skysight-inc/HackerNews huggingface dataset:
This is a relevant issue but I haven't seen this discuss here so:

If you want to minimize or practically eliminate the Google account lock-out risk and also eliminate any hijacking risks, register multiple hardware security keys (FIDO keys), remove all phone-based 2nd factor or backup, and make sure your password is something you won't forget (it doesn't have to be very strong - as long as it's unique), and register for Google's Advanced Protection.

Because there is no known attack against hardware security keys, there has been no broad attack - which means heuristic-based defense is not necessary. The heuristic based defense is a necessary evil - it's the source of false positive lockouts, but necessary since otherwise credential stuffing attacks can't be controlled / reduced.

You want at least two security keys, preferably 3 (one with your primary device like laptop, one personally with you e.g. in your key ring, and one stored at home, preferably in a fire-proof safe - alternatively you can leave your security key at work if you're ok with that exposure). You really want redundancy - as much as you fear lock-out, you should never lose access to at least one of your security keys. If any of the security keys get stolen, you can immediately de-register and get a new one to replace it.

You want to get rid of SMS or phone-based 2nd factor, since phone hijacking is a realistic threat. You also don't want OTP as it's phishable, and is more difficult to maintain high availability (you lose one device you registered as OTP and you're doomed).
It is meritocratic, we don't technically have tech lead, but we do have seniority. However, the most senior engineer doesn't pretend/try to give the impression that he knows everything. Usually each person will have a portion of the project that he knows best and his opinions are the primary driver in that portion. Others give recommendations based on those opinion and not overriding them (normally).

There are larger issues in direction but for those I think all of our opinions are fairly similar - being engineers, we dislike complexity and like things maintainable and extendable.
There are scores of government services that aren't compulsory/universal though. I don't think that's a key differentiator. And there's plenty of things the government makes you do that they don't pay for, either.
"If you are not able to run a ./configure / make / make install & 3 apt-get properly."

Nearly choked on my water reading this. Incredible how many developers are stockholme syndrome'd by their godawful tooling experience.
The murder hornet is the 2020 B-plot you probably didn’t see coming
Canny.io doesn’t have a free tier for bootstrapping.
Efficient Search with Markov Chains
I’m sort of the opposite of the poster, as I look for mostly multiplayer games. This month alone you could have gotten Gears of War: Tactics and Half Life: Alyx which are strictly single player. I really thought Jedi Fallen Order had multiplayer, but that is also single player. Cyberpunk looks like another amazing single player game coming out this year.

It’s very easy to say ‘music is just not the same as the music back in the day’, which is never true. Just catch up, stop with the developer only MacBooks and get an powerful gaming laptop (similar prices for some odd reason even though the specs are better) or console, and you’ll at least now have a chance to dip your toes back in.
> Numpy

https://analyzethedatanotthedrivel.org/2018/03/31/numpy-anot... . https://news.ycombinator.com/item?id=16982086 .

> if other languages incorporated APL as a first class DSL, the same way they incorporated regex

April for Common Lisp et al? https://news.ycombinator.com/item?id=22225136
You are downvoted but I have this feeling as well.

When people bring up Animal Crossing as an example... I mean the game has one of the worst online system ever + basically 0 social functions. It's an OK sandbox game but I wouldn't call it as a social platform.

MMOs solved this problem years ago but instant gratification is the king now. Love me some FFXIV but I can see people why don't want to play a game where you have to invest hundreds of hours to reach anything. But for a lot of us that's the main appeal of it.
We are observing mutations, and there’s a number of preprints out there describing mutations along the spike protein. I’m not sure which of the 100 vaccine candidates would continue to work if that were the case, but perhaps it will become like the flu where we need a different vaccine per strain and that sometimes the vaccine only provides partial protection
People want to believe that this is not true, so they believe this is not true. But the chance of SARS-2 becoming more deadly over time is very real. Each mutation has a chance of producing a virus that is better adapted for infecting human cells. If that mutation wins out and infects more cells it increases the chance that adaptation of the virus will live on and infect another person. SARS-2 is adapting to humans as we speak and we have no idea what direction that will take in the short term. In the long term if SARS-2 becomes more deadly people will adapt by adhering more closely to self isolation and eventually SARS-2 will die out. But, there is no reason to believe that SARS-2 won't first become more deadly.
Sadly the year of Linux on the desktop has yet to arrive.

