skysight-inc/HackerNews huggingface dataset:
Seems like the limit is 32 characters. That probably covers 99% of passwords ever made.

Even if you use a password manager you can still benefit from storing your master password as a macro, that allows you to have a very long one (at least up to 32 characters) without suffering the negative effects of that (it being a pain in the ass to type all the time).

It doesn't seem unsafe to me, although at first glance it's reasonable to be suspicious. Macro memory is lost if the keyboard is unplugged for a short amount of time, like if somebody swiped it off your desk. Nobody will know you store your password in your keyboard unless you tell them. It may be difficult to even figure out what key combinations trigger the macro; you can make it very complicated with multiple layers. As far as I know, there is no way to pull the layout back off the Ergodox and view it in the configuration tool, so you couldn't just easily look up what the macro combo is. You use 2 factor on everything important anyway right?

If somebody had access to your keyboard to do this, it would be much easier to just plug a keylogger in between the keyboard and PC.

EDIT: it seems likely I misinterpreted what they meant.
Web Hosting Prices Set to Increase by 40% as CPanel Increases Licensing Cost
It's not. I had a low deductible and a low yearly maximum out of pocket. They didnt deny me for a pre existing condition, my knees, and I had 2 knee surgeries while on the insurance and my low deductible and co-insurance meant I spent less the $3000 for both surgeries combined.
That's the broader Trump Administration policy it's part of, yes, but this could potentially be one of the more lasting components should Trump be replaced, because it's eminently sensible if you accept that the basic overt purpose of the H-1B is good and the basic structure of the H-1B is a good way of serving that purpose.
Well, in my case, that situation would never arise (see previous comments). But, if I were the boss, I would advise the employee to either do that on their own time, or seek other employment. Again, I believe strongly that a work environment is not the place for personal politics or religion, unless that is the purpose of the business (the one concession I’ll make).
It's really everywhere due to the election. I lurk on a meme video forum that leans conservative and they have started deleting and clamping down on any political content. Some people really enjoy stirring up and having political debate but lots of the regulars can't stand it.
My Google leadership training experience – True Colors personality test [video]
Am I the only one worried about:

* The privacy of consumers who might eventually buy some of the stuff stuffed with their trackers.

* The scene at 1:49 where it appears they put a tracker in a plastic bag inside something like a coffee kettle.

* Sticking a tracker to a kid's toy.

What the hell is wrong with these people? I get they wanted to do a great investigation, but this seems so wrong to me...
If you really know how computers work I would say you are most aware of how they barely work.
> Depends, if you are an immigrant that wants to escape a dictatorship, this makes it much less appealing to hire that worker from that country.

H-1B is not a refugee admission policy.

Though Trump is against those, too.
There's also the fact that any of those messages can be reported for doxxing or screenshotted to show proof that they're doxxing. Also, Telegram group chats are encrypted, just not E2E, so they've also likely been reported by people who visited them. They are public, after all. (Which seems like a puzzling approach when you're doing something illicit but that's a whole other matter.)
Huge +1 to using long form options in scrips, even if you’re the sole maintainer of the script. Also if you have a command that takes many flags, breaking them out onto new lines can help keep it readable
Wait until you hear how much food foodie influencers throw away after they get their money shot (it's all of it.)
bash is not fit for any moderately complex task.

I dont understand its popularity. Normally sane people who like unit testing, CICD, SOLID principles, quality tools end up with a bunch of crappy scripts holding everything together. Please avoid.
Show HN: SmartGuitarAmp – Guitar plugin made with deep learning
> ...and as for you going topless in public, actually we do care; nobody wants to see that. ;)

Fair enough, I walked right into that one. :P
> Apple is forcing something? What?

Compelling via contractual agreement. This is typically referred to as "forcing" a conditiobn. Classic enforcement of a clause.

> Apple is giving Proton Mail the opportunity to come on to their platform and make more revenue.

