skysight-inc/HackerNews huggingface dataset:
If there's generic malware that's targeting your password manager, then yes this provides protection against that. But it doesn't provide protection against a targeted attack, because the malware can just keylog your horcrux.

Another weakness that doesn't require a keylogger, is the attacker might be able to find some stolen database of a website that stored passwords in plaintext, then deduce your horcrux from the difference between what was in your password manager and what was in the database. And if the site did hash passwords, the attacker can try cracking the horcrux. The 5-character example horcrux probably wouldn't be too hard. The article somewhat covers this by saying only use the horcrux on important sites. This is good, but it still has weaknesses because an important site can still get its database stolen, and some people also want to protect less important sites.

And if no password databases are available, the attacker can create a website and ask you to join it under the hope you'll reuse your horcrux on the attacker's site. I've actually had an attacker contact me personally (that is, actually chatting with me live) and ask me to sign up for his forum under the hope that I would reuse my valuable account's password on the forum.
> their campaign funding is somehow tied into the companies and lobbies that push for these bills

It is. But there is more to it than that. Most people in elected office aren't robots just following the biggest diner checks. A lot of times they believe in what these amendments. The lobbying and whatnot actually works. Because just like you and me, they are susceptible to the environment in which they dwell.

A lobbyist can't buy a legislator's vote but they can buy you a legislator's time. That time let's you create the information environment that can influence any person. Which is of course why these lobbying relationships become so long and so entangling.

Mark my words, the people behind this amendment believe pirates are cheating honest companies out of something.
What's more annoying than the prompt for me is that they don't automatically redirect to the app if I have it installed. I've seen other apps do this but I'm not sure on the technical specifics. Just take me to the app if I have it installed instead of having to decline / accept.
i.reddit.com and old.reddit.com are both sorta ugly, but fast enough.
Advice for incident responders on recovery from systemic identity compromises
Nintendo is also known to be a horrible company to work for. Like Apple their work is part of our personal histories. In the 90's I can remember hearing other students playing Zelda: "Volga needs food badly."

Someone is criticising your choice of analogy for Apple. May I suggest Church of Scientology as an alternate.

Like CoS, if you cross Apple, their outside counsel will come after you with a vengeance. Apple is the ultimate client. No other pockets are as deep.

Good luck getting DOJ or anyone to go after Apple. They have tremendous financial reserves and "celebrity endorsement".
They are blatantly claiming centralization is a feature in their defense.

https://twitter.com/VitalikButerin/status/134121951954555699...

You can't have it both ways. If you're centralized, you must be regulated as such.
It’s like a paywall, sign in or install the app to view content
Probably not. Most voters have extremely short political memories and we just finished an election. From a politician's perspective, this is the perfect moment to do something outrageous.

Besides, other issues probably impact which way constituents are likely to vote more than copyright law.
California’s Farmworkers Feed the World. Should They Be Next for a Vaccine?
> parking is probably private lots owned by the employer, not street parking. Picture a standard office park.

But this is still subsidized because regulations mandate that buildings have lots of parking. These regulations are typically quite extreme with requirements intended to support the 99.999% demand case (think peak hour of black friday) conditional on a parking price of $0. Most developments build the minimum amount of parking they can by law suggesting this isn't a free market outcome.

So if you want to have business you have to provide tons of parking and make up for it with higher prices for your goods and services. This subsidizes vehicle driving over other modes a transport. Especially so because giant parking lots make it harder to reach the store front by foot.

Google Donald Shoup for more context.
Still nope. What you’ve done is a very elaborate exercise in point missing, not that I’m surprised. Take a look at that chart again and do some thinking. There’s a reason for using nominal prices to illustrate what happened after the oil shock. The flat line that suddenly begins to jump around like a spastic house cat illustrates a very specific point. Anyway, I should know better than to engage with you people.

This comment section is nothing if not predictable.
> But given Apple's unrelenting engineering excellence, there's very little chance they'll design a substandard or unsafe product. Therefore regulatory compliance is merely an issue of hiring enough lawyers

Wat.

Phone safety compared to car safety is like comparing bottle rocket to Saturn V. If bottle rocket/phone goes south, you generally don't expect loss of life.

Fuck, Tesla can't seem to wrap their head around this. They used standard phone like quality components in car. Which caused stuff to stop working in regular car conditions e.g. noon left in car.

> iPhones definitely have lights.

This has about as much relevance as nothern lights do.
Hey HN, shameless plug: I created a Slack app to help teams create on-call shift schedules: https://turnshift.app.

1. You create a schedule 2. Members get messages to book shifts 3. Notifications are sent to channels about who’s on shift

We’ve used this technique at Algolia to organize the whole-company support (40 engineers) and in general share any repetitive team task automatically.

