skysight-inc/HackerNews huggingface dataset:
It sounds like you're conflating two orthogonal concepts: multiple named clipboard locations, and multiple data types on one clipboard. Both already exist, and are how clipboards on major platforms have worked for decades.

The Javascript interface isn't aware of these distinctions, though I'm not sure I want it to. Web apps like this that abuse one plain text clipboard will abuse multiple richly typed clipboards, too.
Mining my mailbox for top email service providers
As parent said, I don't recommend doing this. In particular, the third-party sources are unlikely get depreciation notes... So unless this is a function you know well, it is almost always better to go to official docs instead.
Why not see what happens[0]

0: https://news.ycombinator.com/item?id=22356125
> I assume you are clicking like on the videos that you enjoyed? Do you treat YouTube like a spam filter and rate things as "Not Interested" if it recommends something wrong?

I do those things often, but not all the time. They usually recommend every single video from a random channel, if you happen to watch just one of their videos. So it’s not all the popular Chinese cooking videos, rather all the videos from this one channel alone. That sort of stuff. Almost like they want some people to get large followings and become influencers, because it’s more profitable to have influencers on your platform rather than having many great videos from different creators.

In a way I’m happy that YouTube recommendations are not so great. That way at least, I’ll not get hooked on the platform and be even more of a time wasting failure than I already am.
Client Side Decorations apparently, it's just added icons/buttons/etc. in the title part of a window.
Since it seems this is PNC, I am one of those who now needs to find a new bank. Any recommendations? I used PNC for my checking/credit but already use an american express high yield savings.

I was thinking maybe Capital One?
Parties within countries were able to manipulate elections, see the UK, with the vast avalaunch of deceptive ads where Cambridge Analytica were involved - circumventing limits on election spending.
Does your doorbell camera have one or eight cameras? The Model 3 has eight cameras. You’re comparing apples to orangutans.
Once you know “tk” means token, you don’t need it to be “token”.
the two are not mutually exclusive, are they?
You can have a ribbon with standard icons right?

I see ribbon as an alternative to the menubar plus toolbar layout, more than visual style.
That article doesn't contain a single logical argument.

>> JSON Web Tokens are Often Misused

So is everything else. Name one programming concept which isn't often misused.

>> There were two ways to attack a standards-compliant JWS library to achieve trivial token forgery

The keyword here is "were" - Just like how people in Europe "were" dying from the Bubonic plague - It doesn't mean that Europe is unsafe today.

The up-to-date reality is that JWT today has been battle-tested to an extent that few other web standards have. In a way, all the negative attention due to past issues has made it stronger.

>> JSON Web Encryption is a Foot-Gun... this is somewhat like pointing a gun with 5 out of 6 loaded chambers directly at your foot

...And using session IDs inside a cookie is like eating a cookie laced with cyanide.
And nvidia’s faster neural network solution they say is faster than Tesla’s
Chip still uses loads more power than Tesla’s chip does.
Sure, no problem.

The first sentence is apodictical and catastrophic.

The second one is meaningless and sensationalistic.

No need to read further an article that is clearly a "plug" and that - besides and as per comments here on HN - is also factually inaccurate.
From the 19th century perhaps, but used in some classic cocktails, and so still found in many bars:

https://www.diffordsguide.com/cocktails/recipe/930/hanky-pan...
> the difficulties of a successful “AI” company are the same difficulties a “web” company had in the 90s.

I had a similar thought reading the comments here about AI hype. In the mid to late nineties, there was a lot of hype about the Internet, and a lot of smart people dismissed the Internet as nothing more than hype. In the end, though, the Internet changed our world. I suspect that, eventually, AI will do the same.
JWT is great for some use cases but if you need auth to be very centralized, just use one of the existing auth mechanism instead of bolting it on top of JWT. I don't see what would be the point of using JWT if you need highly centralized auth.

