skysight-inc/HackerNews huggingface dataset:
Interesting work! Judging from the commit history, it seems to be entirely the work of one person, Øystein Myhre Andersen, whose GitHub profile contains the following bio blurb:

> Veteran Software Developer, born may 1946. Worked with various Simula teams from the very beginning. Speciality: Runtime Design and Code Generation.
Hmmm, I instinctively pronounced as "Cube-zerve"
I hope Intel will at least offer ECC memory for their consumer CPU's now. For now at least AMD are offering the option and will only increase uptake, increasing supply/demand and drive prices down.

I hope that in a few years time that ECC will become standard, as for many it is driving a car without a seatbelt.

This and with security exploits (rowhammer), ECC would be the solution that is a price gap that for many, is still one that can and should be closed.

That all said, it would only take the one or two big mobile manufacturers to go ECC and marketing virtu the whole security and integrity aspect for the rest of the market to follow suit. Which would be a bigger driver in reducing the price gap premium over non-ecc memory.
Which is how I see things panning out as mobile phone makers are running out of sell features to add and this would be an easy one for the premium market of phones out there today. Also one in which would go down very well for that feature alone.
Duo Security has a phone migration/transfer feature now. You need to enable it in your org settings and opt-in.
Be aware that On Lisp was written before ANSI common lisp was standardised so there are a few areas towards the end (if I recall, in the continuations chapter) that won't work as written.
Gmail could send and receive emails outside gmail.

FB wasn't restricted within your likely friends group (all students at particular schools were made eligible at the same time).
You need to think about the security of the whole system, not just the storage encryption: very few people get compromised by someone running an offline brute-force attack compared to the number who get malicious code running on their system. Password managers can make an effort to harden against that kind of attack but ultimately that's why things like MFA exist since there's a high likelihood that someone will be able to ready anything you have open.
If the service supports that then it's fine. A lot of services only support a single TOTP key per account though.

There's a small risk in provisioning multiple TOTP keys on one account too. Each one reduces the search space for a brute force attack. Add in allowances for drifting clocks and a lack of account lockout for missed attempts and you might open up the window just enough for a brute force attack to be successful.
"Cook French cuisine like a Master chef"! - Good list by Michael Seibel :)
On the abandonment and survival of GitHub projects: An empirical investigation
KFC is 180 years old?!
Recovery codes should not be mandatory. Recovery codes are not second factors — they circumvent the 2FA scheme. You should, of course, allow users to configure recovery codes. However, the default behavior for a two-factor scheme should always fail closed: if a client cannot produce a valid second factor and hasn’t voluntarily weakened the 2FA scheme by adding an escape hatch, they should not be allowed to continue.

This is unrealistic. Users lose 2FA credentials regularly. Think of recovery codes not as a defense for the user, but for the service --- they're keep some number of customers out of your terrifying, manual account recovery flow.
Facebook's Libra have a great impact on developing economies
For the imperial folks, 700 sq m is about 7500 sq ft. That's big.

It's tough for me to imagine using that much space, it's just going to accumulate dust. But then again, the people building houses that big probably just hire someone to dust it for them.
We've had fruit trees and grown vegetables in our garden for getting on 10 years and started beekeeping 3 years ago. We've had huge amounts of produce ever since (UK).
In a democracy the lowest common denominator of citizens determines policy. They are easily manipulated by moneyed interests and always insanely uninformed (not because they are stupid but because it is impossible to know everything). Knee-jerk, short-term policy is a given.

Private insurance companies are held accountable by the customer's ability to switch plans.

I understand that billing is an incredibly frustrating issue, but forcing people to participate in one master healthcare system would be devastating to people battling poorly understood diseases. People in this situation desperately need choice in their healthcare options.
You guys really think that enterprise-tier Fortune 500's are going to switch from Slack to a free alternative? Why would they? The money they spend on Slack isn't even a rounding error in their budgets, there's no way that they would want to cut that out and instead have their internal staff try to support some free service instead
It's a problem of mixing data and visual elements.

In a good model of the web, html is your data, css is your styling, and javascript doesn't really exist.

In another model of the web, your data would be your data, html/css would work together to form a scene-graph. Javascript defines the relationship between your data and it's scene graph.

That friction, are we using html as data or as part of our scene-graph, is what causes a lot of these problems.

