skysight-inc/HackerNews huggingface dataset:
"We do daily standups"

But then actually it's people from multiple totally unrelated teams ignoring each other and taking turns talking at a manager, hoping same manager chooses to hover over someone else for the day and trying to ensure that happens by impressing them with a list of every little piddly thing they did yesterday that no-one on their own team even actually needs or wants to know about.
> Unfortunately, it doesn’t work like that. When a service enables SMS-2FA, an attacker can simply move to a different service.

That argument is just nonsensical. If you're a provider, the user being compromised on some other service doesn't really matter (and there's nothing you can do to prevent it anyway). While preventing the compromise protects the platform from abuse, saves on customer support on having to help the hijacked user recover, etc. While if you're a user, obviously it's better to be hijacked on as few (and as unimportant) services as possible.

> Instead, why not simply randomly generate a good password for them, and instruct them to write it down or save it in their web browser?

The users don't know how to save a password in the web browser. They'll lose the piece of paper. They'll be unable to log in, and effectively end up in an eternal loop of recovering their account (with SMS!) every time they log in, and getting a new password they can't remember. If you end up sending the user an SMS anyway on every log in, might as well use the version where you get to use knowledge of the password as a gating factor.

> If we spend all that good will on irritating attackers, then by the time we’re ready to actually implement a solution, developers are not going to be interested.

I'm really not sure what this is referring to. Other than this comment, I thought Tavis was railing against forcing users to do SMS 2FA. But then it turned out that the resource he is concerned about is developer goodwill, which doesn't really make sense.

There are a few classes of developers.

1. Huge companies with security teams that are willing to entirely implement their own authentication systems. Their goodwill is not going to be exhausted, since they're implementing what those teams think is the best for their platform's security.

2. Companies with potentially sensitive data who outsource some or all of the authentication to some kind of identity provider or identity platform. Their goodwill won't be exhausted: they'll just expect the provider to implement whatever the best practice is at any time.

3. Companies that don't care, and just roll their own username + password auth. They aren't going to implement SMS 2FA any more than they would implement U2F.
Your first paragraph would appear to invalidate any argument about anything that cites data, as anyone can be told they are using a "political filter", that's an unfalsifiable claim. So I'll ignore it. If you have better data, show it! (And some replies from others are doing that)

I don't think I understand your second paragraph. Of course some people die of COVID, or just isn't equal to the number reported for COVID deaths, which is "died with" and not "died of". That's not hand waving, it's well understood fact.

In the short term there are definitely lots of people who test positive then die of something else, as virtually all covid deaths are of the old where it's often very hard to say what exactly they died of, and there can be many causes. Excess deaths are certainly not all COVID and there was an article today in the British press urging governments to focus on the new problem of large amounts of excess deaths in the home that aren't linked to covid in any way, but rather seem to be people who are struggling to get medical treatment for other things.

N95 masks couldn't possibly have been used by all Americans in February for the same reason they can't be used now, the manufacturing capacity isn't there. That's why around the world people are using cloth masks which aren't proven to stop much of anything.

As for Japanese people doing the right thing anyway, well, I don't want to get into national stereotyping.
> Today’s adolescent voters aren’t allowed to drink and aren’t drafted to fight a war.

History shows the draft part changes quickly once the shooting starts.

How about a law that says the minimum military service age can't be less than the minimum voting age?
The Chinese government allows dissent to some degree; "disappearing" of critics isn't universal and shouldn't be seen as such. Criticize it for things it actually does, of which there are many.
I mean that's a lot of most industries in a capitalist system (at least the extraction of value from labor).
The same way they do so within a single sufficiently large corporation, and the same way the market utterly fails in such a situation. See https://www.versobooks.com/blogs/4385-failing-to-plan-how-ay...
I wonder whether the Apple silicon will also feel like "buying usage" or if we'll have low-level enough access to feel like we own it.

I don't think having physical possession of the thing is always the best criteria for whether you really own it.
> But I'm already immune to credential stuffing because I have long, unique passwords, no?

You are. Tavis discusses this clearly and offers two suggestions for making this more common (educating people about password managers or having services generate all passwords for their users rather than letting users pick them).

If you believe that "everybody uses unique passwords" is achievable then Tavis is 100% correct and SMS-2FA achieves nothing.
https://medium.com/waymo/a-note-on-our-lawsuit-against-otto-...

- 14,000 highly confidential and proprietary design files for Waymo’s various hardware systems, including designs of Waymo’s LiDAR and circuit board
- 9.7 GB of Waymo’s highly confidential files and trade secrets, including blueprints, design files and testing documentation.
- supplier lists, manufacturing details and statements of work with highly technical information
Get an Internship this Fall instead of going Back to School
You said that tradition doesn't stand scrutiny over time. It wouldn't be a huge leap to suggest you subscribe to the thought that science is the only way to approach any type of validation.

