skysight-inc/HackerNews huggingface dataset:
This isn't an attestation of personhood. This is attestation of access to a hardware module with certain properties. These are very different things. Obnoxiously different. Do any of the listed manufacturers implement any sort of rate limiting? If not, then it would be quite easy to set up a farm of yubikeys, and solve captchas for an arbitrarily low rate.

Also, what is the cost of a single one of these keys? If it's relatively high (say, $50 each), then this would keep out a large portion of the 4 billion people that cloudflare claims to be seeking to help. If relatively low, then it would enable a farm to be run quite cheaply, even with aggressive rate limiting on each key.

So this does not at all prove personhood, it proves access to money. In that sense, it is nearly identical to a proof of work system. The parallels are actually quite amusing. Recall the slogan "one computer, one vote", which was originally applied to bitcoin, until someone noticed that custom hardware could compute hashes order of magnitude faster than a pc could. I can't see how this system will proceed any differently.

>With our current set of trusted manufacturers, this would be slower than the solving rate of professional CAPTCHA-solving services, while allowing legitimate users to pass through with certainty.

They are only considering speed, not price. Here is a captcha system for you: the site sends you a token. You wait K seconds. The token becomes valid. K is an adjustable parameter, so it can be made longer than whatever the time it takes for captcha solving services to work.

>The very idea that we’re all wasting 500 years per day on the Internet — that nobody had revisited the fundamental assumptions of CAPTCHAs since the turn of the century — seemed absurd to us.

We aren't, and someone has. The majority of people don't fill out any captchas, ever. Google, in its great benevolence and wisdom, monitors their browsing habits. If it determines them to be reflective of a human, then when they click the recaptcha button, it will let them through without a hitch. A very small minority of users behave in ways that are suspect, such as by rejecting cookies, resetting their browsing history, or using tor. These are the users that face frequent captchas. Since they are a heavy minority of users, even if they solve ten captchas a day, it doesn't add up to anything near 500 years per day of captchas.
Hopefully with Microsoft's aggressive updating policies in Win10 old Edge will be killed off soon. We'll be sitting pretty when it comes to web standards. Safari lags behind but not by much.
Therenare often physical barriers between a road and sidewalks, or a deliberate separation of pathways from roadways. Do you think we should put sidewalks next to the interstate?
Yeah, it's been made clear for some time that MS considers IE11 a compatibility platform and don't recommend it as a "browser".
Edge is also available on android. I don't know if it supports older android versions though
I wonder how they will _measure_ the text. You can use the range API to get the client rects for individual letters of text nodes in DOM, and then you could render that into a canvas letter-by-letter. You'd get kerning etc handled by the browser. But canvas has no such API afaik. Maybe Google has implemented their own kerning?
I agree with your sentiment (and your logic for that matter), but I want to just point out that there is a (distant, admittedly) possibility that they come up with something very new and clever, like self-driving micro cars as a service or something, that can create an entirely new industry.

I mean look at Apple in 2006, or 2008 for that matter. Nobody could have foreseen that they would create a completely new category that would have basically half of the rich world spending 1000 bucks every 2 years on a pocket computer.

Clearly Elon Musk is no Steve Jobs or Tim Cook, and Tesla is no Apple, but it's not impossible.
More usage of HTTPS helps Google's business.

1.) ISPs can not change the content of websites their users are watching to modify or add additional advertisements. Companies have to buy advertisements at Google.

2.) It is harder for ISP to analyze the web traffic of their customers to build profiles which they can sell. Only Google has these information.

3.) When people feel safer in the Internet they buy more stuff on the Internet. Business will buy more advertisements on the Internet, probably at Google.
I don't know much about what these products do, but I do know there are massive inventory shortage problems in the camera market as a whole.
People who had poor mental health outcomes during COVID were mostly extroverted. Introverts actually did better, including myself.

Losing your mind comes from the machinery of the brain failing, which is almost always caused by stress in these kinds of scenarios. Emotional stress is the most acute kind of stress. Isolation and unrelenting physical danger are very emotionally stressful. It doesn’t intrinsically create psychosis, it creates stress which might cause psychosis. The human race is filled with stories just as harrowing as a well funded and planned Mars colonization where people made it through. If you disagree you simply haven’t read your history. Life 2000 years ago was unimaginably cruel, let alone one million years ago.

