skysight-inc/HackerNews huggingface dataset:
Oh wow, okay this makes things a little easier. I've always struggled with logging in as the SSO-flow has domains that I haven't added to the "Always open in X tab". Hopefully the functionality gets incorporated into the MAC addon eventually!

.. I say hopefully, man I feel guilty getting so much use out of these addons when I could be actively contributing. Fuck it, donating.. https://donate.mozilla.org/en-US/
Yeah, using the trace data to get RPC latency and success/error charts is useful, but that's just another branch off the data-stream. Your metrics system needs to inspect every trace, so your database only needs the ability to send you a list.

(Jaeger seems to have Kafka support so you can do this in real time. Haven't tried it.)
People who produce content for YouTube and have had content - or entire channels - removed for no good reason might disagree.

Also, there's the issue of public trust. We have no choice but to trust Google not to skew its search results. It's not obvious this trust is justified.

Google can literally make individuals, companies, and events disappear from the Internet. You can put up your site or your business and if Google removes you from search you might as well not exist.

A moment's thought will suggest that this is exactly the same as the YouTube problem, but on a larger scale. And that's an unhealthy amount of power for a corporation that isn't subject to any oversight or accountability.
Has anyone tried Keeper [1]? It seems to be feature complete, cross platform, etc

[1] https://www.keepersecurity.com
> MS accounts ask for a crapload of information

You can set up children accounts, linked to yours. This is nice because it requires minimal information and allows you to set parental controls.
They made $331M in “profit” on $397M in carbon credit sales at 100% margin...meaning their core business still loses money.

Also they have $14.5B in cash but only reporting $6M in interest income. Weird.
Not the OP, but Dasher is a classic example that works very well for a single 2D input like using a joystick: https://youtu.be/0d6yIquOKQ0
I mean...personally I've been detained a number of times for doing perfectly legal things. I've beaten speeding tickets, I was the victim of an assault where despite video evidence I was given a citation for disorderly conduct. The US has executed innocent people, recently. It isn't even about 'innocent until proven guilty'...the idea that someone on trial must be guilty of something is incredibly common and deeply problematic for our society, not just our system of justice. It presumes that policing is not just always accurate but automatically accurate. It is propaganda used to marginalize certain communities in a very intentional way.

That idea is so incorrect that it is disqualifying from participating in this conversation further.
I don't see much difference between cis / cisgender and teen / teenager.
Click the settings "cog" and enter your self-hosted address. Of course you need to have setup your own self-hosted instance first :)
> I'm definitely interested in the subject though if you've got some good reading material?

My PhD's a good starting point on this subject https://chrisseaton.com/phd/, or I maintain https://rubybib.org/.

> This really surprised me. Completely eliminated? I'm really curious how this is possible. Do you have any links explaining this?

Through dynamic deoptimisation. Instead of checking if a method has been redefined... turn it on its head. Assume it has not (so machine code is literally exactly the same as if monkey patching was not possible), and get threads that want to monkey patch to stop other threads and tell them to start checking for redefined methods.

This is a great example because people said 'surely... surely... there will always be some overhead to check for monkey patching - no possible way to solve this can't be done' until people found the result already in the literature that solves it.

As long as you are not redefining methods in your fast path... it's literally exactly the same machine code as if monkey patching was not possible.

https://chrisseaton.com/truffleruby/deoptimizing/
‘Ugh’ Tasks: Why Basic Items on Your To-Do List Are Suddenly Insurmountable
Work on Encrypted Client Hello (the current iteration of encrypted SNI) continues and you should anticipate that Chrome will deploy it as the draft approaches Last Call perhaps next year.

Because of the Don't Stand Out principle one of the most important factors for success of ECH is the deployment of ECH GREASE, which is to say, willing clients just claiming they want to do ECH even when talking to servers that don't really have any hidden services at all. Chrome's participation in that probably makes a real difference to whether anybody actually tries to block it.
Yeah, same. I find keeping my fingers on the home keys makes me twist my wrists outwards, which gets uncomfortable pretty fast. I mostly try to minimise wrist action in general.

