skysight-inc/HackerNews huggingface dataset:
> Big TV’s goal is to broadcast as engaging as possible material to a general audience. This is broad and therefore not very addictive.

That may have been true once, but since then TV distilled down the patterns for maximizing addiction across the biggest segment of the population - that's why most TV is so mind-dumbing that you can almost feel your brain being sucked out of your skull when watching.

But I agree that Internet media are much more focused and much heavier hitters.
These days, if I want an honest appraisal of a product then I prefix the search with "reddit" not "review".
How to instrument JVM bytecode for fuzzing (open-source)
Kaliningrad’s “buried robot” to be demolished 35 years after work abandoned
Thanks. So typical CRUD applications usually run on luck? (or on not beeing unlucky if the average number of request per hour is not so high).
> The reporter was mirroring and testing for plausibility of comments from two or more security researchers attacks on each other.

That seems completely reasonable? How else would a reporter tell if something is plausible in a field where they lack personal experience?
Is this sarcasm, right?
From end.
> The question here is whether spacetime is something like that, or if it is a proxy concept with no grounding whatsoever in the universe, but with good predictive powers?

Consider that "human", "chair", and "atom" are also just concepts are minds apply to certain patters of energy. We all "know what that is" because it is advantageous for our minds to place things in these categories for the purpose of modeling. You may know what a "chair" is, but there are an infinity of gradations between "chair" and any two other objects, like the beanbag chair sitting between "chair" and "pillow".

The concept of a chair has no grounding in the universe, it's all in the mind. There are no physics that only apply to chairs.

> For example, for a long time we believed that Aether filled space, and although we now know this is not the case, the mathematical model provided by the Aether theory was pretty useful. You could very well imagine a world where we know Aether is not real, but continue using it for lack of a better theory as it is a useful framework.

Yes, that's how it works. When we have a better model we use that unless a simpler one will do. Newtonian gravitation isn't "real" by your definition, but we still use it in a lot of circumstances even though we have more accurate models.
For those already paying for Dropbox, Dropbox Passwords is included and is pretty solid.
Use this: https://www.passwordstore.org/

A combination of a shell script, git, and pgp.

It's not the pinnacle of convenience, but it works, and you don't have to deal with stuff like this :)
re: field detection

How does it do with sites that insist on using a 'password' type field for both username and password? This is my biggest pet peeve on the internet today!
Custom TensorFlow Lite Model on Android Using Firebase ML
MicroStrategy to issue $600M more debt to buy more Bitcoin
The big 5 publishers terms for libraries in 2021
Impressive tool, but the supporting documentation is what I appreciate most.

I think the prevention guide could be improved by providing an example service control policy that blocks known dangerous IAM actions like ecr:SetRepositoryPolicy for all but a specific security principal.
Do analogous tools exist for GCP and Azure?
That is if you assume the world is Markov, but in our granularity of thought and limited perception, the only way we can reconcile subsequent observations is through history.

In other words, you can't peer into the universe itself at any individual moment to observe all properties because you have access to partial information, the world could be markov, but the lack of your perceptive abilities requires that you treat it as non markov.

For example, given a moving object such as a ball, at any particular instant, you do not have access to enough information to estimate velocity, but if you have access to more frames, you can do some algebra and figure it out.

In the vein of cause of actions, since you have limited access to information, especially about you and your brain, you can not decide whether certain events such as having a good day affect your decision making abilities. Your state is part of the environment you do not really have access to it affects your behavior.
Unfortunately, their P2P demo doesn't work insofar as one can start a chat with you using your username or join link.

https://p2p.riot.im
Why Is Esbuild Fast?
You could try bitwarden_rs [1], much lighter on resources.

[1] https://github.com/dani-garcia/bitwarden_rs
Same boat here. 1Password is now the slowest piece of software I use on a daily basis. 15-30 seconds to get a password out of 1Password mini, laggy and unresponsive keyboard navigation, TouchID prompts that stack under other modals or windows so they don't work, random beachballs, ... the list goes on.

