skysight-inc/HackerNews huggingface dataset:
Correct me if I'm wrong but whilst there is a lot of evidence that reviewing learning material at regular interval is more efficient than doing it all at once, there is nothing that says that flashcard is THE implementation of spaced repetition.

There are some way to get things into long lasting memory that may be less documented academicaly but do work : learning by doing for instance. No one learns Java by putting all the elements of the language into Anki and learning them with Anki. One learns Java by writing Java programs.

I have tried many times using SRS and that's not something for me. I need context and enjoyment. Flashcards are too articial a learning environment for me.
The new UI overhaul looks awful, they killed most useful plugins with the big update awhile back, and ideologically/politically Mozilla has become equivalent to an impoverished Google so personally speaking I'm horny for something new in the browser space
ProtonMail does
You'd have to consider what actually happens when 50% of your infrastructure goes down. Can the remaining 50% cope with 100% of the load? If not, then you still get a complete failure. So then the question becomes can you reprovision between stack A and stack B very rapidly, both running from the same hardware pool, while 50% of your infrastructure is down. Now you've introduced the potential for correlated failures (single hardware pool and network), plus added complexity and load due to reprovisioning just when things are already overloaded. Not easy to get this right, so might not actually increase reliability, as now you've got two different stacks that can each independently fail and get you into this mess.
This is an excellent article.

I've been searching for ages for an explanation of what has been going on in the USA, politically. This is easily the clearest explanation I've found.

[I'm a UKian; I spent a year living in the USA]
> In which case there are much safer recovery mechanisms available. For example, a second U2F token, or handwritten backup codes.

Which have either higher costs or "administrative burden" or both which will lead them to failure for a big chunk of non tech-savvy people. Educating a casual user that they need to print out recovery codes and store them in a safe place it's not exactly top notch usability.
Climate Emergencies
1966 - Oil gone in 10 years
1967 - Dire famine forecast by 1975
1968 - Overpopulation will spread worldwide
1969 - Everyone will disappear in a Cloud of Blue Steam in 1989
1970 - World will use up its natural resources by 2000
1970 - Urban citizens will require gas mask by 1985
1970 - Nitrogen buildup will make all lands unusable
1970 - Decaying pollution will kill all the fish
1970s - Killer Bees!!!
1970 - Ice Age by 2000
1970 - Americans will be subjected to water rationing by 1975 and food rationing by 1980
1971 - New Ice Age coming by 2020 or 2030
1972 - New Ice Age by 2070
1972 - Oil depleted in 20 years
1974 - Space satellites show New Ice Age coming fast
1974 - Another Ice Age?
1974 - Ozone depletion a great peril to life
1976 - Scientific consensus planet cooling; famines imminent
1977 - Department of Energy says oil will peak in 90s.
1978 - No end in sight to 30-year global cooling
1980 - Acid rain kills life in lakes
1980 - Peak oil in 2000
1988 - Regional drought (that never happened) in 90s.
1988 - Temperatures in DC will hit record high (no records broken)
1988 - Maldive Islands will be underwater by 2018 (nope)
1989 - Rising sea level will obliterate nations if nothing done by 2000.
1989 - New York City Westside Highway underwater by 2018.
1990 - Cellphones caused cancer
1996 - Peak oil in 2020
2000 - Children won’t know what snow is
2001 - WiFi causes cancer
2002 - Famines if we don’t give up eating fishes, meat, and diary
2002 - Peak oil in 2010
2004 - Britain will be Siberia by 2024
2005 - Manhattan underwater by 2015
2006 - Super Hurricanes!!!
2008 - Arctic will be ice-free by 2018
2008 - Climate genius Al Gore predict ice-free Arctic by 2013
2009 - Climate genius Prince Charles says we have 96 months to save the world
2009 UK Prime Ministers says 50 days to “save planet from catastrophe”
2009 Al Gore moves ice-free Arctic prediction from 2013 to 2014
2010 - 4G cell tower causes cancers.
2013 Arctic ice-free by 2015
2014 Only 500 days before climate chaos
2019 - Hey Greta, we really need you to convince them this time.
2020 - Australian bush fires are caused by climate change.
2020 - 5G cellular towers causes cancers.
2020 - Polar bears could be lost by 2100
2021 - Volcano caldera ready to wipe out civilization

Can’t we make NPR a non-profit instead?
Telegram started to collaborate with Russia and they let it live.
>The large holders of BTC are completely unknown. You morons are empowering a global mafia.

