skysight-inc/HackerNews huggingface dataset:
Because you don't get to do that unless you either have a ton of rep (which is a pain to acquire on SO because nobody votes), or the question is marked as a wiki. Otherwise your suggested edit goes into a queue where it will likely be declined as "conflicting with the author's intent" even if it's an unambiguous improvement.
I read "grep", "ls" and "cd" as "grep", "el ess" and "cee dee". I don't even know what grep and ls stand for.
Evidently the federal licenses didn’t work. It seems like you can simply buy approval and override public interest.

Secondly, the problem is not just in federal air space.
Another missing piece to the puzzle is the impact of smoking and air pollution.

Wuhan is particularly intertesting in that 50% of males smoke. Additionally, the air is terribly polluted. We know from ordinary flu, both of those factors increase mortality significantly. More interestingly, it looks like smoking may increase ACE2 expression and make people more succeptable to the virus.

So there could be environmental factors endogenous to the region that may not hold globally that drive both infection rates and disease severity.
Modern JavaScript/TypeScript is fine. Especially when compared to Perl, of all languages.
Jersey isn't mentioned. I wonder why? (Not a sarcastic "why", a sincere "why".)
Is there such a thing as stock Android?

Anecdotically, I have an Android phone that I use for development (i.e. it sits on my desk most of the time). Every time I turn it on I get notifications that I have updates available or something has been updated or whatever - with the google logo - that I cannot disable anywhere.

I also get some of those from manufacturer supplied "helpful crap" but I suppose we can't blame Google for those...
> “physical intuition is a skill you want to keep" (or build if necessary)

In whatever field of work, THIS is most critical.

Grounding in the hard reality.

Without it, you literally don't know what you are missing

With it, you can easily see things that others miss, simply because you stand at a better point of view.
I agree with you, the code isn’t as readable as it could be. But that’s precisely the point here: it’s an exercise in artistic license, so its conciseness is a feature, not a bug. Think of it like poetry.
There’s some really interesting things you can pull out of your email. Having done some analysis myself it’s actually fairly easy to export data from Gmail to do an analysis.

This is from a few years ago, but I bet it’ll still do the trick:

https://austingwalters.com/analyzing-email-data/

Everything is in python:

https://github.com/lettergram/Email_Analysis

Regardless, I encourage everyone to do an analysis of their emails. Cut out the junk, set reminders on when to check, etc. it’s both enlightening and potentially horrifying to discover trends.
> Sun GNOME Human Computer Interaction (HCI), Sun Microsystems, Inc

Do you know the story behind why Sun was doing this work? I had no idea they were involved in this major culture shift in Gnome. I thought they were more invested in CDE.

You can see their focus - business users, scientists, creatives - and how that might have led to the current design philosophy of Gnome.
Consider a scenario where almost half of a pixel (but not the center of it) is covered by some diagonal black object that's in front of a white object.

If you ray trace and shoot one ray in the center of the pixel then it will hit the white object, and no matter how many rays you spawn from that intersection point the part of the black object that's covering part of the pixel won't actually contribute to the final image. So with this technique the final pixel will be white.

With path tracing you shoot many initial rays at random sub-pixel positions, most miss the black object and hit the white one, but some hit the black one instead. So with this technique the final pixel will be gray, a mixture of the two objects' colors and therefore anti-aliased.
So bookmark the search page and blacklist the home page. Only read what you specifically search for.
ls is a shortening of "list", i.e. list directory contents, and grep is apparently Global Regular Expression Print.
Stop using JWT for sessions, part 2: Why your solution doesn't work (2016)
`rm -rf ~` is disastrous enough on macOS with a bonus of not having to authentiacate sudo.
But waaaay more interesting. :)
Indeed, at least the “ads” in Apple’s apps have a chance at being useful. If you don’t use the app or don’t want to see the ads, remove the app and install your preferred alternative… boom. Done. You won’t be bothered again.

I don’t know I see the issue here unless Apple is supposed to abstain from taking a piece of the services pie, because how weird would it be if they offered services but didn’t mention it in iOS at all?
I guess that the US doesn't even have electrified rail yet. This has been standard all over Europe for many decades now. It's really low hanging fruit, that the US apparently never bothered with.

So the US is going to end with diesel trains vs electric trucks. The complete opposite of the situation in most of the rest of the world.
Why all the printf copy/pasta around the opcode enum?

Can't the author use pre-processor string concatenation to write once and then leverage that to map enum to string and back?

At least I'm doing that in a little scripting language parser and it looks portable.

Edit: I'm actually using pre-processor string concatenation for something unrelated. You don't even need that to do the mapping.
Same here. Perhaps OP has Chrome's automatic translation set up to always translate it?
I have one question

We have all these stories of how our feudal lords have been nice and helpful

But why not get the notifications yourself on your own devices?

