skysight-inc/HackerNews huggingface dataset:
The baseball draft is somewhat clueless; that's why they have 40 rounds rather than two or seven like a sport that has any idea at all about who's going to succeed. Yeah there were probably about a hundred guys standing in line in front of Mahomes for eventual MVP status. (He sort of jumped the line on the football side, winning in the first year he started.) Still, that's a lot closer than thousands of baseball grinders will ever get. He certainly had a chance. Reading is fundamental.
I’ve been taught multiple times that due to the bystander effect, should you take command of a situation and need to delegate you should always delegate specifically (e.g. tell one person to call 911 rather than shouting that someone should)
Raspberry Pi 4 and Kali
The article seems to contradict itself. The table says password strength doesn't matter for brute force unless you're using an unusable password. But then in the conclusion it recommends you use a 9+ character password because that protects you from brute force.
Reminded me somewhat of "A small notebook for a system administrator":

https://habr.com/en/post/437912/

https://news.ycombinator.com/item?id=19052688
1. Not enforced as far as I can tell. But I believe the formatting can be set per-column only, not per-cell inside the table.

2. It's a default formula that gets repeated, but you may be able to override.
Pass is great, I moved to it from KeePass about a year ago and have never looked back. It uses your gpg key to encrypt passwords and syncs via git. Ridiculously simple and cloud nonsense free.
But the original article literally never says that. It doesn't talk about the "value" of different kinds of accounts at all (and I just reread the "Spray" section to make sure I didn't miss it).

It would be incredibly naive to think that one account has significantly more value than another because once you are in the system, your ability to compromise it skyrockets -- no matter what kind of account you have. Sure, you're probably trying to work your way up to administrative account level, but there are so many more local attacks than remote attacks that it isn't even funny.

I'm not sure there is an accusation that the article is being naive in this way or not (there seems to be some confusion). It would be really shocking to see a blog post from Microsoft talking about security that would say something so naive. But as far as I can tell, they didn't.
Web centric didn't work for FirefoxOS.

Contrary to popular trends, programmers can know more than a couple of languages and not everything has to be javascript.

I'm sure many hackers would be more excited to make an app with go, rust, haskell, etc than to do js, that just feels like work.
In online poker (at least with 100BB stacks) it's customary to top up between hands if you're below full stack.

The reason is simple: with table stakes, your maximum win for a hand is constrained by your own stack size.
And as I grow older I get more and more convinced that Excel is overrated. I ask myself, WHY in Excel so popular? And I keep coming back to the same answer: because it's live. But we do have this concept in the programming community (see links 1 and 2) and it's not theoretical. When I teach Python I see people quickly understand everything that can be made live. Do this, create a variable, then create a function, then let them play with the variable and see how the output changes. This is also why SQL is so popular, because you "declare" it and forget it and you see the changes live.

Don't get me wrong, I love Excel, but it has its problems and it definitely is not a solution to everything data.

[1] PANE: http://joshuahhh.com/projects/pane/
[2] LIVE: https://2018.splashcon.org/track/live-2018-papers#event-over...
You poor bastard. I worked for the federal government too.

I remember being told that working for the government for more than a few years would make me unemployable in the private sector. The idea was one's work ethic would be irremediably damaged. I thought that was foolish at the start of my time there, but a year later I had a new respect for the heuristic.
I feel you should check out Codementor, as to me they are that kind of a platform: https://www.codementor.io
>> because the peak comes so early (for example, Phelps was an Olympian as a high school sophomore);

The youth trend in swimming is an aberration. New training methodologies developed recently that focus on technique/stoke rather than athletic ability. These techniques work well enough that they have become a commodity. Parents can buy a good coach for their kid, turning them into an olympian in a handful of years. That will change with time. As these techniques become more widespread, as the kids with the new stroke grow up, the ages will rise. It isn't like gymnastics where body movements and dimensions are so vital. Swimming is literally the slowest sport. The kids don't have that much of an advantage.
When it happens I’ll link back to this thread.
One thing I've learned about software in general is that I never want to be outside of the primary use case. If you're not using it the same way that the people building it do, it's going to be a pain to use, and your requests will be ignored.

For me, 1Password wifi syncing (with local vaults) never worked quite right, and I don't think that feature has been touched by its developers in all the years since I first bought a 1Password license. It's never going to be. They're all in on their own cloud service and subscriptions.

I don't hate 1Password for using subscriptions -- that's their prerogative -- but I wish I'd known they were going to bail on the Mac-as-digital-hub architecture. That was 100% why I bought it.

I'd describe that pivot, too, as a communications breakdown.
As the original person, this almost exactly. I can totally understand why someone might hold those opinions. I don't share them, and argument won't be productive. Litigating values doesn't get anywhere.
The nice thing about New York is that the transport infrastructure, while unreliable, exists so that you could live anywhere in the five (well, four) subway connected boroughs that pleases you. Want to live in a leafy suburb with a modest front and back yard? Head to Queens!

