skysight-inc/HackerNews huggingface dataset:
There is a relevant passage embedded, but not expanded upon, in the original article:

>Whether a student passes or fails is dependent on a combination of two assessments;
>a report from their junior high school marked out of 300 points
>and a written test covering Japanese, math, English, science and social studies and scored out of 700.

The report is worth up to 300 points which is about 10x the typical differentials mentioned in article. Going by the condensed explanation in article, is created by the junior high teacher(s?) of the pupil. I suspect a scoring inflation, quite possibly gender-selective - specifically to prop up pupils the teachers perceive as worthy moving onward.
Hey thanks but very much not my language.
The key thing is that an attacker wont be able to keylog the shared secret, or trick me into typing it on the wrong site.
The benefit of apps and SMS over hardware tokens, TOTP, smartcards, etc. is to have a out of band communications channel, not merely a second factor. This is crucial for dealing with malware that can change the transactions a user is entering on a banking site, and it being literally impossible for them to notice that it's happened just on the browser. With apps / SMS, they can be informed of the transaction details as part of the verification process on a secondary communications channel that hopefully is not affected by the malware.
I find it's usually a signal that:

* The company is cargo culting Google or it is Google, in which case it's cargo culting hunting down people like Larry and Sergey.

* The company makes decisions based upon safety in numbers. "Everybody" interviews this way, so if you're worried about justifying your process in future, it's a safe option.

* If this system selected me for a $200k / year job, it can't be all that bad.

* It does correlate somewhat with ability.
Oh wow, thanks for correcting me. my numbers were off by a lot. I guess Africa is closer to 15% of the world population.

Probably better to just think of every one as individuals.

Global wealth Numbers are interesting though, https://www.credit-suisse.com/media/assets/corporate/docs/ab...
Last two WP updates I did were essentially downloading the site with firefox's "save site as", running prettier on it, and setting up a basic netlify for what's now a static site. HN is quick to talk about "the right tool for the job" about WordPress, but WP also has great branding which often makes it the choice when it's _not_ the right tool.

imho the best part of WP is the dashboard stuff, so headless WP is a good choice. It's also frequently hurt by PHP's heavy push on inheritance, which can be at-odds with what is actually a very good events-based architecture in WP. Sad part is that the very good events-based architecture is so overlooked, most people who have spent time developing in WP aren't even aware it has events.
A (well handled) physical password booklet is much more secure for the average home user, who is unlikely to ever be individually targetted by a third party attacker, let alone to the level of the attacker physically breaking into their home. My parents being victims of a zero-day vulnerability or installing a malicious application by mistake are much more realistic scenarios than their house being broken into and their password booklet being stolen by a thief who is meticulous and observant enough to take it and know how to make use of it.

Not only that, I would argue that a physical booklet is not only more secure but also safer. Nothing short of a house fire will destroy the booklet, and however much I like to rave about old-school ThinkPad durability, I don't think my locally stored encrypted database would survive that either.
It is a question of priority, I think what GP is saying is that programmers used to these contests will focus on getting their structures right first, and will take care of logic on a second time, if they have time for it. In programming contests, they don't have time.

And I think it makes sense and that is a hierarchy. Data structures are the most important, followed by logic (algorithms), followed by comments.

The reason is that if you change your data structures, you need to change your algorithms, and if you change your algorithms, you need to change your comments. Data structures define everything, comments define nothing but themselves.
I don't get your reply? Obviously they're not facing charges for intent to supply drugs because that's not what they did?
Remind me again: does the lab leak conclusion count as anti-vax conspiracy theory this week?
Hmm, I'm kind of doing this. After 20-someodd years of programming, I no longer think the big wins are in technology, but rather within, in cultivating mind. So I'm going to gradually help people with meditation. One thing I'd ask you is, have you used your skills to straighten out your own life, i.e., have you dogfooded your methods?
Well, what I really dislike about PHP is the syntax. Weird special characters.