You can set up your own policies for approving transactions or whatever. I understand that the chargebacks can be done up to 60 days, which means “seller beware” in the current financial system as opposed to “buyer beware” in the crypto one. But in the crypto one, you are in charge of your keys. And the arguments made in favor of banks could have just as easily been made for printing presses or telephone switchboard operators!
It is difficult for many people. Whenever I read about W, I see people offended there was (what they consider) an overreaction, and that everything was deleted. Personally I only see that as exerting extreme caution after something really bad happened. Beyond that, it is their right to share or stop sharing when it stops being fun.

People seem to have forgotten the old hacker ethos: doing stuff for fun. Many people are more now attracted by publicity and fame than by the fun part - look at how many want to be influencers! Or even worse: by extracting value from than fun spirit - look at social networking being used to create fame by manufacturing outrage!

Some people who do things for fun may also want to be forgotten. They just care about the fun. Yet many people think they have a right to whatever they create. It's hard not to see that.

Personally, I see that because I do not want any of the stuff I do online have any link to what I do offline. I do not want my identity leaked either.

Yet here on HN when I will delete my account, my posts will stay. And I can't edit them in any way. So much for being about hacker values!
JWT always felt a bit strange to me. The fact that we pass user attributes back and fourth from the client feels more like evidence of flaws in the web as a platform than it seems like a real solution.
If you're talking about a small, quickly-written, one-off piece of code, then I think truncated variable names are OK.

If the code is anything that anyone else (including future you) will have to read, or a part of a larger system, then descriptive variable names are best.

I can't count the number of times I've dropped into some source code with variable names that didn't mean anything and with no comments describing what they mean.
Absolutely true. C4 doesn't go far enough.

The source of my favorite C compiler, on the other hand:

http://www.kparc.com/b/
Our Rebrand
Your question is a good one, and "pinning" is not a very appropriate term here. Whitelist acceptable algorithms by issuer, ok fine--you have to have a library of acceptable public keys or shared secrets to go along with each of the allowed algorithms anyway. The JWT consuming infrastructure here on top of jose4j uses a registry of keyinfo metadata to allow for provision of multiple expirable keys and supported algorithms for each authorized issuer, and I'm not sure why anyone would do it other than that way, really.

Disallowing the "none" algorithm is an important implementation detail, like, maybe your JWT library demands an environment value "JWT_ALLOW_UNSAFE_SIGNING_I_KNOW_WHAT_I_AM_DOING=1" or just doesn't support it in the first place. Maybe it was foolish to ever make any allowance for this in the first place.
So they can add columns for 2FA but strengthened password storage is not doable?

This was forgivable 30 years ago. It was bad practice 20 years ago. Someone could have demonstrated leadership and developed a ten year plan to fix their legacy problem then.
I just undef'ed and re-define-d int before and after the main declaration with clang, and it seems to work fine.
This is another example of this delusion people have about specificity when comparing outliers to normal people.

Genius level programmers are better than you at everything related to computer science. And if they aren't familiar with it, they will become familiar with it in a fraction of the time and then easily surpass you. This is why we call human intelligence 'general'. Because it applies everywhere.

Unless you think your ability to do your job is entirely dependent on tooling and learned knowledge, smarter people will quickly become better than you.
An Open Letter to President Recep Tayyip Erdoğan
Firefox shows 344 visits to this page :) Thanks for saving me the trouble to awkwardly describe the symbol I in order to google it.
Magnitudes of Exploration
There's a point in space that represents the lens of the observer's eye, and a rectangle in space that represents the viewport. This rectangle is divided into pixel-equivalent square areas. For each area, a sampling of one or more rays is drawn from the lens point through the bounds of the area, until it encounters a surface of the scene. At that point, the material rules of the surface might generate another ray for specular reflection, a cone for diffuse reflection, another ray for refraction, and also add the emissive light value from that material. If the specular or diffuse reflections encounter a light source or ambient light, they add some of that light to the pixel-equivalent.

The diffuse cones send out a sampling of rays and attenuate the light from the light source, based on how many of those rays hit it, instead of some other object.

Instead of drawing light onto the scene and calculating how much passes through the viewport to the lens, ray-tracing cheats by working backwards, because photons traveling backward in time follow exactly the same rules as those traveling forward in time. Every photon that can travel backwards in time from the eye to hit a light source must have emanated from a light source with exactly the right direction and polarization to enter the eye. So the only photons calculated are the ones that contribute to the scene as viewed by the eye.
He doesn't 'give money away' no-string-attached. He uses the donations to control the way the economy deals with the externalities of capitalism. It's fundamentally anti-democratic for that share of the world's economy to be driven by the whims of one man.
As someone who uses the bank being referred to in the OP, this makes me feel a little better... somehow. I use a unique password and 2FA and monitor my accounts but I am still considering switching banks to one that puts more emphasis on security.

