skysight-inc/HackerNews huggingface dataset:
I'm guessing the solution would've then been to 1) disable the update event and 2) paste the ROT13'd password, either into the browser or into the input field value via the inspector.

Like you, whenever I run into sites that do weird things like that, I always find it hard to shake a bit of suspicion about how their backend is implemented (or not, depending on the case). For instance, when they start rejecting characters like "%" or "'" which have special meaning in SQL. I can't help but wonder if they're storing things in plain text.

I've run into at least two vendors I can think off the top of my head that limit what characters you can use for a password. That always makes me uneasy, and I don't buy anything from them on principle. Who knows what else they're doing that's not immediately obvious.
Yeah, Access got me started learning SQL. And Jet is actually not a bad database engine.
It's what many (most?) people are used to and comfortable using. And that's a big part in decision making for humans. (Provided they even know of the alternatives.)
I do agree and fully realize that being successful means finding a stable niche. I don’t expect something like this to take down Apple or anything crazy like that.

I just don’t see that happening because I think the demos sort of show this for themselves. It may be fun to develop for but it doesn’t look enjoyable or practical to use. Wait and see we shall!
> 7th Generation Intel® Core™ i3 Processor (Dual Core 2.4 GHz with HD620 GPU or faster), USB 3.0 port, and 4 GB RAM.

Raspberry Pi or a Jetson Nano are probably not gonna work... Seems to be x86 only.
Interesting. I feel that's a "damned if you do, damned if you don't" case. Is there no middle ground between being completely helpless and "trying to lead the support staff into a pothole"? How would a proper support request from a person who understands the product and their own use cases look like?
This video by Joel Spolsky taught me a lot of new Excel tricks/QoL improvements:

https://www.youtube.com/watch?v=0nbkaYsR94c

It is amazing how rich the ecosystem is. I didn't know about pivot tables. Excel has always impressed me, and continues to do so the more I learn.
No. If a SaaS service can automatically set/reset my password without any intervention on my part, that means I have passwords, in unencrypted form, sitting on a third-party server I don't control. What happens when (and it is when, not if) "nopassword" is breached?
As far as I can tell, it's run by 8bit Solutions, which is a one-man outfit: Kyle Spearrin

https://github.com/kspearrin
Try to remember the higher the A1c level the higher Nutonen Review your likelihood of additional health issues. How often you need A1c tests is based upon the type of diabetes mellitus you have your current treatment technique as well as how well you are taking care of your sugar levels. By way of example the A1c exams may be advised
To set the records straight diabetes- and obesity-related disorders have been known as the second deadliest diseases next to cancer. In many modern cities diabetes has consistently afflicted percentages in the population and physicians have blamed the increased inactivity in most of the lifestyles as the suspect of the relatively large increase of diabetic patients. Yes these facts are scary to consider but knowing that they exist and that there are ways to prevent them will give you such great advantage.

A self blood glucose monitoring for prediabetes can help you detect the early signs of heightened volume of glucose in your blood. However if you still have failed to prevent the growth of your sugar intake you might find yourself suffering from the true diabetic period.Obviously this is an event any of us won't want to happen. To fulfill that it would be beneficial for pre-diabetics to know and implement the preventive measure of Type 1 diabetes. Here are some tips.

https://sleepingsupplements.com/nutonen-review/
I don’t know about the secure enclave, but I can anecdotally say that I’ve been using Bitwarden seamlessly across iOS/Windows/Linux for a while now. It uses the convenient auto fill api thing on iOS and the extension is pretty good on desktop as well. (Although I haven’t worked with it on Mac)

Haven’t had any issues, I switched from LastPass and the only feature I miss for personal use is password sharing. I think it was in the free version of LastPass but not part of Bitwarden. I didn’t really use that feature much anyway though.
I agree with most of your post, but lacking apps is definitely a real problem.

