skysight-inc/HackerNews huggingface dataset:
I find that repeating the last/most important three words helps, because it gives the other person the opportunity to talk more, especially if they feel cut off. This way, you come off as listening but accidentally cut them off for reasons other than you not paying attention or intentionally trying to interrupt — the lag that sometimes happens makes things worse
The forklift truck drivers who never leave their desks
> You trusted them enough to buy the products

Sorry, I wasn't totally clear. I have Nest cameras and smoke alarms. I don't have Nest Security products, but this announcement is making me feel even more nervous about continued Google support than I did before (see below).

> I'm not understanding how these products are not useful anymore for you. They still perform the same functions as before no? It's still supported per Google.

Speaking only about Nest's cameras and smoke alarms, they actually don't perform the same functions as before. They mostly don't change (Google rarely seems to update anything), but the apps have gotten much, much bugger.

Ex: Home Away/Assist (which tells Nest when you're away from home using your smartphone GPS) just does not work with Pixel phones. It never has. I contacted Nest support, and they confirmed it and said that no one was working on fixing it.

This is typical of Google products. Features stagnate, bugs appear, and no one seems to be behind the steering wheel. It would be absolutely astonishing to me if anyone working on these products actually use them, because basic quality-of-life features are never implemented.

The worst thing that's happened is that my Nest smoke alarms just stopped reporting their status. All of them. They now say their status is out of date by 100+ days and increasing, and I can't fix it. They all say they're in perfect working condition, but how can I know for sure?

> I think it's ridiculous to expect anything else.

I expect Google to pay attention to my products by fixing bugs, improving software, and (at minimum) maintaining the level of function they advertise them to have.

Lots and lots of other companies do it. It's absolutely reasonable to expect it. Google just doesn't have it in their DNA.
I would say the Scott Walker election was more closely linked than the national president race (but we'll see)
Find someone to sell you Monero. Give them $1mm and your address. Receive Monero.

Alternatively, buy bitcoin through your bank. Use it to buy monero on an exchange.

Alternatively, wait 6-9 months and exchange your btc with xmr using an atomic swap, on-chain.
I thought this was going to be about BGP, DNS, and the root certificates. The actual topic (twitter and a few other random websites) is far less interesting.
> Isn't there a better way?

There's always a better way. But when you're going up against gigantic incumbents with way more power than everyone else, you don't get the better way. You get the way the powerful decide it will work. It's like politics, or economics. When a system is so large and unwieldy, significant change can't come unless the ridiculously powerful minority forces it. If they have no reason to do so...
Pretty thorough but with one disappointing gap (disappointing for me at least). While it does cover my game Dumuzid (probably the first roguelike focused around multitile monsters) it skips over another I made a couple years later which is a little more notable for placing 1st in 7DRL 2018: DEAD FACE (a turn based bullet hell with hacking and multitile mechs). https://jere.itch.io/dead-face

Considering I made each of these games in a week I don't think making such mechanics is particularly difficult. At least not technically. They do require some new kinds of design challenges (how to deal with getting stuck, what's actually interesting about big enemies, representing tiles visually). It's a mechanic with a lot of unrealized potential.
I mean that sounds like a normal account registration process for most things that exist?

what more are you typically putting in, other than an email address, maybe a username for uniqueness, etc...?
Monero is inalienable.
Would be funny to see the same article about TSMC be posted 3 years later.
The ICC hasn't been given any power by the United States (nor by Russia or China). If US _military_ personnel were brought there, it's obviously going to have a diplomatic/military response. It would be be an act of aggression.
That's correct, but 1Password stores a static secret (the password) and this may be re-used by less security-minded folks as you probably know. WebAuthn servers only store a public key which is useless in case the server gets compromised. WebAuthn also is phsihing proof by having browsers verify the domain the credentials are used for.

See more at https://webauthn.guide/
> if we can create a digital system which provides for code <-> data duality

So.. LISP?
AWS, for example, only permits one MFA device per IAM user account. I have four computers and four tokens. :/
The biggest tech cluster is the one on the internet.
Note that not all vaccines prevent you from being infected. That's called "sterilizing" immunity. Many vaccines simply prevent you from getting sick, but you can still catch and spread the disease. Where COVID-19 vaccines will fall on that range (it's not a clear binary) isn't yet known, and will likely depend on the type of vaccine. This is why the relatively dangerous (https://www.who.int/csr/don/01-september-2020-polio-sudan/en...) live-Polio vaccine is still being used in some areas: the safer options protect you, but don't provide enough immunity to actually wipe out Polio entirely.

