skysight-inc/HackerNews huggingface dataset:
Passwords are not just for websites, same services has different domains, sync is free, autocomplete on mobile, passwords are not the only thing I want to save, etc.
This is a really important goal, but whether simple mandates can solve it, I'm not sure. The real problem is that consumers don't care about the prices, which is how all the various layers of providers and middlemen are able to jack up all the prices without limit.

High deductibles are one way that consumers can be made to care, but obviously that has its own problems. Single-payer would not fix the problem by itself, either... although using monopsony power could certainly help, if executed competently.

Merging a single-payer approach with a high deductible approach could work, and the deductibles could actually be paid via a government-filled HSA account that one could rollover into a retirement or college savings account, if unspent.
Based on the article, it looks like the study was done very sloppy. There is a big difference between lgb and t+. If I learned that my doctor was lgb, I wouldn't care. But if I learned that my doctor was t+ then I would treat it as if I learned that my doctor was schizophrenic.

> Just last year, reported hate crimes rose 17 percent

There is no source given, but if they are using the FBI reports, then even the FBI says that it cannot be used for measuring trends, as their method of information gathering changes.
base can be decoded. hash cannot be reversed (should not be able to). That means if someone gets the hash, he can only guess the password based on hasing all his guesses and checking the outputs. that takes a long time compared to being able to decode and read the password directly.
What would the advantage be in using Libra over a online wallet(PayPal, etc). It doesn’t have the anonymous nature of Cryptocurrency or its volatility. It’s backed by a currency, and they will still charge a fee, so why use it?

EDIT:
I realize that some people might not be able to get bank accounts, and know that makes more sense, but what other reasons are there?
Uh.. isn’t that pretty much what things like lpcnet and wavenet and codec2 are (discussed here) doing? These are codecs that are speech specific. I don’t understand what unique idea you are trying to “spitball” here.

Lots of advanced research has been done in this area. These are the results as of now.

Things will hopefully continue to improve.
I started playing with Flight Simulator 3 or 4 - not really sure which. During the summer I'd stay at my aunt's for a few weeks at a time, which was mind-numbing since it was in the suburbs away from all my friends.

My cousin had left his screaming fast Packard Bell in his room after he went away to college and since I clearly had decades to kill until my mom came to get me, I spent a lot of time trying to figure out Flight Simulator. I had no idea what I was doing, but I successfully flew from New York to Meigs Field at least once, and always loved to fly around the Chicago skyline since I missed home - and didn't know much else at the time.

I never really played the game much, away from that old Packard Bell, but the game's a big part of my personal journey into computers - at a time when nobody else in my world knew much about them.
UK Space Agency and O2 Partner to Develop Driverless Car Tech
How do you handle password rotations? I am intrigued regardless.
KeepassXC - it's not as comfortable as Keepass on MacOSX but it does the job. And it's open source with no one in danger of running away with your passwords.
What other areas do people with technical backgrounds move into that don't require so much sitting? With degrees in physics and applied math, I'm not sure where I can go and not be at a desk (or take a huge hit in $$).

Just 3 years out from school, and I can definitely notice the difference in my physical health and mental agility. I have taken up gardening to get me outside and eat decently well. I can still feel the effects, scary.
I'm curious what causes that strange phenomenon. You had a 50-50 chance to get it right, but it's the wrong way almost every time.
Apple cites Spotify subscription stats in new antitrust defense
I’ve thought about a similar method but I’m not sure it would be portable for me. First I do not always have access to a bashing function. Secondly what happens if a website url/name changes? For me, I can’t remember all the exact details so I use a manager
If that is all you are after, then the most efficient codec of all is compressed text, and the player a text-to-speech engine.
The developing world doesn’t care about the reputation Facebook has on HN.
Chicago-Based Startup McPond Aims to Be the Uber of Manufacturing Industry
Most of the time, I don't see an issue with non-native looking UIs. Oftentimes, non-native UIs look better.

