skysight-inc/HackerNews huggingface dataset:
Melodies are insufficient on their own in my opinion, the court rules differently I guess. Melodies are just as likely to be formulaic, and are built using similar foundational knowledge as a chord progression (only a subset of notes works in a given progression for example, and conventions lead you toward certain notes of that subset).

A combination of chords, melody, rhythm are I think the only reasonable measure that a song has been copied.
I hope he gets the maximum to teach/deter others to not utilize their position, talents in a wrong way. He lived in a free country, smarter than millions, yet he betrayed the trust of his employer and the country that embraces him. I am an immigrant from Thailand, grateful to the opportunity this country giving me every single minutes.
No it can't, because no mainstream browser supports or ever will support DANE.
You win when you have fun and get invited back.
It's not a void. StandardML file the niche well and Ocaml is getting close (just waiting for multicore support). The issue is a company that wants to put in resources.
I got rid of Google Authenticator in 2018 preferring Microsoft Authenticator after feeling weary about having to setup 2FA on a new phone and subsequently reading posts like https://smartphones.gadgethacks.com/news/google-authenticato... which made me aware that I didn't have to go through that pain anymore if I dumped Google Authenticator.
I remembered attempting to play this game on my Dad's playstation as a kid and always crashing. Glad I can now blame it on the fact the game was "too" realistic and not my poor skills as a young child. (But let's be honest it was definitely the fact I was a young kid who had no clue what I was doing). This was a fun memory to walk down though so thanks for that!
Completely understand, it is very easy to export all your data in multiple formats (markdown, HTML, OPML) if you do decide to try.
Sounds like you had a bad experience with a church. Every church I've ever gone to even without me being very religious has been very accepting and nice.

Making blanket statements after one or even a handful of experiences doesn't help anyone and can be said about things also not relating to churches as well.
While the problem is not quite AGI, it's damn close.
Website is blocking my access with a challenge that doesn't work :-(
Thanks for sharing I will take her back although should I trust a random app from hacker news with my passwords?
Sometimes not executing is the best plan. Taking the wrong action is best avoided altogether. But also, just doing it small can help. Don't buy all the trappings of success unless they matter.

I wrote all that having done wooden furniture as a sideline for a few years. There are many competitors doing this. Skills are a factor but there are plenty of people better than me, especially when I started. But I realised I wasn't actually competing with them. I was only competing against the inefficient / less experienced version of me.

Its kind of like reading other people's experience of running a coffee shop and they all had nightmare situations but you start small anyway and subsequently discover it wasn't that hard and you succeed anyway. Your execution of the idea is different. You bring different angles on everything so your results are different.

See how you go. Business is one of the strange things in life. It succeeds or fails in all sorts of ways. People are always wondering how or why but the full story isn’t usually linear or clear.
It's to install apps on a k8s cluster, not to install k8s.
Technically speaking, I have a residential address that I can get post delivered to; squatting is nice like that. Nobody knows I'm homeless, except everyone on HN now.
I've settled on Aegis.

It is open source and allows you to export secrets to an encrypted file which you can copy around.

A bit more tedious than Authy and similar cloud sync solutions but lower attack surface and less tedious to back up than Google Authenticator.

Available on F-droid. Beware of Aegis knock-offs on Google Play Store that use similar name.
There is an impact for some retail businesses. I tried shopping near market street for items that require a car to transport. I gave up trying to get through traffic, and instead did my shopping online. This is an acceptable trade off for me, and demonstrates how some retail businesses may need to adjust.
Dude, you have to blog about stories like these. It's amazing. Don't underestimate how interesting and fascinating your experience is!
Isn’t the point that the market hasn’t punished him? For five years?
Google the "daklozenloket" and the place name where you are. They should be able to help you. That is your priority number one, getting registered somewhere. The Netherlands has a good welfare system, make use of it.

Then start looking for jobs. Developer jobs are plenty. Ignore the 5 year experience requirements, in these times those are wishlists more than the actual requirements.

