skysight-inc/HackerNews huggingface dataset:
Tripping over a power cable was a problem created by a battery life that was shorter than a work day, IMO. I have been charging my M1 Mac at night, like my phone.
Yes, absolutely, this is for company internal use only. I imagine the resources for a server that talks to the outside world are much greater.
The linked article is correct, but uncharitable. It correctly states the behavior of two-factor auth systems but incorrectly understands their value.

Yes, 2FA won't protect you from being phished by a site if you aren't careful. 2FA absolutely will protect you from a phishing site using the password it stole.

So no, when someone says "Use 2FA if you might be phished" you shouldn't be replying "That's not how 2FA works", you should reply "That's right! But let me explain why you are still at risk of password theft and should still be careful."
I believe you can probably get a good answer to your question with Beall's list: https://beallslist.net/
Calling all Trump supporters "nazis" is.
A Lets Encrypt for email certs is badly needed.
I love Dataflow, but share the same concerns. It feels like something that's going to die of neglect even if it's not intentional.
How do you selectively stage several hunks from command line in git? - Imagine you edited a large file, fixed two different things, now you‘d like to select the changes related to one thing first and commit them. And then the next changes.

In Magit you visit the file you changed, hit `C-x g' and see all diffs. Now you can review and select hunks by hitting „s“ (stage), go to the next relevant hunk and hit „s“ again to mark for staging. And when you‘re done selecting all changes that are relevant for one ticket, you hit „c“ twice to write a commit message. And off to the modifications/ hunks regarding second ticket.

So how‘d you do this in command line?
I wonder if e-ink might be better -- less energy, could work with a general keyboard backlight?
Oh snap! Don’t leave us hanging! Do explain in details what VSCode is sending to Microsoft.
We did not, we removed bullet games because they tend to be more random, and also did some filtering of the other games to remove moves made with low amounts of time remaining for the same reason. But the models don't know about different time controls right now.
I mean if that particular protest had known violent looters in it (ie: Thugs) then I would appreciate the heads up. I don't want to end up with a brick thrown at me while walking home or something.

edit: My liberal friends were generally concerned about our safety during the early BLM protests in our cities. Supporting the cause doesn't mean supporting the violent participants or wanting to get entangled with them.
According to wikipedia it wasn't free healthcare, it was health insurance, which people were mandated to have as of 1941.

https://en.wikipedia.org/wiki/National_Socialist_People's_We...
Hello HN community,

My brother and I co-founded Cloudshim, a light weight AWS cloud management platform for developers, allowing you to easily visualize your cloud inventory, view associated costs and areas you can save.

We crafted every feature based on issues we experienced building a passion project on cloud. View spend by product, tags, account and deepdive into operational data with a single click. Get reports daily on Slack and Email. Set schedules on underutilized resources. Cut costs with Inventory, rightsizing and Saving Plan recommendations.

Cloudshim is built to deliver enterprise level cloud management to SMBs and individual developers. We offer a forever FREE tier for accounts with < 1k monthly spend on AWS.

Setting up is easy and < 2 minutes. We would love to hear your thoughts about it or if you have any questions.
Amazon has a terrible counterfeiting problem, including for books. It's possible that a third-party seller made a counterfeit, low-quality print of the book and set a lower price that meant they got chosen for the “buy button” by the Amazon algorithm (this has happened to many books). Since the reviews don't distinguish between sellers, you get this problem.

If you buy from a legitimate book store, perhaps this can be avoided?
GitHub admits ‘significant mistakes were made’ in firing of Jewish employee
They're definitely thin on explaining the sample sizes. They say 54 configurations over "nearly 1,000", which suggest 17 tests (918 runs) or 18 tests(972 runs) per configuration.

They run 4 different benchmarks (CPU, network, I/O, TPC-C), suggesting an average of around 4.25 or 4.5 per bechmark per configuration. If instead they ran 16 per configuration, that would be a nice round 4 per benchmark per configuration, but total runs would drop to 864, somewhat less than "nearly 1000".