And since I care about that and there were alternatives - yes, I just wrote off PHP entirely ;)
Most websites are data sinks of anything that can be taken. No reason IMHO the login page should not always send a hash over ssl. (which is hashed again to test it)
uhhhhh ... that's not what they're talking about. nobody really cares about cocaine and pubes on dollar bills.
I'm surprised that this corner case - the loss of a single frame from the nav camera - wasn't tested.
Four weeks is the legal minimum if you've worked at a German company for two years. Plus the notice period, which is often three months for software developers.
It is https://setapp.com/
Most people probably had never control over their local desktop system.
But image gallery does not need any "additional development". All it needs is frontend code to display the gallery nicely, some storage mechanism and a "manifest" of sorts with relevant metadata of the gallery.

If that is a photo-sharing website, then yes, proper backend is needed. But for a portfolio website of a photographer, which gets updated once a month at best, static manifest will work wonders.
Heh, thanks for correcting the typo, that saved my Friday afternoon :)

I had not heard car videos are so popular nowadays that their download speed can be used as a measure of modernity. But actually, that did not surprise me any more, more like the opposite. I feel that the older I get (I was born in 76), the more I see and hear things related to computers, music, media that apparently are very popular now I have never heard of. Sometimes it feels like I'm forever stuck in the 90's in a way. I mean, music was best in 90s-early 2000s, All you bases belonged to us as far as the best memes go and so on. But then again, with the technology in my hands today, I wouldn't change it to 90's junk in a million years.
Aside from the fact that I never transmit the actual password. So the password that you’d potentially get only works for you for 30 seconds.

Slight detail that’s of course completely irrelevant.
The role like no other: startup CTO
Show HN: FileOrganiser a KISS directory management tool
Businesses, even very capable with web dev, update their websites very rarely. Businesses want to update the content, which is different. Static site generators are built exactly for that.
They can be persuaded to change these policies. Asking why they aren’t following the current NIST (US) or NCSC (GB) password guidelines is helpful.
But cash isn't that useful if you're holding a company to ransom on the other side of the world. And normal bank transfers are very traceable.

Banks need to report any transactions greater than $10K (or a series of smaller transactions that make up $10K). The consequences of a bank not reporting far exceed any profit they would make from it.
Introduction to Algorithms by By Thomas H. Cormen, Charles E. Leiserson, Ronald L. Rivest and Clifford Stein (https://mitpress.mit.edu/books/introduction-algorithms-third...)
Fascinating, the possibilities for such different patterns/behavior of space+energy+matter at different pressures, temperatures (scales) etc! There is so much left to discover here.

I do love the idea of potential forms of life in the universe that might exist in nearly-incomparable forms to our familiar earth/sun/dna/carbon-etc-based ways. Like organisms made of gas, or light-years-accross, or at a million-times the pressure/temperature.. could any type of life ever exist in or on a star or black hole? (there was a recent HN post about 10^30 micro-organisms that are likely living off radiation-based splitting of water in the rock deep underground, kinda suggests life will go anywhere that it can!)

I also hugely enjoyed this related detour I found when I looked up something mentioned in the article: 'Black Hot Ice' (Ice XVIII)', a newly discovered state of matter! (surely been submitted to HN already I expect)

https://www.quantamagazine.org/black-hot-superionic-ice-may-...
It’s not a Europe vs US thing. For example in Germany it’s still somewhat common for an apartment rental to come with no kitchen and barely any fixtures and you have to supply your own. That would be considered a step too far in the US.
Can they be forced to give up all of the proceeds from their illegal actiivty?
The most incredible thing for me about this glitch is that as far as I know it's the first serious error in the entire mission. The live coverage of the landing, and the combined video that followed, was utterly astounding and humbling. Dare mighty things, indeed!

The communications from NASA's Mars teams has been incredibly thorough and transparent. That they share all of the raw images soon after they are received from Mars gives an incredible feeling of inclusion.
> People here are incredibly disagreeable, especially in the last 5-10 years.

