skysight-inc/HackerNews huggingface dataset:
I think it is important to separate out criticisms of 2FA over sms, and companies who say they have 2FA. I think even in practice 2FA over sms is definitely better than nothing, it's a lot harder to both guess someone's password, and put in the work to hijack their phone number. But as you said, many big tech companies say they have 2FA, when they really are just giving you two ways of logging in, where one of those ways is incredibly insecure.

It seems crazy to me that recovery numbers are a thing. I mean I'm sure it helps reduce customer service load, since people just recover over sms rather than trying to call and get their account re-activated, but it is so insecure.
This seems like a dark pattern; requiring the use of an external life invasion platform to access actually decent tech support.
How about "ban Trump supporters from using Open Source projects", would it be nicer?

See, this type of thing can be abused easily.
Every time I think "oh just add a few lines off CSS" => 90% chance it'll take all day.
Wow, that's true genius
How am I creating “value” for the world by allowing a for profit company to take advantage of me?

I’m creating value for Automattic.
Thanks for such a calm and kind reply. I've not gone easy on you and I know it sucks to get those sort of moderation comments. I hope you can trust that it's absolutely not personal and that my point was directed at the community, not you.

I do need to write something more definitive about this, if only so I can link to it in the future instead of writing variations of the same comment over and over again, which is slowly driving me crazy. But I fear it won't convince anyone. Personal interactions, like the one we're having here, sometimes seem to move the needle—which btw goes a long way toward repairing the hopelessness I often feel about this issue. But I'm unsure how to effectively deliver this message to the community as a whole, or if that's even possible.

My gut feeling about a statistical analysis is that it would probably be unsatisfying and stir up more objections than it settled. That tweet you linked seems to depend on much higher volume, 1000x if not more, compared to what we see on HN. That is, he's analyzing 5000 instances of a measurable kind of comment, of which HN probably wouldn't even get 5 over the same time period. Trying to analyze the HN corpus on these questions would be frustrating, because you'd be forced into semantic analysis right away and no one would agree whether you'd done it right. But I'm open to suggestions.
I wasn't. You responded to me specifically saying that "It... kinda doesn't matter? "

How am setting up any kind of strawman in this instance?
You can't make a Twitter account without a phone number. Well you technically can, but it will be instantly banned upon creation until a phone number is provided.
That shouldn't be possible though. If you classify data in your database as pii and classified but then let any one with door access in there you're really doing something wrong. To add to that, what are the chances the team that owns that database didn't notice a significant uptick in requests from a new caller? I'd say a program like this is probably enough to tip over a service if it's not coordinated.
Thank you. Can you recommend some books on the subject? Or related subjects ?
Sorry english it not my native language. Thought that is kind of an OK short version of "asking for more of contributors than you give back to them". Did not want to weasel your words (hope I did at least use that correctly)!

I tried (apparently not successfuly) to write everywhere very clearly that the Commons Clause got applied and if somebody contributes to it he would normally have spend some time with the project and he should be aware of the license situation. Would never have expected that somebody would find out later that it is not the case and he would then be upset about it. But thanks, not sure that it would happen but still one more thing for me to consider (as you are right that it could happen).
Not over ocean distances though?
Facebook blocked accounts created for my Tutanota accounts within minutes. Real names but I hide a few things. I setup one for my private email only domain I use through Tutanota and it finally worked. But they continue to add a banner asking for a phone number
if US wants to put pressure on and punish China, then instead of shooting itself in the foot and everywhere else with tariffs US could have just offered say 10K Green Cards (each coming with $1M resettlement bonus) to the top China researchers&engineers in any industry in China that US would want to cripple as a punishment. At $1M per such a top head it would be a steal for US, and for China it would be a very painful damage. Rinse and repeat ... (Such a solution comes to my mind as result of observing of pitiful state of Russia resulting from the brain-drain (immigration as well as just tech heads switching away into business/etc) it suffered especially during 199x)
There were definitely problems and abuses with the model.

