skysight-inc/HackerNews huggingface dataset:
No. Ignorance is a big problem. What makes Security Keys work well isn't that they are "rarely called for" but almost the opposite, they're so easy that you can add them with little friction all over the place. Tapping to sign into a remote server over SSH is no problem, it's scarcely more effort than thumping "enter" on the command is.

What the user is doing is not security sensitive. They are, in fact, themselves, and that's all the Security Key is confirming. "Yup, still me".

One of the easy ways fools trip themselves up here is that they think this is identifying information. But it isn't. "Yup, still me" doesn't identify anyone. The identity was already known to your interlocutor, which is why "Yup, still me" is enough.

And that's what's so clever about the FIDO design. A Security Key has no idea who it "is", it just knows it's still the same as before. If you're already authenticated as Jim Smith, you can enroll a security key "Yup, still me" -> the Relying Party stores the information, and then you can later sign in using it to verify your identity, "I'm Jim Smith". "Is this still you Jim Smith?" "Yup, still me".

So that's why this doesn't help bad guys. "Are you still er... you?" "Yup, still me". Completely useless. Of course you are, that doesn't help them at all.
I think that for both examples, having people's attention is a precursor to doing anything else. That's just my intuition though.

Maybe it is possible to have a landing page that people leave much more quickly but that is more successful. Maybe it is possible to keep your audience informed without them watching for very long.
This is diverging from what the thread is about but what has been made in Zig that is worth talking about? Zig has no killer app so to speak. For Rust that was Servo. Rust has gone far beyond Servo and Mozilla at this point but Servo was the first real project that made people go "oh this is not just a toy this is real." I don't think Zig has anything like that. I see a lot of talk about Zig but no major projects.
As someone else said, you do not store coins anywhere, they are derived from the public ledger (block chain).

What you store is your private key.

Your private key was generated together with your public key, and your public key is, well, public.

So the question is, can someone re-generate your private key?

In theory, yes, it is possible. In practice, it takes a very very long time.

But sometimes flaws are found in the generation process, like a weak pseudo-random number generated used, which significantly reduces the solution space, and then it becomes feasible.
Someone behind the scenes must be pulling the strings at the CDC as this is terrible advice considering all vaccines are far from being 100% effective.

Additionally it takes at least 2wks after inoculation for the vaccine to work and there is no definitive answer on how long the efficacy lasts.

All of this combined with the fact that millions of Americans refuse to be vaccinated will serve as prime reservoir for the virus to spread.

It was rather troubling when CDC first stated masks were unnecessary but this recent announcement is criminally negligent, on par with Boeing/FAA publicly stating 737 Max was safe even knowing full well there was high probability of another crash.
I think it would be better to report here, https://rustsec.org/, and folks running cargo audit would be aware of the issue even if they’ve already downloaded the dependency.
> but the topic was "modern C++", not "old-fashioned C++".

The problem being that there is no definition of “modern” C++, and even less so that would be enforced by compilers.

> Anytime you do all the extra work

There is no extra work to write “old-fashioned” code. Quite the opposite actually; one has to indicate to compilers to accept newer features rather than the opposite.

> Good modern code

This is a very flimsy, handy-wavy concept, that changes drastically from one “best practice” guide to the other.
That's pretty much what I use these days. Plus emacs. I run a minimal gentoo setup and hate using other computers as they are always sluggish despite having newer and more powerful hardware.

You should look into a tiling window manager. It's really liberating to stop worrying about wm behaviour.
It's definitely worth reading the full thread if you haven't

> Did you know you can just fork() the @rustlang
compiler from your proc_macro? :D

> This is, of course, a horrible idea.

> Unfortunately rustc is multithreaded and fork() only forks one thread. We'll just assume the other threads weren't doing anything important.

> In today's rustc, this means we're only missing the main thread in the fork. But that one was only going to call exit() after joining our thread anyway, so not very important. It just means the process always exits with a success status. So instead we grep the output for "error".