Where JWT shines is when the auth service does not need to know the clients that might want to authenticate using it. A system where it can issue tokens to any other service on behalf of a user and say, "here you go, you can use this for the next N minutes". This is very useful when it's not practical for every service/client to "register" itself with the auth service before hand like oauth.
The Awk State Machine Parser Pattern (2018)
> Weird-Looking Freak
Yet fails to show a picture of the weird looking freak?
The string 'JSON Web Token' doesn't appear anywhere on the web page. If you're going to use an acronym expand it out the first time you use it.
Why not just edit the answer yourself and add a big red warning?
Well, yes, but it's not exactly the same. Session-based logout (or JWTs with blacklisting) automatically protect resources that haven't been fetched yet, but leave open the possibility of lingering previously-fetched resources. JWTs without a blacklist even leave open the possibility of fetching additional resources with a supposedly logged-out credential. That seems like a much bigger hole.
Heres another analogy, I've been using a black box sorting function from third party library, its super fast and satisfied all my requirements. Then they told me they implemented it using <insert super scetchy/controversial method>. From my perspective, as long is doing a good job and works as I expected, I don't care how its implemented.
GDPR does not have any wording that refers to any technical specifics (e.g. password storage) whatsoever.

The most relevant passage is "the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk" from article 32; and it could be argued that having passwords in plaintext most likely does not constitute "appropriate technical measures" and doing so opens you up to fines based on GDPR if an incident occurs, but it's not really "a law against clear text passwords" but rather a law that simply says that you are responsible for how you [mis]implement your security and the consequences of that.
As always, the devil is in the details. Was it a .com domain? I'm guessing $1 for the first year, is that correct? What is the cost from second year onwards?

Many companies use deceptive marketing selling stuff for such a low cost that it is too good to believe and it often is - you gotta read the fine print. I got my internet connection for $75 and two years later, I am paying 108$ for the exact same thing, with no additional benefit.
I am curious: by slow startup time do you mean starting the IDE or running a pre-compiled and linked application? I find the first slow to start and the second to be quick enough.

EDIT: I have found disk IO to be perhaps slow, or at least in an example I wrote that loads one of my trained Keras/TensorFlow models (saved as a CSV file) into memory and uses the native matrix library to use the model for predictions. The whole thing takes about two seconds to load which seems like a long time.
I think OP is merely pointing out that in the majority of corporate environments upper management isn't really looking for feedback or how to improve etc. Any thoughts or suggestions for improvements will oftentimes not be shared upward, because of the risk it will be viewed as a criticism and make your manager appear weak.

That doesn't mean it's right. It's just what happens in the wild
Parent was talking about giving a 100% tax break to him because he agrees with the cause.
>we should have taken better care of so many people

>Those are not mentalities that we should foster and support IMO.

Those are not the same thing. The first says to connect people to services that can help stem the negative and unproductive mentalities. Yours says to help them grow that negativity. These are not the same things.
Isn't that only a GNU and FreeBSD thing? I think other Unixes will still let you rm -rf /.

On FreeBSD you can do

sudo dd if=/dev/random of=/dev/mem

and it will do exactly that, write random crap into your memory without any sort of safeguard, causing a spectacular crash and a console that looks like it's having a seizure. Linux won't let you do that unless it's been compiled with a flag to enable full access to /dev/mem and /dev/kmem.
Taste and Aesthetics
https://www.artima.com/intv/taste.html

Taste for Makers
http://www.paulgraham.com/taste.html
Yes, but this gives an incentive for Huawei specifically, and China generally, to start dumping money into process development:

> 30 facilities planned, including 10/7nm processes, but trade war and economic factors could slow progress.

* https://semiengineering.com/chinas-foundry-biz-takes-big-lea...

* https://www.eetasia.com/news/article/China-to-Become-Worlds-...

* https://www.eetimes.com/chinas-chip-fab-capacity-rising-fast...
EU puts Cayman Islands, others on tax blacklist
Hypothetically, if that were the case, it creates a single point of failure for the whole system and is effectively "security by obscurity," imo. A malicious actor with the time, resources, and/or internal connections could obtain said master key and have access to the entire bank's database.
that is brilliant: Apple Music has ads about the Apple music service. Apple Arcade about the arcade service. The App store about App store deals. Apple Card about the Apple Card product. Ok, note taken.

