skysight-inc/HackerNews huggingface dataset:
Yep. Not sure the details of AWS, but in GCP access to KMS APIs and specific keys is controlled by IAM, and you can set "conditions" on IAM policies to restrict access by things like IP of the request: https://cloud.google.com/iam/docs/conditions-overview
I don't think there's any chance at all this is going to happen. Security theater in airports is perpetuated by an agency that depends on fear to secure its funding and a government that depends on us fighting the "bad guys" (even if they aren't any close to as dangerous as they want us to think).

COVID fear isn't being perpetuated by any government agencies at the national level. If anything, the federal government desperately wants us to forget that COVID exists. Once the actual risks are gone, we're going to go right back to normal, though hopefully we will have learned a lot of lessons about pandemic preparedness.
Personally I like to use Simplify Gmail (https://simpl.fyi/) which was made by a former Gmail lead designer and Inbox founder.
That was one later instantiation. Republican radicalism was feared by the aristocracy in the 1700s-1800s. Perhaps they weren't uniformly called "radical" but republicanism was hated.

The group you're referring to was part of the "Republican Party" which was created after republicanism was victorious in the united states after the revolution. I'm not intimately familiar with the iconography around that period, but I would speculate that they were drawing on the old symbols of radicalism when creating that name.
The only part of PG's writings I've taken seriously was On Lisp -- which was excellent, TBF! Everything else I was made aware of later was so seriously skewed by Survivor Bias[0] that it wasn't even useful for anyone outside the "world" which he inhabits.

I don't place any blame on him personally, it's just that his day-to-day is so removed from anything close to ours that his musings are... irrelevant for the vast majority.

[0] I guess? Is there an Absurdly Lucky DotCom Success Bias?
That notion is something absent from both text and subtext of my comment. You are the one who inserted it. Investment and cost come in many forms other than the financial.
The RISC-V standard allows proprietary implementations, and several proprietary implementations exist:

https://en.wikipedia.org/wiki/RISC-V#Implementations
Why is RISC-V even so hyped up/successful? Other open ISAs precede it, and AFAIK the code density that RISC-V allows is disappointing considering the designers had an opportunity to start from scratch.
Is the Metaverse finally here? Now in open beta, Dual Universe's creator speaks
3Blue1Brown: Hamming Codes [video]
>If you could choose between a future where your happiness doubled but one of your loved ones died, or the unadjusted future, which would you prefer?

You'd really have to hate your loved ones for that first option to be viable.
Doesn't the SoC include the actual USB-A connector?
It’s also kind of a dumb question because there is a 99% chance it’s not the last day of your life AND most people would spend their last day of their life with loved ones, but if I’m alive for the next few decades, my loved ones have better things to do than hang out with me.

It sounds deep, but it’s not.
I, too, am apparently made from the same mold as standard large-sized gloves. Or extra-large, if they're Asian.

Not everyone is, however, and if you aren't, you're basically out of luck.
I agree with most of your comment and it's making me rethink some of my opinions. But is this accurate:

> Wealth creation isn't zero-sum, just because someone builds a business and creates wealth doesn't mean they're taking it from others.

I'd say that's exactly the model that some of the startups are taking. Uber and Lyft come to mind. A part of their wealth is coming from the pockets of workers who have to work for lower wages than before and get hit by depreciation that they didn't account for when earning.
WFH has some obvious trade-offs. But I'm not particularly sympathetic to all of them when office work has been the only choice for almost everyone.

Some of the downsides of WFH that the article points out, like how our office coworkers incidentally become our social life (and now we don't have them), are also symptoms of larger issues that I don't think work should be tasked to solve. The social isolation of the youth (before Covid) and the dependency on an office for many people to make friends were already pretty depressing parts of our society.

