skysight-inc/HackerNews huggingface dataset:
The problem with hash avatars in general is that people want to use them for identity verification -- and humans are wired to do so automatically -- but technologically, they cannot provide this. The space of possible avatars (2^256, in this case) is far, far larger than the number of distinct objects that humans can distinguish between. Which means that there will invariably be "collisions:" two avatars that are not identical, but appear identical to humans. As a result, if an attacker can brute-force an avatar that looks very similar to, say, Elon Musk's avatar, they can trivially scam people.

It follows that, since avatars do not provide any proof of identity, there is actually no harm in greatly truncating the hash space when generating them! That is, rather than trying to encode all 256 bits into the avatar, you can use a much more manageable number, like 16. But isn't this too small? Won't there be lots of collisions? Yes -- but that's a feature! If collisions are common, then the average user will be aware that avatar != identity, which makes them less susceptible to scamming. But 16 bits is still enough to meet the real goal of avatars: quickly distinguishing between different people in a conversation (or transaction, or whatever).

(This also shows why making avatars more costly to generate, e.g. with scrypt, can do more harm than good: doing so makes collisions less likely, but still not impossible. Meaning that if a collision does occur, whether accidental or malicious, you are less likely to notice it.)
Well, the robber barons of the 19th century used to buy up the local press. The 21st century ones are going planet scale.
This is purely speculation into their motivations on my part, but it might have to do with Apple backing up encryption keys to iCloud.
> do attackers wait to use passwords months

Unix-like OS in 80s-90s truncated passwords to 8 bytes, hashed in MD5 and stored them to regular file `/etc/passwd`. And in those era it was estimated to take six months to few centuries to brute force a password, therefore it was recommended to maximally complicate the password within 8 letters in length, and change it every one half the brute forcing time, or three months. Supposedly everything made sense in that timeframe in that context.
You can't know what they didn't publish.
So how can you know there's no influence?
How do you know the NYT doesn't use theis bad coverage as leverage in some negotiations?
Your attitude is very naive.
Who in the right mind thought that would be a good idea? It seems like the type of case where some executive though that failed password attempts would increase customer support load by 0.1% and therefore decided to make it a lot easier to log in. But in that case, why did they decide to stop at 8? I feel like they would have made passwords a 4 digit pin if they had their way.
Thank you for that interesting reply.
> The early 2000’s where characterized primarily by the Big 3 Shonen Jump titles (Bleach, Naruto, and One Piece).

This category only exists in the minds of Westerners who were pirating shonen manga at the time. It's not the most popular anime in Japan at any point.

It's also funny Bleach made this list since it was frankly terribly written and not as popular as the other two. The author had no control over his story and would try to get out of plot holes by introducing another 20 characters every so often (he liked designing them but not writing them). And for some reason his main strength was fashion but then he moved the plot to a world where everyone wears the same plain black and white robes.
Item_Boring already clarified what I meant better than I could ever express it.

But yeah basically "Kleidermacher" was historically a genderless term for quite a long time (potentially always) and was then gendered again, by people who seemingly misunderstood the generic masculinum. The people who made this worse misunderstood that sexus and genus are two different things.

As I explained before, this is quite ironic given that the -in suffix is now being said to be not inclusive.
Honestly the case thing makes total sense to me. The odds that someone knows the my password but not the casing is vanishingly low.

For pw manger based passwords sure you just cut your search space down by a lot but for human typed passwords that are words / sentences ehhh
Yeah, not a fan either. Netflix has done at least a couple 'choose your own adventure' style films. The idea itself is...fun. Maybe I'm boring, but I just don't like it. I want to be told a story, not decide the story myself.
There's nothing really comparable between calling for someone's assassination, and on the other hand, someone to be arrested and brought to justice for a crime.

And there's also the fact that there's no basis in reality for the claims to be begin with.

