skysight-inc/HackerNews huggingface dataset:
Ask HN: Why not always log in via mail pin code and skip the password?
So I was again resetting one of my thousands of accounts because I didn't remember the password and I wondered about passwords in general. I have simple question.

Why do we not use one time pin codes sent via mail for logging into websites?

As in: enter your login name and the system sends a pin to your email which is valid for 5 minutes and stops working after login.

So far I don't see the security risk since we have the option to reset a password with the email anyways. If someone gains access to your mail, you always lose.

I must be missing something.. what is it?
Pretty sure you're the one generalizing here by specifically selecting the US. A fair number of countries[1] have a far longer commute.

Also consider overuse of cars is a big issue environmentally, while use of public transport tends to increase one's commute (bad schedules, detours).

[1]: https://transportgeography.org/contents/chapter8/urban-trans...
Rationality as a tool to serve yourself. A lot of SSC and AC10 is around this idea that rational intelligent thinking with self awareness of bias allows you to model the world accurately.

As for the rest, yes, I agree with you. Often, after having considered a great deal of evidence, I condense the finding into some strength of belief about something. Now, absent the original evidence I have a position. This is usually fine since I actually lack the ability to summon all evidence on demand.

It's okay, though, since I (and I suspect most people intuitively) have both a likelihood notion and a certainty in likelihood notion analogous to a Confidence Interval and P-value, if you will.

So I might hold the belief that GME is going to be between 120 and infinity on Jan 13 2022 and have a certainty in that belief that is like 10% but lose the evidence that made me think that.

This is also sort of a failure mode for fast Aumann Agreement even in co-incentivized individuals - the fact that memory is short.

So the problem is that my certainty holding is not well done.

Thanks for the thought prompt.
I will thank you kindly to not speak about the Honda Rebel that I owned like that! She could hit 81 while going slightly downhill if you were in a tuck.

I believe from the factory the Rebel has like 15 or 16 hp, mine that was 12 years old at the time must have had one or two less, and it was exciting to ride around town.

I'll grant that 17 hp in a car would not be "exciting", but I bet from 0-30mph which is where this car would live would feel plenty zippy.
Maybe forensics/criminology is already there but I wonder if detailed study of fake videos will become a very in/demand skill / specialization.
I think the author only means you're "doomed" in the sense that "your fate is sealed": you'll find it very hard to change your mind in the face of contrary evidence, because your observations will start to feel like they always reinforce your conclusion.
What is really important in the world of doublespeak [that is, marketing] is the ability to lie, whether knowingly or unconsciously, and to get away with it; and the ability to use lies and choose and shape facts selectively, blocking out those that don’t fit an agenda or program.

- Edward S. Herman
“Don’t run as root in the container” definitely gets parroted without the nuance you describe. Gaining root in a container does not generally mean anything has been compromised on the host. Unless you do something odd (like mounting the host docker socket, weird setuid stuff, or run as privileged) it should be fine to run the container processes as root. It’s kind of the main point of running a process in a docker container.

I understand the motivation of marking scripts and binaries as non-writable inside the container as an extra layer of assurance (along with a non-root user that can only execute). But it’s a disservice to developers if you don’t explain why. A lot of people walk away from this thinking they’re protecting the host OS and wind up cargo-cult-creating a container user with full write/execute permissions.
Pixelmator did this a while ago (December 2019): https://www.pixelmator.com/blog/2019/12/17/all-about-the-new... Can't comment on the quality of either because I haven't used them, but they both seem to go to 200%.
Yeah, a monthly payment forever is ridiculous...
Great! Now the only things keeping me on Windows are Visual Studio (which can be tolerably replaced with JetBrains Rider) and... drums... the default mail client.

After using it for a while, switching to Outlook or Thunderbird is really hard, as their interface is extremely overloaded. The Windows Mail display mode with two panes, left being combined inbox with mail grouped by threads and large tiles, right for the content and quick actions, that ALSO switches to a single pane mode when window is narrow (E.G. when tiling) is just the best thing ever. Is there anything like that for Linux?
The samples on the article show very good results at preserving details so that curves do not get blurry when scaled up but are not particularly impressive.