But so was having to go to work to do a job that could be done anywhere. Like everyone always talks about wanting to retire so they can finally hang out on the beach year round, but WFH is what lets you do that. It doesn't need to be a distant dream anymore for when you're old. I get that people were suddenly tossed into the deep end of WFH due to Covid instead of given a choice, and that many people aren't cut out for it.

But this kind of coverage also goes too far, I think, in a world where we were always forced to go to an office. I was looking for a job last year, and I had to search high and low for a remote job. For example, almost all the job posts on HN want you to come into an office. I was unsuccessful finding remote work in my more traditional search and fortunately found a good remote job through my social circle.

Office jobs have a certain stability and, even more important, familiarity. But I think that familiarity can be confused with an assumption that it's the way things should be.

For example, I agree that a future where most jobs are WFH will have to consider a solution for helping us find a productive way to work (like giving us a private office in a coworking space or letting us choose a stipend to set up a home office). But also consider how depressing it is to clutch on to office work because it gives you an escape from your children—it's really not a quality of the office work itself that you're after, but somewhat of an incidental upside that can (and should) be replicated in a culture of WFH.

What I mean to say is that I see a lot of office-work praise for what's actually incidental advantages of office-work (that should definitely be replicated outside of office-work), and it would be a damn shame if we as a society use those incidental benefits to damn WFH and regress back to the more or less office-work-only society from which we came.

I hope we find a good 50/50 middle ground where people have a choice.
>I enjoy finding out how many people consider media consumption a fundamental human right instead of the luxury good that it is.

Panem and Circensis.. Everyone considers food to be a fundamental human right- but entertainment, that is a great stabilizer of society and actually great for the environment. It costs nothing to copy it, and allows defacto to drug the masses with electric dreams.

One of the reasons, many nations actively sabotage anti-piracy efforts, while claiming to support them.
Citizen couch potatoe is the dream citizen of this lean, ecologic future tomorrow.
Ask HN: In HN threads is it possible to prevent long URLs from being truncated?
Forgive me if this is very trivial as I'm not very 'web-dev-literate'...

I like to save HN comments for personal reference and usually just cherry-pick and manually highlight+copy them into my personal notes.

Comments with long URLs will end up being displayed and subsequently copied as:

http://example.com/some-very-long-url-that-ge...

Was wondering if there's a simple way (custom css/js?) to force these long URLs from not being truncated in order to make manual copying easier.
Those work fine for me. Firefox 79.0 in Windows 10.
Stop thinking thoughts I don’t like!!
I actually read his ANSI Common Lisp book first, and being a newbie at the time, didn’t have any idea of his immense success. Definitely was very cool to find out that the author of book I read was a billionaire!

I’ve heard great things about On Lisp, so will read it when I get to a more advanced level. But honestly I feel like I could write a better ANSI Common Lisp book, it has so many convoluted parts. That said, it was written in the mid 90s so it isn’t correct to judge a book after 20+ years.
No WiFi calling??
Many password generators have options for such things though, like configurable length, character sets, etc.
I've had a thought about this that I haven't articulated before, so bear with me if this sounds a little rambly:

There's a large group of people who've become extremely scared as a result of what's going on at the moment. Most of them haven't actually evaluated what the risk for them personally is, yet they've made significant changes to their behaviours in the name of the health theatre.

On the other hand, you've got people who either are in life situations where that isn't an option or people who have actually done risk analysis. These people have not changed their behaviours much (beyond sticking to the random new legal requirements).

Now for the thought: I think that many of these behavioural changes (or lack thereof) will stay, essentially meaning that we've got a group of people who will act as before and a group that will act (and overreact) irrationally from now on. I think this is going to give the people in the first group an advantage for getting things done, which can have interesting long-term implications.
We do something similar for storing all DB entries (since our data is sensitive, as we're a financial services company). Even if someone gets access to our DB, all they'll get is garbage :)
> Something made our society irrationally risk-averse

Our brains are finely tuned to detect danger. If there isn't any danger, danger will be exaggerated or simply invented. Our society has been very successful at eliminating all sorts of dangers, hence the irrational view of the remaining risk today.
€12.3m, ouch.
Is there a distinction between an efficient market and a efficient market subject to propagation delays? It would seem that there is a limit to how fast information can be disseminated and the resulting reaction time. The market may always tend towards efficiency at some time scales and not at others.
If we can't fix our own planet from our (so far) relatively minor degradations, we have no hope whatsoever that we can expect to completely change another planet without our copious earthly resources around to help us.

