skysight-inc/HackerNews huggingface dataset:
For user accounts on a Linux system, this is often done during the change process. `passwd` asks for the old password, and then the new password twice. At this phase, the password program knows both the old and new passwords unhashed, and can compare them. So while the other answers may also be right, if it's really just comparing the current password to the old one, then it can be done this way without storing passwords in plaintext.

But it was a little unclear to me from your description how many old passwords are being compared, or if the the password change method requires entering the old one too.
SimCLR Explained
How are you going to distinguish between user and programmatically-initated actions?

That is a deep and fundamental problem within any mediate technology. It's not trivial.

The simple answer is "look for indications from standard user inputs". But those inputs (keyboard, mouse, touchscreen) are themselves sufficiently complex that they can be mimicked, intercepted, or spoofed. There is the problem of distinguishing legitimate from counterfeit confirmation dialogues (already a persistent attack vector for desktop and mobile device users). There is the problem of rogue devices communicating over USB or Bluetooth connections (an argument for a principle of minimum necessary capability for interface ports -- serial and PS/2 connectors have their justifications), though that usually entails other devices being silently added to a system. Though a USB device spoofing an additional keyboard or mouse is also a demonstrated attack.

All of which starts drifting focus away from the key point: what is an unambiguous expression of user intent, and how would you go about ensuring that this is determinable?

The determination of contents question gets to a somewhat different matter: what kind of data are being copied?

I'll admit that I was thinking of the case of text, though there is also image, and conceivably audio and video data.

For text, zoom is irrelevant as that's a display artefact and (at least as I envision it) the goal is to copy the text as displayed, independent of typographical formatting, rather than "glyphs of some size and presentation".

Multi-user clipboard access is dependent on the graphical environment. For X11/Xorg, applications regardless of effective userID, have access to the clipboard.

(X11 also had some early attempts at securing the clipboard, with varying degrees of success. Issues such as grabbing keyboard input, potentially silently, were also an early concern.)
>No-one actually believes Jeff Bezos is running around himself doing all the labour.

You might be surprised just how much a figurehead is credited in contribution, regardless of how much or little they did along the process. I imagine a significant portion of the population at large would assume Bezos masterminded and pushed most the process down to about 1-2 levels of organizational hierarchy from such headlines and glances.

The reality is, he put a business need in place (focus on metrics and quantification) and let C levels percolate the concepts around the organization until a strategy emerged. He may have signed off on it but likely someone below him did and ran with it. I'm not sure emergent organizational successes should be credited to whomever set a few initial conditions unless the entire process can be outlined into how those successes emerged and were shaped--but of course they are frequently credited to someone who simply got lucky or had piles of money to throw at a problem with the right people in the room.

While it's sometimes good someone decided to throw piles of money at a given problem, their goal was not inherently to solve the problem. It also doesn't mean they solved the problem. Lots of people throw lots of money at very important problems and get no credit or sometimes have no success.
but how come the linux and BSD kernels, emacs (since RMS), the java language, even python (python3 was not a rewrite), git, hg, django, etc ... have never been rewritten from scratch?

what is the lesson here?
Thank you!

That sounds very valid - when we built this, we had the working mentality, but unwanted distraction when relaxing would definitely be useful for ourselves.
Shameless plug: we had the same issue with our deliverability rates. We ended up creating a tool to automate the process of checking spam % vs. inbox % for various email subject/body combinations: https://vetter.monsoonyeti.com/
Yes I won't deny the format is addicting, it's just not specifically designed to optimise addiction like certain other sites.
Oneweb is not using the same technology. They're both using phased array, but SpaceX couldn't solve the low price point like oneweb, so they have it mounted on a motor. That will surely increase cost and reduce longevity.

Oneweb is another story, and regardless of their antenna, it's not clear how they're going to monetize.
Nice representation of data (however terrifying it may be) and nice overall site !

https://visalist.io/
Firefox coming soon!
Limit concurrent outbound SMTP streams to any single provider to something reasonable. Many interpret an excess as a spam signal.