Assuming my figures are sound, we're looking at 4 to 5 samples per combination. Without some information about the within-group variation, though, it's difficult to distinguish what variation was due to "weather" and what was due to the platform.

I do however think that the effect size of some results is enough to make them useful (eg, network throughput). But all of the close results (eg single-core difference between AWS and Azure) are not very reliable, in my view.
I've been using GCP since 2014 to run cocalc.com, and at some points in the past people have used it to launch attacks or mine bitcoin (we make that much more difficult now). Google did temporarily block or suspend our resources, but the experience was nothing like "nobody to call, nothing to do". Instead, Google contacts you immediately, and you message back and forth with real people who have the power to instantly fix things. In any case, in my experience the reality of being a GCP customer is not the same as the fear, uncertainty and doubt that you have.
You can be both of these things. The guy in the Camp Auschwitz hoodie can be a nazi and a protestor!
Thankful for the in-depth analysis. I'm still bullish on ETH because the entire blockchain economy is very speculative. Trying to fault Ethereum because it's not as stable or secure as BTC doesn't seem very fair.
I grew up in a rural area in the south and seeing people with confederate flags, engaging in blatant racism, and espousing ideas like neo-nazim wasn't unusual. What was unusual was to see these things normally seen in sparsely populated, largely homogeneous in terms of background areas in the middle of the nation's capitol.
We use GCP and have a real, responsive support channel. See https://cloud.google.com/support .

Are you saying lack of a responsive free support channel?
This looks interesting, but:

1. when you go there, it loads a sample 170,000 row file automatically. Can that be disabled? Maybe add a "Load Sample" button...

2. on mobile, the hamburger menu items ("Read more" and "About") don't work

3. the default SQL is "LIMIT 1000", but only 500 rows show up

4. it'd be nice to be able to press Ctrl+Enter (or some shortcut) instead if clicking "Run query"

5. does it support JSON nested objects? eg [{"profile":{"firstName":"Gabriel"}}]
> Let’s not forget also that it’s NASA who have also drastically changed their strategy and have enabled private companies like SpaceX to shine through their partnerships.

That's because they're required to by law. There's an entire section of the United States Code that's dedicated to this.
Lincon Project threatens VRBO if they don't cancel all guest bookings in D.C
How to turn a Notion doc into a website
I have substantial concerns running my core infra on Google products: deprecation, inhuman support, the allegations of anticompetitive behaviour in the states’ antitrust lawsuit.

Might be good tech. Business risk seems high.
I speak English and two slavic languages. I dont speak Russian much, but I do understand some things in it.

I was not confused by this essay in English at all. It was not just clear what it meant, it was completely usual way to express the familly name when talking in English about Russians.

When talking about people from another country, it is acceptable to use grammer, specifically plural form, of language to are using.
> I've never understood

This is the reason :)
Exactly, the pool table itself doesn't help with retention nearly as much as the relationships people build while using it does.
Maybe it's an unpopular opinion, and biased by fields I've worked in as a grad, but I think you really just can't validate a particular paper without a background in the field. You need lots of context: recent works of that university department, credability/background of the last author post doc/professor, state of the art and cornerstone works in that field.

You could probably gain an entry level background (except for highly mathematical or medical things) by spending 5-10 hours a week for a few months reading various papers/online discussions. Assuming you have access to those forums. You should know thats the lower bound amount of literature reading full-time students have to do to keep up with their own field.
The amount of mercury intake with vaccine that was preserved using thiomersal is smaller than amount mercury taken into organism when you drink a cup of tap water in many countries, including tap water declared safe to drink.

That's why it wasn't justified.
Scope Graphs
I'm a bit dubious about the networking results they present. I did some quite extensive network performence testing last winter on those three CSP, and even if single queue TCP+gso performence can behave like this, I find the claim 'GCP is 3x faster than AWS' a bit bold. It's definitely possible to get 50G of TCP traffic in AWS, and a lot of things are in the balance (MTU, number of queues, drivers...) that make this claim a bit weird to me.
This is akin to asking how do you start your car if you lose your keys? Enter your house? You have backups or other recourse to get things rekeyed.
Ok so please enlighten me on what basis nations should form?

