skysight-inc/HackerNews huggingface dataset:
How is Linux supposed to be a good example of a secure open source project?

I'm not really convinced by Postgres either, software like that inherently exposes very little attack surface unless the attackers already have access. Nobody is interested in exploiting Postgres.
Counterpoint: many countries in the world have mass-produced housing with good things. This is a _solved problem_ in so many parts of the world, yet not in the US.

So much stuff in the US is just really bad. The poetic example is Hershey's, a company that exists based on "how do we make chocolate cheap (and taste much worse)".

Random homes in the US have just awful plumbing, terrible doors, busted fridges. It took me a long time to unlearn suspicion of "fresh" fruits & vegetables after moving away from the US.

Not to say that mass producing stuff on the cheap is a bad thing! Like people need stuff. But loads of other countries have gotten to mass production and still meet some bar of quality.

But like even decently fancy LA apartments had worse plumbing than a $300/month student apartment in France. My US school notebooks all had that crappy letter paper. Everything just feels bad and busted. I don't know if it was always like this, or if things are getting worse. My best guess is that things are getting better in other countries but not in the US.
I setup bitwarden_rs recently on my own server with traefik in front. I use the android app and browser plugin which point to my own instance. Currently it's only working on my home network, but I'm working from home.

This setup seems fine for me. It seems faster and snappier than Lastpass, but that might just be down to the fact it's hosted on my LAN. All in all, I'm happy I moved and happy I'm now in control of such sensitive information as my passwords.
It'd be hard to make a monolith out of the beliefs, practices and behaviour of over a billion people even if you could boil some of it down into one book (and you can't even do that as even the Sunni majority uses at least 7).
Ben Nadel: Using CSS:Target Pseudo-Class to Toggle Element Display
I enjoy my own company, literally. I love to listen to music, meditate, smoke a joint, go for a run, bike. I never get bored when I'm alone, but I often feel bored when around boring people.
> "you can say anything that is not directly illegal in the US without fear of being banned or other moderation"

Parler was happily banning leftist viewpoints.

It's raison d'etre was not so much 'you can say anything that's not directly illegal', and more 'you can say anything that the far right approves of' (Some of which, most notably the death threats cited by AWS, also happens to be directly ilelgal.)
It's a lot of stuff like this that adds up. Prime and Disney + also seem to completely forget what I'm currently watching all the time - and even if they remember, it will restart a minute or earlier than I left off. Netflix is always bang on the second. Netflix also always has a 'skip recap' and 'skip intro' button. These things don't happen by chance. Someone worked hard for that!
I've done it with Wells Fargo and Ally Bank in the US, they just made me put an expiration on it years in the future. What banks have you been unable to do this with?
There is no plan for human as long as it works.
The old logo looks even more Hitlery when turned upside down.
No BT sold off O2 to keep the City sweet (I was working for them at the tiem) - of course now they had to buy EE so they had a mobile offering.

And remember ofcoms #1 job is keep Murdoch and the other media barrons happy.
I'm surprised to read this and OP's comment, for me it's always quite fast. Are there specific websites your request - are they media heavy?
This might be because I am a former semi-pro Quake3 player but these days I grind my teeth with 95% of all software. Everything feels like it has at least 200ms delay injected, on every transition.

I'd honestly pay extra for an iPhone where I can disable ALL motion, too. But that's the least of the problems.

I don't want to become the grumpy old grandpa yelling "back in my day!..." but we have waaaaaaaaaaay too much young JS devs who know nothing else.

We need to get back to native UIs. Is it awfully hard? Yes it is. Do the users care? No, they don't. Many people want fast UIs.

But to be fair to all sides -- there are also a lot of people who don't notice certain slowdowns that I scoff at. So there is a middle ground that won't cost billions to achieve and IMO that should be chased after.
The part about naming a price making it illegal... wow. I spent most of the article wondering how it wasn't clearly extortion. I mean going with something like "I was just telling the person that we had a leaked porn tape of theirs, we didn't expect them to feel obliged to pay us money, we didn't say that it could otherwise fall into the wrong hands"... what a scummy way around it. It is extortion in all but name.