Last time I tried a Linux distro on my NUC6i7KYK wifi was going down every few minutes, despite upgrading to latest drivers and support for 200% magnification of the UI on my 4k monitor was pretty bad.
You’ll also see that cp, ls, expr, test, and others are still only considered semi-done.
Good point, now that I am searching for it I cannot seem to find the code. At the same time it still does not require custom manufactured parts or circuit boards which makes the barrier to entry (and importantly price) a bit lower unless the Stanford folks setup a store.

I make an internet promise here and now that if I ever build the robot I'll open source the source code to control it.
You can also send your friends a screenshot of your QR code. That's worked for me in the past.
> Nearly choked on my water reading this. Incredible how many developers are stockholme syndrome'd by their godawful tooling experience.

I tend to name a "magic bulshit bloat tool" that will makes me download 350MB of crap to compile an 'hello world' a "godawful tooling experience".

We are all free to have our own definition.
Wow... As oldie C++ devs will admit, I expected a template mess.
Got excited for a while until I've noticed that this office is free as in free beer, not free as in freedom.
Sounds like the plot of "Halt and Catch Fire"

https://en.wikipedia.org/wiki/Halt_and_Catch_Fire_(TV_series...
> A weakness of these types of SQL questions however is that it's near impossible for the interviewer to provide help/guidance

I've given SQL interview questions quite a few times and like to present a sample dataset or schema, and state a problem statement or expected result. Then I collaborate with the candidate to come up with assumptions, and I give gentle guidance if they are stuck or going down the wrong path.

I'm always up-front with the candidate about not looking for perfect syntax, and I am more interested in their problem solving
and collaboration skills than the actual SQL they write.

People who ask ask questions about the data and schema usually do much better than those who jump right into the solution. Just like in the real world where really nice SQL or code doesn't matter if it solves the wrong problem.
Impressed to see four posts about Rust on the front page of HN simultaneously.
The use of cargo implies this no more than the use of make. One can fetch all dependencies and then build in a completely offline manner.
Visual and radar confirmations of what, though? A balloon is a physical object that you can see in visible and radio light.

The data seem to show a slow-moving object at a higher altitude. I'd trust the actual data over nebulous claims of an object appearing to be moving fast. It's hard and unreliable to judge an object by eye, and easy to fall prey to optical illusions.
Public safety of innocent third-parties trumps the right of individuals to organize.

Were the disease only to sicken those who congregated and not spread from them, I would have very little objection to allowing them to do so.
You can tell me that other build tools have problems, but the "You must know how to run some os/project-specific commands to write a program or you're a bad developer" is the funniest kind of gatekeeping to me.

But keep calling people "script kiddies" that's cool.
>just because social by itself doesn't drive retention and acquisition enough: you need something else for players to do to have fun while they're also having fun socializing.

that's also why people like to drink, or do anything else while being social :)

I think we have not even mastered being social AFK without playing a game!

AFK = away from keyboard, i prefer that over IRL (in real life) since being at the computer is still real life
“Gaslighting the Coronavirus”
>What people are saying is that 1) these lockdown measures aren't effective and 2) the side effects caused by keeping everyone under house arrest do more harm than the virus.

The parent poster quoted someone saying "this isn't unusual".

>Hospitals aren't anywhere near capacity, in fact in most places they're having to lay off medical workers and close down sections of hospitals because they can't afford to keep their doors open.

That is because of the lockdowns.

>If you want to keep spreading nonsense, then please do because I respect your right to do so, but I implore you (and others) to take a good hard look at the facts and try to understand what's really going on.

Same to you.
> It might take you like 20 years to get somewhere interesting.