In all of this confusion, it is true that Parler was essentially (Edit: not! obviously 'not' moderated)moderated - and - there was a lot of really terrible stuff happening there. Like 'kill these people'. The cover that Twitter can use is that they actual do moderate people and try to get rid of them. Mostly.

Parler must have had a huge leadership failure to play that game and think they were going to get away with it. There is zero chance that hosting people directly calling for violence, unmoderated, is going to last when associated with other people's brands.

I believe the CEO actually wanted to do something but his backers didn't.
See also:

https://robohash.org/
I have a better example. Email. Do they now censor my email from a Group message involving things they do not like?

Do I need moderation for my Email now?

But you know Apple will hide behind their privacy policy when it is their apps.
That is a little different though. That's just like paying your customers directly instead of an advertising agency.

PayPal certainly wasn't paying customers for each transaction or anything crazy like that.
> and it's definitely not Amazon's job to enforce the law.

It's about liability, and big corp's allergy to it.

> I do feel however, that Amazon shouldn't be allowed to drop customers without a 3 month notice unless said customers have done something actually illegal, and by that I mean 'illegal as designated by an actual Judge'.

That's not how liability works
While I don't think bakeries should refuse gay customers, you have to admit that there is a difference in terms of social capital and political power between a local bakery and a multi-national company with more revenue than entire nation states' GDP?
"Girl" used to be gender-neutral too. How a language is used evolves.
Are you saying running clothing, or just clothing in general? Cotton for running chafes a solid amount, and doesn't wick moisture well.
Changes in hash rate (volatility) are linked to transaction cost for reasons I explained in detail in a reply to the other person who said the same thing.

Hash rates dropping suddenly means transaction throughput drops suddenly, which makes transaction costs go up. That is the dynamic and that is exactly what happened.
You're welcome! I am happy to help.

> Are the color-blindness simulators in Firefox devtools good enough to reproduce your experience?

I have honestly not used them, sorry.... (I don't make GUIs).

I am looking at the docuymentation, and I am a bit disappointed though. By far the most common issue is contrast loss like they say:
https://developer.mozilla.org/en-US/docs/Tools/Accessibility...

The condition to not see one color completely is incredibly rare, and not seeing any colors even more so. By in large the issue is constrast loss.
And yet, there are Fortune 100 financial institutions that require their vendors to have a policy of mandatory 30 day rotation for sysadmins and 90 days for non-privileged persons. Companies that don't have and enforce said policy are unqualified for the privilege of vendorhood. Pointing out this Microsoft paper, the NIST guidelines, or the NCSC guidelines will just get the subcontracted droids giving you a negative mark on your annual vendor security assessment.

No, I am not jaded or bitter on this topic. Why do you ask?
Aren't clients considering migrating to different tech?
I'm not trying to be annoying, genuinely interested. My current company considered it and they're a Ruby shop (luckily for them they rejected the idea). The thinking was something along the lines of Ruby is declining and how will they find developers 10 years from now.
So if people can get this paranoid about Ruby I'm interested how it is on Elixir land.
Well, you couldn't expect any other industry to supply gas lighting.
Fog fences are used in some places to gather a small amount of water: https://en.wikipedia.org/wiki/Fog_collection?wprov=sfla1
If you want to go even further back, I recently discovered "The Machine Stops" from 1909, which covers a fair bit of that: https://web.cs.ucdavis.edu/~rogaway/classes/188/materials/th...
Open Note Scanner does this quite well on Android, in my experience.

https://github.com/allgood/OpenNoteScanner

https://f-droid.org/en/packages/com.todobom.opennotescanner/

https://play.google.com/store/apps/details?id=com.todobom.op...
Ask HN: What are some forgotten words for things that are frequently expressed?
Ever since I learned about the word "epiphany," I've cringed whenever someone uses the expression "ah-ha moment." What are some other words that we've lost?
Mandatory password changing leads to only one thing: password rotation.

I had a bank that expired their online banking passwords every 30 days (in spite of also having 2FA via physical token ON TOP OF THE PASSWORD). Guesss what, my password was word-number-word. I just incremented the number 10 months, then reused old numbers.

