skysight-inc/HackerNews huggingface dataset:
What confuses me is that TOTP is usually referred to as "something you have" (the app on your smartphone, with the secret), as opposed to "something you know" (your password). But the TOTP algorithm and the current time is known to any attacker. What remains, is just the secret, which is the same as a password (a password given to you by the service provider instead of a self-chosen one). So in the end, TOTP just increases password complexity, doesn't it?

EDIT
Trying to answer my question: it prevents a MITM attacker from sniffing your password hash once and using that forever, since the TOTP code is different each time and the attacker would still need to brute-force the secret.
But if that's the only benefit of using TOTP, couldn't that be combined with the password: The service where I want to authenticate sends me a "challenge" (random number), I enter my password and an algorithm on my client combines the challenge and my password-hash to create the result to send back to the service. This way the value sent over the insecure line is always different, since it is based on the challenge. The user would not have the added inconvenience of having to enter the TOTP code.
Only if the Map's Data works for you. From a Worldwide perspective, Google Map's Data is still thousand times better than Apple Map.
The Most Popular Websites Since 1993
The same on all recent iOS/Mac devices I've tested. Dosen't work on my new work Thinkpad either.

Does the headset need to support bidirectional a2dp also somehow?
Typical scam is: hack into a real state agency, observe all emails with customers, send email to customer to deposit some funds on some account on the day of the downpayment, 4-5 hours before the real state agency worker would have done the same. Collect 1 day worth of downpayments, and run.
I think it’s a naïve position. Mail was decentralized. Now it’s mostly federated among 4-5 big providers.

Historically, people value low cost and convenience over any other feature. Unless there is some GDPR like directive requiring decentralization and self hosting, it will likely stay centralized and become even more so.
pipenv solves some of the chaos. I do agree though. One right way of setting things up would do wonders.
Having flexibility for “pointless” commit messages is really important for research-y projects. Sadly, the practice often clashes with readers who have never really done research before.

A nice compromise is to use Github PRs plus squash-merge commits (search for “Github squash merge button”). For example, you might start a project, commit a bunch of “garbage” commit messages, and then decide the project is ready for initial release. Then take your branch, create a PR, and squash-merge it to your master branch with a nice commit message.

Need to update your paper on arxiv? Create a branch, commit willy-nilly, the squash-merge the result with a nice message (that perhaps references the updated arxiv version).

If for some reason your project grows like Caffe did years ago, then it can be time for smaller PRs and more organized commit messages.
Defective Chessboard Problem – A Visualizer
Samsung U28E590D and Philips BDM4065UC.
Cold Chain (and Colder Chain) Distribution – In the Pipeline
classic Barbara Streisand Effect https://en.m.wikipedia.org/wiki/Streisand_effect
Things you need to know about JVM (that matter in Scala) (eBook released)
I just found some issues on it on github, will try to sort it out, sorry for calling here first, just expected all dependencies to be there and didn't realized "dataclasses" could be a project name!:)
Gitpod is powered by eclipse theia
Interesting - from this and a couple of other comments I can see my idea that you just had to pay US income tax regardless was over-simplified and wrong.

It's still a little weird to me though, as someone who would expect my own country to relinquish all tax demands if I'm not actually there!
I made the switch to a Searx instance from Google about 3 weeks ago and it's been great for me (now I just get Google's results in Searx with added privacy).

Dark mode to save my eyes,
setting my own personal preferences for which search engines to use for results,
Cached results link and proxied links,
a files search engine...

The only difference is that I wasn't already heavily invested in other Google products. e.g. Gmail, Lots of saved Maps POI, etc.

For someone who is heavily invested, I'm not sure if the switch to Searx is worth the lack of convenience.
They're definitely not great but they're a good place to start.
They used the professors best at teaching. There are probably other professors better at doing research.
> Wow I'm not sure if I've ever influenced someone to write a book before.

I hope I am not disappointing you too much, but the book was already in progress when you posted your message! Coincidence! :) And the title is pretty much set at this point, I'm afraid...
Cute!

