skysight-inc/HackerNews huggingface dataset:
In WebAuthn (and U2F but that's obsolete and you should just implement WebAuthn on a green field system) your credentials are inherently tied to an FQDN yes.

There are two tricks involved. Firstly, your web browser is co-opted to do this work. It knows this is news.ycombinator.com much better than you do. If this wasn't in fact news.ycombinator.com, but looked correct and behaved as expected, you likely would not notice, but the browser checks the name matches for every single individual HTTP transaction.

So if the site fakebank.example tries to do a WebAuthn validation for realbank.example it just plain doesn't work.

Next, for a Security Key or similar FIDO1 device, where you can enroll an unlimited number of sites on a single authenticator since they aren't actually stored on the authenticator - the keys used are encrypted with that FQDN. So if bad guys stole your real authentication database enties at Real Bank (maybe from a backup) they not only can't use them, they can't even play them back to you and have you use them - they only work at all on the real site they were for, they're just random garbage on any other site.

This relies on a two encryption technologies. 1. Public Key Signatures (mostly using elliptic curves but that isn't essential). I can pick two related numbers, tell you one, and then in future you can challenge me to prove I know the other one on different occasions, and you'll know I do even though you don't learn the number. Your Security Key can prove to GitHub that it is still the same Security Key that visited before, despite GitHub not knowing which one that is.

2. AEAD Authenticated Encryption. Modern symmetric encryption not only keeps your data confidential, it can also simultaneously authenticate it, your Security Key knows when given back an encrypted "ID" that it's a real one it issued to this web site, because random IDs will fail the authentication step.

Either of these tricks would arguably achieve our basic security goals, but they are both adding further strengths to the system, so why not have both.

[Edited to clarify some details]
No, but the radicals in 昴 (pleiades) are "sun", repeat, and "at same time".

So even if we're being very literal, "the one with the two stars at the same time" is an accurate description of both the hidden sister story and the cluster.
It's really going to be about what you bring to the table, and if your idea excites them. Why shouldn't they just execute on this without you?

What's stopping you from learning how to code over the course of 18 months and doing it yourself? No one will champion the building of your idea in the way that you would.

Learn to program. It changed my life. I majored in marketing. After I learned to code, I got a product job in big data genomics on national dna projects. Now I can build my own companies and am on the 2nd version of my prototype.

Otherwise, don't waste your time looking, just pay an outsourced dev shop.
Sounds like the issue was AWS had to keep complaining, effectively using them as their moderation review, rather than doing it themselves
that's kinda what I mean. they both invite guests on to learn about them, their work, and the unique perspective in stuff. Rogan doesn't seem to push back as much or ask as "stimulating" questions as Friedman, and is more apt to just let his guest talk

just different styles of podcasting, with their respective pros and cons
Slightly off topic but I love little gems in his podcast that take me down rabbit holes. For instance, while interviewing James Gosling, inventor of Java, he asked what a virtual machine was and this was the answer:

> [01:29:20] So And what is it? So the Java virtual machine, you can think of it in different ways. Because it was carefully designed to have different ways of viewing it, so one view of it that most people don't really realize is there is that you can view it as sort of an encoding of the abstract syntax tree in reverse Polish notation. I don't know if that makes any sense at all. I could explain it and that would blow all of our time. But the other way to think of it and the way that it ends up being explained is that it's it's like the the instruction set of an abstract machine that's designed such that you can translate that abstract machine to a physical machine. And the reason that that's important. So if you win back to the early 90s when we were talking to all of these these companies doing consumer electronics.

To have some fun I asked my coworker who is a lot smarter than me what that means which led to a fun 30 minute tangent.

https://www.happyscribe.com/public/lex-fridman-podcast-artif...

https://lexfridman.com/james-gosling/
Why would an AI researcher need to be an expert programmer?

Furthermore, why would an AI researcher need to have intricate understandings of the inner workings of modern CPUs?

Lex is not a software engineer. Lex is not an electrical engineer.

