skysight-inc/HackerNews huggingface dataset:
The most valuable parts of 1Password for me are storing non-password stuff like license keys, secure notes, random security question answers, and the like.
I really like the language, but you're exaggerating the verbosity of the Haskell code by not comparing them in an apples-to-apples way.

Here's the same Haskell code written in the same way you've written your Kind code.

blocks entity floats ghost = case ghost of
True -> True
False -> case entity of
Creature{..} -> True
Tile{..} -> not isWater || True
Wall{..} -> True
Fire{..} -> False

The `{..}` is from `RecordWildCards`, a common extension.

I do like the omission of `let` and `where` in favor of just variable definitions. For monadic notation, instead of `get` and `return` I'd prefer something like https://github.com/monadless/monadless

The main problem with `do`-inspired monadic notation is that it forces monadic code to always be in A-normal form, which is pretty annoying. It'd be far nicer to allow for monadic code to look the same as normal code, just with say an extra brace (such as "IO { }") to indicate that you're inside a monad.
This is ridiculous. Electron works great, and if this leads to more frequent updates and a more consistent experience across platforms, that's a win for users. 1Password's Windows client, for example, has always felt behind the Mac edition, and if this brings parity and a higher feature and update velocity, that's a win. I have at least three Electron apps open right now and they are all great experiences that the vast majority of users of those products love.

This has nothing to do with VC and everything with trying to build a better product for users that is easier to work on for developers.
How about mousewheel? Would it be too unintuitive for shift-wheeldown to scroll right and shift-wheelup to scroll left?
The 2nd point, "Make your boss afraid", is a double edged sword. If you become indispensable, there is a chance you will get laid off because of that.

https://www.stickyminds.com/article/management-myth-36-you-h...
And you would then be back to debugging small intricate differences across browsers, which is what people ship Electron to avoid.
I don't understand the panic.

This isn't a black-box system, it's github. Owning your artifacts is as simple as setting up a job to automatically clone the repo a couple times a day (assuming your entire company is working through the cloud interface and not a single person already has a local checkout).

Lots of companies put their entire databases in AWS - owned by a company that's already evil, no speculation required - where the egress charges make offsite backups a challenge. And western civilization hasn't collapsed yet.

If GitHub changes its policies one day or shuts down the service... just push to a new repo and switch over to regular workstations.
The principal who did that in Atlanta was black.
I love normalizing emoji use. Its actually harmonizing the depictions because they can be wildly different across platforms, and until that occurs its part of an ongoing gag where its funny to imagine how messed up they render on someone's phone.

Like, imagine its only Gen X that complains about this, and they are the equally out of touch blackberry user whose device renders all the emojis in some messed up but hilarious way, then its a great way to make fun of them without saying anything and just keep bombarding them with an incommunicable internet, while the rest of us dont mind and some of us are also in on the joke.
Wish there were a "Like" button! haha
I don't recommend Apple's keychain. It's smart enough to track usernames and passwords and feels very satisfying to use on an iPhone, but doesn't capture some other parts of authentication. This includes security questions, OTP, capturing notes around how sign-ins can be weird (HSAs and other portals rife with redirects), and non-iOS devices (as well as non-safari browsers).

Bitwarden is fantastic. I pay for the OTP features, though I feel keeping the codes alongside my passwords weakens my security posture. That's my choice, though.
not op, but amazon uses "cloud desktops" with SSH access company wide, and no one really has latency issues there. So its def something supported at some companies...

I don't know how many people would want to use graphic applications over the network however, seems like it would be janky
How the Far Right Use Memes to Recruit
Vaccines work really well, so well that we can show benefit even when confounded by hundreds of other variables both known and unknown. Obviously the universal mask mandate has not had such a strong success and it becomes really hard/impossible to measure effectiveness in the face of all these other confounding variables.

Edit: there is a lot of pseudo-science on all these matters motivated by biases.
Your position has been examined to death already: https://existentialcomics.com/comic/234
>The potential for messing up on the way is simply enormous. Remember Silk Road? Guy got v& because of a stackoverflow post.

