/iOS like "login requested", "new account created" and "password updated" allowing increased automation from password mangers.

Obviously using lots of signing/certificates/encryption/platform verification(to become a registered password manager for chrome/iOS/android would require a much more extensive check than a standard plugin/app) to ensure security?
Ask HN: How do I communicate planned lay-off in an interview?
I'm being offered a reasonable severance package (~2 months) to remain at my company. How should I communicate this time expectation to prospective employers?
The potential, albeit unlikely, that questioning Zuck causes him to feel the smallest iota of shame for his actions in destabilizing democracy.
Sell or give away before throwing away. I have listed a bunch of stuff I don't particularly want on eBay it costs me nothing and often someone near by eventually finds it and wants it. I recently sold something I listed in 2017.
CT only covers a small subset of CAs, and an even smaller subset of TLS clients.
I don't think it's dissonance so much as a conflict in needs, which is what most of business and life is about.

No doubt America has a lot of land to spare, and it's probably not a problem.

But on some scale, particularly for high-value residential areas, it can definitely be a problem.

Vancouver is really a case for that. At least on London/NYC there's a lot local people (ie Londoners) who can pay 'global rates' for homes, banking is big there. In Van, the locals cannot afford anything unless the bought a long time ago.

It was well within the scope for my (Canadian) parents to retire in North Van 25 years ago, I remember them talking about it as we were skiing near there as a kid. There's zero chance now and it's not because 'the local economy is booming'.

But there are probably some material 'good things' about foreign ownership of some farmland as well.
Don't theme, well then start to hire/team along with proper designers then (graphical/UI/UX).
Somewhat related question: do web-based cryptomining scripts produce a meaningful profit for website operators? Or is this the sort of thing where the person inserting the script is making only a few dollars, but it's so easy to deploy that there's relatively little downside for them?
Not sure if this is the case, but BBC has an annoying habit of changing headlines.
Sounds like pass [0]. Which is dead simple, GPG. (And optionally git for sync).

Whilst pass itself is a CLI, meaning non-technical users, it also has a ton of web browser extensions that target it and are dead simple to use.

[0] https://www.passwordstore.org/
An A-Z Guide to the Blockchain Technology
It's a really funny monetisation move, releasing everything as open source, putting it all in openjdk (which has been the language reference spec for a while anyway)

The only bit being monetised is the Oracle compiled and distributed version of the JVM. If you don't want to pay Oracle, just use OpenJDK, which has all of the same hotspot JIT stuff.
The whole "stress causes burnout" thing is gravely misguided.

There's a whole sub-type of burnout which comes about even in relatively low stress environments.
The price of stuff is just so cheap now. I can go out and buy just about any luxury item I want while hardly thinking about the price but it would take me a decade to buy a house if I spent $0 each year.
This article is non-sensical. Recycling is a huge technology problem. It requires ability identify several different kind of material precisely from a massive hodge-podge, classify them and treat them individually. I don't think anyone has solved this problem, let alone solving in cost effective way so you come out revenue positive. The most "recylers" take easy route of dumping, burning etc. This article says Sweden burns "recyclables" to generate heat for winter. I would assume they only do this for high quality papers. There is no technology advances described in this article.
I drove a Tesla once for a day, and ever since, I've been longing for a car with that much bottom end torque. The moment Honda releases a hybrid or all-electric Odyssey I will throw money at them. Or if my kids grow out of their car seats before then, I'll just get whatever the best all electric sedan is at that point.
Nietzsche, I'm guessing.
I admire the courage of people who run their own business but I don't think that life would ever be for me. I love working 40-48 hours a week and leaving my work at work when I go home.
IME psychiatrists who treat this kind of thing in children and adolescents usually seem to be willing to diagnose an adult as well.
Then your password is just the hash and salt. And presumeably you're generating those with JavaScript, which adds a surface to target to exfiltrate passwords. No need to get into the server, just inject some JS or redirect a CDN or...

It doesn't actually add any security is the short story.
It's not, by far[0]

[0] https://danluu.com/term-latency/
Translating math into code with examples in Java, Racket, Haskell, Python (2011)
I wonder why you found necessary to repeat what I said but in different words? :)
I'm pretty sure the legislature and judiciary of each country considers obeying their laws to be necessary, with or without your blessing.

I fully understand that Canada does not need my approval. Surely that's obvious. Why bring it up?

The question is whether what they're doing is good. Good governance, good policy, good economics, good ethics, etc. Them having the power or authority to do it is almost totally irrelevant to that.

I'll tell you what would convince me that there's some good reason, and if you know of an instance, you can let me know and I'll admit some modicum of wrong. If Canada's legislature has interrogated a famous CEO or similar figure about a popular issue, and the contents of that interrogation have led to substantially unanticipated outcomes, I would be willing to admit that I'm at least partially wrong. My priors are that that sort of thing does not happen. At least, I've never seen it happen in my own country.
> it’s not possible to statically validate that addresses are within linear memory

It might just be me, but I don't think this is what the parent comment said.
You make me think that a whole new syntax for spoken programming would be key.

