skysight-inc/HackerNews huggingface dataset:
Nonsense. SMS is a great recovery factor, both for people who forget their password, and for those who lose access to their other second factors. (E.g. email address or a smartphone app). The thing that makes SMS uniquely good at this is that there is infrastructure around for people to replace their lost SIM cards, and that SMS available globally (vs regional identity systems like the bank ids in Nordic countries).

The problem is purely with how some companies are applying SMS as an auth factor. In cases where SMS us being used as a recovery factor, it should not be allow for immediate recovery. Instead the user should be notified via other channels (email, phone notifications) about the recovery attempt, be given the opportunity to reject it, and for the recovery to only succeed if it is not denied after e.g. 3 days.
Does it give you a digital display of the temperature (in Celsius or Fahrenheit, configurable)? Does it sleep if not moved? Can it run off a battery pack and monitor the power of said battery pack to safely shut off?

Not everyone needs those features. If you do or want them, the moment you add even the simplest logic, you are better off getting a microcontroller already. No reason to bother with discrete logic chips anymore.

I have used for many years a standard soldering iron (not even a soldering station) with zero logic whatsoever. It worked, but nowadays I prefer to be able to set the exact temperature I want, to the degree. And to be able to monitor if the iron is able to handle the thermal mass I'm trying to solder.
Can you fake a slow connection by streaming 4k video(s) from YouTube / Netflix while zoom meeting?
Because it reduces transmissibility.
What percentage of your development effort will you budget to serve that 0.2% client? Would it be more than 4 hours a year? How much extra support would the types of clients who actively turn off JavaScript require? How much extra business will these types of clients generate or influence?

I am not saying it is not worth the effort, but I am saying you should clearly set expectations and measure to be sure that this juice is worth the squeeze. If your motivation is because it is the "right thing" to do and not because you can quantify that the effort is worth it, then it almost certainly is not. On the other hand, your business analysis might show that this type of client is 10x more likely to subscribe/buy your product and supporting them is a no brainer.

Note, that I am assuming we are talking about a smaller client base and dev team. Social media size sites might for example consider this 0.2% of their perspective userbase as a critical mass and devote thousands of hours to supporting them. You might also feel in your case that the use of JavaScript hinders assistive technologies and their support is critical to your success.

For what it is worth, I do not disable Javascript myself, nor do I build sites that specifically work without it though I do try to build clean HTML to the extent it is practical and I would rather solve a problem with CSS than with Javascript.
We already place a human value on life in healthcare, via QALY (Quality Adjusted Life Years)

This is typically about $50,000/year in places like the UK.

If you run this same calculation against what we have done for COVID, the figure comes to tens of millions of dollars per life year.

The same sums spent on lockdown and lockdown compensation could have been invested in general healthcare, or tackling air pollution (which kills 800,000 Europeans a year).

COVID lockdowns should not be immune from the cost-benefit calculations that all other Government programmes are subject to. Its also totally reasonable to ask why we tolerate influenza, which is a leading cause of deaths and fills hospitals each season, but not COVID.
Those three all sound like there was a successful hack.
I was more viewing this in context of the article, which goes on to micro-optimize a version with an IMO unreasonable set of assumptions.

If it's instead explicitly given that this is a quick litmus test, the choices of the first pass implementation don't really matter, and you'll talk about complexities after, then sure.
Sans source code to boot!
Has it been proven? I read online and while it seems impressive (and increased my estimation of him), I didn’t see concrete proof of it being proven or disproven
On the gripping hand, if someone had run a profiler on the code in all of these years, it would have popped out immediately that some investigation was warranted.
Hold the Code #6
I recently tried to revive a Netbook. It has very limited vertical space.

I had to get rid of almost all programs that used modern GTK.

One major problem was dialogues windows, typically options setting dialogues. They were too big and the buttons were out of the screen (below the screen), because of too much white space everywhere, because of badly organised layout, and because of too many things being packed inside the same dialogue.

