skysight-inc/HackerNews huggingface dataset:
> Still even if they had such a screen shot I don't get how reading a news article about a sex offender would be incrimnating even if you were a sex offender yourself.

What? Absolutely no one said or even implied any such thing.

Photos of in child sex abuse cases are routinely scrutinized in great detail to reveal clues about the location, time, and anything else that might lead to the individuals in the case.

Interpol has an entire website dedicated to help identify objects in pictures[1], asking members of the public to help identify everyday things like T-shirts. Actually, one of the top results pictures right now is "do you recognise this newspaper?"

No one is suggesting that "wearing this t-shirt" or "having this newspaper" is incriminating in and of itself. Finding these people from vague online pictures where they intend to remain anonymous is tricky business, and sometimes with a bunch of these clues combined with some other information they can identify offenders and/or victims.

Of course there are trade-offs involved in all of this, and it's important we have robust public conversations discussing those; as I mentioned in my previous comment, the lack of trust here is a big issue. But much of this entire thread is ... disappointing. I wish people would keep cooler heads (as well as, you know, actually read the article before commenting).

[1]: https://www.europol.europa.eu/stopchildabuse
> without offering a way to continue the discussion

It is asking asking a legitimate question in a neutral manner. It’s not supposed to be a microaggression. Asking a legitimate question should provoke discussion, unless discussion is fundamentally broken in your current environment, which again would be good to know.
The article is about Cloud-based Password Managers.
2 has been a huge point of pain for me especially since everyone seems to be afraid to increment their major versions now since they don't want to lose the flexibility to break their API.
I work for a small office and one idea thrown around was get rid of the office entirely. Cheaper to just rent a conference room as needed for team meetings.

WeWork revival?
+1 for OBS, it's a fantastic and extensible free solution that works WONDERS if you're trying to stream/record your desktop, especially now that it has Wayland and M1 support!
This would piss me off enough to never come back.
It’s 100% true of the standalone version of 1Password because there is only one version of 1Password - the standalone version.

Everything else interacts with it.

Your secret key is still required to decrypt passwords via the desktop application (which is the only version - everything else interacts with this.)
I really feel like both the author and the post on HN should specify that these vulnerabilities are specific to browser/online password managers.

Got very confused until reaching the end of the article where 'online' was mentioned specifically.
I think #2 is imprecise in its wording. Break between major versions (though, really, you should only break it for a good reason).

What I am seeing is breaking changes more and more in minor and patch versions, especially since developers are afraid to cut a 1.x so they hide behind the 0.x semantic versioning unstable interface clause.
And those 80 people will not have a problem finding a remote job. Seems like everything will work out in the end. Remote workers will find remote jobs.
I appreciate that, this is always the pattern with recruiting/hiring/comp topics.

It seems like there's a well meaning percentage of the population that has a strong view of how things ought to be (eg "connectivity isn't 100% your fault so you shouldn't be judged for it") without realizing that it's completely untenable ("how can I possibly hire you if I can't hear anything you say because your connection is bad.")
Bill Gates made a collision computer from 10 goats on a mountain when he was 9.
> Tim has nothing else than that company

Yeah, he just has a 2T company, poor soul.

What makes you think H1B folks don't want to go to offices?
Hi,

Thank you. Glad it helps. Have a good day.
I don’t blame him for trying to be punchy — you don’t get noticed otherwise, to be honest.
I have that debate inside my head often, but ultimately it boils down that "security" is a spectrum and convenience is on one end of the spectrum. Having all passwords be "asdfasdf" is massively convenient, massively insecure. Having to carry my titan key with me all the time (assuming my suck ass financial institutions even allow WebAuthn) is massively inconvenient, and pretty secure.

