skysight-inc/HackerNews huggingface dataset:
I'm surprised you're not dog fooding: https://login.land/login :)

The page leading to login is a bit too plain. Makes more sense to point to /login instead of https://login.land/admin
I read the damn thing:

- No performance benchmarks for rules despite using a backtracking regexp engine.

- No canary deployments, allowing the mistake to propagate to their entire network at once.

A mature engineering organization is very unlikely to make such basic mistakes, because it has in-depth peer review for both design and implementation.

Of course, their openness about the incidents is commendable and is the only reason why my company hasn't dropped them a long time ago, but it doesn't excuse such an easily avoidable downtime.
I tried setting up an account and got a Firebase error, but generally the answer is no. Sorry.

I'd have to have faith that your implementation of the login flow is more secure than one I could build or get elsewhere. Any weird security smells (like the login page differentiating invalid user email address from invalid password and leaking Firebase errors to the user) are going to lead me to believe that the code hasn't been reviewed from a security perspective.
It's HN (aka people making 3-10x the minimum salary of their country) and an American issue (aka individualism is king), most of them have an easier time projecting as the exec getting free money for their "good" work than the employees getting abused, because they're closer to the former and never experienced the later.

These people don't think about such things as "moral" or "common good". It doesn't matter if many other countries successfully banned these practices because in their mind it's the only way.
What if powerful people have pseudonymous accounts that are not verified?
Thanks mate, really appreciate the feedback. Will fix the typos.
No. The login flow is too tedious for the user. Too many clicks.
It would be interesting to classify network outages and determine the number that involved practices that would be obviated by a standard VCS / release process like found in software. Routers/firewalls seem to be a particular pain point everywhere.
More specifically stick to v14.21.54 of Vanced since otherwise you can see some ads now. I had updated to the latest one and started seeing ads below the video playing and when I am at the home page of my account.
Facebook’s Data Center Network Architecture [pdf]
Thanks for the feedback! Currently passwordless email confirmation is the only supported login flow, but I’m thinking about building alternatives like Twitter OAuth, or a password based flow.

Does the pricing model make this less appealing to you? Open to adjusting it!
ARM Template deployment, the what-if option
The top HN post isn't the selling feature, a-single-email-for-your-morning is.
Login management should be built into the browsers instead. Imagine a UI where you go to log in and instead of a text/email field for login and a password field you get a drop down with a list of your personas that you’ve created with the option of adding a new one. Under the hood it would use a public/private key pair to authenticate you with the site.

Browsers could implement a service that backs up your personas and syncs them across your devices. Ideally the syncing should be cross browser too and allow me to use my own servers for this if I choose.
Who said he is disgruntled?
Avoid=Pay
Bindings for what? I don't know the state of interfacing with various scripting languages, but there are binding for lots of languages out there.
Why Netlify Is Tech Agnostic and Its Role in JAMstack Development
> When cleaning up the house, I also don't leave around sticky notes at the places where I removed documents from.

This is a poor analogy. Perhaps “I’m a librarian for a library with thousands or millions of users, and when I rearrange the books, I don’t leave sticky notes pointing to the new locations”
Font-weight: 300 considered harmful (and a fontconfig workaround)
Sounds like they need some management consulting.
Continuous Documentation: Hosting Read the Docs on GitHub Pages (CI/CD)
A few too many steps, don't you think?

Why would the Login website redirect to Loginland instead of just sending the email directly and displaying an "please check your email" popup? One less page load.

Why would the email redirect to Loginland, not to the original website? OK maybe that's absolutely necessary because of some invasive anti-privacy user tracking, but even then, why would Loginland website tell you to close the window and go back to the original window (what if the user closed it already??), which would only then redirect to original website?

Seems like a lot of ceremony for nothing.
The Greatest Samurai in History Used Wooden Swords
Who stood to benefit from the sale?
Point proven why every website owner needs Simple Ops! :^)
Not directly comparable. You can use iptables on a EC2 instance inside a VPC.

