skysight-inc/HackerNews huggingface dataset:
Account recovery and resets based solely on mobile numbers are not secure. 2fa based on text messages (SMS) are not secure and very easily hijackable.

There are solutions out there where you can avoid the mobile number as the sole key for backups. The saas pass authenticator works offline by default. You can duplicate it on multiple devices without a mobile number. You can also set up a recovery with a mobile number AND a master password (custom question answer capabilities as well.
> both The USA and Canada have been toying with the idea of dropping daylight savings time

Individual states are toying with the idea as well [1], which presents a problem if one of the tzdata locations decides to change its rules. You're screwed no matter what you choose to do. :-(

1: https://www.syracuse.com/state/2020/11/state-senator-introdu...
Doesn't sound like he did anything wrong. Helping to spread technical knowledge around the world is a praise worthy act even if the USA considers it illegal.
I'll try to answer this from a JS-specific perspective. As someone previously mentioned - you do get hash checks if you're using `npm ci` in your CI/CD setup. You get the resolution path as well. Which is all you need to reproducibly resolve dependencies, *if* you have set up npm correctly in your pipeline. It would be unlikely to be exposed to this particular attack, at least not automatically in your deployment pipelines.

However this is still very, very dangerous, because of day-to-day engineering, really. Any engineer doing a simple `npm install` can inadvertently bring in and execute malicious code from their machine. From there on out it would be somewhat trivial to gain further access to the same network the code war run from.
Nearly all personal hardware wallet multisig setups are insecure
It reminds me of The Pace regarding motorcycle riding. I think there are a lot of places where this is relevant.
I believe they mean the lawyer hotlinked [1] their image so that every visitor to the lawyer’s page would result in an image download from their server.

[1]: https://en.wikipedia.org/wiki/Inline_linking
He deeplinked to an image file, whilst claiming on his website that such action is illegal.
Maven Central has used PGP for adding "trust" to library authors since the 90's!

https://central.sonatype.org/pages/requirements.html#sign-fi...

If only people creating new package managers would bother to spend an hour or two learning prior art.

With npm, you can only add "trust" to npm itself LOL: https://docs.npmjs.com/about-pgp-signatures-for-packages-in-...

What a joke.
Tangential observation: Google Translate detects your text as Frisian, but regardless of whether I select Frisian or Dutch, it gives an identical translation into English. Which is it really? And are the two languages really so similar that Google should be able to understand them interchangeably?
A meetings timezone can be independent of a users, yes. E.g. the meeting time should be specified as e.g. "8:00 America/Los_Angeles" (or have a location-based lookup, but thats another level of indirection). That way it follows whatever DST rules there are, but your local phone time being in NY time only affects your display.
Ask HN: Any tech stock recommendations based on solid companies?
Not interested in gambling/casino/GameStop type shares.

Interested in tech companies with fast growing share prices based on a good company with interesting tech.
Actually we do have a fully FOSS version: https://github.com/PostHog/posthog-foss

Main repo contains some enterprise code.
http://kill-or-cure.herokuapp.com/a-z/c#term133
Exiling them as punishment for something they are doing now when it still is illegal is a retroactive criminal sanction.
„It kin net!”

Which means “It's not possible!”, but sounds like “It's just barely possible!” to Dutch not used to the language and dialects from the North of the country.

This commercial was popular back in the day, and is a tongue-in-cheek exploration of this topic:

https://www.youtube.com/watch?v=NUXiqkAKr-0

(Piss-poor quality recording unfortunately, but many Dutch here will remember having seen it.)
Something like this was already possible in 1999, in cats. But it required to put electrodes on the lateral geniculate nucleus.

https://www.jneurosci.org/content/19/18/8036
That domain name is probably going to run them in trouble though =/
another text. some warranty info of some product in multiple languages was recognized as "drivers license":

"First Name": "400 MHz ~2433,5MH:"

"Issuing authority": "0MHz~2833.5MH:"

may be the requirements about the documents the system can accurately recognize need to be explained in the app.
$699? perhaps they overpriced it
I've noticed that in the last five years or so there's been a trend to automatically dismiss any criticism or argument with "you're just jealous" rather than addressing it's merits. Any wealthy person is automatically immune from any sort of criticism - because if you criticize them it's only because you're jealous.

