skysight-inc/HackerNews huggingface dataset:
>Firstly, the salt should be changed per user, one of the reasons for salting is that given a large enough user base, a lot of users will choose the same password,

This is only an issue if the hash can be reversed. The entire raison d'etre for salts is to prevent hash reversal via precomputed tables.

>There's essentially rainbow tables computed for "123456"+RandomSalt iterating over salts

Rainbow tables are already enormous-- in the hundreds of GB range for 9+ character passwords. Iterating over the range of possible salts makes the storage requirements untenable.

As long as you choose an unlikely or unique salt which could simply be your site's FQDN or its MD5 hash, this isn't an issue. No one is going to have a rainbow table for md5(yourFQDN.com) as salt.

>which means that you'll have to use HTTPS underneath all of this

You should but it is not necessary for secure password transmission. This is a solved problem for decades now.

>Once you are doing all of this over a HTTPS connection, there's simply no point in doing it, you are just increasing the attack surface for no substantial gain in security.

Layered security is a thing. Root CAs can be compromised, trusted CA stores can be tampered with, SSL busters like CRIME or BEAST can show up on the scene, someone can gain network access behind the SSL termination.... Layered security is why when LastPass got popped nothing of value was lost, because they used legit KDFs and salts.

There's no increase in attack surface for using an HMAC behind SSL. If SSL is your only line of defense, your security model is stuck in the 2000s.
I think what you are describing is a case of Goodhart's Law: "When a measure becomes a target, it ceases to be a good measure."

https://en.wikipedia.org/wiki/Goodhart%27s_law

On the other hand, a true accessibility score (for example, one awarded by a human or a robust grading process) could reliably quantify accessiblity. Goodhart wouldn't apply in that case.
I'm really curious why you picked Crystal for your startup :) Currently I'm evaluating different stacks and so far Crystal and Elixir are the ones that stand out the most. Did you evaluate other languages and frameworks before settling on Crystal? What has been your biggest pain points so far with the language / ecosystem?
Would love to hear more :)
> crap tools because developers won’t pay for tooling

I'm not sure i understand this argument

crap Linux because developers won’t pay for Linux

crap git because developers won’t pay for git

...that's clearly not the case, no? Every day we use a bunch of developer tools that are not just crap, but amazing and great to work with, and were built as open source. So I'm not sure about equating open source with crap experience.
If you're specifically interested in recent work then it could be worth checking out arxiv for preprints of papers in the relevant field.

For instance, here's a section on Programming Languages: https://arxiv.org/list/cs.PL/recent
The article clarifies that "intentional" really just means "known about beforehand", and I imagine if enough people are annoyed they could "fix" it.
Comments are usually disabled on Reddit ads. YouTube banner ads for YouTube videos have comments, and it's always hilarious reading them.
I don't think you appreciate the breadth and depth of public revulsion to his actions in the UK - many people were separated from their loved ones and could not be with them even when they were sorely needed. Every MP was inundated with letters decrying what he did - many wished that they could have traveled during that time for reasons much more important than those he gave.

Life is a bit more complicated than precisely defined rules and laws - there are many grey areas, but even so the 'man or women in the street' often does have a strong sense of what is right and what is wrong. In this case they are spot on, and it is a shame that Cummings is unlikely to face (natural) justice.
I would love to be able to use Palemoon, but I just can't get over the fact that it's a single main developer trying to maintain an entire web browser.

That seems like a security nightmare waiting to happen. If I'm wrong about this, please let me know, I really like the idea.
Subscription software is just a way to fleece gullible people, most software before mass internet penetration allowed stealing software (I refuse to call software as a subscription a rational thing for 99% of software).

Is just a way for companies to sell you the same shit repackaged with only minimal effort. You don't seem to grasp the fundamental principle of a corporation is to give you the LEAST possible service for the highest possible price. AKA it's fuck you I got mine.