Ulbricht messed up in a lot of different ways. That was just one of the many. It wasn't just one little slip-up; he had truly awful OPSEC. (And pretty poor technical skills in general, it seems, based on his SO question [1] and various other things.) Even if the SO question potentially may have been found through parallel construction (no way to ever know), there were so many different parallel paths investigators could've taken that his downfall was almost certainly inevitable.

But your overall point is definitely correct. The oft-quoted attacker's advantage in information (and other) security is that the defenders need to "win" every time and the attackers only need to "win" once. Try 100 different exploit attempts; if the defenders prevent 99 of them, they lose.

This gets flipped when it comes to OPSEC. The attacker needs to "win" every OPSEC battle and the investigators often only need to "win" once. If they find a single mistake, they may be able to tug on a thread that leads to the attacker's likely affiliation and identity. And the more sophisticated and complex the attack, the more surface area there is for mistakes, just like how more complex systems/organizations have larger surface areas for attackers to target.

[1] https://stackoverflow.com/questions/15445285/how-can-i-conne...
Shipping WebView2 runtime "in-box" in Windows is supposed to start with Windows 10 21H2 and Windows 11. I believe soon after both release (Chromium) Edge will also start shipping it by default down to previous Windows 10 versions still in security support.
It’s hard to listen to the opinion of someone who can’t even spell Ethereum.
The "What are you still doing here? It's over! Go home!" part. :D
I moved to Bitwarden from Lastpass also, and I'm definitely happy for the most part.

The chrome extension leaves a tiny bit to be desired, but definitely still usable:

* Not as good about determining correct sign-in URL and lots of times will send me through the auth redirect from registration

* Launching sites without mouse isn't possible (shortcut exists to open extension but can't select site to launch it using arrow keys, for instance)

* Button locations aren't consistent between search view and opening it on a site you have a password on

Definitely still the best for me though. It's frustrating, though, that I don't feel like the paid plans really give me anything useful, so I'd be paying basically just to support the product (which I'm happy to do!). It's a weird spot for sure, I feel like table-stakes for a free password product is infinite devices + usable browser extension + phone apps + password generation. But figuring out what to add on top of that is always either directed at businesses or families, or things I don't care about like 2FA or an authenticator. I want to support you, damnit!
That makes me a fool around :D .. I'm completely unaware of KM ... as you said, I'm looking for more hardware based solution, that has for example multiple bluetooth devices (say 3x or 5x) on KM so that it can be actively connected to the multiple PCs and can switch seamlessly.
It's all fun and games until big corps start adopting cloud-everything approach. There will be no devices left, only thin clients connecting to someones cloud and logging everything you see and do.

Imagine your employer watching your every keystroke and getting instant performance metrics. Then some OverseerAI reporting that you didn't type for 10 minutes already, sending a notification to your boss.
As long as 1Password keeps their policy of not selling usage data to 3rd parties like LastPass does, I’ll keep using this service

Self hosting would be nice to keep though. Been thinking about setting up a server to hold all that stuff
My experience is the opposite for all of these points. I have no issues with auto-fill, I haven’t run into issues with duplicates for a while, unlocking doesn’t take forever anywhere. I don’t know about the move to trash button, it could be moved but I don’t recall it being that hard to get to.

It’s really interesting to hear these differences in experience for the same product. I wonder why it’s happening? Gotta be something going on there.
If you can’t tell the difference it doesn’t matter and I wouldn’t worry about it.

Electron apps typically don’t work for me because they don’t integrate with the rest of the system cleanly, and so once you stray off the designers’ happy path it becomes clumsy to use the app. This isn’t an esthetic or ideological argument; simply for my usage an electron app can rarely be as convenient as a native app on the Mac. Things like input integration, system service integration, selection, and responsiveness are much harder to do when you are fighting the electron abstraction, so no wonder devs leave those things out.
In all the apartments I have lived (in the southern states), there was an AC that also works in reverse, it is called HVAC. However, in northern states, gas heating is cheaper than HVAC in the winter.
What has the history of capitalistic rulers been? Mass genocides, undermining the sovereignty of other countries, prolonged wars that rob from the citizens, nuclear destruction.