Off topic: I remember a few years ago, some students got very impressed by GIMP's Lanczos-3 upscaling that was much better than the photoshop version they had access at the time.
Show HN: Security and Privacy Plus 2.0- a Privoxy based security appliance
This is a hopeful but possible take. But the 501Y.V2 (B.1.351) and 501Y.V3 (P1) lineages have the mutation within the conserved region for coronaviruses near the spike protein cleavage site. These show massively (1000x) decreased monoclonal antibody binding for original genetic sequence designs. It's better for the mRNA vaccine produced human-body-made antibodies which show only 5-10x reduction in binding.

But antibody binding isn't the full story and there may be T-cell stuff helping too. The data seems to indicate updated spike protein designs will be needed but if there's other stuff going on we don't know about old spike vaccines could still work. I can't say it will definitely help because the vaccine rollout is so slow and air travel is so fast that this negative pressure will probably provoke more variants as long as host numbers remain high.

ref: "Antibody Resistance of SARS-CoV-2 Variants B.1.351 and B.1.1.7" [pdf] https://www.nature.com/articles/s41586-021-03398-2_reference... https://i.imgur.com/8co1IoL.jpg "SARS-CoV-2 VoC B.1.1.7 and B.1.351 neutralization evasion" table.

https://covariants.org/variants/S.501Y.V2 https://covariants.org/variants/S.501Y.V3
I have 5 teams, with 4-6 devs/SA, my data says we are actually getting 23% more done the last year, due to WFH, comparing with the previous 2 years.

The 23% is the total, some teams have a higher increase due to the “best” teams have not increased with much. The “less better” have a higher increase.

My case, WFH gave me the opportunity to hand out bonuses over the normal bonus and some team members feel less stressed and have time to exercise.
Agreed, subjective studies like this are worse than useless, because they're destined to just reflect the inherent biases of the respondents.

IIRC Google did have some objective data that purely looked at average commit rates and lines of code before and after working from home, and they saw a significant decrease in productivity during WFH (again, to your point, this was pretty early on in the pandemic and tons of people were dealing with childcare issues, etc.)

I remember people commenting "oh, lines of code, ha ha, you can't use that to measure productivity", and while that may be true for comparing individuals and groups, across a very large sample size over time (i.e. all Google developers), this is actually an excellent objective metric to gauge productivity.
You know, if you think about it for 5 minutes, your point makes absolutely no sense at all.

"Outsourcing" would be if his decision not to drive a car required him to pay people to drive cars on his behalf. That's the definition of the word "outsourcing". But you're talking about transportation that occurs whether he drives a car or not. The groceries you get at the store are driven there also. Him choosing not to drive a car literally has 0 impact on the transportation infrastructure of the supply chain. That is not outsourcing.
Logo design != Corporate identity.
If you have a need to be recognised as a brand, and don't
have sufficient funds, focus on brand name and high quality copy for your products.
I mean, if you go way way back to the days of Unreal Tournament 2004 and before (when Epic was still Epic Megagames) they were actually one of the few developers that supported Windows, Linux and macOS for most of their games.
I’m not sure if that’s the case with this tech. I could see in the near future a scenario in which many, many individuals (thousands) are photographing the same things in the same area and you can intelligently superimpose things to “enhance”, tho.
To me, backups are something you don't want for 2FA. It just turns your second factor into an unergonomic first factor. What you want is the ability to enroll multiple authenticators. Newer standards like WebAuthn make this trivial -- for accounts I have that support WebAuthn, I have a portable security key on my keychain, a "permanent" key on my workstation, Windows Hello, and FaceID that can all be used to log in. If I lose one of those devices, I just use another method to log in (and revoke that credential, of course!) and it's no problem at all.