Spend time interpreting bounces that come back as emails versus hard failures on SMTP delivery. This isn't easy. Either highly manual, or lots of parsing out temporary versus permanent failures, versus human emails, etc.
>disabling most of the internet

I have JS blocked on some domains because of popups/other annoyances which make getting to the content a hassle. In those cases it's the exact opposite.
I agree for JSON, not JWT.
Yeah you're a friend.
If you disable types of notifications or otherwise remove sources of notifications on Facebook, and those are the notifications that you normally get, Facebook will start giving you new notifications for things that you weren't getting notifications for before. Things like "We have a new friend suggestion for you". Facebook is engineered to give you a steady stream of notifications, and as far as I know, there's no way to disable them completely, despite the slew of options Facebook gives you. Why do you think that is?

Notifications can be designed to be less addictive, but that's not what Facebook is doing.
That depends on whether or not the clipboard is directly accessible or not. When invoking an editor remotely via SSH, for example, it's not. Though there's often the ability to past into the controlling terminal locally.

I do this frequently on Android via Termux, ssh'ing to remote hosts.
Well that didn't answer the question at all :(
It's not the first time this would be required and done. You probably remember Flash. Once Flash was kicked out Javascript took over it's duties. Only you can't just simply block all JS or expect sites to work without it. JS is worse than Flash now.
Is it a competition? Sean is 20 years older than Lex, clearly loves talking and has way more experience across the table from other smart people. I've been subscribed to both for over a year now but end up listening to Lex's more for some reason. They are fairly different experiences and it's obvious to me that some will like one more than the other. That's ok.
Doing a full time day job + leading a busy open source project team is a lot of work. It's like having 2 jobs. Then on top of that you have all the other things in life like family stuff (or dating), spending time with friends, taking care of your home.

Then, after all that you have relaxing. Not everything can be go go go.

No amount of energy ideas will help in this case.
I'm self-employed, and as such, my work relationship is legally required not to be a boss -> servant relationship. My client is my customer, not my boss.
This was really helpful, thanks for sharing!
Our Friend, the Atom (1957 Disney Educational Video)
Your manager should be called a practice lead and they should have recently been a senior dev. They should have been picked by other senior devs as the obvious choice since he’s the guy who spends more time on lunch and learns than writing code.
> - immature implementations, I'll just leave this here: https://github.com/nitram509/macaroons.js/blob/master/src/ma...

Wow. In case the master changes, here’s the highlighted code:

/* XXX get some random bytes instead */
var enc_plaintext:Buffer = new Buffer(MacaroonsConstants.MACAROON_HASH_BYTES);
enc_plaintext.fill(0);

This library’s README should have an all cap “toy project, don’t use” up top.
The same Dan Carlin mentioned above also pointed out how for the brief period where the USA had the bomb and the USSR did not we bossed them around by threatening to bomb them.

There's plenty of incentive to want the bomb.
No. Other platforms already have open APIs, Facebook is the one that has no interoperability. It would make it easier for a Diaspora server to slurp data from Facebook.
Not quite sure how you got that from the graphs. Top three:

Sendgrid: 30.2%

SES: 16.8%

Mailchimp: 16.8%
Expect this to keep happening until we put the full and entire cost of identify theft onto the companies who are defrauded by the thief.
My impression is that he meant Gen Z did not have the chance to witness the alleged deterioration of the software industry, hence, can't tell how bad is it.
How to build your startup for less money?
How Stack Overflow Makes Remote Work Happen at Scale
Maybe it's biased AIG that wants to send us into a panic
I'm not saying there's anything wrong with your initiative, or that it wouldn't generally help, but I don't see where people's conduct or communication had a part to play in this particular story. Did I miss something?
Show HN: New in Railroad Ink: Offline PWA, Lakes Expansion, Multiplayer
Note that Arm64 also doesn't have this kind of direct access to the program counter.
One way to do this is to store a much weaker hash of the password and require some minimum difference in that hash, e.g. add all the character codes together, and reject a new password if its sum doesn't differ by at least 50.
> It is a common misconception among tech people that all systems operate in rational ways, but this is only really the case for machines.