I don't agree with that statement, I think there are cases where the lab doesn't translate into real world and suggesting that scientific experiments are always the best representation of the real world is just naive, I-M-H-O.

Ergo, I don't see us agreeing on the topic and it is best left there.

Regarding the straw man spam - it would help if your claims were correct and not removed from context. I didn't suggest that all tradition is infinitely robust, I suggested tradition concerning breathing is more robust than the limited scope paper you referred to. Context matters.
How to create 25M jobs by decarbonizing the economy
I don't have an opinion on whether or not it is justified. I just think that the statement I replied to, is a very weird one. One reason being the leap of logic.

And frankly I doubt the correctness of the statement altogether. There are a ton of American companies operating in China, much more than the number of banned ones. How many US companies does China really ban?

What all these comments about 'fairness' also don't mention is that under the WTO rules, developing nations (which China officially is) are allowed to take protectionist measures.
I guess he was trying to specify 2FA that's NOT u2f, or other very strong options. But yeah, in principal, he's really talking about SMS, TOTP, et all. Bit of a shame, because TOTP itself is far better than SMS. It's all a sliding scale of security vs convenience.
I think his point is that if you create an audiobook and then limit how you sell it, you are creating more choice then if you didn't create the audiobook at all. You're saying it's different but you aren't saying how. How does creating additional choice harm the consumer?

I'm not making an argument either way, just trying to clarify positions.
By default HN almost hides usernames. The byline on this comment will be a smaller font than HN's already small body font size. It'll also be a light gray almost fading into the background. You'll need to spend extra effort to notice my username and try to remember it. I'm not likely to remember yours later.
The Roman's could grow wine? Here I was thinking it had to be produced.
>There is a lot of implied ill-will on HN

So true, since Microsoft wants just the best for Humankind and is overall just a nice Company.
Yes that being said the demo is an old version.
I'd do 27 months for millions of dollars. I might even do it for thousands of dollars if you give me a computer and internet access.
GPUs for Science 2020
I just described how Minitel was completely different from the Internet.

I guess I don't understand your post.
To recharge America’s job market, build a green electric grid
Phone backup and a new storage manager in the Google One app (free)
> See the problem now?

No, because I am a free speech advocate.

The thing about free speech is the content is irrelevant. You changed the message and political leaning of the statement, which is fine, but if that changes your opinion about the speech you're not a free speech advocate. Whether it's a pro-choice or anti-choice argument is irrelevant. You're free to say it, and your employer is free to take whatever action they see fit from it - from nothing, to promoting you, to terminating you.
Honest question here. Why are we, the taxpayers, paying for 27 months of free housing and food for this guy?

Considering he's not a physical threat to society, only an intellectual one, I'd much rather he be slapped with a financial punishment large enough to be meaningful.
> You have to bake the security into your workflows, processes, and code if you want it to matter.

There's a suggestion here in the article: don't let users pick their passwords. Just generate one for them and say "use your browser's password manager or write it down".
Sorry to hear about the flashbacks. Having written a couple dreadful ORMs in my day, I feel an odd kind of guilt right now. :)

I know it's a new post, but it's funny to see what a large share of this discussion is about your ORM comment. You've touched a nerve, I think! I also wonder if there should be a corollary of Godwin's law -- "as an online discussion about relational databases grows longer, the probability of diverging into a discussion about ORMs approaches 1." :)
Strange. Works beautifully on iOS.
You're obviously coming in with an anti-PE bent here, so if you're that interested you can pull up some statistics on PE outcomes and leave them here. My point was that OP's labeling of PE firms is overgeneralized - if you want to talk about percentages of outcomes and what type of PE is the minority then you're welcome to bring that info with you to discuss. I'm not going to do it for you.
Not necessarily. For it to be a type of intellectual property it would have to be unique, distinctive, etc., which many domain names aren't. You can't really bring a claim to a domain name outside of trying to prove trademark infringement.
PayPal is not a credit card processor, it is Money transmitter, different legally

Stripe on the other hand is a credit card processor, and as a merchant you get a Merchant account, the same like Authorize.net who used to be the largest online processor before Stripe.

Back in the day (and I have been out of that market for over a decade) Authorize.net absolutely refunded processing fees on refunds
It’s okay to get caught (from a risk, not a moral perspective), it’s whether it was worth it after the costs (time and money) are tallied. Doesn’t make you dumb, it’s always a calculated risk if you’re considering a crime.
A few comments:

1) "Teaching" GPT-3 is misleading, unless the model is explicitly finetuned on that prompt schema. The default davinci model for the OpenAI API is the same model for everyone using it; the few-shot prompts merely guide GPT-3 toward a domain and generation schema.

