skysight-inc/HackerNews huggingface dataset:
> Go speak to someone who has receieved life-saving healthcare in the developing world because of social media.

Sounds like an unfair situation to me: the one with the most likes on Facebook gets the best healthcare?

> Talk to someone who left their home country to travel across the world for a better life and only in the last 5 years have they been able to easily reconnect with their loved ones back home.

As in: just look at their holiday pictures but never really talk?
Unfortunately we all need the performance due to the unbelievable bloat of the web. And even with my iPhone X a lot of sites are still laggy and unpleasant to use. The state of the web is honestly really sad and makes me feel bad about our entire profession.
While I like and use his work, I do think there are hundreds of thousands of programmers out there that are as productive and have as much impact, just that they don't happen to do open source.
Well, MAYBE, just maybe Twitter should stop require new users to enter their phone number in order to validate their account.
Interesting post with a more interesting publication date. The source is of course not known as a neutral publication, but I think it’s pretty clear in hindsight that Clinton gutted the military.
If we want to authenticate a user, what is the best way to do it?

best: a great balance between convenience, security and cost.

Lately, it bothers that we cannot be sure that we are interacting with real people or the people that we are interacting with are not the same people with different accounts.
On September 11, Blind Luck Decided Who Lived or Died
Ask HN: Should Jony Ive Be the New Apple CEO?
These places need to stop using SMS for 2FA.
Tales from Firmware Camp
Thanks for your suggestion
> Smartphone hardware is done.

I'm as sure as I agree with this statement that this can be a historic comment about smartphones until the next breakthrough happens :)
9/11 Tribute Lights Are Endangering Birds
Learn Some Easy Ways to Import PST File to Outlook Express
Wow!

I have to say, I am totally with the zeitgeist in terms of recent interest in the early neolithic and late paleolithic. These are fascinating to me. It's particularly fascinating how widespread (both time and place) the motifs are, structural and functional/symbolic. Celestial-solar calendars. There are similarities to British henges and Irish granges. I'm sure there are (the

BTB...Are they really going to re-submerge this site (or move it)?!! It seems insane.
The Founder, a dark comedy about startups debuts
It's true that good developers can learn new things, but it can take years to learn the frameworks and ecosystems. I've seen projects fail due to a lack of skilled developers & having to either recruit contractors, or developers without the relevant background. Being a developer on one of these teams can be a real nightmare.
> I guess I "outgrew" it. It's fun when you are in high school.

I don't think "fun" is the word for anarchism. I mean, maybe you had a very privileged/singular experience of approaching anarchism from a theoretical standpoint.

But the bloody repression faced by anarchists around the globe is not "fun". Don't get me wrong, i'm glad you had fun with rebellious ideas. There is fun to have in living in the moment and trying your best to fight injustice.

I'm just slightly upset that you would consider what is the only hope for actual liberation for millions of people a simple fun youth concern.

> I think capitalism works well so long as people can keep it honest.

Can you elaborate? How does institutionalized injustice/violence "work well"? Where i'm from in France is pretty fucked up: we're millions living in poverty and facing police/fascist killings and beatings while a tiny elite eats caviar and drinks champagne in the fancy restaurants of Paris. (without even mentioning white supremacy and islamophobia/antisemitism)

> Nations are the problem, not capitalism.

Don't you think they're the two sides of the same coin? How could capitalist inequalities maintain themselves without a central State to exert violence against those who refuse this rule? How could a tyrannical regime maintain itself without sharing some of the benefits of exploitation with a (capitalist) elite?
Online Dating Statistics: Dating Stats from 2017
Yes, exactly my point.

The political regime was very authoritarian and under martial law, and then they opened and liberalised.
At a cost to you.
Also Wind Ranger, Spectre, Disruptor, Pugna, Elder Titan, Medusa, Nature's Prophet, IO...
> So it seems like the problem is a cooling issue

Not just a cooling issue. It's a MOSFET thermal runaway, as it is being driven to its limit, higher temperature => higher resistance => higher temperature. It can be stopped by cooling it, but the bigger picture is that it is either being driven improperly, or cheap, low power components are used to cut costs without adequate a safety margin.
You didn't provide a secure and practical alternative, please enlighten people unaware of them.
Comment acknowledging that I typo'ed a comma in place of a period above, and sadly can no longer fix it.
No perfect answer yet but I am mostly programming in Go and Common Lisp these days.

