skysight-inc/HackerNews huggingface dataset:
Clear, detailed but accessible, plans in place moving forward, apology read sincerely, providing support to affected customers immediately, and answering follow up questions to technical users who are interested in more detail.

A+ job on handling the unfortunate situation, Monzo.

We can only hope more companies follow this great example.
> But that also means that if your password manager is compromised, 2FA is broken as well.

You either trust the implementation or you don't. If you think a breach of your password manager will result in the hackers ability to decrypt the vault them you need a new password manager.

At some point you have to trust the encryption.

Plus, if it's really on your mind you can store the keys in an offline vault with something like Keepass.
That behaviour is literally what this article is discussing trying to stop:

- Documentation: Warn users not to save their QR codes

- Documentation: Tell users to only provision one device

- Documentation: Suggest TOTP applications that don’t support unencrypted export

Why are we telling people to use 2FA if we then immediately remove the security benefits by telling them to treat it like a password?
That’s only true if you configure it in a particular way. By default it stays running when closed so it can notify you and update its badge.
Reminds me of the Irish Chronicles that say the people came from Galicia in northern Spain, before that from northern Africa (possibly Phoenicians), all the way back to Scythia (the horse archers who smoked weed in tents). Seems like a stretch but I think there have been some DNA studies that confirm parts of it, but my understanding is the medieval monks who compiled the stories were trying to claim a link to the Mediterranean/holy land in order to connect their identities to the Bible. Maybe they were mixing up multiple different migrations to fit the narrative. I'm curious about what real historians/scientists think about it.
How exactly is stability not paramount in Elixir? It runs in the BEAM.
Crypto is just a very effective security with which to speculate, part of the game is that its not tied to any real world asset so no price is too high or too low. high volatility, low regulation, built in deflation, limited supply(because people like to hoard coins) and just enough technical innovation and jargon that it seems "high tech", fear of missing out... all these things created the perfect storm for smart and dumb people alike to pump bitcoin to the moon.
It is at least ignorant and dismissive to think that.

I've met a few people who face social pressures from their family, who number in the dozens, to do things that appear extremely financially irresponsible from my perspective. If you have to choose between being responsible and not infuriating the 40 most important people in your life, I don't think that would be an easy decision to make. Go against the grain too many times and you risk having the family turn their collective back on you, which might be the best thing financially, but is still a terrifying prospect.
Horns are growing on young people's skulls, Research suggests phone is to blame
It's my understanding that the "horn" is some kind of growth at the base of the skull caused by craning it so often. So nothing like a horn any more than someone with a spinal condition if I'm reading the article correctly. Hell the messed up scar I have on the back of my head from falling on a rock as a kid looks more like a horn than this condition does.

That's how you know it was an entirely intentional headline meant specifically cause a christian confirmation bias freakout because they know many christians (and some-nons) will stop reading there.

It's getting REALLY annoying in general. HN sometimes helps filter this but sometimes people just paste the headlines unmodified. Really makes the political posts even more loathsome than usual.

Washingtonpost in particular seems to love engineering these rage-clicks at the expensive of integrity. It doesn't help when the same people who stop at headlines will stop when they see the subscription spam.
This is awesomely inspiring. Such a simple yet cool idea!
I haven't ever done this, not even with my wife's phone, so I'd consider this an obscure case.

As for the yubikey croaking, easy: carry a backup.
Calibra wallet won’t launch in Facebook’s biggest market
Why use GAuth and not AndOTP and do backups to synced folder?

https://play.google.com/store/apps/details?id=org.shadowice....
> They shield you from product owners and stakeholders by meeting with them and giving you only the information you need

I've worked at a lot of places like this, and I'm continually surprised people enjoy it. For me, it always ends up having the telephone game problem. You spend a huge amount of time error-correcting.

How do folks scale it? Given the aforementioned error-correction process, the amount of time a manager spends facilitating that process caps with very few engineers.

We have gone another way and our engineering teams work with product managers and together they make decisions. The PM deals with gathering feedback from our analytics teams, end-users and clients, and summarizes that for the team.

We feel this gives a sense of ownership to individual engineers and allows them to make better decisions without a lot of back and forth communication funneled through a proxy. And it also means we don't need a dozen managers.

Good engineers are expensive and hard to find, and I'd say finding excellent managers is just as onerous.
I have a feeling he wouldn't have given up if the secretary stonewalled him. But kudos to her, still.
It reminds me of Mark Twain - The Awful German Language.

It combines anecdotes of an English speaker about Germans and German and makes for an amusing read for everyone. But .. please don't use any of these works as any sort of hard truth or reference.
> many of which from shills

This breaks the site guidelines. Please review them and follow them when posting here.

https://news.ycombinator.com/newsguidelines.html
No, corporate "agile" is the problem. Politics, resistance to change, and power struggles are what's fatiguing. True Agile is liberating and invigorating, but unfortunately rare.
> If a function description includes an "and", it's wrong

Unless you have procedures.

