skysight-inc/HackerNews huggingface dataset:
That's one of the reasons that as an engineer I find Design Thinking and (especially) Human-centred Design so valuable—if done well it forces to you look at the problem from the perspective of human motivations, incentives and there's so much low hanging fruit there.

The story of the Good Kitchen comes to my mind: https://www.coursera.org/lecture/uva-darden-design-thinking-...

Digression: another valuable aspects of DT/HCD include: working as a natural extension to Agile/XP, deriving solutions to problems in a data-driven way, ability to find low-hanging fruit more easily due to the application of divergent and convergent modes of thinking, being cheaper in the long term, and finally—giving designers and engineers tools to shut down any pet/vanity projects coming from senior management, by cheaply proving them to be wasteful.
Right, but the concern isn't its serving as a parable for engineers. The concern is it serving as a parable for uneducated people about why they should rely on 'common sense' rather than experts in a given field. We just have to look at the modern US political landscape to see why that's a problem.
One of the ugly hacks you do in SAP to make it work is reading/changing variables and structures inside the SAP standard code because there is no API exposing them.

It is blessed officially as doing a "dirty" assign.
No problem :))
I always feel a bit disappointed when science catches up to traditional or observational knowledge. It feels like so much opportunity being lost.
I agree: sometimes, making tools during a game dev process gives you a LOT of insight on what is going wrong in a project. Happened many many times to me :)
I've got a huge tree that came down in a "1 in 500 year storm" lying outside my home office. I go out and chainsaw and axe it up some more whenever I need a break. Chopping firewood is about at the opposite end of the scale from coding, design or web site-ing.
Well, the simple objection would be that the more remote network services you include in admin login management,the more likely you're going to have a problem when you least can afford it.

SSH configs in distros are moving towards not even doing rDNS lookups (which generally just delay logins for the timeout period when there's a problem).

That doesn't mean some hybrid solution doesn't have merit though.
(Although with Doyle in the giant head roster, the Thinker's choice of Poe to deduce Batman's identity is notable... speaks to Bats' gothic nature I guess.)
None of the previous posting got any traction, so I'm not sure how you could see a doom emacs post every month. The previous one seem to be from 2 months ago, and the one before from 8 months ago. That doesn't seem that frequent (though I'm familiar with HN rules). But you're right, I could have checked before sharing the link.
Almost all of this is about a 2013 trial and not this present proceeding at all. And the claim (from that trial) is that Manning provided Assange with bytes from an encrypted SAM or that it's only part of the password hash.

It's actually pretty aggravating reading trial documents when nobody present knows what they're talking about, it might as well be a Star Trek script, this is why it's so nice when the trial judge or at least some of the lawyers know what they're talking about (e.g. the Horizon scandal in the UK) but we can't have nice things most of the time.

Here's what the transcript says Manning provided:

80c11049faebf441d524fb3c4cd5351c

That's 16 bytes = 128 bits = one Windows password hash.

So straight away it's completely reasonable that this is in fact a Windows password hash, and in the absence of evidence of how Manning obtained that value it's only speculation that this is actually encrypted somehow (e.g. because it is from an encrypted offline SAM). And yet Assange's defence apparently has hours of such speculation on tap, for whatever they suppose that's worth.

What Assange talks about doing is using Rainbow tables. This would be applicable regardless of which type of Windows hash it is (or Assange thought it was) but crucially if the password is strong then you only get a result if this 128-bit value is an LM Hash. The risible LM Hash turns the first seven characters into one 64-bit value using DES, the next seven into another 64-bit value (DES again). It doesn't work on long passwords, if you have a long password then you can't have an LM hash. This of course is one reason somehow who tried to obtain both hashes would only get one...

The NT Hash is MD4(password). If the password is "qwerty" or "manning" that's not difficult to find, and Rainbow Tables that will be fairly reliable for simple passwords with NT Hash are readily available and would have been years ago too.

But if the password is sixteen random characters then MD4(password) might as well be Argon2id(password) for all the good that'll do you. It's just too many combinations.