Considering you are British, are you allowed to work in the Netherlands?
Most of this rant is a disagreement of how Go handles file system differences between Unix and Windows, most of the rest is complaining about some badly written library.

May be good to know if you’re dealing with any of that, but this much effort would be much better served submitting a proposal to change whatever the author is so worked up about. Either the proposal is accepted, or the Go community will provide a response if the proposal is written with due consideration.
Along with that, I've not reliably been able to find fast unbuffered ECC ram either. I've seen some 2333MHz stuff but not in 16GB DIMMs and nothing faster actually for sale (I've seen 2400MHz advertised but not actually available). I've got 128GB of 2133MHz and it works fine but it'd be nice to be able to get the extra performance considering how much it matters for the Zen core cpus
I've had a few reports of that. Are you using Tor or something similarly exotic?
I actually associated a Yubikey to my account because I was so annoyed at this problem. I wanted a better backup plan than the physical printed codes idea. I didn't realize that a better 2FA app would have solved this :P
> the independence that a car would give them

If the car incentivises continued population of sparse suburbs, making them even more dependent on car travel, is it truly independence?
This.

It is a real problem that a lot of people fail to understand why this is an issue.
Hemolithin: A Meteoritic Protein Containing Iron and Lithium
Anyone who is trading with leverage. Think about it: the market is (or was) not, and interest rates are super low. You’d be an idiot to not think that more than a few people are going to try and take advantage of that.
replace toronto with Manhattan's lower east side, or brooklyn's williamsburg or sf's mission district, or all of oakland
The http client isn't always directly exposed. I agree with the author. Context is a per request object and timeout should be able to function on a per request basis. Client is often shared and reused, and thus not always exposed in certain design patterns. If context has a timeout why doesn't it work as you would expect?

Also, now that I think about it, why does the basic http.get call mentioned in every go networking tutorial not have a default timeout?
Ask HN: Stripe Bans Protonmail.com?
I have a protonmail.com email. Today I wanted to purchase something from a website that handles payments via Stripe. My purchases were declined. I contacted their support, and they responded that 'our payment provider is not accepting your email address'.

Is this a blanket ban from Stripe?
I suspect it's declined pretty significantly--in fact, because people wear fewer shoes that can be repaired and wear less tailored clothing. But of course there are still tailors and cobblers (who are often a good place to get backpacks and the like repaired) are still around. Many laundry places will do minor repairs as well.

In the anecdata department, the last time I took something into REI to be repaired they told me they didn't do that any longer and to send it to Rainy Pass in Seattle.
Wait. The vulnerability report says, "Abusing the Accessibility privileges, ..." the trojan can steal your OTPs. If you give a program accessibility privileges, it can read the screen. Is that all we're talking about here? What is the proposed mitigation that Google should implement on the app? You can't block accessibility on the OTP app because then blind people will not be able to use it.
Based on the title, I was expecting a post about some sort of production horror story or some difficult edge case upgrading to 1.14.
> For humans, maybe it's not.

Being a DM - or a player - can be very challenging indeed.
Yes. Works for me. There will be always Pros and Cons.

- need to save manually and specify directory/file name

This may be also a PRO for me since I may be able to find it without using recoll. Also, how many websites do you need to save? I assume only a tiny fraction. If you want to save everything, recoll does offer this more or less out of the box:

"Indexing visited WEB pages with the Recoll Firefox extension"

https://www.lesbonscomptes.com/recoll/faqsandhowtos/IndexWeb...

This is another stand alone software that may do what you are looking for.
https://getpolarized.io/2019/04/11/Polar-Initial-Crowdfundin...
I’m not the same person, but anecdotally I’ve been using an ancient printer for years. I’d like to think it’s quite secure. Only works via usb, no wifi or anything complex. The only way I could get it to work is in Linux where I assume the drivers or however it happens is open source. As far as I know the printer is as dumb as a rock.