It's a bit like the announcements "Wow! We've found a planet that we could live on easily!". The only problem being that planet is 'only' 200 light years away. Two hundred light years. It's going to take the Voyager space craft thousands of years to reach an equivalent distance of the nearest star which is but a mere FOUR light years away.

Whistling in the wind.
Amazon is claiming that Microsoft did not meet the requirements:

> In February, the Court of Federal Claims stopped performance on JEDI. The Court determined AWS’s protest had merit, and that Microsoft’s proposal likely failed to meet a key solicitation requirement and was likely deficient and ineligible for award. Our protest detailed how pervasive these errors were (impacting all six technical evaluation factors), and the Judge stopped the DoD from moving forward because the very first issue she reviewed demonstrated serious flaws.
Anyone know if Microsoft has a more recent response than:

https://blogs.microsoft.com/on-the-issues/2020/05/07/amazon-...

?
An escrow vs a currency.

(File under "hunch, but just guessing.")
You can kiss your ON DELETE CASCADE foreign-keyed data goodbye each time you use it.
> I have often found that if someone uses imprecise terminology, it is a symptom of a bigger issue.

What a spot-on observation. Maybe this is why I am always so pedantic, even when I tell myself that it's not necessary in said context. Subconsciously, I'm implementing this connection, and I can't turn it off.

relevant MCU quotation, from Civil War,

[ROGERS/CAPT] Sometimes... I wish I could.

[STARK] No you don't.

[CAPT] Yeah, you're right - I don't.
Glad you shared this anecdote. I've only had contact with him online and it's good to see he was such a great person IRL.
That's kind of what I'm talking about. Social inequality and economic inequality are tightly intertwined.
We can disagree.

I think once he’s no longer at the helm of one of the largest tech firms in the world, he’s lost a lot of leverage.

Not to say he isn’t still very influential, but he’s on the sidelines of business now. And being a leader in business means having a lot of power.
> md5(pepper + md5(password)) or whatever.

(Ignore md5)

No, I strongly recommend not to do so. The reason you put an salt in is to prevent multiple hashs to be the same (because people use the same password) with a pepper you still protect against cross reverencing the hash with other databases, but any two users in your database will still have the same hash and people tend to reuse passwords (or similar passwords) so this is a very real attack vector to get passwords without really braking any hash fully (E.G.: user with known password on different platform => try out similar passwords => broke hash for anyone with similar password).

So a unique per hash specific salt is the most important thing to do.

Pepper/shared secret can make it additionally harder to crack any hashes as while you know all salts (they are stored alongside the hash) you don't know the pepper.

Lastly there is additional data (AD) (named sometimes differently). Which can prevent some form of hash reuse attacks where you e.g. find some form of attack which allows you to override hashes+salt in the db (but not more). Then you could rewrite all hashes to known ones and get access. Tbh for many systems if an attacker can do something like this they don't need to do that anymore. But for other (often large and complex) systems it's helpful.

The idea behind AD is that you (somehow depending on algorithm) include some additional data which needs to match. The most common example is to use the user id (if immutable) as AD so this hash+salt(+pepper) is only usable for given user and never for any other user.

If you ever write a auth sub-system for a big enterprise system I would recommend you to use salt+pepper+AD(uid), for everything else I would think salt+pepper is enough. But never should you use a hash without unique salt under any circumstance. It's always the wrong path to take.(For password hashing.)