I know people actively working in the AI/ML field who don't even have a B.A./B.S. - they're literally self-taught from watching YouTube videos; reading books, textbooks, articles; and listening to podcasts. And after all, wasn't that supposed to be the ultimate end-goal of all this high technology we've created for ourselves? To smash the Ivory Tower? To democratize knowledge for anyone who's willing to pursue it? These people don't understand the finer points of programming and they damn sure don't understand the finer points of CPU design... why should they? You have finite time in your day, and every hour you spend understanding the intricacies of one thing, that's an hour you've lost to understanding something else.

The promise of the Internet was supposed to be something to interconnect humanity so we could share amongst each other. Well part of that promise is relying on the expertise of others to help us, instead of having to acquire that expertise for ourselves.
Seems rather obvious that this 'Big Tech bloc' will eventually turn out to be a pyrrhic victory.
"Innovation projects" is how we got past the gatekeeper at our very first client (banking industry). We pitched it as an experimental technology that we wanted to partner with them to build out. No guarantees type of deal made it a lot easier to sell to the board, because we weren't proposing to put any line-of-business on top of it (at first).

Once you have 1 client in your target industry using your product, it is infinitely easier to get a 2nd client (assuming you can use the 1st as a positive reference).

SOC2 seems like an interview-time item if I were to try to put an analogy around it. Once you have a certain reputation and key players trust you, its a lot easier to navigate around regardless of your specific credentials.
If a judge issued a warrant for her arrest there must be something there. So idk. Suppose it could still be selective enforcement.
"not innocent"

Like criminally not innocent? Not clear on what you mean hear.
>It's a great "mind-blown" insight story, but just not true. People do judge each other and have opinions and put them in little mental boxes all the time

Yes, we all understand that people stereotype. I think you're getting bogged down in the details and missing the overall point, which is far more generalized. The above story is meant to be short and clever, and to do so it glosses over a few things that you're meant to pick up contextually. The point it's trying to make is this:

20 year olds tend to think people are watching, judging, and remembering their every move and are concerned about it

40 year olds still tend to think they're being watched and judged, but don't care

60 year olds realize that everyone is too busy thinking about their own situation to really pay much attention to others beyond superficial stereotyping, and that unless you affect someone deeply with your presentation, they won't likely cling to previous judgements of you.
It's not like they actually sent a member of Congress into space in 1985....

https://en.m.wikipedia.org/wiki/STS-51-D
It does, but it’s also SOP with the police, if someone speaks out against them or if they come up empty handed charge them with something so as to not look stupid.
Of course, until a few centuries ago, there was no light pollution at all, if you stepped away from the campfire.
A bad attitude and a bad analogy. A second charging port is redundancy, a second motor is auxiliary.

Don't start about multiple usb ports because those are also auxiliary in purpose

Edit: Not making a judgement as to if a second charging point is a good idea or not. I don't care, why not.
> This authentication exploit bypasses the login screen despite BitLocker, so it's technically a BitLocker bypass

No. No, it is not. Let me give a similar example: lets say the drive requires a PIN and i ask the user to enter the PIN, then i still get to the starting conditions of this article.

Technically i could argue it now includes a social engineering variant of a bitlocker bypass, but it should be very obvious there is no actual bypass, only an "assume it is open" precondition. The article has an "assume the device is configured in a way that i can walk right past bitlocker to the lockscreen" and then calls it "Bypassing BitLocker in 6 easy steps". No, just no. Not technically, not theoretically, just no.

Not to be unfair to the author, the lockscreen bypass is clever and teaches a lot about defensive coding. It is a good finding. But the article gets dragged down by the sensationalist title, because the content is not what it says it is.
I use Krypton [0] as a virtual YubiKey, I like it a lot but they got acquired by Akamai and the GitHub accounts have gone worryingly quiet.