Worst case, i doubt it would be that difficult to hand draw the qr codes on graph paper. Would be quite tedious, but they should be error correcting to some extent.
Rabbits in Australia
This seems like a lot of money in terms of personal finance. It's hard to imagine having $3,400,000,000,000 less money in your savings account.

But global nominal GDP was $80,934,771,028,340 in 2017 [0]. This is a pothole.

[0] https://www.worldometers.info/gdp/gdp-by-country/
In addition to being faster CPUs, these have much faster I/O buses.

The RPi 3 could only talk to its 1GBit card at ~300MBit. The 4 can max out 1GBit.

These have 2x10GBit in the CPU package.

Put another way, these can be a high performance NAS/router, and simultaneously run the equivalent of a few RPis in VMs. Previously, AMD built an APU without embedded video.

Hopefully they will continue to do so, and those will sell well into the embedded/appliance space.
So a language doesn't work correctly when it didn't give you a guarantee that it would? Big fuckin surprise!
Just roll natural 20s and you’ll be fine
Sure, people definitely do. They just consistently undervalue their time, is all.
Authoritarianism:

Characterized by or favoring absolute obedience to authority, as against individual freedom.

...which is entirely compatible with enforcement of high-pressure, in-group norms. Shunning is an authoritarian practice, even if it’s done by a collective. See also the Cultural Revolution in China.
Tech is a better meritocracy than other fields but is still a field with barriers. If you don't have a good resume, a CS degree, recommendations or particular open source contributions, you'll have a hard time getting any job.

I'm not sure if you tried being homeless for 1 or 2 days, but I can't imagine you'll be able to pass an interview if you slept in the church door last night and had nothing for dinner.

> Do whatever it takes to land a job.

That's what I'm suggesting and unless there is someone or some community that will bail you out for 3-4 months to get your affairs in order, you'll have to start from rock bottom.
Yes, the intersection is alive and well without traffic signals. That's my favorite intersection in Graz, the five-way intersection of Zinzendorfgasse, Halbärthgasse, Schubertstrasse, Leechgasse, and Beethovenstrasse. The Google Maps street view has a nice view of pedestrians, bikes, and cars sharing the intersection. Buses also use the intersection, but I couldn't find any in the Google Maps view.

https://www.google.com/maps/@47.0761111,15.4503833,3a,75y,31...

My second favorite intersection is on the left side of Erzherzog-Johann-Brücke, where pedestrians, bikes, trams, and cars intersect with only one traffic sign (northwards on Neutorgasse).

https://www.google.com/maps/@47.0710439,15.4355343,3a,75y,20...
Threadrippers are not really 'workstation' CPUs, they are HEDT CPUs. More Apples-to-Apples would be to compare to EPYC CPUs.
The QR code you scan is stored in app's db, you can use generic scanner to get the code and save it on paper or another encrypted DB or extract them from the Google Auth app SQL DB - if you have root access.
I agree. I wanted to point out the absurdity of the argument used in the article. The argument is that music is just numbers and numbers are not copyrightable. But any kind of information is "just numbers" which can be enumerated given enough time.
Such a refreshing article! Nice to know there are awesome people out there!
It's only a con in the context of your use case and requirements. It's not a con for everybody, so in the general case I would instead call it a limitation.

Every piece of software in the world has limitations. The limitations are only cons in the context of your requirements.
Is it a con of SQLite that it is missing features when using it with the JFFS2 filesystem? Maybe, depends on your use case. If your system doesn't use JFFS2, then it's not a con worth considering.
Yes. It's possible to do on the Acorn but few games at the time took the trouble to do so. It requires very accurate cycle counting. There have been a number of recent demos that take things to the next level though, and someone has even got raster interrupts working on the Electron, which is frankly astonishing: https://www.youtube.com/watch?v=PUl1SGUSkbI
I don't think parents in the US actually want their <16yo children to be that independent. drive themselves to/from school and sports? sure. be able to travel an arbitrarily long distance in a day? probably not.
Plenty of dry powder for VCs in Europe and Israel
Erm, the bucketting used in their maps also has the same problems the article discusses.
+1 to andOTP. It's on F-Droid and still gets semi-regular updates. It's a bit obnoxious that it requires a password, but that just means an autofill from my password manager for free at-rest encrypted storage.
I don't have much to contribute for lack of experience with the field, but I want you to specifically and deliberately renounce what you say in your last paragraphs. There is nothing WRONG with you. This is a tough situation, a lot of people of lesser caliber would've already crumbled, and you're GOING to solve it and move forward with your life and very likely with your career. Breathe. It sucks. It's okay that it sucks because it won't suck later.

