skysight-inc/HackerNews huggingface dataset:
I just realized my first reply did very little to answer your questions, so I'll take a look at them one by one here:

> Are there any websites or services actually using this?

To my knowledge, there are not many (if any, besides the SQRL forums) working, live implementations out there. I played around with it and got it working on a couple of hobby projects over a weekend and it showed a lot of promise.

> The problem with the solution chosen here is that this requires yet another app for authentication and yet another account for synchronisation of credentials. If this were to be built into browsers, it might replace traditional passwords in time.

This is very true, but I believe SQRL as an open protocol will have long tail legs over time.

> How does SQRL work when it comes to apps? Does the Android app natively support other applications calling it to authenticate? What about authenticating devices that can't run the client application (smart TVs, for example), can they still access the accounts authenticated by SQRL?

At its core, SQRL is essentially a Challenge/Response mechanism. It would be possible for a device connected to a TV present a QR Code and have its session be authenticated by a device using the out of band HTTP request from the SQRL client scanning the QR Code (there are problems with this, like forwarding the QR code via a MITM attack to gain an authenticated session, however, the attacker only has a single logged in session instead of having access to a password that now needs to be changed, and any problems related to this MITM attack would also affect other user credentials like the email and password).

> Right now, SQRL seems to be competing with Webauthn, which has been built into browsers already, but does so through an external daemon running alongside the browser. I'm not optimistic about its chances here, to be honest.

Short term, I agree with this. However, long term I think WebAuthN is going to suffer from other problems which do not affect SQRL (user adoption of 2FA keys and user inconvenience in managing those 2FA items) SQRL provides some really nifty ways to transfer an identity safely to a host of other devices as well as rekeying an identity with the rescue code in the event an identity is compromised. It also doesn't require the management of those devices on any third party site.
Rise of Kingdoms Monetization Strategy: How It Became a $1.15B Game
How did Rise of Kingdoms go about rise of monetization?

We went through the game, from mechanics to the user experience so you could find out.
There’s, ironically, a typo in the title. Should be `reviewers`.
Populist Palatial: The View from Piccadilly
Oh, the Corelle will explode, it just takes a few years. I don’t know what the aging process is, but will no longer bounce, and explode into razor slivers so small you’ll wish you had traditional ceramic.
I bootstrapped a Slack community to $1.7k MRR
How an Anti-TypeScript “JavaScript developer” like me became a TypeScript fan
Speech and violence are different things. You don't have to be tolerant of bad ideas (and indeed you should not be) but you do have to protect the rights of all human beings to express them.

Protecting the legal rights to publish, and personally/morally tolerating the publication of abhorrent things are two entirely different concepts.

No one person or group should ever be permitted to declare themselves the arbiter of truth.
> Once the compiler encounters undefined behavior, it's free to do whatever it wants. like, produce an executable that does exit(0); when it hits that condition. Compiler writers are generally ethical people that won't do that

This is wrong on two points.

Firstly, real world compilers very often do handle various kinds of undefined behaviour with immediate termination. On many platforms, dereferencing a null pointer will result in a segfault. Sometimes compilers generate code to trap if undefined behaviour would result. In the C++ standard, some errors are defined to result in a call to std::terminate, rather than undefined behaviour. [0]

Secondly, as IgorPartola indicates, doing this isn't irresponsible, it's the least bad way to handle undefined behaviour. If your loop has overrun the end of your array, you generally don't want the execution to silently proceed with invalid data, you want execution to end immediately.

[0] https://stackoverflow.com/a/43675980/
Same here, Steam is not painful at all to install and manage. And I don't get how Steam is spyware, other than tracking when and for how long I run which Steam game, and what my hardware configuration is.
I am using Spacemacs and have spent days trying to make it work faster (I am on macOS). Took a while and some effort but with a few strange tweaks I managed to make it more responsive.

Emacs/Spacemacs can still be weirdly slow sometimes but UI responsiveness is generally miles ahead of all Electron-based software still.