Never been to the USA in the last 10 years, but I interact regularly with usians, and this is not my experience at all. All of them have been extremely nice people, without a trace of disagreeableness.

What irks me, is that they are constantly giving unwarranted and over the top praise. I find this very disturbing. In France this attitude is invariably interpreted as ironic mockery. And if they spoke French I would be genuinely offended by such attacks.
> And you can on click heads or you can think with portals or race around a city without ever needing to use terminal or to debug audio issues.

No, you're limited to either game that runs natively on Linux (so almost nothing) or Proton (which works fine but with worse performance than native Windows). Oh and don't expect to play anything that's not on Steam without digging a bit into the command line. Should I add that to have the version of Proton that has usually the best compatibility on protondb, you have to install it manually? I play on linux and it's fine because I play WoW classic with a few friends and sometimes RimWorld, but for example if I wanted to play Vermintide with them I would have to install Windows (thanks anti cheat!).
they implemented their own message queue?
Tesla to Acquire a Foundry in Taiwan?
There is no single CPU; it's a multitiered control system with at least two of the tiers automotive/military grade components for realtime systems.

ref. https://news.ycombinator.com/item?id=26907669 for more details for example.
I understand the pain, and the need to somehow work around this.

However, conceptually the right place to fix/configure this is the browser. So the correct long-term approach is to open a bug/feature request and get this properly addressed. Everything else is, well, -- a workaround.

(Again: I understand that the correct approach can take years, and it is unclear if it will succeed at all - so it may be impractical.)
Not entirely. The thing I know turns into the main password to get into the password manager for every site.
Privacy is an illusion. The only hope we have is to try to reduce people's willingness to harm others.
> They're trying to filter out candidates who would need to grind leetcode in order to explain how a hash table works.

This is obviously a generalization rounded down. Most of my whiteboard interviews were fine, like you’re saying, but some did ask ludicrous puzzles that required specific knowledge of existing algorithms like “largest sum consecutive array”.
Not if you get electricity for free.
"Detectives said they were tipped off about lots of people visiting the unit throughout the day and a police drone picked up a lot of heat coming from the building."

Does that imply a drone with infrared capabilities?
I don't think anyone thought OpenSSL was good code even before Heartbleed. Bob Beck pointed that out in his LibreSSL talk https://youtu.be/GnBbhXBDmwU
I disagree: I find that she makes an excellent point about the choice she made in the video linked above. She is a designer, exploring ideas about body augmentation. She is not (and nor is anyone else) at the stage of perfecting a design so that it become the most performant. "Premature optimization..." and all that.
I would argue that since the totp secret is never in my head it is not a password.

Sms hijacking doesn't "convert" anything anymore than someone with a telephoto lens "converts" an old-style hardware token to a password. (Yes, I know the p in otp is password, and called that because it's entered by the user. It's not a password in terms of a factor you "know" because it's time-limited.)

These are also fluid ideas that are used to describe roughly different failure modes for different types of authentication:

Passwords are thought of as things the user can disclose.

Totp and other "second factors" are thought of as things that must be stolen, or if disclosed have a very short viability time.

Biometric are things that can't be disclosed, but can be lost, and (and when properly implemented) not stolen.

You're trying to argue that these categories of authentication factors have hard lines and definitions when they're fluid categories being used to think about failure modes of a method. Each specific authentication method has its own strengths and weaknesses.

Also, sms hijacks require a lot more than simply "knowing" a phone number. While sim cloning and ss7 attacks are known and very possible, they're still fairly complex. You can also social engineering tech support at phone companies to activate your sim for an account, but that is also significantly more difficult than simply "knowing" a phone number and also a failure of the authentication the phone carrier is using.
I can't follow what you're trying to say.