How do you say you don’t like a video/post/tweet without reading/watching those videos/posts/tweets?

Yes there’s a lot more academic fields than the “hard” sciences and vocational stuff, add them to the list too. That was not a treatise on teachability/learnability of a subject.

I seriously didn’t get your point, you thought of being sarcastic and bitter because I ranted about how I disliked VCs and Productivity gurus? Thanks, got your point, be well.
You’re right, sorry. I’ve been dealing too much with backends that my brain mixed up the words.
As a consumer I can't decide if I would rather see cheaper product prices but have to see shipping separate or pay a little more and not have to think about the cost of shipping.

It doesn't help that a lot of people that do separate shipping also bump up their shipping costs too, making a little profit on that as well.
Looks cool, Zillow is similar but it unfortunately makes you sign up first. I like this.

On an unrelated note, how did this link get onto the front page with only 3 points? How does the ratings thing work here?
Good to hear, thank you!
Unless you make it very expensive (which would turn legitimate users away, because they don't want to wait for a minute to sign up), that won't help, I think. You tie up a core for 5 seconds, but the server has 12 of those, so they can create 12 accounts every 5 seconds => still too much to handle in moderation.
What's Your Hourly Rate, Professor?
By this measure, Haskell is an abomination and Combinators are a 'code smell'. Not sure I agree.
I experimented with various approaches to client-side data handling and ended up realizing that I do not want a client-side database at all. I'd much rather hold data in language-native data structures (in my case, Clojure/ClojureScript). These are very powerful and there is zero impedance mismatch: after all, they are a part of the language.

Yes, you do need queries, but there are not many and they might as well be coded as functions. You can do all the indexing you want, if you need to, but JavaScript in browsers is so incredibly fast these days, that even a linear search works well for most cases.

Unless you are handling gigabytes of data client-side, of course. But that wouldn't make much sense.

Data modification needs to go through a server API anyway, because the client environment can't be trusted, so two-way sync would be useless. I want the server to perform data model operations while verifying everything, I do not want data sync.
Off-Path TCP Exploits of the Mixed IPID Assignment
Any society whose primary mindset is competing for resources will off itself long before it gets to affect anyone else. If you don’t transcend that primitive instinct, you’re already doomed.
Yes, I have, and I enjoyed it! Thanks for the tip.
MSCI ACWI IMI, FTSE ALL-WORLD, etc.

For that to fail, the whole world economy would need to fail as well, and at that point, no money on any currency is worth anything.
>They may hurt themselves in the process and sue us!

has a hacker ever hurt themselves by hacking and sued the company whose computer they were using?

Anyway I guess people can also buy their own computers if they want to play outside the sandbox.
> where a central entity (the business or corp) needs full control over the data.

Or where we want some central control. Until we solve decentralised spam, I really don't want to share databases directly with other users. If you can generate a new identity yourself and then inject your own content into other databases, that's a recipe for pain.

Federation kind of works, but I can't imagine a fully distributed slack for example. I'm on matrix and get the "elon musk wants to share bitcoin" images every day from telegram bridge.

Even in email, spam is still not really solved. I still get both false positives and false negatives.

> This also improves data security in general; there is no central place to hack.

I see your point here, but would also counter with: degraded security because we need N databases to patch every issue after the issue is public, rather than 1 database (potentially) before the issue is public.
Google is vulnerable. Never thought I'd be able to say that.
Sure. But there are good examples of decentralization making spam difficult or impossible.

One such is Secure ScuttleButt (SSB). You sync with friends and their friends (and their friends maybe, based on configuration). Now people aren't generally friends with spammers so you don't see their feeds. And if they are, a sufficient number of your friends would be blocking them - once a person is blocked by a certain number of people, stop syncing with them.

I am not convinced that SSB is a solution for all types of apps, but for Social Networks it works darn well. Oh, and zero ads too because you'd never sync with ad networks.
> The most popular consumer apps (FB, LinkedIn, blogs, photo sharing, goal trackers, slack, basecamp etc) shouldn't be centralized in this fashion. Data(bases) should be owned by users, and synced with friends and colleagues. So instead of a single centralized database, we need a million tiny little databases which are synced with peers.