Are you suggesting that "the large holders of BTC" are part of a criminal organization?

> We don't know who they are, they have zero accountability to anyone but themselves.

Less accountability, less control. Bitcoin holders are just that, holders. They don't control the network or the monetary policy. The fed on the other hand can print money as it pleases.
> That's exactly what I was referring to. Unless everybody can retire, nobody can retire.

No, it simplifies to "everybody can retire, period".

> I don't hold that belief. Disparities and inequality are fundamental to human life

When someone refers to "wealth inequality", they're not talking about disparities of 1 or two orders of magnitude, they're talking about 5 or 6 orders of magnitude. Show me a disparity in beauty or health of 6 orders of magnitude.

It's pretty clear that these analogies are not remotely faithful to what we're discussing here.
But that is my entire point. SMS as a second factor is purely additive. It cannot reduce security.

There is pretty much no form of second factor that users are worse at passing than backup codes. Even if people print them out (few do), they won't find them when the emergency happens. You need some form of trust that can be bootstrapped again from scratch.

For most of the world, SMS is it. The Nordic countries have the bank if system. But the market is too small. Hopefully the EU-wide identity verification systems solve the scale problem.
There’s an issue with this comment that makes the text nearly the same colour as the background.
It's surprising that in 2021, people in one of the most industrialized countries in the world still rely on such transient things as snowpack, rain, and river flow for water. Like our primitive ancestors thousands of years ago. Imagine if we still used sail ships (outside of amateur/recreational activities).

Desalination plants is the way of the future.
i thought coinbase did just this.... either made recoveries a multi-day thing, or disallowed transfers afterwards. maybe that was blockfi.
As long as there was some pre warning that such a quantum computer+algorithm was going to become available, Bitcoin would be able to fork, and users would be able to move their funds to quantum proofed (or at least hardened) wallets.
BBQ is allowed again :-)
Def from nano plastics.
Perhaps we shouldn’t continue to farm in such arid regions.
Thanks for reminding me to try that again.

Last time was a couple of years ago and I had some trouble between instances but maybe I didn't do it right.
I am aware of that, but you're missing my point. Webmail needs SMTP (while it doesn't necessarily need IMAP/POP). So there is bound to be an SMTP server somewhere that cannot be hidden in HTTP traffic, which is what I think hansel_der was implying.
An interesting corollary: A software supporting file creation must also support deletion. A user can create a document in Microsoft Word and save it. Why can't they also delete it from within Word. If they have an open document, where's the delete button to just delete it. :-)
If it doesn't already exist, I think you just created a product. An easy to remove full laptop sticker that looks like the laptop, and allows you to put on other stickers, then remove the whole thing leaving no traces and protecting from sun bleaching. I bet this is already a thing.

[edit] It somewhat exists. I found "macbook skin's" on amazon.
> The only way it can ever actively reduce your security is if it's used as a single factor, as it was for the OP.

I don't believe this is true. If I have your SMS I am considerably more likely to be able to phish a recovery, even if recovery also involves something else. Every piece of information the attacker can get is valuable for forging auth.

What SMS is good at is being available. At this point cell phones are distributed to a massive portion of the world. But at this point smartphones can also act as U2F devices, I believe, so I'm not sure that benefit is so meaningful anymore.

Instead of companies wasting time on SMS 2FA they should be figuring out how to help their customers set up U2F.

