skysight-inc/HackerNews huggingface dataset:
> Yes. For example, if a rainbow table contains a match for "a" repeating 500 times, then that password's entropy is a non-factor.

This muddle reflects your overall intuitive mistake.

When you roll two fair dice the "snake eyes" (two ones) outcome has only one chance in thirty six. But if you've just rolled snake eyes, the probabily it was snake eyes isn't one in thirty six it's 1.0 exactly. We do not say, as a result, that you were "certain" to roll snake eyes, you weren't, but it has happened anyway and so now it won't change. Entropy is not a measure of what did happen it's a measure of the unknown. Password generation entropy doesn't result in passwords which change constantly, it just means you can't know what the password might be within that parameter.

Constructing a rainbow table where the choice function just cycles through some number of arbitrary guesses - and then saying if those guesses are right the rainbow worked, therefore rainbow tables were a success skips the step where it's overwhelmingly likely that none match, it fails and was a total waste of resources. Nobody actually does this because it's pointless.

When we tell humans to pick randomly they behave like you, and your algorithm - trying so hard to pick a "non-obvious" answer and thus inadvertently they're predictable. Your algorithm is, as a result, needlessly predictable compared to sane "random password" code and yet also significantly more complicated.

Look at the number line. See the first number you think isn't interesting? Well the fact it's the first non-interesting number is pretty interesting, isn't it? So now maybe that's not the first one that isn't interesting after all. Next one, same argument. Likewise your removal of "common patterns" just means the set of possible passwords is made smaller, and leaves remaining passwords with the "common pattern" of not having those "common patterns". It's futile, stop it.

If you want to put your intuition about what "random" ought to be like, put it into a playlist shuffle codebase or something, where humans will appreciate how properly "random" it feels to always get a nice mix of things. In security software this is a mistake, no matter how sure you are that it's common sense to do it your way.
I'd go with 5. Write one of each letter, and assign them to the submarines in a double-blind manner, so that no one knows what will happen.

The point of terrorism is to terrify, as they say.
Is there a psychological measure of internal bias? Hire decision makers that score low on that?
I think a big part of the problem here is the cultural adaption. There's the covid microcosm, and the multi-decade macrocosm. We still don't fully know how remote work should work.

That said, the various grades of "enterprise need" and patchy interoperability on stuff like texting & calling is kind of a travesty.
You don't need to go to third parties to obtain such surveillance software, microsoft has several solutions for this as well. Actually many large companies that are running windows are also using windows defender advanced threat protection (atp), not just b/c it's easy to deploy, but also b/c it isn't very noticeable by users.

It's questionable how much such tools actually improves security, most of it appears to be a power grab by someone in charge of security, usually there's no transparency, and even C*Os aren't aware of how much they are snooped on. For example (as atp does), recording of all commands including arguments, stored in a searchable database. Who does this benefit the most?
Seems like a lot of work went into this and there are very smart people behind it. However, I can’t help the feeling that this will lead to so many unintentional data leaks.

Nevertheless, starred. Let’s see what does it give.
css was designed for that exact use case. your user styles can override the developer's (and the browser's) styles on a per-site basis.

so what the parent wishes for is what you should be wishing for too (that is, to be able to style all form controls).
The download page is for the monthly generated install isos, during the install process it will sync with repos and install the latest version
Hell, I used to get blocked just for opening 8 papers in new tabs. Getting blocked after a 100 paper bender is pretty good luck!
Right, but on macOS, checkboxes often apply immediately. Just look through System Preferences, which largely doesn't even have a "save" action: checkboxes have take effect instantaneously. (So do many radio buttons…)
Hackers Are Targeting Other Hackers
HN commenters didn't require cookie warnings: the EU & California governments did.