> Tiny databases fit well into today's hardware capabilities landscape. We have plenty of fast storage, and powerful CPUs on computers and phones. It's time to stop building as if the server is the only place where queries can run efficiently. Truly serverless, that is. This also improves data security in general; there is no central place to hack.

Sounds like you're describing the MetaCurrency Project's Holographic chain pattern that is currently being developed:

https://medium.com/holochain/holochain-reinventing-applicati...

Edit: I looked at Gitsta, have you heard of Junto? they are launching their app built on Holochain (which is itself built using Rust) very soon: https://github.com/juntofoundation/Junto + https://www.kickstarter.com/projects/1958309948/junto-a-new-...
Why developers hate Ruby on Rails
In case of this virus, probably not a vaccine. Or not alone.
And any vaccine would need some period of widespread testing, comparable to how long it took to devise flu vaccines.

This one can jump species, reinfection cases have been described already, and coronaviruses in general are known to cause seasonal infections.
90 years of energy stored.

That is immersive about of power.

A petrol tank is basically a fire bomb.

Now take 90 years of driving worth of petrol.

If this is real it would be a huge threat needing to be well protected from damage.
One of the things I think would still be super interesting to try and set up is private single payer health insurance in the US.

If we cannot get the government to do it, we should just do it ourselves.

The only issue is the absolutely massive upfront investment necessary :/
I would guess clicks are a factor
Absolute Value Function in NumPy Array
Welcome to the economics of scifi/fantasy publishing. It's really hard to get people to start reading a book set in an entirely new world, but if you succeed once and they like the book, they are very likely to purchase new books in the same setting.

This is why all genre books are parts of trilogies, most of which get abandoned after the first or second book, (because the market just wasn't there, and the publisher just didn't want any more books after a flop), or which get extended well past any desire from the author or good sense simply because people keep purchasing them, the author needs to pay their mortgage and their new books not set in the established universe keep flopping.

I think Stross went into this at length at a panel in some con I was in.
Trigonometric Functions in NumPy
If there's literally nothing suitable that would be automatically done, what would you do? Allow people to do whatever at the cost of lives or force them to do what is right?

Usually in law, number 1 is called negligence.
There is also coder.com which provides more or less the same thing (running Visual Studio Code in the browser).

The code is actually open source and you can run it on your own machine: https://github.com/cdr/code-server

Hint: Set the following environment variables before starting code-server to get access to the official Visual Studio Code extension marketplace. This is against the TOS of VSCode, but some extensions are missing/broken on the alternative marketplaces.

SERVICE_URL=https://marketplace.visualstudio.com/_apis/public/gallery

ITEM_URL=https://marketplace.visualstudio.com/items
Better start fresh with proper OS architectures, https://www.redox-os.org/
> " he or some contractor could have built the same product in a weekend."

All available contractors where already busy building a FB clone on a weekend.
Wow, I'm really getting the HN hug of love! Thank you everyone, really appreciate it.

Please, whatever you do though don't post this to product hunt. I'd really appreciate the chance to act on the feedback I get here first.
Understanding the Flutter Architecture
What can look like a very small tax is not at all small when applied repeatedly (annually).

As an example a popular “Just two cents” plan takes a third of the value of a taxed base in 20 years and by 35 years, the government has received over half.
Kind of, but TOTP differs from passwords in important ways. Unlike user-selected passwords, the TOTP secret is guaranteed to be unique and strong as it's generated by the server. Observing some TOTP codes doesn't reveal the secret, so even if the password leaks the TOTP secret probably remains safe. Finally, the TOTP secret is typically managed in a device separate from the one where the TOTP code is entered, making it harder to steal.
Is it just me or is there something really buggy about the keyboard directions, on MacOS at least. Super confusing the isometric perspective.

The four main arrow directions work consistently (although it's weird that they're each diagonal on the map). But Fn+arrow seems to behave inconsistently - I have a lot of trouble moving my units where I expect them to go.

Just me?
I find it undesirable from a purely practical standpoint.