But the hardware itself was robust and reliable.
You do JS in the old days.

JS today is a bigger mess. Is possible to avoid problems

I use vue, without npm, package managers or anything else than direct link in the head. But I need to be care-full in what to code and check support across browsers.

---

About "not robust". In fact what need to be defended is how is possible to call it robust!

But anyway: JS is a badly designed language, have weird edge cases, and will fail silently (the worst of all) in many ways.

A robust language not only catch stupid errors, but have a better std support (like having integers!) and better defaults and ways to do data transformations.
Even then, wouldn't a delta just be a "d"? Or do Greeks pronounce the "th" in "the"?
The idea here is to do this on a very very very large scale. My employer has a > 500 PB cloud of (mainly Windows) backups. Right now everything is on ZFS, but we're thinking about moving to a block store (like Ceph or Swift) with this dedup idea.
Alexa, who am i?
probably not. It's not super popular even among web devs. The last time I remember thinking about it was prob in 2015. I think swagger has won the market for api documentation.

That being said, its still annoying trying to find information about a project when there are conflicting names.
Disclaimer: I work at Backblaze.

> It required re-uploading more than 300GB of data.

What should occur is that it must READ all of the files to make sure it has transmitted them already, which can take hours sometimes, but only a tiny, tiny amount of data is actually transmitted to the datacenter. The client basically shows endless streams of files flowing through it and saying "Currently Backup Up: puppy.jpg" but it isn't really transmitting the files, just verifying the contents haven't changed.

One way to realize it is doing this is watch a network monitor of some kind. Another is if it is going "impossibly fast", like you only have a 10 Mbit/sec upload pipe and it appears to be uploading at 100 Mbits/sec.
You really don’t think that a chemical company dumping waste into a river is worse than using phone numbers to target ads? Deep in your heart of hearts? Are you sure you don’t have an axe to grind against tech companies and perhaps that’s clouding your moral calculus?
I'll give a concrete example where adding abstraction will make code shorter. This comes from my recent experience, with some details changed for the sake of discretion and simplicity.

Suppose you wanted to simplify the generation of contextual metadata for structured logging in an API service. The service handles requests that manipulate stored records, run logic, etc. Basic CRUD plus business logic.

The starting point is a bunch of raw calls to MDC.put() if a Java service, or an equivalent in another language[0].

An abstraction-free approach might give you a logUser method, a logUserAndAccount method, a logAccount method, a logTransaction method, a logTransactionAndAccount method, etc. This does at least simplify the actual request processing code from the starting point and make the logging consistent, but makes the program longer.

Alternatively, one could have a generic Loggable interface, with a function that returns metadata for the object to be logged, and a logWith method that takes a Loggable as a parameter. You can get fancy and provide a default implementation if all of your entities have common methods like id(). There are probably still ways to improve from here, but now instead of a dozen functions, you have one.

[0] Years ago I wrote a rubygem for this, but was not able to open source the bulk of it.
> when you loose your data you have only 30 days to get it back before Backblaze deletes it as well!

Uhhh... this one could be a significant issue for me right now. I've got a laptop that's been offline for about 2 months now due to a motherboard failure due to liquid damage. I haven't bothered dumping the drive yet because I figured even if it's got issues Backblaze has a copy.

You're telling me that if I login to my account right now, the data is gone? If so, they really need to make that one more obvious.

EDIT: Just checked Backblaze, still looks like the data is there after 70+ days. Has this policy changed at some point?
You can do that on Windows too can't you?
After Hearthstone player’s ban, Blizzard is in hot water with lawmakers
I completely agree. Same as the NBA "outrage". We are normalizing China's outrage here by acknowledging their false-equivalences. China is "angry" at the NBA, but the NBA has nothing to do with a private citizen's tweet.