Any my favorite reply:

> Is this a rust implementation of autoconf?

https://mobile.twitter.com/m_ou_se/status/136863270144881869...
I've found doing something that sounds crazy very helpful in overcoming my own personal tab overload: automatically closing tabs after they go ignored for a certain amount of time (~12 hours for me). It's garbage collection for tabs! I use the Tab Wrangler Chrome extension[0] for the job, but there are others too.

Turns out that I don't actually care about the vast majority of tabs that I leave open—but can't seem to close!—and the extension makes it easy to re-open any automatically closed ones that I did happen to care about. The result is logging on each day to much less tab clutter than I left the night before.

0: https://chrome.google.com/webstore/detail/tab-wrangler/egnjh...
New mobile phone numbers for text verification or two factor authentication
I'll just repost something I wrote on some other thread one time:

I've changed my laptop 4 times now in 5 years for different reasons, when I do so, there's only a couple of things to consider:

if I'm upgrading the HDD (for example when I made the jump from HDD to SSD or from my 2.5inch SSD to my M2 SSD currently) I need to clone the drive to my new storage, otherwise I only need to swap out my storage device from my old laptop to my new one.

With linux it just works I don't have to fiddle for my devices to be found, everything is just where I left it, the biggest change was when I went from an intel based PC to an AMD one, I only had to switch the display drivers after the fact (I knew because X crashed, I had to do this from tty), but it is expected since the display cards are totally different, all it took was a: sudo pacman -S xf86-video-amdgpu and a restart.

having a rolling release distro helps too, because you really don't have a reason to nuke your install and start from scratch, but even if I decided to do that for whatever reason, since most configuration is done via text files I can easily save those in a repo and just clone them to my new install and be done in a few minutes.

drwx------ 2 root root 16384 Dec 25 2016 /lost+found

^ that's when I last installed linux, I've been using the same install through 5 years in 4 different devices, it's pretty cool.

Of course I do my research before purchasing a new device, see if there's anything on the arch linux forums that's causing trouble with that particular device, but beyond that, it's all been good for quite a bit, I've never used another OS for this long without doing a hard format and performance hasn't suffered at all, I have almost every development environment available to me one command away (except for Xcode and some Windows specific stuff ofc).

but, my counterpoint is, I feel all OSs are decent enough nowadays and all provide good enough or better functionality OOTB, so for me it has become more subjective than anything, there are strengths and weaknesses to all of them, and I wouldn't be particularly bothered if I had to use one of them because of some requirement or something, but if the choice is mine, it's GNU/Linux
I used to have many dozens of tabs open statically, kind of like a TODO list I never get round to. Some tabs are open all the time for email, chat as well.

I've eliminated those tabs and now have tabs related to what I'm currently doing only. There could still be dozens, but importantly they do get closed.

To prevent the static tabs, I do 2 things:

1) Map tabs I monitor (email, chat etc) to a streamdeck, pressing a physical button every time I want to check

2) Save those static "TODO" tabs to a task manager[1] and treat them as tasks.

[1]: My own task manager: https://github.com/naggie/dstask/ -- saving the URL in note means I can open the tab in a browser again in a command (open)
Of course, light doesn't travel at vacuum speed in fiber, it travels a bit slower, but it also bounces around the cable, so ends up traveling a significantly longer distance. Multiply by around 1.5 for more real world numbers (copper is similar), just measuring raw distance.

And switching adds significant delay, especially when you get out to the edge.

> If you mean REST API requests, the kind that trigger some code to dynamically generate a response, how would a CDN solution like cloudflare help? The request still needs to get to the server and the response still needs to come back, all the way, because that's where that code runs. CDNs only really work for cacheable static content, don't they? I mean it's in the name.

For a simple example, imagine assets that are dynamically loaded based on feature detection in JS. All of the assets (js included) can be cached on the cdn.
I'd bet 30% of the URLs it lengthens are rick-rolls. I did it immediately and sent it to several people on Slack.
In April 2021 I visited 5036 pages, 167 pages a day average.