I'm 100% on board with not using 1P's TOTP for guarding the AWS Master Payer Account for my company, but my GitHub account is not a nation state threat, so having 1P autofill the code after it autofills the long password is very convenient

I have also experimented with passwords in one manager, TOTP in another, but ... as I said about that convenience spectrum

---

Kind of related to that last item, I also have gotten a lot of mileage out of KeePassXC's autotype feature for having it type my GPG pass phrase into pinentry. It stays out of the clipboard, I only have in use it within the pinentry timeout, and it's convenient. I wish 1P had similar behavior on sane OSes (1P will autotype into certain fields on Windows 10 but that convenience extends only to my gaming accounts because I'm not going to use Windows)
People forget that the internet is, in fact, a series of tubes, and that a measure of digital GDP is tied to bandwidth and information export/inport.
So inconsiderate of Cook… Maybe the employees would feel better about going back into the office if they had some balloon walls:

https://www.nytimes.com/2021/04/30/technology/google-back-to...
Imports and exports are not priced in BTC though, in the same way that there aren't really imports or exports priced in gold.

Given the massive volatility of BTC it presents a massive opportunity for arbitrage that mostly has downsides for consumers who want stable supplies of goods.
Interestingly, Steve Jobs was famous for having put the bathrooms at Pixar in a central area so that employees would run into each other.

https://hbr.org/2013/07/think-carefully-about-where-yo
Much appreciated. I may try to read the Vienna Convention, at least.

Out of curiosity, what makes you so interested? I'm interested, but I'm usually alone in that.
The payment system mentioned in the Fine Article is built on top of Bitcoin, using Lightning Network.

There's nothing stopping them from putting various consumer protections and rewards programs on top of that, and plenty of motive to do so.

It's definitely a wait-and-see sort of thing, but I don't see as to how betting against it is the obvious move.
I think you just described corporate taxes.
The people who design and pay for open floor plans…don’t sit in open floor plans.
I have a fast computer, a ridiculously fast internet connection (10000/10000), and adblock. It still doesn't feel as fast as when I had @Home (10/1 I think?) in 1999.
Dual video with Optimus manager works quite well. You can't truly shut off the Nvidia card from what I understand but switching between Intel/hybrid/Nvidia still yields decent battery life and performance optimizations.

Although it requires the Nvidia drivers and blacklisting nouvea driver still. And I hate relying on Nvidia drivers for anything Linux personally.
You mean like banning search results on inconvenient genocides?
How would it not go away? If there's no corporate tax then the profit is going to be taxed at 0%. Moving that money around won't help you. But if an investor wants to personally use that money, then they'll have to pay personal income tax in the country he's in or is a citizen of.
Maybe companies could cycle into a building every 3 years or so like cicadas.
You would think they have the sense to do 5 mins of google research on people they write about at the BBC?

> "So I got my dad's shoes, I cut the sole of the shoe open, I built the circuit board and placed it inside of the shoe with a 90 megahertz speaker, a microphone and a wired area network card," says Freddie.

None of this makes any sense.
> I don't think it's any harder to master than some other major languages such as C++ or Java

But this is backend web development, the major languages are more like ruby/php/python/js/java. You might write a C++ extension as an endgame move, but for webdev it's never an opening move.
Please, please, please do what you can, before starting the interview, to 1) reduce room reverb on both ends. And 2) compare audio levels carefully beforehand so they're close to equal (in headphones monitoring what's going to the recorder).

Reverb : Many interviews I've looked forward to hearing (with those who are living or gone, native speakers or not) have so much reverb (echo) on one end that many words are lost in mud. Tragic. (And have people talk across the mike, not into their mike. 'Plosives'.

Levels : When the two partys' audio levels are very different, the overall volume has to be pushed up to hear the weaker party. Then the other party is too loud! (Software can fix this on the production end ... best IF you record to separate tracks!)
Cloud based or auto updating password managers have this risk. The org behind it could push a compromised update any time. Standalone password managers would need the local machine to be compromised, which means a targetted attack. Far harder. Not beyond NSA types, but beyond a malicious employee or MitM actor.
Maybe so, but what website do I have to load to get Chrome to offer the password for the app that's in the foreground of my phone?