Incidentally they rebuilt their online interface and changed the tokens for new ones. The password doesn't seem to expire any more but it's still required for some reason.
> But you could easily say the same thing about a well architected typescript/react frontend app, ...

A badly-written Elm app can still be reliable, even if it ends up slow or sometimes acts funny. A badly written TS app is completely inscrutable.
I don't want to say so authoritatively, but I don't believe so.
Serial Experiments Lain is everything wonderful about anime. It is violent, dark, scary. In summary: ADULT.

Anime tells stories in a visual format that for years and years you simply could not get anywhere else. Adult genre fiction was not well represented in American media. Even today, adult American cartoons are almost entirely "sitcom" format. They don't want to ever end, and they do not want to tell a story, they want to make more episodes.

Today, people are spoiled with their options for genre fiction. Cowboy Bebop blew my mind as a kid. Berserk was also one of my favorites. I did not think anything could be cooler than Vampire Hunter D. This was before Game of Thrones or The Expanse or any number of other amazing science-fiction or fantasy media we have today. Coming from a small town, it felt like a secret that nobody else knew about and I loved immersing myself in this grim, beautiful, foreign worlds[0].

A lot of anime has a lot of gross "fan service" that objectifies their female protagonists, and that is something I was never a fan of. It was something you tolerated because there wasn't anywhere else to go.

Lain is a great example of all of this. Where else are you going to get a gorgeously rendered cyberpunk-horror series?

0: Probably at a younger age than I should have been allowed to. Though honestly I don't see myself censoring everything from my kids. Part of the draw was the adult nature and feeling like I was getting away with something.
https://en.wikipedia.org/wiki/The_Naked_Sun

Third (edit: second) "Robot" novel (human detective pairs up with a robot partner and solves crime mysteries). The world's written that way to provide a polar-opposite setting from earlier settings for that series (an incredibly tightly-packed and bustling city). In both cases, the natives of the worlds have adapted to their situation to the point of pathology—people from Earth (the city-world) tend toward agoraphobia, for instance. The whole setting is part of a sci-fi trend of settings that suppose Earth will become crushingly overcrowded with humans, leaving space as the only escape from that.

EDIT: other poster is correct—I got the book wrong the first time (I had it as The Robots of Dawn, from the same series)
We just hope to see your patches on adding LibreDWG support for SolveSpace[0] as soon as possible ;-)

[0] https://github.com/solvespace/solvespace/issues/326
This is in the context of scanning homework assignments.

Not to mention-- Firebase tracks what, events? You think somehow it's encoding the documents in an event stream to exfiltrate them?
The same capability is on the web at D&D Beyond: https://www.dndbeyond.com/
The atmosphere created by the sound design and music is a big reason I liked it.
Reddit officially unveils its Clubhouse rival, ‘Reddit Talk’
Exactly. I hire you (and pay you) to do what I need to be done, not what you want to do. Of course we both look for a situation where there is a lot of overlap in these things, because that means you are a good match for the job I am offering. But it will never be 100%.
This only makes sense if in aggregate preferences are proportional the amount of work in each area, which is not the case (documentation is the obvious counterexample)
> “America, American
Use only to refer to the Americas or the American continent. Don't use to refer to the United States. Instead, use a more precise term like the US or the United States, and people in the US. For more information, see US.”

This is pedantic and not right and is also prescriptive.

The combined continents are “The Americas”, else the individual continents are South America and North America. There exists no single continent, either America or the Americas, but is rather a word used when talking about these two continents as a unit --which isn't a unit anyway.

Virtually no one refers to inhabitants of the continents as “Americans”. American(s)is reserved for people from the US (including in South America) Just as Asians doesn’t refer to everyone who lives in the continent of Asia.