I'd like to avoid being in a situation in 10 years where we have great options for end users available but 2FA SMS is still supported for legacy reasons, and unwitting users end up using it because it seems easier and they don't understand the risks.
I'm not American but I find it worrisome that some of the largest companies in the US (and the world) are so "obviously" partisan and willing to exert their power in a partisan fashion, as people accept this reality uncritically - whether it's in favour of their allegiances or not.

That's what a dangerously broken society looks like. The common folk should never be openly supportive of "robber baron"-style political activism and it's unprecedented AFAIK.
Are they being the first country for the sake of being the first country?
I think the West generally respects and understands due process, rule of law and those general ideas. You will likely get a fair trial. Not so for some of the opposition.
The amount of greenhouse gases released by one volcano eruption...
While a little bit of a rant (though fair, given the underlying frustrations), I do feel like it mirrors a lot of my experience.

Customer service is not being optimized, it is being optimized AWAY. Going even further, it seems as if it couldn't possibly be made this hostile (eg. endless hotline holds; being bounced to different reps several times; not being able to speak to a human at all) unless the goal was explicitly to make it as miserable as possible for the customer.

Problems will always occur, wether the company causes them or the customer, and humans need to be empowered to solve them effectively for all the edge cases where algorithms/AI/ML/etc can't, otherwise it's just a pile of misery.

What incentives are missing to actually improve customer service?
> ask their customers to lobby for a better legal framework

Do you understand the absurd level of naïvete of this position?
WebGL 2 is enabled in yesterday's iOS/macOS/etc. Safari releases
> Does Walmart have to put anybody's stuff where they want in the aisles?

That could be an incredible boon to the ecoconomy.

As a younger man I gave up on the idea of making simple consumer products on realizing that the large supermarket chains around here could dash my work on the rocks by just a middle manager arbitrarily saying 'no' to stocking what I had made.

So yes, I think those companies should be forced to work with local businesses.
If it worries you in Eastern Europe imagine how the people of middle America feel.
If I was desiring to make false flags against global warming, I maybe would attempt this idea first.
But doesn't this "smartness" require accurate information about internal symbol usage? For exmaple:

static int foo(void) {
return 4;
}

int bar(void) {
return 42 + foo();
}

The compiler, I believe, may emit no symbol entry for foo() and use a relative call inside bar() to call it, so if you only include "used" symbols in your resulting object file, bar() will end up calling into who knows where. That's why there are special flags for enabling "function-level linking" and all that jazz, right?
Developers Share How They Prevent and Manage Technical Debt
Agreed. Done.
"Thanks for taking the time to contact us. We're currently receiving a high number of requests so we may take longer to respond, but our team is working hard to get to every inquiry quickly."
> ...A nepalese website doesn't have to care about GDPR as long as they don't have a presence in the EU.

Sure. You don't have to care. But this is blatantly wrong according to GDPR.
I would start with Docker. At least that's what I do, dev/build on Mac, production on Linux.
Sure, there are a lot of indicators all pointing in spooky directions. The problem is that the time frame in which these indicators actually indicate anything is well out of the planning range of most folks' investment capabilities. You _could_ shift everything into much lower risk investments, but the storm we all see brewing may arrive tomorrow or it may arrive in 15 years. Unless your investment career has many more decades left in it, that's probably not actionable intelligence.

One thing about investments and wealth in the U.S. that became apparent during the last few corrections is that the people that have the most to lose are also the people that have the most control over the regulatory levers. What this means is that no matter what is happening in any particular market, if big fish are losing lots of money, the U.S. government will do absolutely everything within its power to reverse that trend - even if it means socking it to the little guy. As long as you can manage to keep your wagon in roughly the same circle as the investment class, you'll have the best protective fiduciary policy and legislation that money can buy...
Is the government accepting it for the payment of taxes and fines? Or are they just forcing businesses to take on the risk of accepting it?