Very elegant and concise. I would say this extends to all deeply complex fields: engineering, physicists, quant, etc. They all have a mindset of "I can understand the whole system because they have logical components that build on top of one another" and so therefore expect and demand that all other fields do the same.
During the cold war, it was much debated whether 'limited nuclear war' was possible - for example, if Soviet tanks entered France and France used only small nuclear shells, only those smaller than a large conventional munition, only against military targets and only within their own borders; would that inevitably trigger an escalation to mutually assured destruction or not?

People who thought it would be tremendously convenient [0] if limited nuclear war was possible generally wanted to remove the taboo between large conventional explosions and small nuclear explosions, and so would support programs like the US "Project Plowshare" [1] and the Soviet "Nuclear Explosions for the National Economy" [2] which used nuclear weapons for mining and civil engineering.

With that said, one might very well argue that we are no longer in the cold war, and that our policies no longer need to be guided by the prospect of Soviet tanks entering France. And whether a once-per-decade reminder explosion would erode or enhance the taboo against their use in war.

[0] The WW2 Red Army had fielded more troops than the entire male population of France so France could not win a conventional war.
[1] https://en.wikipedia.org/wiki/Project_Plowshare
[2] https://en.wikipedia.org/wiki/Nuclear_Explosions_for_the_Nat...
It's not as black and white as that. Reagan was probably the last conservative president that made an effort to work with groups opposed to his own ideological positions.

For example, have a listen to his 1983 Address to the Nation.

Be careful, also, to view him in context of the era he was active in. It's tempting to judge historical figures' actions in a modern context, but that dramatically alters the nature of what they did and why.
Not the one Facebook is proposing.
It is for your left hand since most gamers use the WASD keys for movement. Here's a video of a similar design being used to play Quake. https://www.youtube.com/watch?v=xyVSANPnLlg

[EDIT]
The Azeron comes in both right- and left-handed versions so that's why some images show a right hand. The Azeron works similarly to one half of a DataHand keyboard.

This old infomercial shows how they're used https://www.youtube.com/watch?v=T7UajuYCIyk
I wouldn't call it a best-practice, but I've done this.

I guess my basic heuristic is that it's decent for an API that you expect to have very few consumers (internal, partnerships), but I would hesitate to recommend them for an API aiming for wide adoption.
Yes, at the end of the day, as long as the money is there when i need it, I don't really care how you store it.
The Kubernetes Collection for Ansible
> the more answers I see on an area I’m experienced in, the more I realize how wrong they can be

The fastest correct looking answers on SO are usually the accepted answers. I read an post or tweet a few years back suggesting that you have the quickest draw if you want SO rep: create a bare-bones answer, with no research, so that it gets accepted. I understand why: my answers have been on the receiving end of this - I spent way too much time and effort answering and my answer dropped into obscurity.

That's why I no longer answer on SO.
Because they would lose the job to someone who can legally work for less.
Yes it did[1]. And yes, those people exist.

1. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1470475/
Sony Reportedly Struggling to Keep PS5 Hardware Costs Down
Nitpicking: in the final chart with merged providers, the 'mandrillapp.com' section and 'mailchimp' section are still shown as separate.

Is this intentional? I assumed the opposite, given that:

> Mandrillapp.com is the transactional email service for Mailchimp. It used to be a standalone service until it became deeply integrated into Mailchimp.
Nuclear weapons and MAD provide the best examples of double-think that I can appreciate, and that I even partially buy into. Reading articles like this, I want to jump to judgement and outrage over the physicists and engineers who, I imagine, spend many more hours considering incremental technical improvements than contemplating the reality of these devices. But if I could press a button to relinquish my country's entire nuclear arsenal, would I? Would I rather live in a more morally pure country in that respect, but one which no longer has the safety benefits of mutually assured destruction? If not, then am I just a hypocrite for criticising those with direct involvement?