I think what is killing adoption here is the reliance of so many third-parties on Google Authenticator style OTPs. OTPs are terrible -- you completely lose 2FA if you lose your phone, and OTPs are easily phished. I don't know why it's so popular, whether it's some regulation, or whether people just wrote their 2FA code a decade ago and haven't updated their flow to accommodate newer standards. Whatever the reason, it is just driving people to develop and use cloud-based password managers and OTP syncers like this, and those things aren't helping security. They're giving people a false sense of security; they feel like they are as protected as having a physical token required for all logins to important apps, but without any of the protection. It's less than ideal.
Yeah and Tesla can't tap the Boeing or Bugatti market.

Different cars for different markets and budget. $4k car is great for driving a few miles or once a week. Or within city limits. Generally, you get what you pay for so a $4k can't offer what a $80K car does. Common sense.
Wonderful! Thanks for sharing. This sounds like the exact sort of work that Rust is perfect for.

I'm making a game in Rust and Godot (engine) and since it's a factory game the simulation performance is important. Rust means I worry far less about stability and performance.

I bet if you wrote a good blog entry with screenshots and explanation of how your code loads and renders I imagine it would do well on HN.
This absolutely works for a HTTP request handler, where all the error handling is implemented in the DB / garbage collector, and where we're dealing with almost perfectly isolated processes.

In more complex systems, this won't work out. Imagine a software that controls sensors and motors, for example. What if one of these devices fails? There is no way any automatic system (like exceptions) could come up with the right way to handle this situation.
Creative Cloud was the point I noticed a shift in Adobe's priorities. I don't know if they switched CEO's at the time, but I starting disliking Adobe more and more from that point forward. I couldn't believe the amount of crud Creative Cloud puts on your system, not the mention all of the tracking and phoning home their software does.
That video just says to listen to the voice, but faking the voice is also part of the technology now
It's more steps and slower if you do know/have saved the password, instant mail delivery is not guaranteed, people log in on devices they do not have the associated email setup, ...
Kinda wish this and snag it would load to s3 and put the public url in my clipboard.
The 'Preserve Details 2.0' upscaler from photoshop does an amazingly good job, in particularly I started with a 500x500 square image of a gundam sketch illustration which showed scan lines when printed directly on a 8 inch square but with 4x4 scaling the image was close to perfect.
I guess you want to know that every MyEntity can be drawn and can move so you don't have to try-get the component.

The disconnect I think is that part of the ECS design is that you have the freedom to break that guarantee. Entities are no longer types but collections of components. The soft coupling is the goal.
You think you are not...
Are you sure? In a Consumer Reports article [0] from 2013, they mention in head-on crashes involving a car and SUV, the car driver was 7.6 times more likely to die than the SUV driver.

So in a world where there are SUVs driving around, buying an SUV for yourself instead of a car is a safer move.

Just think about getting t-boned in an intersection. Would you rather be in a light, low vehicle or in a heavy, tall vehicle? I'd pick the latter, especially if the vehicle t-boning me is tall and its bumper at the height of my head if I were in a small car.

[0]: https://www.consumerreports.org/cro/news/2013/05/suvs-are-sa...
I mean, we are saying that job experience doesn’t mean anything based on anecdotes. The power of the narrative is intense.

Some of you dealt with candidates that can’t make it through a for loop, okay. This one ghost story dictated the entire direction of hiring.

We are superstitious at this point.
Both didn't start with PoS because it's much more difficult to come up with a practical PoS design than a practical PoW design. I consider Casper CBC to be the first robust PoS design, and it took many years of research for it to developed. Look at peercoin for an example of an early PoS design that was fundamentally flawed.