Somewhat ironic for someone taking so much care to maintain an anonymous 'thoraway' account to give so little weight to other users' desire for robust privacy, that doesn't collapse via confusing docs/interfaces & transient accidents.
I've been holding out on replacing my XPS 13 with a Thinkpad T series with a Zen 2 processor. I recently bought my wife one and I love the ergonomics of the 14" way better than the 13".

Probably my favorite laptop I've ever tried.
Shocking 2020 Prophecy About Bishop Adeboye,Oyedepo, Kumuyi by Apostle Okikijesu
It's amusing you mention this. I just used the rump implementation of fat filesystem (rump_msdos) to mount a fat floppy on netbsd on an Amiga with a kernel where I didn't build msdos support in.
> Games are traditionally single threaded and hard to parallelize.

That's some dinosaur games from the past. Modern games are using all available CPU cores with something like Vulkan and saturate GPU fully. So Intel CPUs are left in the dust with all the cores you get from high end Ryzens.
There are lots of children still going to school, and there's no simple way for them to obtain books that previously would have been available for free. It is sort of a reading emergency!

Now where I live the library system is awesome, and I found the selection was way better than Barnes & Noble.

Libraries purchase a lot of books every year and it's no small amount of money. That being said it's also wasteful for many people to buy a book only to read it once. So we need to put more thought into how we can do this so we aren't so wasteful.
There is no such plan by the government. The project of collecting the data hasn't been approved yet. The researcher was suggesting a certificate, that's not part of the project though.
(In German he talked about a kind of "Impfpass" = https://en.wikipedia.org/wiki/Carte_Jaune)
That has not been confirmed. There is nothing official on the T14 on the Lenovo site yet except from the press release.

https://www.lenovo.com/us/en/commercial-notebook/thinkpad/th... (and yes that's the right url, try replacing "thinkpad-t14-series" with "x" you will be redirected there)
Fun fact, there is a service called Console Classix that does this with classic game ROMs (NES, SNES etc). The cartridges sit around on shelves, then if you play a game they basically reserve that copy for you, which they say clears them of any copyright issues. It sounds sketchy but they've been in business renting ROMs for over 10 years and they're still around.
VC's don't mind losing money if they can control when they lose it. They can use losses (selling shares back for $1) during the same year that they have big gains (maybe they won big on Uber that year) and they can offset capital gains taxes which will sometimes justify a loss they took on another investment.

In the case of the Gumroad guy, this is exactly what he did/ He basically let VCs choose when they took their losses once they realized Gumroad wasn't going to be the next Facebook. They used the losses to offset some huge wins they got on other investments. The VC walks away happy because he exchanged otherwise useless stock to increase his returns on something else he sold that he did really good on. The owner of Gumroad walks away happy because he gets his company back. Win-win for everyone.
In the example directory, it looks like you could compile a binary that takes a text file of ape code as a command line argument and interprets it. Sounds just like how something like python works. You could have this interpreter running on an embedded processor that could take in new ape code via serial or from a textfile on removable media or even from some sort of OTA update if you want to get fancy. It's much easier to have a small bootstrap/interpreter running on a chip that can load up new code than having to flash new firmware every time.
I don't know what it's like in Northern Europe, but in Italy the motives can be more trivial than you'd expect.

In at least one case we know of, about 20 years ago, a local gangster had some beef with a bishop, so he got his men to break into the main church and steal a prized artwork. The painting was never found (afaik); the boss was later imprisoned for other reasons and basically admitted to his role in the heist, but can't remember what eventually happened to the artwork.

In another case, which was reported pretty recently, a long-stolen painting was found in a small hole in the external wall of the actual building it was stolen from. Motives were never explained by the suspected thief, and the theft happened so long ago that the statute of limitations impedes a prosecution anyway. The theory is just that "opportunity makes man a thief", as they say there: this guy might have seen an opening in the security procedures and might have gone for it, without really thinking about (or underestimating) subsequent steps; eventually he simply returned it (there is no chance that the painting could have survived for years in that hole with nay a scratch, clearly it was placed there very recently) once he knew he couldn't be punished for it.
Thank you!