2) This approach is essentially a classification problem, with extra steps. That's not new with GPT-3; causal language models (including GPT-2) use classification tasks as a way to quantify model performance (see the papers). Hugging Face transformers is a good library to finetune Transformers specifically for classification tasks.

3) The full string "yo be real" is inefficient if you're just checking for positive/negative responses. (Token efficiency will likely be an interesting area of optimizing GPT-3 performance)

4) That said, using token prediction probabilities can be useful for assessing model performance (I explicitly duplicated the web UI's implementation for my new client: https://twitter.com/minimaxir/status/1288125135526875146). However, the prediction probability is often very dependent on previous tokens, including the prompt, so the results are not universally consistent. But there might be more clever outside-the-box approaches using the token probabilities and heuristics...

tbh, I wish OpenAI would also return attention weights for each previous token in order to be able to more easily-visualize which tokens have a high influence on generation.
So I'm not clear on what this is about? I seem to be missing a piece of the puzzle. It seems related to some type of nostalgia regarding delicious?

Glad if someone can clarify.
Out of curiosity, did you even read my response, or are you regurgitating talking points?

I offered several refutations(edit:and discussion) about that, which if you'd actually like to respond to I'd be happy to read.

If you just want to troll, I don't think we'll be getting much done here.
> not in keeping with the First Sale Doctrine.

I’m confused - what does this have to do with first sale?
They had previously paid him $120M so it seems like it's actually in the same ballpark of transaction size.
I never said that Blender is not used in game development, I specifically said Blender is not widely used in AAA (Microsoft Game Studios) game productions, and that Microsoft Game Studios is not the driving force for this donation (which is stated in the origin post!). This should not be a controversial statement.
No, it was blatant theft of IP and some might consider corporate espionage.

He was a high level exec at Waymo, who stole the IP which represented the core competency just before he jumped ship to Uber.
Pocketbook Color e-reader hands on review
I doubt it's news to you, but Android openly allows app stores other than Google's.
The advantage is that you don't need to have another parser at the ready to parse your schema definition.
I'm not sure if it's just me, but when I see DELETEs that use CTEs like that I start to get nervous. It's easy to get wrong and it's hard to undo.

I like to have an intermediary table where I can verify what's going to be deleted (or updated) before it runs. Even better it lets you save the mappings of old ids so when you find out some downstream system was using them you can fix that too.

I know it's just an example but soft deletes solve a huge range of problems.
It can go on for a really long time unfortunately. Impossible to predict timing. And I don't think the social unrest will change the US's fiscal behavior unless it's really getting messy (civil war messy).

When looking at history, debasing the currency has always produced inflation at a certain point, which then usually leads to the downfall of the predominant power structure. This then causes things to reset and start over eventually. It's highly likely it will be the same again.

Hypothetically, if China was to decide it wouldn't export anything to the US anymore tomorrow, we could see inflation pretty quickly. The same is true for the USD as the reserve currency. Hypothetically, if other nations were capable of organizing a viable alternative, that would be the end for the current fiscal behavior. Both are highly unlikely to occur anytime soon...

A major supply shock seems to be the biggest real risk in the short and medium term, as demand issues can easily be controlled with "Money printer go brrrr" again and again if you are in control of the planetary reserve currency, but supply issues cannot.
I proposed a scenario where it seems to me that SMS-2FA does achieve something. What is wrong with my understanding with how it helps with that scenario?

To be clear, I'm not talking about credential stuffing. I'm talking about my credentials from Foo being used with Foo.
> The Pocketbook Color has a 6 inch capacitive touchscreen display with a resolution of 1072 × 1448 with 300 PPI. It is able to display 4,096 different colors and the maximum resolution for color content is 100 PPI. The way the screen technology works, is say you are reading an ebook that is black and white. You the text will be viewable at 300 PPI. If you are reading a combination of color and B&W text, say on the internet browser, the text will be at the normal PPI, and color at 100.
This is a settable option in mysql: https://dev.mysql.com/doc/refman/8.0/en/server-system-variab...
Why are there so many pro bono Apple defenders for this? They literally are taking 30% when a user buys an app and 30% when they are refunding it.

30% is quite high? It's highway robbery!
I mean, then there is social isolation and routine of being at home. Even at bottom and top, many women are simply not cut for that. They don't like that role, they do get depressed and don't perform well. I remember reading that being at home is a risk factor for female alcoholism (another is working in male dominated job and drinking along men).