VPC is more akin to a glorified virtual switch/bridge.
So it‘s 2% Stripe fee plus 5% loginland fee = 7%? You repackage and resell Stripe’s payment service but tack on more than double their commission?
Hey, just a couple of points

1. Don't link the bootsector and the rest of your binary together. It's more trouble than it's worth, and if you ever progress to loading off a filesystem, then you won't be linking them together anyway.

2. You can use LBA addressing in real mode with int 13h (just specify a hard disk rather than a floppy when booting):

https://wiki.osdev.org/ATA_in_x86_RealMode_(BIOS)#LBA_in_Ext...

3. You need to switch to protected mode, set up paging, and then enter long mode.

4. I'd recommend compiling your rust code to an ELF binary, and then using objcopy to create a binary:

objcopy -O binary $input.elf $output.bin

Alternatively, ELF isn't that hard to parse, so you could load it yourself and then copy sections to the right locations with your bootsector.

5. OSDev.org is your friend. Maybe get a C-based kernel running first, as the toolchain when dealing with freestanding code is a lot friendlier for beginners

- https://wiki.osdev.org/Protected_Mode

- https://wiki.osdev.org/Long_Mode#Long_Mode

You might be better off starting with 32-bit rust code instead, in order to avoid paging and long mode at first (you'll still need to switch to protected mode)
My first thought when I was going through the page: HN will not see much value in this given it's a highly technical crowd.

I urge you NOT to get discouraged, and to chat with non-technical online small business builders: you'd find many who market primarily on Instagram, who are just figuring out how to get a nice website for their brand.

I see a lot of value if you position your service as a way for them to offer a tiered loyalty program for their customers: i.e. "log-in via loginland, buy on our site and rack up points that you can redeem later!".

Not sure what the integration would look like with their existing website builder stack, but could be fruitful to look into this.

Also, there are MANY brands looking to spin up their first online store for their brand - may even make sense to offer a very basic product listing that lets them sell products and manage loyalty programs easily with their customers.

Just a few suggestions that stemmed from recent conversations with founders of these kinds of small scale Insta-marketed brands.
Nope, that's not it. An algorithmic approach won't do here - it needs an actual human filling pixels in on the basis of aesthetics rather than math.

It doesn't have to be scalable to arbitrary sizes - 2x of the original would do just fine on a wide variety of high-DPI screens, just as the original itself worked on a very broad historical range of non-high-DPI ones.
Found a blog a while back where they linked to all the research papers the Chinese lab in Wuhan was doing. Very interesting read.

Basically they were studying animal to human virus transmission by bio engineering bat viruses to infect human cells.

https://project-evidence.github.io/
Today being logged out might equate to choosing the “default” view of the world (as far as the internet is concerned) while the AI creates a view for every “logged in” person that distorts the world to fit their biases almost completely
What? While it's true that there is a small minority of kids in youth protection because of involvement with the police, at least 90% of them are there because social workers decided, mostly against their and their parent's wishes, that they needed help and couldn't be allowed to be free to refuse that help.

And of course 0% of kids in youth protection facilities are convicted of a crime (they would be somewhere else if that were the case). Youth protection services don't "take up slack for the police" at all ...
Linux user for 15+ years, Slack, now Arch in the past 10 years.
Open Source Databases in the Age of the DBaaS
I definitely don't think it's /useless/, but I wouldn't use it. Someone out there wants a dead simple login solution that they can get running with a handful of lines of code.

That being said, if this was /self hostable/, I'd see myself using it on a few projects.
Thanks for the feedback! This is definitely early stages – mostly looking for feedback on the product and landing page, but I’m definitely embarrassed you ran into that Firebase error! I built the admin side using Firebase auth to get started, but have been planning to move it over to Loginland...
Firebase: No Firebase App '[DEFAULT]' has been created - call Firebase App.initializeApp() (app/no-app).
I thought this would be common sense but I guess not.