That makes perfect sense, actually: no sense crippling install the .iso with (potentially) unstable program versions, to stymie the install process.
> I often wonder what Hillis and Steele would say about the topic..and whether they abandoned the idea because it wasn't tactically effective or whether it was just intractable.

You should email them and report back.
the new ryzens compile gcc things faster, even on one thread. and you get more cores per dollar all the way up
Failure Taught Me How to Code
I don't think what the GP is describing would restrict anyone from innovating in the UI space. What we need is a standard API for framework+component life cycles, tracing - i.e. a currentComponent api for tracking the relationship between JS scopes and DOM elements, and context/slot apis powerful enough to bridge between the parent-child semantics in React/Vue/etc and more complex implementations like Svelte's slots. A better abstraction between browsers and OS accessibility layers also wouldn't hurt.

Think aria attributes, window.requestAnimationFrame, source maps, and the JS debugger statement - not UI frameworks or new standard HTML elements.
If you have a decent CFO, all that would probably be single-digit percentage of salary costs, and you'd know what digit it is. It's not rocket surgery to know all these costs. If you don't, get a decent CFO :)

Premium office space OTOH can really hurt. I am still wondering why so many companies suffer SF office space prices only for their workers to commute into SF because they can't afford SF living costs either. Maybe stop hurting each other and just relocate within 20-30 miles where it's less insane (though still quite insane by non-SV standards...)?
That's a bit outdated. Yes, the fastest cpu for games is still an Intel cpu, the i9-9900K. But the distance is not big. The 3950X is very close, the more reasonable AMD cpus - Ryzen 7 3700X and Ryzen 5 3600 - are also close. I collect benchmarks, comparison here [0]. When the next Ryzen generation arrives on the desktop even that small top spot for Intel will likely end.

It's not only that the turbo boost of those Ryzen cpus is high and at the same clock Intel does not have a lead anymore. It's also that recent games are already pretty parallelized. There is no need to wait for the next console generation to see that effect.

Btw, the 3800X is not a good pick. It is just a minimally higher clocked 3700X. If you want 8 cores, get the 3700X, the higher price of the 3800X is just a waste of your money. But for gaming you want to stick to a Ryzen 5 3600.

[0]: https://www.pc-kombo.com/us/benchmark/games/cpu/compare?ids[...
> I doubt they considered the need to be remote friendly as a contingency plan in case of a disaster

I seriously doubt they didn't consider it.

People don't seem to realise - global pandemic was already at the top of many national risk assessments. Nobody working in national or corporate risk or disaster management didn't already know it was the single biggest risk.
> While remote is certainly not just there for the asking

Maybe it could just be there for the asking. :)
Fed Forecast for Q2: 32% Unemployment
PC World is still a going concern?
> Most employees aren’t accustomed to holding meetings with colleagues via videoconference

That was not my experience at all. Apple was so large that even in Cupertino it was more common than not to have at least one person, if not a whole team, in a meeting from a different location. Not to mention rainy days and flexible schedules because of the commute made it so videoconferencing was needed for almost every meeting I attended.
Our CEO very much pushed the same: first and foremost look after your family. Don't stress over making paid time off numbers work out properly.

He's possibly the best CEO I've ever seen operate. And even when I'm in the office only once a year, he still knows who I am and wants to get dinner with me and the others.

I consider his existence a significant part of my compensation package when I run the numbers.
Thats not true at all, companies are in no way obligated to pay dividends
It would be neat for AB testing if you could make a one line code change and get a whole new style.

This project could just make a positioning component that's a parent to it's different child components and then also way to catch and translate all it's events to it's consumers.