Like, not everyone was happy at lockdown and it seemed to me easier situation then being stay at home. (Due to working with others remotely, many people having same shared experience. )

And the bottom here did not used to be small nor rare. The really bad stuff about abuse still happens, through less often. And then, divorces happen more often. With single income, they would be more rare, but that marriage will be more of a trap.
The Chinese consulate in Houston is quite literally a foreign entity. I'm not sure that applies. We also spent 3 years propping up a conspiracy theory that Trump was a Russian agent or in cahoots with the Russians. It's too bad we'll never get all that time and energy wasted on such things back.
>If you believe that "everybody uses unique passwords" is achievable then Tavis is 100% correct and SMS-2FA achieves nothing.

This doesn't seem to follow. As the previous poster called out, if I have unique passwords, SMS-2FA makes me safer than not having it. If someone (let's say Bank of America) has their password database leaked, then an attacked can immediately log in to my account with a unique password.

If I have a unique password + SMS 2FA, the attacker has to compromise SMS to log into my account - a slower process that gives me more time to be informed of the leak and change my password.
Storage is only part of the problem, though a big one. The area that needs to be covered with solar panels and windmills is another one.
Why the Love for Bezos?
I’m angry that tech CEOs are fawning over Bezos. Saying how, “no ones self made” in response to the investment from his parents. Or how he’s a “brilliant communicator”.

That’s all.
> Your argument here is basically that Apple charges a lot so they must be a monopoly.

You are wrong in two respects.

First, I am not taking a position o whether Apple meets the test for monopoly.

Second, the test is pricing power (the ability to raise prices without defection to competitors) not “high prices”. This is more important than how many players might be in any popular description of the market, because it is test of whether those other players are in fact competing with the player in question, or whether they are in objectively separate markets even if the usual popular description is of a single market.

> Wanting something to be true doesn't make it true

Correct, wanting “are there more players in what is typically described in the press as the market in which the actor is participating” to be the main legal test for monopoly instead of pricing power does not make it so.
I don't think so, this seems to be managed by a wagtail based django project: https://git.blender.org/gitweb/gitweb.cgi/blender-dev-fund.g...

So this text copy is most likely in their CMS database.
Yes, and the article states that. My response is specifically talking about games, because OP addressed Microsoft Game Studios. Microsoft Research and Microsoft Game Studios are different groups. Folks are acting like I said "Blender sux lol". Simply stating facts about usage.
> “It is, unfortunately, no exaggeration to say that a prison sentence today can amount to the imposition of a serious health crisis, even a death sentence, given the BOP’s (Federal Bureau of Prisons) current inability to control the spread of the coronavirus,”

No exaggeration ? °-°
“We do not want to become the arbiters of truth. That would be a bad position to be in.” -Zuck
If I'd have to venture, it was written by a non-native English speaker.
> TOTP app

This is only very marginally more effective than SMS. Phishing is way more common and can be automated much more easily than SIM-swapping. With TOTP you close a small window but leave the big door open.

Yubikeys prevent phishing, which is enormously valuable.
Android:

https://play.google.com/store/apps/details?id=com.google.and...

iOS: “available soon”
All the arguments in the post against SMS 2FA are also arguments against TOTP
Windows has like six 3rd party package managers. Chocolatey and Scoop have large repos and have been around since Windows 8. Modern Windows devices ship with the specific drivers required for the hardware and download drivers for unknown hardware automatically. Building my gaming PC from scratch, I didn't have to manually install drivers for anything. I've never even heard of a keyboard/mouse that didn't work out of the box.
"measuring helmet g-forces is a proxy to find head g-forces but they are not one and the same"

I don't think I said they were, just that it's a worthwhile thing to measure to see if you should start finding a way to get better measurements. I agree they are not the same and this is not a definitive study. This is often how science works, you do something quick and easy. If it came out that it was only ever minor forces on the outside of the helmet, it's probably not worth investigating since the forces inside the helmet will be even less. If they're huge, repeated forces, it's probably worth trying to come up with a better rig to measure actual force and see if it's above a healthy level.
I think we have shifted to a new paradigm. People are now less likely to host their own sites and own their content. Facebook especially has made walled gardens of user generated content that cannot be discovered outside of Facebook. And now even Google is taking their path by scraping content and displaying that and ads for most of the search page. Then even content that is displayed as a result it is going through Google hosted services to "speed it up"

Delicious was around as user curated sites and forums started to wane. So it did provide discovery for them. It was like even older days at the dawn of the web when one went to Yahoo to find the best site on working out in a human curated directory rather than horrible keyword searches. We do need that still especially now that Google has pivoted to being "doing evil" and is doing things that are against their open web practices of the past. So now even with a great search engine, discovering curated content is less and less possible as they are scraping it and burying it.

But as much as I'd like to see that I fear it isn't going to happen. People are less likely to create things out of these silos like social media platforms because they aren't going to be discovered. So then there's less discoverable great independent content, and then less of a case for bookmarking...
Demonstrating Perl with Tic-Tac-Toe