Maybe some hn'ers who trade in exploit discovery could shed some light on how this in tech, as I guess it is maybe similar legal territory?
> If the process of considering options and reaching the correct conclusion concludes faster and that is our definition of thinking, it should follow that the thinking is faster.

That doesn't follow because once you've mastered something you consider less options to reach a conclusion than a novice. One reaches the correct conclusion whit less thinking, not faster thinking.

Following your logic a person taking a shortcut from point A to point B is doing the same amount of driving as somebody not taking the shortcut, they are just driving faster.
White vs Black was something that was ripping the United States apart since the arrival of the first slave on the continent, so I'd have a hard time crediting the KGB for it.
Firebase is Google. I don't know why they deserve different levels of trust. If Firebase has your permission to harvest your sync info, there is no reason to think this doesn't get copied right on over into googles 'track every click and movement' apparatus.
Apple’s reputation system seems limited to iMessages, not regular text messages.

At least I only get the option to “report as junk” for iMessages (that are sent by people not in my contacts).
I go with Keepass + Onedrive for my personal stuff
Great. During the Hk 47 court case, I hope the world is getting more aware some partners they have are totalitarian countries. Check it out. It is like nuclear bomb technology.
I take this philosophy conversely when developing software. I expect my first version to be imperfect. I then chip out the imperfections.
Before, I wanted to build the perfect system right away. Now failure is planned and part of the process. Some people call it TDD.
Driving in a highway isn't secure, but only Japanese manga characters avoid leaving their town because of it. You pick your battles.

I just never save my core Google password and bank passwords in a password manager, and a willing to risk the vanishing possibility that my password manager might be evil or dumb. Also I am fairly aware of my deal with the devil with regards to having Google manage most of my online information.
People complain about Big-O once they reach the end of its usefulness. Your algorithm is O(n) or O(n log n) but it is still too slow.
Also worth noting that TSMC is about to build an 5nm fab in America.

https://www.forbes.com/sites/timbajarin/2021/02/16/why-tsmcs...
Immigration violations are crimes the world over. Disliking the CCP's policies, not so much.
Because organic farming is way more resource intensive and produces far less yield. Spray is necessary but just needs to be used appropriately.

Appropriate spraying and shifting away from such meat based diets would be best.
Nothing is inevitable in a multi-billion dollar industry heavily protected by regulators. The industry persists for non-technical reasons.
This is part of the reason why a sizeable portion of the population sees you as a cult of lunatics.
How Uber lost to PickMe in Sri Lanka
The style of this article reminds me of New
Scientist. You might like that publication.
Cash App Login
Cash App is one of the easiest interface payment application which is useful for making transactions just by sitting at one place. Get your cash app login issues resolved in no time with the help of instant solutions. Follow the quick steps and fix login issues. Download, Install and Activate Cash App on your website and mobile.
Lessons in Disabling RC4 in Active Directory
Probably yes, but only if it was happening a lot; I don’t know what the cross-over point would be though that you’re better off just keeping the drives spinning...
Slowdown has actually been the only reason I ever replaced a phone. Somehow the manufacturer sent an update and stuff turned to molasses, and that has been my trigger to get a new phone each time. There's no excuse for this, it's not like the apps I use are especially demanding. I've written a few apps on the side, and most of the ones I use should just be your average mashup of buttons, pictures, and REST calls. Besides, the slowdown comes when the OS is updated, so it's probably not the apps changing.

I'll never get another Samsung, even though I don't know if they did it deliberately, or if it was even them that did it.

Somehow my current phone has lasted 3 years with no appreciable slowing.
In your website I see “atmospheric stability” as a measurement. How is this measured as “stable” or “unstable”?
Trealla – compact, efficient Prolog interpreter written in plain-old C
It's long time ago so I don't remember well, but at least the camera was not fast (I was working with camera stuff at the point so that's what I paid attention to). It was slow, barren of features and looked like developed hastily by a student.