But the most infuriating was the bloody CSD (Client Side Decoration). They pretend it saves spaces, because it fuses a menu bar and the window bar (window manager bar).

But firstly, they made it so big that this single bar is only a couple pixels shorter than a traditional set of menu bar + window bar.

And secondly, on a traditional application, with the WM I had, I could (simply pressing one shortcut key) hide both the window bar of the current application (from the top), and the WM task bar (from the bottom), making the entire vertical space available from the current application content (including its menu bar). But with CSD, I cannot hide the window bar, since there is no window bar; so I am forced to keep their huge menu+window bar combo fusion and as a result there is less space available for the content...
Why would any politician/regulator/expert willingly opt-in to accountability?

The best strategy (however cynical) is to not be quantitatively explicit about expectations so that you can frame it as though you succeeded no matter what happens.
Tesla Executive Name Changes
Congratulations on being able to do 6th grade math.
There are benchmarks, yes, but Anandtechs' bechmarks are mostly synthetic benches from systems almost no-one uses (I don't run SPEC benchmarks daily, and ok, I compile stuff, but not clang, nor using clang)

But Phoronix has synthetic benchmarks from systems quite a few people use (e.g. databases, rendering, simulation). SPEC is nice, but I wouldn't know where to look if I would want to apply that to e.g. postgres. With Phoronix' results, at least there is an idea of how I could apply the results of the benchmark to my usage.

So I find this link quite useful.

That's not to say that I think Anandtechs benchmarks are not valuable (I love reading the nitty gritty details like cache timing specifics), but I can't apply them to anything other than a generic CPU workload, not even slightly in the direction of my specific workload.
Considering current demand and lights-out automation, I wouldn't be surprised this becomes more of a thing. Apple's not going to do it, but something like Pine64 or similar will beat them to the punch.
Depends on the implementation. I've been using PostGraphile which says "PostGraphile compiles a query tree of any depth into a single SQL statement, resulting in extremely efficient execution".

https://www.graphile.org/postgraphile/
"They had never gotten any programmer with the requisite expertise to take a look at the code in nearly a decade of opportunities" sounds more or less like a verbose phrasing of "They didn't care."
How does Python implement super long integers?
guile --version?

EDIT: Guile3 brings JIT support...

Guile always compiles code before running it, but adding a JIT it's only from v > 2.91.x, and by default at v3.
How do you protect against this type of attack?
I guess I don't see how this leads to officer discipline or convictions. As long as the officer had probable cause for the citation/arrest, then there is nothing legally wrong with the case, even if there are indications of discriminatory enforcement.

Why not create a site that can have complaints against officers cataloged, similar to therobbingroom.com (and increase the popularity/use of this one too). Obviously people still need to file complaints with authorities. The problem is that the authorities don't self-investigate with integrity.

I recently had an issue with a trooper knowingly holding a charge without probable cause against my wife which resulted in restrictions in our freedoms. His LT says it's not against the rules. He also backed up the trooper in his choice not to prosecute the other party for a similar offense. Nobody in the system cares. I reached out to a civil rights lawyer and he told me that the courts don't care about rights violations unless substantial monetary damages occurred. If the system won't enforce our rights, then do we even have any?

If egregious violations are ignored, then how will trends help?
Is there anything that gives a "parent" button to comments? Like a tampermonkey script or something?

Whenever there's a deep tree, I sometimes find it hard to know what comment people are replying to. A better visual indicator of the depth of the comments would be nice as well.
Yes, because the others can get vaccinated (provided vaccines will be available). With vaccines available it is really not much differnt from the flu (which btw. causes hundreds of thousands of deaths despite vaccines being available). So yes, it is madness.
The problem there is I see no reason why Telegram doesn't just creep up to Facebook level intrusiveness.

They have the opportunity and a need for profit from a smaller advertising base.