Just because people in 2020 mash together stress, depression, psychosis and other things doesn’t mean anything. These mental illnesses have biochemical underpinnings and they aren’t intrinsic aspects of the human experience or doing certain things, like going to Mars.

People fetishize the impossibility of things. They also fetishize doom. Global warming has become political not only because of the people who deny it but also because of the people who fetishize the doom and gloom of it. You can recognize these people by talking to them about potential solutions or how to fix it. Invariably they don’t want to think about solutions, think it’s impossible to escape the end of the world and tend to want to turn to some kind of spiritual/naturalistic repentance even though it wouldn’t fix anything when you run the numbers. Same thing with Mars. People fetishize the impossibility of it. You can’t possibly go there without going insane. The radiation will be impossible to deal with. The gravity can’t possibly sustain human life.

It’s all hyperbole. There’s valid counterpoints to all of it. But it goes in one ear... and out the other.
The issue is less about people unwilling to take those wages, and more about a lack of people whose breath can even fog a security mirror so to speak. I work in security and have been involved with hiring at several “brand name” companies including FAANGs in hot tech markets, and it’s always been a talent pipeline issue more than anything. Given how difficult it is for the biggest players to keep security staffed up, and they still get hacked routinely, I can’t imagine how low quality the applicant pool is at Colonial, and doubt it would have made a difference. Almost every company of moderate size perpetually has openings for security roles.

The other problem is that the industry has an oversupply of by-the-book certified security people who can configure firewalls and run scanners, but who have never dealt with live hackers or hacked anything themselves. But hackers are clever and artistic, and defending against them isn’t like following a recipe for baking a cake.

And as an employer looking to introduce security, there is no way to really evaluate a good security leader vs a charlatan, and then it’s either bad hires all the way down, or talented people on the bottom who lack leadership and are ineffective in the bureaucracy.
It seems like understanding how to setup the environment is a key to really understanding Python.
he is doing that to make the publicy-traded company more profitable, for his shareholders.

what exactly is the problem here? how is he 'manipulating' the cryto-currency markets?

yes, a lot of people pay attention to what he says, but how is that manipulation?
Amazon to hire 75,000 workers and pay $100 bonus if they get Covid vaccine
> More charitable reading is that the encryption key was sent over, and they started restoring with that but using standard OSS tooling.

That would make a lot more sense but I also bet there's a non-zero chance that in a day some dumb media outlet will conflate those tools as "hacker tools" and the headline will be "Hacker tools used in Colonial pipeline hack available freely on Internet. News at 10."
I think the following two fact that played a big role in it:

1) Microsoft has another "official" browser

2) Chrome "eats the world", many people use it at home and many sites only officially support chrome. In many ways chrome has become the new IE. (Sites relying on non standardized Chrome specific quirks and being broken on other browsers, especially if they are not at least partially chromium based.)
You are not wrong, but that is misleading. HSR needs to be limited stop - they need 10 km just to get up to speed. Most of the energy is used getting up to speed (regenerative braking helps but doesn't get it all back), so for short trips you HSR is too expensive and not much faster.

That said, the advantage of rail is it stops at points in between. It cannot stop at every little town, but it needs to stop at every big city (you might even be able to do a suburb to downtown - the idea looks like it would work on paper but I'm not aware of real experience), and it the big cities are far enough in-between some small city should get a station.

This is very complex though. There is a trade off between stopping time and number of people on the train. You can stop in each city for as little as 1 minute (plus a few more to decelerate/accelerate) if your train has a lot of doors making it fast/easy to get on/off, but those doors mean there are less seats so less people are on the train. Or you can have just one door, but now there is a long line at that door and you need to stop for 15 minutes at each small town. So busy lines will have less stops than not so busy lines - the latter need more stops to attract all the customers they can get.

This trade off needs to be considered separately for each line.
> Basically a slow hyperloop, but you don't need a vaccuum or anything high tech at all. I've asked about this before and nobody has explained why it wouldn't work

Ground effect is unstable and hard to control, incursions on the track would be very dangerous, but most obvious measures to mitigate intrusions interfere with ground effect flight or require bigger rights of way.

It would be a slow hyperloop with a much bigger ground footprint (like classical high speed rail), less efficiency than classical high-speed rail, control/safety issues not present in high-speed rail, etc.
The taking off from Earth in multiple stages but not other planets is actually pretty realistic. Earth is big. For example, Starship plans to do exactly this: using the super heavy booster to take off from earth but single stage from mars or the moon.
Could you provide an example or citation?
Any plans to support existing Windows Security authentication methods? I just tried using my fingerprint and got the format not supported error. I have a Yubikey but don't feel like going and finding it.