The logic of nuclear deterrence depends on having an amoral chain of command. Nuclear retaliation against Russia, China, or the United States is suicide, and serves no beneficial purpose in the moment it is carried out. But there is no way to fool an adversary into believing that we are capable of total retaliation without actually putting the command structures and individuals in place which are somewhat likely to follow through. Every time I seriously ponder nuclear war, these questions enter my mind and I can't make headway. Much of it boils down to utilitarianism versus more idealistic thinking.
Lol it's been that way for at least 20 years. Same with chase (well at least the bank one half of it).

It seems remarkably stupid, but it's way cheaper for them to refund any losses and/or pay for lifetime credit monitoring than it is to deal with customer service calls from people getting locked out because they can't figure out how to deal with uppercase and lowercase letters.
A later bedtime linked with obesity for children under 6, study says
How can we build a society that supports volunteer work in open source? Should governments step in and provide open source grants for important projects just like it does for research work? So much of the world now depends on open source software. This problem needs to be solved soon.
> When I wrote the system myself then I was a 10x developer.

Where you 10x more productive than other developers writing systems themselves?
No, that's why I commented, the author wasn't very particular about the burnout, so I wanted to know if it had something to do with the previous stories we heard.
AI and Big Data Conference Exhibition London 2020
> You as a founder would be perfectly fine with a "mere" 10% chance of a "just" 10M$ company to early retire

No way. Assuming a 4 year investment that's lower pay than a low risk bigcorp job.
>The result? Shifting to this model from an SRE firefighting model has lowered total alerts, incidents, and outages. When we first shifted, people dreaded going on their on call rotation for their team; you expected to be paged multiple times a night.

I implemented a similar change at a previous company. Prior to the change, the operations team fronted all on-call issues. After, anything related to the software/services was handled by software teams. We went from nightly alerts to less than monthly. As a bonus, time to diagnose and repair went waayyyyy down due to much better logging.

Note, better logging <> more logging in this case. It meant less spurious errors/warnings, more useful INFO, and better observability of the system.
You would think that this is a fairly rookie error and that big companies would know better, but I regularly see this on Uber: https://i.imgur.com/qDACtG0.png
Misdreavus has done a ton for Rust. Sad to see her go, but at the same time, it’s a well deserved rest for sure :)
Not sure I follow, how should the argument display the rich text (markup/formatting instructions) before the selection?

The displayed/selected content might be

Foo Bar

but the content I want on the clipboard could be

Foo <i>Bar</i>

but I never want to see the markup, only the formatted text. I don’t want to make a two step function where I need to reveal a textual description of the content and select that. The markup might be a base64 encoded piece of binary gibberish in the case of a visual diagram for example.
The Swap-Or-Not pseudo-random permutation generator (2012)
AlphaGo seemed to work.
Elon Musk says advanced AI development should be regulated including at Tesla
Astros 2017 Sign Stealing Scandal
No, it is still true. From https://help.github.com/en/github/working-with-github-pages

> GitHub Pages is available in public repositories with GitHub Free, and in public and private repositories with GitHub Pro, GitHub Team, GitHub Enterprise Cloud, and GitHub Enterprise Server. For more information, see "GitHub's products."
Trying this thing of learning in public with Functional Programming
Yes it's intentionally as Mandrill is still used solely for transactional emails and Mailchimp for marketing. Same reason I didn't merge Mailgun and Mailjet.
As far as I'm concerned, it could be a single function if they really wanted.
Somewhat. A lot of review systems are designed to contact you asking for a review at the exact time you're most likely to leave a good review. The companies then optimize the whole customer interaction around that experience. To actually go back and edit that review when things change isn't always easy.

The overwhelming majority of all other reviews are either the Amazon variety (so a paid endorsement, usually) or from total cranks. People don't really often leave unsolicited reviews.
Thanks.