Now checking my android phone, main screen just there on the top ... oh hey google in a multicolor G ...

yes they both qualify as adaware. The difference seems that the Apple approach is at least context-aware. You don't get random ads or suggestions system-wide. You get ... newspaper ads in the newspaper app, or music ads in the music app.

I honestly wish we had the same on the android front. Google is decidedly much more invasive these days
The Pros and Cons of a Lunar Pit Stop
Instead of regulation, maybe have browsers give you a warning on how the site your about to visit treats your personal data?

We already have warnings in one way or another for: expired SSL certificates, lack of HTTPS, potential malware sites, if your account may have been breached (at least in Firefox), requests for your location or to show notifications, etc.

The next logical step is to have our user agent warn us about sites that have bad reputation for protecting your data.

I use the DuckDuckGo Privacy Essentials, which gives a letter grade based off of the trackers used and terms of service analysis from tosdr.org, in your browser toolbar. You can get it from here:

https://chrome.google.com/webstore/detail/duckduckgo-privacy...

https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-fo...
Troy has actually covered a similar topic to this in the past:

https://www.troyhunt.com/banks-arbitrary-password-restrictio...

His viewpoint seems to be that poor security practices around passwords in banks are not a big deal, due to the overall processes that banks use to prevent fraud.
>...that same law will say that my Mastodon instance must federate with every alt-right-but-toeing-the-line Mastodon instance if I don't want to take legal responsibility for everything that shows up on my Mastodon instance.

This seems highly unlikely to me. What if you are running a different version of the codebase or something from those instances? v2.0.1special. Even leaving aside constraints like that, volume of inbound traffic, etc. are direct costs to federation with other instances that I doubt laws would be willing to force you to pay.

I wonder if there are examples of this having been done in the past. Microsoft's antitrust case is the closest that comes to mind, but they were operating from an absolutely dominant standpoint at the time. If Mastodon/ActivityPub ever reaches that level, I'd consider it...a win?
I wonder what a landscape would look like where the OS isn't critical but everyone's still on Excel.

Wine suddenly gets really really good, maybe?
Ah, maybe that's the key, I almost exclusively use hdmi.
Microsoft documentation was historically the gold standard for comprehensiveness and quality. If what the other commenter says (e.g. about their Azure docs) is true, I don't know if things have changed or what. Maybe a post-Nadella culture shift?
Well Westpac had an onscreen keyboard for the password entry too until about 18 months ago. When they finally replaced it with a (thankfully password-safe friendly) text box they had this to say:

"At Westpac, we are continually striving to provide the highest quality service and security to help support our Online Banking customers.

From the end of May 2018, we will be removing the keypad from the online sign-in screen and replacing it with an open text box, which allows you to type in your Customer ID and password.

...

Security Guarantee.
We assure you that using the open text box to enter your sign-in details carries the same high level of security ..."

Passwords remained fixed at 6 characters however.
Thinking in React Isn’t Enough
I used to work with a "senior developer" that was making well over 150K several years ago that basically just verbatim copy-pasted code off StackOverflow and hacked it together.

He got shit done and that was what mattered to his bosses... of course it was all a steaming pile of unmaintainable garbage but that didn't matter to anyone.

If he couldn't find it on Stackoverflow he would ask another developer who would tell him how to do it... then Mr Senior Developer would ask that other developer if he could just "send him the code".

Last I heard he's still at that company and still making bank doing nothing but copying and pasting other people's work.
What are good ways for large scale killing of locusts?

Genetic modification that prevents reproduction, some light based traps for the night, large flame throwers?

What can be done?
Frank Müller “One Decade of Go: The Power of Concurrency”
My first thought is that youtube and facebook content reviewers get
paid for being exposed to the worst aspects of human nature, albeit
not nearly enough. Why should you do it for free? In any case, a
low-effort method is to save your ransomware emails and use the
attachments on them in your subsequent replies to scammers.