99% of the time Software as a service preys on gullible people and flaws in your psychology you aren't aware of. Best to stay away.

Piracy actually put pressure on companies to innovate because you could get the complete version for free there was some incentive to improve the product to make it better than the pirate version, as strange as that sounds. Piracy is actually good for competition because most people are honest, if that wasn't the case Microsoft, EA, Valve, etc couldn't have become rich pre-internet where it was trivially easy to pirate everything by just copying the files.

Modern DRM is literally holding files hostage using the internet as a dongle and using encryption.

So no software as a service preys on gullible people to sell you last years with minor tweaks at inflated prices.
Think about Windows and how easily it was to change settings, you went to the control panel. Now in Windows 10 you have dig around to find things. It's like they are trying to hide stuff.
"We have work to do" in the last paragraph is exactly what he's said in every public apology for this or that.
When someone tells you who he is [1], believe him.

[1] https://readwrite.com/2014/03/28/brendan-eich-mozilla-ceo-pr...
My understanding is that YouTube uses at least some High Profile, and only Main for the lowest resolutions (though who knows how up to date that information is), along with of course VP9 and AV1 where they figure they can.

Anyway, if those claims bear out then it would seem like EVC has a possible future as an "AVC killer," though the computation complexity factors are complicated by the wide deployment of hardware acceleration for AVC encode/decode. Of course, hardware support could materialize for EVC as well, but it does rather complicate possible adoption for what we'll call a "sub-generational" improvement, in a world coming around right about now to AV1 hardware support.

Perhaps reduced computational demands could lead to a niche of usage in unaccelerated environments. I don't know if there's an example of significant uptake for an "in-between" step like this that one could point to as a possible model for success, though.
Manool: Move ops, sugar for updates, value semantics, and reference semantics
I fell in love with electronics and radio, and got my ham license, based on a book that I swiped from my local library (https://www.amazon.com/Elements-radio-Prentice-Hall-industri...). It took a person step by step up through complexity, saying "this is good but it has this problem and the next step is to fix it with ...". But that was the 70's. Are there any books that take the same approach to today's electronics, and radio in particular?

Frankly, the latest stuff, with Q and god-knows what, leave me scratching my head.
Whenever Microsoft can get people writing unportable software, and locked in again, they benefit; same for any corporate octopus.

We don't.
Looks really interesting! I will definitely play with it tomorrow. I used Forth for a bit in the past, and played with Factor a bit; my impression is that Xs looks a bit like the latter, with some parts from J on top (I don't know K, sadly, so I can't say what features Xs borrows from it).
What's your problem with your emacs? Mine runs pretty snappy. Sometimes you get a runaway process in it which may be a problem but if you have problems every time, something else is wrong.

As for browsers shrug, turn off JS and add a blocklist and it'll run an order of magnitude faster.
Show HN: Fakesocial – Fake social network using generated content
Using FF on mobile, I have no complains.
I lived in Montreal for 4 years in the early 2000s and although I had no trouble with day-to-day living, I felt that social life as an English speaker was limiting. I enjoyed the cultural and restaurant scenes (Mtl Jazz Festival, Just For Laughs), but meeting like-minded people was hard.

And although it's possible to get used to, there are tiny frictions everywhere -- e.g. signage is generally not bilingual (you learn how to guess from context and from the Latin roots of words). This is not a big deal in real life because there's usually small print in English available separately as printed materials. That said, most cities in Europe, South America and Asia (the ones I’ve visited) have far more bilingual public signage than Montreal.

Not everyone is bilingual (only downtown and certain suburbs like NDG/West Island) so exchanging little pleasantries becomes more difficult, and there's always a guessing game going on as to whether someone looks like Anglophone or Francophone, even just east of St Urbain in downtown MTL. STCUM announcements are French-only so if there's an emergency on the tracks or a train schedule change, you have to ask around to see if someone can translate.

