skysight-inc/HackerNews huggingface dataset:
The blogpost mentions that an attacker could use a normal username and password to access your account via some app that they control, and this is a channel they're trying to get rid of. Even if all that OAuth does is meaningfully enforce the "app-specific" part (including providing the user with a workflow to authorize app access or reject it) this is a meaningful improvement in security.
If we aren't going to make the delivery deadline, just tell us.
Added to my buy/reading list. Looks like it could be a good mix of simpler queries and more advanced concepts.
The problem of this is that it doesn't have a notion of "world state" other than the text of the latest interactions, so you can do anything but it feels like nothing matters.

Fixing that seems very hard though.
It seems like floatplane is going the same route as all these other "by creators for creators" video platforms - forgetting to worry about the viewer at all, and focus solely on the experience for the creator.

As a viewer, i have no idea what i'm supposed to do on this site.
Other Esperanto threads include

3 months ago: https://news.ycombinator.com/item?id=20802326

2017: https://news.ycombinator.com/item?id=16014476

https://news.ycombinator.com/item?id=14835090

2016: https://news.ycombinator.com/item?id=11765214

2015 (a bit): https://news.ycombinator.com/item?id=10019175

2015 (a lot): https://news.ycombinator.com/item?id=9625048
Most of the policies I'm referencing are a few years old. My reddit post I linked is from around a year ago and talks about all these policies except for the 7 day courtesy period, so I don't know exactly when that went into effect.

Anyway, if people are linking articles from 2016 I'm going to point out the current state of the policies.

>Seven whole days until your channel is closed forever. How generous. See: Vacation, holidays, natural disasters (or PG&E disasters)

It's not forever, you can always file a counternotice after it's been taken down. But yes, you should be prepared to defend your business. You want passive income, you can be prepared to check your email at least once a week.

>
>Also, why doesn't the copyright claimants also only have a maximum of 7 days to respond? We're talking about Content ID claims here, as a reminder, not DMCA.

That's a fair criticism. Presumably Youtube feels that they need a longer time to satisfy claimants and avoid DMCA filings. Remember, content ID claims do not harm the channel at all, so there's no real rush to get them removed except for getting the ad revenue out of escrow.

>So, your channel is in hiatus for more 30 days.

On my reading you can keep uploading while the counternotice process continues.

>Which was not the case in either of the situations I posted. The actions only involved YouTube.

Looks like Alex Mauer was involved in legal action https://leonardjfrench.com/2017/06/30/imagos-softworks-v-ale.... Not familiar with the other case but looks like it's not obviously fair use to share leaked content, could be wrong.

>Jim Sterling from the article has many a horror story of spending between 6 months and 2 years fighting copyright claims and associated from corporations and CEO's. So does sidalpha and Angry Joe. Can we really claim in good faith that they're lying by pointing at Google FAQs?

What are they claiming? Have they claimed to have submitted a counternotice that was rejected? Can you link me to someone going through a timeline, with dates on what was disputed when, showing that Google FAQs are wrong? Because I've not seen that. I have seen someone posting about getting a counternotice rejected mistakenly and getting it overturned by tweeting at Youtube. And then there's the UMG exception as my first comment noted.

But most horror stories I've seen are people who get a bunch of claims and don't even seem to consider filing a counterclaim, or think it's too risky based in bad info. Or, very very rarely, people who actually get sued.
> Fedex is the absolute worst.

Here in Canada we have Purolator - the gov't (Canada Post) subsidiary that is a FedEx competitor. Their systems are ancient, their entire operation is pathetically slow and inefficient.

E.g. a recent undelivered shipment that was to arrive last Friday still had the 'expected delivery date' unchanged two days later. When it finally changed it also noted that the package hadn't even left the distribution hub yet.
1, 2 and 4 on your list are through chrome. Switch to Firefox. It is better in almost every respect (specifically, these items you mentioned but also many more) and has been for a while.
I have quite an idiosyncratic keyboard layout and when I switch to use someone else's (normal) keyboard I'm puzzled for a moment but then switch into it. You might find you can do this easier than you think. Try a custom keyboard at home and treat it like a hobby, only using it when you feel like it.
It's unnecessary to set a fine so high that the person doing it would "pay back" the harm to society on average if they did it. You merely have to set a fine so high that it deters people from doing it.