So, for all we may ever know that 128-bit value is in fact a legitimate NT Hash of a good password.
I think the button coloring makes up for that. I've signed up for loads of services in the last month and the primary colored bright button being the CTA has been consistent enough for me.

In any case, the numbers are the numbers. Whatever gets most people into an account is what it is. Many guys just fail that part: fill in a thing and we'll contact you. Yeah, no thanks. It's a $200 / mo product not a mortgage. Spare me.
Yes, I’m on a phone. I don’t see a way to use it in-browser. I don’t install apps unless absolutely necessary (no need for the a app to have more permissions than it needs to function)

I don’t see why this has to be an app. I’ll have to wait until I get in front of a laptop to try it in-browser (if I remember).
Hi, just thought it was super interesting. Not farming anything.
"Vertical risk stratification" as a search phrase returns very few results. Could you explain?
>since it seems to be designed to weaken trust in complicated engineering processes with its underlying "look at these idiots".

Which makes total sense as those shouldn't be trusted, a lot of them are over-engineered and over-budget.

Like using an expensive processing setup for your 1GB "big data" when a small Python script would do the job -- and similar crap tons of companies do.
Came from the gym after listening to a compilation with Tool and Iron Maiden on it.I opened the link and searched for the ranking of any Tool album uncertain there is one on it (if it is, it would probably be Lateralus) but being certain that Iron Maiden's "Number of the Beast" will be. They weren't. Found 6 Kanye West albums. One of his albums is 30 places above Dark Side of the Moon. (at least Public Enemy is higher). Respectfully, will never open the 500 list again
The output file is pure JSON, and I tried to make it legible and easy to parse for quick use cases. So it should be quite simple for any game dev out there with basic parser knowledge to make its own importer. But at some point, I plan to try to have a proper "official" importers for major engines, to make devs life even easier.
But their whole proposition is 'it's MS Office but free.' It's even in the name. I bet most people they try to sell to it's replacing MS Office. Having their own, slightly worse, version of the MS Office UI is bad for what they want to achieve.

And do they have the time, money, and research chops to be doing their own UI research, even if it was a good idea to be doing it?
are these supposed to be real time? they stop working after capturing a few frames
This is an important counterpoint.
> No amount of crippling Emacs would help there. It can only spoil it for existing happy users.

I am surely against "crippling."

The initial topic of the discussion was how to make Emacs accessible to the new users. I don't suggest making fixed changes to anything, only allowing somebody to easily select different defaults which correspond with the keyboards available today. Today's keyboard has no meta key. Old keyboards didn't have a lot of keys that today's exist and have expected behavior in GUI -- potential Emacs user should have a possibility to turn on "consistent" behavior for everything that can be consistent, and the help should be easy to read without having to divine what META key in the "easy" case could even mean.

Of course the old users should be able to use old behavior.
other persons known sounds like normal legalese to me.
This gun and murder analogy strikes me as being in bad taste, in this instance. Julian Assange is not being accused of murder by the US government, the particular charges in this case revolves around a hash of a password and alleged attempts to compare that hash to a table of similar hashes and, possibly, finding the matching clear text password for that specific hash value.

This is a far cry from conspiracy to commit murder, with our without a functional gun.
Daniel Ek commits to investing €1B in European ”moonshots”
MS Teams is the new OS :).
> I would rather switch to farming

Beware of John Deere though, I heard they're the Oracle of farming ;)
A question that ought to be asked is the relevancy of quantum computing through the perspective of the average user . Since its inception quantum computing has been an intellectual field grounded in academia. Unfortunately, much of the general population is not aware of the quantum computing's existence. In my argument, quantum computing need not be commercialized until it is further developed.
"Sting" operations are nothing new for the FBI. And depending (as your link states) how the FBI goes about it (case in point[0]), it may or may not be "entrapment."