The demonym "American" stands for a person from the USA. Just as Mexican refers to a person from the USM (United States of Mexico as translated from Spanish).
> There are about 100 references on this page here alone stating that CEOs get relatively low cash comp in return for exceptionally high equity comp.

No, there are references stating that CEOs get exceptionally high equity comp in addition to exceptionally high cash comp.

Win on the carousel, don't lose on the swings. They've set it up so they can't lose.
Microsoft DeepSpeed: Zero-Infinity
Agreed. Let them cover the whole screen instead of 2x4 with lots of free space below.

And it would be great if selecting url bar would also allow me to choose one of my collections. Now I have to open a new empty tab first.

Edit: basically what a sibling comment wrote I see
Re: My wife is what I call a 'sympathetic speaker', she very quickly adopts the accent of those she's speaking with.

Politicians are often known to do the same. It's usually painted as "pandering", but I'm not making a value judgement here. There's arguments both for and against.
> It's interesting how two people can have diametrically opposite readings of the same piece of art.

Mostly because Chiaki Konaka is incapable of writing endings. I don't think Lain is that abstract (there's some early parts that look like it but I think are meant to be representative of schizophrenia), but it is hard to follow what the last episode is saying even though they're talking nonstop. With such a heavy script you can't always trust the translation to present it well either.
The obvious elephant in the room is how can someone afford food and rent while working on $1 or whatever. If I was a hiring manager I would assume one of 3 things: 1) He is independently wealthy, 2) He lives in a van, or 3) he really expects $50/hour and this is some sort of bait-and-switch strategy.
“But I was going into Tosche Station to pick up some power converters!”
Interesting! I guess there would also have to be a disincentive to use plastics period.
"PC sees" vs. "PC detects" is just B.S. honestly. Both are equally anthropocentric, if at all.

Computer communication protocols closely resemble other systems (including human and animal communication). Objects are literally modeled after how ecosystems and social structures work.
> and performance benefits in large projects that could make one choose it over TS

[citation needed]

A medium size app using Flow would take 10 seconds to type check in an IDE. It's possible we had some issues with circular dependencies but Flow was such a burden to deal with. Not to mention issues where the flow server would chew CPU resources on a dev machine.

Typescript on a much much larger project has had zero issues with performance.
Intentionally not mentioning company name. Ours will bring up to 60% back to the office by June/Aug timeframe. People can opt to work from remote part of the time with mgmt approval. Some people can work remote full time with VP approval.
OP has an open pull request on his repo[0] where someone made basically this same change (different names for the variables, but same idea).

According to OP, he tried this but it resulted in slower execution for him. I'm not sure he really followed what that PR says. In the case of the submitter, it says on their machine it gave a 2x speedup (smaller than my ~7x, but still significant).

[0] https://github.com/00sapo/cython_list_test/pull/3
I made the jump from JS to CLJS and loved it, but in the end I like types and ML more than I like Lisp.

Do both, but do Lisp first.
ARM deal has a condition:

> The proposed transaction is subject to customary closing conditions, including the receipt of regulatory approvals for the U.K., China, the European Union and the United States. Completion of the transaction is expected to take place in approximately 18 months.

Any one of these 4 regulators can still stop the sale.
A FIFO cache of this kind can be very bad in some situations. Imagine if you have a cache of 8 entries and the application reads 9 entries in a loop from beginning to end over and over. In this case the FIFO cache algorithm will always eject the next entry just before its needed. Ejecting even a random entry is much better.

Its an incredibly difficult problem to try to figure out what to keep in cache, so I find that the first thing one should allow is for the user to give hints.

It would be great if there was a way for applications to designate some memory allocations as "hot" or "cold" to indicate the usage pattern, or indicate that its reading something linearly, or that its about to need something.
Maximum length makes sense if the hashing algorithm they're using does not go past that length. I think this puts your 1st and 3rd bullet points at odds in some cases, if I understand your point correctly.