My tool is very new so really looking for feedback. If this gets some love I’ll create a proper HN post.
I think as westerners we view Japan as being a lot more homogeneous than it actually is.
> what exactly Linus means by this

“I’m a good programmer”, I imagine. I wouldn’t disagree :p
So you're arguing parking is way too cheap and we should make it more expensive. I think that's generally a consensus opinion among city planners.
What about /var/tmp ?
OK. I just did: https://github.com/internetarchive/openlibrary/issues/4322
Plus there is an asymmetry here. Wild “theories” and purposefully inflammatory content is easy to post, and also easy to believe for those that align with them ideologically. Countering them, especially to a degree that can be convincing, takes a lot more work. End result, a lot more of the former and less of the latter.
I can see how that can be confusing :p On Google I got the increment operator as the top result (though not specifically for C language). On DDG I got an equivalent result for fifth result. Second search result on Google which is the increment operator for C++ in C++ reference was probably the best result?

Personally for me, when I search something like this I tend to lookup the language reference directly and find the operator I want there since it's a very specific query with a very specific answer. But yeah, ddg, ecosia both fall short on this query.
The use of the term "nanoparticle", is going to freak people out when PEG (polyethylene glycol) is one of the most used substances in the world.
Microservices make more sense in dynamically typed languages without a good module system because they turn into spaghetti mess after 20k lines. The worst giant spaghetti projects I've touched were PHP, Perl, and JS. If you can't put boundaries within your app you don't really have a choice but to put them at service level.

In Java (and similar) "enterprise" languages you have static typing, access modifiers, a quality module system. It's trivial to split your app into multiple independent units.

And the JVM + CLR are designed for giant monstrosities. They use a compact bytecode format, zip their dependencies, and do crazy things like runtime code unloading and in-memory string deduplication.

We have Java apps with millions of lines of cruft that run fine on reasonable machines. Totally anecdotal but our worst disasters are dynamically typed stuff like node where the only way to know what the objects being passed around look like is to see them in a debugger. And with JS the "module system" always devolves into webpack concatenating everything into one giant file. It's pretty gross
That doesn’t seem that extreme or strange to me. If you fly with a bike then you’ll want a hard, padded case for it, like one of these[1].

I also keep my best bike (I, er, have several) in the house. i.e. a temperature controlled room.

1. https://www.bikeboxalan.com
Any sufficiently large forum will eventually attract edgelord types from 4chan or wherever. Even if your rose-tinted view of early days Reddit is true, which I very much doubt, you still have to plan what to do once the trolls show up.
I wonder if they can titrate the dose a bit to limit the scale of the reaction. Or just do a reaction test to PEG before dosing.
its java
I'm pretty sure this is precisely what has happened, but I'm not as happy about it.
This vaccine rollout will have post-approval surveillance - detailed tracking of side effects, sent back to the FDA and CDC for monitoring. Surprisingly, this is not required of all drugs, but it is considered one of the most effective ways of really tracking down such issues. It provides some compromise between the "keep doing a million more trials until every possible concern is wiped out, even if people are dying waiting for this drug" and "just throw it out there and cross your fingers" polar opposites that many worry about. Nice to see! https://jamanetwork.com/journals/jama/fullarticle/2772137
I don't think its only anonymity, distance plays a big role too. There are virtually no consequences to disrespecting and/or harassing somone in some far away jursidiction.
If only reddit would follow it.
Apple's core focus is Design of consumer electronic appliances. Making complicated technology simple, intuitive, and trouble-free, and hiding the complexities behind the scenes. Technically, an Electric Car fits that description too.

The challenge is that the complexities of an EV are similar, but greater in scale than for consumer electronic devices - more parts, more complex supply chains, more extensive support network (charging stations, maintenance providers).

Whether Apple can scale up to handle those increased complexities, and whether they calculate it's financially worth it for them, I doubt anyone outside Apple can really know at this time.
Poland will soon start vaccinating its population along with rest of the EU; govt site reports that 5 formulas will be purchased along with the information that there's going to be a fund for people with adverse vaccine reactions. Tho, no details how this would work is described atm.

I'm bit curious how handling different formulas will work in the reality.
> I've actually had an attacker contact me personally (that is, actually chatting with me live) and ask me to sign up for his forum under the hope that I would reuse my valuable account's password on the forum.

How did you eventually find out their true motivation?
The React model is actually superb at managing state. It makes you explicitly acknowledge it directly, and codifies it either with properties or useState. In practice it's a fantastic model, as it does let you write "mostly functions" as the article suggests, but you can't have a UI without state, so it's great that they make it easy to handle.
SEC Threatens to Sue Ripple, According to Its CEO and Co-Founder
I don’t know if it was intentional but the name sounds incredibly like Bombay Bicycle Club, an English indie rock band
DeFi Boom Makes Uniswap Most Sought-After Crypto Exchange
I often wonder if it's possible to encourage lawmakers to pass laws in the opposite direction.