You mentioned that only a few banks have the resources to tear down their systems and create a new secure one. What banks are these?
Firefox makes life easier:

Ctrl+Alt+R

Also, uMatrix with js disabled by default works well, too.
Yeah I don't buy this idea at all. People freaked out over the ability to edit photos in dark rooms decades ago. Trust didn't deplete because pictures got tied to identities which in turn is tied to reputation (or by verifying "hey is that picture of the president k-wording a person with a gun real" with a trusted institution or something), etc.

There's other cool stuff that will come of this but the fact that this is the idea mentioned every single time shows a severe lack of imagination in our sphere.
Edifice – New York City – Onsite – Systems Engineer
What you say is true; however, not automatically normalizing ray directions after transformation can be useful in some cases, e.g. to avoid introducing floating point error when calculating points from t values.

See http://www.pbr-book.org/3ed-2018/Shapes/Spheres.html#Surface..., the paragraph beginning "A natural question to ask..."
Splitting on non-line-end semicolons (other than in literals) gives you a functioning program of 942 lines, 62 of which are either blank or comments.
Edifice | New York City | ONSITE

Edifice tracks how buildings are being used so the commercial real estate industry can operate more effectively, resulting in reduced costs and increased revenue. We are looking for a Systems Engineer to lead the effort on pilot projects and building our end-to-end system. Looking forward to connecting! Please see the job description.
For some reason I first read that as "Home DEPOT tells man,..."
Thanks, I really enjoyed the theme.
>How much ripping would HN impose on one of these institutions if they attempted a 100% best practices secure password upgrade and then subsequently had a complete IT disaster unfold (I can certainly link articles).

I'm definitely interested in examples of this
Well, it searches google, doesn’t it? I’m not trying to be argumentative, I really don’t know, haven’t run what’s preinstalled since day 3 of my very first Android phone.
I know Firefox shows me the DuckDuckGo logo when I enter a search term, so it seems reasonable to me.

edit:

> Imagine if your browser had one in the URL bar: it'd be ridiculous, and very annoying!

Just checked, Chrome does that, I guess that was your point ;)
Lucky you. You got a phone call before just declining it! /sarcasm

Story time:

I was in London, on a multi-week vacation when my CapitalOne card got declined while trying to pay for dinner on the 3rd night using Apple Pay (for the contactless feature).

It wasn't an expensive meal.

There was no warning, no text-message, no phone call. I opened the CapitalOne app and it said my account is now restricted. I proceeded to call CapitalOne, and sit on hold, then get transfered a couple of times until there was a person who could flip the switch.

I paid for dinner, and my wife and I started back to our hotel. Half-way there, we stopped off at a Boots Chemist, and picked up some allergy medicine. Card declined again. I knew it was going to take 30+ minutes to deal with it, so I paid cash and we left.

When we got to the hotel, I had to call back, deal with the same multiple transfers to the person who could flip the switch. Then we would get 1 transaction through before it would get declined again. I eventually got a direct line to the guy who could flip the switch, and after the 5th time of me calling him, we spent a few hours investigating.

I have used this card in the UK for years on vacation. But increasingly merchants dislike the lack of pin, and needing a signature, so to be a good tourist, I decided to use it with Apple Pay, and that was apparently the combination that was killing my account.

The Apple Pay + UK card reader combination was apparently blanking out the CVV code for whatever reason, and while Capital One would allow a single transaction to fail that check, they would then suspend the account until a person verified the transaction was legit. My biggest gripe about this though was they did not even inform me each time it happened. So for the remainder of the trip I had to either dip the chip, and sign a receipt or pay a FX fee.

EDIT: Now that I'm thinking on it more, I think the reason the CVV was blank was because a CVV doesn't get used when your card is present. So I'm back to thinking this was a CaptialOne issue. They were seeing the transaction as a card-not-present transaction, instead of as a contactless transaction, at the time, I don't think they had contactless cards, so that might have not been a scenario they had accounted for.
On the surface one would think big companies should "know better". I mean, a large company is the accumulation of centuries or even millennia of career experience. Unfortunately, they also contain just as much accumulated nonsense and foolishness; and enough bureaucracy and organizational cruft to hide it forever.
There's a blog specifically dedicated to highlighting examples of plain text storage of passwords too: https://plaintextoffenders.com/
Julian Assange – Public Rally Event with WikiLeaks [video]
Agreed. I need to get some time-off/tech resort to study the fundamentals.
Off topic: it gives me undue vexation that there are two dessert items with names so similar to each other that everyone keeps confusing them. Can we just all agree to come up with a new name for one of them?
perhaps it is encrypted, rather than hashed.
This isn't a new thing. The government chooses lots of things for us. What things are legal to buy, eat, etc. are decided for us. Sometimes people need to be protected from themselves. This is why we are going to lose on privacy. Fear-mongering over pedophiles will sway people instead of them looking into the laws and their effect on their lives.
Besides, this issue has been solved for many years now. Auto-completion in modern IDEs has gotten really good.
I'd say it's good writing to link to the wiki entry for a less common concept like JWT in the first paragraph, right next to where they first mention it. It's definitely not ubiquitous like JSON, SQL, or FBI.
From a human factors engineering POV, this is straight usability research. Instead of assumptions, use observations and interviews— then form problem statements. Instead of a single solution, form ‘how’ statements about intent.
In Product Management parlance: speak in terms of problems, not solutions.
The design cycle then moves to create product/refine product.
Hominid endocranial asymmetry is far more variable in humans than great apes
I wouldn’t consider this a leaky abstraction.