I'm not convinced that locking a browser to keep it on a site is
feasible, so maybe my skepticism will be of some use if it motivates
you to prove me wrong. I'm confused by your last paragraph, but email
services to which senders pay a refundable deposit are not a new idea.
Daisy Bates (early 1900's) lived alongside Aborigines all her life. Learned their languages and customs. No modern gloss is placed on what she saw.
http://gutenberg.net.au/ebooks04/0400661h.html
Huawei Statement Concerning Eavesdropping by CIA-Controlled Crypto AG
I do this all the time ... I've even created a script to take a state machine description and turn it into an AWK script template.

Very powerful technique, when it's the right thing to be doing.

The ABC of programming: Always Be Checking.
For some people in India, it is difficult to read Hindi because it is not their first language. They can understand spoken Hindi. So some of these videos add English title so that everyone can read the title and listen to Hindi video.
How to Prepare for Software Engineer Interviews
Hedge fund Renaissance built stake ahead of Tesla share surge
Ugh. Yeah, that's an awful word.
As a European, I think Australia went even further and just removed all the branding from packages completely. In Europe, brands still get to have some design.
I’m sure it probably was per user haha.
Does Love Conquer All?
In my Fluid Dynamics class we used Excel together with Finite Element Analysis to solve all kinds of problems. It was actually pretty cool. I remember specifically solving heat gradient problems in various shapes this way.
Guys Figured Out a Way to Get Endless Free McDonald's
is it just me or arent we supposed to be terrified of this kind of development? Cringe.
You actually don’t get anti-aliasing for free on camera sensors. Many cameras put a low-pass filter in front of the sensor specifically to avoid the problem of aliasing. More recently, high-end cameras have been omitting the filter in order to improve resolution. This occasionally does result in aliasing (called moiré by photographers) when taking pictures of fine-structured repeating patterns, however.
I do not think this code needs any. It is very readable and understandable as it is
How the TikTok Algorithm Works
This is slightly unrelated but there was a time when reading the azure docs where you’d be reading a page for version 1.0 but the sidebar would take you to the documentation for version 2.0 and I actually got caught up writing a mismatched integration and it took me forever to figure out why I had done that.
What you have right now is crony capitalism, where CEOs have a massive influence over government, and use that to enact their agendas (corporate socialism). We're already at big business and government being the same thing.

I don't see anyone in this thread suggesting putting more power into the hands of the government. How about we let the billionaires spend money on the causes they want and just stay out of it (NO tax breaks). That's actually less government.
The first is that worldwide iPhone supply will be temporarily constrained
His quest list is awesome. Stephen Kotkin interview was really good.

His problem is the clear lack of preparation in several interviews. He gets thrown off and loses track just when the interview gets interesting. The momentum dies because he has no good followup questions and no idea where to go form there.

Instead of playing ignorant for the sake of the conversation like good host does, it seems that he tries genuinely to learn stuff during the interview. His backup strategy is to direct interview into the same set of overly generic questions where the quest has nothing interesting to say. It's kind of irritating.

If you compare Lex Friedman to Sean Carrol (they have had same quests in their program) its' clear that Carrol is better prepared and better host.

https://www.preposterousuniverse.com/podcast/
when it forced you to login to use it a few months back, i immediately bought a zowie instead and highly recommend others to do the same
The only thing in common between Barrelfish OS and Midori OS, is both were started at Microsoft, there in nothing in Barrelfish that makes it a successor to Midori.
You need some basic understanding of 2D graphics to understand what is X and Y. In fact, they are not good names otherwise because it is pretty easy to mix them up---one more reason to prefer left/right/top/bottom whenever possible. I've seen some codes using Column and Row instead of X and Y for that very reason. (Not to say that I like it.)