There's also the issue that the fatality rate for the <19 year age group is very low, about 0.003%(1), and even lower for the slightly older school aged crowd (approximately 0.001%(2), 1/10,080 of the 85+ demographic). It'll take time and large studies before we can actually prove that a vaccine is safer than COVID-19 for that age group. Note how a previous H1N1 vaccine turned out to cause serious narcolepsy in a minority of people: https://www.cdc.gov/vaccinesafety/concerns/history/narcoleps... There's also the problem that you need enough people in the test to be exposed to COVID-19 naturally: vaccines can in some circumstances make infections worse - an issue that has made developing the closely related SARS vaccine hard - and you need large studies to detect that in cases like young people where the disease isn't very deadly to begin with.

A safer option would be to provide vaccinations for adults working in schools, starting with those most at risk, and working down to least at risk as safety evidence builds up.

1) https://www.cdc.gov/coronavirus/2019-ncov/hcp/planning-scena...
2) https://www.cdc.gov/coronavirus/2019-ncov/covid-data/investi...
Let's say we take Westervelt's tweet thread as the unvarnished truth. Some observations about that:

Westervelt noticed problems with Roost but tried to gently correct those and give her second chances.

Westervelt noticed problems that were recurring: that is, even after being nudged and given a second chance, Roost made the same mistakes more than once.

Roost now does something that ended up being very public. Now, finally, conveniently, Westervelt decides this is the last straw, and cuts her loose.

I'm not saying Roost is a saint, or that Westervelt is being disingenuous. In general, people try to do the best they can with the information they have at the time. But I think it likely that Westervelt's decision was also influenced by the fact that this storm was public and heated, and if she'd done nothing, that might have blown back on her. There's nothing inherently wrong with that, but let's at least acknowledge that's what could have (and IMO probably) happened.
The IRS is offering $625k right now to anyone who can break Monero's privacy:

https://www.forbes.com/sites/kellyphillipserb/2020/09/14/irs...
enphase is like the linksys of residential solar. no one piece is unique, but they have a product line that both nails the featureset well and is very cost competative.

Its hard to tell because industry numbers like this are private and expensive to come by in detail, but Enphase is likely #1 if not #2 in the residential "solar + storage + saas-platform" market. That means their saas platform can then turn around and act as a "virtual power plant" that bids into different markets and services.

imagine if linksys had figured out some bitorrent like protocol and managed to not just sell the equipment but also make loot in the CDN market.
Making Meaning – Against “relevance” in art
Explain Nazi Furs.
> This is a great article around why "corporate welfare" rarely works out.

Any data to back this up? It's generally accepted that subsidies are effective in many cases (see corona virus stimulus packages).

This Foxconn deal was poorly thought out and horribly mismanaged, but it doesn't sound like Foxconn lined their pockets with taxpayer money. The subsidies encouraged them to take a chance, and it didn't work out - spectacularly.
So, for "pure" tasks which take input and produce output only at the very end, the Hashlife algorithm [0] allows you to run arbitrarily many generations of life in constant time at the expense of a huge internal cache (memory usage). That is, with Hashlife you can trade memory for computational efficiency. That means that for a sufficiently difficult task like mining bitcoin, this computer could be simulated faster than any conventional computer could run at the expense of using more memory.

My question: does anybody know what the ratio of trade-off between time and space is for Hashlife? I haven't been able to find anything from my searches.

[0] https://en.wikipedia.org/wiki/Hashlife
Split-Second Phantom Images Fool Tesla Autopilot
Actually, use it to reduce risk. If you have no visible wealth you are largely immune to extortion, kidnapping, fraud, and robbery.
But what would WebAuthn for localhost even mean ?

The credentials in WebAuthn are bound to an FQDN (typically the name of the web server but e.g. news.ycombinator.com would be entitled to ask for WebAuthn credentials for ycombinator.com) so it's not as though this is irrelevant.

I can imagine a few dozen extra lines defining a special allowance for localhost in the WebAuthn spec., but then you're also building a bunch of special backend code to handle that too and for what?

I built a toy WebAuthn implementation to understand it better, but I did it on my vanity site, and I don't feel like it would really have been easier without.
In worked in 2016, so it's worth a second try even if the second trip around doesn't pan out to the kid doing anything wrong
Thanks for the link <3
LXD 4.7 released with significant improvements in containers/VM management
Literature of past plagues and seeing our present reflected in a mirror
A number of apps like the Chick-fil-A one explicitly advertise these as features:

> - Advanced Persistent Device Identification: Identifies individual mobile devices for both iOS and Android platforms, even if they have been reset or if the application has been reinstalled.