> The "something you have" needs to prove you were party to the initial exchange

This is not something that can be proven at all. Accordingly, proving it is not a goal. Anything that can be had can also be transferred. Your delegated agent's login attempt is just as valid as yours is.
10+ Tips to Become a Better Writer
The Misaligned Incentives for Cloud Security
It didn't "never materialize". It's part of the HTML5 spec (although it's not called XHTML anymore, it's just HTML5 with XML syntax): https://html.spec.whatwg.org/#the-xhtml-syntax
Interesting post, thanks for sharing.
How does this compare to moDAL? https://github.com/modAL-python/modAL
Not really a glaring disadvantage. If someone has physical access to your unlocked computer and wants to do bad stuff to you, you are going to have a very bad day.
But then again other people have explained the furin cleavage site exists in other beta coronaviruses - so making a definitive "smoking gun" statement without further research seems premature.
Based on heat and people coming and going, police assumed it was a cannabis farm . Based on that incorrect conclusion, they raided the place. Flimsy evidence.
Neither of the things you’ve described make money dirty. Just because a dollar bill comes into contact with cocaine (often in cash sorting machines in banks), it doesn’t mean that it is the proceeds of crime.
This rack could be used for storage, not compute. You could add a Mellanox 400Gb NIC to the machine (assuming you have the required 32x PCI lanes for it), and then route that to your compute resource. This is a typical scenario.
Moving is one of those things you need to do yourself if you want it done right. Sure you can outsource and get passable results but it's never gonna be as good as if you'd just done it.

Edit: Based on the popularity of this comment and absence or replies I suspect I may have accidentally struck one of those nerves where people don't like what I'm saying but can't come up with a good argument why it's wrong. If people disagree with me I'd be interested as to why.
> There are people who do it well

What are the best resources that describe how to "do it well" in Wordpress? I've made several attempts to google, but due to the enormous popularity of Wordpress, and the low technical level of most of the users, the signal-to-noise ratio is incredibly poor.
other crapcoins are possible w/ GPUs

https://whattomine.com/
What Reddit users think about Ethereum and Ethereum’s Co-Founder?
Is there a documented HN policy that high-quality articles can be censored on HN because of low-quality comments? Why not allow time for low-quality comments to be downvoted/flagged and high-quality comments to arrive? If good articles could be rapidly flagged/censored, how could discussions ever "switch to be more productive"?
The product I work on now logs users out after 15 minutes. It's a service where the average user would probably spend a good few hours of their day.

We're actively harming the user experience (and driving paying customers away) because of some "expert" advice.
I can tell one of the ways that is missing in the article.

Let's say, you have a lot of Bitcoins and your buddy is a bitcoin miner. You craft your transaction such a way that you put all your coins as transaction fee. You send your transaction only to your buddy. Your buddy picks it up and solves the puzzle afterwards. Fees will be converted to brand new coins.
Link without tracking params: https://freddiedeboer.substack.com/p/please-think-critically...
> it is in the name

The "Password" named in "Time-based One Time Password" is the temporary generated value you transmit. It's not what's stored on the TOTP device, so in the context of this discussion, that temp value isn't what the gp was referring to.
I get that money laundering is always linked to criminal activity, but how have we always just accepted the lack of personal privacy when it comes to finance? Privacy is a feature, not a bug; and whilst crypto may not be the way forward, I hope one day we can reach a solution that has both privacy and also safety. The language used by law enforcement is quite alarming, it suggests that they should be privy to ALL transactions made, regardless of reasonable suspicion.
Yes - they also have IR cameras on police helicopters and use this to identify likely cannabis farms fairly regularly in the UK.
>Yes, but let's be fair, it's a galaxy better than writing it on a post-it

the modern security hazard is not someone reading your post-it that is sitting on your desk, it is someone remotely getting access to some part of your computer or some service you own that can tell you what the password is.

The post-it note in our world is more secure than lots of things that have replaced it.

on edit: I see Mordisquitos said it better than I.
LeetCode is that stuff you cram into your head for an exam, spew onto a page, and then have forgotten by the time you are walking out of a room.