Also, the 'don't add boolean switches' doesn't count for Powershell, as you can use named switches that are false if not added. For other languages you could add constants
Yeah... problem is, we don't want to be lumped in mindshare-wise with companies like Dr3Data, Leadiro and whatnot. Salesloft is more akin to Vainu. All these products provide lists or company intelligence. We're a search engine where you have complete freedom to search :)

How about... a b2b search engine? Not sexy either but it has the search engine in there.
I had a hell of a great time on G+. Almost all of my current internet friends are from there. I had great chats with many interesting people, like David Brin. Really if you were part of the "engaged users" group, it was fantastic.
Google Plus failed because of the following reasons:

1) Invite Only
It makes sense for gmail to be invite only, as you can still connect to non gmail users. Its email.
It doesn't make sense to make Google Plus invite only. You are just limiting the growth of your product. It was dumb.

2) Circles
Circles were good and bad. Circle are groups. Groups are what everyone now uses on WhatsApp, but WhatsApp is optimized for PRIVATE communication, while Google Plus was a SOCIAL network. So, when I made awesome posts and shared with my circles, those who were not in circles, saw my boring empty profile and moved on. What is there were others interested in my Lego and Arduino cirles? They wouldn't be able to know about my lego and arduino posts, and they wouldn't be able to get themselves added to my lego and arduino circles (they tried to rectify this later on by some other feature, but it was too late by then).

3) Real Name
Why try to go this route? I just didn't understand. Maybe requirements from higher-higher up?

4) Slow UI
While the UI looked good, I am not sure how good of an experience was it. It was definetly SLOW.

All they had to do was to make a facebook clone. Then slowly polish it.
By the way, you claimed V was too primitive to build anything other than Fibonacci.

What about this? :)

https://vlang.io/img/buildv.mp4

Are you going to retract your statement and apologize?
Doubt it.
If you want to have a thriving community around your software and have bazaar-style development process, you better go with mainstream languages (C, C++, Go, Rust, Python, Java, etc.) The community is a great thing as projects like Linux and Kubernetes can show us. Yet there can be situations where you're the single developer on the project, or there are just 2-3 devoted hackers doing all the coding and for a variety of reasons there are little chances of inviting more people to join (niche projects ... closed projects w/o too much funding ... or maybe you're just not a good community builder). From my experience, Common Lisp with all its power is a perfect language for the latter situation. For me, it's also "thinking" language, as you can do exploratory programming easily compared to other modern languages. Source: I've built a control system for industrial electron accelerators using Common Lisp.
If the other poster has the tan pinned then it is probably very easy to find. Perhaps even command-2 if it’s pinned in the second tab from the left.
This instantly made me think of Qbserve.
FTA:

> The bug was in a computer program the [third party] Gateway uses to translate payment messages between two formats. When the program was operating under load, the system tried to clear memory it believed to be unused (a process known as garbage collection).
> But because it was using an unsafe method to access memory, the code ended up reading memory that had already been cleared away, causing it not to know how to translate the date field in payment messages.
Show HN: Forkizard, a wizard for comparing GitHub forks
People opted into other social media platforms. G+ forced it on you one day. I think many people resented that.
I haven't seen the code personally, so I'm not sure. The condition was inside the code of the Gateway provider.
I find it so funny how people use to make fun of ColdFusion cause of it's tag syntax and the ability to create your own custom tags. Seems we have come full circle now on the frontend. ColdFusion was truly ahead of it's time.
So, by that definition, every password manager is broken. If your machine is compromised, it's kind of game over there.
Very likely 6 cored dies simply have 1 or 2 defective cores that were either damaged during manufacturing or failed test.

As for frequencies, modern day finfets can clock way way higher than planar devices, and are more limited by thermals than anything else.
>It doesn't even ensure type safety because there is no runtime type validation for JSON objects received from the API.

what do you mean by type validation of JSON objects? If you mean, that you can for exammple pass string to object property defined as number, then I must warn you, that this is problem in all languages (eg. most java json serializers, will throw exception). Anyway if you need to ensure all object properties have correct type, you should write validator/transformer (there are already libraries that can do it for you).
Discussed at the time: https://news.ycombinator.com/item?id=7949313
Pardon me for saying it but it sounds like you tried for 5 minutes, gave up because it's not familiar to you, and then said you don't like the pipe operator.

You might have wanted to say something else but this is how you sounded to me. Am I wrong?
I wish all 2FA worked like when logging in with your Apple ID.