The thing with iPhone was the capasitive screen, which made touch UI work. At the point I had already worked with phone touch UI:s for seven years, and that's the thing that felt like magic.
Thank you for trying.

It saddens me how easy it still is for companies how easy it is to dump toxics in the air, water and land.

The proof often falls upon the "people" to prove chemicals used by companies are toxic instead of companies profiting from releasing them in to the environment providing extensive research that doing so is actually safe. Often years, if not decades before enough research is done before the harm is proven and legislation is made. It needs to be the other way around.

In the meanwhile the individual suffering caused is immense. Of course Dupont is a famous relatively recent example. Related to this project the link between pesticides and neurological diseases, like Parkinson, is strong but still needs a lot research before actual changes will be made.
I find this argument completely ridiculous. As if content is less important than UX. Give me a break.
Partitioning/clustering data apparently
Both sides could lose and this may only be dimly remembered by a distant culture.
Hi Shakna

Both the pilot mesonet in the Mid North and the subsequent network in the Riverland Mallee were actually strongly supported by local growers. Many farmers are embracing the latest AgTech to farm more efficiently.

A majority of pesticide sprays such as 2,4-D and glyphosate have label requirements that state they cannot be sprayed during an inversion. It is illegal to spray during an inversion and farmers must keep records of their spray times. Without the mesonet, spray applicators had no easy way to know if an inversion was present or not. Given inversions typically happen at night time, many growers adopted a method of not spraying from dusk until dawn. Now, with the mesonet data, they find that their ‘spray window’ is possibly different and may even open up more time for them to spray. Most farmers want to do the right thing, and now they have the real-time data to make informed decisions.

Also, the public nature of the data display means that anyone spraying during an inversion will be noticed by their neighbours. This will hopefully lead to cultural change and practice change as the public data will make it highly awkward for ’cowboy’ growers in the community to flout the rules and claim ignorance. We also have all the historical records should the regulators ask for it if a spray drift event occurs.
I've worked on a project that failed and I always felt speed was a real problem. I tried but never succeeded in convincing people that speed was the issue.

In our case, our users had a specific flow through the application they would use, and it worked, but it required clicking many (10+) buttons and waiting for a web request on each. People on the team were satisfied that the flow worked and going through it didn't take TOO long... But what people on our side didn't get is that our customers had to go through this flow dozens if not hundreds of times - some users would need to do it this many times regularly. It effectively made our users hate using the product, or they would refuse to, or they'd use it but only a little bit and they'd try to minimize the cost.

I tried to get people on our side to experience the pain points, e.g. asking PMs to follow this flow one hundred times, and things like that, but I never could get through to anyone that we should redesign and refocus on making it usable. Maybe a mockup of a faster flow was what was needed to be persuasive there.
ML Frameworks and Extensions for TensorFlow
I rarely see mention of 1Password. Anyone have thoughts about its security and privacy?
Are you arguing that there are no standard hash-based containers in the standard library of C++? Because there definitely are, even though nowadays there often are better alternatives outside the standard library.
Serverless Cells
For average user they are. They allow humans use long passwords without reuse. They're resistant to phishing. Online sync is necessary for multiple devices.

It's just LastPass that's uniquely bad. I don't understand how they are still in business. Their security track record is a series of embarrassments. Their UX is poor. Their browser extensions slow down the whole browser. And apparently their privacy is also suspicious.

But OTOH Firefox Lockwise/Sync is client-side encrypted, and the server just holds an opaque data blob for you.
“Slippery slope” is not a “fallacy”.

Is there a name for the fallacy where people think just because a type of argument has a name then it must be a fallacy?
This is something that a company with a mature security posture needs though. Yes it's hard, but that's the point.

There are many ways to work around this, having teams whos incentives are tied to finding issues, maybe in a different reporting chain or office or country to those writing the software is one way.
This could have been written by ProjectRed a la cyberpunk.