As someone who preordered the Librem 5, I know I'm not going to get an operating system with the polish of iOS or Android. I'm willing to live with that; the phone is attractive for other reasons, both practical (easy to hack) and ideological (freedom!). Heck, even if the final product turns out so poorly that I end up never using it at all, I won't be too upset: even if my $600 didn't end up benefiting me personally, at least it went toward a serious attempt at achieving a worthy cause (an open phone).

Still, I would like to try actually using the phone as a daily driver, and for that to be viable, I'll need to be able to access the services I depend on. Luckily, I don't use that many services, and many of the ones I do use mostly have web versions; as much as I hate the experience of using webapps, I should be able to get by with them. But I can think of several that I'll have trouble accessing at all:

- 1Password

- iMessage (I guess I could try to set up the Matrix bridge.)

- Slack? Discord? (Both have desktop web versions, but not sure if they have usable mobile web versions. That said, I have bitlbee set up to connect to Discord already and I know there are bridges for Slack.)

I'm lucky that none of these seem to be hard blockers for me... but other people may not be so lucky.

And, well, if things work but are a poor experience, at some point I'll probably get fed up with it and switch back to my iPhone. Some people are more ideologically committed than I, but many are less. Though I'm not counting on it, I would love if Librem's OS gained momentum and became a sustainable ongoing project, rather than dying off as a prototype like so many prior attempts (webOS, Firefox OS, Ubuntu Touch, etc.). For that to happen, it will need users.
How to Create a REST API with Node.js and Express
That’s the biggest mistake I see in that thread: all of the apologies are immediately followed by responses which are, at best, dismissive or, at worst, defensive bordering on vindictive.

That person probably got testy because they were being treated so poorly.

I don’t think I saw any validation of a reasonable concern—which is like customer service 101—let alone any type of attempt to win the user (back) over. This is classic, stereotypical techie behavior and it needs to die. And I say that as a developer (who has been plenty guilty of this tendency myself…)
How's BitWarden at autofilling forms on webpages? Does it work in Chrome on Android (or other mobile browsers)? Can you authenticate with a fingerprint? Can you force a non-fingerprint method after device reboot or a certain period of time?

I might have a closer look at it myself.
Even as a kid in the 80s when I saw its shuttered carcass out the car window, I knew that building was something special, even though its size and prominence vs it's surroundings made it a bit scary looking.

I remember asking my parents what it was, and being confused when they said it was a train station, because I'd never heard of passenger trains in Detroit.

I do have a very foggy early memory of the last streetcars of Detroit before they were ripped out, or maybe it was just the abandoned tracks. I also remember asking my parents where the trains for those tracks were. I remember them saying that "this is a car city", neither proudly nor vindictively, just as a matter of fact.

It would be amazing to see passenger rail service return to Detroit. It would take a huge culture shift,both nationally and locally.
On iOS, there’s KyPass. It plays nicely with the Linux and Mac versions of Keepass, syncs with Dropbox, supports Touch ID, etc. There was a reasonable one-time purchase price, I believe.

I switched to the Keepass world a while back when 1Password started to try to nudge me into paying a monthly fee for software that I already paid for on multiple platforms. The Keepass variants aren’t as slick but who cares.
I did some Kinect V2 experiments on Bootcamp and it worked like a charm
Not that long ago there wasn’t even a subscription option. We each paid $40 for standalone and I’ve so far been happy with it. When the subscription option came out I politely asked if I we could put this money towards a service credit, and was (also politely) told “no”.
There's no memoization in that approach however.
This would definitely be overkill. You could do that with 5$ cameras and some ML.
I've been using Bitwarden since just after it launched. I've yet to have any issue with it. The desktop, browser, and mobile clients are all seamless and... well, just work.

I was part of the LastPass exodus after their acquision and used 1Pass with Windows and (then) OSX. The lack of Linux client was a hassle, and eventually left me shopping around. I tried Keepassx and the others, but I ran into issues with sync (most likely my error.)

I saw Bitwarden mentioned here and gave it a swing. Importing everything only took a minute, and I haven't looked back. It works on all operating systems, has 2FA, etc etc. It's perfect for my needs.