Also, the potential to just use automated button-pushing devices was mentioned. It would be quite a lot harder to automate scanning of my fingerprint.
I liked the scene in which a student complained to the teacher because he did not get a good grade. The student try to convince the teacher that he might get the math wrong but understands the story of the cat. The teacher reply that the physics is all about math and that he himself don't understand the cat.
iOS App Tracking Transparency (ATT) Prompts
Wondering how other app developers are handling ATT prompts? Well stop downloading every app you can find, and check out this collaborative gallery.
"Questionable" is an understatement. Anyone who requires or suggests IE for security reasons in 2021 is incompetent.
So what? In general retail investors who take concentrated positions in individual stocks are fools playing with fire. They're going to eventually take a huge loss regardless of the specific cause.
Microsoft Teams already chopped it, with Office 365 not far behind.

https://techcommunity.microsoft.com/t5/microsoft-365-blog/mi....
Rubbing alcohol dissolves sharpie ink, but it's probably only worth trying if the surface is coated and nonporous. I use alcohol prep pads for this.
The title is click-bait, the episode is a conversation about building a bootstrapped quiz business and (imho) interesting thoughts on life and memory by one of the founders.

If you are into bootstrapping the whole Indie Hackers podcast is worth checking out. Don't let the titles distract you.
While there’s a chance we expand to other types of assets in the future, we want to tackle text first. We think text is often more cross-functional than images or other assets — it’s worked on by people from legal, marketing, customer success, in addition to engineers and designers — but there isn’t a unified suite of tools focused on text right now. There are lots of areas around text we still want to tackle and integrate into an end-to-end solution: localization and internationalization, A/B testing, intelligent suggestions and linting, etc. A lot of these are text-specific use cases, which allows us to do things like help teams build out a component library dedicated to text, and then surface component suggestions based on text in their mockups.
Regolith adds a lot of theming to i3, where Fedora keeps it just to the install and a few apps - a network manager widget, file manager, etc.
Victorian Knitting Manuals
The symptoms remind me a bit of nitrogen narcosis, which affects scuba divers at deep depths. I have heard it makes people paranoid. One dive master told me about a diver who tore out her regulator and swam frantically towards him, signaling she was out of air. She had a nearly full tank.
Very nice article. I liked the ending of it

Leggett’s identity changed again once the device was gone. Now she knew great loss, but she also knew things that had been impossible to understand before the device. Like many people with epilepsy, she had often found herself fuzzy for a considerable amount of time after a seizure. That state made it very difficult to notice the signs that preceded seizures which could act as a natural warning light. These days, when she gets a funny, flip-floppy feeling inside, she takes anti-seizure medication. She’s not always sure. Sometimes she gets her husband to weigh in. He says, “Go with your first instinct,” and usually she takes a pill. She is now seizure-free.
Concrete Python applications wouldn't be 100x faster if re-coded in some low level language.

In most places where performance matter Python packages would be using either C extension, Cython or numba to get near native performance. Pyodide is able to build those packages (except for numba). So overall it's currently 3 to 5 slower than native Python (which uses C extensions). See detailed benchmarks in https://hacks.mozilla.org/2021/04/pyodide-spin-out-and-0-17-...
What's the value proposition over a more general-purpose portable computer like a MacBook Air?
Individuals can definitely buy time. Hire a house cleaning service, landscape company, grocery delivery service, nanny, etc. Those are all ways to buy time that frees up the individual to do other things.
I think it is worth thinking about systems which do not have (or need) a single source of truth (i.e. git) v.s. systems which include a mechanism for an arbitrarily number of nodes arriving at a single source of truth (i.e. blockchain).

I agree that there are often many versions of a git repo at different places and the system gets much of its utility from that quality. But this strength actually comes from git eschewing the idea of a central truth. You can have one or more remote git repo with different sets of commits. You can freely integrate whatever changes you want. That flexibility allows the free movement and sharing of code, but it is key in that movement that the system does not force a single idea of truth.