I am looking forward to multicore OCaml and maybe I give F# a go.
Do you work for a startup? Startups generally don't employ a lot of university-research tech. The people who are reading current academic papers and incorporating them into the company's products are more likely to work at big companies than small ones.
I would love to see some sources for his talk and podcasts. I was really taken aback by some of the claims and data shown.
I am saying that, because it happened. I'm OK with you not believing me, because it'll still be the truth at the end of the day.
I can read OK in Firefox if I hit reader view fast enough.
Authy / Google Authenticator / 1Password have built-in TOTP generators. They have great UX and are much more secure.
My step-Granddad who was Scottish and a communist/socialist fought in the Spanish Civil War. I guess this is how people made their feelings known in the days before Twitter :-)

He always used to tell me about how he had to bury some hand grenades at the base of a tree as he didn't know how to use them.
The same issue if you are near Canada border in Michigan. Specifically along the lake north of Port Huron. (Lakeport State Park etc).

Every time we go to that area my phone is “hijacked” by Rogers or Telus. And I can’t get the phone to stay with AT&T. Then ATT will start informing us we are on international roaming.

I’ve explained to ATT many times we are in Michigan. No dice. So we just switch to airport until we get back to Port Huron.

Can’t understand how ATT is overpowered by Canadian cell services which is across the lake!

But no issues when I’m in Port Huron and Canada is across the river!
No I am not an affiliate of Taiga. In our startup we use self-hosted Taiga.

We neither subscribed or paid to Taiga. Their system helped us and served as one example of a beautiful API based app.

So as my startup don't pay anything to Taiga. I feel this is the least I can do, if my evangelism can help them indirectly.

Open source is built on community which works when everyone returns or contribute back in some way. This I thought is one way, I feel better.

Although once my startup becomes bigger I would like to contribute code and enhancement to it. But at least this small thing makes me feel bit better, otherwise I will feel like a leecher.

Indeed I and my team do the same for other parts we use like kallithea-scm, mercurial, many python, golang libraries, obviously Linux, postgresql and other infrastructure software.
How to create a command-line NPM module (CLI) using Commander.js
‪‘Big Brother’ in the Sky: Cathay Pacific Staff Feel China’s Pressure‬
I've been thinking about building something like this for ages now. Very well done.
What is karma? And how do you create karma?
Hello, I just got to know this site. I want to ask what is karma? How do you get karma? And what is the function of karma? Please reply. Thank you in advance
Show HN: Validate Forms with validate.js Tutorial
Just as an example it's really hard for me to do low level CUDA GPU programming in any other language.

I'm trying hard to use Julia, but understanding its PTX output is really hard for me, and also I don't know how to use the matrix multiplying GPU instructions.

Rust's PTX output is not supported, so I haven't really tried it.
Keep quantum computing global and open
It is a document ratified with the agreement of China.

https://www.un.org/en/universal-declaration-human-rights/ind...
While companies definitely need to move away from SMS two factor it’s so entrenched (and simple) that more is needed.

The government agencies that setup the mobile number portability system need to realise the seriousness of this flaw and allow a “Never transfer my Number” flag to be set in their databases. Until then even the lowest rung service desk agent at any telco has the ability to transfer numbers. A system like that can never be secure.
Meh?

I dont understand why there are incremental updates to these devices every year. It doesn't seem like a big deal to me. Do it every two or three years and it'll probably end up being better products anyway.
How does this work? The sim-card is sent to your own address, in a plain white envelope.They have to steal that envelope to gain physical access to the sim.

Why is it so hard to stop sending sim-cards to different addresses than the main address where it was registered?
GW2 became F2P?
They weren't F2P when I got it at release IIRC. Since GW1 the approach was to sell extra expansions which seems to have worked for them.