- 2FA by default

- Push notifications for the token to all your devices instantly

- Not a text message
Show HN: Reading list of popular Hacker News users
Yep - I saw that post too. Thanks for pointing that out. Google has come to mean too many things ;-)

This was the one I believe: "Show HN: Bloom – A free and open source 'Google'" - https://news.ycombinator.com/item?id=20105567
I think you're right, but that number should be correlated with number of users running browsers with JS turned off, which I suspect is trivial and shrinking.

The biggest issue I've seen with virtual-DOM sites is SEO. Google's crawler started using JS a number of years ago, but there are others that don't.
Extraordinary claims require extraordinary sources ...

(for sure the money spend on the wars would have been better spend on green tech, but ... I think the amount of money to change the whole industry to preindustrial exhaust levels ... is a bit higher)
Maybe you don't have to rename. It might be awkward to pronounce the current name, but unless you have any data indicating that people's purchasing decisions are being affected...
The author seems to have suffered a bad case of misunderstanding the "Berliner Schnauze"...

I, unfortunately, also read the whole linked opinion piece on german humor from the economist [0] which I almost disliked even more. I might just feel insulted (being German) but please: calling out "Instead of a raised eyebrow, we get full-body signals to laugh now." from the country that gave us laugh-tracks...

[0] https://www.1843magazine.com/ideas/the-daily/being-german-is...
I've noticed this too. I worked for companies that had one big customer; possibly branching out with two or three others. But if that one big customer ever went away, the company would probably collapse. They really should have just been bought and made a subsidiarity:

https://penguindreams.org/blog/tech-culture-shock-from-ameri...
My biggest issue with WCs is that they only solve a small part of the problem. You get custom tags but without data binding and some form of reactivity these are not very helpful.

Lit, Skate, Stencil, etc, solve those limitations, but if you are already using a complicated toolchain and third party code for doing the heavy lifting I don't see much value in WCs.
Do you have any actual arguments?
> It's a failing of the American condition. The country was founded by radical conspiracy theorist farmers that didn't want to pay taxes. Distrusting government is in our national ethos.

Not true at all. Distrust of government is a relatively new phenomenon in American politics. It can be traced back to Reagan's infamous "The most terrifying words in the English language are: I'm from the government and I'm here to help" quote. This is because Reagan strictly believed in small government, and wanted to limit government interference in most things.

Before Reagan, Americans had no issues trusting government to solve big problems or accomplish major goals. See the Space Race, and Roosevelt's New Deal policies two decades before that. American people were largely optimistic about those endeavors because they trusted their government.
https://www.stokesentinel.co.uk/news/you-qualify-buy-1-house... was what I was referring to.
That seems to have been the "common wisdom" for a while now, but I'm not so sure that it holds so much today. With everybody coming out with bloated SPAs is it possible that faster processors will start to be required for normal web work?
I don’t agree with some :

Rechtschaffen -> righteous

Anständig -> decent

Aufrichtig is not straightforward. Can’t think of a good word but “honest” is closer.

But that’s just me. It shows that direct translation of words is risky and often impossible. There is way too much subtlety.
To be clear: those numbered points are supposed to be in decreasing priority order, right? Colleagues > community > company.
I heard from some keepers that they reduced the amount of honey they take and replace with sugared water, since that isn't an adequate replacement and they say it improved the amount of loss in winter quite significantly. Maybe taking all their honey plays a part?

Would be a shame since it is very tasty...
> Though their languages indicate no superficial resemblance – even the scripts look comparatively alien to one another

well that's hardly dispositive, lots of similar languages use completely different scripts, and dissimilar languages borrow scripts from each other all the time
Lisp evangelists always talk about a moment of profound clarity where the beauty and utility of Lisp just clicks in their brain somehow. I've done a little functional programming here and there so I know what it is, but I just can't fathom why Lisp is so beloved. I can't help but wonder if I knew Lisp (or some other functional language) intimately if I would approach problem solving completely differently.
Because with LiveView you can throw away 90% of your JavaScript and work almost exclusively with Elixir both on the frontend and the back end.
I'm not sure that paradigm ever ceased. ASP.NET webforms XAML had custom namespaced tags, now ASP.NET Core has custom tag helpers.
If you want that, you can just use IRCCloud, it has all that in a single solution. Just like Slack.

IRCCloud can even connect to Slack workspaces.

The only advantage Slack has over IRCCloud is marketing.

It's relatively ironic that I have to end up praising IRCCloud here, considering I'm contributing to a competing IRC client.
The Able Archer exercise was the backdrop of the show Deutschland 83. Very well done series.
On a cycle path that was closed by floodwaters earlier this week, already last night there was dog feces. Dog owners DGAF.
I actually wrote code for this ages ago when I worked on HN. It’s probably still there, if only in git. But it really only makes sense for the internal, secret parts that are YC related. For the forum just use a unique password.
waterbox providing clean water https://www.501cthree.org/
Beleidigt means upset, and frankly you can be upset without beeing emotionally hurt, e.g. you are beleidigt about someone behaving in a bad manner that you had a high opinion off.