VSCode and Atom both look great and they're non-native. I also think Slack looks pretty good too. Except for MacOS, native UI widgets generally seem to be pretty ugly.

Even Microsoft is embracing non-native UI for its own Microsoft Office platform.

Web-apps/material design, look sexy.
>"This is just an appeal to emotion."

Not at all, its an appeal to civility. The statement that Cloudflare made with "there's no good reason, other than sloppiness or laziness, that they wouldn't have such limits in place' is the appeal to emotion here.

>"No-one is even calling out any individual people.'

No, that is a very clear attempt to call out a specific group of people who work in the network engineering department.
Hardcore flight sim pilots will scoff at your comment, however, optional gamification (battle royale or missions) would make it more commercially successful, funding future development.
I just changed the site to use a plain background color. Thanks again.
I never said you wouldn't have to dereference and check the implementation. That's debugging. I said that it would make my intent clear. That I wrote the code below that line with the assumption that url is absolute and not specifically only the 'http://' case. The abstraction here is about encapsulating and communicating my intentions.
Because apple constantly markets the iPhone as a private and secure device.

"What happens on an iPhone stays on an iPhone" is a blatant lie.
No worries, they're just gonna take a pic of your government ID and fingerprints for KYC requirements which are securely isolated in a vault in Switzerland where they will remain 100% safe, except in that rare instance where you need to buy a cup of coffee, and they therefore need to inspect all your records to make sure you're not funding terrorism. /s
This! I’ve moved from LastPass to BitWarden and I like the clients way better. Browser extensions, Desktop, Mobile (iOS), CLI all work pretty great.

It’s core is opensource and you can run your own server if you want.

For my less critical accounts even the 2FA token is stored in it.
Thank you for sharing and I'm sorry for you. A professor who inspired me toward applied math and computational sciences passed away a few weeks ago from a heart attack. He was 47 and had several young children. Health is no joke.
But what about Privacy and Security which we should concern.
1passwordx nowadays is actually better than my 1password OSX experience. You should try it. I'm slowly moving myself off of OSX over to manjaro and I was shocked at how good 1px worked. It's more "the full app" than it is a "mini mini" like I assumed it'd be, but admittedly I haven't used it for a full 8 hour work day yet so maybe I'll have complaints in a few months.

I cannot wait to finally get off of 1password completely, though. Their latest mini update is an absolute joke. They break app functionality or they shove a detour in my workflow several times a year. Usually connectivity between the miniapp and full app break and when you're someone who enters passwords all day long you really start to notice how much slower you are when your workflow changes. I've had to reinstall the app multiple times this year because some $bug broke connectivity between the browser and the full app.

1pass's android app STILL does not have a password generator built inso you'll never want to create accounts using it but the rest of its functionality is pretty good. This is a huge annoyance of mine. I shouldn't have to go grab my laptop to make an account just to make sure I'm not using one of my in-memory passwords. Whatever password manager I pick would need full android integration.
heh, i'm not really a headphone guru o something, just listened 8-10 decent iem in my life and nothing from 1k+ price range) All i know is that if you never had something more expensive then 10$ then pretty much any chi fi of 50-100$ will sound good. I have LZ-a4, BGVP - DM6 and pinnacle p1 (not mine, but can use them). All of them have their good and bad sides and it really depends on the dac you are going to use. Because LZ-a4 sound terrific on fiio q1mk2(the cheapest dac i have) with some electronic music. BGVP - DM6 are the best on LG-v30 and have the best clarity overall (The Weeknd songs sound with much greater complexity and sometimes i can feel that there is a way to even separate the Daft Punk part out of Starboy. Don't know if i like it, but it is definitely a completely new experience). And Pinnacle sound noticeably better on any old rock (Fleetwood mac) or something like Norah Jones, Ellioth Smith when you don't want clarity because the record is imperfect and you actually want to here the "velvet" sound.

So i mean that i can't really tell what will work for you. This channel can help, he has some decent reviews https://www.youtube.com/channel/UCIw1An1OUp4XIv_h6si2etQ/vid...