The 1P keyboard knows what app I'm using, and auto fills accordingly
Aren't those usually limited though? Ie a company can only give $x in perks per employee and everything above that is taxed in some way?
Does anyone have any information about the "90Mhz speaker GPS shoe" that he claims he invented and sold the rights to? Google can't find any reference to it outside of similar anecdotes. It's a rather exceptional claim, based on the state of technology at the time that he would have had to have invented it. For example, how was it powered such that it was constantly transmitting on FM band and would work any old time that his dad wandered away? Also, what exactly is a "wired area network card"? Did his dad stumble around with a POE cat5 cable tethered to his shoe? Or did the BBC misquote what was supposed to be "wide area network"? Even then, it doesn't make much sense to me.

I would love to believe that this person built such a device out of old radio and computer parts, but it just doesn't seem feasible.
Prefer WebAuthn to fix phishing.

The problem your approach has is that the user always really believes this is the BigCorp site - from their point of view the stupid password manager isn't working as intended, they need their BigCorp password and it isn't being filled out. The user will definitely figure out how to work around this (e.g. with cut-paste), almost always before they realise (if they ever do) that it's actually a phishing scam.

Because the user simply cannot work around the mystery problem with WebAuthn on a phishing site you have two advantages. Obviously firstly your users can't give away their credentials to phishing scams, because there's just no way to do that even if they are 100% certain that's what they need to do. So that's nice.

But the more subtle advantage is for site owners. When the new Big Boss wants to replace bigcorp.example with new-brand-name-awkward-suffix.example you can't do that in WebAuthn. "Just make it work". Can't. "We paid brand consultants $1M for this domain name. Make it work". Can't. bigcorp.example will have to exist forever or you'll have to explicitly re-enroll all your users. Contrast the situation with a password manager where I can 100% guarantee somebody will tell you to just basically help phishing scammers to steal all your users credentials, rather than admit senior management are incompetent buffoons.
Oh word?

What currency does El Salvador use now? My hint: it's not called the peso.
The trade in child pornography enables child molestation.

I suppose that if we get very technical you're technically correct. Seems like an odd and very pedantic hill to die on though.
Maybe? Depending on which Mac he's describing here this process is technically possible, but unless he's referring to anything post-1990s it would probably require flowing the board and stepping outside most people's comfort zone, even among hobbyist electricians. I won't outright deny his story, but the odds are definitely not in his favor here (and the dubious details don't help).
That's not universally true. I've been in buildings where the employees had their own private offices and shared spaces. A majority of people used the shared space.
I had that experience once. To make it more interesting, I was the lone physicist in the entire company, and a brand new employee in a huge meeting full of company brass. I told the product manager that something wouldn't work. He stood up from his chair and shouted at me.

He didn't know that I had some "trial by fire" experience in previous jobs, and I calmly stood my ground. What he was proposing violated the second law of thermodynamics.

Thankfully the person running the meeting proposed tabling the idea. But it remained in the product requirements document for the duration of the project.

I learned that sometimes math and physics are best discussed privately. ;-)
If we're forced to wfh everyone is going to say they're doing great and stock holders shouldn't worry. We're doing better than ever! Just like every quarter.

It'll be interesting to see where we actually land in a year.
Agree regarding shared context. The question though is, how close do you have to be to your coworkers, to create that shared context? Do you have to be in the same room and overhearing conversations? Is it enough to be in the same building? Or is it enough to video conference several times a week?

In my experience, video conferencing several times a week is enough to build shared context. Open floor plan not needed.
And they would pay personal income taxes on that money.
Mixed onsite/remote doesn't work because the remote folks become second class citizens. Missing out on conversations that happen in person prevents them from working as effectively. Fully remote takes more explicit focus on making sure necessary communication happens. It's harder to make work than in person. But I don't think it's impossible.

