skysight-inc/HackerNews huggingface dataset:
You just made the case for higher pricing. If it’s that valuable then it’s worth the price to secure it. It’s not that sso costs money to implement it’s that the price is tied to value of the data and the organization security needs.

Edit: I do agree with you that a lot of enterprise pricing can feel like the vendor simply figured out a % of your ebitda and decided it sounded good to them. But in the examples in the article, most enterprise pricing was fairly well documented / published. If you want to really get into some of the bad actors don’t look at the list from the article, look at the enterprise platforms that are easily into the hundreds of thousands per month... I won’t name names but if your an enterprise IT manager you know who they are.
https://docuwiki.net/index.php?title=Category:BBC
The entire point he made is that it's a bad comparison.

You're saying wolves don't attack often by citing numbers in an area where they've been mostly killed off in populated areas.

There aren't many tiger attacks in North America, but that also has little bearing on future attack numbers if introducing a wild population. The comparison makes little sense.
I was the same way for a while. I used the SE and swore I could never use one of the huge phones. Then I got an iPhone 11 Pro after I realized people weren't really designing with the small phone in mind and that it wasn't the future. It took ~2wks but now I can't believe I was using the SE for as long as I did. The larger format is superior in my experience after having forced myself to give it a go.
I'd love to read some more optimization problems and techniques along with imaginary numbers and their applications
This is false. GH Enterprise, although the moneymaker, did not have a lot of devs on the project.

Source: MS employee now works at GitHub
Artificial consciousness
I work at a place that has banned the use of SSO because it allows an attacker to compromise one set of credentials and have access to everything. Good times
I have not tested it myself but now there is a disk.frame ( https://github.com/xiaodaigh/disk.frame ). As far as I know, other options exist too.
Any subscription will do or do I have to get one with the "digital library"? I think it's $198
They could fix their search to begin with. It is pretty pathetic.
As a software producer I welcome a variety of platforms for distribution, even ones own website. It reduces fees and increases competition. And as a gamer I don't mind having more than one place to shop.
I’ve seen fiberglass reinforced nylon gears used with success in commercial injection molded gearboxes. It can definitely help by increasing gear stiffness.

However 3D printing with fiberglass causes rapid nozzle wear, and recently people are saying that fiberglass reinforced 3D printing filaments represent a human hazard.

Since I’ve managed to get my gears to work without reinforcement, I’ve not tried it.

One thing I do with printed gears is make the gear teeth much larger than would be strictly needed in an injection molded solution. This lets me deal with reduced material performance compared to injection molding.
If you're going to define your words in such a way that what you're saying is meaningless, why bother even saying anything at all?
You are wildly uninformed when it comes to astronaut roles. Could the ISS be automated? Perhaps, but at astronomical costs. And most tasks would still require remote operation. Also many experiments are done precisely on humans themselves.

In general modern astronauts have many roles -- flight managers, technicians (doing and evaluating repairs), scientists, experimental subjects, and finally yes communicators to an extent (frankly great to inspire people). Obvious Hadfield isn't a perfect human being and I'm sure he doesn't like adulation, but his vast set of skills, including communication effectiveness is quite impressive (and music ability -- check out his space video clip!). I assure you he's no crank (perhaps you're biased by early space program people that were test pilots). I recommend checking out his and other ISS youtube videos to get an idea: https://www.youtube.com/watch?v=8Hj3GnPRsJ4
Process Doppelganging Meets Process Hollowing
Facebook is an outlier monopoly, having successfully privatized a massive commons, so I'm not sure their ability to spend 40B a year proves much of anything. (If those figures are even the right lens.)

As a counterpoint, Wikipedia's operating costs are ~40M a year, 1000 times less, and I know which one I'd rather keep!
It's not paternalism, it's good economic policy to avoid letting whole groups of people fall into such situations that easily.
Well, the premise of mental models comes from the fact that we never perceive reality as is. We are always building models of the world, not actually "seeing" the world.

Our senses are filtering machines (i.e. reality tunnels). We only perceive what is deemed useful, or is available according to our capacities. Thus in essence, we are just creatures of models.

Mental models are just a more precise awareness of that phenomenon. It also sounds cool and sticks with people because mental models are focused on actually being seen (mentally). As you say, mental models rise from the insight that map is not territory, and that we have no territories in our minds, only maps.
That link seems to refer to the actions of some other nation, which nation is considered by many foolish people to be an ally of USA. But sure, if I were worth twelve figures and I didn't want my wife to find out about my mistress, I would avoid recording my infidelity on electronic devices.
It's complicated - the guy claimed he forgot his password. So what does the law do at that point?
...huh? The article talks about the lack of evidence for barter economies. How does that falsify my comment in any sense? Anyways, I made my statement based on what I've learned from reading academic research in economics, not on whatever this guy from The Atlantic said.
'Pale Blue Dot' Revisited
The time to compile exceptions is trivial. Templates and overload sets cost.