At some point in the future I may go self-hosted.
There was a new app posted here a few weeks ago that combined a Jupyter notebook with a spreadsheet-like automatic recalculation. Does anyone here know what it's called?
Count me as one of the users who are getting annoyed at 1Password’s attempts at recurrent monthly spending. In addition, while their cloud service is probably fine, the best option is to locally sync and not involve the cloud at all.

I would much rather just keep using the “local app” license, which sadly isn’t even available for sale anymore. In fact, I can’t even use my Windows license I bought back in the day.

One of these days I’ll probably just stop using 1Password and move on to something else. Are there any good free/one-time purchase locally syncable password apps that works on Mac/iOS?
>once you are in, you are on the hook forever or you don't get access to your precious passwords

You can still view your passwords after your membership is cancelled.

>Looks like it's time to consider alternatives?

I've switched to Bitwarden and haven't looked back. It's not as 'shiny' as 1Password but they seem like a great company and everything works for me so far (using iOS, android, macOS, Ubuntu, and Firefox).
> So you still have no idea what they are doing.
> They are making a privacy-focused, portable Linux device that makes calls.

Now understand, thank you.

Before your kind explanation, I indeed did not fully grasp what Purism was doing. I was naively thinking they were doing a privacy-focused device that I could someday use everyday.

But instead they are doing a device that will run Linux and will occasionally make calls. I had one of those: Openmoko. Still have it in a drawer.

Without making a device that is actually useful, which will survive more than one iteration, those are futile attempts. Truth is: one small company will not be able to make a full well-integrated phone software in the time/money the company is allowed to burn. Unless they embrace "outsourcing" apps to existing ultra-portable (web) ecosystem, the attempt is doomed to fail.

Sadly, but if the course continues, I will make my prediction: Purism will successfully release Librem 5, there will be a half-baked UI (like MER/Openmoko/Sailfish/OE), half-baked bunch of native "Notepad" apps, no one will seriously use it, and it will be the last phone Purism will release.

Then, the circle of life: a new company will try the same.
Would be interesting to see if it went up linearly or some other function of the number of ppl.

Also, what do they define as a 'bystander'? If it's ppl with pre-existing relationships (which would not be clear from CC footage) it doesn't particularly go against the bystander effect.
I second Bitwarden. Possible to self-host, open source, and works everywhere I want to.
Is there anything like a spreadsheet to Python converter, with cells becoming made up variable names? I wonder if it’d be useful for quickly noodling together a set of expressions, then “baking” it into code.
I like the disposable email portion of the idea. I'd very much like to sign up for every service with a unique email address, so I can trace the source of my spam. But I share JonathanW's concerns on the security side of your proposal.
Indigenous Australian oral history and cave paintings reference the "dreamtime"[0], which is plausibly the group's initial ocean crossing perhaps ~45k years ago.

More definitely, here[1] is an Australian oral tradition that records a catastrophe ~7k years ago.

The picture is super blurry but then so is Genesis.

[0] https://austhrutime.com/first_boat_people.htm

[1] https://www.theguardian.com/australia-news/2015/sep/16/indig...
Morning Clarity Routine
> I think the demos sort of show this for themselves.

I agree; I think it will be successful.

> it doesn’t look enjoyable or practical to use

You can say that about any phone (an iPhone, flagship Samsung, etc) that is not in a case. I bet it will be enjoyable and practical once they put it in a case.
It would also be great if they donated 50% of profits to charity. Companies don't throw away money for the fun of it.

For all it's 'courage' and self righteousness, Apple is a profit seeking entity like every other.
isn't it also possible the fact that alot of people have heard of the bystander effect they more willing to do something because they believe no one else will?
They are already at this point. You have to use the legacy versions to avoid pay-by-month. I'd happily upgrade and pay them for new features, but I don't want my usage and data to be held hostage by them if I choose not to upgrade.
What Diabetes Means to You

Millions of peoples have diabetes in this country. But even though it's one of our most devastating diseases, and many people have heard about it, not many really know what it is. The name diabetes mellitus has an interesting origin. The word "mellitus" is a Greek word that means sweet. "Diabetes" is the Greek word for siphon. At some point the Ancient Greeks discovered that when certain people drank a lot, the liquids almost immediately left their body in the form of urine - as though it were siphoned from their body.