Let's say speeding causes a harm of 500 dollars, and there's a 10% chance of getting caught. Then you would put the fine at 5000 dollars. However, it might be the case that a 500 dollar fine (with an expected payment of 50 dollars) is already enough to stop everyone from doing it, since nobody likes speeding so much that they would pay 50 dollars for it on average. In that case, setting a 5000 dollar fine would just be overkill, and it could hardly be called efficient.

Moreover, your answer assumes that utility can always be measured solely in terms of money. If we measure the utility of society in terms of the number of people speeding (lower is better), then no amount of money can compensate for an increase in the number of people speeding. Then the answer would be to set the fine such that the number of people who choose to speed is the lowest, and does not involve the "expected harm" to society at all.

Even if you do assume that there is a conversion factor between "number of speeders" and "money", then it might still be sufficient to set the fine at a much lower number than you would get using your formula. You cannot just take into account the utility of the society, you also have to take into account the preferences of individuals (which guide their actions).

This can also be used to justify individual fines: if a 100 dollar fine is enough to stop you from speeding, and a 200 dollar fine is necessary to stop someone else from doing it, then why should I set the fine for both at 200 dollars? How can this be called efficient? You could argue it's more fair, but that's more a question of what's moral and has little to do with simple calculations, which you seem to be advocating for.
I don't believe for a second that the primary reason police departments don't look for potential victims is because they're worried about getting sued. The way they handle police brutality cases is enough proof that that's not true.
i’m not OP, but some older design trackballs still being sold don’t have scroll. Also, some newer designs have poor scrolling due to physical scroll ring not being smooth, or the touch scrolling being jittery. But, yes i would like to hear what his hammerspoon solution is too.
Biggest ever Roman shipwreck found in the eastern Mediterranean
The other side of high health care costs in America is that the wealth from overleveraged and dead Americans is absolutely needed to cover drug research and development for the rest of the world
Depends on who you're living with. When I first moved to SF, living in a dorm downtown w/ shared bathrooms/kitchen among some ~50 people, I was paying $1.8k/mo. Then my wife and kids joined me, and we moved to a "proper" place in outer richmond. The cost for 2 bed + 1 kid in preschool went to 6.5k/mo. If you're single, you're probably looking in the range of 3.6 - 4.5k for a 2 bed rent, or half of that if you can get a roommate. Transit runs you about $80-100/mo. So if you're young and cheap, there's a lot of opportunity to build up a bank.

On the other hand, If you are married w/ toddlers and your spouse is on a non-work visa, you're gonna have some tougher luck w/ COL.
Except app-specific passwords are not app-specific at all. You maybe have a calendar app, but then someone steals that and uses it to read email, and delete account recovery emails sent, owning you to hell and back.

ASPs are a real problem and a liability. A read-only view into your calendar or email is not as much.

I'm not saying you're wrong about what their motivation actually is (but you are just speculating), but you can't throw a rock without hitting a security expert who can easily argue why ASPs are a huge security liability.
I think Amazon is very stupid and they should not only complain about blocking that other company but that they should do their best and their promises of package arrivals
A thread from 2018: https://news.ycombinator.com/item?id=17771217
Best Projectors 2019 – Top Projectors for All Uses
Yup. This is one thing I hate about AWS. Oh sure make it nice and easy to use the wildcard cert on any AWS infrastructure. But what if you want to use that wild card cert somewhere else? Too bad. AWS holds the private key for your wildcard cert, and they don't give it to you. They hold it hostage on their server.
Can you list some recent books you read and their 1%? That would be awesome.
It depends on what you read "respecting an establishment of religion" to mean. Does it confer an individual right to live free of an established church? Or does it simply prohibit the federal government from messing with established state churches? There is a very good argument that it means the latter: http://scholarship.law.wm.edu/cgi/viewcontent.cgi?article=17....