I want people working to improve the human condition. One way to encourage that is to reward people who meet the needs of other people, as evidenced by people paying them money for goods and services.
bug: if you hit back after going to the add images page after landing on the dashboard you get served a blank page.

Still exploring.
I really don't know. I've tried so many times with different products and got nowhere. Each time I've tried to build something better and I guess I've finally got there.

Probably helps that its a free product too.
Newest Blender on Raspberry Pi seems to be 2.7, which works surprisingly smoothly under a 64-bit OS. RPi4 has 96 Gflops of CPU FPU power, making it a reasonable option for 3D-rendering for kids.

I hope there are chances to get 2.9 to run on Raspberry Pi, especially once RPi Vulkan support matures.

How's Blender Vulkan rendering path doing? Is is possible to use it instead of OpenGL one day?
At that stage you are having different considerations.

And first contact is probably less scary if you can build mega structures in the orbit. Vanity mega structures if its sole purpose is to announce your presence to the universe.
Absolutely. I'm working on this at the moment, using a raspberry pi, and that does support 2 way a2dp, it still won't work until Apple and Android support it.
Log shipping works well for single master scenarios and these solutions can be combined with a partitioned primary key space for inserting new rows in the remote databases.

A two-way embedded/server relational sync is a much more difficult problem but it has been solved before. SQL Anywhere is a commercial relational database that has exceptional synchronization capabilities for fleets of mobile devices. Its MobiLink gateway synchronizes with heterogeneous DBMS servers like Oracle.

A new relational sync project should become familiar with MobiLink, in my opinion.
This is hilarious. One article about not being extraordinary, and most commenters explaining exactly how extraordinary they are. Being extraordinary seems to be the most ordinary thing after all.
"Use SSH rather than WSL" is not the same as the Dropbox comment. Dropbox was dead simple to use, and it did something complicated, keeping files on various machines synced. WSL requires setup and there's friction while you use it. SSH is actually less setup than WSL if you're using a standard Ubuntu Digital Ocean instance.
The domain was probably as valuable as, if not more valuable than, the product
It would make more of a dent than consumer restrictions on water, estimated 8% with current power generation, more with cleaner, up to 20%.

That said, replacing long distance haul with electrified rail transport would be yet better.
Never mind, it was easy: just add the following code at line 45 of demo.py:

# Output .ply geometry for each face detected
ocnt = 0
for face in ver_lst:
with open('face_%04d.ply' % ocnt, 'w') as f:
x = face[0]
y = face[1]
z = face[2]
n = x.size
print('ply', file=f)
print('format ascii 1.0', file=f)
print('element vertex %d' % n, file=f)
print('property float x', file=f)
print('property float y', file=f)
print('property float z', file=f)
print('element face 0', file=f)
print('property list uchar int vertex_indices', file=f)
print('end_header', file=f)
for i in range(0, n):
print("%12.8f %12.8f %12.8f" % (x[i], y[i], z[i]), file=f)
ocnt += 1
How would HN without JS or a URL minifier/redirector know about clicks?
> I like the idea of morally ugly things in games, but often they minmax away or are forced on you by great difficulty

I like how Witcher series does it. You have established character presented with hard dillemas with no obvious good option, implied bad side effects, and the actual effects are only seen after hours of gameplay, so you can't just reload.

And it's not "pat the puppy or kill it", because the character wouldn't kill the puppy and it makes no sense, it's "feed this puppy or save the food because you have long way to the next city".

The fact that you don't have perfect knowledge+delayed effects make all the difference. But it's best suited for story-heavy games like RPGs, I'm not sure it would work as well in mechanics-based game.
Not to diminish the need for further research, but [1]. I encourage you to consider the growing number of cases of cardiomyopathy in college athletes, who are presumably in the invincible 18-21 age range and also not particularly numerous as a population.

[1] https://en.m.wikipedia.org/wiki/Further_research_is_needed
Why this obsession with MKL on AMD hardware? I've long made measurements of OpenBLAS on "large" dimension serial DGEMM, at least. Even on Intel hardware between Westmere and SKX, with the exception of KNL, it was always at least within the sort of noise level of HPC jobs of MKL performance, and was always better than ACML on the generations of Opterons we used.