The time to run exceptions is a lot less than to run failure checks, except in extreme cases as in the synthetic (not to say phony) benchmark presented. If the time spent throwing matters, you're Doing It Wrong.

The branch prediction slots that failure checks burn are rare and precious: much bigger than a general purpose register, and much faster than L1 cache. Blowing your branch prediction cache has costs hard to measure, although the perf registers help some.

The only substantial cost is object-code file size, and that mainly because precious little effort has been spent to minimize it, because really hardly anybody (i.e., only embedded) cares.
There's also the "not all memory is RAM" trick: plan ahead with enough swap to fit all the data you intend to process, and just pretend that you have enough RAM. Let the virtual memory subsystem worry about whether or not it fits in RAM. Whether this works well or horribly depends on your data layout and access patterns.
The complaint isn't that companies are charging money, it's that companies don't include SSO in their base paid tier. We're talking about customers who are already paying money for a service but they're still not getting SSO.
I mean, I was going to point out that that sentence massively compromises the validity of the author's argument, because I've been in companies with more than five employees for which this was definitely not a core security requirement.

It's one thing to say that some feature is actually adopted as a security requirement at many companies and that SaaS vendors who don't offer that feature will lose out on those companies as customers.

It's another thing to say that SaaS vendors are failing to meet a massive market requirement, and that companies on the other side of that market are also failing to "realize" and adopt that requirement. In other words, unless I saw evidence that a larger portion of 6-person companies demanded this feature, it seems reasonable to assume that the market simply doesn't want this feature, and SaaS vendors aren't doing anything particularly stupid by not offering the feature.
That project looks great! I'm very tempted to start building this because of how good it looks, but I know it would take lots of time and effort, even with the designs already available.

As an aside, would something like https://www.makerfol.io/ be useful for your build log? I see many people using imgur for this but it's always struck me as suboptimal.
> who exactly “others” refers to

Historically, people of color and political dissidents.
I think the ones which can self-compile are most interesting, because it passes a "it's not just a trivial example anymore" point. To do that in a single relatively small file also makes it convenient for studying.

Mini-C is even more amazing if you look at its description:

I set myself a challenge: write a self-hosting C compiler in 10 hours.

Although the language it accepts, being untyped, is closer to B.

Also nice to see my personal favourite, C4, in the list.
So is yours: "Man Of Living Sausage" ^_^

String theory much?!
I think it's insane to identify the problem as being the name, rather than that using the technology inherently leads to a dangerous sense of confidence (assuming it doesn't in fact scare you out of continuing). As many people have said, the fundamental issue is the tiny amount of time between appropriate operation and disaster, and the better it works at first, the less prepared a person is when it goes haywire. This is the same no matter what you call it.
'Ghost' DNA in West Africans complicates story of human origins
So security should be free? That kind of implies something about its worth that I might not think is the author's intention.
He said $100k for each user but it's a dumb idea anyway.

We have a Spark cluster which supports all of those users for $10-$20k a month.
I've implemented things with "Lisp syntax" a couple of times, neither of which had anything whatsoever to do with Lisp. I used to call it the "Lisp non-syntax".

Nowadays I usually bite the bullet and just use JSON or something, but if you want to implement an interpreter starting just from bare minimum string functions pretending you're in 1980 and can't just grab half-a-dozen serialization formats out of your language's package manager (not a bad thing to practice!), Lisp-non-syntax is still a pretty good choice.
If you want a purely technical skill, being fluent in SQL, including DDL, joins, etc... would be a pretty good candidate.
Well, there is something to see, in that he should be paying more in taxes and isn’t because he capitalized his income such that he paid a very low tax rate.

Other than that? Nothing to see.
Fish Shell 3.1.0
That is cool, thank you! But still not turning it up. Grr.
There's a certain irony in the coincidence of the defendant's name being "Rawls", who was a political philosopher [0] that sought to define what "justice" should be within political society...

his work "Justice as Fairness" "describes a society of free citizens holding equal basic rights and cooperating within an egalitarian economic system."

[0] https://plato.stanford.edu/entries/rawls/
GCC still generates faster binaries (on average across a wide set of benchmarks) than clang as of last year
Simple AI shortcuts speed up simulations by billions of times
I actually thought of this a different way... visa and mastercard are gatekeepers enormously inflating the price of transactions.

The only challenges to this have been paypal which didn't seem to go that far, and more recently bitcoin.
Underfitting vs. Overfitting (vs. Best Fitting) in Machine Learning
If you read the parent comment with feeling of frustration and dread, ask yourself: "Am I bad at writing a first draft? Or am I bad at editing my writing?". These are two different things.