I like web components because they bring you closer to having html be just your data. I like react because it brings your html closer to being just your scene graph. Both solve the same underlying problem from different directions.
This is a perfect post-mortem. Their communication and support has always been really good. I've been using Monzo as my primary bank account ever since they registered as a bank, and I've converted a lot of friends to it. But... over the last year, the iOS app has fallen in quality: long UI freezes, frequent sign-outs with no explanation, silly UI bugs. My non-technical friends have noticed the same issues. It's a real shame.
It would be but just how a tiny country such as Switzerland can dominate the watch manufacturing industry, smaller countries can specialize in a particular industry and excel at it. China still would have a competitive advantage but as the middle class in China rises, labor is getting more expensive and asia-pacific region is ready to accelerate manufacturing capacity. If these countries play their cards right, allow seamless trade and promote a strong supply chain; they can be serious contenders.
@robinson-wall Nice writeup, definitely raises the standards in the banking industry! I have a few questions:

1. Was this post-mortem part of an official process or something of an individual initiative? I saw it published on the blog, but it might be helpful to have this information disambiguated from marketing material on a separate site: https://status.cloud.google.com/summary

2. I'm not sure how payment processors work, but would having multiple payment processors from Monzo's interface make sense from a cost/benefit perspective?

3. Any plans to expand to the U.S. anytime soon, or recommend any banks that follow Monzo's best practices? ;-)
I don't disagree with at all and I should be clearer in what I'm saying. One has to think logically about where the dangers are and what MFA is used for.

If a cloud based password manager is breached and that leads to decryption of the password vault then that password manager is not fit for purpose under any circumstance, whether you store TOTP keys there or not.

So by default we have to approach from a position of trusting encryption, right? MFA in the realm we're talking about here plays no role in encrypting the vault (yes you can use keyfiles or hardware keys as part of the decryption/encryption process), under this context MFA is about authorising access to an account.

So you can go ahead and store your keys in a second vault, but that vault must have as good security as the password one in order to be secure - i.e. it must not be decrypt-able.

So if each of the vaults much not be able to be decrypted in order to be secure there is no reason to use two, as one will be 'good enough'. not decryptable x not decryptable =/ more not decryptable.

What I would say is that there are key accounts that need to be secured with offline physical protection. For me, and I'm guessing this is the point you're making, those would be the password managers MFA.

If you trust your password manager then you only need to secure access to it in order to secure any other keys/passwords stored inside. So you only need to remember a password (something you know) and use a keyfile (something you have) to get access. You can substitute MFA TOTP key here to if you like, but you just have to secure those two things.

If you trust your password manager, you don't need more than that. You obviously have to trust your machine, that's a rather obvious truism I shouldn't have to point out.

So my point is, be realistic about where you store thing and what you store and recognise where the defence in depth is of value.
> a modern webapp that really any 10-headed team of highly talented web programmers could come up with and implement within a month or so

infamous dropbox comment https://news.ycombinator.com/item?id=9224
AVX (https://en.wikipedia.org/wiki/Advanced_Vector_Extensions).

It's weird to bring up big companies as they use every language under the sun and of course, they want beginner friendly languages for a big chunk of their work.

But I do think you underestimate the number of times they reach out for systems languages like C++, heck Fortran beats Java in numerical computing.

I haven't heard about LeetCode so I cannot comment on that. A site for unemployeed coders to find work?
I was thinking Bvckup https://bvckup2.com/ :)
The review starts with a discussion of whether violence or peace is man's natural state. From the review:

"The defining challenge for social life in our day is that we are now at the tail end of several centuries of thinking about politics with the assumption that violence, rather than peace, is the natural state."

Worthwhile.
Your definition is so broad as to be useless.
People use two different definitions of "McMansion", to mean wildly different things.

To some people, a "McMansion" is any single family house they happen to dislike. Those are the kind of things working-class people buy on credit. (Homes in the 1200sqft to 2400sqft range). These are basically cheap disposable housing, they are popular because all people have to have somewhere to live, and this is usually the cheapest possible housing available that's still slightly comfortable to inhabit.

