skysight-inc/HackerNews huggingface dataset:
It really depends on how your password is selected. "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" is a long password but won't protect you. You really want to optimize for ease of entry and memory, rather than using the largest character set or having the longest password. For a point of reference, these three choices have (roughly) equivalent security (128 bits of entropy):

1. 27 characters - all lowercase, randomly selected

2. 20 characters - upper/lower case + 15 special characters found on the first page of the iOS keyboard, randomly selected

3. 45 characters - 10 words from eff's short diceware wordlist, randomly selected

the first option would be the easiest to enter, despite being 7 characters longer than the second one, because you don't have to constantly switch between the various character types (since you're using a touch keyboard). The third one is 66% longer than the first one, but probably is easier to remember.

As for how many bits of entropy to use, AFAIK a preimage attack against md5 (128 bits) hasn't been pulled off yet, so it's probably safe for for the foreseeable future. You can probably go lower than that and still be safe, considering that a md5 preimage attack is significantly easier than cracking a phone pin (eg. no memory/cpu hard KDF, no trustzone/secure enclave).
And I thought GWT would be dead.
And yet the US military essentially safeguards Taiwan, and will continue to do so for the American business interests in TSMC.
This is highly unlikely. These companies need the income. The last thing they'd want to do is add on further restrictions to their struggling industries.
DNS will only let me block specific domains, right? So I can't do blocking of specific channels that way (though I do use a nice big blocklist for adult content [0])

Google is a bit of a non-starter for me unfortunately. Their tools for protecting kids' eyes from content are probably great, but then their just building a catalog of my kids' viewing habits from a really young age... which I find off-putting. Maybe if that was the only way to block I'd go down that road, but there are others.

[0] https://raw.githubusercontent.com/chadmayfield/my-pihole-blo...
Seriously? It’s like a game load screen?
Rails 6.1 allows associations to support destroy_async option with dependent key
The upgrade pace of Alpine is quite reasonable, especially considering that breakage is extremely rare. Expecting to set up a box and not touch it for 10 years is... not reasonable. If that's what you wanted from CentOS, then you have a broken organization.
I don't agree.

And if one of your disks failed, and age was a factor… you’re going to be sweating bullets wondering if another will fail before your resilver completes.

So every every single time you loose any drive in a mirror setup you risk all the data on all drives in the entire pool. I sure do hope you aren't on vacation and/or have to order a drive online.

It all depends on your use case. For me, raidz3 wins easily. Performance during resilvering is not something most users would suffer that much from anyway either. And that 8-drive recommendation comes from many factors and don't apply to most home-users anyway. Not that you should go overboard with it but it will easily pay for fast cache or whatever else you might want.

If performance was the goal you would not be using spinning rust anyway, and if you are still limited by a single gbit then don't even think about it (but don't over-utilize your pool).

But there are still lots of potential ways for your data to die, and you still need to back up your pool. Period. PERIOD!

Of course! Yet for home users there is not a single reasonable way to do it if you have decently sized pool. There is bound to be sacrifices on what you choose to backup.

Except for maybe another pool. Which is going to hurt since ZFS with buying everything up front is VASTLY more expensive than RAID where you can grow the array as needed - under the assumption that the storage needs grow slowly, which they typically do for home users.

As a ZFS user and fanboy the temptation of a dual raid6 setup is tempting. But I can't compromise on the filesystem so in the end I've compromised on backups instead. Likely not the smartest move considering how rare bitrot is, I am very well aware.

For many drives I'd go for raidz3. And for a 4-drive NAS I'd go with raidz2 rather than a mirror setup for the ease of mind.

For fast SSD pools I'd go with mirrors. Much easier to backup the entire pool as well.
OpenZFS 2.0 has sequential rebuilds:

> The sequential reconstruction feature adds a more traditional RAID rebuild mechanism to ZFS. Specifically, it allows for mirror vdevs to be rebuilt in LBA order. Depending on the pools average block size, overall fragmentation, and the performance characteristics of the devices (SMR) sequential reconstruction can restore redundancy in less time than a traditional healing resilver. However, it cannot verify block checksums as part of the rebuild. Therefore a scrub is automatically started when the last active sequential resilver completes.

* https://github.com/openzfs/zfs/pull/10349
We are, collectively, doing a big mistake, by starting with the elder population. The population most likely to suffer from side effects due to their weakened bodies. They're also the easiest to isolate, usually being out of the labour market.

We should have started with the most mobile people from the working-age population. They're the super-spreaders and least likely to suffer from the side effects.

Old people (and children) could possibly avoid the vaccination at all, when the rest develops herd immunity.
I don't think I said any of the things you are objecting to.

My point wasn't that status goods are worse. A Louis Vuitton purse is objectively a good purse. But people don't buy a Louis Vuitton purse because they've done a careful study of purse quality and just happened to end up with an LV one.