I should run GW1 again, wonder if someone is still on there :P
Does anyone know how common or easy SIM swapping elsewhere in the world? The SIM swapping stories I've seen on HN mostly focus on US users. I remember reading an article years ago, about banks combating SIM swapping in Africa, where a lot of transfers are done by SMS, by forcing a cooldown.

But I wonder, besides the US and Africa, where is SIM swapping prevalent? NYT says I'm at risk too. I'm in Europe -- am I?
The Pocophone was a huge hit though.
https://en.wikipedia.org/wiki/Xiaomi_Pocophone_F1#Sales
Why Prefer Taxi Cab Service over Personal Cars?
You have been experiencing the downvote culture that developed recently on HN.
>There are Yogis that claim they can thrive on 2.5 hours of sleep, and that they've been doing that their entire life.

Yes, and tons of people fall for that. They're up there with those other yogis who "don't eat food" (e.g. "Prahlad Jani is an Indian breatharian monk who claims to have lived without food and water since 1940"), perform magical tasks, and so on...
This is mobile operator problem, not Twitter. How on earth the mobile operator can hand a SIM card to someone else?!
WebAuthn/U2F security keys. No MITM, phishing or duplication possible. Register more than one per account in case the physical key breaks, keep one in a secure place.
> So, you have very expensive insurance?

Expensive compared to what, exactly? Car insurance, which doesn't have a world wide chain of stores you can walk into when your car is smashed up? House insurance, which also does not afford you the luxury of world wide stores with commission free staff to assist you when your house burns down?

Most "insurance", if you want to call it that, doesn't offer you the same level of experience, so in what way is it expensive?

My house insurance doesn't teach me how a boiler works so I can use it correctly, or my dish washer, TV, or anything else about the property I own. Apple DO run classes for learning to do just about anything on your iPhone, iPad, Mac, etc. I'd have to only attend one, perhaps two, of those classes for the staff member's time to be worth more than what I paid for my "insurance".

So what are you comparing it to that makes it expensive?

> As it turns out, I've never destroyed any of my own phones

Which of course means no else does, neither.

> shrug This isn't a competition.

Then why did you argue price as a competitive factor in your purchasing decision? That's literally a competition.
I would be so pissed if an iPhone X would lag on the web. I'm actually pissed right now just reading about it. BRUH
Only if you do it as a westerner / novice.

For people doing it in their culture, from a young age, it's second nature...
You should certainly be able to tell that the person controlling an account is its rightful owner, but it's not obvious to me that you should be able to tell that 2 accounts are controlled by the same owner.

If I have 2 accounts, and you can tell that they're both me, doesn't that compromise my privacy?
Actually that condition seems fairly irrelevant to this discussion entirely. Nobody’s suggesting don’t take photos. Just that quantity, subject matter and frequency of public sharing are all affected very negatively by social media.

Taking dozens of photos of “instagram-worthy” restaurant meals or “lifestyle achievement” vacation photos has utterly nothing at all to do with an imagery recognition photo journal. These are the sorts of totally discardable, consumer excess images that even people without aphantasia cannot recall mental imagery or visual memory of since it occupies such a “one time use” or “share it and throw it away” position in social media behavior.
>> "Criminals have learned how to persuade mobile phone providers like T-Mobile and AT&T to switch a phone number to a new device that is under their control."

This is why SMS should be never an option for MFA. You simply cannot rely on a telco employee for the security of your organization or online presence.
>The real issue is if you don't know at compile-time what resources you'll need at run-time. For some problems that can be an intractable problem for making a safe product, including, to my knowledge, everything that runs on a rich OS.