The whole basis of a nation is the creation of an in group and an out group.
If the classroom is located in Japan, then where are all the other rooms located?

This s vital information, of course.
Using a 741 op-amp you can create a circuit which has negative resistance over a range, but once you go outside that range the linearity disappears and the relationship between voltage and current is otherwise.

These are areas where you need to be explicit about ranges and limits.

Enjoy!
Way out of scope, but I'd argue that "incel culture" absolutely existed in the 80's (one of the reasons I picked the term). It just hadn't been named yet, and no one had thought to try to politicize its leanings. And yeah, I say that as a long-recovered 80's incel.
There is lots of evidence that there were nazis among the insurrectionists. Shirts with references to Aushwitch, "six million wasn't enough" etc.

How much research have you done before reaching your very definitive and incorrect conclusion?
Coinbase CEO must be patting himself on the back right now.
Are you just willfully ignorant?
> massive tanks of explosives flying through the air at supersonic speeds

I mean, so were Concorde jets...
Reminds me of the Republic of Vermont [0], which preceded today's US state of Vermont. They were in talks to join Quebec before the British surrender at Yorktown left them surrounded on three sides by the fledgling United States. They stayed independent for another 10 years before joining the US as the 14th state.

Had their own currency for a while [1], of which you can buy replicas in many a gift shop.

[0] https://en.wikipedia.org/wiki/Vermont_Republic

[1] https://en.wikipedia.org/wiki/Vermont_copper
I recently experimented with the Yubikey OTP feature. Like TOTP, it can be proxied through as there's no challenge that includes signing the website name like FIDO. Also.. The Yubico OTP feature types using QWERTY with letters and no numbers. As I use dvorak, this resulted in considerable confusion as two yubikeys behaved the same.

Interestingly, copying the credentials between Yubikeys will not result in an accepted yubikey OTP. The serial seems to be used somewhere in the calculation.

A yubikey, using the CLI tool, can have TOTP credentials stored inside. This can be used in conjunction with grep and sed for any CLI scripts that may interactively request a TOTP.
I would like to pay more for a usb-c magsafe connector. Even 5x the cost of the current cheap cables would be worth it if it 1) actually worked 2) was standards compliant in all the ways that mattered. USB-C is a dice roll right now and the magnetic ones even moreso.
Unrelated meta-question:

In the screenshots in the article posted by bmiller2 https://www.theverge.com/2021/1/15/22232766/github-employees...

You can see something I honestly dislike very much in discussions - a "bombing" of emoji reactions during discussions.

For instance, the "I think this comment is completely appropriate" has 35 "+"-sign emojis. I find this concept of "reaction bulldozing" to cause any discussion to be shut down prematurely. Adding a reaction like that is so simple to do and doesn't require any effort, it's very easy to do, but actually adding your own opinion or nuanced explanation is very much harder, especially when the other side then already has so many "reaction emojis". I feel like the "signal-to-effort" ratio is completely skewed by this. You'd have to be a very assertive person to pierce through it and offer your, possibly only slightly, different opinion after seeing this.

I'm not sure what exactly it is that I dislike about it - does it stifle discussion? Does it diminish diversity of opinions? I think it does, if you're not early enough to give a dissenting opinion then it's you against the group, and I'm guessing a lot of people at that point would rather not react at all anymore.

Am I alone in thinking this? Is there a solution for this? I often encounter this phenomenon in discussions with engineers, not just with contentious topics like nazi's, but also e.g. styleguide or architectural discussions. I hope there's a word for it so I can learn how to deal with it, because currently I really can't pinpoint it.
You really went for "thug"? Instead of, say, the equivalent far-left blood-soaked ideology of communism? I think it's clear how you feel about BLM.
I agree spanner and cockroach are the future. Most people don't need a database that can scale that well, and spanner is too expensive to use unless you really truly need it. Also, google and cockroach have not done enough marketing. Look at all the marketing mongodb did - they actually managed to convince people to use a database that would regularly lose data.
And HTML5 did not kill off Flash. People kept right on using Flash until Apple sicced millions of angry iPhone users on them.