I'd bet on it actually: in a few years we'll get a big fuss when Telegram reveals their new targeted advertising functionality...
We're working with a few different regulators to make sure we comply with health code – some of the most important things are keeping food at safe temperatures at all times and using food-safe materials for food handling. Vermin is also something to think about, actually! The main thing is not having any holes that critters can crawl into the machine through.
I don't think you've been following this story. If you looked into the technical details [0], and surrounding context, you would understand why your comment isn't particularly insightful. For example, terrain has nothing to do with this bug and it isn't a complex fix that interacts with "millions of lines of code." A single run of a profiler would have caught this.

I also think it's relevant to note that GTA V has sold 140 million copies, 20 million last year alone, and Rockstar makes hundreds of millions of dollars a year on the title. For a multi billion dollar product to have a known, relatively simple, problem is shameful. I don't know what went wrong, but I don't think it was the competency of engineers or the complexity of the problem that allowed this to fester.

[0] https://nee.lv/2021/02/28/How-I-cut-GTA-Online-loading-times...
You’d think. I’ve seen everything on Linkedin comments and posts, from harassment to openly racist comments. Occam’s Razor explanation here is it’s a smaller problem because it’s _used less_ for general discussion than the other networks
I think the question is about users disabling JavaScript in their browsers rather than about sites running 3rd party javascript particularly remote dns supported (ad provider) javascript. Though I could be wrong.
Does this comment count as social media?
Can't decide if the Gist is tongue-in-cheek or actually serious...
I legitimately wanted to evaluate the argument here but there’s so much backstory and political contextualization I gave up reading this without ever having found out what the Viennese did.
It would be useful if the readme said what this program actually does.
In many cases I would agree with you, but I encourage you to read about demonetization in India, as that is a good example of how regulation produced a worse outcome because of the unique forces at play within the country.

https://en.wikipedia.org/wiki/2016_Indian_banknote_demonetis...
That's interesting, I feel like I tied the same dozen or so knots for 7 years that I can still tie knots for which I can't remember the names.
honestly I'm happy it worked out that way, given how cancerous twitter has become. They blocked me and it was better for me overall.
Yes, there's more to it sadly. The hardware isn't in our control and UPS are out of the question. The machines aren't on premises or in a datacentre.

Puppet works okayish but when you have a large fleet of what are basically IoT devices, you start getting an unpleasant failure rate. Push one bad network config and you've 'bricked' thousands of machines.

I am being a bit vague intentionally, hope you can understand. But to help imagine, the scale of our problem is pretty big, you've probably even had some interaction with one of our machines.
From the article:

> As both the Vienna model and Henry George[1] would suggest, the problem is forever and always the cost of land. Burdensome land costs, and the rentiers who gain massive wealth by passive land speculation, are the real enemies — not developers, not our homeowners, not our public officials.

[1] https://thetyee.ca/Solutions/2018/06/04/Tax-To-Solve-Housing... (linked in the article)

EDIT: From the looks of it Vienna's policy isn't purely Georgist, but it has a few policies (namely land tax, particularly on vacant lots) out of Henry's playbook.
Can’t imagine how many hundreds of thousands of hours of people’s lives have been wasted just sitting and waiting for it to load. Oof.
How to Manage Customer Feedback
Thanks for creating and for sharing with us! Disregard the negativity.
AppImage is the best, and I wish more developers would use it. At least for desktop/end-user software. Maybe Guix is a better choice for a server, though I don't have much experience with it.
@dang

Would love an updated post on what the current hardware / software stack that’s running HN.

It’s been years since I’ve seen a post/comment on this topic.

Are you still running FreeBSD, on a few high frequency cores (iirc)?
Evaluating a new feature in our professional network
I resent doing other people's work for them, I don't resent helping them when they can no longer help themselves.

Interrupt me after you've tried as many ways as you can to solve the issue, and present them to me so either I can determine the remaining set you haven't tried or we can brainstorm. It shows initiative and thoughtfulness and creates a starting point for our solutioning.
GraphQl queries are often send over an HTTP endpoint. This allows you to take advantage of caching where necessary (but then enough apps don't cache HTTP either).