It's an ad hominem attack, nonsensical, tired, and, as someone who has experienced a lot of wealth envy in the past, always strike me as so incredibly insincere.
The last four years have been some Twilight Zone-level regressions in the simulation

Glad to see the core maintainers are reviewing pull requests again
What's different now? Cops still aren't punished when they murder people, despite the prevalence of cell phones.
That's a false dichotomy though. Having a standard way of doing things between projects does not require running a complex distributed system with dozens of pieces all engaged in constant chatter. It's a testament to the failings of our profession that we apparently cannot agree on a sane baseline toolset less complicated than Kubernetes.
Unicode Characters in the Unified Canadian Aboriginal Syllabics Extended Block
This is NOT a supply chain attack. Solarwinds was a supply chain attack. This is a typosquatting demonstration that happens every one or two years.
swisstopo is really good, but as far as i know, sadly, only some data is open, and not all of it
Thanks! I'm a fan of notebook-based work and just interactive programming in general and even if I don't use Jupyter myself it's exciting to see innovation in the space.

My complaint is really more that for this sort of thing I feel examples should be front and center; Jupyter "sells" a better experience, so show me how easy and ergonomic it is to use!

Hope that helps. Right now it looks like the sql parts are kind of the equivalent of running a subshell and displaying the results, with no communication to the "main" code. Is this accurate? Is there a way forward in the future to e.g. pull the data down with sql and then do some further munging in another language?
I feel you 100%. The timing of this post is near perfect with what is happening in my life. I run my own web server with email hosting for clients. I’ve spent the last few years doing everything I can on the deliverability side but with no success. All the checkboxes have been checked but I still hit the spam folders. Just yesterday I gave up. I migrated all my clients to Office 365 and I did it knowing I was killing the soul of the Internet. But I was just too tired of dealing with clients who don’t understand why their emails end up in spam folders all the time. These clients also don’t have the same “values” when it comes to decentralization. They run small businesses and cannot afford this spam issue. I feel like there should be laws againsts what the tech giants are doing. Their spam filter rules are killing competition and the free internet.
I still have my great grandfathers Farmall Cub, it was the first tractor he and my grandfather bought for the citrus farm they homesteaded in FL, when he passed my grandfather restored it. When my grandfather sold the farm it was the only tractor he kept. My grandfather passed on in 2013 so I brought it down to my property in the FL Keys and use it as a yard tractor here. They just don't build machinery like those old tractors anymore.
Creating something without the intention of making money is different from creating something without the prospect of making money. The former is already covered by the likes of Creative Commons licensing or just not enforcing copyright.

But if I create something without expecting it to be successful why shouldn't that be protected on the off chance it does end up being successful?
Setting up a hashlink toolchain is really frustrating compared to something like Nim, which also leverages a C compiler.
I love coffee. Even as a child when I smelled it from the kitchen and my parents were having breakfast already I wanted a sip.

Coffee has been a "side hobby" of mine for years. Different beans, grinders, you name it.

But now that I am older I can see how bad it is for me. My sweat smells different (as if I haven't showered in days), my jitters are increasing, I get very unfocused and aggitated and worst of all, mild panic attacks.

I spent few years thinking that something was really wrong with me until I noticed that coffee has a huge negative effect when I am on crunch time.

I started with teas, still not a fan, and decreasing coffee. Also moving to decaf, where are hard to enjoy because of taste.

Not sure if anyone is on the same boat.
Hi, linmob here, I created this video and many others about Linux Smartphones, you can find them at https://linmob.net/videos

I have also been writing weekly updates (well, link lists) that try to capture what’s happening in this space, you can find the latest one here:
https://linmob.net/2021/02/07/linbits31-weekly-linux-phone-n...