It wouldn't be so bad if you just had to write a thin shim layer to do this for each new component framework you tried out.
Yeah, I overemphasized that point which I didn't even mean to originally honestly. See below.
> If you have enough money to finance an art heist or buy a priceless Van Gogh from a "dealer", you probably have enough money to not go to jail over an art theft. The collector pays a replica price on paper but in reality pays much more to the dealer. If caught, you just say you thought it was a replica, the dealer says they thought it was a replica, their dealer says the same, and so on until no one ends up with any jail time.

But that story just beggars belief. Sure it's a story, but one that makes no sense at all unless you're willing to entertain the ludicrous premise that someone would steal painting just to sell it as a cheaper replica. Furthermore, a professional art dealer could probably be expected to be able to tell the difference between a replica and a genuine painting. Otherwise, who would buy genuine paintings from him?

I think a prosecutor would be able to quickly identify an individual in the chain of custody who clearly should have known the painting was stolen, and is thus be guilty of receiving stolen property:

https://www.criminaldefenselawyer.com/crime-penalties/federa...
In this case, it's not about backups. It's about extending the notion of a "library" to Internet. The publisher still gets all of the usual money that they'd get from selling a book, and the library gets to lend it out subject to the same constraints they'd have on lending out a physical book. They "lend" one digital copy per physical copy.

That's still not entirely in keeping with the limited domain that libraries used to have, where lending out a book came with a physical cost of getting it to the patron. But it's close enough for reasonable opinions to differ.

So it's about preserving the structure by which book people (not just authors, but editors, publicists, publishers, layout, cover artists, etc) get paid.
Cuba is probably the best example. Despite decades under illegal embargo and starting off with extreme poverty and inequality, the material condition of the people has drastically improved. The people actually own most of the means of production and distribution through a different and more direct form of democracy.

Beyond that, Cuba is the only environmentally sustainable country and exports medical care to the rest of the world.
Estimation of SARS-CoV-2 mortality: a modelling study in Hubei and Italy
I didn't say this is an American thing is. I said that American culture is the "default" culture of tech, and that's a problem. There are very many names of projects, open source or otherwise that are problematic in one specific culture, and that's almost never seen as an issue (rightfully)
I feel like this applies to "influencers"
> It might be a good idea to settle on some "global" definitions and components, but that hasn't happened before,

But it has. We all know what buttons, dropdowns, forms, windows, text boxes, etc. are. Windows and macOS gave us these concepts and the Web adopted them.
This is a dishonest review. The numbers are fine but the article surrounding it is dishonest. He is often repeating claims on weight but he compares 2070 (115W) and 2080 (150W) GPU laptops to a 2060 Max Q (65W) laptop. Mind you, there are no other 2060 Max Q laptops yet but there are 2060 laptops, that would've been much closer.
So - what are they going to pay? There was a big hoo-hah when Gilead priced their Hep C cure at 100 kUSD - a steep price tag but still less than a liver transplant. Are they really going to offer plasma donors tens of thousands per plasma donation because the alternative - a patient taking up more time in intensive care would be even more costly?
if you open iOS settings, you'll see them all over the place. They are not a usability disaster and any shortcoming in articulating intent should be attributed to the designer themselves. Switches can also be used when the binary state is not on/off and you don't want to imply a default state necessarily such as dark/light theme switches.
What's the refrain people always throw up when you try to talk about this?

"Don't generalize, it depends on the team!"

As if that's any excuse. The bad teams get staffed too, not just the good ones. Reorgs happen, managers come and go... even if you get lucky at first, you might not stay lucky.
Sefton Delmer, who was behind that, went much further. Listen to this old BBC radio show about it. [1] Start at 30:55 for the intrusion operation. They did replace German radio stations in-place as they shut down due to air raid warnings.

[1] https://ia800108.us.archive.org/9/items/OperationAspidistra/...
Can we shame the IEEE and their Computer Society into doing the same?
> Games are traditionally single threaded and hard to parallelize.

On my 3900X I've seen even single player action titles utilize 16+ threads with overall CPU utilization reaching peaks of 80-90 %.