For example you want to make sure large resource blobs (e.g. pictures are cached).

In this case you can decide to not put them in the GraphQl response but instead put a REST uri of them there and then have a endpoint like `/blobs/<some-kind-of-uid>` or `/blobs/pictures/<id>` or similar.

The same endpoints also can be used for pushing new resources (GraphQl creates a "empty" `/blobs/<id>` entry to which you than can push).

While this entails an additional round-trip and is properly not the best usage for some cases for others like e.g. (not small) file up-/down-load it is quite nice as this is a operation often explicitly triggered by a user in a way where the additional roundtrip time doesn't matter at all. An additional benefit is that it can make thinks like halting and resuming downloads and similar easier.
Don't use a phone.

Lucky's company has this product that can monitor for the attack, but it won't prevent it: https://okeymonitor.com/
> A Brief History of Time secured his celebrity. That it famously went unread, or unfinished, by many of its purchasers would for any other science communicator be a sign of failure. The book was like a Latin liturgy, filled with terms like the readership only half-understood. It played into the unhelpful notion that science is really hard and only for super-humans like him.

Lol, I must have been such a freak of a kid. I found this book in the library when I was 11yo and read it in a couple of weeks.

Couldn't do it these days. We didn't have internet back then.
- auto-update enabled by default. if I boot a vm it's going to be nearly unusable (can't install packages) because it's going to spend the first 30 minutes doing a full upgrade

There is something seriously wrong with the Ubuntu auto updater. It literally will run for hours at 100% cpu on a system that hasn't been updated in a few months vs an apt update && apt upgrade that can do the same work in a few minutes. It acts almost like some sort of O(n^x) behavior where x > 2.

I just disabled it and moved on with my life as bugs like these in my experience get ignored forever when you report them.
>I know this is not a solution to ignore this

I don't watch any network news and I'm much happier for it. Seeing lots of horrible stuff that you can't do anything about is not healthy. It's the same with bad stuff in your social media feeds.
Don't you get the same benefit by writing a Swagger spec?
You're incredibly condescending and just full of incorrect assumptions. Done with this conversation
Toyota has this philosophy, Kaizen, which focuses on a continuous process of making small improvements to their products instead of singlemindedly trying to make the best product possible. The British cycling team [1] drew inspiration from this when they remade the team before the 2008 Beijing olympics.

[1] https://hbr.org/2015/10/how-1-performance-improvements-led-t...

Mozilla, it seems to me, has for the last several years been doing something close to the opposite of this. Granted, they have made some real improvements to privacy and speed, but so do other browsers. What happens with Firefox, which seems pretty unique in that market, is that almost every release they make some changes that piss off a small segment of their user base. OK, yes, they may only lose a percent or two each time, but I can't imagine this is good for their market share in the long run.
Tail Call Optimization: The Musical (2019) [video]
I have found it practical to do so. The one note I have seen is you may want the images with non-free firmware if you have devices dependent on that:

https://cdimage.debian.org/images/unofficial/non-free/images...
Learning About ELF with Zig
Ha, I do this with yahoo.com. I never have a reason to visit it otherwise.
Vaccination rate in Germany will drop considerably while the hold is in place, at least 20%, if not more. I don't know the exact numbers, but vaccination is quite blocked on vaccine supply at the moment.
> Don't want to do programming otherwise though.

So get a FAANG manager position.

With that attitude towards your chosen profession you can do all the leetcoding you want and still don't get a job.
Mini-Retirements: Should You Distributed Your Retirement Throughout Your Career?
There is something called in Austria called "Freunderlwirtschaft". Its Austrian for "corruption but everybody is doing it so it is ok".

These "Gemeindebauten" (affordable cheap public housing) have good flats and good areas and bad flats and bad areas. So if you want to be in the really good ones, you better have the right "Parteibuch" (party affiliation) or a friend who has it.