The most important thing I do in this space IMO is the app list at https://LINMOBapps.frama.io

I look forward to your questions, ideas, feedback and contributions – the best way to reach me is via email currently (which you can find on my blog)!
This is deep in uncanny valley. Can it reconstruct images from our imagination as well? What about images from dreams? How far are we away from video?

If you know the series Max Headroom you probably know what I'm getting at.
There is an episode about dream-harvesting which Wikipedia summarizes like this[1]:

"In an attempt to get an edge over the major networks, a subscription cable channel turns to airing recorded dream sequences. When Carter begins researching a story on dream recording, he learns that the process can have fatal side effects for the donors."

[1] https://en.m.wikipedia.org/wiki/Max_Headroom_(TV_series)
The article indicated no such thing.
it's not and the article explains why
Better, they could return interests that maximize revenue for the sites you visit.

I imagine a distributed machine learning algorithm could probe floc with random categories, and hill climb using the results of auctions.
What would be the business model of a Chrome separate than Google?

Google paying anyway to keep it alive through a search engine deal like Firefox? that doesn't remove the link between the two financially.
It doesn't happen often here either. However when utility does your hear about it.
I love this, thanks.
If you’re looking to index/ process video - maybe we can help. Checkout Vidrovr (https://vidrovr.com)

Full disclosure im one of the founders.
PLTR - large moat, lots of orgs in the pipeline. Buying some 25% OTM calls 3 years out seems like free money to me

AAPL - I find it sad that they have such weird software bugs but the services fortress theyve built up under Tim Cook is a printing press. 230 calls also for 2023 seem like more free money

I like to run a DCF first in excel and then try to automate it when I'm comfortable with the discount ratio that I've assigned to a particular company based on some heuristic. The real trick is dynamically updating this value based on daily updates (sec forms, CEO gets hacked, etc) and automating it and spitting out a fair value. In general things are certainly not trading at the right value lol

just a thought
And to stay with the theme of the article: Chances are, the meeting actually _isn't_ intended to be scheduled for 9am CST, but rather 9am America/Chicago. The key difference being that Chicago only observes CST for half of the year, and most people would probably expect for their recurring meeting to happen at the same local time, regardless of the season.

If the meeting is in _the other_ CST (the Taipei one), there's good news: Taipei doesn't do daylight savings. On the flip side, Chicago attendees might dial in fourteen hours early, so Asia/Taipei is a safer bet, too.
The default has been changed in nano 4, and hard wrapping is now off by default.
Leonardo Da Vinci and Fluid Mechanics
Season of Docs: get paid to document open-source code
Re-read the OP. No connection is actually made to `signal.tube`, it's only a placeholder domain for triggering an Android registered link handler so that it will open in their app.
This would be a plagiarists manifesto. Just because I can't afford to copyright everything I write, that doesn't mean it's ok for anyone else to just take it. Also, what happens if i intend to copyright it when it's finished, but someone gets hold of a copy and publishes it before I'm ready? Some authors can take decades to develop a project. What you're advocating is a poorly thought out recipe for publishers to systematically rip off artists.
OR.. should they be in TAI? https://en.wikipedia.org/wiki/International_Atomic_Time
Can anyone recommend an OSM based turn-by-turn, iOS app that is CarPlay compatible?
How many of these features are present in neither statically typed functional languages nor dynamically typed procedural languages?

My impression is that Python has a) a lot of bog-standard dynamic features, and b) a few functional features (like most languages nowadays).

Group a) overlaps with functional Lisps, but no more than with ABC and Perl and Lua, so functional Lisps are not a great reference point.

Group b) overlaps with functional Lisps, but no more than with ML and Haskell, or even modern fundamentally-procedural languages like Kotlin(?) and Rust, so functional Lisps still aren't a great reference point.

It's mostly parallel evolution. It can be interesting to compare Python to functional Lisps because similarities are similarities no matter where they come from.

But I don't think that functional Lisps neatly slot into an explanation as to why Python looks the way it does. In a world where functional Lisps didn't exist Python might not have looked all that different. In a world where ABC and Modula didn't exist Python would have looked very different, if it existed at all.
40% or more of people voted trump, doens't make it the right thing to do does it!
>The Google Play store offers countless examples where graph algorithms and ML could identify the worst behavior for human review.