It should be a red flag to you that if a founder or executive won’t reveal his identity, there is a possibility those people represent a nation state or other organization (not necessarily governmental) that you would not give your private data to if you knew their identity up-front.
Why Quantum Mechanics Still Stumps Physicists
Watching ads on videos of my favorite youtuber translates to around 3 cents per year for him. I rather support them directly with merch/patreon.
As a software developer, I wouldn't use this service. But if I was someone without my skillset trying to build a no-code / low-code MVP, I definitely would try this out! I think that may be your sweet spot. I don't think HN is your ideal audience.
Frugal Habits to Live – Save Money and Pay Off Debt
Intuitive physics, planning, and problem-solving in brains, minds and machines
Shrugs, I don't have the authority to fix the problems yet I'm responsible for the fallout - hence I'm leaving as soon as possible.

If you have a broken process the developers with options will leave, what is left is the developers who are either stuck for family reasons or simply unemployable elsewhere - a few years later you wonder why a simple change takes a week and a half and breaks things that should be totally unrelated and blame the process, so you do workflow re-org number #27 to see if you can fix it.

It's hard to explain to a more senior manager that they are in fact the problem.
Dashous Clayy and Nicholas Craven Drop Off New ‘Jesus in Giuseppes’ EP
Seems to already be available in FF 78.

Search for: browser.startup.homepage.abouthome_cache.enabled
and turn it on to test.
> They aren’t stupid, biting the government hand that feeds them isn’t a good way to keep winning new work.

Have you read the article? The article details multiple failures to deliver on government contracts nearing $100M. The article details a practice of refusing to amicably resolve matters in good faith, instead Deloitte prefers protracted litigation, which when involving government is just additional costs to the tax payers above and beyond the initial costs tax payers footed for the original contract to Deloitte resulting in a non working system.

There are a few read between the lines also, Deloitte knows their litigation budget is significantly larger than the state governments and they know their attorneys can overwhelm the states ability to litigating just through costs alone. The other point about biting the hand that feeds them...sure if you were small time and failed to deliver and forced the states to litigate a breach of contract case, you may be cutting your nose off despite your face. But entities like Deloitte can do this, and they will continue to get new government contracts while the prior contracts are still being litigated. You got your Deloitte’s, McKenzie’s, Goldman Sach’s, haliburton’s, Boeing’s, etc...they could set the world on fire and then lobby and get the contracts to put out the fires they started. Those firms are the reason for the term “revolving door politics.”
What we get wrong about “How might we”
Gas cars can't go a million miles on one engine, either, and need endless maintenance. EVs already get past a few 100k miles with much less work. EVs will be first to 10^6 miles.
I recently made the toss up between Auth0 and my own system. Ultimately I couldn't bring myself to use Auth0, it wasn't the price but the lockin that got me. Being able to log into a product is a key gate and I don't want to lose control over that even if it is slightly more work in the early days. What's more, it becomes extremely hard to migrate away from.

As someone else suggested in here, I'd be happy to do a one off payment for a system under my control. However, a handing over the literal keys to my product is not something that I'm comfortable doing, especially without reassurances that I can easily migrate away from it. The fact that there are so many good libraries that deal with the most painful parts of this just make the sale harder for me.
Thanks, will add that to my list!
AWS Serverless: you might not need third party monitoring
You're assuming:

a) the risk can be neatly packaged and mitigated
b) the cost of appropriately mitigating that risk wouldn't preclude running the business.

Long tail risks exist in every business, that rare event that takes the whole thing down. There are tons of them.

Each of which has a .00001% chance of happening.

The consumer brand version of this having one of your employees say some stupid shit in at bar (on video) or the summer intern like the wrong tweet, at which point a woke mob descends upon your brand with pitchforks at the ready....

There is no practical way to mitigate this. You can do the basics (don't hire assholes) but it's open season from there.