[0] https://en.wikipedia.org/wiki/Abscam
Ok, they're at least history, so maybe we'll switch to that above.
A common way to implement this is through SSSD which can cache keys locally when the LDAP server is not responding.

https://access.redhat.com/documentation/en-us/red_hat_enterp...
Obviously not if they're having to shoehorn Linux in there just to attract developers!
I'm not sure. "Start Trading Bitcoins" is a bit generic and long, but may be fine when always visible. "Get access" may not be something one would even be required to sign up for.

An advantage of "Sign Up" is it's consistency: My usual flow is that I'll look around the website to see whether it's something worth signing up for and when I finally decide to do it something like "Start trading Bitcoins" might throw me off.

Here's another sign-up-related UX-crime however: Disrespecting your current users. A lot of services bundle their log in/sign up functionality and prioritize the "sign up" part so much that it becomes incredibly hard to find, especially when it's a fancy short sign up form that looks like one for logging in.

It always sends a clear signal about how much you care about people signing up to your service vs. people actually using it.

Tumblr is a great example of the opposite: They just present a "log in" page by default and make the "sign up" a little harder to find: This creates just a tiny bit of FOMO ("huh, how do I sign up? Is it invite-only?") and makes the user feel better about actually signing up.

Of course Tumblr is a social medium for teenagers and not a SaaS, but in general anything one is expected to use at least semi-frequently should not be difficult to log in to. A good option is to put the forms on equal footing or just ask for the e-mail address and direct the user depending on whether it's already registered.
I actually have no idea. I would think so but I know I've been asked to enter it, at least on some sites.

But if they do get the email address, it would be nice if Google gave them some sort of proxy address and required that anyone using Google sign-in accepted that address instead of requesting the real one.
With benefit of hindsight, I wonder how I would have driven that policy initiative, if I had been pro-monopoly. I think as the largest customer (US Fed Govt), my quid pro quo would stipulate keeping IP and mfg domestic, and curtail the financialization (execs, board, and biggest investors goosing the stock price, buy backs, etc).

In other words, The New Deal. Forging national security thru appeasing both the war hawks and labor.
More like air handlers, pumps and things. The ISS is actually a noisy place, for example.

https://soundcloud.com/colchrishadfield/space-station-noise

http://www.spaceref.com/news/viewnews.html?id=831
I'm not using start kits myself but it's always interesting to see how a fully configured emacs can look. The default emacs is a bit austere. As you say, as a demo for users. Anyway, it's an interesting project, even if I wouldn't use it myself.
That's a great way of doing it: The initial friction is essentially 0 and you're already locking the user in a bit.
Yes, the code base is Haxe and it "transpiles" to JS + node + electron. The idea is I'm more comfortable with Haxe but I really wanted to have a ~somewhat~ future-proof technology for the app (ie. JS/HTML5/CSS)
I suppose, I was thinking the appliance caught fire (neighbors electric kettle did this a few year ago, not IoT). Shutting it off doesn't put out the fire. Or, soup boils over edge of pot - I have to clean that mess either way.

Maybe once IoT is sufficiently advanced, with robots and stuff, it turns into the "household servants for the Every Man" noted above.

And I'm not anti-tech. I have some IoT stuff (cameras) that serve no real purpose other than "look, I have cameras!"
I'm actually really surprised that toddlers were able to associate the key "I'm in a car accident and I'm 5 years old" with "Cellino and Barnes are the first people I will call because I realize I need an injury attorney"

because

I only have the key "Cellino and Barnes" in my head, associated with "[play Cellino and Barnes jingle in my head"

I was rear ended by a big Raptor Truck in my little crappy car and had a little bit of whiplash. I skipped the doctor and everything was luckily fine in a few days and I never called an attorney and never even thought about it. Now I'm wondering if I was stupid :)
>The concern is it serving as a parable for uneducated people about why they should rely on 'common sense' rather than experts in a given field.

Well, often people should rely on common sense, rather than experts -- which more often than not are mere consultants with expensive solutions to non-problems to sell.