The tech scene was very underdeveloped when I was there. Big events/conferences/exhibitions were always happening elsewhere, e.g. Toronto, even Vancouver, but no one was coming to Montreal -- the biggest conference I remember was the grassroots Perl's YAPC. (although PyCon would eventually come to be hosted there in 2014-2015). Things are different now with the existence of many more startups, but the ecosystem is still much smaller than in many cities in English Canada.

You also have to understand that English-language culture in Montreal is an afterthought due the English-language market being smaller -- most big international productions (say musicals/concerts/talks... in fact, almost anything) will often skip over Montreal but will have a show in Toronto, and even smaller cities like Ottawa. I felt I was constantly missing out on stuff that was happening in the U.S. and ROC (rest of Canada).

I could've tried to learn more French, and though it would have eased things significantly, I suspect I would still have not been able to sufficiently integrate into society -- there truly are two solitudes (as Hugh Maclennan once put it) in Quebec society.

There's also a certain feeling you get in Montreal: it's a little bohemian (so a little gritty in parts) and eschews change (lacks a forward momentum and go-getter spirit in terms of embracing new things -- infrastructure is not as well kept up as in other Canadian cities, heritage building laws are very strict which is good, but it also means new developments are very restricted). I went back to visit a little more than a year ago, and nothing has changed.

I don't mean dissuade anyone from considering Montreal -- everybody wants different things in life -- but just wanted to provide a data point from someone who tried to live there unhappily. YMMV.
Prototypo: Online font maker to shut down after 10 years of development
We called them "partridge" they will stand on a hollow log and use it as a resonator. Sounds like a hit-n-miss engine starting up then petering our
the bay bridge at night is not bad https://www.google.com/search?q=bay+bridge+at+night&sxsrf=AL...
I'm someone else but I get https://gitlab.freedesktop.org/drm/amd/-/issues/883 on a T495s with debian testing
There were functional spreadsheets that ran on a Apple ][ with 48k of RAM. Not to mention schematic capture and PCB layout programs that would run 'fine' on a 486 with 4 MB of RAM.

So yeah it's disheartening to see programs with the same functionality of an old 16 bit 0x86 program using hundreds of MB's of RAM.
I really like the simplicity and whimsical usefulness of this one. Good job
> I mean, I'm literally sitting about 0.5m away from my WiFi router which supposedly can transmit at like 1.9Gbps, and that has never been any discussion.

Did you have any say in whether you installed a Wifi router in your home?

> Like the author said - these waves are just so weak they aren't doing anything to your body, not now, not in a 100 years.

People say lots of things, but sometimes the things people say are not true. This, combined with various other variables, seems to leave many people with suspicious feelings about some societal initiatives, not just 5G.
How to Cover These Police Riots – Some More News
By the way this is not a project. Please don’t call it a side project you are misleading people.
Very well said! I am afraid there is a prophecy in your description. I have started moving all of our infrastructure away from Ubuntu at work. This sounds horrible. 2020 has been bad enough for one year.
It always seems that the drivers or something could say what the cable did or if it was detecting a signal or something.

I had a ton of octopus cable swag and took a bunch without testing on a trip and found out none of them charged my iphone! Frustrating to say the least!
I am not sure where to begin. But let's start with EVC.

EVC Baseline is expected to be 20% better than AVC High Profile, and EVC Main Profile is expected to be 30% better than HEVC. The Codec is backed by Huawei, Samsung and Qualcomm. If you are unfamiliar with the Smartphone market, The three would represent roughly 80% of marketshare excluding Apple.

Now on to VVC. I am surprised by the sentence

MC-IF has 31 members, 7 of which are licensing entities (i.e. a little less than ¼ of all members). The “industry” members account for just ½ of the HEVC patent holders. It is hardly believable that VVC will fare better than HEVC. It could very well fare worse because VVC adoption in broadcasting will take years.