Which makes it even funnier. Emacs is decades old and still uses quite a few ancient techniques that are only hampering it. Even with that, it's still so much better in terms of speed! Funny.
> Melbourne > Edinburgh

Well, there's part of your problem right there. No need to even mention Bluetooth or device-related delays.

South Australia to North Britain is the better part of literally half way across the globe. It's either 64000 km at lightspeed (via satellite) or roughly 35000 km via optic fibre cable at 60% lightspeed (e.g. equivalent to ~60000km at lightspeed).

That's 200 ms one way latency just from the distance alone (best case scenario, no less), so 400 ms of latency just from distance alone. Even with something like Starlink we'd still be talking about at least 100 ms latency.

The whole latency from wireless protocols and codecs are just the cherry on top.
Yes. I'm not sure why that happened nor why that stopped. Capitalism? Crony Capitalism? Deregulation? Globalization? Finance capture?
AOC/Bernie economic policy may count as centrist by European standards simply because the US is as a baseline much more right-leaning/libertarian and the big econ-left project is to establish a welfare state, which already exists in Europe. (There are rightwing arguments for a welfare state type of solution, but those are contignent on other things being true first, ie. something more ethnostate-y)

But that's not the only relevant dimension of policy:

Culture matters, and they are not remotely rightwing on culture.

The direction they want to move the country in matters, and they definitely don't want to move the country rightward either.
Correct, the Democrats are a weak willed party of centrists more concerned with maintaining the status quo as opposed to implementing progressive legislation that will help people. The GOP has become a cult of personality.
I’d rather just reduce the number of for profit journals. Getting paid $450 seems to be against open access as open journals can’t afford this.

Also the motivations are different when pay is involved. I will donate time to peer review, but $450 is not enough to pay me. So I would be more likely to review as a volunteer than an employee.
I don't know how this thing goes outside of EU, but here as a farmer I have to go throgh state multiday exams every few years that makes me personally liable for all harm to other crops, population of bees and people who actually operate tractors.

As a person in charge of spray program I have to make sure that weather condition is ok to spray (temperature, wind), my sprayers comply to standards and are tested in certified laboratory (things jet size, droplet size and uniformity) and I need to log every information and keep all that records for years to be checked by authorities anytime (and they do check them often).

It is easy to see pesticides as a easy target, but I am affraid that it is actually not easy to dump toxic in the air, water and land as almost any gram of pesticide and packaging have to be accounted for and handled with care.

(btw I am working in organic agriculture and do not use any pesticides except of sulfur and bit of a copper and I don't have any interest in conventional agriculture business)
Looking to hire Sr. Go devs (dwayne (at) digitalogy (dot) co )
This is pretty cool! Quite application-specific, though. I used to work for a camera manufacturer, so I understand what it is good for.
From a security standpoint this is kinda the point – we don't know what it's sharing and it has the ability to, so we have to assume it. Obviously it's unlikely, but through accident, ignorance, or malice, it's possible.

I think for a security product the onus is on the author to show that this can't happen (not just that it doesn't), which means either not having trackers (easy) or somehow showing that trackers are isolated from the sensitive data (hard).

This isn't uncommon. Apple have published a bunch about how they do iOS security, and it's quite clear that there's strong sandboxing between untrusted code and sensitive data, in some cases even enforced at the hardware level.
I agree that you should go to a more robust language when shell scripts get bigger, esp if you are needing or wanting unit tests. I would avoid Python if there are lots of dropping into the subprocess module; it suffers the same problem as Go - lots of ceremony and boiler plate to run shell commands. I recommend Ruby or Perl because they can drop into a shell-like mode and you can execute shell commands more “naturally.”
Because they're called mnemonics for a reason ;) They stop being cryptic after a few days of use, but you'd be stuck forever with overly long descriptive instruction names that repeat over and over and over again.

It's not about saving space, but about reducing visual noise and simplifying "visual pattern matching".