You got this, friend.
This article isn't an advertisement for centralized 2FA. It is an argument that you should ditch Google Authenticator for a centralized 2FA app. Therefore the baseline is people who already have 2FA enabled.
This is kind of the point I was making with my question. Playing DnD is not about winning. Being a DM is not about reaching some sort of conclusion. So it's essentially impossible to make an AI good at this without achieving true general AI (not within our lifetime for sure)
What's your threat model? Security researchers or nation-state level adversaries might theoretically be able to tap your printer and parse it for things that look like codes, but if you're receiving that level of expert human attention then you're probably already compromised in one of 1000 other ways.
No they're class signifiers. In this context I think only Ransom counts as the "bad guy."
ALSA may not have changed, but programs variously have used ALSA, ESD, JACK, OSS, PulseAudio, and aRts. Depending on your hardware, some of these options have been variously unusable at points--too many developers assume that you have a hardware mixer, for example, which is true for standard PC audio output but not true for any pro interface I have ever used (even the dirt cheap ones). At various points, I ended up with audio that only worked with exclusive access. I tolerated it for a while but now I consider it a dealbreaker.

I'm 100% willing to pay Apple to make this problem go away for me. Core Audio is an amazing API.

For cannot export in standard formats--talking about MusicXML. Until a couple of years ago I also had problems listening to music on my Linux system; I think it was because of some patent licensing issue.
Can you provide sources? I’m curious. Borders are everywhere from lane marks on the roads to art frames. I tried searching for sources on Google with no luck.

> Unnecessary borders create visual complexity that increases the load on perception, which reduces cognition

That's difficult to believe in if you remove the word "unnecessary". Logical grouping of similar components in a UI using a border can only help group them. The framework for grid-based design was laid out by Josef Muller-Brockmann and heavily influenced the swiss/intl design language.

You now need to define what constitutes "unnecessary" :) otherwise its talking past each other.
it's a nice jobs program :)
PDFs are great. I can download it to my device, scroll, pinch, and zoom, and I don't have to wait for new pages to load and hope my network connection is good.

My use case for PDFs on phone are usually technical manuals.
Most of the arguments for long copyright terms apply to creative work by one or a few named individuals.

Perhaps a start would be to slash copyright terms on works created by businesses. Companies would try to game this but the problems don't seem insurmountable.
I tried calculating this number for 16-bit images in Python (8^8^16), and the interpreter just froze. Go was pretty quick though: 3.940200619639448e+115
The latest version of [andOTP](https://github.com/andOTP/andOTP/releases) indicates that it protects some of the fields from accessibility hijack. I suspect other apps will find a way to prevent this attack.

The problem I, the author, have is that it seems unlikely that Google can fix this. What are the risks associated with suddenly changing a codebase which is 2.5 years old? Is there anyone there who works on it day-to-day, understands how it works, and can release a verifiably fixed patch?

Security products need constant maintainance.
And interesting to include in a study like that how much people in each field actually understood about copyright law. My guess is the general level of understanding is pretty low.
For those who have not seen the previous HN threads this past year on 2FA, Aegis has emerged on Android which a number of folks (myself included) have migrated to using: https://github.com/beemdevelopment/Aegis (links to G-Play/F-Droid in readme) A backup (encrypted or plain) of your seeds can be exported/imported.
No one expects iOS to run on Windows. But given that there's a Windows version of Go, it's reasonable that it should work.

And also, the points about metadata and path management are spot on. It's 2020. Languages should not be assuming that paths are byte strings.