[0] https://krypt.co
The comment I replied to was asking about comparing those kinds of editor to "basic editors (e.g., gedit) and reaching for grep/sed/etc when I need something fancy." You certainly can't reasonably do most of those things with that toolset.
I personally use syncthing to push audiobooks to my mobile device and "smart audio book player" on android to play them at double speed. I even sync back up the played location. Being able to resume playback on device, I'm not sure, I've not had need of that.
GCP Outpaces Azure, AWS in the 2021 Cloud Report
Agreed--as a Florida resident, I have heard a variety of highly-charged opinions on this story from many of my fellow residents, but very few hard facts to confirm or deny any particular narrative.

I think the raid on Ms. Jones home was a grotesque and unwarranted use of police force, but I also think her "whistle-blowing" story is highly questionable based on the facts available.
> There was nothing politically hapless about Eric Schmidt. I had been too eager to see a politically unambitious Silicon Valley engineer, a relic of the good old days of computer science graduate culture on the West Coast. But that is not the sort of person who attends the Bilderberg conference four years running, who pays regular visits to the White House, or who delivers “fireside chats” at the World Economic Forum in Davos.

My Grandmother had a subscription to American Free Press, a weekly/biweekly/monthly (?) newspaper. One of their reporters had covered the annual Bilderberg conference for decades.

The regular media did not discuss the Bilderburgers' activities. The organization kept a very tight lid on the existence of their group and where they'd be meeting, but that reporter successfully figured out what they'd discussed year after year. Future presidents tended to show up -- it was a part of the vetting process I guess, "will this 'Bill Clinton' fellow be useful to us?" and so forth. Both parties' candidates would tend to make an appearance, so they'd be up to date on the Agenda for the years to come.

The Bilderberg group was named after their first meeting location, "Bilderberg Hotel, a hotel in Oosterbeek in the Netherlands, namesake of the Bilderberg Group" (wikipedia disambiguation page).

https://en.wikipedia.org/wiki/Bilderberg_meeting
Or put another way, why is it okay that baker can refuse to bake the cake for a gay wedding, but Apple must be compelled to work with Parler?
Meetings are generally held in meeting rooms (well, pre-Covid that is). In meetings, you typically have something to present or discuss over.

It's generally better for employees to have a single machine (that they're very familiar with) to present on rather than having a machine per employee in addition to a machine per meeting room.
The XPS 15 has a dedicated charging port that can draw much more power for the discrete GPU - up to 130W, but lets you charge it on the go with the USB-C port. You get full graphics performance with one but have the choice not to lug around a larger power brick on the go.

Why would I want only one option when I can have both?
We are working on managed VictoriaMetrics, which will have free tier suitable for your needs. In the mean time you can try storing measurements from your meteo station in a single-node VictoriaMetrics, which can run in resource constrained environments such as Raspberry PI. It supports various data ingestion protocols (CSV, Prometheus, InfluxDB, Graphite, OpenTSDB, JSON), so it is likely you'll find the best one for your case [1].

On a read side VictoriaMetrics is compatible with Prometheus datasource for Grafana [2].

[1] https://victoriametrics.github.io/#how-to-import-time-series...

[2] https://victoriametrics.github.io/#grafana-setup
Reaching a conclusion with so many unknowns (specially unknown unknowns) is risky.

That life must evolve in enough number of planets doesn't mean that the next one is close. And that interplanetary travel is practical doesn't mean that interstellar or intergalactic travel must be. And considering the speed of our current technological development, vs the time needed to get to the next stage in colonization, something big may emerge in the middle. Or something different and unexpected.

In some way, we are like churches deciding what and how a god may think. We are not at the right stage to judge based on our lack of knowledge or perspective. It may not be just one road forward, and going galactic may be the wrong one.

I prefer to take one step at a time, and solve our current roadblocks, if we can. Maybe we have the great filter in front of us in plain view and we can't recognize it.
What shitty advice. “Just go ahead and do whatever horrible things you want, don’t worry about whether people will hate you for them.”
This makes perfect sense - but is a bit problematic given the intended goal of the project. They've built a bot that plays like an 'averaged group' of humans, not a human. Maybe they need a better way of sampling from the outputs.
I think he meant that naively implementing an algorithm may not be bounded by the O notation he/she originally wanted due to code calling other functions “hidden” from the programmer.
I bought a new MacBook Air last year, and a USB A/C adapter with it. I somehow lost the adapter. Bought another one. Then bought a dual A/C USB thumb drive. I'm getting along, but would appreciate at least one USB-A port.