PS: Other CPUs do have somewhat friendlier assembly dialects (Motorola 68k comes to mind), but they all have short 3..5 letter mnemonics.
Well, I much more like the question: Should authors pay for their publications? There is a common pun: As a scientist, you pay two times for an article: The one time you publish, and the other time when you subscribe to read your published article. And this is only to access the article as a PDF in the web. There is no print copy or so involved in that payment.

Notorious XKCD: https://xkcd.com/2085/
Plan 9 abandoned the ancient concept of the typewriter interface and instead uses a graphical 2d engine called devdraw. With that you can mix and match text with graphics in the same window. We emulate typewriter interfaces in the vt program which is a graphical program that implements a vt terminal. Its 2021, use graphics.

Most people want a typewriter interface because they want/need to edit files in an ssh session on a remote server. Plan 9 doesn't do remote teletype control and instead imports/exports resources. Of course plan 9 has ssh but it is split into three separate programs: an ssh client that performs the regular teletype interface to a unix machine, sshnet which imports the remote systems tcp stack, and sshfs which mounts a remote file tree locally.

If I wanted to edit text files on a remote unix machine, I'd just mount the file tree locally using sshfs and run sam or acme locally. Bring the resources to you and use your local tool set. Then you don't have to worry if the remote machine has x installed because you don't care.
I lean right and genuinely enjoy reading stupidpol.
I do contribute through OsmAnd. I mapped a few gas stations in more desolate areas. However this is a much more exciting way to contribute. Thanks for sharing!
MasterPlan: An idea board and project manager on a freeform grid
JavaScript Malware Infested Nightmare
> genuinely left wing

What does that even mean ?

Any one with half a brain will find good ideas from the far left to the far right. This "left vs right" is the dumbest thing we ever came up with. Vote and fight for ideas, not sport teams... keep the fanatism for football
Pew research has also confirmed this, it is mostly very wealthy progressives who are the most offended.
Adding custom comparators is trivial with lambdas;

std::sort( begin( c ), end( c ), []( const auto& lhs, const auto& rhs ) { /* some comparison impl for the value_type */ } );

Same for everything that take a comparator in <algorithm>
And vague. At least "Telegram", "Signal", and "Whatsapp" suggest that they have something to do with communication, whereas neither "Element" nor its logo/icon suggest what it is. Unless they know what it is already, most people would probably scroll past it, assuming it's like a boring CRM thing or crappy drop-shipping store or whatever.

But I guess it's too late for them to reverse that decision. Maybe the logo will change, but the name is probably here to stay.
Show HN: Baldur's Gate 2 demo ported to WebAssembly
> if malloc() fails to allocate new memory, I don’t want it to return a NULL. I want it to use a static buffer to log the problem and then exit the process. There is almost never anything you can do when you run out of heap and if you can you aren’t naively using malloc() from your system library and checking for NULL return values.

In C's defence, you can easily get this behaviour by wrapping malloc in a safe_malloc function. Given that C lacks exceptions, it makes good sense to handle unable-to-allocate by returning NULL as this leaves the door open to all possible strategies.
You're right, but it's neither of those for command interpolation. Double quotes enable variable expansion, single quotes do not. Command interpolation is back quotes, which is a carryover from sh. The more modern bash way is as follows:

$ echo $(pwd)

Incidentally: how does one type back quotes on an iPhone?!

Edited to add: shellcheck [0] will flag the back quote usage if you're writing a bash script instead of a sh script.

[0] https://www.shellcheck.net/
>I don't think Justin Trudeau is left. He wouldn't be the leader of a centrist party otherwise.

Well lets look at the new-left wiki page.

>broad range of social issues such as civil and political rights, feminism, gay rights, abortion-rights, gender roles and drug policy reforms.

That's literally Trudeau in a nutshell. He has done every one of those.

>The Canadian Liberals go right (eg: Martin/Chrétien in the 90s [1]) and then left (Cannabis legalization in 2012 [3], social positions in 2015 [2]) when it suits them.