No. That is not what Apple is granting PM. Me putting up a hello world app does not grant me an opportunity to make more (any) revenue. There are additional concerns and limitations.

> They are not forcing them on to their platform.

Correct.

> If Apple didn’t exist, PM would simply not even have this opportunity.

Incorrect. If Apple and Apple USERS didn't exist, PM would not be able to be utilized by those users from an Apple device (since nothing else is special about the platform). This is a matter of perspective which we fundamentally disagree on.

> Mobs come into your business and demand revenue.

That is one of many tactics.

> Here proton mail is coming into Apple’s business and demanding revenue.

Incorrect.

This is tiresome.

It's not really worth picking apart your statements when you are disingenuously starting from :

> if you want to be credible and taken seriously

Name calling and no-true-scotsman is all heresay or noise. The courts can (and eventually will) decide what is acceptable. Things are not looking good when a business starts squeezing blood from the stone (Apple's own market).

Good luck with whatever.
> need to prove that you are unable to hire anyone from the US for the given position, including actually having to show that you have interviewed candidates and had a job listing up

This requirement is called “labor certification”, and it only applies to the EB-2 and EB-3 “immigrant visas” (ie green cards).

There is no labor certification requirement for the H-1B.

The prevailing wage requirement applies to both the H-1B as well as the EB-2 and EB-3.
I have been (well, was) doing this to improve my handwriting.

Habits are hard to form, excuses are easy to make.
> Apparently destroying and dumping it’s the easiest and less resource consuming way to deal with returns.

Not the least resource consuming - the least costly to amazon. There is a massive environmental cost to the practice - it's just externalized. If the companies involved (amazon, the manufacturer) had to bare the full environmental cost, the calculation would often come out different.
The $16 USB-C magnetic connector that Apple should supply with every new MacBook
There's already a bunch of other posts disputing this claim (and I want to be clear that I agree with the disputations :) ), but the 2 cents I want to throw in are:

Having built an ErgoDox (from the online plans) I regularly use it and have good muscle memory for it. When I switch to a regular keyboard my muscle memory for that other keyboard kicks in and I'm able to use that one fine.

It's actually harder to switch from using my ErgoDox on Windows to the same ErgoDox on Mac because I use the bottom-left key for control on Windows and the bottom-right key for Command on Mac (both on the left-hand-side of the keyboard).

Even that's not too bad, but there is a noticeable 'switch over' time - maybe 5-10 minutes or so.
I think the parent is talking about the limit in Oryx, their online configuration tool. In Oryx, they limit macros to 4 characters. It's not because storing passwords on the keyboard is unsafe, it's because storing passwords in Oryx is unsafe. They're stored in plaintext and publicly visible.

In response to the parent, you can configure longer macros using QMK directly.
I’d only advocate using GC’d languages as a general (ie covering as many use cases as possible in one language - this isn’t even necessarily a good idea to begin with!) where it’s easy to dodge it. For example it must be easy and reasonably idiomatic controlling what is and isn’t heap allocated.

Obviously all languages are a tradeoff between ergonomics and performance, but it should be easy and idiomatic to use the back doors. Using mutation in F# or stack allocation in C# doesn’t feel like swimming upstream. If the language offers a comfortable experience for the 80-90% case and a not-terrible experience for the rest, that’s very good. If the “back door” is e.g. JNI or being forced to use SoA when you wanted AoS in Java that’s not very impressive.

I grabbed the 10-20% number of “programs that need mutation” out of my behind obviously, but it is highly subjective.
I don't know what it's like now, but, when I worked at Best Buy in the 90s, we had a couple of shoulder height palletized bins in the back. If a customer brought something back with a "didn't work" reason, it went in the bin.