Or at least that's my opinion.
The nostalgia is strong with this one
I’ve never seen it suggested before that Thiel bankrolled Rogan. Did Rogan get bankrolled at all? I always assumed he had plenty of money from his TV work to cover the fairly minimal costs of starting a podcast.
> "wealth tax compounds"

And that's a rather misleading way to characterize the effects of wealth tax. When you think of compounding you think of compound interest, where compounding means the actual interest ends up being MORE than what you might expect (numYears * annualInteredtRate * baseAmount) because baseAmount grows every year due to compounding.

On the other hand, the wealth tax "compounding" works in the opposite direction, because baseAmount is reduced, not increased, by the tax over time, so the "compounding" aspect of the tax actually REDUCES the amount of tax you pay compared to a baseline where you didn't consider this effect, i.e. (numYears * annualTaxRate * baseAmount)

I don't think this choice of words was accidental on PG's part, as he chooses his words very carefully. He just chose to weaponize his words this time to push his political opinion, to make wealth tax seem worse than it is, which is something I've sadly come to expect from his twitter, but never noticed leaking into his essays before.
The scariest one is when ' is not allowed.
The small company CEO is a big one. Motivating people remotely is tough
Worst think about 1password, and lastpass when I uses it, it doesn't let you pick what special characters it uses, despite it being such a common thing on websites. So you have to manually add them, or swap out thing.
> 3 months later they're already forgotten and out of date. Some managers will try to keep it going for their teams, because that's what they were told to do, but that'll peter out once they realise no-one else in the org is taking it seriously.

> 6 - 12 months later there'll be a half-hearted attempt to reset and resurrect the OKR process, but after the first time people take it even less seriously the second time around, and after a few more months OKRs are never mentioned again.

At GitLab (I don't work there but it's explained in their public handbook), OKRs are updated/redefined every quarter. Seems a good way to avoid the issues you are describing.

https://about.gitlab.com/company/okrs
> Can you tell me why we must keep silent about their ethnic cleansing?

I cannot because I have not asked anyone to be silent about it. What I find 'moping' is refusal to move on by people who have the wherewithal to do so. Bengalis (my family included) have been persecuted with violence in many places [East Pakistan, Assam, Bihar for example]. I don't see them doing the analogue of Kashmiri pandits.

> Would you consider talking about the Holocaust as moping?

I certainly take issues with portraying Jewish holocaust as something special, and placing that as a talking point that lies above other genocides. I say this in spite of a handmade Anne Frank poster that hangs in my room.

The place where I went to school in the US the local right wing Jewish community raised a big fuss when another community showcased a violent and lethal part of their history using a symbolic display of shoes. Their claim was that genocide and such symbolic displays are an exclusive right that they own. This I totally reject.

After Mumbai 26/11 happened, I went to attend a vigil mourning the death of Jewish people killed in the terror attack. I was quite disappointed by the rhetoric displayed there. Not a word was said about Indian people who were killed in the attack. It was all about how Jewish people have been hounded everywhere. The implication being India is also such a place. This is particularly ironic because Jewish immigrants have enjoyed the greatest goodwill for centuries in India. You would know that Jewish settlements in India go far back in time than European settlements and that anti-Jewish narrative is an European thing that has no counterpart in India.

I generally dislike the narrative 'I am a victimized helpless snowflake who did nobody no wrong' whenever anyone plays that less than truthfully.

Bring the history to light, get reparations when applicable, and move on when one is in a position to do so.
The Stanford proposal you're talking about was named pwdhash.

This approach is sometimes called a "Deterministic password manager" and that might be the phrase you wanted.

There are several problems with this approach, especially with regard to the need to sometimes change passwords.