Perhaps it did, but they started 25 years ago.

(Much like the bit, "staying closed-source set back clones by weeks or months... years ago".)
How is it 1-bit? Each pixel can be one of 16 different shades of grey. That's 4-bit, isn't it?
Have you actually tried installing Linux on a computer recently, or just read discussions? If you've actually tried it and ran into issues that required you to compile your own drivers, either you're using a user-hostile (users != programmers) distro like Arch or you might have just gotten unlucky. None of the computers I've used with Linux over the past nine years have had more than two small issues (all of which I was able to fix within a few days), and two of my boxes had no issues at all. Hardware support in Linux is so much better than it was two decades ago.
I don't think the position of the language teams is that static linking is better than dynamic linking. I think that static linking is a significantly easier target for a relatively new language whose _novel_ features make it difficult to define a stable ABI.

Under the very specific constraints that Rust is operating in, static linking is currently the best option.

That said, I wouldn't mind seeing some kind of ABI guarantees that make dynamic linking possible. https://gankra.github.io/blah/swift-abi/ is a great, accessible read on some of the challenges of making a stable ABI, so I certainly don't expect it SOON.

I do wonder if there is some scheme that could be adopted in a performant way for making the ABI stable as of the Rust Edition, even if it were only for core and std, statically linking everything else?
I mentioned the Onion Model above, I saw your comment about Clean Architecture, which is a refinement of the Onion Model.

I think we might already have all the architectural solutions we need, we just haven't put together how to express the architectures we want in the new technologies we have.

Some combination of the onion model/clean architecture, CQRS, APIs, data federation like GraphQL and microservices is probably how it can all go together. I know I am mixing implementations and patterns together in this sentence, but am just trying to express patterns and examples of things that have pieces of those patterns implemented.
8 days left until next Bitcoin Halving (video explanation)
This is beautiful and also a bit depressing.
I tried this on a spare time project[1]. Runtime in a quick test went down from 14.5 to 12.2 secs on macOS!

So a solid ~15% by changing the allocator to jemalloc.

However, I now have a segfault w/o a stack trace when the data gets written at the end of the process.

Possibly something fishy in some `unsafe{}` code of a dependent crate of mine that the different allocator exposed. :]

Still – no stack trace at all is very strange in Rust when one runs a debug build with RUST_BACKTRACE=full.

[1] https://github.com/virtualritz/rust-diffusion-limited-aggreg...
Teachers should not be paying full price at Harvard (I don't know if Havard even offers a teaching degree), there is value in a teaching degree but only enough for the much cheaper state schools.

I have no problem with people wanting to be artists. The world needs art. However I have a problem with someone spending more than they can afford on anything. Want an art degree, first get a job and save up as art will never pay the bills (there are exceptions that prove this rule). Once you can afford to live (that is eat and a tiny home: the minimums) go ahead and get whatever luxury you can afford. Some get an art degree, some a nice car, some collect stamps, you can have a family. I don't care much what you choose so long as you are not beyond your means.
https://en.wikipedia.org/wiki/Supercontinent_cycle
https://news.ycombinator.com/item?id=23057159

https://news.ycombinator.com/item?id=22826773
As a Rookie: Go without any frameworks. Also very curious about Phoenix/Elixir

As a pro: Laravel/PHP.
It seems they forgot Second Life... I'm still trying.
Not only research, but a lot of diagnostic companies are trying to take advantage of the gold rush:

Theranos Would Be Thriving in the Covid-19 Pandemic

https://elemental.medium.com/theranos-would-be-thriving-in-t...
Not a bad attempt at all, but it doesn't showcase how expressive things could be. What would be really cool (and arguably Pythonic) could would be to use Python's operator overloading to what these abstract entities would look like, in the same way that the the builtin `set` is used.
You can even automate that, for up to 100 total years of domain ownership, if you are willing to deal with Network Solutions.