What does China expect? The NBA should throw the man in a private work camp/prison and re-educate him?
Imagine: the original idea used to be you'd just supply a reasonably-marked-up document and maybe some formatting suggestions and the browser/user would pick the colors and fonts and such.
The market hasn't gone anywhere in the last year. The first 1-2 years was helped by massive tax cuts implemented by Trump which juiced corporate earnings.
(Side note: I can't believe that the day I post this on HN my hosting provider is deciding to do a 10 hour maintenance...)
“Blizzard shows it is willing to humiliate itself to please the Chinese Communist Party,” - Sen. Ron Wyden (D-OR)

“Recognize what’s happening here. People who don’t live in China must either self censor or face dismissal & suspensions,” - Sen. Marco Rubio (R-FL)
I've had a Twitter account for years (to contact customer support). They keep asking me for a phone number but I never provide it. I never got banned.
Being fired is not as severe as imprisonment.
So a lot of this advice is do your own thing... I totally disagree here. I did it and it was brutal... very similar background as you. You will be competing with “my nephews friend who does websites” and that won’t pay your bills.

Joining a large consulting firm was the best career move ever. Allows me to live wherever I want, and since I’m good at my job, promotions and bonuses. The workload sometimes sucks, but usually it’s 40 hour weeks.

Send me an email if you want to learn more about it, not trying to recruit but I’m happy to chat if you want.
Always love a Mickens tome. May his reign be long and his wrath upon his enemies wicked. Also congratulations on tenure, now more writing like the login papers please.
Algorithms for stable, in-place merging in linear time, hence merge sorting in O(n log n) time, have been known since 1977 (https://doi.org/10.1137/0206025). This first algorithm was too complicated with too large of a constant factor to be practical, but has since been improved.
Exactly. Some kind of middle ground needs to be found here - either a limitation of liability at some level or some kind of agreed-upon thermal event monitoring shared between PG&E and local fire departments. Otherwise the only business-viable alternative is to keep turning off the power. Burying equipment/lines would probably cost enough to bankrupt them.

Of course, the alternative for customers is to install a Powerwall or equivalent for these situations, so maybe this is good for Tesla/distributed grid proponents?
It would not be too hard to add a field for an IPA version of the name. But populating the dataset would be a huge chicken-and-egg problem.
In practical terms, while ebikes may have a slow top speed, they move through congested areas much more quickly, so for trip-substitution purposes, the efficiency is apples-to-apples. More direct routes at steady speeds is a real benefit to ebikes.

Much of the efficiency benefit is from the lower drag due to lower speeds, but if the purposed served is comparable, then it's valid. Just depends on what you're looking at.

FWIW, even at 30mph, ebikes are over an order of magnitude more efficient than a Model 3 at 70mph (<28 vs. 280 WH/mile). Zero (electric motorcycle) states 180 WH/mile at 70mph.
Could they have been poisoned? If there’s not blood, and no clear trauma, that sounds like the most obvious answer

edit: and then cut up for some reason...
Legal! Vou começar a usar o Debian.
Redesigned Google Shopping
Yeah, I’m gonna disagree with the “paste, paste, paste “ / “generate mass spam” school of development here.

Many feel like you, though. I just don’t want to maintain their effluent.
If they didn’t have other data sources for this, they would have shut down the now useless ads targeting features.
And more importantly, exsanguinated.
I also love pdqsort. It has many of the same advantages, and has the advantage of being easier to implement (particularly if you already have a quicksort lying around).

https://github.com/orlp/pdqsort

Basically, timsort is to mergesort as pdqsort is to quicksort.
I remember this article now. As someone else said, for certain time complexities there are more algorithms available.

I believe when I realized that fixing my bug would turn it essentially into this algorithm, I found something else to do.
You don't need to. If you've ever filled out a form anywhere online to access an article, it's likely you opted in to having your data sold to broker agencies, who sell it for lead gen. The same goes for magazine subscriptions, credit card applications, even debt collectors, etc.
Any source on them not wanting long term stable good cars or is this just speculation, and if so what makes you speculate this? Other than body panel gap problems i'm unaware of any real build quality issues and apparently the motors are designed for a million miles before service.
Great, yet another True-Scotsman of being a proper developer. There is so much you should have read, googled, written to be a "True" dev these days. My theory is - if you are often learning stuff and producing good working code be happy. Not every developer needs to know the underlying sort algorithms.
This reminds me a lot of a visual code based data processing tool developed out of the NSA. Apache NiFi. The difficulty with all these low/no code environments is getting scale and maintaining enough widget blocks for it to be productive quickly.
This. My parents would never deal with this because they don't run Hazel, Alfred, Bartender, etc.