But the point your parent was making is that in the modern era (certainly this century) none of this was necessary, there are asymmetric PAKEs which render it unnecessary for a site to know your password at all in order to confirm that you still know what it is.
Wave Casper 15% Savings Labor Day
TSLA was an outlier. Something that I read (not on WSB) is that when it becomes too easy to make money on the stock market, that means there's about to be a big correction.
I get what you’re saying and business is often like that, but buying employees computer equipment for their home office is common for example. Tech is also on the cutting edge of pampering employees in exchange for better work. Why not an increased salary for more space at home.
> Again, this is not simple ignorance, it's something much more deliberate

what is it? i couldnt get it from the comment... just curious
Oh he’s still very influential, but in a much smaller pond of philanthropy. When he was CEO of Microsoft he captained a much bigger ship.
If a person ever even considers writing code which could generate either of these error messages:

"Your password is too long!"

"Your password uses special characters!"

... they are not only incompetent to write code which handles passwords, they have been so misinformed that they are an outright liability. They need to relearn everything they currently know on the subject and start over. Few things in the technical world instantly convey such utter anti-knowledge as the presence of either or both of those error messages in a codebase.
> protocol where miners are the ones to form blocks

Miner's would identify themselves
Has anyone ever found a study/research of how (in detail) Shockley hired technical staff?

In an industry famed for unicorns and associated prescient hiring, Shockley still has a distinguished track record for picking some pretty respectable bets on young researchers and engineers.
With respect to HPD, one contributing factor per DP 1.1a § 5.1.4:

> There is no mandatory time constraint on the Source Device’s response to a plug / re-plug event, but a Source Device vendor may want to impose a voluntary constraint similar to that for HPD IRQ events (for example, 100 ms) to ensure a good user experience via prompt discovery and configuration of newly attached devices.

There's a lot more going on behind the scenes than mere "scanning for a valid data frame and flinging bits onto the glass", and much of it has nothing to do with approaching technical limits, e.g. the dynamic of multiple product vendors finding incentive to reach consensus in standards development despite naturally seeking to cut each other's throats in the open market.
> Why would they pay you more than the minimum anyone than they would for any other cost center?

Maybe because you're a resource and not a cost center?

It's not always the case - some job roles are fungible - but I don't think that's the case with a typical HN denizen.

Let me put it another way. Why is paying the CEO more a better use of money to paying an employee more? Doesn't that build in a lot of assumptions about untapped value? And (at risk of getting out of my depth) paying the shareholders isn't the always the right thing to do. Don't most tech companies avoid giving dividends in favour of using the money to improve the share price? Which brings us back to employees and their potential value...
megacorp complaining about another megacorp because they didn't get the government handout contract, yawn
For many people it has.
An MP3 decoder is actually relatively tiny: https://github.com/lieff/minimp3 shows that it can be done in ~30KB of code. It's everything else around the player, such as the UI, that takes up the bulk of the size.
I’m baffled by the hostility and conspiracy theorizing Thiel provokes on this forum.

Maybe people are intimidated by his intelligence and contrarian stances?
There is also a lot of evidence though that the grownups in the room have started ignoring Trump. Look at how many of his cronies have been indicted by his own Department of Justice.
> For RHEL, virt-manager will still be developed independently.

By whom? The vast majority of contributions are paid for by Red Hat [0].

[0]: https://github.com/virt-manager/virt-manager/graphs/contribu...
From the site:

> We split up your donation intelligently with a randomized algorithm

Your description here on HN gives some confidence that something hopefully intelligent is going on. The description on your website is not going to give anyone (nerd or not) a compelling reason to use your site.

My suggestion would be to take the content, text, and layout of your website as seriously as you took the algorithm if you want anyone to use of this cool bit of math and code you built.
This is a good summary of a novel we've been writing based on our experience of tackling similar issues with clients. Working title: Misaligned Incentives. The best real-world solutions we've seen address this issue head-on by providing tangible incentives to the user in such a way that motivates them to act and doesn't harm the overall business objective. Example: product/service discount in a form of a coupon if you register a 2nd auth factor. Finding that balance is challenging, it is very context-sensitive. Selling it to the service owners is even more fun.