Also, in my opinion, remote work works better when team members have met in person. It's easier to pick up on certain ways that they communicate, which help understanding in online communications.
Hm. that's fair. Just append them altogether and apply timsort, I guess, or some other sort that identifies runs well.
Lots of curator blogs:
Kottke.org
3 Quarks Daily
All That’s Interesting
Longform.org
Mental Floss
Now I Know
TYKIWDBI
Waxy.org
You could try to do a more difficult hash or something (bcrypt maybe?) but I don't know if it's a very good idea. I think you'd spike your latency, open yourself to DoS attacks or only minorly inconvenience anyone reversing the hashes, or some combination of those.
>Yeah, he just has a 2T company, poor soul.

I don't think the comment you responded to was trying to communicate sympathy for him, but contrasting the sense of identification with his company that higher-ups tend to have, versus the rank and file. And emphasizing the normality of the latter.

Also, Cook doesn't own the company or even close.
> That’s fine as long as my job is willing to pay me in a constant amount of bitcoin and everything else I need to buy can be bought with bitcoin.

It also requires the goods and services you buy to be traded in dollars. If stores buy food, gas, etc. wholesale in dollars, for example, and sells it to you for bitcoin, there's going to be a problem.
The keyword is “debt repayment”. You don’t owe a vendor money until you purchase a product. They are fully within their rights to refuse to sell you a product for any reason, including how you wish to pay for it. On the other hand, a bank cannot refuse a loan repayment because it is made in 500 euro bills.
Companies asking - their employees to return to office - are still in the mindset of pre-Covid time period - which does not exist now.
Conflict minerals enable regimes that commit war crimes. Does buying electronics made from such minerals make you a war criminal?
The rise and fall of the world&#39;s largest lake
Legal thinking shifted towards a price focused for all things antitrust. You can be a monopolist, as long as you don’t quickly raise prices. That’s why 3 companies control 90% of meat packing.

Companies like Amazon are carefully engineered to avoid that type of enforcement action. Nothing will happen until you have a major political shift - I’d guess somewhere around 2035-2045 when demographics shift the political dynamic in the US.
Schedule? Why are you coming to work on a schedule that isn't "when I have meetings with people I need to see"? It's this arbitrary crap that makes good work practices go bad.
There are a lot of problems with measuring pd accurately with a photo. Ideally you need to ensure the pupils are aligned (i.e. the head can't be turned) which is really hard to tell from a photo (there's no depth).

The credit card trick somewhat works since you can guage depth given the size and positioning of the card, but the errors still can end up in the 2-3mm range fairly easily.

The best mechanism would be to create something like a Google cardboard to guarantee the head is properly positioned and then perform the measurements.
The economy is part of the infrastructure. That's why governments go to extreme lengths during economic problems. If the only store in the village shuts down it sucks for the store owner, but it sucks even more for the villagers who now have no access to the goods.
My guess is that they have some related suspect who they claim saw the story and nuked their drives. It doesn't seem like strong evidence though.
I'm not sure whether you clicked on the link, but note that the line you quote was in response to a comment asking "David Graeber is an anthropologist […] What qualifies him to talk about the economy and the function of various jobs?". You're calling it a rhetorical trick etc: that may make sense if he had employed it in the book, but as a response to the specific comment he was replying to, it seems reasonable. (That's why I included "(in reply to https://news.ycombinator.com/item?id=22030745)" when quoting Graeber's comment.)
Doesn't this mean you can have 16 shade of grey (or 8? without the alpha channel)? Is there an advantage to this compared to a 4 bit greyscale system?

Edit: the Dither pattern implementation is really cool
This will stop happening once adopted as reserve currency of major economies.
Please don't break the site guidelines like this. It greatly lowers discussion quality and we're trying for something else here.

https://news.ycombinator.com/newsguidelines.html
I set my life up as much as possible to wake up whenever I want. So I usually don't notice too much.
Yes I don’t understand how ‘going into the office’ means ‘giving your life to the company’. Frankly I find it easier to separate work and home when there is an office.
This happens a lot, and I'd recommend as a baseline having a microphone with a hard mute. My cheap Sennheiser USB headset has one; my XLR microphone is inline with a Rolls MS111 because it doesn't.
This isn't quite true. 2FA still protects you from password breaches (and weak passwords, though you shouldn't have those if you're using a password manager).