Said that, Gemeindebauten are a great but flawed system.
It seems like the original GTAV is a efficient and well optimized game. I played it and it looks amazing for how fast it runs. They certainly ran a lot of profilers to nail the performance down. It's amazing what video games can do, look at the Doom series.

https://www.youtube.com/watch?v=UsmqWSZpgJY

But this is online GTA. I can imagine that they handed it off to another department that didn't have the same amount of discipline and expertise. it's probably an off shoot team that creates content for the engine but don't necessarily need to dig down into how the engine works.
vaccines aren't only about your safety
People aren’t inherently bad, but they’re inherently _different_ - and just like any other animal, people tend to react to _difference_ with mistrust. The thing IMO that social media _amplifies_ is your exposure to people/points of view you wouldn’t ever get in real life, or find people that share your worldview and “bond” with them, forming larger groups.
A smart man knows OpenJDK is the only choice!
My clients mostly ask for Github but for my own products I use self hosted Gitea with backup and parallel server just in case
Why the new USPS mail trucks look so weird
Show HN: WeWatch – Find What to Watch Together
Sure, morals are no problem to get over. But hey, what's the price of privacy to run some software?
We'll add you to the QA volunteer list ;)
As much as author deserves a much bigger reward IMO, I feel like the value of this on their resume / CV is much more than 10k
> If we don’t want Vancouver to go down this path, then perhaps we should heed Henry George’s advice: tax land and use the proceeds to build the housing we need.
> Military subs have a lot high-tech stealth tech (much of it classified) to hide their electronic signals, engine noise, and so on.

Subs have no electronic signals. Water is mostly opaque to EM waves. Small subs are by design pretty silent. It is going pretty hard to pick them up above the noise of the sea.

> doesn't that mean actual (enemy) Chinese / Iranian / Russian subs can get away with a lot

Actual enemy subs can get away with a lot. You can safely assume that both China, Russia, France and the UK are able to launch a most likely successful nuclear strike on the USA as you are reading this. That's the heart of nuclear deterrence.

> anti-sub network alerts

I have bad news for you. It's extremely hard to find a sub. Water doesn't carry sound in straight lines due to heat and salinity gradients. The ocean is full of pockets of silence.

Modern countries have boats with towed sonars and submarines looking for enemy submarines but as far as I know in this game of cats and mouses the ones who want to stay hidden are usually winning.
Turn any smartphone into an action camera
I disagree. Chrome, by virtue of its popularity, market power and technical prowess, pushes through new features. In addition to that, they also port features from ChromeOS. Most of these features are either not standard yet or would never be.

For example, the WebUSB APIs are still in draft community status but is already there in chrome. Presumably because they created it for chromeos, ported it to chrome and then submitted it to the standards body - in that order. They are definitely going to continue this. I don’t see chrome publishing and getting a standard approved before implementing it at all. It’s also how IE6 holdover came about.

Web developers aren’t supposed to rely on non-standard features because it’s tight coupling and will bite you if the browser ever stagnates. That’s the lesson I learnt from the whole IE6 saga.

https://en.wikipedia.org/wiki/WebUSB
Not gonna happen. Social networks just tap into and amplify what’s already going on: humanity.
This is what I've come up with off the top of my head, and if I was actually regularly using the new version, there'd probably be quite a few more things to add:

https://news.ycombinator.com/item?id=26470454
Slight correction: you can easily download a Snap from a website and install it like you would do with a Deb package.

It's the repository that's locked; Snap only supports a single repository; the "Snap Store".
Wait, is the operand really always on the left? stp and ldp seem to be exceptions, where the two values are the left operands, and the memory location is the right. Or am I missing something here?
Whoa, `git maintenance` looks amazing.

It's a background server that you launch with `git maintenance start`.

> This cross-platform feature allows Git to keep your repository healthy while not blocking any of your interactions. In particular, this will improve your git fetch times by pre-fetching the latest objects from your remotes once an hour.