Floating point numbers are explicitly not trying to be an abstraction for real numbers, but rather an approximation for them that is good enough for most purposes (if you’re careful in how you use them).

That they might not be taught as such is another problem.
I think you underestimate the role of a leader in building an organization like Amazon.

The things you handwave away - putting a business need in place, letting C levels percolate the concepts until a strategy emerged, they are all evidence of effective leadership.

It's wickedly difficult to set the initial conditions for emergent organizational success. Simply discounting Bezos by saying that he threw piles of money at the problem with the right people in the room is misunderstanding what his job is. His job is to get the right people in the room - identifying the right people is very hard. The more difficult job is listening to what they say. Casting aside your own ego and confronting difficult data. Most leaders have too little courage and too much ego to be able to do this effectively.

If you'd like insight into how important having the right leader can be then I'd recommend starting by reading the book Good to Great by Jim Collins or at least the chapters on leadership.
Traffic Jam? Blame 'Induced Demand.' (2018)
See https://news.ycombinator.com/item?id=22356101
In general I feel that developers are very poor clients. Designers are better off finding freelance work or donating time to a non-profit they care about imo.
> JWS/JWT supports

Support for ed25519 signature in current implementations is pretty poor.
The better the product recommendations, the more creepily obvious it is just how well they know you.

Nah. Things like search would be better if they were hiding competence.
Leaving aside specific podcast episodes, podcasts, conference "fireside chats," and the like really don't lend themselves to deep dives especially podcasts that cover a fairly broad range of topics. Especially with a lot of listeners driving or multitasking, you're going to lose 75%+ of your audience on a single technical deep-dive episode, especially given the lack of any visual aids.

In general, people looking for deeply technical podcasts are mostly looking in the wrong place--although, of course, your mileage will vary about what "deeply technical" means.
Radix-4 modified Booth encoding to reduce the number of partial products and then a sort of modified Wallace tree using 4:2 compressors (or some sort of 3:2 & 4:2 compressor combination based on technology node). There is another type of multiplier sometimes used for maximum performance: unlike Wallace trees where you go through steps of tree reduction, the "Three Dimensional Method" looks at each output bit and generates the fastest possible tree from the partial product matrix. The problem with this method (besides area) is that the wiring and layout of cells is highly irregular. However, now that we are in the age of automated tools, this type of design is more feasible. Paper here: https://www.ece.ucdavis.edu/~vojin/CLASSES/EEC280/Web-page/p...

If you're interested, this paper from Synopsys has some neat information about datapath synthesis:
https://guest.iis.ee.ethz.ch/~zimmi/publications/datapath_sy...
The fake screenshots and the fake videos are both troublesome. How do we know what’s true and what isn’t? How many false facts do you believe?

I can imagine a world where false tweets/videos/headlines are generated specifically for you to keep engagement levels high. The outcome would be not only do we not know the truth, but no one can agree on the truth. It’s something that currently exists in our society, but technology can make the split bigger.
Just checked to re-confirm: Wells Fargo passwords are case insensitive as well. This doesn't confirm that they store passwords in plaintext, as you said they may just convert to uppercase before hashing, but it is bad practice either way.

There is a lot more possible entropy if QwErTy and QWERTY are distinct. However, there seems to be issues in the entire financial sector with inability to upgrade certain systems due to massive amounts of legacy code. That being said, my local credit union's system distinguishes case for passwords; and they were unable to give a family member their password (they had to issue a reset) which at least leads me to believe they are hashing passwords instead of storing in plaintext.
The State of PKI – Analysis of AppViewX BlackHat Survey
Martin Fowler's money pattern [0] solves this problem. Just make sure whenever you're dealing with currencies to use a value object for money, rather than float. Lots of languages have libraries for this pattern. [1]

[0] - https://www.martinfowler.com/eaaCatalog/money.html

[1] - https://github.com/topics/fowler-money-pattern