> - verifies the integrity of the application in which it is embedded to ensure it has not been modified or infected. It also analyzes all other apps installed on the device, and reports their reputation and the presence of any malicious code.
That was very enjoyable.
I'm very excited to see this discussed! Even without pressure from government entities, I would certainly want some sort of way to prevent something like child abuse content from being uploaded to my server, so I'd love for a system like this to work well.

1. Would the system discussed have anyway to diminish "cancel culture" like attacks? For instance, if a user were to say something egregious like "Empire Strikes Back is bad", what is preventing especially enthusiastic fans from labeling them with having uploaded child abuse content. Presumably that would be a good way to get that user banned from most popular servers. Is there a way to "appeal" this is the moderator or server host is a bad actor? Is having a good enough reputation before an incident like that enough to not be blocked everywhere?
2. Is there a way we could test this outside of Matrix? It seems useful to social platforms, particularly other decentralized ones. If it could be done in a platform independent way, it could be a nice open source collaboration (granted, how people interact on different platforms might be enough to make that impossible to generalize effectively). I also ask, because this sort of thing is really dependent on how people interact, so "play testing" it might be beneficial to getting a more realistic design going early on. Even doing something low-tech might find some issues that should be addressed.

Is there a room discussing this in particular? I'd be interested in participating.
Yes, it’s a unique for each site which makes webauthn extremely phishing resistant. Even on look alike domains the origin doesn’t match and your phone has nothing to send.
Is there an alternative solution to CAPTCHA's?, some of us would still would like to keep the bots out.
I prefer the option that people actually want to use so that communities can thrive. This is a requirement for a chat community that is easy to overlook in favor of other advantages, but those advantages aren't very compelling when you, say, are sitting alone in a dying IRC server.
It's not that simple for the parent-teacher. For 90% of kids, their "interests" are video games, playing with toys, and TikTok if they're older. The hard part is getting your kids interested in things that can lead to an actual education. If you are waiting for your kids to become interested in History in order to teach it to them, most of them would never learn it. You have to do the hard work of making it interesting in the first place.
On-chain atomic swaps with Bitcoin reduces fiat exchange to btcusd exchange.
Corporate subsidies work very well in certain conditions. The biggest is in investing in industries have big long-term potential but huge upfront costs. Power generation is a good example. Subsidies also tend to work best with a portfolio like a VC fund.

The other option is for a very mature industries with inelastic demand where subsidies go directly to pushing down prices. Like with food and fuel.
>Whether folks want it or not, public schools will probably require it of all students.

Unfortunately this will be quite some time away still. None of the vaccines currently in phase 3 trials are targeting approval for use in children.
The person above you asked if friend-of-a-friend was even possible, and it definitely is. The discovery tools of boost/reply aren't always perfect, but they are a somewhat naturally formed friend-of-a-friend discovery protocol honed from much Twitter experience.

Anyway, yes, the initial bootstrap is always the toughest to get those first few accounts to even have friends-of-friends to explore. Like I said, I used a Twitter bridge that let people link their Mastodon and Twitter accounts and if you signed in with Twitter it would show you everyone you followed who had a Mastodon account connected.

Unfortunately, that bridge (which was a part of joinmastodon.org) got shut down a couple years back due to maintenance headaches (Twitter API shifts).

Asking friends on existing social media if they use Mastodon is still probably the key bootstrap tool even with fewer direct bridges. There've been some "follow me on Mastodon" threads here on HN, too, and I have seen at least a few Mastodon addresses in HN profiles (and more rarely in Twitter profiles and on blogs and elsewhere). It's also a bit of a shame that Keybase's Mastodon support only really supports the Big Instances by design since instances have to be added manually by Keybase staff last I checked.
No, to exploit this, you just need to either 1) work inside a CA, 2) be a spy and infiltrate the CA, 3) use your nation-state powers to force a CA in your borders to do what you want, or 4) be a clever hacker hack a CA. There are "only" 330 different complex organizations in probably a hundred-plus countries to try, so I guess this is pretty unlikely.

But even if it is, you can actually hack the entire system with just a BGP hack. Today, if you issue some false BGP routes, you can MITM LetsEncrypt (or one of the other 329 CAs) to sign a valid cert for you. It's not hard because validation is automated and depends on proving you own IP space... and IP space is just what your router's BGP table says it is at the moment you issue a cert.