I had couple KZ back in 2016-17 and they were pretty much the same as 15-30$ sennheisers, wasn't impressed, but the headphones industry is changing way too fast, so even today i would have to make a market research myself for a new pair if i wanted another sound signature.

Btw my first kinda decent pair was Sony Xba-C10 (got them for 25$ on sale) and it was my 1-st single armature driver iem and i still think that they can play classical solo piano music (like Chopin or Debussy) equally well as any of my 100-200$ headphones (even better then Pinnacle). Yes they have 0 bass and you can't play any modern music on them.
As of now, GCP has some updated (more fine-grained) permissions, custom roles and has cleaned up how service accounts are created and used by GCP services. Using orgs/projects to cascade the correct permissions is now much easier.

AWS IAM can still give you more advanced rules but is just hard to manage, especially across lots of accounts.
My plan is to extend the HTTP API [1] with an event stream [2] that can be accessed via https-with-a-session-cookie or http-over-Unix-domain-socket. It could be used by browser-based Javascript, mobile clients, and automated event subscribers. One could write a subscriber that launches a subprocess or runs scripts in-process. I think there are a few advantages over doing this directly from the main process:

* it keeps the main process logic minimal. This API is needed anyway to make a good web interface.

* it's the easiest way to have nothing else run as the same Unix user as the main process. My design is similar to a DBMS in that that you should only ever be accessing Moonfire NVR's data through its interfaces (except for development or emergency maintenance purposes). Having a dedicated user helps enforce that.

* your script can run on a separate machine if desired

Also a couple disadvantages:

* two services to set up (main process + subscriber) instead of one.

* there's the possibility that an event happens while the main process is running but your subscriber is disconnected, so the event gets committed to the database but you never see it. The easiest thing to do is to accept skipping these (as would happen anyway if the main process is down). Or the main process could buffer events for a while. Or the watcher could have logic to "catch up" (which unfortunately means not only more complex logic but also keeping state somehow).

If you'd prefer another approach or want it sooner than I'm likely to implement it, please contribute! I have my priorities & design ideas, but if you chip in, you get a say in both. And I go pretty slowly on my own anyway, so if you're able, it's worth chipping in even if you agree with me about everything.

[1] https://github.com/scottlamb/moonfire-nvr/blob/master/design...
[2] https://github.com/scottlamb/moonfire-nvr/issues/40
I learned through YouTube tutorials. Find a popular free virtual synth, I'd recommend Synth1. (Popular because you want lots of content available) and try to understand the very basics of the pieces of it.

Once you've got that down, most popular synthesizers use a very similar "subtractive" architecture, so once you understand the basics of your chosen one, it's simple to follow tutorials using other synthesizers. From there I'd recommend finding a youtuber you like learning from even if they don't use the same synth as you.
A new salt probably
>I don't want to be forced to write a JS app to get benefits here.

Although most major Electron apps are written in node, it's pretty easy to have a backend in another (compiled) language. You can simply use the subprocess module in node and build your own bridge, for example to a Go CLI that accepts events from electron and does whatever you want it to do. It's a workaround for sure, but the point is you could do it in a pretty stable way.

>After all, with ReactNative, it's basically a process RPC to a bunch of widgets

>Yet I can't help but wonder why so many people are focused on solving UI issues with very narrow solutions like Electron, ReactNative, ProtonNative and so forth

I've used React Native in the past and I'm working on a Flutter app now. The problem with RN is that every platform has its own unique widgets. It's neat that you have one codebase, but you still need to build a separate UI (at least for certain pages) for Android and iOS. It just doesn't look right otherwise.

Flutter gets away with this because it owns the drawing layer as well as the widget layer. I know that something drawn in Flutter is going to look exactly the same no matter where I run it. This means that widgets fail gracefully by default - in RN, things just straight up break or look weird. The worst that can happen in Flutter is that the user has to deal with an iOS picker on Android or vice versa.