I am also a photographer, and miss the SD port. But I realize that's kinda niche, and can understand it going away. I wouldn't be surprised to see cameras move away from SD cards eventually anyway.
ones where he has CS researchers / pioneers like Dennis Richie or Chris Latter, well known AI researchers like David Silver, or people from somewhat AI related fields like biology or neuroscience

other non-AI guests I'm sure are plenty interesting, that's just not what I'm looking for in a podcast
How would you approach setting up and maintaining the following nano-aquascape, with an outcome similar to the Walstad method[1][2]:

* freshwater 11.3L natural tank, ranging 9.5L - 11L through evaporation

* no powered filtration, aeration, and optimally without a water heater

* little if any sunlight

* water temperature in tank may range 18.3C to 24.9C through each year

* 1 or more aquatic creatures, preferably one creature living a few or more years, removed within a day if they die and replaced within 3 weeks

* no water changes after 2-3 months of stabilization initially

* no more than a few hours of initial setup

* little maintenance required to sustain itself as described other than topping tank with inexpensive bottled spring water

* high probability of sustaining itself within these constraints for many years

I read and experienced that smaller tanks are harder to setup with 10cm of sand possibly needed for Walstad method that size tank[3].

In "Ecology of the Planted Aquarium" and on her site, Walstad writes that she had success with 3.8L and 7.6L tanks using her Dry Start Method[4] to setup the plants, and then hosted shrimp. However, as interesting a shrimp are, my experience with ghost shrimp was that they were inexpensive, looked lively, and then died suddenly within weeks. She speaks of red cherry shrimp, which I've not found locally. I recommend her site[5] which has a lot of information about Planted Aquariums along with the latest corrections for her book; she also describes how she bred guppies in 12 gallon plastic tubs without any filtration or aeration[6] outdoors 15.5C-25.5°F.

[1]- https://amazon.com/dp/B00DB94K5I

[2]- http://www.theaquariumwiki.com/wiki/Walstad_method

[3]- https://www.fishlore.com/aquariumfishforum/threads/setting-u...

[4]- https://dianawalstad.files.wordpress.com/2017/10/shrimprcs20...

[5]- https://dianawalstad.com/aquariums/

[6]- https://dianawalstad.files.wordpress.com/2020/08/small-scale...
Intel: Palace Hill
Seems unlikely, if that was the case then wouldn't you expect such things to be much more common in largely secular countries than the US?
You can do all that and more in vscode as well... you just have to "learn to master and config" it with your own plugins in JS. It's not that hard.
Add SLS to the list of embarrassing aerospace projects from America F-35, 737 Max, and Starliner.
Shhh! Can't let the facts get in the way of a good narrative.
You are not weird but you are missing the point of why companies do it.

These things have the benefit of enabling you to get to know your colleagues, establish networks, break down communication blocks, etc. In other words, in addition to being fun, they also benefit you as an employee and the company overall.

That's why the companies spend money on it and in my experience they get return on it.

Hope this helps.
I agree on the idea around usability of YubiKeys. I have them also and believe they are great, but I never seem to have them when I need them. Of course, maybe its on another floor or another room and I am being lazy not walking over there, but it is an added inconvenience on a process that needs to be balanced between security and convenience.
I agree. I’ve seen more prominent figures argue against global state often. Using global state is certainly not idiomatic Go.
I agree. Reading all these comments made me realize how selfish some people could be.
And what % of users are actually advertising their domain, running BGP, and operating their PBX? Now what % of users go through Gmail, Lumen, or AT&T and what happens when one of those go down? Which of these don't have centralized administration/regulation bodies? Which of these will a user say they haven't had hours of downtime with in the last year?