I'm not looking this up right now, but I believe bcrypt or some 'version' or 'implementation' (excuse the inaccurate language) of bcrypt limits you to 72 characters. If that limit is not made clear to the user, then they may find it odd when their 73+ character password can have the last N-72 characters changed and still successfully log in. Silent truncation is most likely a result of ignorance on the part of the software developer (I'll admit I did not know about this limit for a long time), whereas maximum length could be the opposite.

More info on this, since I'm no expert: https://security.stackexchange.com/questions/39849/does-bcry...
Thank you, I'll take a look. When I was younger I used to lean towards Buddhist philosophy and Stoicism. This kind of reminds me of that. As I got older and toxic masculinity became trendy, I started to think that the old way of "it is what it is" and "man up" weren't healthy, but lately I've been thinking that I was better off that way. Things were a lot simpler and instead of dwelling or brooding, I just kept moving forward. I feel sometimes people are better off not knowing the variety of mental illnesses or dysfunctions out there. It's too easy to get into the trap of "is there something wrong with me?" Even when there is something a little bit off, the time agonizing about it can be a waste of time especially if there's nothing that can be done about it.
Just had to do a mandatory change. We were acquired so my computer is not fully integrated. To change the password I only needed to provide the code from the Authenticator app (MFA) Whenever I log in I need the password and the MFA code, but if the MFA code is enough to change the pw, what’s the point?
It's The Naked Sun. The people aren't averse to in-person contact due to disease (though that is their concern with people from Earth specifically). Nearly every one of the colony worlds (including the one in that book) have, in the books, essentially eradicated disease due to their opportunity to properly quarantine and treat it (versus the massive population still on Earth, you can't as easily wipe out a disease when you still have millions and billions of people living in megacities in close contact with each other). The particular world has a low population and people are spread out, so it's become the social custom to practice physical distancing to an extreme degree (think about the difference between personal space in different countries, then exaggerate it to an extreme).
I would say that parlor was created to get away from big tech options and yet Apple, Amazon and Google were overreaching and IMO attacking the platform.
I guess a typo transformed a 300% into a x300.
Many in Silicon Valley advocate for things like basic income and socialized medicine. I’m not saying that these are good or bad, but they are socialist ideals.
I think you're taking a very black and white view of this.

For example, ANY shop, of ANY size, is going to have issues with tricky-but-hard-to-reproduce bugs. The parent comment is highlighting the fact that they can't be sure if this sort of prima donna is going to be willing to run that issue to ground, or if they'll put up a stink about it being "boring".

Additionally, even if this person were working for free, there's a definite cost to foisting difficult bugs on your teammates.

Do you honestly believe only "cogs in a machine" should be / would be interested in fixing that sort of issue?
I mean I’m not a music publisher if I buy the rights to play some artist’s music in my store or whatever.

Sure you could say FB is republishing a work which would imply some level of endorsement but paying for use on behalf of their users seems totally different.
YouTube is to block agitation to protest to save Navalny's life
Reason 1 of 1000 why I am not working on any projects related to this.
> "Girl" used to be gender-neutral too.

Yeah, its interesting how “girl” went from meaning child to meaning female child while “boy” went from meaning “male servant” (which is the origin of its use for “employee" in several compounds that are less outdated, like “pool boy”, and which is also the origin of its use as a racial slur) to meaning “male child”.
For those who may not know, password cracking/brute-force tools have all of this logic and more besides.

Whatever human-rememberable algorithm people are using to rotate passwords, if an attacker knows a password they used
at any point previously they'll get the new one quickly.
Tangentially - I've been thinking of trying Elm for a desktop app. Are there any recommended ways to do it? I was looking at elm-desktop-app as a quickstart option, but it seems to be abandoned.
Definetely. Making a rich guy get richer is boring. Helping the planet be a better place sounds interesting.
"You can do that when the new droids are ready. And before you ask, I need you for an other season before you can go to the academy."
Is this similar to Enigma decoding - whereby the 'encoding' key was reasonably predictable and not random due to new keys being required to be generated regularly?