So, no.
jump the turnstile
> Yeah, TOTP is a password. Hell, it is in the name.

Careful; "one-time password" is in the name, and it certainly isn't that. Your TOTP seed stays valid forever.
I use BitWarden and have come to prefer something about BitWarden that initially irked me coming from LastPass.

There is no icon in any of the fields to click to populate them.

There is no auto filling.

You have to cursor into the field, right click and manually select the relevant entry to fill.

From a security standpoint this is much better and safer overall.

It also prevents accidental autofilling and login of an account you're trying NOT to login with on sites where you have multiple accounts and need to keep things carefully separated.
Do letters have an existence outside of our heads? I doubt it.

With regards to the relationship between repeating sequences; we (humans) invented funny games to describe these patterns as we perceive them. Some of these games have very strict and elaborate rules, although most of them are either inconsistent, incomplete or undecidable or trivial.

Even constructive mathematics offers no help here.
Didn't they raid the place because they knew that they were stealing electricity?
Very strange to see that Fog managed to run for 10 years when the guy being almost a public figure in Russia, and flew Russia-US regularly.
I think they just need to pay the amount they stole plus penalty.
shocked the US didn't veto this
Computer equipment getting seized is unusual for electricity theft.
This gravity is probably the fuel of society, it's hard to avoid its negative side effects, it's a natural positive feedback loop.

Just like finding beer money by making a youtube channel on trendy topic.. the short term effort/reward is higher than doing quality stuff (or even finding a better job, which can be hell) and this web being the trend, everybody will be nice to you if you want to make a youtube channel..
But Apple doesn't sell the M1 cpu without a Mini or MB carrier included.

I think relatively few people want to buy a rackmount server based on a motherboard that hosts a cannibalized M1 limited to the 16GB of RAM that it came with, paying the price premium for the rest of the machine. An M1 seems to be roughly equivalent to an Ryzen 5000-series CPU, and you can get those for $300 (6c/12t) through $1K (16c/32t) without having to go through the labor costs of pulling out the CPU from a $900 carrier.
Here’s a little story to help balance the ratio

https://www.google.com/amp/s/www.vogue.co.uk/fashion/article...
Possibly. But it could also be something as simple as a snow free roof when the neighbourhood is covered. Or one unusually dry after rain.
> Haskell (ML) is prefix, Lisp is infix, and Forth is postfix.

With respect, no. Lisp is by default prefix (Polish notation) but with some work you can make it behave as infix or postfix.

Haskell is naturally either prefix or infix depending on how you define and call your functions (the use of backticks or parens around the function name in a call changes it from prefix to infix and vice-versa. It's a rather elegant solution to the problem.)

As you stated Forth is postfix (Reverse Polish notation).
DJI sells a FLIR addon for their drones. [1] The mavic 2 enterprise is also available with a FLIR camera. [2]

[1] https://www.dji.com/ch/zenmuse-xt

[2] https://www.dji.com/ch/mavic-2-enterprise
yes, ir cameras are widely used in helicopters, eg. https://youtu.be/Q481RMKwpCY?t=45
it's a no brainer to mount them on drones too
But you're not passing "without grinding", you're just someone who loves the grind. Good for you I suppose but it's nonetheless very far removed from the skills one would actually find worthwhile even on the highly non-trivial, greenfield projects you're talking about (which BTW are quite rare and not what most people are working on). There's a lot more to CS and software/system design than just this l33tcode stuff.
Clickhouse is easily my favorite secret weapon.

Lowered our costs by ~50% and reduced data processing times by orders of magnitudes.
> A max limit of 10k characters in site code

A brief investigation says it's 10K characters per file, but still how the hell does a web site enforce that? Sure seems arbitrary and silly.
The original quote qualified "given the size of its body". Humans are 10x larger than Tasmanian Devils.
Not to hijack this (I have zero affiliation with this project), but RoboHash has been my absolute favorite version of this: https://robohash.org/