At least sync still works flawlessly?
Conti Ransomware: Evasive by Nature
Something tells me this is not AWS specific - how do GCP/Azure/Heroku stack up in comparison?
How does it compare with 1Password?
Occam’s razor.

Science does have some “dependency” on the philosophy of sciences, and while pedantic, simulation is a possibility, but so is “the world popped into existence this morning in a state that we have a collective memory of an imaginary past, and with dinosaur bones in the ground etc”. But this requires much much more presupposition than the scientifically accepted position with the Big Bang et al.

And in my view, it is only of limited importance to look for what possible, but not probable explanations we can make up.
I wonder if there's any way to swing these kinds of problems into getting government funding for coreboot/libreboot.
> batch of Lenovo laptops found to be phoning home in secret

Every software or hardware phone their place of origin naturally. Only authoritarian countries like China would require vendors to host services inside sovereign territory.
Those issues were ironed out years ago, at least in my case, and they were very very short-lived issues, though perhaps I was lucky. 2FA/Yubico support is nice as well. My main gripes are the lack of subdomain support e.g. if you have multiple subdomains, LP will offer ALL passwords for that domain and you have to scroll through the list to find the right one. #2: when you want to copy a password from one of the drop-down menus, sometimes "Copy Password" is above "Copy Username" and other times it's reversed, adding some extra cognitive load and just annoying due to lack of consistency.
I'm impressed you were able to get your employer (Salesforce) to actually let you publish this under their organization. Kudos to that.
Because they want him to stop writing. Scott Alexander believes in open debate on any issue and to any participant. The NYT believes that "open" debate should only occur within limits, and that they are entitled to set these limits. If people like Scott Alexander can have a large audience then the NYT does not have the power that they believe they are entitled to. If the NYT did not have the motive to stop Scott Alexander from writing, then why didn't they publish the piece after he took down his blog? Why did the wait until right after he started writing again to run the piece? If their motive was real journalism they would have just run the article as planned.
I have a similar question. Some people say it's the default, but I have never seen it enabled by default, no matter how recent the hardware or the build number. I wonder under which conditions exactly it is enabled, if any.
How to Get Qualified to Work in Big Data for Decision Intelligence
https://arxiv.org/pdf/1912.04206.pdf
I don't think so.

Yes, if you have a random MAC, then the WiFi point itself may not be able to track you.

But, the tracking in real life happens in reverse. Android notes all WiFi MACs and SSIDs in your vicinity (whether you have your WiFi on or not!) and sends them to Google, and other advertisers, with location data. That is then correlated, and presumably re-sold.
Good thing I use pass

https://wiki.archlinux.org/index.php/Pass
The same thing will happen here as when Dropbox limited free accounts to three devices: all of us who've spent years evangelizing the service to our friends and family are going to get a bunch of pissed-off phone calls. They're not going to understand or care why, they're just going to be mad that it worked yesterday and doesn't work today.
I love using Nim, it's an absolute pleasure after years of fighting with Python's "I hope I got this right..." style of type guessing. The biggest problem most people run into is that python has a huge library ecosystem.

I haven't actually tried interfacing them, it's next on my docket. Have you found any good learning resources for that?
The problem with fake reviews is that it creates a truly negative customer experience. I am not sure why Amazon who is "obsessed with the customer" does not see this. All I can think of is that there are two customers here, the 3rd party seller and the end retail customer. I guess the 3rd party retailer is higher value. The only way I could see there being a feedback loop is if 3rd party returns take off.

Fake reviews will be the death of Amazon if Target/Walmart and others can get their act together.

With respect to charging cables, I can buy the same crappy ones at Ace Hardware that I buy on Amazon basically. Ace picks one crappy vendor but Amazon has 100+ of them. The only high quality ones I've found are anker, monoprice and Apple.
Journalists don't have to prove whether the attack is possible or not. They have to prove that it actually happened. Which they didn't.
Here in New Zealand a NZ$10 (US$7) bottle will be just wine unless it is sparkling.