I run some of them, but I'm fine with hard transitions.
Yep, with a suitable Linux Distribution installer disk that includes the basics.
Disclaimer: I work at Backblaze.

> when you loose your data you have only 30 days to get it back before Backblaze deletes it as well!

Not anymore! As of this morning's 7.0 release, you can always switch your backup to one year retention EVEN FOR JUST ONE OR TWO MONTHS and for an extra couple of dollars you can keep the data around for a year (or forever). You can switch it back to "30 day retention" at any moment, all through the website.

Also, you can always do a "Restore to B2" to make a complete copy/snapshot of all your files entirely on the server side, and we'll keep those as long as you don't delete them. This will cost you $5/month to store 1 that entire duplicate 1 TByte copy in B2 (in addition to your original $6/month bill), but it's an option available to customers.
C weighs 12

O weighs 16

And there's two Os in a molecule of CO2, and gas is mostly a bunch of Cs. The Os come from the air.

(and it's 20 pounds per gallon, not mile)
Extraordinary Ones
It seems like the right move today, but ideally moving forward we see an investment in infrastructure. (either in more robust transmission or more localized production)
Here we go again... these things seem to happen surprisingly frequently, which has driven all kinds of conspiracy theories for decades. See [1].

[1] https://en.wikipedia.org/wiki/Cattle_mutilation
Does anyone know a good debugger plugin for vim? I've tried a few and found them not great. This is seriously the only thing I currently want more from vim. I keep an IDE around just for this purpose. (A debugger with support for C++ and python. Don't care if two plugins)
The easy option is to just put a white background behind the diagrams. It might not be as pretty as having the image designed right for a black background but its better than that hack.
Mysterious cattle mutilations have been reported in the US for my whole life (long time!) and probably before. It was a meme for the kinds of people who believe in conspiracies by the US government to conceal the existence of UFOs and aliens on earth, long before it was a plot element of the X-Files 25 years ago.

https://en.wikipedia.org/wiki/Cattle_mutilation
> accompanied by a very salty and accusatory email

Would you mind sharing the anonymized content of said email?
”I imagine there could be a way to present the user a screen with all apps, and ask the user on one screen to check/uncheck any that it would like to receive notifications for”

All 150+ apps (I don’t know how many are installed by default, but I have 277 on my system), many of which the user won’t even know he has installed? (I just found out I have an “Adobe Air Uninstaller” and two “Abobe Air Application Uninstaller”s, something called “Computer.app”, and 11 different Java 8 updates, for example)

And no, I don’t think such a dialog would be useful because users could delete applications they “don’t use” from there. The average user simply doesn’t know which applications he doesn’t use. I certainly don’t.

I think they could do a bit better, but I don’t think this problem has an easy answer. For example, they could exclude all Apple apps from these questions, but I suspect that would (rightfully) give us “Apple gives its own applications preferential treatment” complaints.
Yawn.

Meanwhile the grownups on all sides are calling for a carbon tax.
And cleaned the blood off the ground?!? Doesn’t seem reasonable someone took them somewhere else killed them and brought them back, but if not where’s the blood?
From the other side of the screen, I see a lot of people inside organisation's trying to hire and becoming annoyed when their recruiters send them CVs that aren't ideal matches.