In the last week it was down to 157 a day. Because I've spent more time in head-down coding.

5 tabs an hour, hah.
Also perhaps a fair reason for some part of taxation. Owning millions in .*coin, and the ability to freely wander around in a first world country while not getting hit with a wrench has a whole lot of value.
> Can you catch airborne respiratory diseases from eating fruit?

I'm willing to speculate that exposing our immune system to surface pathogens helps deal with airborne pathogens.
Many read only sites don't have HTTPS. Firefox and other browsers are at fault for saying it's insecure.
So we didn't push it to the public repo but our previous version used python's SMTP module and could support any email client. Other's have asked for this so maybe I'll make a new branch with this on there. It might require a little extra work tho
> What I personally really want is faster Python/Ruby

By the way, have you tried PyPy?

It's an alternative Python interpreter with a JIT (so compiling in-memory to native code) that is much faster than the standard CPython for many Python tasks, especially those that are particularly compute-bound.

https://www.pypy.org/

I was impressed at how fast some math-oriented Python programs that I wrote ran in PyPy. There are some extensive technical limitations, but it works out-of-the-box for many codebases.
I can't keep track anymore. Is this a successor to 3.1.4 that came out not long ago, or something different?
Stripe acquires Bouncer to help businesses with fraud prevention
What a terrible idea and not only for the chance of distracting the driver. Lets put our tinfoil hats on for a moment and imagine that the developers of this system don't properly sanitize the input from whatever sensors look for this advertising data. Now there is another ingress route for a malicious actor.
I don't know why you're being downvoted (unless people think you are making a crass joke about toxic gamer communities), but the idea of terrorists using online game chat to communicate was at least taken seriously by the NSA:

https://www.extremetech.com/extreme/172288-nsa-spied-on-xbox...
I don't need a better way to manage the tabs I have open I need to quit the habit of opening dozens of them. Its digital hoarding.

Maybe it's overly dramatic of me to compare it to hoarding, it does legitimately increase productivity. But it also tends to spiral out of control now and then (for me).
How do you feel about full text search and image extraction and classification for those URLs?
As exciting as this is now, I'm very eager to see how brain-machine interfaces mature with findings how to best meet the machine half way.

Decoding hand writing accurately is an approximate thing even when it's spoon fed to the machine via a digitizer, to say nothing of interpreting the movements from neural activity. What could be accomplished if we abandoned the familiarity of writing and existing glyphs and established a novel set of learnable 'brain semaphores' (e.g. visualize this symbol, play this sound on your mental speakers) that were easy enough for the user to practice and master with feedback, and blazing unambiguous markers to the probes and recognition algorithm? It's not hard to imagine that with deliberate practice and immediate feedback, the brain can develop connections for the sole purpose of the interface that no longer even piggyback on imagining motor/sensory events. Sending a keystroke would be no different than lifting a finger.

I'm sure this isn't a novel idea, but my armchair observer prediction is that the field will start to move in the direction of purposefully designed mind-sign schemes and away from mimicry of physical movement as the technology becomes ubiquitous and less invasive.
Same here. It feels like the people going gung-ho for macbooks here are the type of people that would take their computer to best buy if they got a boot loop instead of just fixing it.

Kind of incomprehensible to me that anyone in that mindset would be a developer.
I highly recommend TokenTax. It's the only service that supported importing a cost basis report I already had from a different service.

Support at a few other places didn't even know what I was talking about, and didn't see the difference between uploading cost basis and simply reimporting old trades...
I read it as more of a “they’ve ruined it for the rest of us” whinge.
That's surely how it would be represented in order to retroactively justify negligence.