Virtually no wine is 'just wine', especially at the lower price points. All winemakers add at least some additives and preservatives to help with the vinification process and to stabilize the wine. There are probably 30+ chemicals approved adding to wine and I can promise you that a NZ$10 of wine has several of them.
Not sure why people are downvoting you - sunk cost fallacy maybe.

LastPass was a mess, and I was a very happy new 1Password customer. LastPass customer service is some of the worst I ever experienced.

The mobile 1Password experience is excellent as well.
I did the same switch too a while back, Bitwarden has been really solid.

Interesting thing: I just now remembered to delete my LastPass account, but the delete account flow breaks totally. Just end up in a modal without any content in it, both Firefox and Chrome.

I'm wondering if they are even deliberately blocking deleting accounts for damage mitigation?
"The same applies to atoms, we all agree on what they are, and we can show pictures of them etc."

This is where you bury the lede. It's clear if you read many of the comments here that there is no such agreement. Some people _think_ of an atom as something you can reach out and touch, or grok in some deep sense distinct from performing specific experiments. Others take an approach that's more in line with theory in the sense I use it (https://en.wikipedia.org/wiki/Scientific_theory). Your definition of theory is too loose: it's not just a body of work. That sounds like a pile of experimental evidence to me. A theory is a robust model or family of related models that match the experimental evidence. Atoms exist in that sense: they're a well tested model of experimental phenomena.

I'm certainly not claiming that atomic theory is a wild speculative guess which you seem to imply I've done.
Hacking is seeing and empowering the unexpected capabilities of systems. Many focus on the "unwanted unexpected", which is like saying all cutlery is a murder weapon.
from experience, I wouldn't trust any of the web storage APIs. they can survive for a long time, but your data can get corrupted.
What is comma.ai's business model here?

I mean whose auto insurance(both collision and more importantly liability) has a clause that lets anyone hook up a random after market self driving toolkit to their car.

Who has liability once you start using their solution?

I'm sure comma.ai will have a clause that their solution is only for fun and you can't blame them if their self driving solution drives your car into a bus full of orphans.

So what's the point of what they are selling if you can't actually use it?

Or put another way, a self driving, or even driving assist add on only has value if the vendor absorbs all liability when using their system.
Why No-Code Doesn’t Mean No Coders
It's ridiculously overpriced for what essentially amounts to storing a tiny binary blob on a server somewhere and making sure it's backed up.

I would've been happy to continue paying 12 USD / year for that service, but at triple the cost? I'm now on BitWarden.
Humans must learn the art of writing- AI
“One Size Fits All”: An Idea Whose Time Has Come and Gone (2005) [pdf]
I have one suggestions which has worked wonders in my family on a recommendations by a doctor. it is to let 1-2 tablespoon of boiled rice ferment in an earthen pot/container overnight or longer and eat it along with the water on an empty stomach. this will allow the growth of good bacteria in gut.
Recently switched to 1Password from LastPass and I love it.

The autofill is much better.
It handles fidelity fine, and they do a sort of masked password field for the username where you only see the last 3 characters.

Firefox on the other hand used to want to save my username as ****ABC
Tech and "tech companies" are a huge red herring in these discussions. These are business models and business decisions. The algorithms aren't doing this on their own - there are humans there, making decisions to mess with people's heads and make money through tricking other people to part with their money.

It's the same problem as we had 100+ years ago - and really even the same problems real (not stereotypical) Luddites rose against: business decisions. But talking about this is boring, we've been having this discussion for generations. Focusing on "tech" generates more clicks.
Surprised that nobody here mentions Enpass. Its mobile app is paid, sure, but it's a one-time cost and it's using an AES-256 encrypted local sqlite3 DB that can be synchronized with several popular cloud storage options: Dropbox, OneDrive and any WebDAV server. So you have your credentials vault with you everywhere.