I've actually had a Planck EZ for a few weeks now and I agree it's probably not very ergonomic for the classic qwerty touch typist, or at least not much better than a normal keyboard barring the programmability.

But since I don't do that anyway I find the keyboard to be pretty nice in terms of customisability and avoiding stretching.

In general I feel my hands are used most naturally in close proximity to each other (at roughly abdomen height) so I'm drawn to small keyboards with lots of modifier keys. A spherical keyboard would be pretty interesting to try out.
I have not yet tried https://www.minetest.net/ but this provides some motivation. Do others have experience with it?
To me this would be unacceptable, but hopefully I don't play Minecraft.

Just imagine that one day it will happen the same way with Github. You will get the condescending bullshit explaining why it is a gift and so much better to you that you have a MS account...
The truth is that Microsoft makes it clear that: "all your data belongs to us"!
Isn't it tracking you anyway with all these Like(TM) buttons spread around?
Ballish – a pretty fast code search tool for Linux
GP only said "carry a gun on your person" not "pull out a gun". The former is constitutionally protected, the latter can be a crime - there's a big difference.
Perhaps it’s been a while since I signed up for a Microsoft account. Sounds like it’s changed... before they wanted full mailing address etc.
In-game name collisions between Mojang and Microsoft accounts will be a problem. They say you still keep your Mojang name in-game, but you might have to change your MS account username if it is already taken. As soon as people realize this there will be a run on registering popular names to try and squat on them on the MS side. There will be problems.
At American Film Market last year, everyone was abuzz about Quibi before it launched. They appeared to have checked all the boxes. When they launched, my wife (who also attended AFM and is also in the film space) became a user, and I experienced it vicariously. A few thoughts on why this failed, and then simply shut down instead of being acquired.

1) Their hypothesis that short form content was desirable was deeply flawed, and I think based on an assumption that online attention spans are short. This is not true with film and TV where the trend has gone over to binge watching very long form content e.g. Vikings, House of Cards, etc.

2) There was no way to watch their content on a big screen. So that introduced another assumption - that no large market segment would want to consume their content on a bigger screen. We actually tried to watch it on Amazon Fire and the hack is horrible.

3) They decided they wanted to attract a number of A list directors and other talent and blew not only a lot of budget on that, but they also wrote their terms so that after two years they lose exclusivity and after 7 years the content reverts back to the creator. This is insane, if you consider the investment and long term value around the films and series that Prime, Netflix and Disney create. The direct effect of this was that there was no business to sell when they decided to shop the company.

4) Quibi suspended releasing new content during the recent protests, while continuing to burn investment cash. They should have adapted to the times. Even post 9/11 certain films were put on hold, but those were films insensitive to current events. I can't imagine all their content fell into that category.

They still have $850 million in cash and have decided to call it. Sounds like Whitman and Katzenberg actually have a good shot at recouping some of their $10.5 and $5.5MM investment respectively. Which leads me to wonder whether they had that money to burn in the first place. Doesn't exactly feel like a "failure isn't an option" approach - and with that cash still in the bank they could take all their learnings from the initial launch and do a hard pivot. Although the business model may be so fundamentally flawed, for the reasons I've described above, that a pivot isn't even feasible.
the suburban fear mongering standard. See also: debates over expanding rapid transit in most large US cities.
That’s because the Quip toothbrush company actually knows how to do marketing.
Where can I request a refund?
Meta-ironic because it is in the article :)
In my opinion, it should be a bare minimum for something as important as a password manager to be free software. Others have mentioned Bitwarden and Keepass in this thread, both of which meet that criteria, but personally I'll stick with pass since I don't need a GUI.
Tesla releases Q3 2020 results
Incidentally, it's the same as network propagation delay between neurons in the brain and muscles in the hand.
Please don't rewrite titles to editorialize. This in the site guidelines: https://news.ycombinator.com/newsguidelines.html

(Submitted title was "“will require a Microsoft account to play – including Minecraft Java Edition.”)