> most gamers use the WASD keys for movement

What are they doing with their right hand? (Hm, something tells me I'm going to be sorry I asked ;-)
C++20 Is Here [video]
Releasing jql v0.1.0 with Better JSON Query Ergonomics
Same with Pardot missing.
I really like this analogy. I'm reminded that Roger Needham used to say "If we knew what we were doing, it wouldn't be research." (citation: overheard from co-workers of his, also attributed to Einstein)
The password is probably encrypted using a two-way hash. It's not as secure as a one-way has, but you can't see passwords by running a SQL query.
What is wrong with ignoring and working around toxic people who only undermines the project?
It also has macroing functionality with profile switching. You could achieve the same with something like AHK but the Razer interface is easier for simple tasks.
Interesting, but it’s hard to see the big utility. Most spam signals are based on behavior and reputation rather that content. Your email can look clean at first, but if a handful of gmail accounts mark it as spam then your whole network will be on the bozo list within seconds. Gmail in particular is capable of reclassifying messages, if it gets delivered but then your reputation falls, it will get moved to spam if the user hasn’t seen it yet, so initial deliverability is not final.

Maybe the other big operators are more content-based?
Thanks for the explanation and for the article. That was a fun read!
Yes, for the mailbox I ran it on. I'll like to see someone do this on a "business" mailbox
> The model of flashing firmware to change the key layout also seems crazy to me, in an era where you can easily enumerate as a flash drive and just drag a JSON-encoded keymap onto it to adjust the layout. (Or just edit it live, a la CircuitPython.)

Are there any keyboards that have that functionality? I know Logitech allows you to save macro key info to the hardware. However, last I saw that was only for specific macro keys, not all keys like QMK.
>It’s like Nabokov’s book about Gogol where at the end he says that if you really want to know anything about Gogol, there’s no way around it, you gotta learn Russian. It’s sort of discouraging.

As a programmer who loves Russian lit, this hit close to home. It's a dream of mine to one day read Tolstoy's drafts of his predecessor novel to War & Peace ("The Decembrists"), but my professor informed me that the copies that exist are entirely in russian. One day.
I looked at quite a few of the UFO videos on YouTube and none of them seemed legit to me except maybe this one:

https://www.youtube.com/watch?v=z-91Nobn2xk

The uploader looks like the kind of weirdo that would grab their phone to capture a UFO video but probably doesn't have the skill to create such a high quality fake.

It also matches the "tic tac" shape described by the most credible witnesses ever, the US Navy pilots.
Mob Programming and Shared Everything
I'm glad you enjoy them, writing and using these languages floats my boat but it's always nice to get confirmation that I'm not alone in here :)

The biggest issue with g-fu is that it currently expands macros on evaluation. What can I say, it was the first time I implemented quasi-quoting which twisted my brain in exotic ways. That's also why it's so close to Lisp, because it's the only decent macro system I have experience from.

g-foo is definitely a cleaner design, but more Forth than Lisp which may not be everyone's cup.

Agreed, and Bjarne said so himself; that there's a cleaner, more consistent language hidden deep inside C++. C compatibility has been a blessing and a curse. I think Stepanov is a better designer though; if it wasn't for the STL, I would have given up a long time ago.
Good example of a leaky abstraction. JavaScript developers almost never have to worry about or completely understand the intricacies of floating-point arithmetic, until errors like this happen. https://en.wikipedia.org/wiki/Leaky_abstraction
Detecting Vacuum Friction with a Fast Spinning Object
It would be great to see what the more advanced (but bigger and slower) ResNet model is capable of:

https://github.com/tensorflow/tfjs-models/tree/master/body-p...
I program quite a lot of robots and would think I can make them stop if they should do so. But damn would I design at least five different methods for a mechanical stop before I let a robot poke me. So that to answer the question in the article.

Some peoples veins are pretty hard to hit, so infrared and ultrasound are probably good helpers. Maybe some people would prefer to get poked instead of poking themselves, so it could maybe modified to get automatic diabetes treatment or use it for other indications.