They offer terms of 20 years and 100 years, which are longer than the standard maximum 10 years. The way it is implemented is that they register the domain for you for the maximum allowed time (10 years for most TLDs), and then each year the extend it by a year keeping the expiration as far out as allowed for that TLD.

I looked at this a while ago, when contemplating moving my domain in .net from there to Namecheap (where I already had a .us domain), because they gave a big enough discount on 100 years that it brought the price per year to $9.99, which is pretty good for a .net.

Then I realized that even if I lived long enough to become the oldest living human I'd still only get about halfway through the 100 years making the cost per year effectively $20, which is a crappy price for .net.

Now it is even worse. They have doubled the price for 100 years, making it a crappy deal. Even if annual .net renewal went up 10% a year, it would take 29 years before you would have been better off going with 100 year NS over year to year Namecheap. (They NS 20 year plan would be better off after 16 years).

At 5% annual increase, NS 20 is about the same cost as Namecheap, and NS 100 beats Namecheap after 44 years.

(This is all assuming that in the Namecheap case the money that would have been spent upgrade on NS 20 or NS 100 is just sitting around. If you assume it is invested in some safe long term investment, NS 100 and to a lesser extent NS 20 makes even less sense. Also there is the risk that at some point NS will no longer be around and their demise happens in a way that kills these long term registration programs).
Interesting read and raises one big issue:

We need to make memory safe languages accessible and with that, the tools and other frameworks for a new language isn't an easy path.

Which gets to an aspect in many walks of life - if you are doing something from scratch - you can use the latest knowledge and enforce that, but knowledge moves on and bringing up the rest of the system inline with a what is needed to use that new language/knowledge is not an overnight task, it's a slow process - and even if you provide something better, you can not guarantee it will be embraced at a needed pace to keep the momentum going.

Much like anything in life, you have better trains than you did when they was invented, but legacy infrastructure precludes an instant/overnight switch, due to impact upon what is used currently.

So case of, requirements for something better like rust support, is a bit of a catch-22 as you need it there to get the people to use it so tools get written, but to get it there you kinda need the tools so that people use it to write the tools. Hence the first step is always the biggest.

Which makes you wonder how intertwined aspects of the OS and programs are, even with standards like POSIX, there is clearly a bigger larger standard needed.

This along with the dependances and you can see why docker and other application level virtualization has much going for it.
There are more games than ever. The only thing that has changed is that discoverability got worse. Finding experiences tailored to your own preferences has always been a difficult problem.
Yes but if he had an iota of social intelligence he would say "it is an interesting project but it is not nearly ready for inclusion in OpenBSD for reasons X, Y, and Z."

Instead he personally attacks people.
I went from Laravel (PHP) to Symfony (PHP) to Flask (Python), and Django (Python). Django feels the best to build medium-big stuff quickly, but all of the ones mentioned above are decent. Frontend-wise Angular feels too bloated, Vue.js 2 is nice (waiting for v3), but looking into Svelte and feeling excited about it.

CSS I'm comfortable with Bootstrap and Bulma, but want to look into Tailwind for future projects.
The developer is aware and they're going to make it so the project doesn't depend on localStorage being available to run the project: https://twitter.com/_morphous/status/1256465513611436034

In the meantime, you'll have to grant access
I turned the Game Of Life into a way to generate music to celebrate John Conway
> In the corporate world, to resolve this problem, you usually have to go up the management chain and emphasize to leadership that certain people are making important work impossible. In the FOSS world, you just have to fork.

Typical Machiavellian talker who overestimates his own abilities, derails a working project and moves on to the next company after two years to continue the damage there.
make another one?
To add my top 3 single player games of the last 5 years:

- Stardew Valley

- The Witness

- Untitled Goose Game
the simple gaits are usually PIDs that integrate requested control directions and gyro data, bounded by maximum servo speed.

here's an informative youtube video that's all about quadrupedal dog-style robots.[0]

fancier gaits integrate elements that measure leg length and foot pressures.