But a more precise calculus would take into account that (1) the proliferation in ransomware is recent and explosive, and (2) getting hit by one ransomware group doesn't mean a second group won't strike soon. (Although I'm guessing the second wouldn't be allowed to use the same ransomware-as-a-service platform, as that would harm the platform's reputation.)
So, about the same amount of work got done, but it took more hours of working to get it done. Seems about right; efficiency per hour went down but the company got about the same amount of work from the employees. The per-hour productivity loss would be less if commute time were to be factored in: I'm putting in more hours of work, but my commute was more than an hour a day.
Will cars start costing $2000 to offset all the money they are going to make off the cancer that is advertising?
I miss the Tab Mix Plus Firefox extension so much. I had 3 rows of tabs with more via the scroll wheel, and they were of fixed width.

I often ended up with 80 open tabs and switching was no issue. It was such a great feeling being able to close all the tabs after the work was done.

With Chrome now I constantly need to drag tabs out in order to create a new window to start a new collection of tabs, so that I normally have about 6 browser windows open, then, when looking for a group of tabs, I first need to find the window. It's the same with Firefox since they moved away from allowing custom XUL code.

Here's an example I just found on Google https://thasulinux.files.wordpress.com/2011/03/tab_mix_plus....
it's so crazy to see someone I don't know using this lol. glad it worked for you , make sure you remove the permissions from gmail!
It is doable and in some countries like Switzerland even a common practice to offer an 80% - 100% workload (if you look at https://swissdevjobs.ch/ or any other tech job board you will notice it occurs quite often)

The problem is that an 80% workload for companies also means 80% of the salary which makes sense if someone wants to work part-time, but it's not the implementation of a 4-day work week idea.

Personally, I believe a 4-day work week will sooner or later be a standard, simply because Developers (including myself) waste a lot of their daily time and by having a constrained time-frame they will also be more efficient. In the same time (hopefully) management might reduce the number of meetings forced onto the Dev team.
I have to use TotalFinder to be able to cut and paste files which I find very strange after all the years of experience on other OSes. I also resent not being able to conduct basic file management in file selection dialogs. Other missing features I have to hack around with scripts or add-ons: Copy terminal-friendly path, open current folder in terminal, create a blank text file here. Probably more.
Ford wants money.
Yeah, the educational commitment is definitely much higher. I just mean they don't expect you to have put hundreds of evenings, Saturdays, and Summer afternoons into wholly-self-motivated learning about the field by the time you're 18, or else have a very rough first couple years.
Good reason to delay one's second shot, I already pushed back by a week thinking of delaying even more.
> - I've never booted to a black screen when upgrading macOS.

Haven't had anything close to this happen to me in Linux in like 15 years. I've had to reimage my macbook thrice in 5 years. I really don't get it, my linux laptop is pretty wild (touchscreen, hidpi, tablet mode) and everything is supported out of the box, and I'm not even using a friendly distro.
This is clickbait. "Wants to" and "filed a patent to" are completely different things.
> eventually the virus evolves into a less deadly form and maybe our immune systems develop some more resistance. I don't know if the latter is actually reasonable to expect.

The more people who die, the more likely it is we evolve protection
The kidnapper/murderer Ferdi Elsas was found via bills spent at the grocery store.
> Any less than that, and the browser should reject the URL as invalid.

lol. that would have been awesome. domain squatters would be running for the 1000 character names while crying about all the money they paid for three letters one :)
I'm always floored when I read about legacy automakers coming up with increasingly more esoteric gimmicks to make money or supposedly make their cars "better". Ideas like massage seats, MORE screens, soft close doors, built in coolers, etc. etc.

They do all of this instead of the most obvious and straightforward thing they SHOULD be doing: Building better vehicles.

In the near future they'll all be begging for bailouts yet again, and it will be because they keep focusing on stupid features instead of actually making their products better.
Because I Am Bored
If you read the actual patent filing and look at their claims strategy it's very clear that what they want to be able to do is have it so when you drive by a billboard or road sign you can press something on your car's navigation display to navigate there. That seems like a useful navigation feature (e.g., for getting to a gas station) and not at all related to "beaming distracting ads into your car."
Since my other comment got flagged, I am going to try again.