I've always thought the most thankless job in the world is running HR or PR at a massive retail company like Wal-mart or Macdonalds. You're one redneck idiot away from being on the national news (for doing or saying something most reasonable humans would never dream of) and you have literally hundreds of thousands of these people showing up for work each day.

At which point, you get the soul crushing task of getting on national television to explain the conduct of the moron in question and explain how it doesn't represent some embedded policy of the company to encourage <bad thing>. Better yet - you get do this every couple of months, since you have hundreds of thousands of these morons. Statistically, it becomes a predictable process.
Since residency spots have to be funded through Medicare, I was under the impression that they are very competitive essentially making them a zero sum game. If less get through on a visa, the spots will just be filled up by natives.

Or is it that there just aren't enough native applicants (like grad school) ?
Once a week – Includes 1 song, 1 week's best read, and 1 thought provoking idea
Escaping the Coming Church Apostasy
https://en.wikipedia.org/wiki/Mozilla_Persona
What does this even mean? The attackers had the users' credentials, by resetting them. They had all the access the users had. There is no kind of encryption that would prevent them reading the messages in this situation.

Twitter is fundamentally a web app. Users can log in from any browser and read their messages, which are stored on the server. This is a very different situation from Signal or WhatsApp, where an account is tied to a device, and messages can be stored there.
On holes and string: Earliest displays of human adornment in Middle Palaeolithic
That is more than slightly sickening 0_o
Show HN: BookBites – Get Started with Books. One Bite at a Time
If so, that‘s what I would call dishonest pricing. I expect you to tell me your fee, and that should include all your internal cost of providing the service. Sounds like an architect selling a house for 10k. But wait, footnote says „don‘t forget the contractors will take an additional 100k“.
Pesticides speed the spread of deadly waterborne pathogens
I agree that writing your own login routines is not hard, except I wouldn’t want anyone to have the impression that it’s trivial.

It’s not trivial. It requires some knowledge to do it well. Off the top of my head—choice of unique identifier, password complexity rules, hashing best practices, registration flows, recovery flows, abuse detection, markup hinting for password managers... I could go on.
Original intent notwithstanding, defaulting communication to a junk box is absolutely the correct stance given the current signal to noise ratio in email.
As I understand it, the primary customers of the cigarette black market are corner stores. The people who ultimately end up smoking those cigarettes don't know anything about it.

In New York there's a $4.35 excise tax on a single pack of cigarettes. In Missouri it's $0.17. That huge delta provides a big opportunity for arbitrage.
In the open source world, Mesa is effectively the reference renderer. It's not hard to get it running on other platforms either.
And, arguably, Lymerix. Although the situation with that is... complicated.

The Dengue vaccine is still on the market in various places including the US AFAIK for certain demographics/prior exposure. Some tradeoffs are worth it. It's almost a given that any near-term vaccine almost certainly hasn't been adequately tested by historical standards, "we" (or at least the government) will accept side effects at a level that wouldn't normally be considered acceptable, and both private and public institutions will require vaccination to fully participate in society.
Don't think of them as one.
I'm the General in charge and I don't care of what happens, when I'm offered $50 Million for protection. Especially when refusal means death for my entire family. This is repeated in every situation or region. Now I'm in charge and this is my chance to get rich and survive. A lot of these narcos carry multimillion dollars in cash with them, if they get caught they buy their way to freedom. $2 million and let me go. Why would someone not take especially if the one up the chain will probably still free him...?

A state, any state, can take on private armies. They can get all the help needed from USA and EU if they were weak. Even Escobar was beaten, one way or another. Cartels employee a lot of people but the state can make them fight each other and then take on the winner. But then, what does Mexico have to offer to the many millions that wet their beaks in the drug trade? Go work daily on corn fields for $x a day when you can make $xx on opium ones?
Definitely early stages – mostly looking for feedback on the landing page / demo!