There are results for AVX2 systems with older versions of OpenBLAS and BLIS, which is AMD's BLAS at https://github.com/flame/blis/blob/master/docs/Performance.m... I haven't seen or made measurements for EPYC2 yet (and don't have results with the current versions online for Haswell and SKX) but I'd be surprised if AMD BLIS doesn't perform equally well on EPYC2. OpenBLAS serial DGEMM is very similar to MKL on SKX, for instance, with BLIS not far behind. I think AMD work has contributed to BLIS Haswell performance; their BLAS certainly supports Intel hardware decently, as well as aarch64, at least.

If you're interested in small dimension matrix multiplication on AVX2 hardware, consider libxsmm and AMD's recent "SUP" support in BLIS, e.g. https://github.com/flame/blis/blob/master/docs/PerformanceSm... MKL only got good at small dimensions because of libxsmm.

Off-topic for AMD, but in lieu of detailed figures, here are the first few points for measurements to hand on SKX serial square DGEMM with BLIS 0.7, OpenBLAS 0.3.10, and MKL mkl-2021.1-beta06 using the framework for the figures on the BLIS site:

size BLIS OpenBLAS MKL
2400 90.8 98.3 94.5
2352 91.4 97.4 93.6
2304 90.6 98.3 93.9
Unlike "Start Me Up", which was the Windows 95 advertising blitz (and of course they licenced the Stones)
Database immutability does not mean it's impossible to delete content.

It means you separate two use cases: retracting information (I remove an item from my shopping cart because I want another item) and purging data (I delete my account and all my shopping history because I don't want the shop to store my data anymore).

You can still purge data easily in Datomic, for example.
Future of Conversational AI Released
Here is the core of the issue:

https://lwn.net/Articles/118279/

Debian wanted to allow anyone to patch their firefox. Mozilla said OK, but not with our name attached to it.

And this makes sense on some level : No project wants to provide support for someone else's bugs.
Oh yeah I logged in to tell you that. I was having a lot of fun customizing the details of a page when I met with a 500 error. Love the idea and execution, the best part would be the presentation mode. Are you planning to add an optional background music option in the future?
Maybe the rainbow spacing?
Uh, it's complicated. I read this about three times, but I still don't know who messed up what: https://github.com/pypa/setuptools/issues/2350#issuecomment-...

Basically it seems the Debian python does not add site-packages to its search path, but manually installing pip (via get-pip.py) installs things there. And this all worked before, because Debian shipped a patched distutils, but now setuptools vendors that.
Ultra-simple integration for general card recognition and one-click card binding
> There's no way that should hold up legally.

I guess it depends on your jurisdiction? It’s (actually that whole document) meaningless in the EU.

Disclaimer: IANAL and that’s just my layperson’s understanding of the law regulating contracts here.
In my experience it's usually very intelligent people who manage to display moments of epic weapons-grade stupidity - usually through sheer hubris.
By that yardstick nobody should ever attempt to write an OS or programming language or game engine from scratch. I am glad there are plenty of individuals who try.
LPC 2020: GCC's -fanalyzer Option
With the release of WSL2 and the new versions of Docker that take advantage of it, I would say that most of the pain around the WSL toolchain has been resolved.

Compared with trying to get anything working in powershell or dealing with the slowness of git bash or Cygwin, WSL2 is a breeze.

The only pain point I still have is running Linux GUI applications. It requires running an XWindow server on the Windows side and letting WSL talk to it over TCP. Apparently MS is working on that now and hopes to have a solution later this year on the slow ring of windows update. That'll make running things like Cypress a hell of a lot easier and (fingers crossed) prevent me from squinting on HiDPI displays.
There is luck, I throw darts at the wall and see what sticks

I also make the darts and choose the walls
In the same boat. I had to put it on the easiest but I still fail sometimes and you often have to cross out like 90% of the images given, whereas with competitors like recaptcha it's often just 2 or 3 images.