Even in the case you have a very well federated system with users very dispersed and the federation had 100% uptime and no bugs... how does it affect uptime for users? A central server going down 1% of the time for all users is the same as 1,000,000 decentralized servers being down 1% of the time for their 1/1,000,000 users. Nobody cares others can use the service during an outage they care they can use the service.

Federation capability at the protocol (even if it's not used in a truly federated way) provides a lot of great features, uptime for users isn't really one though. The most relevant is probably when Signal shuts down intentionally (tomorrow or 1,000 years from now, doesn't matter) you can't just migrate to a different Signal server without all of your contacts moving to the same one. This is akin to taking your /24 with you to your new ISP, porting your phone number to a new phone provider, or taking your custom domain email from Gmail to a different host and the ability to do that on those federated systems is probably why they remain in use today.
He does know what branch prediction is, he is a CS graduate, That was just for his audience.
Yes, but as has been noted multiple times in this thread, there are more than 6 visible stars in the cluster. They're just not visible at all times of year, and certainly impossible to see for most of us who live in/near cities.
I wrote a Raytracer for DOS, 16 VGA colors (2011) [video]
I own that magic box, mine runs 3 x 4K screens, via two USB-C and one DisplayPort. I have it plugged to right rear port because of the charging heat rumors.

Rumor source: https://apple.stackexchange.com/questions/363337/how-to-find...

EDIT: Not HDMI, DisplayPort.
Lex is a creep. Amazing he's managed to fool so many people into subscribing to his mediocre podcast.
>Schiller had squashed all hope of the SD card returning ...

>Schiller said “probably not” but added that “nothing about the future is in stone and things can always change.”

what?
No, they don't. You're an exception. Most people choose based on practicality or price. Free = even better.

I find that one of the few places where people act based on their values is raising children. And even there, a lot of people skip raising their children completely.

For everything else: convenience, price, maybe risk.
Too bad the government can't ban a communications platform under the First Amendment. Just give the offending companies huge fines (billions of dollars) instead.
The Guardian seems one level above a tabloid at this point, so I’d be highly skeptical of their commentary.
Yeah, sounds familiar..remember the DVD region codes?
idk about you but when i look at it I see 6. been trying to spot #7, no luck so far.
>At this point I think it would be pretty hard to do deals with public companies without having Type 2, and our domain isn't even that security focused.

Even if you avoid SOC2, the security questionnaires (mostly avoidable if you have SOC2) from large companies can be so onerous if you're doing any sensitive work for them that SOC2 would be cheaper and less effort than the time spent on the questionnaires and infrastructure changes to meet them.
Software developers aren’t most people
This article published the day before the SLS test, but I think it's important context (engineering vs. financial corporate culture) for Boeing's involvement, and just how dang difficult it is to get systems integrated (software, hardware, and um giant rockets). The article notes just how well Spacex has been doing even under greater scrutiny by NASA, while Boeing might have been implicitly trusted as a name/brand with a legacy, but had delivery/design/testing stumbles anyways.

(WSJ, paywall etc.)

https://www.wsj.com/articles/boeings-other-big-problem-fixin...
this is way too optimistic for the US criminal justice system. police and prosecutors regularly lie on warrant applications, and judges regularly grant the flimsiest of justifications for search and arrest warrants. there is no legal accountability whatsoever: the most that defense attorneys can usually do in the case of illegal search warrants is to have the illegally seized evidence excluded; there is no punishment for the state using its immense power to harass and intimidate individuals.
My vim configuration, environment, and screen splitting using tmux giving me CLI tools in other windows together gives me every single feature you listed and more. My shell and environment being Turing complete not counting vimscript I imagine it would be hard to find anything a IDE could do that I can not.

For reference: https://gitlab.com/datenstrom/home

Edit: just saw your response to the sibling reply didn't realize you included (enhanced) Vim in IDEs as I haven't heard of it referred to as one before, quite the opposite usually.
https://cdn.jwz.org/images/2016/hn.png

nice.jpg