Very happy user for years. No subscriptions, desktop app is free, you just pay for your iOS / Android app once. That's it. Never had a problem with it and you can also tie it to your TouchID / FaceID, too.
If you end up archiving youtube content, consider stopping by my discord server. https://discord.gg/EJvS4kf

We maintain a list of content that various members have archived, such that when content is removed from youtube, people can direct inquiries to contributors who have archived that content.

It's a small way to keep track of what things have been successfully archived, and direct efforts toward at-risk channels.

(You can see the current list of user-archived content here: https://tinyurl.com/v4rpe9w)
The counter is that your hurting my family etc... but I agree best to leave.
To me, the unbeatable feature of Keepass is the fact that I'm not limited to user/password combination. I use it to store important notes and even files.
This has been going on for more than a decade. I recommend to read at least the opening chapter: https://insertcredit.com/2011/09/22/who-killed-videogames-a-...

Yep, I've pasted that link in the past. It's now a proper classic.
But that is probably because "TJ store label" isn't a wine maker. They probably just buy whatever wine they can get for cheap and put their name on it. What you are experience isn't inconsistencies in the wine making process, but inconsistencies in TJ's wine procurement process.
let me look into that :/
The Dying Art of Persuasion
I agree with other comments that in the current market, Lastpass is not worth it at $36/y. The way they increased the price is arguably more annoying than the price tag.

I happily paid for Lastpass at $12/y. Logmein raised price and I switched to free. Logmein limited free capabilities and I will switch to Bitwarden or 1Password and pay them. I'm not staying with Lastpass to get the rug pulled out under me the third time.
> while often for EU countries it's after taxes and/or after mandatory health insurance and retirement savings.

It's not in the UK. I'm not sure which countries you are thinking of.
You probably missed a few more but that's the price You pay for being part of a civil society. Just be happy the majority of your list is still being asked of and not forced upon us for the time being.(I stress MOST not all and many on your list are one in the same)

It might seem unfair or tyranny of the majority but even with all the new social rules comming down on us, I believe that I still have more control over my life than anyone else and You do too. I am much happier since I decided to focus on changing "My" world rather than "The" world.
I agree. In fact, I wrote about that fact on my blog. https://gavinhoward.com/2019/11/recommendations-and-radicali...
Happy Birthday Eniac from Univac
SEO Case Study: What does it cost to get to page one?
The Digital Indo-Pacific: Regional Connectivity and Resilience
You fell for it ;)

It is interesting that people find cultural change so offensive. Is the term food protectionism?
xPrize founder’s annual indoor conference becomes Covid superspreader event
Google and Facebook have to pay for news content in Australia
> how hostile some tech folks are towards the idea of journalism

I don't think they are hostile to the idea of journalism per se. It's the current practice they object to.
>That will always be a risk, as long as you rely on cloud services.

True, but it seems that Bitwarden offers the option to self host which could help mitigate that. However as a paying customer you have more of a leg to stand on if the company does try and pull the rug from under you.

As for LastPass, I rarely used the "WebApp Vault" (Only to copy my passwords for native apps on my desktop) and did it all via the context menu / LastPass button injected into the User/Password fields in the browser.

Their iOS app was very handy (As my local supermarket self scan app keeps logging me out) as for most app's it would offer autocomplete. So I'm going to be looking more into the mobile intergration then the Desktop intergration (as its far easier for me to C+P between things on Desktop then it is for me on Mobile.)

I am going to give KeePass a try but I've not settled on which system I will actually switch to yet.
Ask HN: What XMPP chat rooms should developers know about?
I’m curious to know if there are active XMPP chatrooms out there that discuss computer science and software engineering. Any recommendations?
Yup. Since 7.7 my 1Password looks like this (https://imgur.com/a/Zz4WSdx) on my external screen, with the scaling of the background inexplicably broken. I also see other graphical glitches here and there. Meanwhile 1Password 7 for Windows every few months forgets that I registered it and I have to go find the license file (within 1Password!) again.