The Bay Area’s transit system is a joke in comparison; if companies have to resort to a private shuttle system to get anything done, it’s reflective of a failure in planning.
Thanks for pointing to that, it's super interesting.

One of the things we designed Dark around was being able to safely and easily continuously deliver language and framework changes. The Zope 3 project was a disaster by the sound of it, and I would hope this will allow us avoid a similar fate. That's the goal.

Also, we're pretty pro-testing (though also type systems, which help too).
In MySQL, maximum row size for non-text columns is 65,535 bytes. MySQL is limited to 4096 columns per table, and 1017 columns per table if the InnoDB engine is being used.

Excel's limits are 16384 columns and 1048576 rows.

I'm talking wimpy hardware here, I admit. Basically, VirtualBox VMs on a quad-core i5 box with SSD and 8GB RAM. With the VM having three cores and 6GB RAM. But it was the same wimpy hardware for Windows 7 and Ubuntu.
No, I fully understand that this is great for many users and that it cannot be made harder in any way to make whatever mess you want on a single sheet - or excel would die. I only want it easier to not do that. (There's nothing guiding people to better design right now)
Updates should not happen while a patient is under treatment using the machine. Remote monitoring can be done through an airgap (one way optical bridge) that does not have the ability to influence the machine. Remote management while a patient is being treated sounds wildly irresponsible.

So maybe the system could be connected to the network except for when it is treating a patient. A big red slider with 'On Air/Isolated' could be present which would lock out the patient treating options as soon as the machine is networked. Now, this would still leave some gaps: an update could be faulty, a malicious actor could install something that triggers only after a while or when the machine is used to treat a patient. But it would remove a lot of the concern I have with equipment like this being online all the time.
The benchmark scores [1] he gives only stack it up against other embeddable engines. It cuts those to ribbons, but can someone who's familiar with JavaScript performance weigh in on how it competes with the most popular engines like V8 and SpiderMonkey? It would be interesting if this is so fast that you could re-implement Node using QuickJS instead of V8, or even make a WebKit- or Gecko-based browser with QuickJS under the hood. Presumably a lot of the headaches with swapping in a new JS engine have to do with dependencies, and this has none.

[1] https://bellard.org/quickjs/bench.html
I don't think the responses are smug. Ben in particular stands out as patient, forthright, and apologetic.

> one of the developers chiming in about how they must be asking to "make their mobile apps free"

That isn't the actual quote. The developer is pointing out that the apps are "free to use as companions to our desktop apps".

> the other guy talking about how with so many users anything they do will of course be found out

This did come across clumsily, but it was in response to the false dilemma "Was it forgotten, or deliberately not mentioned in the hopes nobody [would notice]?"
Child Sacrifice Ring Exposed
Social psychology is very hard. Making correct experiments is hard, costly, often unethical and highly culture-dependent.

You can only get so far with questionnaire handled to middle-class/high-class university students...
Fear of legal retaliation and the Bystander Effect are two different things through. The bystander effect is supposedly a psychological phenomena where if you're in a crowd you feel less personal responsibility. If people's thinking is short-circuited by legal considerations, you can't study the natural psychological phenomena.
Thank you, a great story. One man trying to find the ‘code’ the universe was written with and discovering important parts.
Just my opinion, but I'm not sure that the antispam should be built into the protocol itself. There's nothing there that say the receiver MUST NOT perform additional checks on the sender. Furthermore section 4.1 says that the receiver MAY moderate webmentions before publishing, so I guess that's the place where the receiver checks the source with some antispam list.

EDIT: I researched a bit more, and noticed that there's an extension to Webmentions, called Vouch[0], which may be a bit complicated to bootstrap, and seems like a web-of-trust-ish mechanism to approve of webmentions.

[0] https://indieweb.org/Vouch
Fair enough, but not all people have that experience. Things often get harder as you age.

Sadly, some people make poor decisions when they are young and course correcting gets harder the older one gets.
These leaders, especially Gerst seem to have kept nasa going in this world where we basically waste money in a job creation program and don't design anything that's immediately usable. The current administration isn't going to accomplish anything by firing competent leaders.
More to the point: almost every safety device installed in medical systems can be over-ridden during emergencies.

So even if you can't normally access certain records or data, if you claim it is an emergency you suddenly can!
Also; awareness of the bystander effect may have led to increased pro-activeness. This is really something that would need to have data going further back to figure out if the original effect existed.