You're right, but you should still constrain yourself to these few instances to use malloc instead of wildly using it everywhere.
The most secure alternative, which should be the choice for anyone who actually cares, and an option anywhere that thinks _any_ of their users might care is WebAuthn (U2F is roughly the same thing but obsolete, no reason to deploy more of it)

WebAuthn uses FIDO Security keys, relatively cheap USB or Bluetooth devices or sometimes just a built-in feature of a smartphone, to authenticate. They are Something-You-Have, but the WebAuthn protocol also offers:

* Optionally a mode where you give the FIDO key a PIN (Something-You-Know) or biometric input (Something-You-Are) to do all the authentication locally

* Phishing proof - there's no decision about whether this is really your bank. WebAuthn is completely happy to log you into https://fake.bank.phishingsite.example/ but the credentials are useless to the crooks who own that site because they won't work on https://your.actual.bank.example/ even if the crooks got the logo just exactly right and wrote a very convincing pleading email from your bank saying they definitely need you to go to the fake bank site.
For one, because your time is of lower quality (without enough sleep).

Second, because while it might be more in a day, it's less overall (you'll die younger).
Workaround: get a sim from a different country that doesn't have this problem (are there any?).
I think it works like this; people buy a SIM card from the same carrier, and call that carrier and ask them to move the victim's phone number to that SIM card. I know T-Mobile in the US allows you to buy a SIM card in any of their stores. I am sure other US carriers have the same offer.
Maybe Jack realizes that now.
tldr: use Authy or another TOTP generator
The CIA's Secret Quest For Mind Control
Actually much more interesting than i thought it would be. Great effort! :)
Most people don't edit photos. And to be honest those people posing for 5 minutes to get anyway a crappy picture in poses around famous places are proper pain in the ass.

If you want perfection, get a proper camera and more importantly learn how to shoot with it
It seems that Google Voice is the perfect solution to this problem: A phone number without a SIM card.
curl 7.66.0 – The Parallel HTTP/3 Future Is Here
You're right, I should elaborate. The site causes a normal KeePassXC-Browser popup, "www.dailymaverick.co.za has requested access to passwords for the following item(s). Please select whether you want to allow access."

Then comes the weird stuff. It may not actually be all my passwords, but it sure is a lot of them, the long list ominously beginning with my bank and a mobile payment solutions.

It's probably a bug of some kind. But sure looks scary.

On my way to work, and on phone only for next many hours, so not able to look further into.
How can I up my karma?
I don't see the point with "zero-cost abstractions", overflow check is not an abstraction.

And of course the run-time checks can also be disabled for Ada of course, and usually are for release build.
I like cloud biometrics but I guess im just weird like that...
> given a sufficient body of work, you could churn out fiction in the style of famous deceased authors by having the machine do the bulk of the work then having a small team go in and edit the work to make it fully coherent and an enjoyable read.

This is interesting but very dubious in my opinion. The current state of the art tech seems to be good at low-level stuff, like stylistic mimicry and maintaining (relative) coherence at the sentence level (and sometimes the paragraph level). It seems weaker at higher-level coherence, and I've seen no evidence that it would be capable of creating a book-length, or even short-story-length, work with a plot that made any sense (let alone a compelling one) or characters that are plausible (let alone interesting). If it does fail at those things, what are you supposed to do with the okay-in-isolation fragments that it spits out? You'd be lucky if they could be stitched together into anything worthwhile, even with a lot of human effort.

> With someone like me, that uses their name as their username virtually everywhere, you could sufficiently train the machine on my reddit and blog alone to imitate me on social media platforms. It could learn my writing style, my habits of using 'heh' and 'haha' way too much on reddit/twitter/facebook and you suddenly create Bizarro Ryan that you can create new social media accounts for and start tossing in some hate speech in an anti-me campaign. While this wouldn't do much to me, to a celebrity/politician/expert in a field it could absolutely ruin their career, even if later proven to have been faked because popular opinion will still associate that person with that undesirable behavior.

If someone wanted to target an individual, or a small number of people, couldn't they already do this manually? And if they wanted to target a huge number of people, surely they would very quickly burn the credibility of the platforms they hijacked.
>Could be handwritten notes, for example.

Good, but how would they be relevant?

A handwritten note is only a "personal" record of sorts, possibly capturing the opinion of the writer at the moment it is written, not something "objective" or actually proving anything.

