skysight-inc/HackerNews huggingface dataset:
Yes and no. There's two advantages to TOTP 2FA: The "second factor", and the "one-time password".

The one-time password advantage still exists if you use a password manager, and I'd argue it's the main advantage. It greatly increases the effort required to successfully hijack a login flow. It prevents account takeover via password reuse / leak. It does not help if the OTP seed leaks as well but it's still a lot more secure.

Now on second factors: What is it? If a password is something you know, a second factor is something you either have or are.

The wikipedia page on MFA (https://en.wikipedia.org/wiki/Multi-factor_authentication) gives a good summary of the philosophy behind it but concretely, the separation between a phone's encrypted 2FA database and your local password manager's encrypted database is not that large. They will likely be on the same network (the 2FA device is unlikely to be airgapped); they will likely have the same owner; etc.

Unless your threat model is "people are already on my machine and have access to my RAM, or my files AND system-level keystrokes" (in which case I'd argue you're already beyond fucked), then a password manager won't be any less of a second factor than a phone authenticator. Either will be less secure than a hardware key.

Risk does greatly increase if you're using a browser extension as the threat level becomes the browser's sandbox. But security is also about convenience, otherwise you'll find people sharing a taped hardware token with its pin written on a post-it note next to it and call it compliant.
Move temporarily to Shenzhen, Guangzhou, or Ningbo, depending on the industry, and have a founder who speaks the language fluently. It's much easier than dialing phone numbers and then visiting, because you can visit more factories immediately and evaluate samples faster.
You can set references to default to non-nullable now with compiler flags or some such thing.
>Peace and trust cannot exist without currency.

This is completely false. Currency is orthogonal to trust.

>Money lubricates peaceful resolution of conflict.

Just as easily as it is the driver behind conflict.

>If you need food and I have it, trade or violence are your only options if currency doesn’t exist.

Trade, gift or violence are your only options regardless of the existence of currency.

What currency does is help to expand the number of people that can do business beyond the number of people one can have a personal relationship with.

That is immensely powerful, but it also enables a whole world of fraud and bad things that we need a functioning trusted regulator to deal with.
Nim also has this. You can also leave out the parens from calls, which adds to the syntax flexibility.
Not really. Maybe I'm being overly pedantic, but my point was that the first two ways of describing it are overly specific and don't include all the strings that can be matched. Only the third option really describes all the possibilities.
Honestly, I'm with Google on that one.

I'm disappointed they caved in and paid the danegeld, but the way Microsoft went "We fully support the extraction from the danegeld, and if Google happens to lose any market share due to its refusal to pay it, we would be more than happy to have these customers use Bing instead. We fully support this law that has no effect on us and actively harms our main competitor" is just disgusting.
(In case you only see direct replies via one of the HN monitor services: I have replied to viklove on another part of this thread w/ how I find satisfactory answers, w/o what they have called cognitive dissonance.)

(Paul talks about baptism for the dead, but we don't believe anything is forced on them, and yes that the Lord is both just and merciful.)
ELI5? All this techno babble just sounds like "it's faster because we optimized it". What are the nontrivial, new fundamental tricks?
So? I said, "higher level language." I didn't say, "Python specifically."

I would guess D could do it.

I don't know enough about Nim or Swift.

I would learn something if Common Lisp did it. I'd also learn something if Haskell or Go did it.
Which is why they should be educated, given a chance. No?
Except for exotic or recently released devices, isn't the driver situation on linux better than in any other OS?
You can get bitten by a similar problem without closures if you stick a loop variable in an array. The loop variable is one address with contents mutating each iteration.
i agree if you mean the unlimited liquidity and fiscal has pumped up asset speculation to historic proportions

i disagree if you mean people are somehow buying it as a hedge to the dollar
What problems does this solve?

This seem to negate the whole purpose of 2FA - now your second factor becomes "something you know" instead of "something you have".

What I really want (and would consider a "missing authenticator app") is an app that stays on the phone and keeps all keys there with a client companion app for desktop that communicates with the mobile via Bluetooth to automatically fill the 2FA codes.
I am guessing that most people wouldn't use reddit search because of its reputation, so the 90% of people saying they found what they were looking for were a small % of users. When you posted that you updated search, a lot of people who had given up on it might have tested it out again and changed their opinions.