Looks like you have some very strong, yet suspiciously unclear, opinions on the matter. Do you mind articulating the point that you're trying to make?
I skimmed through the article - it's nonsensical (and verbose), so skip it to save time.

After looking at some other articles on that site, just more of the same.
Wikipedia is not a great source for truth of specific facts, but in the "Government investigation" section there is the line
"President Bill Clinton issued a public apology to Lee over his treatment by the federal government during the investigation.[5] "

Which references a CNN article that states:
"Then-President Clinton issued a public apology to Lee over his treatment."

[5] http://www.cnn.com/2006/LAW/05/22/scotus.wenholee/

It would be nice to find a full quote or video of the apology to be more certain that it happened and it was not a sorry, not really sorry, apology.
I would love to have a longer url.
We should probably change how it is talked about then, because there is a fairly constant flow of medical reports showing that even young who catch Covid and have minimal symptoms actually have severe hidden internal organ damage which is predicted to result in a generation with heart and lung problems in the next couple of decades.
> The Alt is essentially dead for this price point, not that is was ever particularly good. The stabilizers in particular is something Drop never got right.

Yeah, I've certainly heard complaints about the stabs (not like you can't address that, but you certainly shouldn't have to).

Maybe I should've rephrased my question as: What differentiates the System76 from its competitors (of which the Alt is an example).

The space of:

1. TKL

2. QMK programmable

3. Aluminum block chassis

4. LED lighting

Is pretty well-occupied and a $300 price point is right up there at the top of the segment. Add in all the downsides you mention and I just can't imagine buying this thing.
Beaming ads onto mobile or mobile-like devices is an inevitable trend we're going to see over the next decade. For example, most TV watchers actually attend to their phone over the TV. How long will it be before Galaxy phones start beaming Samsung TV ads to your device? And Apple TVs? If they (TV manufacturers) all align on this, there's no real escape.

Cars are just a canary, I think. And a dangerous one at that thanks to driver distraction. But longer term, as we get better autonomous driving systems, expect the interior of "your" vehicle to get plastered with advertisement. Welcome to the future!
Rectal Breathing with Perfluorocarbons
You are welcome to try to find it. I just failed :(
> Yep, making it illegal to pay the ransom is a good way to stop people from having that choice. If police themselves are paying a ransom, that might make it hard to make it illegal.

Ransoming itself is already illegal and yet people still have the choice to do it.

Why would making paying the ransom illegal remove the choice to do it?

> You don't need to get the proportion to 0 to help people. Reducing the proportion is helpful. If you reduce the amount of people paying (say you convince half the population that it's immoral to pay), the ransomware gangs will be less profitable, and will invest less money in ransomware and thus less people will be attacked.

It's something that's trivial to automate which produces positive cash flow, which makes it something approaching a thermodynamic impossibility to prevent from happening.

We made spamming illegal. Most of what is spammed is already illegal. So there's no spam anymore, right?

The policy suggested produces obviously absurd outcomes when applied to plausible scenarios.

It does more harm than good, and is an emotional knee jerk which does not survive rational analysis.
This is a good one. I can immediately identify many "bullshits" in work and life. But I then realize that the key is that I need to have something to be passionate in so that those time saved from bullshits can be used on them.
I think it only protects about 60-70%
> I just mean they don't expect you to have put hundreds of evenings, Saturdays, and Summer afternoons into wholly-self-motivated learning about the field

No, instead it's unrelated to the field so you can grind fractions of GPAs against other applicants. At least, CS is kind enough to let everyone try the real thing.
I keep open 200 and more tabs, especially when I can't finish a job before I start or continue another one. It's a matter of efficiency - closing a group of tabs found after painful and time-consuming research is unreasonable IMO. To find a specific tab after a day or two I use the tabFX Firefox extension. It allows searching for the tab containing keywords in the title/URL or tabs similar to the selected one. Also allows closing tabs directly from the search result list. Extremely useful.