See another post in this thread where someone has recieved specific training to counteract the bystander effect.
That's not the bystander effect though. In China, they're afraid of legal repercussions. In the bystander effect, it's diffusion of responsibility. Same effect but different causes.
excel is perfect for small quick tasks - when it starts to grow into thousands of rows and a handful of tabs its time to find something else
It seems like sometimes products hit a point where they are actually pretty much done and consumers would be best served by the product going into maintenance mode. Of course that doesn't happen because companies must grow and the spice must flow. In that case the product end up changing things for the sake of change or to enable additional monetization. I'm pretty sure Evernote hit that point years ago and could see the same argument being made for 1Password.
In fact as well as appearance I am logical. Screens are just that, they screen for things, and by their nature some slip through - one hopes later screens will catch the problem as it gets larger
Please don't take HN threads further into flamewar, especially partisan flamewar.

Yes, this thread was a wreck to begin with, but it's still not ok to break the site guidelines.

https://news.ycombinator.com/newsguidelines.html
Good question. The answer to most questions like this is "it'll probably be the same as now". I know it seems like everything is different, but we're not really trying to invent much new stuff, only what's required to take stuff out. Whenever things from today work, we'll keep them. Core review, testing, ways of preventing deleting everything on prod; they're all valuable.
The time to buy and speculate in NYC was 20-30 years ago. You can speculate now, but the metro area is so large that even a large company building a regional office there would be a drop in the labor market.
Diffing in principle is not diffing in reality. It's terrible at best. I 'm not sure what your point is.
No, publish now, and let Microsoft's PR machine reveal itself. We could learn so much.
What is the significance of an expensive car cop? Does it means they are from some top paid government agency?
Pop-Sci

'Jevons paradox' and 'Braess's paradox'

They're commonly misused and misunderstood when trying to apply to real life. So much so I've never seen an example of either that applies to real life. They are purely theoretical oddities, but often used to try and claim obtuse points.
'Better' if you consider dramatically increasing the chances of getting locked out of your own account to be 'better'.

If you're logging in from your phone anyway, then it's not really a second factor, so it's meaningless.

If you're not, then your phone might be unavailable or charging or something, so you're locked out.

And if someone else gets hold of your phone, they can now easily log in, so it increases the attack area.

MFA is a bad idea. Biometrics are a bad idea (for similar reasons). Unique passwords (handled with a password manager) are still by far the best solution that we have. Adding epicycles is not the answer. Improving the UX and handling of passwords is the way forward.
I know this is an "armchair academic" comment, but I wonder if `places that are likely to have active surveillance` strongly intersects with `places that the bystander effect is less likely`. In other words, I wonder if there's a crippling selection bias.

The reason I think this is possible is because I'm way more likely to help someone if I don't think I'm endangering myself by doing so. Areas that are actively surveilled are probably more likely to be safe areas for me to do so.
while paying a monthly fee...
ah sorry about that. with 'doug engelbart' in the title, i was under (the mistaken !) impression that time period would be approx. self-evident :o)
I think awareness of the effect changes the behavior more - at least for me - I usually wouldn't act in situations where someone needed help because I don't feel particularly qualified but knowing that nobody else is likely to respond I try to help.

This makes social science even less reliable.
Just be happy for industrial competitiveness and stfu dude.

Honestly, I've been noticing this trend of bashing the newcomers or defending the monopolists more and more here on HN.

It doesn't really feel more like a startup/hacker news.

Just trying to promote awareness here.
That explains the reasons why people die of some easily detectable diseases - they are unable to organise their life to make it a long one. These people, who can not get their shit together, are part of it. Our medical process where everything has to generate an invoice and be paid is a larger part - I expect this is why Americans do not live longer than Cubans - clue - the rich ones do...
It’s absolutely fair to blame excel. It obfuscates the code in favor of displaying the calculated values - it’s designed to hide the code - which, along with a number of other design decisions, makes it really hard to build an error free spreadsheet beyond trivial sized cases.

Further, its design makes reproducible data practices difficult - in contrast to R or Python which do a lot to separate code from data - and let you re-run the same code on new/updated data. Python and R (and other non-spreadsheet tools) encourage practices that make keeping raw data pristine with work being done on copies of the data. In contrast, it’s really easy to make mistakes with Excel in ways you’ll never catch. Sorting within filtered columns is a good example. Did you add another column after creating the auto filter? Surprise, data in that column won’t sort with all the other data when you use re-sort one of the original columns. Just like that, poof, silent data corruption with no easy way of reverting if the error isn’t caught quickly.
I always thought that the Indian population is at a disastrous proportions but I saw this website recently that compared size of a country with another country - https://www.mylifeelsewhere.com/country-size-comparison/indi...

It seems like India is 9 times the size of Japan and 10 times the population. It's high but its not unmanageably high for a fertile piece of land with good weather for significant part of the year.

All your arguments about political system incapable of fixing problems quickly still stand though.
I agree. There was a time it was normal for an organization to invest in its employees. Perhaps it's cheaper to externalize the costs of retraining for smaller firms. But perhaps for larger employers it is starting to make economic sense. I hope this becomes a real trend.
It's not 100% anymore.