If you want to say what you think is important about an article, that's fine, but please do so in the comments. Then your view will be on a level playing field with everyone else's: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...
This feels like the kind of scaremongering that was common about open source on general a few decades ago.

A script that calls a piece of software is not a derived work. Otherwise, all build systems that have ever been used with GCC would have to be GPL-licensed.

Why would your example be different?
Presumably the alternative to 'a password manager as a service' is 'a local password database and password manager which is not a service'.

This can be something like password store, or keepass, where the attacker needs both your password database unlock key / gpg passphrase, but also needs access to the database / gpg keys, which means either physical access, or at least access to your local files.

I think there is some merit to pointing this out. If 1password allows anyone to make login attempts against their service, that means some bored teenager with a botnet can make attempts at your password.

I use password-store, and I could tell you my gpg passphrase right now, but you still couldn't access any of my passwords. You'd need to get access to my yubikey and my psasword repository before you could do anything with that passphrase at all.

I think it's true that a setup like mine, which requires a physical hardware token to decrypt my passwords, is more secure than a password service, however I also think the parent comment is totally wrong. 1password without a hw token isn't the most secure option, but it's way better than password reuse on random sites.
Couldn't you block all requests to Segment's integration point?
This is a really good discussion of more than just two ways of thinking of DevOps or SRE, as anti-patterns and patterns.

https://web.devopstopologies.com

Every shop has reasons it may be more suited for a particular one of these over others, or possibly even an anti-pattern being better than most patterns or patterns done badly.
So... this post casually outlines how one could go about build a Global Network Load Balancer at Google-scale. Amazing!

A few naïve questions:

> You can make any protocol work with a custom proxy. Take DNS: your edge servers listen for UDP packets, slap PROXY headers on them, relay the packets to worker servers, unwrap them, and deliver them to containers.

Curious: Wouldn't SOCKS5 here be a like-for-like replacement for PROXY? Why would one choose one over the other?

> WireGuard doesn't have link-layer headers, and XDP wants it to

Is the gist here that WireGuard doesn't because it is Layer 3? And that XDP sits one layer below it?

> Jason Donenfeld even wrote a patch, but the XDP developers were not enthused, just about the concept of XDP running on WireGuard at all

Could someone please explain this? Is it that XDP here didn't want to add a support to delegate routing onto WireGuard?

> It's a little hard to articulate how weird it is writing eBPF code. You're in a little wrestling match with the verifier

Would NetMap or Intel's dpdk instead make for an non-enterprising choice here? Don't they have a similar profile in terms of throughput? I guess, one has to use a userspace TCP/IP stack like gVisor's NetStack or LwIP to go with NetMap/dpdk?

> Those configurations are fed into distributed service discovery; our servers listen on changes and, when they occur, they update a routing map

How is this system implemented? Curious because uptime, availability, durability, and latency must be of prime importance for such a service. Is there a blog about this detailing the challenges inherent here? Or, does it use consul/etcd or some such out-of-the-box solution?

> a simple map of addresses to actions and next-hops; the Linux bpf(2) system call lets you update these maps on the fly.

Clarification: does this mean the maps are already in a format the bpf/2 command understands, or is something else going on here?

Thanks.
> A starting investment of that size probably qualifies it for a record in the fat (as distinct from lean) startup size category as well.