Electron is more akin to Flutter than RN in this way. It controls the drawing/rendering because of Chromium. Slack on Mac looks exactly like Slack on Windows. That's more enticing than needing to build new UIs for every platform you want to support.

The only way to solve this is to basically invent another cross platform drawing layer. But why bother? HTML/CSS already exists. There's effort and tooling and docs and community and everything else you'd need for a successful framework. It's not worth the effort.

I think the best solution will be just embedding Electron at the OS layer, so apps don't have to bring along their own Chromium runtime. This way it runs closer to the metal, which should help alleviate RAM and storage concerns (these seem to be the only major concerns most people have with it).
I've used Linux as my daily driver for over 10 years. While not popular with some I've had zero issues with Lastpass. Browser plugin, Android App, supports MFA, just works.

Most importantly, I can share select passwords with my wife who uses Windows/IOS.
I use pass as well, along with a dmenu/rofi script.
The Flight Simulator team at Microsoft takes their work pretty seriously. I very much doubt this is prerendered; they know the cost of BSing their (very hardcore) fanbase.
Or what if it's a niche technology that works just fine at scale in the real world but nobody cares enough for super long lifetimes to pay the higher price for the equipment?

No "bad history of claims," just niche technology.

Not everything has to be "fake news" or "phony" just because it doesn't take over the world.

I can't help but think we're cheapening the idea of fraud when we accuse every company or technology of fraud just because they don't wildly succeed.
> The developing world would hugely benefit from a scalable technology that can efficiently service digital transactions. The piece demonstrates this with how quickly WeChat Pay and Alipay penetrated China.

I hear this a lot in cryptocurrency threads, and I vehemently disagree. There's no doubt that using "some other currency" (currency or cryptocurrency) is better than using a corrupt, authoritarian regime's currency. But there's also no doubt that being able to execute monetary policy is a huge advantage for any country. Read anything about currency manipulation or currency markets. Not being able to control the supply of currency your goods (or others' goods, i.e. petrodollars) are valued in is a huge disadvantage.

It feels like there's a huge political push to try and get the "developing world" (with all the hand-waving that's been applied to this term) onto cryptocurrencies, but that permanently puts them at a disadvantage compared to countries that can manipulate their own currency. I think selling this is short-term-ism at its worst.

And honestly? It's also vaguely colonial. I would love to hear from people in these countries what they think about cryptocurrencies, if anything. Cryptocurrency advocates saying, "we know what's best for you" is super troubling to me.
I use Pass[1]. before I had some magic ways to invoke it via keyboard shortcuts on Mac with keyboard maestro but now since I always have a terminal window one key away (f12), I just use that.

[1] https://www.passwordstore.org/
Huh? How is this a solution?

If your password gets leaked I can just: recognise that it's base64, decode it, see your salt and then all of your other passwords are essentially open to me?

Edit: Oh, is the salt different for each site? I don't get why you'd ever do this instead of generating an entirely new password though, you aren't solving the storage problem.
My friend passed away at 30 due to high blood pressure complications.

Sort yourself out asap. The best time for exercise is like planting a tree - 10 years ago. The 2nd best time is now.
I actually tried doing this at some point before 1Password. One obvious problem with this approach is when you’re forced to change your password. You can’t change salt, or hash function for obvious reasons, so you have to change site name.

At some point guessing the original input becomes tedious, when you’re trying to remember if your github password has name “github.com2” or “github.com-3”

Edit:

Completely forgot about another huge usability issue. Some sites enforce weird rules for what symbols are allowed, or what length your password should be. Every time your function generates something that doesn’t pass validation, you’re forced to pretty much revert to your pre-password-management behavior. Obviously you won’t remember that a year later when you suddenly realize that generated password doesn’t work.
Windows 10 Calculator is now running on WebAssembly, natively on iOS and Android
They do that, or contract with companies (like PBMs) to do so. That's been the way this works forever. Asymptotically no one pays the ~$40k+/mo list price.
> the product managers or the PR people are tone deaf

Evidence points to a massive lack of co-ordination with this launch. Government relations (together with the relevant House and Senate committees) learned about the launch from the news briefing. This whole thing appears to be a shambling mess, born out of desperation more than ingenuity.
Visa press release: https://usa.visa.com/visa-everywhere/blog/bdp/2019/06/13/vis...