We threw items in the bin from a distance, so they were definitely unsellable. I'm sure that lots of merchandise that would have been functional/sellable ended up being thrown out.
Facebook Natively Rewrites Messenger to Make It Faster and Smaller on iOS
Your Router Might Be a Vulnerability
I got a $350 Japanese made pump for my koi pond for $100 from warehouse. It was brand new but it leaked the oil from inside into the box so that’s why it was returned. I don’t even think it was turned on. Replaced the oil and works perfectly.
Agreed, I think Zappo encouraged it too. It isn't abuse its a feature.

I personally never send anything back, if I dont like it I just make do and complain.
The concerns people have with unions are not particularly amenable to statistical analysis. However at some point a sufficiently large collection of anecdotes does become data. Pretending people can hear stories of union-related BS so many times or for so many years and not take that into account is silly.
Home Assistant Door Chime via Sonos
Thanks for your response, very useful! May I ask you what companies you work/have worked for where you experienced what you described? (I understand if you cannot say)

Regarding "business architecture": your question is in a way already an answer to my question. "Business architecture" doesn't seem to be something that is done at digital-first companies like FAANG, but is something that is prevalent at brick & mortar enterprises that have IT. In my understanding it involves breaking down business processes and assigning them to different business domains so that applications/systems can be built to support those processes. It does not involve any technical choices.
If I worked for a toy maker who suddenly decided to make land mines disguised as teddy bears, then I would absolutely have to quit, if we were in a disagreement over why this should happen.

If I knew that they manufactured these land mine bears before I started, I wouldn’t be there anyway.
As others have said, tests are a great place to start. They give a bit more context. I also like looking for the entry point and seeing how the environment is created, and step through it from there.

Hopefully not self promotion, but I wrote a blog on this a while back: https://ruairidh.dev/how-to-understand-a-new-codebase
Instagram: Optimistic Execution (2011)
> is anyone doing so to your knowledge? current barrier as far as i understand is that it costs an estimated 4.6MM USD in compute to recreate.

That I know of, no one is looking into doing this in the open source community no. I think it's simply too hard and costly.

As I said in another comment, even if an open source org. managed to raise 4.6M$, they still wouldn't be able to do it as the infrastructure needed to train a model of that size is not available publicly on any cloud.

The cluster Microsoft built for OpenAI is about 285k CPUs and 10k V100 GPUs, this is absolutly huge. From GPT-3's paper we know the training required 3640 PFLOPs/days of compute.
A single V100 GPU is about 14 TFLOPs in half precision, so if you had 75 of those GPUs (which is already massive by open source standard, that's about 5 DGX-2 nodes), it would take about 10 years of training (by that same calculation, it still took about a month on their hypercluster if they used all the GPUs). And that is probably an optimistic estimate since I am using Nvidia's marketing slide to evaluate a V100 FLOPs.

Even if somehow an open source organisation was able to get their hand on a cluster half the size of the one OpenAI used, by the time they figure out all the data scraping/cleaning part, found the correct hyper parameters by experimenting on smaller models, and developed the many other things and tricks you need to do to train those models (optimizers, correct checkpointing/resuming strategy etc.) I believe one of OpenAI/Microsoft/Google/Nvidia would already have (or be very close to) announcing the next bigger model, and then it's back to square 1.

I think it's just too big a project (with too little usefuleness) to justify undertaking if you are not a massive organization.

The closest open source org that could pull this off that I can think of would be HuggingFace. They have the skill and descend funding, and they have the incentive (I believe they also want to enter that NLP API space), but they don't have access to that kind of compute infrastructure (that I know of). They also have been open source so far, but nothing guarantees that would share the checkpoints of such a model should they train it.
Even if you are totally self funded you still are accountable to your customers. For software companies this might not be so bad, but many small business owners will tell you they make extremely demanding bosses
Journalists tend to get a little more leeway for investigative purposes. And presumably they followed up and retrieved these trackers in some way. And will get rid of any personal information about the people who received the items.

Also, note they were expecting most or all of them to end up in landfills, them finding homes is an ideal outcome, but maybe not expected.