This article is not talking about those. This article is talking about actual McMansions or just real Mansions, homes in the 5000sqft to 8000sqft+ range. They're like 2x to 4x bigger than a typical house (even when using American sizes for 'typical house'). No regular person owns these, you have to be entirely in the "wealthy" category to even begin to look at them.
To some degree, where its followed at all, where its enforced at all, and when its not convenient exceptions get made. That's kind of my point... If this becomes a crackdown there will be an equally large backlash.
What about the headache of maintaining a big home? I've seen what it is like to care for a large home. It's a nightmare, whether you have money or not. Every pool, every gymnasium, every commercial-grade appliance, etc. They all require maintenance, repair, and eventual replacement. To do that, it costs a lot more and the available labor is much more limited. You have to wait weeks for some guy who lives two states away to come in and work on your elevator and when he gets there he charges you an unbelievable amount of money to do basic things. And when things aren't broken, you have to always be renovating or updating something. Things that look like they are aging or out of style don't signal your status because they tell your guests and visitors that you have a big home, but maybe can't afford it. So you're always updating. Always renovating. It's all a show.

The idea of dealing with all of these "luxuries" is awful to me and I've seen wealthy people who didn't have to work basically turn home maintenance into their job because it required just as much time and stress as anything else. What is the point of wealth if things you use it for give you just as much headache as a middle class person's job?
The saying 'camel is a horse made by a committee' applies to this situation. There was almost certainly no base creative drive when creating the actual product. Most things that end up being good are driven by someone who is viewed as somewhat crazy but has enough power or force to get what they want and/or steam roll others.

Not to mention I am sure they are confusing smarts with luck. The decision makers think of themselves as where they are because they are really smart and less lucky and opportunistic.
I guess it depends on your perspective. It may mean pain for some and relief for others with a view to moving towards a more optimal solution for society as a whole. How can we use our housing stock more effectively?

As things stand, people defend the status quo when young people and those on lower incomes are struggling with high rents and property prices. Some have kids and have to share rooms and live in small properties. Others may end up debt slaves for the rest of their lives.

>There are plenty of old people that are able to keep living in their existing home because it is familiar but would be unable to live independently in another home.

If they have a net worth of $1m+, I'm sure they can afford to pay for care. I am not talking destitue, improvished individuals.
> W3C and FIDO finalized the Level 1 WebAuthn specification back in March. Chrome and Firefox already have mature support for it, and Safari is expected to follow.

> Upcoming Android releases will allow users to use their phone as a security key, and iOS is expected to do the same.

This does not make me happy. Why does there need to be a web standard for this? I do not want Firefox to store my keys for me. Or any browser. I do not want transparent authentication, I want it to be explicit, and I want it to be offline.

I have the same issue with hands free keyless entry/ignition for cars. The feature is solely for convenience, and exposes far too much.

The way things work now is the best. When setting up 2FA, I write down my key, and import it into Google Authenticator, or oathtool for the command line. There is no integration, no automation. It works just fine.

In the future I'm imagining my 2FA secrets being stolen from my browser, or being used to track me. Google "for my convenience" automatically logs me in so it can track me? Or perhaps, my bank checking my battery level, WiFi hot spots, and the model of phone when it pulls the 2FA tokens to verify my location. Also, I can only log on with their app on my phone, because the tokens are hidden, further making my desktop useless. Maybe a website figures out how to use JavaScript to generate another logins tokens. It takes an hour of tokens, and feeds it into hashcat on AWS to break my key.

No thank you.

The rest of it though is great. SMS 2FA can die.
Why does it have a call for a script to google.cn (China)?
Would people be less likely to buy it if the podcaster had to spell out the name? It depends on how rational the decision to purchase it is.
Bitwarden, 1Password, Authy etc. have encrypted sync/backup of TOTP secrets.

With hardware tokens.. unfortunately the real solution is "enroll a backup one to all services".
Social networks, like space launches, are complex systems, with many failure paths and few leading to success.
Unlike sppace launches, there can also only be a single leading platform in a winner-take-all regime, making success far less likely than in rocket engineering.

G+ failed for multiple reasons, despite being successful in numerous particulars. I miss it, though I don't regret its passing.

As with other criticisms, this one is on point in noting that the failures were of leadership (and all the way up the stack: Bradley, Vic, Larry, Eric), and architectural.

Site mechanics (good points by Talin), unreliable messaging, and the "let's cram this down everyone's throats" elements all left a very bitter taste.

What Talin omits in particular (though it's alluded to briefly) was the extent to which Google directly fought many of Google+'s biggest enthusiasts, with #nymwars (the Real Names policy), noted, being only one of the most notable instances.