The last sentence is key: 'for human review'. Google feels humans are damage to be routed around. If there was a way to everything in ML they'd go for it, but if your solution requires human review it's a no-go.
How I manage credentials in Python using AWS Secrets Manager
I love coffee too, but I don't feel like it has the effect of "pepping me up" anymore. I drink it almost as a snack, now. I have taken my intake way down, though. I used to do 6 - 9 cups a day, depending on the day. Now I'm down to 2, maybe 3.

I was always irritable, now less-so. I am not sure if that's the coffee's doing, though. A lot has changed since my nine cup a day days.
yeah, but rreeeaaallly not good for my digestive system...

I think I'll try and make my heart live longer in ways that don't involve me sitting on the toilets clutching my lower abdomen.
Get https://www.speedtest.net/apps/cli , run it on a cron job, out put can be json or csv . What I like on this is i can set different servers. - Jay
An independent Chrome could provide this cohort data to other advertisers, as they clearly think it's very valuable. Google paying to keep it the default link doesn't remove the financial link, but it doesn't need to, it needs to remove the joint strategy and management decisions.
Sadly uBlock cannot block the counterfeit products.
As a Dutch guy, I'm just curious to hear everyone just butcher the pronounciation :-)
Airtable needs improvement, opinion asked
I really enjoy working with Airtable. Lately automated some internal processes for staff planning. It became the default tool to kick off projects requiring an underlying database that can be accessed via an intuitive table UI.

However, the more I am building with Airtable I am missing two critical features:
More advanced user rights management
Real world example:
Record A contains work schedule information for employee A.
Record B contains this type of information for employee B.
Employee A is able to see and change information in record A only.
Employee B is able to see but not change information in record B only.
Git like version control

Right now I am thinking about building an alternative that solves these problems.
What are your thoughts on this idea? Looking forward to exchanging thoughts.
wildly offtopic, but:

> the Biden-Harris Administration

this phrase made me stop in my tracks. its so bizarre that for the past 4 years, almost everything has been "the trump administration", and now its a pres-VP team.

i cant help but think its reflective of the open secret that biden was elected in failing health and is basically just a gateway for kamala. its probably also an appeal to the fact that shes a woman so its the PR win that just keeps winning. a darker part of me worries its a foreshadowing of hierarchy-less woke culture (see kamala's videos on equity and enforced equal outcome[1]).

i dont really have a thesis, but boy american politics is sure in a weird place. bettin money says its about to get way weirder.

[1]: https://www.youtube.com/watch?v=w4kowE_YIVw
Well, that's the thing about having the muscle. Ultimately, you can make that decision for yourself.
What? Adding dairy and sugar will offset the effects? Then the effects can't have been very significant to begin with. What if you drank black coffee, but also consumed sugar and dairy separately?
The problem with the meat industry is less the killing of the animals than the lifetime of suffering they have to endure before.
The half an engineer was just the last team member around, only doing essential maintenance to keep it working.
If they only used 20M€/a (which is a fraction of investitions in R&D and minuscule compared to the subsidies for agriculture), they could hire 10 managers (or just reuse the R&D infra) and pay 190 devs at competitive salaries (for Europe!) to develop Firefox the way the developers want it to be (and let the stupid Mozilla foundation do their BS of value-adds...).
Won't that drive fingerprinting to become the tool for the job? Much harder to prevent.
I guess it's a FTTLA 1GBps internet.
Those are all government funded and the data is private, correct?
copyright and open source, both of which turn out to be almost irrelevant in the face of automated Kafka-esque monopolistic bureaucracies.