PoW was ready back then, PoS tech was not there yet.
CSI and the like were just ahead of their time

edit: I was joking, but people pointing out that you still can't create something out of nothing etc might not be thinking big enough. I think this technology absolutely has the potential to help. police are literally still using artists impressions - photofits, to find perpetrators
Right, but the implication is that your fate is sealed and that your belief doesn’t reflect reality or isn’t “rational.” I’m assuming the author wouldn’t use the same terminology to describe one’s unwillingness to change their views from something he considers “rational” to something he considers “irrational,” e.g. he probably wouldn’t say “if you believe the Earth is not flat, and you won’t change your beliefs unless presented with compelling evidence and explanations that the Earth is flat, then you are doomed.”
Civilization game written in an Excel spreadsheet
How does LFortran compare to flang?
That quote is NOT Scott saying that pro-life advocates are right about abortion or wrong about abortion. That quote is Scott saying that once you start to believe that "the enemy" is a cackling evil villain, who is lying about their true motivations and secretly is only advocating for their preferred policies because they want to do evil things...you are doomed, at least in terms of seeking truth. Because once you believe that, there is nothing that "the enemy" can ever say or do that will change your mind. It's always just a tactic to advance their evil plot.

Of course, Scott could be wrong about this thesis. It's possible that maybe believing that pro-life conservatives don't care at all about fetuses doesn't actually indicate that you have a trapped prior that will prevent you from ever hearing new arguments on the abortion issue. But that is the argument that Scott is advancing, not that you can't form opinions about the truth or falsehood of someone's political views at all.
I can’t figure out how to reply at the top level, but if this sort of thing interest you, take a look at Docassemble
JRuby still seems like one of the best rubies around (I use it in all my side projects, and have advocated in the past its use at work).

I haven't closely followed the typing advances in ruby: I like what I see in RBS, but I'm not sure how to consolidate (mentally) Sorbet with that. Is the expectation that at some point they will converge? or keep on living as two completely different typing systems?
Success depends on emotion management
There are some decent $5-$10k small EV's in China that will mop up customers who can't reach Tesla levels of affordability.

And with the advent of Hyundai Ioniq 5 and other cars coming on stream in the premium space, Tesla can suck a fat one.
But it's not clear how they managed to improve training on a single GPU: they say they can fit 40B model on a single V100.
>>They stopped making them in 1993 because the incoming Liberal government adopted an incredible deficit slaying austerity approach which was in vogue at the time.

What was "in vogue" at the time was a Conservative (sic) Mulroney government routinely outspending revenues resulting in Canada's federal debt crisis in the early 90s[1][2] which helped usher in the Cretian government and Paul Martin's austerity measures. I think the austerity measures helped put Canada back on track.

[1] https://tradingeconomics.com/canada/government-debt-to-gdp

[2] https://www.fraserinstitute.org/sites/default/files/federal-...
I installed Linux on my primary SSD for a brand new computer I built in January. I lasted a week before I had to install windows on the secondary for a game a friend wanted to play, I expected it to take at least a little longer. That being said I am still really happy with the level of support in general for games on Linux. Paradox's strategy games all have excellent Native support for linux, as does Valheim and a couple others I've been playing. I really hope others who game make Linux their main platform to help boost the incentives for companies to support it.
You're not going to have a say in the matter, and I think you're going to be surprised at how many companies consider WFH to have been an unavoidable aberration from a status quo they intend to return to as quickly as possible.
You're welcome. I bought the "Chromargan" alloy series:"WMF Vision", btw :-)

Edit: i also suggest to check out the different models in person. The blades have different thicknesses and handles have different shapes, its not easy to get an idea what fits best from the pictures alone. Took me an hour of thinking until i made my choice. Ps: found a nice comparison on YT, the guy expanded his set from 6 to 12 persons in 2018 and holds a daily driven knife from 2008 (left side) against a new one (right side). Only micro scratches according to the (german) video and no stains at all. Also mentions that its still sharp.

https://m.youtube.com/watch?v=WhxZQL5W1a8&t=110
Windows is not a major OS anymore apparently
When your loop body uses complex library APIs over complex data it's still hard to be confident in C++ that everything's threadsafe and you're avoiding data races.