They further noticed that the urine in these people tasted sweet. Hence the phrase "diabetes mellitus" or sweet flavored siphoned liquid. So what were the ancient Greeks doing tasting urine? They used it as a mouthwash, to prevent the formation of cavities. Remember, this was before the name brand mouthwashes that are so popular today.

Diabetes does not suddenly appear. Before diabetes is diagnosed, the body has already begun to manifest changes and symptoms. Collectively these symptoms are often referred to as pre-diabetes. To test for pre-diabetes, you need to find the blood glucose levels in your bloodstream.

Researchers have defined a blood glucose level threshold that defines diabetes. They've also defined a glucose level below which a person is considered normal. If your blood glucose levels fall in the middle of these ranges, you will most likely be diagnosed with pre-diabetes.

But just because you have been diagnosed with pre-diabetes doesn't necessarily mean that you're doomed to get diabetes. But it does mean that you should begin to watch your lifestyle. Many people after being diagnosed with pre-diabetes make lifestyle changes and never experience diabetes.
https://i-review.net/nutonen-review/
I disagree with the article on that. Password strength derives from uniqueness and entropy -- nothing else. By this definition, strong passwords are very useful.

It's a bad but common security error to equate password strength with matching an arbitrary schema - so yes, by that definition, so-called "strong" passwords are often useless. When a "strong" password is required, most people will unfortunately take a low-entropy word/phrase and perform single additions/substitutions until it clears the bar. Such passwords are indeed nearly worthless.
(OP concludes ‘programming should be more like Excel’. Glide’s mission is to apply spreadsheet programming to software in general. This is the most relevant comment, downvoters be darned!)
I'm guessing this user is like myself; someone who _purchased_ 1password back when it was $40-60.

Yes, I appreciate the fact that they're continuing to support things, and I am glad that they're finding a revenue model that supports their team, but I very much like my current setup and still haven't upgraded 1password on my Mac past version 3 because I like the old model. Skipping updates on iOS is much much harder.

I would probably pay a flat $40 again for an upgraded version with a standalone license if such a thing were still available.
Funnily enough, excel is a programming language. I don't mean VB Script or macros. I mean with the equations, ranges, and constraints - that's a programming languages there.

A cell is simply a computational variable (as opposed to the notion of variables in lambda calculus). A named range is a data structure (a struct). The rest are term rewriting
Bitwarden appears to be mostly free, so I'm giving it a shot now!
Some services are more secure than others, 1password and Okta never saw a large breach as far as I know.

If a breach would occur the race would be on to reset the password before the hackers would change the email address.

You can imagine having 1% of canary accounts that give a big alert if their email is every changed leading to a race to see who can reset accounts first.
I think it's still done by Foxconn, just at an Indian facility. Chinese company in India, not domestic capability.
> autofilling forms on webpages

It works fairly well. Some sites (banking, mostly) don't work, but the UI lets you easily copy the username or password so you can paste it where it should go.

> Does it work in Chrome on Android

Yes, and Firefox on Android.

> Can you authenticate with a fingerprint

That's how I have it set up.

> Can you force a non-fingerprint method after device reboot or a certain period of time?

Maybe? I haven't seen (nor looked for) that feature.
Perhaps. I asked my roommate how she felt about the thread and she described that same feeling. Us humans can sometimes pick up on things weirdly I guess!
> How's BitWarden at autofilling forms on webpages?

I don't think I ever had any issues with it.

It looks like it might use some old code from 1Password:

https://github.com/bitwarden/browser/blob/280f6f495f9f8bdfe3...
> Well, that entirely depends on your skill and your overall design.

If your argument against std::move & unique_ptr is "I don't make mistakes" then your ego is vastly too large to be a C++ developer.