"Trust" is only good in an era of honest experts that don't look for a quick buck over science and rigor -- or that when they do there are functioning mechanisms in play to punish them. And our era has been increasingly getting less that (regressing to pre-50s levels of quackery), with many experts and policy advisors being nothing less than glorified lobbyists and salesmen (and that's despite their good qualifications)...

Like how tons of medical procedures are not needed and dangerous/expensive, but still recommended by clinics for the bucks...

https://www.propublica.org/article/unnecessary-medical-care-...
It seems unlikely that Microsoft could ever move Windows over to a different kernel and save on development costs that way, because no suitable kernel seems in sight.

For example the whole Handle and ACL infrastructure has no real equivalent in Linux (at most a bit on the filesystem level) and having to rewrite that for Linux seems pointless and would bring enormous backwards compatibility risks. Office is easy compared to the tightly integrated Windows Server/Active Directory stack.

But that still doesn't mean MS has to invest a lot of R&D in the NT kernel and stack. For userspace they indeed have electron, and on the kernel side they still have Hyper-V, and are even supplying patches to Linux for better integration.

Perhaps eventually Linux and NT will be mostly invoking virtual drivers with the real 'hardware control' work being done in the hypervisors, and the NT Kernel can just be considered 'done'.
> The best solution (and I believe a bunch of research backs this up) is to better incentivize your line workers and reward them appropriately. I know one study in particular that showed broad-based stock option ownership among employees was correlated with stronger company results, while options concentrated just among senior execs was not correlated with business success.

It can be also quite easy to make mistakes with these incentivisation schemes, fe in finance I've understood they can quite commonly cause problems.
This reminds me about one of the topics that has been bothering me along my career as a technical
pm: when is the diverge part of the design process is finished? per my experience, many orgs underestimate the benefits
of “people thinking” and overestimate the benefits of being able to forecast when the solution will be available. And this, imho, is key when talking about startups vs corps... corps worry about the process because they can afford a subpar (8m) solution.

Ofc i’m being pedantic here and things are always more complex but... I have one question. How do you say in a safe way: We need more time because I FEEL that maybe, there is a 2$ solution for
this problem.
Tesla’s Nemesis in China Is a Tiny $5k Electric Car from GM
Please compare and contrast "reasonable" and "legal" interpretations.

While such a comparison might rub you (and me, for that matter) the wrong way, it's the "legal" interpretation that holds in a US Article III court[0].

[0] https://en.wikipedia.org/wiki/Federal_tribunals_in_the_Unite...
Where does it say it's not?
All this is why I love Sign In With Apple.

Some devs just aren’t going to change, so this at least reduces the friction and lets me try their crap without giving them my email or any other info.
Sounds like a corporate version of Psycho-Pass (a dystopian society where everyone constantly has their emotional well-being monitored and corrected by the state) https://en.m.wikipedia.org/wiki/Psycho-Pass
Yeah, what the hell do "Get started" and "Learn more" mean? I have clicked these generic CTAs <a low single digit number> times in my life.
Weird, I've never found Docs to be "buggy" at all.

I found it limited in formatting options 10 years ago... but these days it supports sections, columns, line spacing, paragraph borders and shading, a thousand open-source fonts, to the point where I haven't actually found it lacking in anything at all. E.g. you can lay out a newsletter no problem.

I mean obviously there are obscure things only Word can do... but these days Docs is pretty grown-up. The only time it "falls apart" is if you're working on a 150+ page document, but even there it's improved a lot (it used to slow down at ~30 pages).

But in any case, I was wondering about LibreOffice Online, not Google Docs — you know, specifically for people who want online editing that isn't Google.
Can you make an official Unity plugin.

This looks interesting, but I'm too lazy to venture beyond Unity in my game Dev journey
People always say this but it’s not at all clear cut to me that this is covered by the appeals court’s ruling.
Imho it's just a part of the insight porn type genre. We innately enjoy simple solutions to complex problems. It give us a massive dopamine boost.