I thank Apple for Flash's demise. I had no love for Flash. What I blame Apple for is treating their customers as pawns in a game. They sold their customers a broken product so they could gain leverage.
Real transport level security will be possible with MTA-STS (rfc8461). Use DNSSEC, enforce TLS, and verify server certificates. Also I haven't had much trouble with spam recently (spam filter works fine).
Salaries in Eastern Europe much lower than in the valley, news at eleven.
Independent from the events: The way Github employees communicate with each other makes me kind of uncomfortable.

In the companies I've worked here in Europe, such discussions just would not happen in a cooperate chat room.
Ehhh, Matrix is more than a transport protocol though, it lives a lot higher up the stack. It would be akin to trying to make Signal into a Slack client. So you’re basically saying “if you paper over all the weirdness of Matrix with a better UI” which is easier said than done.
GitHub's company statement: https://github.blog/2021-01-17-update-on-an-employee-matter/

They've re-hired the employee and the Chief Human Resources Officer has resigned.
Apple's approach to ports is bad design.

I think they were envisioning a USB-C revolution that hasn't come yet. You can buy new devices or buy adapters, but either way the computer is asking the user to adapt to it. I have a Razer laptop for playing games and they have some USB-C ports and some USB-A. One of the USB-C ports connects to the thunderbolt bus. On paper, the Razer has less connectivity bandwidth, but it's my macbook that I always fuss over.

I see the attraction in making all your ports USB-C, but that's just not where the computing world is yet. Give us 3 USB-C and 2 USB-A. Give us 2 of each and a specialized charging cable.

P.s. I would be more into the USB-C charger if I believed it was 100% safe to charge other devices with it, but I'm not sure that's true (even though I trust Apple - I'm not sure about the other devices)[1].

[1] https://www.androidauthority.com/state-of-usb-c-870996/
I’m not familiar with magit but from a quick skim of the “visual walkthrough” I think you can get most if not all of the functionality either built in to vscode or with the free “git lens” plugin, one of the most popular in the extension directory.

Here’s what’s built in:
https://code.visualstudio.com/docs/editor/versioncontrol

and git lens:
https://marketplace.visualstudio.com/items?itemName=eamodio....
Why choose cyber security over software development?
It seems like a textbook case of 'use it or lose it.'
This seems needlessly pedantic since even Apple uses the term iPadOS.
This is only tangentially related, but if you are into Rust & GPU programming you should check out femtovg (https://github.com/femtovg/femtovg) a nanovg Rust port.
Right now it supports OpenGL and WebGL, Metal backend is almost done, WebGPU is planned.

You can run it in the browser https://tronical.github.io/femtovg/examples/index.html

Join the discord https://discord.gg/V69VdVu
Specifically, the phisherman's options for a typical Security Key (a physical authenticator device you buy and maybe plug into a USB port) are:

* Spew random crap claiming it is your githubverification.com key ID, ask you to sign in with this ID. Your authenticator won't recognise this ID and it doesn't work

* Proxy your real ID from github.com and present that from githubverification.com asking you to sign in. Your authenticator won't recognise this ID because it's for the wrong site, though it doesn't know that's why. It doesn't work.

* Proxy the ID from github.com and insist this is github.com. Your browser says "Er, no? This isn't github.com fool" and the UX doesn't fire.

Notice that the attacker not only doesn't get working credentials for signing into GitHub, they don't even get broken failed credentials that don't work, they just get a Javascript error at best.
I left my job at Microsoft to develop this, because I believe it'll help blind people in the current environment of remote education and remote work. It's free during the public beta; we'll announce pricing soon.

Basically, the meeting host uploads a PowerPoint slide deck, we process it, then we provide a URL that the meeting host can give out to any blind attendees. As soon as someone hits that URL, we send in a bot that connects to the meeting, watches the screen-shared content, and tries to sync it with the uploaded slide deck, so it can show an accessible version of whatever slide the presenter is displaying.

Currently only supports Zoom. Support for Teams and other meeting platforms is coming soon.