-----

For learning to edit a piece of writing you've already written, I recommend this book: https://www.amazon.co.uk/Style-Clarity-Chicago-Writing-Publi...
It is full of advice more actionable than Strunk and White.

-----

For learning how to write a first draft without wanting to dig your nails into your arms or more drastic forms of self-harm, I recommend:

1) "Start with Why" -- Start each draft by writing your goal and then writing the "signs of success" which you can use to recognize making progress.

I find a particularly motivating form of "why" is a description of a problem someone finds themselves in which they want advice about. Reddit is a good source of these if you want inspiration, but you might be better off giving advice to your future self.

2) Take inspiration from automated testing -- If you are anxious about some section being [maliciously] misinterpreted, write down that anxiety with a pointer to the section and a promise to yourself to have a trusted friend read it.

3) Question-Driven-Drafting -- Start with a question. Write the first flawed answer that comes to mind. Write the first question or objection that comes to mind from that answer. Write the first response that comes to mind from that etc... Don't delete.

4) Alternate focusing with exploring -- Set a pomodoro timer. Use my method from #3 or another to produce a bunch of text. When it goes off, congratulate yourself and meditate for 2 minutes. Then set another pomodoro timer and start to turn your ideas into a structured outline: Try to extract the one-sentence key point from the text you just wrote. Then try to build a pyramid-shaped hierarchy under it with the names of the supporting points. When this pomodoro ends, meditate again and start another rambling pomodoro based on the most interesting point.

5) Be willing to "overthink things" -- When you have a question, be willing to actually trust yourself that the question is worth answering. If someone else thinks the answer is obvious, just move on to ask someone else. If someone screams at you that your question is excuse-making, bullshit, or procrastinating, just move on from them. You no longer have parents nor teachers to endure and can write from your own desire to understand the world and communicate ideas. The confusion you notice in yourself is worthy not of ridicule but of sympathetic curiosity.

6) Go for a walk -- Its just a generally good idea.

7) Dictate into otter.ai -- It is as good a use for your time while walking as any. The resulting text will be heavy with misspellings, but you'll be able to edit it and it will restore your sense of confidence in your ability to generate ideas.

8) Work with a writing coach or therapist if you can find a good one. They might be expensive, but they're less expensive than getting fired because you handed in a blank performance self-evaluation.
18 months is the new limit. It only applies to federal courts though.
Not literal copying, no, since the two codebases differ substantially, but they can look at the code for what the other has done to see how they did it and they can re-implement it without fear of patent infringement claims.
I really love reading things like this, on the other hand I also feel very demotivated seeing how difficult it is to earn money through a side project.
another day, another cli tool written in GO

this shows how good this language is

dotnet team at microsoft needs to wake up, they are soon going to be extinct
ThereOrSquare – Everything you need to plan an epic party with your friends
Macrumors is guessing this 4.7” “iPhone SE 2” might come out in March.

https://www.macrumors.com/roundup/iphone-se/
ThereOrSquare is a free party/event planning tool much like Facebook event, but with collaborative tools, such as time/location poll, shared task list, and potluck list etc., to lessen the burden on hosts. We are also thinking of features such as surveys and expense tracking down the road.

Feel free to give us any feedback on problems you find, viability issues, and feature recommendations. We want to hear what you have to say. Thanks!
it is still wayyyyyyyyyyyy too long.
This is the dumbest comment in the whole thread. You can’t design software if you aren’t building. There’s just so many unforeseen problems that come up when you’re actually in the thick of it. It’s not like a house that you build 1000 times from the same plan. Every single piece of software is unique in some major way.
My employer actively promotes SSO to clients for the main product, but discourages it's use for internal applications.
We sort of already have this, since stegfs provides an existence proof:

https://en.m.wikipedia.org/wiki/StegFS
That's not incompatible with the existence of coincidence of wants being a problem. Grubers point is that debt is historically the primary solution to the coincidence if wants, not money.
> When I discovered mixcloud, this was described as a "feature" that essentially turned them into radio which allowed them to have much more generous licensing terms with the labels

Fairly sure that was only applied to some locations.
Exactly. I believe this is how Web Push works; the major browser vendors each run their own push servers, and the protocol is standardized.
How many people use those projects? What a weird comparison
To match the install procedure with the nostalgia, you really should build from source.
This does seem quite sneaky for terms of service on essentially a QnA website.
Lately, the Quora results that show up for me in search have been very ad-like. It's as if a team of accounts are trying to direct traffic toward their own individual websites or businesses. It amkes Quora very spammy. Not a fan.
I understand the list of companies provided here are fairly large businesses, but the text in the post seems to send a different message.

Maybe I am misinterpreting this, but I have had this conversation quite a few times in the past month alone with other engineers and execs, and I have to take an entirely different stance.

If you are trying to bootstrap a SaaS start-up (or even if you arent and just want to be frugal and/or keep technical complexity low) I do not think that outsourcing your authentication to a third-party provider, especially at cost, is necessarily the best choice.