What do you think the free software movement was all about, if it wasn't about avoiding Kafka-esque monopolistic bureaucracies? Read Stallman's "The Right To Read", from 1997.
The EU DST debacle has been such a shitshow that I have trouble believing the words "perhaps for last time". And now with COVID-19, I haven't seen anyone actually focus on implementing the damn thing.
Blue Orange Asia Marketing Co Ltd
Blue Orange Asia is an Award Winning Branding, Advertising, Digital Marketing Agency in Bangkok, Thailand servicing clients in Yangon Myanmar, Singapore
> If you ask for output in EDT, but the date is in December (which is not part of daylight savings time) then should the date output be UTC-4 or UTC-5?

EST is always UTC-4 and EDT is always UTC-5. Both of these exist throughout the year. The only change happening in Spring/Autumn is that some places change which time zone they currently observe.

This also addresses the second problem that you outlined. As long as the query is properly specified (if you want information related to a location, use America/New York; if you want information related to a time zone, use the time zone), you can always get an unambiguous and correct answer.
I've actually had that discussion with an ex-Army officer and he was adamant that the Army would support the monarch.

Mind you - he was an officer and from a rather posh guards regiment so that's kind of what I would expect him to say.

Mind you - the UK can only have a standing army with the express permission of Parliament:

https://en.wikipedia.org/wiki/Bill_of_Rights_1689
AI chatbots and how to determine the best one for your healthcare product
Tom Scott did a fun video of the general nightmare that timezones bring to the dev table: https://youtu.be/-5wpm-gesOY
It would if it means advertisers use that protocol instead of devising a zillion underhanded workarounds (html5 canvas fingerprinting, proxying third-party cookies as first-party, etc.)
Many years ago USPS provided a data stream that included every sorting machine operation a mail piece went through, the location it occurred (zip code), and the local time (sans timezone information). That was an absolute nightmare of a project that always had a few weekly cases of letters somehow time-traveling. Also, I was surprised to learn that there are sort facilities on tribal lands - I was not surprised to learn that they elected to record time differently from the state that surrounded them.
> Get the hell out, a SILICON chip? Are we sure it’s not a potato chip?

Could be a carrot or cucumber chip, who knows.

> Also curious, I though ARM chips were essentially spec’d by ARM Holdings and you merely bought a license.

No. Or not if you have the resources and will. You can license the whole architecture and modify it / rebuild it from scratch to your heart's content.

Some examples of architectural licensees that do their own thing are Apple, Qualcomm, Samsung...
performance and % can cause problems with tuples https://stackoverflow.com/questions/1455602/printing-tuple-w...
IE11 not
>longer copyright is going to disproportionately be on big works owned by big holders

... which were expensive to create, generally. Remember, copyright is not intended as a "reward" or a tool for social redistribution, it is intended to incentivize creating new works.

An argument can be made that allowing the $100m movie production to pay for longer copyrights than the $1,000 amateur shoot gives the creators an incentive to run bigger budget risks, because they can monetize it better.

(I don't agree and I do think 28 years of blanket protection should be enough, but the argument is valid.)
Threat Brief: Windows IPv4 and IPv6 Stack Vulnerabilities
I'd say that foxes are well on their way to domestication.

I've been watching some SaveAFox videos on youtube, and their foxes display a whole range of social skills. Some like Finnegan love being handled, but others not as much.

Those specific breeds of foxes don't really make for indoor pets though, as they like to mark their territory.
The problem is that when you don't know if a citizen is armed or not, you just default to thinking they are. Because that is the safer assumption for you to make as a police officer. If citizens are not allowed to carry guns, that default assumption changes. It is a whole different dynamic.
> The only guarantee of the future is that it is unpredictable.

Yet here you are making predictions...

I doubt Linux will fade away until there is some major paradigm change away from Van Neumann architecture. It has survived and become dominant over 30 years by constantly adapting and innovating.
Thales Alenia selected to build Telesat’s broadband constellation
Tangentially, is there a standardized format for local time? ISO8601 has the same issue.
I just quit completely a few days ago, and while the fatigue is overwhelming sometimes, the calm is worthwhile. Unless your job precludes it (long distance driving, piloting etc) it's probably worth a two week trial of no-caffeine.

I also think teas are a terrible substitute. The closest I came was chicory which is .. an acquired taste.