And it can be recreated at will.

I mean, let's say that you actually have an a4 sheet of paper where you wrote by hand (at the time) either of:

"Today's meeting has been almost completely unuseful, the managers don't want to consider the safety issues involved with the MCAS operation"

or:

"Today's meeting has been almost completely succesful, I finally managed to tell the managers how there are no foreseeable safety issues with the MCAS operation."

Now, if you had the second piece of paper what would prevent you to destroy it and re-create the first one?

Or simply destroy it?

If it is a hand-written note, it must be a hand written note by someone else, and still if it was - even - tangentially implicating the "current custodian" in the matter it would probably have been destroyed the day after the second accident or in the very early stages of the investigation, particularly since - being a handwritten note - there is no possible way to prove that it ever existed at all.

On the other hand, if those documents are in any way "official" they should have a track record on "Boeing side".

Clearly something is escaping us (well me at least).
I upgraded from the iPad Air 2 to the iPad Air 3. Performance is better (mostly noticeable when upgrading apps), the display is slightly larger, which is nice.
Because people get new sims and legitimately transfer their numbers _all the time_.

I'm not saying they shouldn't put more effort into verifying the transfer, I'm just explaining why its quick and easy and they don't invest in checking much.
E.U.’S New Digital Czar: ‘Most Powerful Regulator of Big Tech’
that's one tiny tiny benefit of classical OO, so many languages shared very similar constructs, you could think in "UML" (cough) and not worry about the language per se.
Are SIM-based IoT devices at risk too? Say a connected car?
Hi Peter,

I was brought to the US as a child in 2001, my parents applied for permanent residence, were declined, but stayed anyway. I was then deported in 2008 after being arrested for petty shoplifting then reported to ICE. Was also arrested for a couple of other things around this same time (shoplifting, fighting) but never convicted of anything serious (I was a problematic teenager). Upon deportation I was initially given a 3 year bar, since I was deported about 8 months after my 18th birthday.

Since then, I have lived in my homeland in Europe, and am now almost 30 years old, and have had a clean record the past 11 years, except for one stupid incident in 2016 where I got in a street fight and got a common assault conviction (no jail time, just a few hours community service).

My dad is still in the USA (undocumented). I have worked in technology for the past 11 years, CTO of my own startup. My question is, what are the odds of receiving a US visa to visit, given my transgressions as a teenager (and very stupid mistake 3 years ago)? It seems I am not ineligible under the crimes of moral turpitude clause, and my bar for overstay was up years ago, but I can't imagine my varous misdeeds make for the best impression.

Unofficially if I were to apply for something like an E-1 (which, I understand would require investing significant money in the USA) would that increase my odds?

Are there any steps I can take to make it likely in the future that I can receive a visitor visa?

Thanks for your time.
GW2 base is F2P. At release, it was paid. So they changed model. However, the latest expansion and the additional content (living story content; sortof like a DLC) costs money. If you look at it from that PoV then it remained the same as GW1 (as during release, the complete game was the latest content).

Which, I believe, is fair enough. I'd prefer they not have convenience items up for sale, but compared to a WoW sub (which also makes you feel guilty when you don't use it) it feels fair and less stressful.
As I understand it, the Guardian had previously always considered D-notice requests and had usually acquiesced. However, it decided that Snowden was so important that it took the pretty unprecedented step of ignoring them.

This made the intelligence services particularly dischuffed.

Post-Snowden the status-quo was re-established.

It remains to be seen whether the Guardian would ignore D-notices again, if something else of the magnitude of Snowden came along - I hope it would use its judgement and do so, if necessary. I'm not necessarily against newspapers considering requests from the intelligence service not to publish something for good reason - it can end up with people dying. It's a tough decision an editor has to make.
In Poland it is also used, I heard stories (e.g. https://niebezpiecznik.pl/tag/sim-swap-fraud/ polish website) about sim card swapping and stealing funds from bank accounts.

After reading those I switched authentication from a sms text to my bank app.