Maybe it's not so hard if you're in a domain like HPC where the libraries you use are designed specifically to be used with data parallelism. But when you're pulling together code from different sources that may or may not have been used in an aggressively parallel application before...
I guess you should be considered lucky for not being exposed to the Freeper comments section 20 years ago, or Fox News comments sections, or Patch.com comments sections. They've always been bad.
Why do you think the Rust version was so much slower to produce?
You can't compare a country the size of the US to Sweden. There are too many variations within the US, it is more like the whole of Europe and we all know driving in Sweden is not like driving in Italy. There are so many factors that can contribute, type of population, topography, weather, congestion, amount of driving in general and many others one could think about. "Ideas about safety", if they exist, is only one factor.
She could be facing much more serious charges for that too. It sounds like these girls are minors.
My subjective data is that overall productivity as measured by output has roughly stayed at the same level, but this is only because people I work with are now more available after hours and are more likely to work long hours.

I expect then productivity to fall when people start feeling burnout. I also feel new joiners don't get nearly enough attention and their productivity is impaired from the start. People who have worked for couple of years are getting more time for their tasks only because they have easier time fending off distractions -- but tasks behind those distractions don't necessarily go away and probably amass in some kind of technical / organizational debt due to less casual communication.
Twitter itself also being heavily promoted by the BBC, on almost every page

https://i.ibb.co/fMVXY2n/image.png
This demo is fun to see the ML take different guesses at how to inpaint the missing data: http://www.chuanxiaz.com/project/pluralistic/
By the way, is there a list of Linux-native games I can buy and download DRM-free?
> How do the Japanese work so much?

Simple answer, they don't.

They spend a lot of time at work looking busy, but they don't actually do that much actual work. For me (a lazy Frenchman), Americans are the hardest working people I know in terms of actual productive work.
'downtown areas' have been on camera for decades, certainly by the time google glass was released, so i don't think this is really a useful data point.
Not something I was taught to do for my UK license in ‘09, IIRC.
Does Betteridge's law apply here?
So where can I read the manuscripts? Is there an english translation available? Searched for half an hour and didn’t find anything..
But it is a dumb fascination when the logical conclusion is everyone riding around in tanks.
That's not perfectly parallel as a belief. The parallel statement would be "If you believe that flat-Earth advocates don't actually care about whether the Earth is flat or not, they just want to prevent space exploration to keep us trapped on Earth"...that would be equivalent. And I can't speak for Scott, but I think he'd say if you believed that, your ability to reason about the Earth being flat is basically dead. It happens to be that you have the right answer (the Earth is round), but only by chance...if you were wrong, you wouldn't be able to be convinced to change your mind.
I like this Amazon Basics kettle I have. It's only 1 liter, but I rarely need more than that.

https://www.amazon.com/AmazonBasics-Stainless-Steel-Electric...
Your non-game-related Linux observations make me feel like we're living in different worlds. I haven't really tried playing games on Linux (I like games that require a Windows anti-cheat, so I'm dualbooting Win10), except Factorio and that was awesome. I'm also a power-user, I guess.

Software, hardware driver installation is so comfortable on Linux. Everything is a few commands away. Screenshots? I've never had trouble there.

You wrote Desktop Environment (capitalized). Linux isn't a Prepackaged End Product. You can get something like that from the popular distributions. I find Ubuntu plug and play, for example. That said, I usually assemble my own desktop environment, which is great for me, though I realise not everyone wants to put in the effort.
it runs on Windows too... Literally the second bullet point on the page is about Windows releases, would be kind of odd to list that if they didn't have Windows releases.
I thought it was interesting when Pixelmator introduced 'ML Super Resolution' but that was in 2019. https://9to5mac.com/2019/12/17/pixelmator-pro-super-resoluti...
I learned about leadership and scaling from Sheryl Sandberg
Yeah, a not-insignificant number of their articles are also just an embedded Tweet with some archive text about the people involved. I wonder if they're generating some 'articles' algorithmically.
What are the hidden expenses in this case?

And a note, the license applies to users, not CPUs. If I have two computers, one tablet and one mobile phone, I'm still one user, and I can use the font on as many devices as I want.