Beleidigt is more than beeing hurt emotionally, it is also means the person who is beleidigt has to act beleidigt (e.g. by actively punishing the person you are beleidigt at with avoiding them).

This means you can only be beleidigt at soemone if you care about them or what they represent in some way, while beeing emotionally hurt doesn’t require any such connection.
Blaze near the datacenter: Security measures allowed DC5 to escape the disaster
Deep Learning and Carbon Emissions
> I can call my manager at any time and tell him I don't agree with any of his decisions, he will listen and he can easily be convinced if he was really wrong

This is the most important one.
This is a frequently-repeated view, but I find it completely implausible.

A social network's initial frowth phase is completely predicated on it being a space people want to join, and that is accomplished by its delivering value and appeal.

That might be compelling content, compelling connections, or a mix of the two. A cultivated and exclusive club, as with the Haevard Facebook, or early Usenet, has appeal. It's the opening up to the world which kills that initial growth appeal.

Google+ would have done far better to extend the beta period, possibly by years, and shake out its fundamental architectural flaws.
Nobody is saying IRC is the greatest thing in the world today. It was very effective in its time, and it existed (and continues to exist!) without a profit-driven motive.
This is inevitable: I think there are only two sustained models for free internet content: productizing the user data and/or advertizing. Google or Facebook.

Philanthropy is certainly possible, but not sustainable.
You shouldn't run your own mail if you can't install postgres.
> there is a very strong amount of urban legends, fringe historians supporting outlandish theories with just a bit of anecdotal evidence [...], and bad pseudohistory. There's always claims of mountains of evidence of which just one or two (usually already debunked) examples are provided.

Hey, maybe the Voynich Manuscript is written in Basque!
None of those points above address what I said, nor should they because TOTP should allow for disaster recovery.

To allow for disaster recovery the keys used to generate they TOTP codes must be storable somewhere.

The article is creating a strawman by suggesting to screenshot QR codes and leave them in the downloads folder. It's perfectly reasonable to save keys in a secure manner.

It's also giving borderline bad advice of trying to engineer in an unrecoverable state should a single device fail. That's a poor suggestion to give under any circumstance.

Saving TOTP keys into a separate dedicated encrypted vault under physical security is absolutely a valid method of allowing recovery from a device failure.
Wonderful story. Both the janitor and the CEO epitomize Ayn Rand's "ideal man":

> "The moral issue is: how do you approach the field of work given your intellectual endowment and the existing possibilities? Are you going through the motions of holding a job, without focus or ambition, waiting for weekends, vacations, and retirement? Or are you doing the most and the best that you can with your life? Have you committed yourself to a purpose, i.e., to a productive career? Have you picked a field that makes demands on you, and are you striving to meet them, to do good work, and to build on it -- to expand your knowledge, develop your ability, improve your efficiency?

> If the answers to these last questions are yes, then you are totally virtuous in regard to productiveness, whether you are a surgeon or a steelworker, a house painter or a painter of landscapes, a janitor or a company president."

(HT: http://gusvanhorn.blogspot.com/2019/06/a-janitors-multi-bill...)
Migrations and backups are trivial with Postgres as well.
I believe asrock are the only manufacturer that have come out and said yes we test that ecc will work it's just not a supported config. The others don't quite commit that far.

I have an asrock + unbuffered ECC ryzen 5 1500 setup. I've checked windows does indeed detect errors when induced.
Muzzle – Silence Embarrassing Notifications
Can you add an additional name? HxHxHx - DesktopThing

Over time, you could transition to using the additional name more and more, and finally, rename the product.
What I typically do is cmd+tab then use the cursor to select the application from the popup.
Lots of places in Japan don't take Visa/Mastercard, so it's either Suica/Pasmo or cash. There's tons of vending machines, for instance, but they don't take credit cards, but a lot of them do take Suica. Suica is basically a debit card; you put money on it (there's terminals at all the subway stations) and then spend it on the subway/train fares and also at other places that accept it, like vending machines, taxis, and various establishments.

The only thing I didn't like about Suica/Pasmo when I was in Japan was that, unlike a credit card, there doesn't seem to be a way to get a statement so you can see where you spent all your money. But I was only there for 2 weeks as a tourist, so maybe it's possible to get access to that and I just didn't find it.
From my experience, most people in Japan seem to take a lot of pride in being honorable. Therefore, scams are pretty few and few between in general.
Is that really proper use of the term garbage collection? If you are doing memory management manually, it sounds more like the lack of garbage collection. Unless they were using an unsafe GC for C/C++?
How do you know you have a good idea?
A free alternative?
The point is defense in depth. If you must rely on one app, no matter how secure, it does nothing for depth. The whole point of MFA is to have multiple unrelated authentication steps so that when (not if) one is compromised, you're still protected.