"Visa announces intent to join the Libra Association"
KeepassXC (https://keepassxc.org) combined with:

* It's browser plugin (https://addons.mozilla.org/firefox/addon/keepassxc-browser/)

* Syncthing (https://syncthing.net/) to synchronize across devices and mobile

* Keepass2Android Offline for Mobile access (https://play.google.com/store/apps/details?id=keepass2androi...)

Then the experience is close to Lastpass but only using opensource components.
I'm loving this. I shop around for my healthcare needs and it's very difficult to get a quote of any kind for any service. This will increase transparency and competition and that will hopefully lower prices.
Vim Without Tmux
Apple's response to Spotify's claims may actually do more harm (to Apple) than good. In a nutshell, Spotify stopped offering subscriptions through their iApp in 2016 due to the 30% tax, so the fact that they pass much less than 30% tax on their subscriber base as a whole (including Android, sponsored, and direct customers) is incredibly strong evidence of the market-distorting effect of Apple's fees with respect to apps offered through the app store.
Paypal can reverse transactions, can Libra? Or is it like bitcoin, where I must protect my private key by any and all means, and then if it's lost, sucks to be me?

And yeah, I mean "lose all your money due to a 0 day in your browser".
I originally used pass too and it's excellent, there's gopass too which is an improvement on pass and works well for teams.

https://www.gopass.pw
And no mention of Lightning Network...
>If electron apps' claimed memory causes your computer to go slow due to swapping, you should complain. But most complaints I see on this topic stem from a discomfort over the reported figure by the operating system.

I tried that once. But I'm sick of having to fight that my usecase is valid, that my laptop isn't too old, and that it isn't broken/misconfigured in some other way. It's 4 years old, and I can't run 2 electron applications and firefox at the same time without swapping so hard I can't get anything done. Fuck me for asking so much from a computer, right?
DynDNS Finally Absorbed by Oracle?
Looking for a technical co-founder in SF or Remote to take https://configrd.io from an open source project to SaaS and beyond.

If you are interested in writing tooling for fellow engineers and improving the devops and infosec landscape, drop me a line.
Azure AI is Microsoft's artificial intelligence platform in the the cloud , running on Microsoft's Azure cloud platform. I am guessing they will be using a cloud based AI service to provide AI features in the game.
Take a look at RasPBX (http://www.raspberry-asterisk.org).
https://crypto.stackexchange.com/questions/5689/a-single-pas...
I can do a Fyre Festival related cameo about how I learned how to fly with FS :)
Did they remove the telemetry?
I’m not sure it’s a lack of “care” and more a lack of ability to take action.

If I have a broken arm I’m not going to price comparison shop amongst hospitals.

Anecdote: I attempted to comparison shop for an mri to diagnosis a potential rotator cuff injury. While I could get the actual scan fees I couldn’t get the fully burdened cost and during the visit it’s entirely opaque what things will be new line items on the bill.
Is a rare event for the UK to be fighting anyone who isn't using the guns we had sold them first.
Totally me too! My first trip to Chicago absolutely required a trip to Meigs Field, and I almost felt like I could navigate the plane around the city as we passed over it on the way out from ORD :)
OK, that's fair- It's still an awfully soft commitment to the project... they're not even part of the association yet.
Looking up symptoms of anxiety to determine if you have GAD is a bit like looking up symptoms of hunger to determine if you're malnourished.
No; there are a good selection of credit cards available with no foreign transaction fees. I have a Barclaycard that has no fees, higher cash back than Revolut, and has no monthly fee.