The blockchain allows new and old nodes to participate in a process of agreeing on a central truth. This is actually very cool from a technical perspective, but I think it's pretty rare that we want it in a technical system. Most things, like git, benefit from the ability to branch when needed and use social organization to handle centralization (e.x: linux development centralizes on the linux kernel git because the kernel development community has agreed to use that particular git, there are no protocol requirements to do so, and various branches are independently created in various places to the benefit of all).
From my experience, the problem is that most infosec positions are powerless to do anything to increase security at the company, and are primarily there for PR or compliance reasons. The positions seem to be mostly filled with people who wanted to make a career change for the money; experienced people usually leave to work at private security companies, or FAANG sized companies.
Again and again and again, a byte is not meant to hold a text character. Also, as the sibling parent has pointed out, fixed width encoding only gets you so far because it doesn't help with grapheme clusters. That's probably why the world has basically settled with UTF8: it saves memory and destroys any notion that every abstract text character can somehow be represented by a single number.

> mandatory computer literacy

I don't understand why you keep bringing up this phrase and ignore a huge part of real world computing. College students should simply learn how Unicode works. Are you seriously demanding that CPU designers should change their chip design instead?
To put those phrases in context, I think they would have required more effort than the Apollo project.

> Obviously, although I have doubts that the computations being performed by these "GPU solvers" really require a modern custom-built GPU and couldn't have been done on FPGAs or arrays of microcontrollers from the 80s.

Here's a talk by the guys: https://www.youtube.com/watch?v=vYA0f6R5KAI

The Cray 2 could do <2 gigaflops. So a single simulation with 10,000 points per side at 1 microsecond timesteps for .1 seconds with ~50 flops per cell-step would have taken 79 years to run, assuming the Cray had 50 cycle fetch/store times. Engineers need to run lots of simulations to come up with a working design. And that's just simulating something around the scale of a single nozzle- you'll need to be doing sims for a 40 meter tall stage as it flips around.

Also, the cray had a 256 Mword memory. So you could only store a single timestep of a grid of 400x400x400 cells anyway. The supercomputers of the 80s were really just not very useful for things like this.
I think as a programmer I'm way more easy going about realism when it comes to computers in movies. I get way more picky about physics, biology, sports, and other topics where I'm just a gee-whiz dilettante.
Hard times may not make strong men, but it's certain that weak men will make hard times.
I think the front page does a good job at communicating considering how specialized this tool is and how small the audience it targets.

But maybe they could move the demo video closer to above fold? Also, is booking a demo really the most important CTA?
You have no authority to limit the scope of this discussion. Willfully determined actions such as tricking the system and getting in the back seat is reckless driving and is the drivers fault and responsibility. Just like intentionally putting a rock on the gas pedal and jumping into the back seat. Or intentionally driving over pedestrians. It's the person wielding the tool not the tool's fault.
Disconnecting the seat belt disables cruise control and autosteer in my 2015 Model S 70D. The car then comes to a controlled stop with the hazard warning lights flashing.
These already exist, e.g. foldingcoin. One problem is that they require a centralized authority to approve and distribute workloads, and so this entity has undesirable power over the network. I do believe there are some cryptocurrencies where you can submit arbitrary workloads and you pay for it with the currency of the network. But they never took off, probably because they don't match the efficiency and/or data privacy of AWS.
Yeah, I was pushing that all under "recovery." Say it all sums to $C.

Arguably the bigger problem is you don't know that the ransomer will actually give you a valid key, but suppose you guess a likelihood P that they do.

Now you have some scenarios:

1. Don't pay. We're out $C.

2. Do pay, and get a valid key. We're out $R.

3. Do pay, and get no key. We're out $R + $C.

So the limit is at scenario 1 being equal to the combination of 2 and 3.

Set C = PR + (1-P)(R + C), and your max ransom R = CP

(You could probably work in additional costs for cleaning up even if the ransom is paid.)
CO2 credits in Europe don't apply to private passenger cars - but big places like power stations and steel factories.
> I work in healthcare, so I don't get to make lazydev excuses about time constraints and "edge cases."

If I were to read this statement uncharitably, I would conclude that there is plenty of money in healthcare to be wasted on supporting outdated technology, adding to the already outrageous costs of healthcare. Furthermore, if you're not lazy, you're probably creating unnecessary work.

> The people still using IE are the people who need my web sites the most.

From a holistic welfare perspective, giving these people a modern web browser would be better than maintaining their status quo.
> I too cant help myself from occasionally dreaming of some alternate reality where GUIs were never invented and all the problems of addictive online media were somehow magically sidestepped.

MUDs were before my time, but I have a friend that claims to have spent hundreds of hours playing these text-based games.

Addiction is a human issue and isn't limited to one form or another.