The company knew the game was full of bugs still but were under immense pressure to ship out the game way before it was ready.
> It’s worth clarifying, imported recipes are only visible to the user who imported them

Seems legit.

Recipes have zero value. Ironically it's the bit people hate that's the signal to which recipes better.
The terms of service are interesting:

> This agreement does not apply to Matrix servers run by anyone else - Matrix is an open network like the Web and this agreement only applies to the server provisioned by the Customer and provided by Element.

What do other Matrix servers matter to my hypothetical Element Home server or my selfhosted matrix-synapse server?

>The Customer must ensure that all Authorised Users are at least 16 (sixteen) years old to use both our Hosting and Communication Services or such greater age required in their country to register for or use our Hosting and Communication Services.

So no using it with your younger family or school for example?

I appreciate a service being offered but would prefer a solution that enables an out of the box package for self hosted consumer NAS systems.
Maybe something to provide dyndns, a domain and a quick setup.
This genuinely makes no sense on Element's part.

The exact same features are listed for the same price, on the feature comparison page - https://element.io/pricing - except Nickel has one extra.

Why would anyone choose to have one less feature, all-else being apparently equal?

Either the comparison page is wrong/missing something, or...?
Bitwarden is a reasonable alternative, but it's important to be aware of the weak points compared to Lastpass (which IMO, makes it a good-enough-but-no-great-choice).

Autofill is relatively poor (it fails even on HN!). Also, Lastpass has a convenient timed expiry that doesn't work (well) on Bitwarden (BW will expire the login when the browser is closed).

All in all though, I do support the recommendation, in particular, because Lastpass works extremely poorly on Firefox (at least, that's what caused my switch some time ago).
thanks for this.. finally a tool even I can't misuse:)

ps i didn't see a way to manually set a location, maybe just my old android tablet...
You are making a common mistake of assuming rational behavior of a nation when it is controlled by consolidated power of one person. Their agenda may be driven by grandeur, or miscalculated attempt to eschew local optimum for global, or personal phobias and aspirations.
Stalin and Mao were communists.

Marx used the terms socialist and communist interchangeably in his writings. So that is a distinction without a difference.
Indeed. Comparison is not bad as that is what current academia is based on. However also be aware comparison is NOT the ONLY way to experience life.

One of the effect of comparison is that it diminishes one thing over another.

I often find new the thing when I just experience one thing for itself without comparing against a pre-existing experience and thing.
Of course they do. That's part of the theater.

Some things are genuinely complicated and others are intentionally so.

This is clearly something that is complicated by choice, not by necessity.

All that "complicated by choice" leads to is fundamentalism and orthodoxy. People worry about whether their code matches the new sacred scripture over whether it works and then they shoehorn things into the form that don't belong there.

They bake meaning onto code that's way out of scope of the project. It's like programmers Gematria.

I've seen these all-knowing preachers write broken code and leave unmaintainable dumpster fires in their wake my whole career. Giant cathedral messes that barely do anything that all the customers complain about with endless academic blabbering everywhere and very little to show for it.

It's a "type", more rare than others, but they're out there.

If the results are better and the systems work sign me up. But if it's just another church of code with mere ceremony and internal logic, then yeah, have fun at mass.
That really is a fantastic quote and a fantastic thread!

What really stuck out is that Buffet said its the most important thing about Business and he didn't learn it in Business school. Same! I did an MBA and it was the biggest elephant in the room.
huh, I wonder if the technical person send it to management for a decision?
To be honest this discussion need a demo like this and further analysis.
> In the US a baseband processor's entire software stack that controls the radio front end must be certified.

Can you point where it is stated?
The "tool" is to stand up for yourself. Actually having to get a lawyer is very rare. You can also simply take them to small claims court, no lawyer required.

The thing is, nearly all these people trying to take advantage are bluffing. Call the bluff, and they fold immediately. They're just testing to see if you're a sucker.