Does that check out with your data?
I don't understand why Tesla has been and still is allowed to use the term Full Self Driving (FSD) to imply, that is advertise, something that clearly is not and will not be in the near(est) future. Where is FTC, which is supposed to protect and enforce truth in advertising in the U.S. (https://www.ftc.gov/news-events/media-resources/truth-advert...)? Especially considering that relevant false advertising (in terms of the naming / use of the FSD term, not the actual feature set) clearly can negatively affect the driver's judgement on manually controlling a car in various situations and, thus, ultimately, the safety of the driver and passengers.
Templating for Lawyers
I think there might have been something else that helped dim that hatred than just PR management. A sort of comparative effect as it were.
You know, now that you mention it, I think every time I mention this feature of Lobster someone explains this to me, and for some weird reason I keep forgetting. Thanks for enlightening me again, hopefully it'll stick this time!
Use bem like convention for your css so that all your custom classes are "flattened". See eg. SuitCss naming conventions. Lint with postcss-bem-linter so classes follow PascalCase component names typical in React or Vue. Also lint for a optinal namespace (prefix eg. ais- used in Algolia Search).

Then import tailwind after yours, that way any simple flattened class can be overridden by tailwind utils.

So now you can have component say .ns-MessageBox feature a default text color, or font size or anything, (optinally using @apply in the scss stylesheet) and you can override any good defaults, as well as handle layout & spacing in the template eg.

<div class="ns-MessageBox text-red mb-4">…</div>

Likewise then you can also set a good default stylesheet for plain html headings, lists, etc. Because selector "h2" can be overridden by utility. So your headings lists etc can also have sensible default bottom margins padding and whatnot. You have to look at the design templates to determine good defaults, then you dont need to be so verbose with tw in templates.

Then you can also keep your entire color system in Sass if you prefer, take advantage of Sass functions.

It’s very flexible.

A good ruleof thumb is to use tailwind in templates for all the space around components, main layout and spacing of all individual components. Those are the things that tend to bring really confusing and complicated css selectors with pseudo selectors to target first/last elements, which is hard to maintain, hard to read for other devs, much better handled in templates.
How does message passing work with a statically-typed language? (Genuine question, not criticism.) My understanding is that Smalltalk-style message passing's main advantage is that it allows handing or proxying unknown method calls, but unknown method calls are forbidden in a static type system.
The recommendation is not standard. They usually go with their personal biases and recommend sans for websites and serif for print. I can pull plenty of books from my bookshelf that have pages with a little too much ink (and some c's look like o's) or too little ink (and some e's look like c's, d's look like cl's, etc.) For these reasons, most serif fonts are defective even if we don't compare them to sans-serif fonts.

Fashion and force of habit do play a role. And that's why most newsprint websites have reverted to serif fonts. Responsive websites that help to get a job done, like GMail, Protonmail, Yahoo Mail, etc. all sans, whereas NYT, WaPo, LATimes, etc. all serif. I really can't sympathize with a thought-process that motivates them to make their websites look like century-old newspapers. Screenplays are strictly in 12pt Courier. Nothing else will do, not even Courier New. Basically, century-old industries tend to be set in their ways. And the book-printing industry is even older. Small blessings, at least Courier has the benefit of being one of the dyslexic-friendly fonts.
What's a YAML warrior?
I'm convinced that a clean Ubuntu install has surpassed by Mac and Windows. I feel like the gap is only going to get greater as the battle between something created out of profit and something created out of passion wages on.
Having driven a Model Y and a Model 3 I can say that until Tesla removes that huge ass distraction magnet touchscreen from their vehicles I won't buy one. In order to determine anything about the status of the vehicle or change a setting you have to train all of your attention off of the road and onto an overly complicated cellphone interface. Autopliot is an optional feature, that damn tablet is not. Adding a simple HUD that comes standard on most Mazda's would be a huge improvement in safety.
Yes, it's definitely frustrating if that's the end game.
We got tired of Whitehat jr. commercials in USA So we made this for India
At 18 it is too late and puberty has already done permanent damage. The entire purpose of puberty blockers is to make it possible to defer the decision until they are adults.
I don't see any meaning to the colors, so I guess it's whatever color you feel represents your site?
Third paragraph or so in the overview:

> ZeRO removes the memory redundancies across data-parallel processes by partitioning the three model states (optimizer states, gradients, and parameters) across data-parallel processes instead of replicating them. By doing this, it boosts memory efficiency compared to classic data-parallelism while retaining its computational granularity and communication efficiency
We airdrop a population the size of Waterloo region (500-600k) of people into the country every year. They need somewhere to live. I don't think I need to say much more. I am aware that there can be other factors, but this is the (as I said) elephant no one wants to discuss publicly.
Unless TraitB is an auto trait, that isn't currently valid?