I won't share full details about how this is implemented, but I can talk a little about the tech stack. The web app is written in Elixir using Phoenix. I was especially attracted by Phoenix LiveView. We're running on AWS.

Forgive the marketing copy on the home page; I didn't write that part.
Then you would end up like England.
So basically... government could be as efficient as the private sector if it wasn't government?
I enjoy typing on the macbook more than my Lenovo now. I've just gotten used to it, I suppose.

The key combos take some learning - protip: Few things are "ctrl+" unless it is Firefox or terminal, in my experience.

I do agree in missing the nav buttons.
Price. Yubikey's "best seller" goes for $45, that's grotesque. I would be surprised if the hardware costs exceeds $2 per unit and the software (or similar) can be had for free.
The network throughout is eye opening given how close most of the other benchmarks are. GCP's lowest performer is >50% higher than AWS's top performer and more than double Azure's best.
The attacker could proxy the 2FA request from the real site using the password you enter and therefore you wouldn't be protected.
Discussed at the time: https://news.ycombinator.com/item?id=22559786
It's the equivalent to audience reaction in a debate. If you don't want it, take your conversation private.
from video it feels like volume is half of what real heart pushes???
I feel like I disagree with the bottom-line a bit - a 100/0 split seems to ignore the possibility that a future stable state of the Ethereum network will be capable of supporting stablecoins or other coins with arbitrary monetary policy that are capable of matching or surpassing Bitcoin in all metrics of technical merit. I would not want to be a Bitcoin maximalist in that situation.
Your family can't fire you.
disucssion of that statement here https://news.ycombinator.com/item?id=25812655
Game Dev. is not a lucrative SWE career in Europe, unfortunately. Pays less than most SE jobs. (and SWE salaries are lower in Europe to begin with, compared to the US)
> I find it's more like giving the key to someone to take care of in case you loose your copy.

And also asking this same someone to take care of the safe.
I doubt 95% of users even sync anymore. The only reason you used to do that was for podcasts, music, and backing up. Now, that’s mostly pointless thanks to streaming services and backups you can do in the cloud.
> the most expensive campaign ever waged in the history of U.S. ballot measures

Michael Bloomberg's 2020 presidential run is close to the most expensive ever. Despite being a successful businessman (supposedly people like this) who also ran a city with more people and a larger economy than most states, the only votes he won were from American Samoa.

I'm not convinced money buys elections.
> 2FA absolutely will protect you from a phishing site using the password it stole.

The author is pointing out that they will steal both the password and your 2FA token.
Trump Administration Accomplishments
How about

$ git add -p path/to/the/file

?

Combine this with your favorite tool for command line auto-completion of paths (and, maybe, a git alias to avoid typing `git add -p` all the time) and it's extremely fast.
Considering a nation is defined by its borders, I would assume land area rather than ethnic groups.
Don't use USB-A devices?

I'm sorry for the crude language but that's absolute bullshit.
I don’t mean to ask this in an accusatory gotcha way I’m just wondering what your stance is on someone warning their coworkers in Portland, or somewhere else that there are “looting communists around so be careful.” Or something similar referring to a blm protest. Do you feel this is also appropriate in a workplace channel?
I You can do it, then do it. Build something on top of IPFS. Decentralize.
The BSD license does not require that you redistribute it under the BSD license

Which line of the BSD license allows you to remove the BSD license from the source file? Since the license specifically says "Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer."

so long as you retain the original copyright notice.

Which they did not retain.
Yes, that’s basically the author’s point. But it does protect you against someone trying to use your password on another site.
In creative industries, some people will accept almost any salary, because the alternative is not working as a creative. Video game development is notorious for this, but it's even worse in other areas. Try becoming a professional painter, sculptor, or writer.

I always advise people against going down that route, unless they are literally ready to sacrifice half of a lifetime of earnings for it. Unfortunately, choosing wisely requires a level of maturity that you do not possess when it is time to make the choice.
An account of a story told in a similar vein:

https://en.wikipedia.org/wiki/The_Eye_of_Argon