The confusion many people have is https://en.wikipedia.org/wiki/Liberalism

they generally support free markets, free trade, limited government, individual rights (including civil rights and human rights), capitalism, democracy, secularism, gender equality, racial equality, internationalism, freedom of speech, freedom of the press and freedom of religion.

I find it quite difficult to see anything in that list that Trudeau stands for. He's not a Liberal. That's the clear confusion. Yes Chretien and others were liberals.

>If he was left-wing his fiscal policies would be a lot closer to the NDP.

I am very confused by this. https://www.huffingtonpost.ca/entry/canada-deficit-2020_ca_5...

They ran a not-so-universal basic income and had a >$343 billion deficit. This is literally 20 years of debt in a single year.

If anything, this is worse than the NDP.
On Android you should not copy/paste as all apps can read the clipboard. Use either a keyboard that comes with the password manager, or system auto-fill support that gets the values from the manager. Both modes are supported at least by Keepass2Android.
>peter parker was a lot worse, covering his own alter-ego!

Worse by conventional journalistic standards. But since the 60s we've had "New Journalism" and so-called "Gonzo Journalism", were the journalist meddles with their subject, and even reports on himself...
They could also learn how the website works, or how markdown works. Not everyone needs to be treated like toddlers. Colleagues can be surprisingly capable if you educate them.
Conservative means what it has always meant. The political belief that the law should bind outsiders but not protect them and that it should protect insiders but not bind them.
To be honest, it is much better overall. Didn't want to start a flame war here
>The French Justice refused Nacon’s demands twice, first in July 2020 and then in October 2020 during an appeal.

while https://news.ycombinator.com/item?id=26314325 "Order Frogwares Ireland to deliver the two masters of the game 'The Sinking city' on PC DRM Free and Steam format under penalty of 50,000 euros per day of delay from the 5th day following notification by e-mail of the decision to intervene,"

someone is lying to me here
Looking at the real-estate market and its assortment of minimal-value-add/maximum-value-extraction players (appraisals, title insurance firms, 75% of inspectors) as an analog, I suspect that directly paying for reviews will not likely improve the situation.

Perhaps a recognition by institution or university model would work, or softening the dollars (they are credits against APCs or something) might work.
My estimate, based on the approximate dimensions of my jeans front pocket and the size and thickness of a $100 bill, would be around 5~8 thousand dollars... Multiple times that if you REALLY stuff it in there...
Stop it.

There was no fucking nazi symbol on the stage at cpac.

If you want to take a tiny group of extremists that are not accepted by a group and pretend they represent a group, we can do that the other way also.
You pretty much nailed it here. It's not speed proper. It's the perception of speed. What the iPhone mastered was the transition starting right away. If you have no transition, the time to start, say, the mail app, will appear long, but since you started the icon blowing up to cover the screen right after your finger press was detected (by your brain) the delay feels shorter because you see something is happening. It's merely cosmetic - the app is still starting during the animation - but , to the user, the animation is part of the process.
This is interesting stuff, but as others have said they do a really bad job of presenting the what it does and how it fits it.

Having now read a lot of their docs, they don't seem to acknowledge basic things at all.

For one, the identity string it generates for a site is static, and is the only thing need to identify/log you in. They never cover that this basically _IS_ a password. If you have a this static string, you have the password for that site.

Further it sounds like the website operators also need to store these strings as plain text. I don't know how their rekeying method would work other wise.

This means to me that if a websites database is stolen, then a person with that database could impersonate everyone immediately! No need to get a password cracker out at all.

A website operator would need to completely disable all the existing keys, requiring everyone to rekey.

They have a global rekey method, but all their single site methods documented are very very manual and only possible if the site accepted you're old key.

The global rekey method is also very scary to me. You need to visit a site for the rekey to happen. They state that after a rekey it will send your current and old key over. However how many keys will it send? What happens if I have to they N times because of different site data beaches. Will sites I haven't visited no longer be usable because their key is no longer available?
Leadership Program applications close tomorrow
Last call to apply for our Female Leadership Program. We've got 2 seats left & applications close tomorrow (March 3)
You will always have overhead.