I.e., to instead pass laws that guarantee the right of citizens to share information, make content, etc in ways that shall not be infringed. Laws that affirm freedom of expression and free speech in the digital space, instead of laws that increasingly punish common behavior in the name of copyright or "think of the children" type rhetoric.

I don't have much experience in law so I don't know if something like this is even possible. Can laws only dictate punishments? Is it possible to use legislation to make encroachments of freedom harder, or does that require a constitutional amendment? Is it a question of financial lobbying power?

Perhaps a more legally informed user could chime in about how feasible it is to push for legislation in the other direction.
Slowing traffic down is the least desired solution because we'd have to remake all of those other things too to get the benefits. It doesn't lead to less suburbanization until people get fed up of wasting time and give up the home they actually wanted.

You could solve people getting run over on the subway tracks by slowing those down too, but criminalization and station design is just a much better approach. Slowing down is inefficient and may cost just as many lifetimes, only in little pieces every day.
Another great 2FA app on android is Aegis [1]. Open source, beautiful design, and supposedly better crypto than andOTP [2].

[1]- https://play.google.com/store/apps/details?id=com.beemdevelo...

[2]- https://old.reddit.com/r/androidapps/comments/b45zrj/dev_aeg...
My grandfather wrote BASIC programs for the TRS-80, so I'm not sure I would necessarily agree with that sentiment. :)
> The underlying nexus is that our ideals on free speech do not take into account human wetware bandwidth.

Really well said. I'll admit I lean on "wetware" in these convos too.

Free speech perhaps breaks down in net-centric reality. Social norms that worked in a 2D plane of existence are not guaranteed to continue working when physical space constraints start to break down -- when every human agent is networked to every other human agent, oh and also centers of massive compute resources (with operators who have their own agendas)
I still remember I'd bought this coin when it was worth $3 in 2018. Sadly, it's under a dollar today.
It's hard to say, but it does seem like the pathway from edgelord to actual nazi is disturbingly short and straight. Even if a lot of that content wasn't authentic, there is a non-trivial chance that they'll come to believe it eventually.
They may not need maps for this. They could use geolocation or “findMyDevice” service which may be collecting this data already. Right?
If you're such a champion of insurance companies, there are literally hundreds of personal injury attorneys (read: serial fraudsters) and their pet "doctors" who deserve to be sentenced to lifetimes of forced labor before Shkreli deserves to serve a second in prison (for securities fraud, btw). Where's the passion against ambulance chasers? Not enough bloggers writing hit pieces on 2nd rate bug-souled parasites? Why not? Why's the gifted Brooklyn immigrant from a war-torn country you've never heard of get all the heat?

Because these scams have been going on forever. They're built into the system by the parasitizers whom it protects. It's "the way things work". If you catch onto the grift, if you even come close to it as an outsider, that's when they start making trouble for you. That's what happened with Shkreli. Send him to prison on some unrelated charge, drag him through the mud, then celebrate the defeat of your "villain". And totally miss the point. You changed nothing. You took out a scapegoat for people who are effectively real life caricatures of the imaginary villain they built up for you to strike down. You don't have a problem with Shkreli, you have a problem with our clown-world healthcare system. The real world doesn't run on warm sentiments you for whatever reason don't associate with Shkreli's face. It runs on THE RULE OF LAW, and you haven't even engaged it except in some contorted vengeful fashion against a wholly lawful (and might I say lofty-spirited) young man. Shkreli should be living free right now, and your complaints should be directed to your legislator.
>But if companies allow extremists on their platforms then the moderates will leave. It's not so much a paradox but a cause and effect.

One only need to look at /r/news and /r/politics to see this happening on the original site.
> I don’t really need to exactly match RHEL’s point releases. I don’t need 100% binary compatibility with RHEL.

That's good, because regular old CentOS is not bit-for-bit identical either. CentOS might strip out all the RHEL trademarks, but they had to reverse engineer RHEL code drops just like Oracle, Amazon, Google, Facebook, SuSE, etc.

> The upstreams serve me well enough.

What you don't appreciate is that the distinction between upstream/downstream is a broken metaphor across small time scales. Bug fixes and backports will show up in any number of RHEL clones from Oracle|Amazon|Facebook|Google|Baidu|Samsung before making their way into Fedora|CentOS and finally into RHEL. In the future, RHEL will release their own bugfixes to subscription customers before those fixes find their way into CentOS Stream.

That's the meat grinder of a Linux distribution: uptime "guarantees" are just refunds you get to cash in when a large devops team can't fix a problem fast enough.

> The one thing I can’t get over though, is the decision to roll out this change in the middle of CentOS 8’s lifecycle, trimming out what, 8 years or so of support. That seriously stung. This decision should have been made a year or two ago, before CentOS 8 was released.