The design doesn't change. unique_ptr just solidifies the design such that the compiler can help enforce the design.

> But again, there's still vector<shared_ptr<SomeThing>> to the rescue if we need it.

If you want to insist all heap allocates are always shared_ptr you can certainly do that. Personally I'd consider that dreadfully slow & expensive, and at that point you're far, far better off just using a GC'd language instead.

> I said if you require std::move in a certain situation, have another look at your overall design.

std::unique_ptr single handily proves this wrong.
Autofill on desktop is pretty amazing, I never had problems. On Chrome Android it uses the autofill APIs and is quite good but not perfect.

You can authenticate with a fingerprints and afaik no, you can't force pin after a reboot/period of time.

I never had trouble with it regarding that part and still recommend it. It also accepts 2FA with an YubiKey.
This was flagged because I called out the mods on their censorship:

---

Let's see if HN censors this like they did with the last time this Scientific Journal article was submitted.
https://news.ycombinator.com/item?id=20417085

---

Edit: right on cue. The HN censors are getting quicker. Maybe they can do one of the "machine learning" algorithms to make censorship more efficient.

This was the censored article. https://arxiv.org/pdf/1907.00165.pdf

---

Edit: Ooh, slick. HN now uncensored the article. Don't worry though, it's archived in it's censored state.

https://archive.fo/5PeJe
I switched to BitWarden from LastPass and 1Password and I couldn’t be happier. You can self host if you want but you still have to pay.
This article incorrectly claims that the bystander effect is when a group of people are less likely to help than an individual, when in fact the bystander effect is when an individual becomes less likely to act in the presence of a crowd. The article repeatedly makes this claim, but it's not hard to look up how the bystander effect is described and defined to see how completely wrong this is.
>They could start by being honest and open about what data they gather

Are they being dishonest about what they claim to collect? Is there anything deceiving in their privacy policy?
Yeah that's beyond humongous, that's just ridiculous. :-) I was imagining it was more like 60MB.
The Slackification of the American Home
> Is BitWarden ready for prime time for something as critical as secure password storage yet?

It works pretty well, but the user experience eventually drove me back to 1Password:

https://news.ycombinator.com/item?id=19839087

#4 in particular.
The other classic example is the disgraced Martin schkreli:

https://youtu.be/jFSf5YhYQbw
That's the prevalent opinion about PM, and I used to adhere to it.
I don't think it works in practice. Design informs technology. Business informs design. All those things affect each other to make a good product. You can't do that if teams can't just say no to each other. It's important that they can. Having a say in things doesn't mean that teams need to fight each other and undermine decision making. It means they can convey what they think would be neat, and try to think outside the box to meet each other's needs.

Think about it in practice: you want to make a good camera. The engineers say they will approach things a certain way, the designers say they will produce a certain design, the PM says ok that sounds good, here is the roadmap and the strategy for this. You end up with a product that simply doesn't push the envelope, and has no cohesion. It's basically the equivalent of silos churning through their backlog. I think it's an underwhelming, underachieving view of product development, where no one grows.
I don't understand why people seem to have it out for Purism. Did they wrong you? Are you a competitor?

It's pretty clear you are being disingenuous.
While I appreciate the sentiment I assume you ask for permission before installing software on customer(?) machines?
Ask HN: Why don’t more companies just email me sign-in links?
For logging into slack, they just email me a link, then I click on it to sign in. This is very convenient as I don’t have to remember another password. Why don’t more websites/apps do this? Is it due to some security issue I’m not aware of?
Worked on a simulation game in the 80s.. boss coded the entire world simulator as an excel spreadsheet.. I then wrote a tool to compile that spreadsheet and its formulas into 68k assembly language that would run the sim for 1 tick. It worked Amazingly well. I have never doubted the power of spreadsheets since then, and whenever a problem in a similar domain comes up, it's one of my go to tools.
1 lambda hitting 1k concurrent or many lambdas hitting that in aggregate?
FYI its 12:35 AM EST and some parts are still down. Reseting password screen doesn’t work for example.