A) In the developer community chats I am in, the auth provider that pops up the most in conversation is Auth0. Personally, I do not see how they stay in business because their pricing is (in my opinion) egregious. $228/mo for 10,000 monthly active users. However, they do have a free plan up to 7,000 monthly active users. The sheer volume of people who continually bring Auth0 up means that they either build products which never gain significant traction & have never had to scale, or have money to blow. So there is the cost-factor argument.

B) While you can make the argument that the vast majority of people have accounts with SSO providers, I would play Devils Advocate and say that there also exist people who are uncomfortable either providing that identity regardless of the anonymity/security meaures in place, or because they do not want to associate an identity from a primary authentication provider with your site/service. So there is your please-the-people argument.

C) From a technical perspective it CAN be easier not to opt for SSO integration. What I mean by this is, for the past half-decade, the majority of the products I have built have used bcrypt-ed passwords. And that works just fine. For getting things off the ground you can go far with a solid password hash-and-compare implementation.

Something roughly like the following is free, super easy to implement, and covers a large percentage of usecases:

- Store password with an algorithm like bcrypt or Argon2 on sign-up, compare on login

- Opt-in 2FA by using OTP via SMS or email

- Issue a SecureRandom session token each time a user logs, and use it as the identifying mechanism in a JWT or similar

- Make your auth logic verify the JWT and look the user up by the session token

- You can emulate the blacklisting/all-token revoke functionality major auth providers have by clearing one/all session tokens in the DB

I am sure someone who knows much, much more than me about security show up in the comments below this and tell me I am idiot, but this is my two-cents at least ¯\_(ツ)_/¯

(Side note edit: I think that there is a burgeoning problem in the developer community where new engineers reach for the easiest thing and wind up with a stack full of nothing but X-as-a-service, which in this case includes authentication. I am not sure how many junior devs could implement basic password-hash JWT authentication from scratch. The fact so many of them are readily paying $2,500/yr per 10,000 users for JUST authentication is mildly terrifying)
LineageOS for the Essential PH-1
I agree. Engineering is all about trade offs. Software let’s us make different trade offs because it’s so easy to update and fix your mistakes. It would be a poor engineer that didn’t take advantage of that.
Forth is a great language, simple syntax, (relatively) simple to implement, has a repl, easily extendable and fast.
Chuck Moore was/is really onto something.
> [...] it has worked for a decade so far

if you don't change the inputs or any other variables, it is different from a program deployed in the wild... but yeah not very many things are perfect (even the sun will die one day).
I have had the same experience using Selenium but not with Chrome Dev Tools Protocol. However you still need a stable environment, trustable selectors, and automatic waiting logic to have stable e2e web tests.

I am working on an open source library that generates Playwright tests (uses Chrome Dev Tools protocol) and I hope we can prove you wrong about getting UI tests working reliably. https://github.com/qawolf/qawolf
Fuck work trucks without a/c in hot climates
Shrink Docker image size by 77%
Do many people from those areas travel to China compared to places where the coronavirus?
Yeah, I'm sure that'll work out just fine so long as the sea level never rises. At least it's in Florida where there's never any serious storms.
NYC has its own layer of human-rights law that covers hiring discrimination.

And beyond whether discrimination is proven and acted upon, the NYC Commission on Human Rights has proven more than willing to dive into media trials where they essentially shame companies whether or not those companies have been found guilty of a violation.
Thanks for the JS files.

Would be nice to know about his process.

Here it appears he is importing the graphics from somewhere else converted to imperative drawing code:

https://imgur.com/jFpN0f3.jpg
Check out LinkedIn Learning, we've got technical courses at all levels, and a bunch of other topics like creative stuff and professional skills as well. All available as part of a monthly membership that's within your $50/mo budget ($29.99/mo or $19.99/mo depending on duration). Disclaimer: I work there, creating some of the technical content.
That's what 2FA is for!

And even with SSO, your credentials don't have access to everything, because no one employee should have access to everything. People should only have access to the IM channels, git repos, etc that they are actually involved with. Admin accounts and especially critical systems should be set up to require separate/additional authentication.
No, it's just simple and good price discrimination.

Don't think of SSO as a "tax" you have to pay on top of what is otherwise a cheap and fair base price.

Rather, think of the enterprise price (which includes SSO) as the fair base price that allows the vendor to stay in business and pay their costs.

While everything else (non-enterprise) is severely discounted, in the hopes that if you do become enterprise you'll pay full price then.

And you need something to prevent enterprises who can obviously afford to pay, from buying 1000's of seats at discounted rates. So you discriminate based on something they absolutely need: SSO.

It works really well.
Definitely find or create an issue about this. I agree 100%. They claim it is still early in development so mentioning it now would be best.