From the reference:

> Trait objects are written as the optional keyword dyn followed by a set of trait bounds, but with the following restrictions on the trait bounds. All traits except the first trait must be auto traits, there may not be more than one lifetime, and opt-out bounds (e.g. ?Sized) are not allowed.

The only one of those restrictions that is acceptable to have is the single lifetime one. All the others are seriously restricting. The devs seem to agree, but work on this aspect of rust is very slow, and people are arguing on how to implement it. (I, for one, feel very strongly that dyn TraitA + TraitB should have a size of 3 pointers. That is, no magic combining vtables, just every added trait adds a new pointer to vtable.)
On a related note I'm 25 and am bitter about how older generations lived through Watergate / Iran-Contra / etc, and not only let everyone involved off the hook, but then let them all pull the strings behind the scenes throughout the 2000s and into the Trump era.
That is possible, but gets really hairy if you use a lot of trait objects.
Single player games do work! Multiplayer games require invasive kernel modules these days.
I try to answer that in

https://john-tromp.medium.com/a-case-for-using-soft-total-su...
My kettle was cheap AND works well. What's the problem? Cherry-picking?
The driving experience of an ICE engine versus an electric motor of the same horsepower is not similar. They have much different acceleration curves and driving experiences.
In D, this is called "uniform function call syntax." [1] It's really handy, not just for OOP but also for pipeline-style functional programming, since it lets you compose functions from left to right.

[1] https://tour.dlang.org/tour/en/gems/uniform-function-call-sy...
Yeah that would be the techno-babble. I've been working on a machine learning pipeline for 6 years and I still have no idea what this means.
ASMR: An idea I haven't seen discussed before
I just had a thought that was novel and interesting enough I thought I'd throw it up online to see if it could spark conversation.

I experience ASMR. I've heard that some people don't. When I started learning about it as a phenomenon that others experience as well it became interesting to me. It's interesting to me that it never occurred to me in the first place that others also experience ASMR, as though that didn't really matter.

Most "triggers" it seems come to people through the sound of clicks or rustling in an otherwise silent environment. Also from whispering (this is another aspect that I experience, not so much from the random sounds).

The one unique thing for me (that I don't see discussed) is I also sometimes experience ASMR when I see someone struggling through a problem they're trying to solve. Or so I thought. I just a few minutes ago started wondering whether the fact that I KNEW the answer to the problem they're trying to solve had anything to do with it. Then the rest started to gush downstream rapidly.

If the fact that I experience ASMR because I recognize that someone else doesn't know the answer to something that I do, could that be tied to some primal process for survival? I don't know if this is how others experience it but it is somewhat of a "rush". Could it be that it's a natural mechanism humans have used in order to "kickstart" the dopamine / adrenaline before they've had a chance to work up a sweat? (ie. survival).

If I'm being hunted, what do I need to be keenly aware of in an otherwise silent environment? The slightest of noises will be important hints that are meant to help me get out of what could be a dangerous situation. The experience of knowing something that someone else doesn't could be tied to strategy (hunting, etc). Once ancestors start recognizing patterns to help them survive could those become "engrained in your DNA", so to speak, to help future generations?
Bugs/missing features in HN-Android app
I tried to report an issue via the feedback function of the Android app, but it says "Failed to send"

Here's the feedback zi actually wanted to send:
>Sometimes there are links to other HN articles in comments. Clicking on them does nothing. Expected behavior is to switch to the linked article, and when pressing the Android back-button to switch back to the comment of the previous article.
Maybe, but I feel like there'd be a pretty easy calculus on it at scale— like "your competitor is cheaper. We're going with them unless you can cut your rate in half. One way you can do that is by giving us SIMs that only unlock for an hour once every 24 hours, and you can decide when that hour is, as long as we see our devices at least once a day."

This should be pretty easy to implement on the telco side and it would let them monetize the dead time in the network, same as TOU pricing for electricity.
An Introduction to Linux Kernel Exploitation
I wonder if there are any of these with VRR and lower latency. I'd like to upgrade my TV but it seems pretty wasteful to throw out the panel when it's mostly the firmware that's the problem.
I only ingest RO water, no scale to speak of.
As for Mac support, my understanding is that Apple's reluctance to support third-party graphics APIs has made development incredibly difficult, especially on modern versions of MacOS where they're moving away from technologies like OpenGL and dragging their feet in the sand with Vulkan. From what I've seen on Github, a lot of Proton developers aren't keen on picking up Mac support, and the last time it was (officially) supported by Proton was nearly 2 years ago (where you had to compile from source to get it working). Given Apple's recent hostility towards Valve, I doubt they have much interest in working with their platform.