I'll also distinguish G+ fans from Google fanbois -- the latter were (and remain) toxic to the company. Thos includes many (though not all) of Google's annointed "TCs" (top contributors), many represented among the G+ Google+ Help community, where active frustration of efforts to help users and groups migrate off G+ in its final months and days was a constant factor.

Another element creating tremendous distrust was Google's repeated ridiculous statements as to the site's success, openly mocked in the press. In early 2015 I proved by a random sampling of profiles that a minuscule fraction of the billions of registered profiles were posting publicly on a monthly basis, methods and results confirmed several months later, on a far larger sample, by Stone Temple Consulting:

https://www.stonetemple.com/real-numbers-for-the-activity-on...

Later 2018/2019 analysis of G+ Communities further cemented these findings. This also showed the huge value of regularly contributed, fresh, relevant content to success, over raw subscriber counts. Post recency was a far bigger prediction of other engagement (comments, +1s, reshares) than subscribers.

See:

https://social.antefriguserat.de/index.php/Migrating_Google%...

That Google, a notoriously metrics-driven firm, could not or would not credibly analyze or report such data was a huge blow to its general credibility.
5G brings cell carriers up to par, but it isn't a revolution
The linguists of Quora had a similar discussion a while back about the putative similarities between Hebrew and Navajo. Basic conclusion: if you accept loose pairings (shoe/boot) you can find "inexplicable" coincidences anywhere you want.
We compiled it from their twitter feed and HN threads.
UI is graphical design, UX design is research + a heaping dose of common sense.
Music industry targets troll farms distorting streaming revenues
Stumbled upon quite some words like that in 'Written German' aka perfectly fine and official German (like the sign text quoted earlier).

'zuegeln' vs 'umziehen', 'grillieren' vs 'grillen', 'wir gehen in den Ausgang' vs 'wir gehen aus' come to mind, but most of the samples aren't in directly accessible memory anymore (and just as above, before you confirmed my suspicions, I'm not sure if the word I'm not familiar with is actually not a thing or just something I didn't encounter)
We often say in France that it's better to look at what part of the Louvre are of the most interest to you and only go to these ones. Even spending several hours in a row is no use as you will probably be tired in the end and won't appreciate what you'll see.
I moved from the UK to Germany over ten years ago. I’ve lived in the South and North, city and countryside.

None of this article really rings true. Germans are just as happy to tell polite lies and make small talk as the British.

Maybe some things are just lost in transliteration.
I hope you're using TempleOS and not some satanic operating system
Are you able to speak a little to the Lisp engineering without giving away "secret sauce"? Is Lisp serving the web pages too or only generating the star maps? Did you use CLOS heavily? MOP? FFI? Anything else "exotic" that I've failed to ask and you can speak about?
You should have this basic right to repair. If you are unable to repair it and even break it further, it will cost you more for the company to repair it.
This right should have the right to have the repair company to connect it and scan it, for a nominal fee, and tell you what is broken and what they would charge. You can then decide. With the complexity of modern devices, you may have to go to another company with similar data assessent equipment to cary out the repair. Modern circuit boards are a sea of small surface mounted parts on both sides...
Even if you’re writing in one of the languages you mentioned, the likelihood that some huge community will develop around a project is quite low.
3. https://monzo.com/blog/2019/06/13/monzo-usa/
>They break down almost completely for large-scale finance, real estate, medicine, and other sectors of education.

You just rattled off a list of sectors where the free market is the least free (though in the case of finance I think they more than earned it).

Of the four things you mentioned I would deregulate two, regulate the crap out of one and get the federal government out of the business of backing loans on another.
Yes, he’s head of our architecture group now.

Source: I work at Intel currently.
First-ever successful mind-controlled robotic arm without brain implants
Yes, it would be "Widerrechtliches Parken wird angezeigt" in German German.
Force them to raise children with measles?
I'm trying to figure out what exactly Google 2-Step Verification is, and whether to trust it or not. It doesn't appear to be a text, and provides a push notification to your device - it's super convenient, I just don't know if it's particularly strong.
Hacking Hardware Security Modules
Fink's Convergence Connects the Dots on an Augmented Future
> Google has been worse at naming products than they have a right to be.

Driven by engineers and not creatives. And even if you have creatives driving the product (naming or otherwise) it still won't make sense to the engineers who are the final deciders. [1]

[1] I don't mean there are engineers but that the base people who are in power come from or think like engineers vs. creatives. (Think Walt Disney vs. Eric Schmidt or Steve Jobs vs. Bill Gates).