Would be interesting to get a bunch of people to read out loud various programs in various languages and in pseudocode and hammer down what might be the most natural way to do spoken programming.
If browsers someday decide to implement some DANE-like feature, it would quickly become a fairly high percentage. There would still be a rather long period where browsers would have to continue to trust Web PKI certificates in general, even assuming they decided to phase them out. But... during that time, anyone using DNS over HTTPS with a trustworthy resolver would presumably get the right TLSA records, so their browser would reject attackers’ certificates even if validly signed by the Web PKI, no?
I'm not sure why you would act like it is a theoretical problem when lots of other cities have been confronting this for decades.
Be always wary of these "studies" aka surveys conducted on campus students. In this specific one, the "study" was done on ~500 German students. The conclusion was,

As the temp went up, women did better on math and verbal tasks, and men did worse," Chang says. "And the increase for women in math and verbal tasks was much larger and more pronounced than the decrease in performance of men.
Show HN: Mob – Self Hosted Polling
Depends on the currency and the size of the site you’ve managed to compromise. It was a bigger thing when coinhive first launched, I feel.
AI in Five, Fifty and Five Hundred Years – Part Three – Five Hundred Years
Apparently Nietzsche, given the mention of "will to power". But yeah, that's a confusing one.
Calling a 1.5L Prius engine "expensive" is a bit of a stretch, you can buy a lightly used engine for ~$500.

Compare with say Tesla where a single motor runs you over $3000 and they call it "cheap".
>And because there are no federal restrictions on the amount of land that can be foreign-owned

That's very surprising for a nation that bars foreign-flagged ships from moving cargo between American ports.
Robocrop: world's first raspberry-picking robot set to work
Thermodynamics is part of the physics curriculum for many software engineering and computer science degrees.

There are a number of existing solutions that solve for energy inefficiency due to unreclaimed waste heat.

"Thermodynamics of Computation Wiki"
https://news.ycombinator.com/item?id=18146854

"Why Do Computers Use So Much Energy?"
https://news.ycombinator.com/item?id=18139654
Only fools believe in some things from the oracle company.
Even an Opel Ampera (a Volt in the USA, I think) is super fun to drive, even though the car itself is somewhat boring

I used to lament the impending loss of manual transmission that comes with electrifying cars. But the torque more than makes up for that.
Marzipan is not an ARM emulation layer.
Given that the article is about how Facebook has decided not to send them, your hypothesis seems unlikely; they would be saying in effect that they prefer contempt charges to letting their local director talk. Or, to put another spin on it, that having their director talk is worse than doing nothing.
That's an answer to the "hypothetical someday" question, but I'm interested in what the number would be today.
a single site with 1k users month used to make me 30€/m. 2 yrs ago.
By your logic, why use HTTPS in the first place? (Or at least why care about certificate validation at all?)

Hint: Because ISPs are in a position to intercept and even MitM traffic, but generally not in a position to decide what URLs you go to.
I’m aware of the other problems with open aquaculture. But OP referred to the “toxic” nature of the fish. What’s “toxic” besides the PCBs? Farmed salmon is lower in mercury, or example.

(Also, you’re right, I didn’t watch the videos. As a rule, I don’t watch informational content in video form, because it’s a stupid way to present information. They’re geared to obfuscating and emotionalizing topics in ways that are harder to do in written documents with citations and footnotes.)
Overwork is better than no work. Automation may be part of the solution, but on its own it fails.
No, people desire power (political or not) for more than one singular reason.

Outside the realms of true global (or even country, or state level...) power, I've been driven to "power" before because I felt that my part of the community was being wronged and I had the attributes to fix it. When I fixed that wrong, I relinquished that power and went back to my place of relative obscurity (the way I like it).

Was I motivated by some basic thirst towards being the leader of my community? Nope. I was driven by anger and injustice for my community.

Are there are basic instincts at play? Probably, maybe, I don't know, but the simple point I'm making here is that you can't reduce it to evolutionary advantage of being in charge, otherwise people would never relinquish the power.

Humans are social creatures, and wildly vary in what they offer the group, and when they feel the need to.
The rise of EVs also presents the opportunity for generally lighter, smaller, cheaper vehicles.

Already they are very popular in China: https://insideevs.com/news/340006/big-in-china-cheap-tiny-el...

What would a Tesla Model 3 look like if it had half the range, no frunk, and much lower performance? (ie. limited to 120km/h) How light, cheap, and small could we take it without utterly abandoning safety?

Basically, the kind of vehicle designed just for inner-city commutes and picking up goods.

If these vehicles became more common we would see a 'peace dividend' in the car safety wars - the other vehicles on the road would be lighter, so crashes would be less dangerous (maybe combined with automatic crash avoidance as well) and breaking times shorter, so crumple zones and other big heavy features could be reduced.
> I’m not sure which particular issue really kept it from keeping mindshare.