If you look at the first amendment, the Establishment Clause stands out:

> Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the government for a redress of grievances.

For the other rights, Congress used verbs: "prohibiting" the free exercise of religion, and "abridging" the freedom of speech, etc. But "an establishment of religion" is a noun. What is an establishment of religion? In 1789, "an establishment of religion" was a known thing: the established churches of the states. So the First Amendment can be interpreted to mean that Congress can't mess with the established churches of the various states.

Turning to incorporation: remember, its not automatic, and incorporation of each amendment must be justified on its own terms. Not all of the Bill of Rights makes sense as applied to the States--for example the Ninth and Tenth Amendments, because those set forth a separation between State and Federal power, not individual rights. There is a natural reading for incorporation of the Free Exercise Clause. But whether it makes sense to incorporate the Establishment Clause turns on what you interpret the Establishment Clause to mean. If the latter, then its really setting forth a separation of State/Federal power, not an individual right, and it makes no sense to apply that to the states.
Actually MacBooks get 6/7 years from when Apple stops selling them. In contrast, the timer starts as soon as the first Chromebook with that cpu is released. It was a nasty surprise when I found that out
Should you even bother loadtesting
Not if it's not actual stocks (i.e. pre-IPO companies).
I agree with everything you said, and I don't have any special insight about how things are going to play out.

But i'm terrified of the current loud support toward censorship and authoritarian suppression of incorrect ideas. We have a lot of historical evidence of just how bloody that always turns out. So I choose to believe in the power of openness and competition of ideas.

As others have posted above, we will never have a time where it's possible or desirable for each of us to validate the truth of every claim, so that means we will have to find trustworthy arbiters of truth. I think that this should happen by people showing they are trustworthy and earning respect, rather than using authoritarian control to shut down those with differing ideas.

Much of the media today has lost such respect, and deservedly so. You can not fix this by suppression of free-speech, but only by creating honest organizations that aren't afraid to respectfully show the ideas of those who see things differently -- even if it's just refute them. Organizations that _trust_ the viewer to decide between fairly articulated positions.

The contempt for our fellow man when we say that bad ideas must never see the light of day or enjoy the same platform as government-approved ideas is a deeply paternalistic and ultimately anti democratic idea. It's elitism at its worst.
Sounds like a great way to make disillusioned physicists for the financial industry.
Amazon is going to vertically integrate shipping, no question. The market demands it, and Amazon will probably eventually ship more packages than any of its competitors. And, Bezos isn’t dumb, so he’ll build and sell this capacity to others.

It AMAZES ME how unreported it goes that they are doing this right now. They are doing it hilariously upfront and clearly. They bought massive amounts of Sprinters for Amazon Delivery to non urban areas, they are rolling out (classically urban only) Amazon delivery to areas near warehouses right now.

And then.. then. They went out and made an order for 100K Rivian delivery vehicles, ONE HUNDRED THOUSAND. The headlines were all focused on the Tesla factor and how they are electric and nobody bothered to ask.. 'Why?'. That's like the number of trucks UPS Owns, PERIOD. That should have been the headline 'AMAZON ORDERS OWN FLEET TO REPLACE UPS, FEDEX' But nope 'Bezos bets on electric with Rivian order'
The first thing you see when you go to twitch.tv is a live stream and a list of other live streams.

Once you view a stream the only things you see are the video player, details about the streamer, and chat.

Not sure what you imagine could be better, but if you want to know what really bad UI looks like, check out Mixer.
I don't know, Americans seem to be relatively more in favor of allowing corporations to screw them than many other countries.
You wouldn't typically run your database VMs on spot/interruptible instances.
I've seen this in sports and games. Sometimes everybody know they should make a move to catch up with the current leader but if they do they probably spend too many resources and lose from the others close to them. So they wait for somebody else to self sacrifice and the leader eventually wins. The leader here are the superbugs and I'm afraid that no normal market rules can make us win this race.
Show HN: I created a website for YouTubers to backup their channels. Feedback?
> CBT in fact doesn't change anything at all

> CBT [...] help[s] you manage those symptoms and live a meaningful life despite those symptoms

So... it... does actually change things?