My point was that with status goods, it's hard to have an objective conversation about quality, because people invested in the status part of it generally won't talk about it in those terms. If you say, "Gosh, $3450 seems like a lot for a small bag," [1], they won't say, "Yes, but it makes me look important". They'll talk about how well made the bag is, how long it lasts, etc. They in effect become suddenly and specifically irrational. And if you push, they can get defensive. They might, for example, imagine you said a bunch of things you didn't actually say. Or accuse you of being dismissive and snide.

[1] https://us.louisvuitton.com/eng-us/products/bella-mahina-nvp...
There’s something foolish about paying for printed media intended to communicate with people, and use it to only communicate with machines. Regular printed text can be understood by humans and machines alike, while QR codes are completely useless for humans. Most QR codes seem to encode URLs, and it wouldn’t exactly be a technical marvel if your smartphone camera was simply able to spot printed URLs and offer to follow the link.

There are places where QR codes make sense though, and at least it seems like people have stopped putting QR codes on billboards, advertisements, etc.
> Yesterday was the safe harbor deadline for the U.S. Presidential election and enough states have certified their election results to determine a President-elect. Given that, we will start removing any piece of content uploaded today (or anytime after) that misleads people by alleging that widespread fraud or errors changed the outcome of the 2020 U.S. Presidential election...

This is likely going to make a lot of conservatives in the US unhappy, since a number of elected officials in Congress (!) are openly questioning the election results. Also seems a lot more severe than Twitter’s approach, where Twitter is labeling “disputed claims” rather than taking them down.

I don’t believe that the 2020 US presidential election was rigged, but I think it’s heavy-handed to take these videos down outright. After the 2016 election, many people went wild with Russian conspiracy theories that proved to mostly be bogus, and that content never got this level of platform scrutiny or censorship.
In avoiding the morass of stupid patent rulings that allow manufacturers to camp on an ISA.

There is no reason that anyone shouldn't be able to take someone's databook for a processor and produce a legal work alike. But since we can't do that.

The whole industry is forced to create a new ISA for the sole purpose of saying it is ok to produce work-a-likes.

Cutting edge, but in legal maneuvers.
I think proper disagreement and criticism can be had communicating directly. Framing it as knowing "how it really is" or appealing to a supposed common knowledge of a criticism is an unfair and disingenuous form of communication.
What is despicable about an analytics product that doesn't track people?
I'm a tab hoarder, so I made this thing
Mac menu bar app, to help me find that 1 tab amongst my 200 I have open across 6 windows in Chrome.

Let me know what you think (be nice...it's beta AF)
Day 1 reaction was sticker shock, but yes, I see your point. If it's insanely comfortable, connectivity a breeze, and sounds amazing...yeah I can see it now. Most bluetooth on headphones with the blinking dot UX is horrendous so maybe people will pay the premium.
General logic - If there's 4 points on a blob, you want to break it into 2|2, not 1|3, because each move can only split a group of 3 into 1|2, but can often split 2 groups of 2|2 if they line up. The exception to this is if you can draw a line between two points that crosses a gap, then you can break a group of 3 in one move. At higher levels, you might need to create these gaps yourself with your extra moves. Idk, didn't play much beyond level 20ish
not the server.

my biggest complaint about ubuntu server is that docker is packaged as a snap. But that takes 30s to fix (includding googling for a fix :) )
It's in this article, too:

> As is common with new vaccines the MHRA (regulator) have advised on a precautionary basis that people with a significant history of allergic reactions do not receive this vaccination, after two people with a history of significant allergic reactions responded adversely yesterday,

It's kind of understated, tho
I guess the question is whether there is any sort of screening done prior to a patient receiving the vaccine. A simple question ("do you carry an adrenaline autoinjector") would have prevented this.
Maybe you just answered the question why people wouldn't want to move to such a country.

From the outside, America does not portray itself to be a particularly stable or desirable place to live.
The US' "shitty conditions" aren't limited to healthcare or housing (but also last time I checked, having health insurance doesn't mean you're actually going to receive the healthcare you need). Look at measures like wealth inequality, police violence, parental and other forms of leave, infant mortality, child hunger and poverty. The US underperforms Europe on many of these metrics.

Also, that the US accepts more immigrants is not an argument for its inherent superiority, especially given how vilified and abused they've been in the past four years. All it means is that there are countries worse than the US, or that better ones have more restrictive immigration policies.
I built my own home office on my backyard and increase my productivity
And the doctor is going to have better information about this vaccine than is available to the general public? That seems highly unlikely - there is not some secret doctor only channel for information on drugs. Hence why the guidance is lacking (I would not be complaining if instead the guidance was "overly technical" or something).
In theory, people who can’t be vaccinated and people who can buy choose not to be will both need to be excluded from large crowds until the virus is no longer a significant risk factor.