But if you did leave the apartment damaged, they're not going to cave and you're going to forfeit the security deposit.
If this continues for another 10 years I’m buying a farm far away from anyone with a Twitter account.
Viscera-3
Viscera-3

While a change in eating routine is principal to improve your gut prosperity, Viscera-3 can offer you additional assistance to discard normal stomach related issues, weight security, and a couple of other clinical problems.You may achieve extraordinary results by combining standard components that have been comprehensively thought of and exhibited to help gut prosperity. Inside the space of weeks – possibly days, you’ll start to see an improvement in your assimilation and the lessened repeat of strong anguishing releases.

http://supplementstore4u.com/viscera-3/

https://myongayala.medium.com/is-viscera-3-the-most-trending-thing-now-e3c471d80d66

https://www.justgiving.com/fundraising/viscera-3

https://caramellaapp.com/myongayala/ylgDG8jxV/10-ways-to-introduce-viscera-3

https://caramellaapp.com/myongayala/

https://www.reddit.com/user/myongayala/comments/lsrisd/7_innovative_approaches_to_improve_your_viscera3/

https://www.tripoto.com/trip/how-to-learn-about-viscera-3-in-only-10-days-603897d49b292

https://youtu.be/v-IrqkvJ4kM

http://visceraweightloss.simplesite.com/448569750

https://m.facebook.com/Viscera-3-113076687494548

https://medium.com/viscera-3/about

https://jannietyson.medium.com/warning-truthful-sane-viscera-3-reviews-from-a-consumer-who-has-used-it-f42855f91a9e

https://viscera-3.jimdosite.com/

https://viscera-3s-initial-project.webflow.io/

https://jannietyson.carrd.co/

https://www.prlog.org/12859949-viscera-3-shocking-review-does-it-really-work.html
Java is RAM guzzler with some a small inability to optimize with value types. In its class (managed programming language without value types) it is pretty much as fast as it gets.

The two performance flaws that exist are:

1. Old Java frameworks were not written with performance in mind

2. Your entire app is written in Java so you don't benefit from C++ libraries
Structural regular expressions seem pretty great. If Vis ever gets some Vim features that allow operating across multiple buffers (quickfix et al) I'd probably switch.
Agreed 100%!
I've redesigned the UI of my timeline (for a video editor) several times, in order to constantly make it faster.

It's painful (for me, that is :D), but I know it's the right thing to do.
Could someone please help me understand why chip manufacturing is so hard? Like why hasn't China already figured out how to do it? It's obviously a huge strategic priority for them, yet it seems like they don't have the requisite expertise to do it themselves. Other bleeding edge tech they are fully on top of (the software side of AI for example). Why is that?
In fact, I’m struggling with this exact issue right now. My late 2013 MBP with MagSafe is panicking with a > 400% kernel_task due to a disconnected iSight camera + thermal sensor. I wish I could’ve just switched the charging side. Instead, I’m trying to get a replacement logic board to get the thermal sensor working again.
It sounds like Ragel still requires the user to "use it correctly", which is really not great.
Show HN: Agile Project Management Templates for Tech Leads and PMs (15% Off)
Keepass and Syncthing. The laptop is where I update the database. Every other device is read only.

Sometimes I also copy the db to my phone over gvfs (kdeconnect / gsconnect) from the command line so I don't have to start Syncthing.
Content is more important than UX, but bad UX is a deterrent from enjoying the experience of finding or discovering what you want to watch.
This, I guess:

https://www.economist.com/china/2021/02/20/china-faces-fatef...

Seems to me it's concerned about "America’s ability to deter an invasion over Taiwan", not about it "showing resolve when talking about China and Taiwan".
Good idea but impossible with a centralized service, because as soon as the hosting company goes down the page goes down with it. Only now that decentralization is starting to be a thing this will finally be possible.
I feel you! I'm on Android, and can't believe the morons at google still don't get this!
It's insanely slow all the time - I mean, I do have a quad core with 3GB of RAM, it's not top of the top, but still, at this speed, everything should be INSTANT