In the video they mention storing everything in regular files on the filesystem. A regular filesystem would have inode overhead as well. XFS by default has 512 byte inodes (it can be more if you format it with bigger inodes, like you would for Ceph's Filestore backend).

For a lot of workloads Ceph's default erasure coding scheme (and Bluestore) would still be a lot more efficient than mirroring a file on top of a regular filesystem.
Not 100% sure why you were being down voted.

Maybe you should state more explicitly the premise, which is that if you are easily offended you might have a weak mind. I think it is reasonable to discuss this point, as it may have some merit.
Brings back memories! I used to play on a MUD called Melmoth back in the 90’s in college.
What does a modern metadata solution look like
The Democrats had their cult of personality in the Obama years.
Show HN: Port Spider – Nmap as a Service with a small one-off fee to curb abuse
This isn't true of most blockchain p2p networks, eg, Bitcoin. Anything uploaded to these lasts as long as the entire network does.

The reason this works is it costs some amount to initially print the data to the network, limiting that kind of abuse.
This doesn't sound super exciting, but actually, it is!
I don't think it's at all possible to make cross-platform GUIs that feel native. It's of course fine to share the core of your application across platforms, but you have to make the UI part separately for each platform for a truly nice result. There's no escaping that. And it's not like companies like Slack and Discord lack the resources to do so — they absolutely deliberately continue stubbornly ignoring the fact that, setting aside excessive resource usage, no one likes UIs that look and feel out of place in their OS. They totally have the resources necessary to rewrite their apps to use native UI toolkits on all supported systems.
Some more context:

https://www.vanityfair.com/news/2021/02/behind-the-scenes-of...

I get the impression that this guy was a bit of a jerk as well, and his response ultimately turned what could have been a short and easily forgotten news cycle into him burning his bridges at the Times.
Or the subsequent Switching Channels (1988), which is a remake of The Front Page/His Girl Friday!
These ideas are the QAnon of the left. The GOP is without question stuck in a cult of personality, but that was not a Nazi symbol.
Show HN: One stop solution to your remote job hunt
Musk Says Tesla Launching FSD Subscription in Q2
Too much power in one hand. And Apple isn't here necessarily evil but the high grade of automation.

Initially just a changed number and nothing more than a glitch to fix? The consequences show that we should as customers never built solely on one {manufacturer, provider, device, service} and must keep our data local - at all time.

It just a phone or computer which you own. Just use email and stuff somewhere else. And don't use their cards or financial services. Amazon credit cards are for the same reason problematic. One mishap during a return and you're in big trouble.

PS: I'm afraid that Apple will likely argue that you don't own your Mac.
Your right-wing talking points are a collection of disingenuous shit:

> If a person thinks that perhaps, maybe, there's 2 genders and not 700+

Nonsense comparison. No-one thinks there are 700+ genders.

> That maybe we should not be providing chemical treatments to toddlers for gender reassignment

Toddlers aren't being given medication for gender reassignment, this is blatantly false.

> If they believe that math isn't actually racist

No-one is seriously suggesting that math is racist.

> How about people who criticize Islam and argue that it is a fundamentally violent ideology?

Again, missing the point. The issue is when Muslims are treated badly based on stereotypes of what they believe.
I will say, though, as someone who just switched, 1Password is significantly nicer.
Too Much Code for Bazel Monorepo? Try Going Virtual
> but I'm still playing games with the same 50ms-60ms of lag

What kind of lag, though? Input lag has actually gone up in the past 15 years (e.g. due to displays and USB device polling). These things add up quickly and it doesn't even have to be just the network that introduces lag.
If you're just going to lie, you could at least pick something everyone isn't versed in. As opposed to implying the US has no oppressed minorities, which is by now so well and extensively documented to be the case nobody sane will take you seriously after reading you say it isn't.
Except for nearly all blockchain-based p2p networks.

Eg: https://cryptograffiti.info