In practice, given all that has happened since the last election, I expect the current UK government solution to show all the skill of a bored teenager mimicking Jackson Pollock in a school art class.
Great contribution.

By the way I’ll never understand people who are proud of their Hispanic heritage but then can’t be arsed to write their own names with the proper accents.
As someone with a similar personality, I doubt the employee has any delusions about their organization abilities.

They probably just don't like that aspect of their job and don't think it is that important.

Approach it by saying I know you don't like doing it, but it is important to do. Mention the consequences of not doing it and how you spent hours fixing them.

You might need to micromanage that one part of the job. Sometimes people need reminders on what to do.

Also mention that they a strong engineer otherwise and this is just one thing they need to work on. Don't expect them to be super organized, but they need to do the minimum when it comes to logging time.
That only works in an async function. The then example doesn't have that requirement. So the alternative shouldn't either.
Also: not an architecture, an instruction set.
No one is confused or mislead about this.
I’m unsure why the original idea seems silly, when it simply states a possible reason for this problem today. Giving a developer observability is the first step, that’s what they are pointing out —- some ways developers interface with features don’t include information that could deliver a higher value feature. A company can choose whether to deliver that higher quality or not with that information, ignorance removes that choice.

If a company has that information and doesn’t care, that’s one thing. There’s more than a handful of companies that just don’t have the information to even know if they should care.

I think most people would agree that we should use tooling to make it so that developers are aware of their blind spots, such as supporting systems with lower resources or a more inconsistent network. The Netflix blog had a nice post that included a tool they used to observe the UX under certain failure cases, which is a nice example of this [0].

[0] https://netflixtechblog.com/keeping-netflix-reliable-using-p...
One thing that I've started doing for my own personal projects is deliberately working on underpowered hardware. I got a Rasberry PI 400 and that seems to be the perfect dev environment for me. It also has the side effect of making me much more conscious of the technology and dependencies that I use to create a product with.

I use my own beefy server for creating builds and have a decent dev-build-test setup for myself where the dev experience is still pretty fast despite the hardware I'm using as a client - but when it comes to actually testing out my work I love using it on the PI because I know that most users will have an experience very similar to what I get on the PI.
For God's sakes ... What underpins this need for social media companies to virtue signal about protecting 'election integrity' is the false notion that 2016 was stolen from Hillary by the Russians - a claim that had no evidential support (and no, that some trolls bought a minuscule amount of Facebook ads does not raise this claim to that level) but the entire Democratic party, with media allies, promulgated for the last 4 years and pressured social media leadership to adopt as well. And now social media companies are engaged in full-scale curation and editorial control over any content that even comes close to questioning or even having regular open discussion of unfolding events. Ridiculous.

> Since September, we've terminated over 8000 channels and thousands of harmful and misleading elections-related videos for violating our existing policies. Over 77% of those removed videos were taken down before they had 100 views.

Yay! Thank you YouTube interns for protecting me from making up my own mind about these dangerous ideas.

I also like that the authoritative sources are ... the same media companies, owned by multinational corporate conglomerates, that are always pushing for deplatforming of independent news sources. No self-serving policies here! Tell me again NYTimes how Philip DeFranco and Joe Rogan are a gateway to the alt-right.
Having been on the receiving end of this, my manager and I sat down to work on the problem together. “More diligence” is not a good solution to recurring problems especially one as fundamental as organization. (Especially mine, as I have a disability in this area.)

There are various solutions to for organization. One I’ve used is taking the beginning of each day to write down what I did the day before. (End of the day failed horribly.) It gets me thoughts in order so I deal with high friction tasks like paperwork.

The issue could also be the perceived difficulty of software used to log hours. My brain hates using ticketing software because it’s a hassle to get everything entered properly. Most software systems I’ve used fight the way my brain works. It forces me to categorize things before I’m ready to categorize them. As a result, those tasks make me anxious, which means I tend to avoid them. If I “just do it”, it takes all of my energy for the day.

This is why I have a system for getting the organization done outside the system before tackling a poor UI.
> You should have prefaced with "Trigger warning: I talk about scr#ll b#rs in this comment" because I am 100% triggered :-D

But then the warning talks about scroll bars itself.

It's almost impossible not to talk about scroll bars on the web.
Similar to McMaster.com is RockAuto.com: https://www.rockauto.com

I would also shoutout to Mouser for a powerful interface for narrowing down what you want to buy, but its performance does leave something to be desired.
An Algorithm for Precision Medicine
The reason why many startups take venture capital is an attempt to scale very rapidly, hoping that they can achieve this before the huge tech companies get them on their radar and crush them by offering a similar product.
While they haven't said yet, it's fairly clear this was an error; either the people with a history of allergies ignored the warnings (every vaccine I've had as an adult has come with allergy warnings) or the warnings weren't given (which would be bad and must be fixed).
Criticizes California for excessive regulation, then moves to a state where it's illegal for Tesla to sell its cars.

https://en.wikipedia.org/wiki/Tesla_US_dealership_disputes#T...
Repeat after me: RAID is not a backup solution, its an uptime solution.
CI for performance: Reliable benchmarking in noisy environments
Etsy definitely does a lot of shady shit now and really takes a lot of what you make, forces you into offsite ads if you do well and then takes 12-15% including from the shipping, which is the worst when you already legit have to pay $80 to ship something and get shorted twice.