I would not depend on the kindness of banks giving back money on very large scales. They care about themselves more than they care about you.

You're right, DNS registrar and nameserver attack is another great attack and usually they're pretty vulnerable, so that's another good option.
Yeah I agree with clusterhacks! I have a background in medicine and it will definitely be more difficult to get anything decent without a formal background in the field. Only because the risks associated are typically higher, so this is almost always a requirement for every decent job/career in that space. I saw that you mentioned you were in a bit of a situation, but I'd say try to do everything you can before eventually deciding whether or not to give up. It'll be difficult, but definitely not impossible. Your previous experiences might help you go through the courses a bit easier
If a person unfamiliar with the nuances of American culture tried using some of these terms in the wrong context or with the wrong audience, it could be a real social train wreck (pals?). Using some of these terms could just be signaling that you and your group must be native born American.

Also no one over the age of 50 should be seen topless in public or ever refer to a group of people as “peeps”, “fam”, “party people” or “superstars”.

Did this community mean to be so Ageist and Nativist. (See how hard this is.)
will tell my friend about it as hes an amateur dm. maybe he could go pro.
To clarify (since I can't edit), we use Slack as a replacement for email, and other apps for chat. It's great for sending quick code snippets. It's good for notifying the whole team when there's a new build for testing, as well as getting comments on that build. It's okay for bringing attention to a thing.

Notifications during office hours by default hurts it - instead of people not sending messages outside work hours, everyone just uses something else for notifications.
He's got a master mariners license, which to me is way more cool than any of the computer stuff. Legally captain a merchant ship of any size, of any type, operating anywhere in the world.
> to me, is fucking terrifying.

The non-intuitive thing about basic reading and math skills is this:

If you delay the learning, you learn it much more quickly.

So the (ordinary, with no developmental issues) kid who doesn't read until 10, can exceed his or her peers in just a couple years.

The very unfortunate corollary, however, is this:

The kid with developmental issues might go undiagnosed for a longer time than necessary, with long-lasting repercussions and follow-on effects. It's even possible to reinforce a mild issue and turn it into a larger one.

This then becomes a classical optimization problem. Optimize for the common case for broad benefit, or optimize for the rare case with significant negative effects. There is no right answer for everyone.
Exactly. Many parents just buy a homeschool "curriculum" and do an accelerated version of the public school lessons. Making various subjects interesting is a skill in itself for the parent-teacher. Young kids just want to play with their toys and friends for the most part.
Static Hosting a Ghost Site
If you look at the previous pieces of the author, it becomes clear that this is not about the people involved here but the larger narrative the author wants to write about, with is cancel culture. You can see this with another piece, asking basically if the Amy Barrett case went too far.

https://arcdigital.media/karens-all-the-way-down-cd530b0c0a0...

This is more or less in line with HN's general "slippery slope" sentiment, and is likely why the piece was originally submitted. It doesn't seem like many here care about the particulars, and the affected community appears to be small. So the article as posted is just rehashing a macro debate with no contextual add or news.

This thread gives actual perspective from a coworker of Roost's, the aforementioned cancelled podcast. A lot more nuance there. I made a post from what I could glean from the actual situation as an outsider here: https://news.ycombinator.com/item?id=24832827
I live in a cold climate, so I was happy to be done with TouchID. Then coronavirus happened and now it doesn't recognize me with a mask on.
This might work for outliers/higher IQ/elite people in the HN community, but consider this:

1. School is probably the best public invention to systematically distribute knowledge to the masses. Some like to point out "dropouts", "self-taught" geniuses or the "lucky few" as models instead of exceptions to the rule.

2. Not everyone is self-motivated to learn. Children, at critical developmental ages, are more prone to be led astray than "follow their passions" (at this age, really?). They will more likely be manipulated by vices if not constantly monitored. Note: Even adults struggle to find their "passion", good for the lucky few.

3. Not all parents are good teachers. Usually, responsible families understand the value proposition- they wish their children have a better future- and education is the most assured/common ticket that provides these opportunities.

4. School's purpose is not to teach obedience or even getting a job. It is there to teach us critical thinking, and consequently, how to be a good citizen. An educated population is also less prone to fall into totalitarianism. Ex: Nazi Germany and Mao's China burned books and persecuted the educated (1984 style).

Public schools, with all its flaws, are the best instruments to free the masses.
Knowledge is democratized power to avoid the corruption that absolute power entails.
Like avoiding extortion, kidnapping, robbery.
Maybe you should talk to a former Marine Drill Instructor to get some creative alternatives...
You might want to Google that spelling ;]