[0]: https://www.youtube.com/watch?v=4MGZvcd0xxc
Releases use the git tag system so you might lose the release notes or build artifacts but you at least can rebuild
I've never gotten an ad for anything in iOS, but I also do not use iCloud or Apple Music or Apple TV. At least the ads seem to be contained within their own apps, then.
I came across this project while working on my newsletter and thought HN might appreciate this. With the $500-600 price I'm heavily thinking of building one for myself.

If someone would like to build something larger then Stanford Dogg (https://github.com/Nate711/StanfordDoggoProject) is one choice, however as far as I remember the price comes to around $3k for parts only.

Even cheaper alternative to Pupper could be OpenCat (https://www.petoi.com/) however it was never fully open source and I don't think it's available anywhere.
Were Elon Musk’s Tweets Illegal? An Investigation
Addictiveness and monetisation don’t remove the social and human benefits from the games.

Factorio is crazy addictive if you let hyperfocus on optimisation take over your play time. Buying cosmetics doesnt kill social dynamics.

The opportunity to abuse gambling mechanics is drying up quickly fortunately.
Ask HN: If the QA tools didn't find any bugs, is the tool bad or the code good?
What is a good success criteria for a QA team/tool in such a case? Can simple criteria's like number of bugs lead us to a wrong path?
He might just be wrong: https://github.com/uutils/coreutils

The only reason he might still be right is if they don't aim to be POSIX-compliant. The page doesn't explicitly call out compliance as a goal, but given that it has some busybox tests, it's probably compliant or very close.
Do not care. Anything vital I host myself on premises and on rented standby servers
Even just on the surface, linux interfaces are nowhere close to the refinement of the windows 7 UI.
> But you can use a custom allocator in Rust: https://doc.rust-lang.org/1.9.0/book/custom-allocators.html

That is true — and was demonstrated by the article as its "fix" was to use jemalloc, but even a custom allocator will usually be less performant than a high-performance GC there, because the GC's allocator has more insight into the requirements and workloads.

It might be possible to give that insight to a custom allocator by using the allocator's custom APIs, but this requires a deeper integration between the program and the allocator.
> Must be able and willing to obtain a Top Secret security clearance.

I've had a confidential security clearance for years because of my job working on government military applications. I remember the process being insanely rigorous. I wonder how much longer it would take to get a Top Secret clearance?
Dynamic linking is pretty common in GUI applications (xlib, GTK/QT). Server-side there's also libssl, xml libraries, zlib, curl.
(replying where I have something semi-intelligent to add.)

> Thunderbird is the least worst option (in our opinions :).

I use TB when I use macOS. TB does weird thing to plain-text email formatting, though. E.g. it sometimes refuses to let me delete lines that contain "> ", and it sometimes freaks out when I try to insert al line break in a section of quoted text. (I reply inline, like a civilized emailer.)

> I tried Evolution for a week, about a month ago, and have used KMail and Thunderbird a lot.

I’ve used all three for years. KMail would be my preferred option if it was way more stable and less buggy. It has great features and I feel at home in it. But it works way less reliably than Evolution.

The version of KMail shipping on Flathub doesn’t even start. —and that’s when it’s running in a sandboxed environment that’s identical on everyone’s systems!

> There's also a 'send later' add-on available.

I know. https://www.ctrl.blog/entry/kmail-cve-2017-9604-openpgp.html On a related note, I couldn’t login to my IMAP account with KMail maybe ten years ago. My password back then contained an apostrophe. KMail didn’t encode it properly and would crash every time it tried to submit the password to the server. The bug also made it impossible to overwrite the saved password with a new one from the UI.

> Actually, after seeing your article's screenshot of Evolution with KDE titlebars.

The screenshot is manipulated, see disclaimer at the bottom of the article. It’s indeed running under Plasma, though.
Each of those "greys" are actually dithered 1-bit patterns
I’m just wondering why they have a billion to spend on this. Clearly they can walk and chew gum at the same time, yet being so under fire directionally makes me think they should be more focused on getting their core business right instead of chasing extremely expensive pipe dreams. Those side distractions almost always get cut at Intel...