I'll be explicit rather than flippant: giving someone tools to manage symptoms and live a full life can be a huge change.
Various parts of the Airbus planes are moved with ships between factories.

Airbus ship at the Hamburg Finkenwerder factory:

https://shipsnmoreships.smugmug.com/ShipsinEuropeanWaters/Ha...
We’ve heard from those in the military about scenarios where the whole site or compound goes into lock-down if one little piece of equipment goes missing. Putting labels on everything even remotely sensitive could be doable with a simple label. We’ve been thinking about how to enable really strong low level encryption without burdening the overall cost. Agree, that’s important for these kind of applications.
Well technically it's consistent for 8 previous prompts... but that's probably not what you mean.

If you expect this thing to be a MUD or roll-playing game it's not going to meet your expectations. 'Text adventure' perhaps sets the wrong expectation and in that regard I agree with you that it falls short.
Krebs didn't freeze any business' account and any FBI agent doing similar work to Krebs would not have had to either.

Apparently, the companies themselves called their banks to prevent the transactions. Banks do engage in effort to protect their customers and already flag questionable actions.
> Do they work underwater?

Bluetooth frequencies are absorbed (not sure if this is the right term) by water since the bluetooth frequency and water's resonant frequency is the same. This is why covering a bluetooth beacon with your hands drops the signal strength significantly (water in your hands absorbs most of the signal). Submerging a bluetooth device will probably significantly decrease the signals strength even if the device survives the submergence.
I don't think that estonteco is any more out there than many European languages' coinages for "future", e.g. Finnish tulevaisuus, French l'avenir, or Romanian viitor which are all derivations of the verb "to come" and foreign learners don't really have any problem figuring out the meaning.

In fact, now that I think about it, Zamenhof may have calqued the Esperanto word specifically on Russian будущее "that which is to be", i.e. " the future".
A trick I learned which helped significantly was to sort "oldest" to the top.
> I mean, it's not like you can ever convince me that >10 keystrokes are as fast as 1 click,

I know your reply was to debasarab2 and my upstream comment did say YMMV, but in fact it is a lot faster for me (and likely debasarab2) to type 10 characters than click an icon. My working mode is simply different. We’re not saying you’re wrong, what we’re saying is it’s not universal.

If I Haase to click a button I have to move a hand off the keyboard, shift my gaze, find the mouse pointer, move it, then BT my hand back to the keyboard.

Whereas on a command line I always know where my keystrokes go, I never have to move my hands or look away from the screen, and I have >40 years of typing at computers wired into my basal ganglia. (This is despite the fact that the first computer I used, a CADR lisp machine, had a mouse and bitmap display). GUI interfaces are simply much slower for me, except in very unusual applications. I am not claiming it to be universal but it is clear the affordances of the command line are significantly lower-friction for people accustomed to them.
I'm pretty sure the fact that it's not a security boundary has not changed since 2007. They should've probably marketed it better to clarify this, but that's not a technical issue. It was always a horrible idea to run a malicious program under your credentials relying on UAC to enforce any security. That's never changed.
This isn't even the first iteration of this airframe. The beluga-shaped Airbuses have been a thing for years.
You can't rely on researchers to make a product out of their findings (running trials and getting approval) and that's were the big costs are.
Yes, but what's your point? You seem to understand DNS enough and at the same time you don't seem to see the obvious security implication, are you affiliated with that domain?
But what about a corporation's right to replace? People having their right to repair infringes on a corporation's right to make you replace your stuff. You're stepping all over their rights by not wanting to be forced to have them replace your broken stuff.
I built a pine-like mail client that uses the GMail API: https://github.com/ThomasHabets/cmdg

I'm not saying it's perfect, but it's what I've used to read and write email every day for the last year or two, so it's past that point.