Yes, it maybe be hard to parallelize game engines, but all major ones heavily use multiple cores. A bunch of years ago (4-5) people would recommend an i3-K dual core for gaming, because you could overclock it to 5+ GHz on air. That was sufficient for many titles back then. (And these i3s would sometimes give you higher FPS compared to the more expensive quad-core options). But a CPU like that is far too weak for newer titles.

> You still can't beat intel at the high end. Both in terms of heat and performance. If you have a task that doesn't parallelize well, you can't beat intel.

In terms of heat, that is, performance per Watt, Intel's high end is quite a bit worse than AMD's. It is true however that you can get slightly higher single-threaded performance out of Intel's highest-end CPUs, but not because they are more efficient (- AMD is better both perf/W and IPC-wise), but just by raw, unadulterated clock speed, pushing them to 5+ GHz. And that causes them to burn a lot of power.

Zen 2 has consistently ~10-15 % higher performance clock-for-clock compared to Intel's best while achieving approximately 60-80 % higher perf/W.

This LTT review captures the massive advantage Zen 2 has in efficiency: https://www.youtube.com/watch?v=ZYqG31V4qtA
Probably not at all related to the OP. But I found the thought entertaining, so offering it as such.

One way to address you concern would be to guarantee that task always terminate in a bounded amount of instructions.

One way to solve that would be offer a limited buffer in which the program instructions for the task might be expressed, and a language to express them in that is strongly normalizing (think something like Morte)
Yep, that's why I said 'traditional', this has drifted a fair bit because there's a benefit to providing immediate feedback, especially if the action is some visual and reversible change like turning on dark mode. Windows ribbons are also full of such radio buttons and checkboxes.
Oh dear. All this because someone asked you to use the correct pronoun or something?

Nobody's arguing against real change, but I stand by my point: the people complaining about "political correctness" are usually thin-skinned.
re point 1: I've never worked at Apple and have no idea where the 'fun' projects live, but at Google it's often said that you need to be willing to move to Mountain View for the good stuff / for career progression.
Same with fonts, and colors, and text size, and scroll behavior, and on and on. Back when dinosaurs roamed the earth, web sites published hyperTEXT and the user agent (browser) operating on behalf of the user, rendered the page according to the user's preferences. I remember how cool it was to configure it so every web site rendered in white text over a brick wall background! Slowly browsers added HTML tag after tag and CSS to give more and more layout and visual control over to the web site publisher and less to the user. Today, stylistic user preferences are a relic of the past, as browsers have given everything away to the publisher.

I agree it's wishful thinking. Sadly, web publishers have gotten used to all this control and expect the browser to be some kind of pixel-perfect renderer like Photoshop, and there's no push from end users to have this kind of user configurability anymore.
> You still can't beat intel at the high end. Both in terms of heat and performance.

This sentiment is almost a year out of date. Since Zen 2 launched, Intel has a measurable disadvantage in IPC. Intel's single-thread performance is only partially won back with higher clock speeds at the expense of far greater power usage.
How a differential gear works (1937)
$50k/year looks like a lot, but imagine you lose an equivalent of just one person out of 150 for not having it - e.g. in people leaving and not being immediately replaced, training costs, time costs of going into a corner coffee-shop to get some joe and returning 1.5 hours later, costs of not being able to hire top people because they like to be provided coffee, etc., etc. You'll see very quickly how it is not a wasted money at all.
Covid-19 VC Investor Status
> Please don't take HN threads into nationalistic flamewar.

Dang, question: how is this nationalistic? It seems to me the opposite - it's pointing out the media, Reddit, and this site's blatant (IMO sinophobic) double standard.
I don't believe that claiming a group on average exhibits more of a characteristic is a generalization. And I don't think nationalism is when someone talks about average characteristics of the population of a nation.

EDIT: I forgot to add, I don't really think that a community with 50% of it's citizens being in one country is highly international.
Will these features be available in gitlab.com for free users as well?