With that kind of funding, and given who the founders are, maybe “startup” shouldn’t be used at all? The linked article didn’t use that term, and I mean, a startup that becomes worth $1B is called a “unicorn”, and this venture was launched with more funding than that.
The article says that it's written in rust, and also implies that it is a gtk app. That doesn't sound like an electron app to me. Did I miss something?
You mean to say customers get a degraded experience on CGNAT.
You can filter pretty much any packet. The downside with using TCP is you are looking at individual packets, which may be out of order, that sort of thing.
Summary:

Auto Revenue: $7.611B

Automotive Gross Margin: 27.7%

Total Revenue: $8.771B

Total GAAP Gross Margin: 23.5%

Net Income GAAP: $331m (non-GAAP $874m)

EPS (GAAP): $0.27 (Non-GAAP $0.76)
Mandate interop?
I have been using LasPass since many years ago. There's an extension for Chrome and for Firefox. On Android I use the app and even though experience is not that "automatic" it works.
I am surprised nobody mentioned LastPass is there any reason I should know?
Then you should explain why you think what you think instead of just throwing around self proclaimed "unpopular opinions" without any explanation.

With the information you've provided (i.e. none), it really just looks like an uninformed opinion.

Why do you think the points I listed above don't make password managers more secure than password reuse?
Gartner’s IT predictions: DNA storage, expanding CIO roles and more
I created twitter about a month ago with the intention of using it like a multi-purpose RSS feed and reader. I decided to only tweet about updates and new content from my side. And then to find others that work in areas I care about and follow them. Trouble is - nobody else seems to use twitter like that. They post memes, retweet things, share their political opinions, ask questions, get into discussions, and I see all of that when I follow them. It's just too noisy, currently haven't deleted it but heavily considering the option.
Python does have a lot in common with CL; but the problem with Python is that almost any call you cannot statically inline, which is most of them, can change the semantics of everything else - you've just called math.floor() ; are you sure it wasn't just monkeypatched to assign 7 to all local variables who have an 'x' in their name in the caller's frame?

Most of these uses are very rare, but the tail is incredibly long for Python, and the problem is that you can't even compile a "likely normal" and a "here be dragons" versions, and switch only when needed - you need to constantly verify. The same is not true, AFAIK, with Common Lisp - being a lisp1 and having a stronger lexical scope than python does.

Shedskin is a Python to C++ compiler that mostly requires the commonly-honoured constrained that a variable is only assigned a single type throughout its lifetime. (And that you don't modify classes after creation, and that you don't need integers longer than machine precision, and ....); While many programs seem to satisfy these requirements on superficial inspection, it turns out that almost all programs violate them in some way (directly or through a library).

The probability that Shedskin will manage to compile a program that was not written with Shedskin in mind is almost zero.

Nuitka was started with the idea that, unlike shedskin, it will start by compiling the bytecode to an interpreter-equivalent execution (which it does, quite well), to get a minor speed up - and then gradually compile "provably simple enough" things to fast C++; a decade or so later, that's not working out as well as hoped, AFAIK because everything depends on something that violates simplicity.
This is a beta.
https://news.ycombinator.com/item?id=24851543
Do you have a counterpoint, or do you have this opinion solely for the sake of having a contentious opinion?
Swisscom is one of the leaders in Europe when it comes to 5G. They had 90% coverage until the end of 2019 for example.

https://www.srf.ch/news/wirtschaft/swisscom-chef-zu-5g-man-h...
Even though you thought of ways in which A is more secure than B, your position that B is just as secure as A remains?

Also: What is, in that case, the proper solution ordinary people should follow?
So, your only response is to make an insult based on my comment history.

What a compelling, “high brow” response.
I use pass(1) as well. I love that it allows me to use my yubikey.

Also a 1password user. Can't deny it's a wonderful product.
I'm in Edinburgh and have travelled to London fairly frequently. It's a £30 uber to the airport, arrive 2 hours early, £20 for a flight, and £25 for the Heathrow express.