So this cuts both ways. If you want engineering to have eyes-on early, that necessarily means they're gonna see some CVs that don't fit. Recruiters tend to avoid this because of the 'signals' they're getting back from their client.
Absolutely! Co-ops are a great way to enshrine these protections as well.
That's why they're fighting a hybrid warfare — a blend of propaganda, hacking attacks and disinformation — as well as open military confrontation. They don't have the resources for a conventional war like it was in Korea or Vietnam.
Ehh what are you going to do? It's not like people spray painting swastikas really care that it's badly drawn or the other uses of the swastika.

They "won" only in the sense that I'm 99.99999% certain when I see a white man drawing a swastika on the wall he's not wishing people luck and well-being.
I always thought this sort visualizer was cool http://sorting.at/
I want James Mickens to be my PhD advisor, I don't really care what the subject is.
This is a recent-ish change that only applies to new accounts.
538 consistently gave Trump a realistic shot at winning.

https://projects.fivethirtyeight.com/2016-election-forecast/

You can see their chance of winning history in a line graph. October has a significant dip, to be sure, but it had recovered by November back to the ~30% it ultimately stayed at. Their 'polls plus' model also never dipped quite as far as the polls only model.

Regardless, the initial comment was he 'easily' has 4 more years in him. Except now he's facing impeachment, has Republican allies breaking ranks, a long list of unfulfilled campaign promises, big name televangelists saying he's in danger of losing "the mandate of heaven", more and more evidence coming out about Russian interference in the election, and facing a party that knows it must focus on states that it largely ignored. Trump won in several states with fewer votes than Romney lost with - the Democrats aren't going to ignore those states again. The Russians are unlikely to be as effective again.

I'm not saying he's going to lose - I could very well see him winning - but acting as if it is an easy thing is absolutely nuts. In a lot of ways it is a significantly worse landscape for him, with lots more room for it to get even worse.
If you think unparalleled manufacturing expertise at unparalleled prices isn't an economic gain for the entire world you need to open your biased eyes wider.

Yes the west and china are economic rivals. This does not mean China has zero economic benefit to the world. To not see this is utter blindness.
We don’t have cable or a phone line, so I recently bought a D-Link router with a 4G SIM card slot and a massive yearly data plan that corresponds to the approx. amount of data I use yearly at home as a light non-streaming user (400gb at approx. $1 per gb).

I’m open to hardware suggestions that are/more open source capable or robust in the first place, but my use case was really niche and the shop(s) had nearly nothing suitable except this one model.
I don't take Stallman as someone who would compromise the free software cause because he "liked his position of high priest". As for ideological differences, I think free software is so strongly tied to Stallman that you could argue that someone who seriously ideologically disagrees with Stallman doesn't really believe in free software as it is commonly understood, which would by definition make them unsuitable to lead the FSF.

Perhaps it's a problem to have a movement's ideology be so strongly tied to an individual, but now I feel like we've just looped around to the same issue again. Stallman was the one primarily creating and preaching the ideology, and it's a very effective ideology, so it's hard to see how anyone else could be "in charge". Basically, Stallman just had the right ideas on free software, he had them before "competitors", and he advocated them the hardest. He was in charge on the basis of sheer ideological merit, despite his poor skills as a communicator and a PR guy.
How many people do you suppose can read that link?
And those browser set styles were disgusting so people decided to just style everything themselves
Given that commercial activity affects my unalienable rights to life, liberty and property I would disagree that its not subject to the protection of the Constitution.

I also find fault with the commerce clause of the constitution and think its broad interpretation as an economic defense mechanism is archaic and filled with undesirable effects (such as the drug war, limitations to trade and international tariff wars), not to mention contradictory to the constitutional principle of liberty.
You can install rbtray to get this behaviour globally for all Windows apps when you right-click the minimize button.
Yeah, my immediate thought was that it sounds like the chupacabra https://en.m.wikipedia.org/wiki/Chupacabra and I was surprised it wasn't mentioned.
What "destabilization" efforts?
All the older batteries are holding up very well, so the admittedly limited data we have directly contradicts that. I'd like to see a better right-to-repair stance taken by Tesla, but their products have thus-far proven durable.

You can dislike Musk all you want, but it doesn't change reality.