Unix-think is a bug, not a feature. A good language should abstract the file system, not just put a teeny tiny wrapper of modesty around it.
I'm sure there's real issues; but this reads as an extended whinge on "Windows and Unix are Different and languages wrap those differently whaaa!"

If you want OS interfaces that look the same wherever; then choose a portability layer that abstracts that for you.
Hydrogen stoves are in use in homes.

What stops fuel cells being practical?
The artist scene is constantly moving taking advantage of unsafe areas making them safe so they can be pushed out once word gets out this is an artist area.
Show HN: Volv – Read the world's latest stories in 9 seconds. No bias. No BS
Not exactly. Polar is r-theta. The system we used was an x-y system, but one where the coordinate system alignment changed for each track segment. So, think of a world where a straight line in y ["longitude"] was projected into a constant path relative to the centerline of the track's racing surface.

(While most NASCAR tracks are ovals and could be represented in polar coordinates fairly naturally, they do have some road courses and the physics and game engine originated in the IndyCar game, which has even more road courses.)
“Cannot remove this baby”
Clarity Design System 3.0
But MLIR is so limited in what it can do - a specific style of SSA, a specific module and procedure structure, etc. Even the features that make it general (regions) represent a specific choice of how to do it.

Great IRs represent an ideal fit between data structures, data flow style, control style, and the domain. Llvm is successful because it fits C so darn well - it’s like SSAified C. I’m not sure what MLIR is an ideal fit for. It just feels like another Phoenix.
Not everything supports Yubikey/FIDO U2F at this point, so that wouldn't work for everything, although I do have one. My Gmail account itself is behind a Yubikey (and a a backup Yubikey), not a 2FA app, because I'm trying to avoid a Game Over scenario. The Gmail address is the recovery address for my password manager account, so getting that pwned is basically the keys to the kingdom for every other account.
Oh, man. This is so good.
I think Jetbrains may qualify. They just produce excellent tools without much fanfare or PR. Developer express comes to mind too. 37 signals maybe.
The fact that malware can steal Google Authenticator TOTP seeds, means that non-malware apps on your phone—e.g. other TOTP apps—could also steal (i.e. import) these seeds, no?

I’d quite enjoy if e.g. 1Password would import all my Google Authenticator tokens into itself automatically. I’ve been meaning to move them over for a long while now, but it’s a whole process, since there’s no place in the Google Authenticator UI to retrieve the original seed value.
so... where are the places that are experiencing the other trend?

Where are the artists going to?

Where are the places that used to be rich, but are becoming "poor but sexy"?
Since we're apparently all sharing our 2fa methods I've really been liking the yubico authenticator. All the secrets are on the yubikey itself so if something dumb happens to my phone or computer I don't have to worry about them.

Plus, the same device does my FIDO2 / u2f / whatever it is this month for the services that support it.
Lyrics and melody? I think that's reasonable to consider that an infringement. Melody over a new chord progression? I do think that should be considered a new work, just to limit the scope of copyright. Even if it's clear you copied the melody, I think melody alone is insufficient to call a song. Unless the original song was entirely melody. A melody is using all the same musical building blocks as the chord progressions did, why does it get special treatment?
> You're supposed to keep offline backup keys. Any sort of synchronization feature adds a ton of attack surface.

I find that a terrible design decision, because now every website has to implement their own backup code flow. PayPal, for example, is one of the most critical applications when talking about authentication, and while they support 2FA they don't give you any backup codes at all: https://www.paypal-community.com/t5/My-Account/Backup-codes/...

Now I cannot synchronize devices, I'm hosed if I ever lose my phone, and I'm still relying on PayPal customer support to do a proper out-of-band authentication. The worst of both worlds.
In Rotterdam these people might help:
https://www.ontmoeting.org/locaties/
Or:
https://www.rotterdam.nl/wonen-leven/wijkteams/
or:
https://www.rotterdam.nl/locaties/centraal-onthaal-volwassen...