The other option is the train, it's 4.5 hours, comfortable, but costs £250. It's a much nicer journey, but regularly much more expensive.
Well I guess I can do that now that I have to get a new account... I don’t really use parental controls. I just block their devices entirely when they don’t listen and right now they use them in public space of the house since they are pretty young. Might experiment with the safe dns stuff from cloudflare at my router.
This is true, but doesn't actually answer the question of what attack respecting the not-before date is supposed to prevent.
Three B's of Creativity
https://en.m.wikipedia.org/wiki/Games_for_Windows

Microsoft’s incompetence when it comes to building brands tickles me to no end. They tried this back in 2006 and it worked as well as you’d predict this new attempt to work. I like to imagine that it’s the same lifer bringing up this same idea every 10 years in some back Microsoft boardroom.
Everything you said is true; making the summons more understandable and reminding people will not solve the structural issues that effectively criminalize poverty in America.

But, it has helped in some cases, and its such low-hanging fruit. If you're working 3 jobs to stop the state from taking your kid, you probably don't have time to waste an hour parsing a user-hostile summons. This certainly doesn't fix everything, but it's a start.
One interesting thing about the Swiss system is they've prioritized reliable connectivity and frequent service over high-speed service. They do have some higher speed rail, but nothing even as fast as their neighbors in France or Germany. I feel like we have a thing for high speed rail here in the US as an aspirational goal, but maybe we should be aiming for reliable regional connectivity as a first step. Austin to San Antonio, Dallas to OKC, an electrified/more frequent SF to Sacramento - all of that could make a huge dent in local travel patterns.
In the past it was entirely open source, though the hosted version did check for a license key before enabling the premium features. That said, the code for the premium features and the license key check were themselves open source.

I see some of the newer premium features, particularly around SSO are under a noncommercial visible source license of their own devising though
It's designed to scare away open source hobby programmers? And users? This seems like "avoid success at all costs".

The way I see it there are two kinds of potential AGPL software users and contributors:

1. Those who have not read and/or understood the license, and just go with it. They likely will be fine, because who's going to sue John Doe who built his first website in PHP, but didn't publish his AWS script for launching mongoDB?

2. People who nope the fuck out when they read the license, and don't become contributors or users.

(1) are violating the license. (2) are not using it at all. So what an AGPL software author does is take the pool of potential users and contributors, and divides them into those who nope out, and those who violate the license.

And is that really good honest work you can be proud of? That reminds me more of the music industry of 15 years ago. They gave their customers two options: Have to deal with spinning plastic, or pirate. In this comparison the former is "nope, guess I won't listen to that band, then".

AGPL software authors often make the point you are: Well nobody is using plastic, and so what if they pirate the software? They're not profiteering on it, and it was free anyway.

Just make a license that says it's not allowed to be used by companies of size greater than X.
I mean they're all Microsoft accounts at the end of the day and it's naive to assume that just because the accounts are "separate" that there's no cross-pollination with data. It's not that hard to match accounts up when you generate reports.

Internally this kind of stuff is always "why are we maintaining X different login systems?"
Not banned. Facebook hasn't released Oculus 2 in Germany and paused the sale of Oculus 1 due to "ongoing talks with government agencies". The relevant (it's per state, so Hamburg) data protection agency says there are no ongoing talks and the competition authority (I hope that's the correct translation) denied there are talks, too. So technically Facebook voluntarily doesn't sell them. https://www.heise.de/news/VR-Headsets-von-Oculus-werden-nich...
Whoever did marketing for them was awful. I remember the first video I saw about Quibi and it didn't make sense what the video was about.
I actually appreciate that quibi exists, and no it was not obvious/certain at the outset that quibi would fail, despite what all of these reverse-Nostradamus’s say. Quibi pushed into new territory in a highly risky way - that’s cool.

My only gripe is that it’s about low quality entertainment. I prefer we take these big risks with projects that might have truly consequential and positive impact: preventative health, air quality in cities like Santiago and Salt Lake City, ecological restoration near dense urban areas, better understanding of complex social dynamics, waste management, screenless recreation.
What does that even mean? There is free alternatives. I use 1password because it does a good job.
As if SMS was secure.

Your phone company will believe any random person to be you.

Not all factors are secure.