Agree that it’s hard to compete with more full-service solutions like Auth0/Firebase. Maybe there’s some variant of this, like self-hosted, that could work :)
And here we find the voice of antireason.
For those checking comments first: this is mostly a tutorial on how to build and link a 16/32 bit MBR loader and mode switch implementation in assembly. It's very similar to what you'll find on osdev.org. The Rust content is limited to a single function at the end which writes some characters to an assumed-pre-initialized EGA text console.

While modern hardware does continue to support these modes via various detection tricks, "real" handoff from the firmware happens in a 64 bit EFI environment these days, and the framebuffer tends to be in a graphics mode and expects to be accesesed initially via the exposed UEFI API (or to be reset from scratch by an OS graphics driver, of course).

This is fun and instructive, but not really reflective of the way modern hardware boots.
I believe it's the "equal work" bit that makes that a problem. I think I work harder than some of my coworkers and should therefore make more. Who decides what equal work is?

I'm happier not knowing
Are you suggesting never relax around black people?
Private windows are all linked to each other. Different private windows are not in different private sessions. They all share the same private session, so It's not really the same.
Good. That way other countries can hold on to their most needed doctors.
will you be there in 10 years?
Did we look at the same graphs ? There are like 5 states which are post peak, 15+ in very high increase, and the rest is beginning to rise.

> Everyone is like Europe good US bad hurr hurr hurr. But actually the US is simply lagging behind Europe. States they were hit early and done, states that were not are starting their ramp up now.

The first cases were reported more or less at the same time in every state or close enough that it doesn't explain the lags.
honestly? same!

thanks to "the algorithm" i was able to find a bunch of amazing cooking channels that 100% improved my cooking skills.
I feel like you only read the first half of my comment...
Cartels have killed hundreds of Mexican government figures, including presidential candidates. I'm not sure the police chief of cdmx is a much higher profile target.

A decade ago, Chapo was burning tractor trailers on all the major highways in plazas to box his enemies in, fighting them for hours in broad daylight.

With that said, the homicides in Mexico have absolutely exploded under the current US and Mexican administrations, CJNG shot a helicopter down, etc. It's sad this escalation doesn't get more attention.
How Liberty Mutual is transforming its IT using serverless computing
That sounds very much like the goals of Mozilla's Persona service. While it required a separate service and some JavaScript, the idea was that it could be supported natively by browsers in the long run.

Unfortunately, it was shut down in 2016 due to lack of interest. (Coincidentally, I just spent this past week hacking on its source code.)
A new approach to reinforcement learning – DeepMind
I've been working on finding boardgame-research and this is based mostly on research I've been skimming through (and not finding).

1. Hidden State. Not necessarily by itself, but the less the player knows about what the state transitions look like, the harder it is.

2. Visual interactions. Dixit is a really cool game with a known deck of cards, but I haven't seen any bots tackle it yet. The game involves giving a phrase about a specific card which isn't too specific.

3. Game Complexity. Easy to explode by having card effects, such as in MTG, which becomes Turing complete. If you have cards that change the game state too much, the game state becomes too chaotic to easily account for.

4. Social interactions. Some research exists on Mafia, but most of it is rudimentary and doesn't take into account the hundreds of different characters and emergent character behavior.

5. Games which force you to model your opponenet's strategy. For eg, some games have a mechanic where if you play the same card as your opponent, the action cancels out (actions are picked and revealed simultaneously). Unless you can build a model of your opponent, it becomes hard to win.

6. Random start states (and implement something like the Pie rule to ensure fairness)

Try to stay away from games which have a small state space (Blackjack), or have easy state-transitions, or are perfect information.

[0]: https://github.com/captn3m0/boardgame-research
You are not as informed as you would like to believe.

Marijuana is a great replacement for those who never started down this path and okay a means of getting off opiates.
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6777788/
Learning Differential Equations That Are Easy to Solve
Do you mean like a family office, or like they all invest in Blackrock index funds?
Cryptomining in Europe’s most disputed state
Learning Graph Structure with a Finite-State Automaton Layer