Also, keeping 2FA codes in a syncable password manager is a huge boon for people who ever break/lose phones. Can't tell you how many people get locked out of their accounts because they lose their 2FA codes.

As an alternative, companies have to have a 2FA-reset process. The fact that such a system exists weakens the entire system, which is too bad.
It was cheap only in the "penny wise" way.
Mixed can work if either some higher up employees are remote or some meaningful percentage of employees are remote (even if a minority).

It's about the communication paradigm. If people consider communication to be only local, then it falls apart when people are in multiple locations (including multi site offices). However if people default to remote compatible communication, it scales really well to people working from home and multi site offices.
If bitcoin does become legal tender in El Salvador, does that mean when a US person spending/exchanging it there (or any where in the world) would not be subject to capital gains tax on the spend/exchange? Currently the IRS states that because bitcoin does not have legal tender status in any jurisdiction, it is not a foreign currency. It is only considered a virtual currency and subject to capital gains reporting and tax. But what would happen if bitcoin becomes in both categories at the same time: a virtual currency and a legal tender foreign currency?
Does anyone have thoughts on hybrid? Like 1-2 days per week in the office.

You lose the geographic flexibility, but apart from that, it seems like it could potentially offer the best of both worlds?
There's an important callout here that often someone's "showstopper" isn't correctly viewed as a showstopper elsewhere.

If the someone calling out the showstopper isn't the final approver or able to sway the group that it's a showstopper then suggesting a follow-up validation to demonstrate the showstopper can be a good strategy.
Lightning developer here.

I have no idea what their legal definition would be, but lightning is an open standard, and Strike is but one implementation.
Nobel Prize winner F.A Hayek, who also famously predicted the denationalization of money in the 1970s[1], provided the excellent counterargument to this in the debate with the proto-Keynesians back in the 30s concerning stable supply money vs. inflationary money:

https://mises.org/library/hayek-paradox-saving

Hayek was later interviewed in the 70s and said he was mystified when Keynes was promoted to godhood upon his death. He claimed the debate had not yet finished.

[1] https://en.wikipedia.org/wiki/The_Denationalization_of_Money
Michio Kaku on his lifelong search for 'The God Equation'
My company is hiring Remote Forever https://news.ycombinator.com/item?id=27358696

We have shared office pods in cities where we reach critical mass, currently Boston and Miami.

The experiment right now is between companies that stick to office requirements and those that decentralize. I hired a high-level Amazon engineer because they did not want to commute back into the office. We pay good money for top talent. The best time for startups to poach high-end talent is now!
> you could say "I think that might be a reasonable solution. What impact will <showstopper> have on it?"

This is super condescending.
Server tomcat v8.5 server at localhost failed to start
As Cyberattacks Surge, Biden Is Seeking to Mount a Better Defense
Hum, arguably that's not the scenario that I imagined the article talking about. I feel stakeholder and business partner meeting don't really qualify as "team problem solving" in my mind.

So I was limiting the advice to engineering teams brainstorming solutions together.
Or consider giving your money to bitwarden, or 1P who only hate their users a little bit
Ethereum move to Proof-of-Stake again delayed by 18 months
A frosted sliding door couldn't cut it? what a stupid engineering decision.

All of this looks like a dystopian nightmare. Glad I never worked in big tech.
If bitcoin does become legal tender in El Salvador, does that mean when a US person spending/exchanging it there (or any where in the world) would not be subject to capital gains tax on the spend/exchange? Currently the IRS has the position that because bitcoin does not have legal tender status in any jurisdiction, it is not a foreign currency. It is only considered a virtual currency and subject to capital gains reporting and tax. But what would happen if bitcoin becomes in both categories at the same time: a virtual currency and a legal tender foreign currency?