The fact that it was bundled as a browser plugin, mostly.
I loved this but wanted to generalize it a bit to clean it up and make it portable across different computers.

By no means am I a vimscript expert so any improvements welcome. (I've defined g:settings.kanban_board_path above).

function! g:Kanban_file(stage)
return g:settings.kanban_board_path . a:stage
endfunction

let $KBsoon=g:Kanban_file('soon.md')
let $KBdoing=g:Kanban_file('doing.md')
let $KBtoday=g:Kanban_file('today.md')
let $KBdone=g:Kanban_file('done.md')
let $KBarchive=g:Kanban_file('archive.md')
" Close board tab

map <leader>bc :tabclose<CR>

" Main board: soon, doing, today, done

map <leader>bb :tabnew $KBsoon<CR>:vnew $KBdoing<CR>:vnew $KBtoday<CR>:vnew $KBdone<CR>

...
I think do less is pretty much the answer I consistently see. The worse the burnout the less you need to do and for longer.

Many times the reasons why it's hard to do less are mental hangups(like fear of failure, perfectionism, the Ides that you're worthless as a coder if you're not coding 24/7) that prevent people from doing less and a therapist would help with that.

Of course sometimes what is preventing someone from doing less is their financial situation in which case you unfortunately have a lot fewer options.

For me it was quitting my job and starting a consulting company with a couple of friends. I make less money and work more but I have a way better time doing it and that has allowed me to recover.
The US has a reciprocal agreement with Canada. These agreements are the basis for jurisdiction.
PC Building Simulator
Cryptominers are one of the many reasons I run NoScript with a whitelist.
And, yet, GM just quit producing the Volt.

The economics apparently don't support hybrid for very long.
This is a bad proposition and I'm afraid a wrong one. When you disagree with an expert, the expert should be able to convince you why s/he is right or at least able to articulate the reasoning. It's not a chess game where you are an opponent to the expert and the next move is supposed to be secret. The relation between you and the expert is of collaboration, training and dissemination of knowledge. If an expert fails to articulate the reasoning, I take that as a sign that advice is merely because "it would work because I saw it worked before". That often means the expert failed to analyze and learn from his/her success and is just proposing the status quo. It is often better to question this kind of expert advice and that's how progress has almost always been made throughout human history.
It's not just 7-Eleven. I wouldn't want to be a franchisee of any sort in the US. The power dynamic is horrible.

McDonald's is probably one of the better ones. But you're still beholden to them. They often own the land under the building, if not the building itself. They tell you exactly what you must do. They tell you when to remodel. They make you buy from their suppliers. They can decide to open another store a mile away from yours.

But longer term I think the worst franchise to be in will be car dealerships. Once EVs become mainstream, the service revenue will fall by about 80%. There's just so much less to go wrong. How will dealers be able to pay for the overhead of their giant buildings?
5 .NET blogs for C# developers to follow in 2019
“Statically validated” AFAIU means there are no runtime checks.

E. g. WASM stack local variables and globals are statically validated. Compiler can translate loads and stores to locals and globals to simple movs. There are no additional runtime checks, no overhead. Unlike linear memory.
Are you really sure that capitalism will reduce global poverty?

The core of capitalism is competition. This may result in higher quality and larger choice, but if these are sufficient enough it will in the end result in lower prices. This has to be done through efficiency but will also result in lower wages.

I think unconstrained, uncontrolled capitalism will result in 90% of the global population working very low income, replaceable jobs, or being completely replaced by automation.
The problem isn't convenience stores (I lived in japan for 1.5 years and lemme tell you, they're wonderful and everyone loves them.) It's capitalisms completely unregulated growth in situations where no one could possibly benefit. They call it competition, but that's not what this is in practice.
oh, cool. you're jedberg. thanks for the cool stuff you did back in the day on that one website ~.
Ask HN: Should I make a new XML template engine?
Several times over the past few months, I've found myself needing to programatically create XML documents (HTML plus some other flavours). Before this I hadn't rally had too much experience with XML manipulations.

I've been using Vue for a while now and it's in-element directives for templating logic are just great, but there are no similarly simple templating engines out there. Everything else requires extra 'stuff' in the template.

I've had a look at vue-template-compiler and it seems that adapting it to my purpose wouldn't be too much effort.

Is this a good idea? Is there anything else like this out there? Written in javascript? Would you use it?
Yeah. The social uplift only happens to people connected in some way to where the capital is accumulating. If you live where the capital is flowing from you're gonna have a bad time.
I don't think it does. Decreased friction provides a very real, very large boost to almost any business like this. Any uncertainty or mental effort makes me much less likely to go, especially if there's another option that I am certain will provide me what I want. Conversely, if they're reliable and require little effort, I am much more likely to grow to depend on them habitually.
Facebook famously answers in scenarios like this “I’m not sure” in order to avoid answering questions. It is not sufficient for a lackey to go considering this.