I can't imagine what an enormous pain in the ass this is going to be for businesses, given the volatility of BTC.
Are there many options to Google? That is where the example breaks down
Got it - thanks for the feedback. To be transparent, startups and smaller companies we work with are paying $500/month (pretty cheap for replacing months of engineering working and maintenance). Our pricing then goes up from there depending on number of end customer groups.

We work with our clients on how the pricing scales up since some customers have very few end customer groups with tons of usage, whereas some customers have tens of thousands of end customer groups by virtue of being more consumer facing.

Let me know if you have more specific questions about pricing!
> SMS as a second factor is purely additive. It cannot reduce security.

I responded to this in another post.

> There is pretty much no form of second factor that users are worse at passing than backup codes.

Agreed, I also mentioned backup U2F. At this point modern smart phones package TPMs that can also do attestation, so we're really not too far away from being in a situation where the vast majority of people have a U2F token in their pocket.
Microsoft Teams chats aren’t as private as you think
Making your infra heterogeneous is very underrated. Or at least I don't hear of many companies doing that, even large ones.

How do you go about different software though, have one center running a version or two behind to fallover to?
We have to remember the median phone user isn't usually tech savvy. Is an average Joe or Stacy who use that device with communicate with friends and family, use Facebook, watch Netflix, and buy from Amazon, and that isn't something bad. Just we have in mind that most people doesn't know tech-related terms and can confuse them.

Maybe if we want to be a bit funnier we will write "changing the break pads" in the loading screen, but in case of error we have to write something clearer, like "error accessing to the game server" or "error reading cars data files", to being able to solve the problem.
No worries. I probably didn't take it very well because my intentions were genuine and I really wasn't trying to level anything beyond the very mildest criticism towards Fastly. I recognise, however, that even that was misplaced — I think the BBC headline just got me too worked up!
The article uses the words legal tender and says “ The new law means every business must accept Bitcoin as legal tender for goods or services, unless it is unable to provide the technology needed to do the transaction.”
Are you from the States? The discovery process probably made keeping it a secret any longer nearly impossible.
>You basically just described a modern bank

In what way? The "make their own exchange where people can park funds and 'transfer' funds on paper" bit? The lightning network allows this to be done without trusting your exchange with your funds since transfers are nearly free and instant.
Solana Labs raises $314M in new funding round
At first,this comes off as facile handwringing but I think that is mainly due to the limitations of essay structure.

Given who wrote it, it’s not surprising that it actually contains quite a bit of useful insight amd doesn’t try to end with a simplistic and platitudinous “solution” or Grand Theory of Everything (despite it being sold that way by the Atlantic).

It’s apparently from an upcoming book, which I assume will have more nuance.
Its generally not "second factor authentication" but 2-factor authentication. The idea is that you have 2 separate authentication factors. Preferably both with decent security.

Besides, I don't believe coinbase does SMS only account recovery. So here SMS really did fail as a second factor. Since it seems attackers must have had a password and SMS. (I am not 100% on the coinbase account recovery process)
Should you be forced to put my stuff in your house?
These are private companies, where does that force end?
Not at all — I understand.
Don’t ever make True be the first item in an enumeration if there are any languages in your stack that initialize them by default. Make the default item be InvalidIForgotToInitializeThis.
It's actually amusing because the airport lobbyists were responsible for cuts in train infrastructure funding in Germany. Reminds me a bit of how Germany killed it's fiber investment to accomodate for private cable TV back in the day.
That you can identify a benefit doesn't mean it's outweighing the costs.
That's true, though they are also saying things like "We created a permanent fix for the bug and began deploying it at 17:25.". "Permanent fix" sort of implies they understood the issue really well.
Awesome Cosmopolitan
I don't blame them for having a bug. I do blame them for having a design that doesn't isolate incident like this (although, it is hard to know how much without more details. And I blame our industry for relying so much on a single company (and that isn't a problem unique to fastly, or even our industry).
> Educating a casual user that they need to print out recovery codes and store them in a safe place it's not exactly top notch usability.