Lots of crap shops with Chinese production, which they are supposed to list as a "production partner", but they make it really hard for the customer to find.

It IS a great place to open a shop and make money though, you can pay zero dollars and start selling if you figure out their internal SEO system well enough and have the right products. Even without knowing the SEO, if you have the right niches, people will just buy your shit out of the blue, it's crazy!

We've been growing our laser cut wood art shop for over a year, got up to like 432 sales by November and now we are over 1000 sales a few weeks later, which has been insane.

My other shop I started in the summer grew slow, but is now up to like 5-6 sales a day and I think I can get it much higher as I add more and more products, it's also 100 times easier, cheaper, and faster to do than the laser cut stuff.

If we can figure out digital stuff, we'll be laughing.

My one friend pays for his monthly Tesla 3 bills with his Etsy shop.

Will you save more money if you just use Shopify and co? Yes, but you will have to market and bring your own people in, which is the tough part until you've built a huge brand, email list, social strategy and figured out ads, which you can avoid almost entirely for a long time with Etsy and still see success.
I think ASML's connection to NL is solid, you could say it's a Dutch company. The R&D, world headquarters are in NL and board of directors includes many Dutch people, including the CEO.
To be clear, LE won't get Cellebrite's tools because they don't trust themselves to use the tools properly, but LE demands key into all companies' systems and claims they can be trusted to use those kes properly?
> I feel like if you asked people whether it's more important to them to cancel college debt than to end mass surveillance, the results would not tilt toward the latter.

The latter is more important, the former more urgent.
This is also something I'm watching carefully.

My expectation is that most businesses will have some official policy of "you must be vaccinated to enter" but they won't actually enforce it. This decreases their liability on both sides (Don't want to be seen inviting outbreaks, but don't want to deal with HIPAA / privacy laws).

I was surprised to learn that the US already has a list of required vaccines for legal immigration[1]. I think its very likely the Covid-19 vaccine makes the list, considering even the flu vaccine is required.

[1] https://www.uscis.gov/policy-manual/volume-8-part-b-chapter-...
I’d recommend using Oracle Linux 8 if you still need 1 to 1 compatibility. At my company I’m recommending Amazon Linux 2.
Yeah, it would definitely be something I would think to do. It's not like Wi-Fi security is that tight either. I'm mostly baffled by the resources being put into this crime. There's no way that if this weren't politically motivated it would get this much effort.
I have certificates lying around somewhere for the vaccinations I received as a kid. Pretty sure school required them baring some waiver. I’m not making predictions about how the Covid vaccine will be handled, but rather just putting it into a little context.
For Airbus I would agree but ESA isn't on the same level as NASA and CERN is competitive but only in a field where there is no real reason to be competitive (no money is made).
Jeez. They could have been doing this for the last month before it became endemic. How much damage did the Trump team do to America's democracy with a month of sore-losership?
Here's level 90 https://imgur.com/JkBQ5t0

I am not sure if they're autogenerated, but I think you can 'work bakwards' from a simpler solution to build a bigger puzzle.
Yes. Almost no vaccines can be given to _everyone_, and the portion of the population with severe allergies of the epipen-carrying-around variety is fairly small.
Slow in what way? Is the app sluggish? Does the delivery take too long?
Maybe the Mill?
https://millcomputing.com/

edit: added link.
As far as I know, no senator is seriously contesting the results. The House always has at least a few crackpots in it, now including a Q believer.

I'm not sure why YouTube should cater to conspiracy theorists just because they'll get upset that their conspiracies are not blasted from YouTube's megaphone. YT is within its rights, and there are thousands of other video sharing services (including Mega, which is totally unregulated) for them to share their content on. They can and do self-host as well.
Covid-19: Things We're Not Even Trying
When you start implementing a second loading spinner. That's the time to stop and think about what you're doing. Surely.
Everyone looks to software solutions, but maybe this person needs an assistant of some sort.
actually many, because in 2020 i have enough time to read more
SambaNova unveils purpose-built AI machine
In this situation the other person believes they are correct and a high performer and you, the manager and your advice, is wrong. Your advice is wrong and your expectations are wrong. You can't have the conversation until you've done the work to identify the likely cause of an underperformer’s lack of self-awareness.
If only we had a way to combine the output from many power sources. Maybe we could call it a "grid".