Well Yes. That is because 7 of those licensing entities already covered most if not all of the industry. ( Excluding a few Open Media Alliance Member of course ) The MC-IF actually includes ALL of the current HEVC patents holders. That is HEVC Advance and Velos Media, which is basically Samsung and Qualcomm, along with many others that were not in any HEVC patent pool due to disagreement in the first place.

( And If you notice the removal of the infamous Technicolor, they sold their patents to another entity that is inside MC-IF, but I cant remember which one on top of my head )

VVC is expected to be 50% more efficient than HEVC. And judging from its reference encoder, this is the first time since AVC / H.264 era a video codec that might actually live up to its claims. ( Normally marketing likes to use unrealistic claims ) It really is the state of the art Video Codec, at a decoding complexity that is quite manageable. ( Lower than AV1 )

So what does all that means? Samsung, Huawei and Qualcomm are also inside MC-IF ( represented by different groups ). My guess is that EVC is basically a backup plan or a gesture to MC-IF, if the licensing deal can be agreed upon, they will go with EVC.

As a video codec enthusiast, I am extremely excited with both VVC and EVC.

As to MPEG ( Not to be confused with MPEG-LA ), I am not quite sure why he said it is dead. I reread the article a few times and still dont quite understand it. May be I am missing some context?
I also don't understand why the Golden Gate is considered beautiful. I've seen it in person.

Paint the old one orange and it'll look the same.
Hey, nice grid. Please consider multiple column sort / grouping. It will suddenly make it like analytics tool... And if add some statistical functions... Maybe too much for client side, but who knows
I have the same headphones but do not have the same issue. I regularly charge using a C2C cable.
It's true that the consequences of being port scanned by some website are probably negligible. However, that is not the real problem.

The real problem is the audacity of these people. They think they can do whatever they want. Not only that, they think they are justified in doing it. They need this information for their own purposes, so they just take it from people without asking, without even informing them. In their minds, what they did was not objectionable. They needed to do it, so they didn't do anything wrong. Those fraudsters left them no choice: they just had to invade the privacy of every single person who visited their website.

It's the same logic every abuser uses. It betrays a fundamental lack of respect for the people who use their service. It's impossible to have trust without this respect.
What is wrong with firefox?
I mean... a response to the actual question would've been nice.
Are you referring to https://poopsenders.com/ ?
I moved because Chrome shown a nice promise in speed, standard support and features, it seemed a good move. Same move I did back in the day when Microsoft released Internet Explorer 4, it was so good in comparison with Netscape 3-4 than it was too late when i got tired of it.
You really don't need a car in Toronto if you are willing to live in DT or around DT.
If you do that then you have two problems: the same amount in fees from CA for being a foreign entity operating in that state + the fees of whatever state you formed your LLC/C-Corp/S-Corp/whatever.
I would agree with you in this about snaps IF snap were somewhere close to production level software.

Nobody can assemble some new kind of app packaging, slowing the starting speed to 5-10 seconds and call that "good rounded software"

"It is just a couple of seconds more sometimes, not a big deal" isn't going to cut it. Most of the Internet using Ubuntu, already knows that.

I think Canonical is again in denial.

It already happened a couple of times: MIR, Unity (buried by not being community driven probably), Unity8, the mobile project or something, all but forgotten now.

This snap thing is probable the pet project from a couple top guys in Canonical. Maybe hundreds of powerpoint presentations have been watched about some "big strategy" for the next years, but they didn't know the thing (snap) is unbearable slow.
> That you don’t know this shows me that you don’t actually understand JS very well.

I know about the === operator, but the original one still exists, as does all the code that was (and still is) written using it that needs to be reasoned about. That you think adding a non-obvious alternative to the language magically makes the problem go away, suggests to me that you are the one lacking understanding, not me. It was also just one example of many well documented issues with the language.