So these will always exist because the meme is strong. I wouldn't worry too much about it.
Then instead of 100B on maybe getting to usable fusion, let's spend $XX billion on solving those problems instead.

What would $100b specifically directed into panel conversion efficiency, grid improvements, and battery recycling look like vs the equivalent amount on fusion? I think we'd get a lot farther toward total clean energy conversion.

That said, we absolutely should keep funding fusion research at some level - assuming we can get all the pieces working, it would be a great boon, especially for off-planet power somewhere down the road. However, the next 20 years are probably THE critical moment in stopping the worst effects of climate change, and I think betting on solar+battery tech is more likely to pan out in that timeframe than fusion, especially since we already have the tech to roll out a huge amount of solar panels RIGHT NOW if we wanted to spend the money.

We're past the point of optimal solutions. We're running out of time, and compromises are necessary. Trading catastrophic sea level change in 50 years for panel+battery recycling problems today seems like a fair enough deal to me.
That's roughly where I have landed as well.

Also including VScode and remote-ssh :)
I have two. They serve mostly as a notification system for somebody in the house that I'm not expecting, but not a security problem (housekeeper, adult son drops by for some reason, neighborhood friend drops off a roll of fabric for my wife - but that's everybody with a key, so like I said, not a security thing).
Artisanal Software
Everyone is surprised about the payola in these lists?
By making your own tools I don't mean making your own knitting needles or torch head - though some do that too. I meant making custom workbenches, custom harnesses for the parts you're working on, modding the tools to be more ergonomic or to serve a different purpose than intended, etc. This is all "making your own tools" too.

I have a woodworker in my family and from what I observed watching him at work, he mods his tools for ergonomics, and if the piece he's working on is tricky to use with his machines, he constructs the necessary affordances to make it easier.

Similarly in programming, you won't get far if you only keep to what your IDE offers you out of the box. Configuring your IDE, writing scripts, writing software that automates your work - it's all part of the craft.
I rely on white noise in crowded offices or when I just need to get in-flow quickly. So far I have used ASoftMurmur with following config [1], but working on a space ship seems cool and I will try it.

[1] https://asoftmurmur.com/?v=000000001a3d00240000
Haha, yes. Time is a thing no one can make for me. But they cannot make it for themselves either. So I take what is offered gratefully and make what I can from it.
sorry, I was on mobile and didn't check closely enough. it's worth noting that the maximum clawback is 100%, so in order to have any benefit to claw back at $220k, you would need to have at least four children under 18 years of age. if we assume that of the BC families receiving at least $1 in CCB, the probabilities of having four or more children and earning over $200k are uncorrelated (I would hazard a guess that the actual correlation is almost certainly negative), then the number of families paying 20.5% provincial income tax and 9.5% clawback is probably around 52.

in order to also be paying the 3% pharmacare deductible, you'd also need to be spending at least $7k per year on medical expenses, as well as making less than $316k before taxes. on the whole, I would say that paying that much medical expenses would make someone disinclined to have (more) children.

in conclusion, while I was wrong to say that it's impossible to pay all those taxes simultaneously and marginally, it seems highly unlikely and I doubt that anybody in BC actually pays that marginal rate.

https://www.canada.ca/en/revenue-agency/programs/about-canad...
There's another element where the consultant simply enumerates all of the things that the employees have already been telling management for years. And of course there's an entire spectrum in between.

Some things are only important once a dollar figure is attached to them.
Apple does this, Google doesn't. Signing up with your Google account may also allow the app to see way more than you might want - always check the permission request. "Read your e-mails" and "Post videos on YouTube" may well be in there.

It would be a great move for Google to offer something like Apple's proxy sign-up.
You've never tested a dev script to the nth degree and run it once? Or designed a maintenance tool when an SQL statement will do?

I think the fable to teach engineers to consider ROI and simple solutions rather than to belittle the process, though I recognise it has that danger.
I think on desktop it’s an “obscured” slider. On mobile it’s more clear. Still appreciate the GP photo link - much easier to compare.