It also says something about the quality of returned merchandise and inspection of it: Amazon didn't find and remove the tracking devices, the products "looked fine" and were sent on their way. Perhaps that's one reason Amazon prefers to just toss stuff.
So cool! Using this for https://status.wakatime.com now and it's working great!
I don't see why this leaves nothing to discuss?
Plenty people who use ergonomic keyboards also use a laptop keyboard directly all the time and there's few complaints about that. Are you talking from experience?
It really was the original RISC in a personal computer; you could actually buy one (especially in the UK); and run it at home; the others were things that lived in computer rooms and drove green screen terminals.
Unitized body construction is standard because you can travel a longer distance for less money than with the alternative body-on-frame design. https://en.wikipedia.org/wiki/Vehicle_frame#Unibody

Electric cars are often compared to cell phones. Why have cell phones with replaceable batteries essentially died out in the marketplace? I have the same question about modular phones: https://www.cnet.com/news/google-lg-lenovo-modular-phones/
really really nice :)

I started with flash and learned some more with processing (p5). This really reminds me of processing.
Totally! That’s what I was going for. Least resource consuming but I’m talking about economic resources. Like man hours, packaging, transportation, etc.

The environmental impact is big! I hope this is being considered in their Climate Pledge.
Yes, you’re the only one. Anybody could put a tracker inside items they’re returning, it’s on Amazon to inspect returned items, which any brick-and-mortar store would do.
Memetics and Economics
>>But what do I do for fun once there?

IDK... but it could potentially be a lot of fun. Who's to say silicon sex isn't great. I say "potentially" because it depends on who writes the code. Hopefully it's not Zuck.
A funny side note with that... there was a recent theft of $3000 worth of Crest Whitestrips in my city that got some news attention. It was 3x 40-50 year old white folks that did the theft; the woman distracted the clerk while the two men loaded up. All caught on camera. AND THEY DIDN’T WEAR MASKS.

They had every opportunity to cover up their faces in a completely socially acceptable way and didn’t. C’mon.
> If you want to understand “how GPT-3 works”, you can just study GPT-2. Nothing is different architecturally between them.

This isn't true. At the very least, off the top of my head, GPT-2 didn’t have the sparse layers that GPT-3 has.
You need QM to even explain why electrons don't fall into the nucleus. So I'd say if you want to understand anything then you need QM.

There's this quote which I think applies here: if you want to bake an apple pie from scratch, you first need to invent the universe.
A couple of month ago I wrote a very short story here on HN that is embarassingly close to this one both in style as in topic (but created without (at least conscious?) knowledge of it though). A few people liked it, so here is the link:

https://news.ycombinator.com/item?id=22053288
Have you used one? I have always wondered how people find the side to side finger motions to be, in terms of strain and ergonomics. It feels like an unnatural movement. To be clear I've never used one myself.
Stop trying to push your new normal bullshit. Fuck yourself.
Paraphrasing Upton Sinclair, "It is very hard for a person to realize something, when continuing to enjoy their favorite food depends on not realizing it".
Just like the super bowl or World Series or whatever.
What's stopping you from getting a second-hand Threadripper 1950x or 2950x? They are extremely good workstation CPUs to this day.
I have some GPS data loggers that can do that. The fix isn't great or very accurate indoors, but it's probably good enough for this purpose.
I remember hearing from someone that in some parts of florida, the retirees would come down for the winter and just before returning to go back north, flock to the store and return a bunch of stuff.
I have a startup, 4 in US, 10 in India - top tier engineers.
I just hired my first H1B - while we pay well - bidding and salary escrow will just favor the big 5 - they are starving startups of talent in bay area any way.
Investors want me to get traction with $2M, our needed engineers are at $600-$800k comp (300 base) how do I make it work?

Regulation has unintended consequences. As an example trying to save retails investors from fraud means IPOs are fewer and large investors get all the growth.