> the === operator, which is what everyone uses

Since you accused me of "broadcasting without research", I'd like to see the evidence for this claim. I just looked at the HackerNews JS and there's plenty of double equals in there.
My experience with Arch a few years ago was if you miss a few updates things tend to get REALLY broken. More than once I would have to hard reset some things because pacman + aurget would break something. If you update every day it’s okay, but it wasn’t my daily driver and I ran into that problem a lot!
Site owner here. There have been a couple of reports of being re-directed to ... call we say inappropriate material. So far I cannot reproduce this, and can see no reason why it might be happening. IF this happens to you, please feel free to reach out to me directly davidgs[at]davidgs[dot]com and I will work with you to get to the bottom of it.
Need some references then. Other than some ineffective immigration lobbying, I don't see them doing much.

What laws were passed to help G? What regulations changed to favor them?
Yes, $800. Same cost as forming the LLC.
CSS can do that with the "text-overflow: ellipsis" property, but only for fixed-width elements, so it wouldn't really work for links.[1]

Note that if you click the timestamp on the comment, links don't get shortened.

[1] https://css-tricks.com/snippets/css/truncate-string-with-ell...
Im curious how this works, if they have negatives, do you just cancel the sale once they've won?
I enjoyed reading about how for a long time, copper was used on many surfaces in hospitals, to avoid infection. It was replaced with stainless steel, which "looked" clean, but harbored bacteria, while copper "looked" dirty (and unsanitary) when really it would neutralize viruses.
If this hasn’t been said:

Is there a way to instantly find out what filter to use when you click on a certain row? Kind of like doing exploratory jq on VSCode so you can quickly move it to the shell?
Anecdotal - One of favorite YouTube live-streaming personalities, Jon Gjengset[1] is a Ph.D student at MIT CSAIL. His talks are very detailed[4] and captivating[3]

[1] https://thesquareplanet.com/

Talks

[2] https://youtu.be/s19G6n0UjsM

[3] https://youtu.be/DnT-LUQgc7s

Rust Details(my favorites)

[4] https://youtu.be/rAl-9HwD858
to be fair though... this is an alternative system that's not fully locked to one company's software AND hardware (for development and the actual phones), has multiple players, and at least an appearance of an open system, and all the quirks and incompatibilities that come with that. Sometimes I'm just grateful Android survived and continues even in its messy and imperfect form, because the world where everything mobile is dictated by just one company would be pretty sad.
They can in theory but making it work in practice seems a little harder. For example I tried this

https://github.com/jingtaozf/literate-clojure

but ran into this

https://github.com/polymode/poly-org/issues/20

Either some IDE like functionality doesn't work or syntax highlighting doesn't work after you go through additional complexity compared to simply starting a project.
Yes, my experience resumes like this: breakthrough browser, adoption, bloating experience, adopt next fast breakthrough browser.
Bromite?
And pyenv for the right Python version

With poetry init, the tool walks you through project setup
Experiment Shredder Crushing Hard and Soft Things in with Shredding Machine
Thanks for reaching out through hn. I will take a look at the epic you linked. Those are indeed many issues we faced (and other universities as well. there was even a discussion of somehow trying to license one github instance for all universities in the state although I'm not sure if this ever amounted to anything)

I'm really interested in the development of this issue so thank you again for reaching out.
It's a mating call that predates combustion engines most likely by millennia(s)
> This line of thinking is what gives us flocks of people believing in easily debunked conspiracy theories.

I suggest you consider the possibility that language like this may do more to increase the magnitude of "conspiracy theorists" than your claim. The actual answer to the question is not known, and I suspect there's a decent chance that you don't actually know much about the people you're criticizing.
"And so, less than two hours after ending his silent retreat, Thorson logged back onto Twitter."

Like breaking a long fast by binging on candy.
I've bumped into this one. There are two people who have close variations of my email address.

One is in Kansas City and mistakenly attached his power bill to my email. When I tried to notify them, they wanted to turn off the account entirely. I demanded they contact the person via the phone number on the account before making any changes.

The second recently purchased a house so I got all his closing docs. Even after notifying the real estate agent listed and the title company, I still got a few confirmations.