In fact, WINE supports packages that Windows no longer can.
Qt has built for webassembly for quite some time and comes with an ES7 engine
If you are curious to know more, I've collected an array of indieweb info on a site built with an Indieweb enabled Hugo theme, and detailed its features:

https://web-work.tools/indieweb/indigo/features/
I hope any false positive is re-tested by a more reliable test, it's the false negatives that worry me...
I've been using Hasura for several months at work and it's approach to GraphQL has nailed the level of abstraction needed for early product development.

It's a great complement to serverless and static front-ends.
Richard Stallman is mostly known for his activist/politics stuff at this point, but he was also a heck of a developer. He wrote Emacs, GCC, GDB and glibc. I'm not sure if he was a total lone wolf, but my understanding is that in the early days he was overwhelmingly the main person responsible for those projects.
While not a perfect solution, I've been buying phones from manufacturer since my HTC desire was ruined by bloatware (you could put many apps on SD card but not Facebook as it was included bloatware, which got huge over time and literally meant I couldn't install updates or would have to delete other apps etc.)

It has helped the frequency and speed of updates a bit. Not a fan of carrier customisation.
> I mean, by default, it wants to send every keystroke back to Microsoft servers

do you have any proof to substantiate this statement? I don’t believe for a second that Microsoft is getting away with an OS-wide keylogger
You didn't mention Magneto, Prestashop ir WooCommerce in your comment.
I had forgotten my laptop while going through security at the Detroit airport. So when loudspeaker announcements happened, I went back to collect the laptop. The security guy asked "Why type of laptop is it?" intending to check if it's really mine, I replied: "One with lots of stickers". "There you go" he said handing me my laptop that was inside a protective cover.
Have you seen their outside work policy? They own everything you make or do in any capacity and outright own any video game you make.
12M liters doesn’t look much on the scale of the ocean (an Olympic swimming pool is, ballpark, 2M liters), but on 1,210 km of coastline, it is about 10 liters per meter.
Surveillance cameras do not correlate with "not in danger". It's not like people are watching these things in real time and jumping to action when they see something. After all, if that were the case, then there'd be no reason for bystanders to even get involved in these incidents at all.
Keep a Brag Doc
While it is a big issue, and still quite prevalent, things are changing fast thanks to digitization of much of the government workflows. There is almost no corruption in departments that have been fully digitized.

It's a long way to go, but thankfully technology seems to be solving a human problem.
I'm saying you're making a big fuss about something that 1. You have no control over, and 2. Doesn't really matter.
>using MFA always reduces your personal attack surface

Actually it increases it. In theory it makes attacks more difficult even with the increased attack surface, but in practice, it may make it easier.

Some places let you reset a password if you have the MFA. And if the MFA was on a phone, which also has your email, which is how you'd normally reset your password, then of course it's equally vulnerable.
Of course he doesn't, because it's obviously untrue. Newer versions of Windows 10 gives you the option to save all diagnostic data and view it, so that you can actually see what they send back.
Two things:

- Cameras may have caused the Hawthorne effect: https://en.wikipedia.org/wiki/Hawthorne_effect

- The article (the news one, haven't read the original yet) talks about the increase of probability that some bystander will act, with increase in group size. The bystander effect study talks about the decrease of probability that a particular individual will act, with decrease in group size. These two things may very well both be true and there may be some non-linear effect at play (i.e. after a certain group size, the increase in the probability of someone acting wins out over the decrease in any one person acting.
This is not directly related to issues you see, but might shed some light: https://www.joelonsoftware.com/2006/06/16/my-first-billg-rev... (plus this is one of the funnies Joel Spolsky's text and an amazing dive into computers history).
While that's certainly good advice, I don't think that's really a "bystander effect" correction as it is if there's multiple people and nobody takes charge then nothing gets organized, and if you don't delegate specifically then nobody knows who you're talking to and this produces confusion.
World News and Stock Analysis
It's just a matter of following the money. A bigger and bigger slice of Microsoft's income is coming from Azure, and an increasing proportion of Azure users are running Linux. This gives them strong incentive to be the business leaders in open source software.

The other increasing slice is services, where they get you to buy stuff from their storefront, or subscribe to their game pass, or office 365, or make personal interactions with Bing and Windows (so they can sell targeted ads). This naturally gives Microsoft the incentive to know everything about you.
Jupyter notebook in Docker?

Edit: I see someone made the same point below, but I definitely haven’t had Excel installed in years. And that’s across multiple billion-dollar employers.
Multiple times a day, like radare2. Seriously, if there is no activity in 6 months - then the project is dead.
Discussed at the time:

https://news.ycombinator.com/item?id=3163473

https://news.ycombinator.com/item?id=2820118