Not to make this political, but highly educated and highly paid “employees” voting for “career politicians” and “bureaucrats” seriously overestimate their understanding of issues and competence. They are missing data points and should lean to minimum regulation.

Recent changes asking H1 to be paid >40th percentile of salary instead of 17th percentile seems sensible and enough.
Escrow doesn't really do anything between two established companies: Both knows the other will comply with a court order to pay up the share being fought over.
I wonder who else is using his animation engine to do videos. It doesn't mention it in the docs.

https://github.com/3b1b/manim
I also fell down the rabbit hole earlier this year, and eventually I learned that keyboard layouts are like the pirate code: they're more like guidelines than rules, really. I don't know why I felt weird about modifying my personal layouts, but once I got past that I had a much better experience. I don't think it has negatively affected my ability to type on "normal" keyboard in any material way.
I think it is actually the intended policy. It would probably be the same under any administration. Abuse of the current system essentially incentivises consulting companies to compete with each other based on salary structure. The ones willing to lay existing workers off fast enough, and repeat often enough, have a steady supply of low-cost workers and can undercut their competition. Other companies are forced to copy in a race to the bottom. This is obviously hurtful to the laid-off workers and their families, and to the unemployment insurance system's balance sheet. So there are obvious, purely functional and apolitical reasons to re-adjust the incentives.
It's true that IBM sold unit record (punch card) equipment to the Nazis, but we can be pretty damn sure IBM didn't sell them computers, mainframe or otherwise, because they didn't exist.
Why does an App Store have any say in the content of an online community? I’m sure there is plenty of content on Reddit that Cupertino censors may not like. Can / do they apply similar pressures to other social media companies with iOS apps?
I would have been perfectly happy if Microsoft had just kept making the Natural 4000 forever. Logitech has some 20+ year old designs they keep producing because for some people they're perfection, and I'd hoped Microsoft would continue likewise since it's been well over a decade with the 4000 too.

But nope, it's dead, and the replacement isn't nearly as good.
That’s an interesting ethics angle. Certainly a potential issue, but not likely to be an actual problem. They’d know where the item ended up, but not much about who it ended up with. Kid’s toys go to adults first on average. Knowing I bought a backpack on Amazon doesn’t say much, a little weird, but far better than a phone’s location tracking.

If the items were sensitive in some way (bondage equipment, say, or doctored home security equipment) then certainly.
I have the same problem with melatonin — it seems like artificial sleep because when I wake up 4-5 hours later, my body really doesn’t want to fall back asleep.
That's called adaptation not evolution. Nice try.
But they at least get a tax write off for a percentage of the value of the donation.
I hope you have also found some perspective as to why the post I linked to is an absurd thing for a CEO to write.
> The privacy of consumers who might eventually buy some of the stuff stuffed with their trackers.

I don't share your concern here. CBC is a reputable org. They can just turn off the trackers if the items appear to be getting re-sold to an end-consumer. Even then, I don't think it would be a privacy violation for a journalist to go and talk to them and say "hey did you know this was a returned item?" etc.

If the kids toy made it into the hands of a kid without that tracker being noticed, I'd have deeper concerns. I.e. what's stopping someone from putting razorblades or some toxic checmical in a kids toy and returning it? Someone needs to check over returned items for basic quality, and should DEFINITELY notice the massive tracker.
A different way the news is dividing America
I kept searching the article, thinking I must have somehow missed the examples - nope! How very odd to wrote an article about how much better QUEL was than SQL, and not have a single example of either!
That really isn't an advanced technique, that's just hiding behind Apple's skirts. The govt is no doubt quite willing to block Apple notifications, and Apple is obviously willing and able to kick apps from its notifications platform.

Russia for example is blocking all ESNI traffic... You either downgrade or get blocked. Which makes the big services shutdown of domain fronting so inexcusable, just kowtowing to China and every other regime.