So then have two U2F tokens. Or use your phone's TPM as a U2F token. The usability of phone-based U2F is quite good.
You Can Organise Your TODOs as a Software Engineer
But that's not an inherent problem of SMS 2FA. It's just bad implementation.
Preamble: I mean this as a compliment to the game, so I hope I don't come off too negative.

Factorio is so analogous to coding that I just couldn't get into it. I laid out a neat little factory and then requirements changed and I realized that I needed to basically abandon what I had and build something new. My factory was not really "open to refactoring". Something about that feeling felt so similar to what I have to do at work all day that I closed the game and haven't gone back to it since.

I got really into a technical Minecraft mod back in my college days (Better Than Wolves). For some reason I never really had the same problem with that, in fact I really enjoyed crawling around in tunnels and changing things around. Something about the 3d-ness of Minecraft made it feel more like tinkering maybe.

Idk, this post has become a ramble - but suffice it to say that Factorio felt _too much_ like programming for me to truly enjoy it. Maybe that says something about the kind of developer _I_ am ;)
Now I know what I am doing next weekend.
It's not valid to want to acknowledge the fact that not all of your continent is part of the USA?

The United States of America is an embodiment of "manifest destiny", which is a declaration of intent to conquer the sovereign people of the continent.
That makes sense. We are definitely not trying to hide an outrageous enterprise price tag. I responded to mchusma's comment with how our pricing currently works. Let me know if you have any specific questions about it and happy to dive deeper!
I'm not sure I understand the word "subverting" here, those uses are for human consumption directly and food production, those feel pretty legitimate. Arguing against grassy lawns, I can see.
Assuming we're talking about the first Steve, it definitely sounded like Reality Distortion Field Steve, given this quote (with my emphasis):

>• The Steve who told me I would never be able to write a 6502 disassembler ... (He was neither a programmer nor a hardware engineer.)
No, they really just like wasting 4 bucks on every transaction.
> Google added flights, but Booking Holdings (aka Priceline) continued to grow each year to 15B in revenue for 2019. (Huge drop for 2020 obviously.)

But did advertising on Google become more expensive for competitors once Google entered the market (e.g. did Google Flights also bid on Google Ads) and were those additional costs passed along to customers?

So while your example shows a competitor survived, it over looks the many start ups that did not, it overlooks the increased advertising costs, it over looks the increased cost to consumers and the chilling effect on potential new startups that might have been able to enter the market.

We do not even need to question any of this because before Google acquired the startup which became Google Flights the acquisition was reviewed and only approved under very strict Chinese firewalls between Google flights and Google search…but those restrictions only sought to restrict Google flight’s complete takeover of the market and ignored how it is being used to increase ad costs to the remaining market competitors.

The same has been seen with Google shopping, where Google essentially acquired a startup, it flopped, then Google positioned itself ahead of organic results and began systematically burying competition in the Google results. The fact you can’t name any of the travel or shopping startups that had thriving businesses that fell once Google entered the market is more telling of how Google has dominated the market rather than evidence Google hasn’t actually put anyone out of business.
Sounds like that could just get them in more trouble?

Such customers are probably on their own - but the article does spell out what they've done, so hints at the solution: VPN to outside Russia in order to sort out moving. (Or stay with Fastmail and accept that you need the VPN to use email, I suppose.) The CEO does often comment on Fastmail submissions here (brongondwana) but I suppose maybe not in this (lawyers involved) case.
Founder's Guide to Cold Emails
Hey guys! Are you thinking about using Cold Emails to get leads?

We’ve been using cold emails as our main traction channel for months, and wrote this detailed guide with what we learned.

Hopefully, it’ll save you some time and effort!
Would love to hear your thoughts
This isn't some prediction, this is the present