If you have a kernel that hasn't been updated in over three years and you need very low downtime, you either have a dedicated operations crew or you don't let it touch the internet.

But if you are so cheap that you don't want to pay for bandwidth/build servers yet aren't willing to violate the "developer" license agreement ... then use a RHEL clone from Amazon|Oracle. They are already undercutting Red Hat support packages, why not make them foot the bandwidth bill too?

Everyone else should be celebrating: Red Hat is basically turning CentOS Stream into a spot where they can collaborate with their frenemies and ship more software faster.

Qubes developers for example, have been spread very thin by Fedora's six month release cycle. Switching away from an RPM distro would be too difficult but CentOS lags too far behind mainline (5 years!) to be useful. If Red Hat can step up their game and push out a major release very 3 years and get the "pipeline" between Fedora and CentOS working ... maybe they can win some market share back from Debian and Ubuntu.
Oh no it really was. I moderated forums in the late 90s early 00s and it was a lot of work to keep things on topic. Back then of course being a moderator was seen as a thankless service to the community rather than some censoring devil.
The last place where I did any significant interviewing, a fairy large, successful SF Bay Area startup, 100% had a huge blind spot for diversity hiring. What do I mean by that? That I had ample reason to believe that a Black candidate from an HBCU would walk into the interview room with a point penalty. The whole point of interviewing a candidate is to get an unbiased read from them that you can then add to your other impressions of them! If you think the candidate is subpar before they ever open their mouth, you're wasting your own time!

To begin with, employees had a common mantra that "it's just a pipeline problem." They had examined themselves, decided that they are pure, logical, and unbiased, and concluded that the dramatic shortfall in Black and Latino hires had to be explained entirely by external factors. Something was wrong, either with society or with the candidates themselves, but it certainly wasn't anything with our interview practices or, god forbid, ourselves. This was the starting position of literally every non-Black employee at the company that I had spoken to about the issue of hiring over my multiple years of working there. "It's obviously a pipeline problem." Everyone, including people who would gladly call themselves open-minded bleeding heart social progressives.

Second, our HR was a viper's den of absolutely the most knee-jerk bias and spite imaginable. When making small talk with other employees, HR people would constantly talk trash about candidates and make fun of their academic institutions and accomplishments. Many of the software engineers had a sneering attitude about the competence of people in HR roles, and HR people were on average eager to demonstrate that they had power over candidates. It was a toxic environment, but I doubt that it was an unusual environment. HR people circulate between companies pretty constantly, and I hear very similar impressions from my friends at other startups.

Pressures like this translate pretty clearly into an inherent penalty for minority candidates. I obviously don't know what got @RealAbril fired from Google, but I was starting to earn a reputation for calling people out when they reflexively said "we'd love to have more diverse hires... but not at the cost of lowering the bar!" See how much Black talent you manage to identify when you start with the belief that diversity candidates are less talented.
"Some allergists and immunologists believe a small number of people previously exposed to PEG may have high levels of antibodies against PEG, putting them at risk of an anaphylactic reaction to the vaccine."

That would explain the second follow up shot causing more issues than the first.
It's a thought exercise, not a serious suggestion that it might occur, hence "if it thought there were grounds to do so." I'm imagining how a Government with sufficient power might go about crippling the value of BTC.
I kinda miss working on teams where disabling the tests was plan B instead of plan G. The disabled tests should hopefully reduce code coverage. Also someone should be graphing out the volume and flux in disabled tests from week to week, to tap the brakes if it looks like we're rushing forward blindly instead of doing our due diligence.
This is prone to the usual bias that rewriting the code generally makes it easier for the author to understand and reason with :)
We need a planet where we can drop off everyone in voat and everyone from /r/politics on. It will work because everyone is white and mentally ill.
https://kin.org/ got sued by the SEC for the same reason. They 'got away' with a 5m fine but were not branded a security (does that automatically declare them a currency?). They're now free to carry on development with the SEC behind them. The difference is they just moved to Solana as a token, so they're decentralized, whereas what I take from XRP is that it's not. I don't fancy XRPs chances seeing what the Kin boys and girls went through, but if they 'win', whatever that may look like, they'll be up and away.
Treadmill deck, game changer. And a mini instant pot
What is core data?
I've been asked a couple of times whether or not I'd be interested in joining the on-call rotation, but I've always turned it down. I think incentive is like a couple hundred euro a month on top of your base salary. I don't actually work in ops even though I've been taking more op responsibility as time goes on, so being on-call isn't part of my job (even though the on-call people have called me at least once in the past to help sort out issues).
The Ripple people made centralization and regulation out to be a positive thing - and now they get exactly what they deserve.
you forget reddit is a constantly living thing. Check the thread again. You have to scroll way down to see any negative notions. Its clearly just noise.
There you go, written by April herself:
https://hackernoon.com/obviously-awesome-a-product-positioni...