As for GPU support, it's fine. I use an older GeForce card that works perfectly fine on Manjaro, and I haven't seen any driver issues so far (though I don't use Wayland, so ymmv). I've even been surprised by their control panel, which lets you easily enable G-sync on supported monitors, force compositing, micromanage your displays, adjust color calibration and more. I've heard the situation is much better on AMD cards, but I have yet to run into any issues with Nvidia.
Robots are still in the dark ages. Doing anything with a robot arm requires massive amounts of human intervention to get the motion just right. Custom grippers have to be made for every part.

Anecdotally: Interviewed with a robotics company that claimed to be doing lots of AI/CV/ML to direct robot arms, but in the interview they admitted that they weren't able to use the ML in practice and had a bunch of traditional robot arm programming staff just to pay the bills. It seemed like they had inserted themselves as middlemen into another businesses process with the false promise of AI, like IBM Watson.
Democratic NY Gov Cuomo Used to Beat Ex-Wife
My first language, 1965, on a CDC 3100. We used Eliot Organick`s text book. Wonderful memories.
"attack" is a misnomer. 51% is a majority vote.
nytimes links should be banned - it is all liberal bullshit
And what if he is not poor? I have rich friend who no longer needs to work and he did not buy a single bitcoin. Not for ideological reasons though as he does not even know what reddit is (what a blessed person). He just said I have enough and secure to live the rest of days and do not like to get involved in extra money making activities.
Sadly I don't remember nor have the data. But that is certainly possible and could have skewed the data.
When I looked into it 5 years ago, there were supposedly issues with it having a non-standard NVME interface firmware or something. There's a good chance that it would just work these days, but in my experience getting linux to run reliably on a laptop that wasn't designed for it can be tricky. It was originally a work laptop, so linux compatibility wasn't originally a consideration.

Maybe I'll whip up a Linux live usb drive and try booting it this weekend!
Question for someone knowledgable about this: if I have a model which is large -- but small enough that I can fit a single training example on GPU -- does this approach offer speedups compared to simple gradient accumulation? Or is this only useful for models which are so large that the model parameters themselves are overwhelming GPU memory?
scala-native exists?
A counterfactual is that those two things would have happened anyway, and the ad-funded model has deeply corrupted both of them.
Try installing sox and ffmpeg if you have not already.
> What's the state of modern GPU support?

Pretty good on AMD, still somewhat behind for Nvidia (Raytracing is being worked on, and DLSS is to come at some point). AMD is the preferred way to go for VR as well as they support reprojection on Linux, but Nvidia does not yet.
Just trying to understand your thought process here - did you think that the parent thought that the filter would somehow remove lime out of thin air? I'm honestly amazed how you didn't immediately come to the conclusion that it's just for filtering lime out before pouring.
I recommend reading this 3-part series on Mongo's marketing - it goes into a lot of detail why Mongo "won". https://www.nemil.com/mongo/1.html

As a former RethinkDB user (we have migrated to Postgres) I actually don't miss it as much as I would - JSONB in PG does what we need, and the real-time features of RethinkDB never really delivered because of various performance issues in the database itself.
> You can just own up to that instead of going into a territory of wild claims and diversions.

Mate I don’t know why you’ve gotten so worked up and aggressive about this.

But if you think I don’t know what I’m talking about despite all my work and publications on the subject then feel free to ignore me and go about your day happily.
I would guess because most of the land in this country is not arable (fertile) or hospitable, so even though we have lots of land, only the southern strip is worth populating.
I don't really like the title of this post, due to its implications... you can only resurrect something that is dead. But Fortran is alive and kicking. It is a fundamental language of our technological infrastucture. Millions of people run algorithms every day that are implemented in Fortran! It is also one of the few languages where you can reliably implement numerical algorithms and reason about their efficiency and memory usage.
The argument is that the currency produces this behavior.

The development is not a victim here.
I think this is a well written post, but I'm incredibly puzzled at eschewing scalas syntax for type parameters and instead having parentheses do double duty. Other than freeing up brackets for indexing what is gained from this?
Other than that I actually think this is a language that deserves to exist so the ideas can be tried out in practice, if nothing else to influence the current OO languages to be better.
The odd couple: John Keats and F. Scott Fitzgerald
Yes, I did. The last comment is a traceback and an explanation what would have to be done to fix it.
Sure, but that's always the case. Valve didn't offer native Linux support when Steam came out. With that being said, Tim Sweeney can be as unpleasant about it as he likes, I'm not begging for native Fortnite support anytime soon.
Matic is not an L2 though, it is a side chain. The reason L2s like optimism are exciting is because they inherit the security of ethereum mainnet. (matic has its own consensus mechanisms).