If you are okay with X and Y, you should probably have to accept that the definition of "commonly used", "well established" and "actual, proper" words is subjective and different areas and projects have different notions of them. I'm okay with `tk` if it is used consistently and doesn't interfere otherwise.
Show HN: Data structure for presence, absence proof in efficient and secure way
Free unique logos for your business
> although it is true that many coronavirus deaths were likely misclassified

So we don't have accurate numbers in either direction, and anybody pretending that all the mild cases not being recorded is enough to decide this virus isn't serious and doesn't warrant being careful about, is being an asshole.

SARS/MERS show that coronaviruses can be dangerous, and it's too early to decide "well, show's over, nbd".
Merkle trees don’t require proof of work.
It's a common use-case that the best docs are provided on some dude's gist or blogpost. Devs and orgs update the code but don't bother with the forgotten docs. It happens all the time.
How is that evidence of plaintext storage?

Couldn't they do that validation before they hash the password, but still store a hash?

I'm not saying they don't store plaintext, but restricted character's are absolutely not incompatible with hashed passwords.
Data shows Tesla owner experienced repeated glitch days before deadly 2018 crash
Self-reply, sorry, the ribbon really gets my goat.

Here's the deck from the Office team on how and why they designed the ribbon: http://video.ch9.ms/slides/mix08/UX09_Harris.pptx

I realize the Office team had a very hard task. They can't remove features or some of their 100 million users get mad, and they're making a ton of money so they've got a lot of devs looking to add features, so they've got thousands of features and of course users can't find things.

For a contrasting approach, I think the Keynote app on Mac went a different and easier-to-use route:

1. All the options with no context (e.g. insert new object) are in the top menubar, and the contextual options (e.g. change font color) are in a sidebar. So it's clear where to look for things.

2. Commands are in one place only, so you remember where you should look. (Okay, there's a little bit of duplication as the OS-level font menus are in the menu and the sidebar).

3. The contextual stuff is on the side instead of the top, which works better with the wide screens we use everywhere on desktops these days.

4. Contextual menus options stay the same size and shape and in the same location relative to the content, so you retain your muscle memory.
I left formally after three because the new business was taking off that I couldn't see any reason to go back. Better to have 100% focus on the new business.

No bonus, stocks etc.
Fight or flight: How horror movies manipulate our brains for peak excitement
AWS ECR Vulnerabilities Notifier – Only notifications on new vulnerabilities
Incremental rewrites assume that your framework of choice is still supported. In my experience, I would say 75% of the time someone is considering a rewrite, it's because their framework of choice is out of date, which makes it impossible to modify old code.
They want to get to a point where they just say we follow all laws strictly and continue to violate privacy. That is why zuckerberg keeps bringing it up. Right now he is asking for laws and he wants to get to a point where he can hide behind laws and say “the law has t caught up yet so it’s not our fault we sold your data to the Russians and Chinese “.
... also found on the BSDs...
Seems like some EU countries are now requiring a plain packaging too.
https://en.wikipedia.org/wiki/Plain_tobacco_packaging#By_cou...
A fan checked every pitch in the Astros' sign-stealing scandal
And that just for some colored LEDs and such. I don't understand why you need Windows-only software for that.

Doesn't a hardware maker want to make it as simple as possible to use their hardware from any OS?

I used to use a Razer mouse when it had a switch on the mouse itself to toggle between different speed settings.

But I changed away from them when that switch disappeared in later iterations of their mice and instead depended on software that didn't work in Linux.
On a related note, I find it interesting how modern US-ANSI layout keyboards (even the International version [1]) still has such a limited set of characters.

We have ¼, ½, and ¾, but not en (–) and em (—) dashes; and I get that (') and (") are leftovers from typewriters and ASCII, but wouldn't it be nice to have proper 6-9 (‘…’) and 66-99 (“…”) quotation marks?

Then again, you often see Europeans online misusing acute (´) and grave ( `) accents as apostrophes (writing don´t or don`t, instead of don't or don’t). So perhaps the availability of more similar looking keys would just lead to even more misuse?

[1]: https://upload.wikimedia.org/wikipedia/commons/2/22/KB_US-In...