Patches welcome. :-)
I would argue that storing passwords insecurely is not "getting the job done". Following minimum industry standards can be considered a requirement of knowing how to do your job.
How does John Deere advocate for their position? Is it about protecting trade secrets or keeping the machines in better condition for possible resale? Or did they just stay quiet because they knew they were in the wrong?

Whatever it might be, I'm sure I would disagree with it, but I'd be curious how they try to justify it. Especially when you're talking about farmers, who have an extreme DIY culture.
8 words. 128 bit address space and 65k English words gives you 16 bits per word, so you need 8 words to cover the entire space.

My dictionary excludes all proper nouns and all words longer than 8 characters. Only about 60% of the 8 character words were used, chosen completely at random. Even so, given a full IPv6 address the resulting "phrase" is a mouthful. Shortened addresses are a little easier to deal with.
Related: https://www.cnbc.com/2019/12/12/analyst-amazon-delivering-ne...

via https://www.theverge.com/2019/12/13/21020938/amazon-logistic...

via https://news.ycombinator.com/item?id=21807021 (but no comments)
Just ordered a set. I've been hearing about this from Brian for years now and am so excited it's finally live and available for purchase. About to tell all my midwest manufacturing friends...
Saw this on a YC thread a while back, but I keep witnessing examples of it every couple weeks:

https://alexdanco.com/2019/10/26/everything-is-amazing-but-n...

Everything is amazing but nothing is ours.
Dictionary size of what3words: (57*10^12)^(1/3) ~= 38485 [0]

Number of IPv6 addresses: ~340 undecillion [1]

Length of string of words: ~8.4 [2]

Probably closer to 8 as what3words likely doesn't cover the full 3-word-address-space of the English language.

[0] https://en.wikipedia.org/wiki/What3words#cite_note-16
[1] https://en.wikipedia.org/wiki/IPv6#cite_ref-rfc2460_2-2
[2] https://www.wolframalpha.com/input/?i=log+base+38485+of+340%...
Show HN: Plundervolt, an SGX fault injection attack against Intel processors
The same reason millions of Americans voted for "trickle down" and other irrational economic decisions. They're overly manipulated by propaganda.
Anecdotally I found it helpful because it trains some sort of "meta-learning" for languages. Once you learn a new language once, the next gets a little bit easier, things are less discouraging.
If you write less obnoxiously you would be more likely to convince people of your ideas. Otherwise what's the point?
Yeah it's pretty clear the pictures is so Amazon can shrug when you say something wasn't delivered. Like it's smart of them as I'm sure package theft costs them a boatload of money.

But boy do their delivery people suck. The number of times they've called me asking where I live... that's their job to figure out, not mine.

Kinda laughed the other day as my amazon delivery person was also delivering postmates at the same time. No wonder they're not hitting their deadlines.
I love the idea of Hammerspoon but I have yet to figure out a single concrete use-case for me that I actually care about. It feels like a lot of what I see people talking about is window management but I don't want window management (I actually like overlapping windows). Jumping between apps doesn't really matter either, I usually need my mouse with a lot of apps so it's not a big deal to click them in the dock if cmd-tab isn't good. And I already use an Alfred workflow for hotkeys to control iTunes.

I actually had Hammerspoon installed for multiple years on my home computer and the only thing I ever wrote with it was a hotkey to reload my Hammerspoon config.
> that might just be because launching a service like this with a high quality video front and center might ruin their networking when a giant wave of new people come in.

If that's the case, they're not up to the task of hosting a video that goes viral.

Whatever the explanation, the absence of a demo video leaves a very bad impression.
There are several DNS servers with the same problem and some other issues as the project stated they expect archive.is to go away in the not so distant future.
No new technical details.

The whole article is just about this press release:

https://generalfusion.com/2019/12/general-fusion-closes-65m-...

“General Fusion Closes $65M of Series E Financing“
I believe the Glimmer VM (Ember's rendering engine) was/is being moved to WASM.