The paternalistic Watchtower "feature" is a whole other set of annoyances I wish I could disable.
AI to make Perseverance 'the fastest rover on Mars'
Show HN: The Clubhouse – Airbnb/Tinder for Golfers
There used to be a quadratic algorithm in character input in readline, the library that many common shells are using to parse commands. So if you copy-pasted a somewhat long list into something like Postgres or the Python shell, it would take a lot of time because it had to check a couple of things on each input, and that somehow involved checking the existing characters in the input (I've forgotten the details).

I think that's a really classical case of O(n^2). You have a linear algorithm (n), and then run it on each instance you insert (n) so n^2.

It bothered me for several years, until I eventually did some profiling and contacted the readline (and bash) maintainer who fixed it.

This is about 5 years ago.

There's also another readline-related problem in several shells that they don't discover if you resize the terminal window. I can't remember if I raised that too. It sometimes amazes me that very few people appear to ever look at or debug our common infrastructure.
Not sure that's even a question of science. It's a question of how you define real.
either Keepass2Android or KeepassDX. They both have virtual keyboard support[1] and at least one of them has android auto-fill support.

[1] to use it you have to open/unlock the database, select the entry (although I think it's also possible to associate to android package ids so you don't have to do this), switch back to the app, change your keyboard to the keepass keyboard which will have buttons for entering user and password.
What's up with this whole "Rust rewrite" craze? The coreutils are battle tested and mature as they are, and I don't see how rewriting thousands of lines of code in Rust will change anything. Isn't this solving a non-existent problem?
I dont like the new safari web extension that adds little in page pop-ups everywhere. When I enter my master password, how can I be sure that the pop-ups are coming from the 1-password web extension and not from the website or another extension? Is it sharing the DOM with the website? If not, how are they separated? I realise I don’t understand how web extensions work but even so I don’t see why these pop-ups couldn’t easily be imitated by the site I’m on and I feel that it’s just asking for trouble doing stuff like that. After a bit of googling I realised that its possible to turn off, so I have.

1password has been feature complete for years now, I think they are changing things for no reason at this point. Just charge me for an update when operating system upgrades break the software. Sounds harsh I know, but TBH I wouldn’t mind if apple added family sharing to passwords and finally finished sherlocking them.
Five star garbage sells better than two star garbage. There is absolutely zero incentive for Amazon to fix this.
Try Enpass? Only the mobile app is paid once, everything else is free. No subscriptions, too.
Right, and that was the point I was trying to make with the human analogy.

So the question is whether spacetime is one of those patterns we can point to, like a "human" a "chair" or an "atom", which is what we call "real" in our everyday language, or whether it is only a useful modelization tool, like the Aether. There are no pattern anywhere in the universe matching the Aether.

It is a valid question.
I like using pattern matching as an if statement against the type system like the last example in this tutorial, where the author matches against the different variants of an enum. I know this is not the case for the Python interpreter, but it has always amazed me how much types can narrow the code paths in generated assembly instructions.
I'm not sure what this comment is actually trying to say. the feature seems very intuitive and easy to understand.
Well to quote Adams, Time is an illusion. Lunchtime doubly so.
> Do you have any examples?

Probably all current Cisco offerings? Ubiquiti industrial switches? A whole crowd of second tier vendors like Lantech or Korenix? These are just those I had direct experience with.

Of these, Cisco definitely does boundary clock on L3, on at least several models of their routers.

> In my tests with directly connected NICs the synchronization is stable to few nanoseconds, same as with PTP.

Yes network sync is piece of cake if you drop the whole network bit. That said am slightly skeptical about ns level precision with NTP. Did you measure synchronicity between the two devices via scope?