IMHO completely worth fighting against, even with imperfect measures.

Also, the Chileans didn't stop it. The far-right in Chile, aided by the right-wing CIA, overthrew a democratic government and installed a military junta for decades. You are straight up fascist scum if you think that was justified.
I keep far more than just passwords: family SSNs, software license keys, license plate numbers and VINs, meatspace passcodes, etc.
Axidraw consumes SVG directly via an Inkscape extension and has an API to control at a lower level (presumably the Inkscape extension converts to the lower level API). Axidraw doesn’t use GCode from what I understand.

There are a plethora of competitors/clones which do use GCode, and which require something like T2Laser to convert SVG to GCode.

The AxiDraw firmware and extension are open source though: https://github.com/evil-mad/axidraw
They also provide lots of single line fonts.

A lot of users also utilize something like https://github.com/abey79/vpype to do post processing.
This has a lot of useful resources: https://github.com/beardicus/awesome-plotters#software
My question had nothing to do with the severity of COVID.

It was directed at those that wear a mask because they're helping to save lives.

Did you wore a mask prior to COVID? Will you continue to wear a mask, post COVID, to help save lives?
The argument they're making in this longwinded post applies to most software today. Standalone licenses made sense when your life revolved around one PC saving data to its own hard drive. Today, if you want that, there are great free/DIY options.
This (quick to provision vms of any size you want with your code base etc) for jupyter sounds like a colab and mode killer...the way both of those make it hard to actually check in code leads to a ton of copy and paste code etc. You all should really advertise this capability.
By any mean, please feel free to reach out to me at mailan@padka.com if you want to share your thought,I will be happy to hear from you!
It has a built in 2FA generator.

It supports many more kinds of secure data than passwords and credit cards. It has specific entry types for bank accounts, passports, reward programs, software licenses, and so on.

It also has lots of built in analysis tools for determining:
- which of your passwords are reused, weak, or present in online password dumps
- what websites can have 2FA enabled on them

As well as the ability to store entire documents in vaults.

Been using 1Password since 2008 and it's the only software of its kind I recommend to anyone on any platform.
yeah, apple recently open sourced it.
https://apple.github.io/foundationdb/index.html
Uhm... each of those tweets links to the same article that states they use Electron:

Finally we bundled everything using Electron to allow us to integrate deeply with the operating system.
I love Saxi. Makes it much easier to run a plot.

Even not having to have my computer plugged into the AxiDraw and arrange my room a certain way is a win.
Hopefully we will find a way to spam every single Chinese govt apparatik with Pooh Bear memes.
Refugees and skilled migration are different things.
Does anyone have experience migrating from 1Password to an alternative? Hoping there’s an export data from 1Password solution at least.
Thanks, I’ve been fine paying a subscription but I don’t like the trends.
unless you've used it, then you'd know that its browser backing is nothing to frown at since its a great piece of software that works great.
eh let it suffer

even my (and many devs') "suffering" work is worth good money - or at least our employers continue to think so :)
"deliberately" is the key word. Brevity for the sake of expeditiousness or practicality is different than brevity for the sake of deception or ulterior motive.
Looks great, congrats! I’m curious, how do you guys handle VAT taxes? Also, I didn’t know about the .so TLD; did you choose it because the .com alternative was already taken or because of other reasons?
Ask HN: What is it like working in tech internationally?
I think a lot of us in the Bay have dreams of working in tech outside of the country. Living in Paris, or Bangkok or anywhere that isn’t the bay.

What is it actually like to work in tech outside of the country?

What is it like in your country? How do you feel about the experience?
Ethereum based stablecoins and ERC-20
https://1password.com/security/

It's basically E2EE (where the encryption key is your master password + secret key, which looks similar to a guid), with the caveat being that 1password is still accessible via the browser so you do have to trust they're not compromising you by saving your secret key + master password separately (that is, unless you're auditing the login page every time you open it).
>That's why I use a utility called Shreddit

I had to search for it, and assume that you are referring to this utility: http://apps.palmtronix.com/shreddit/android/

It makes claims of zeroing out the local storage, but does not seem to do anything with regard to erasing your social media footprint. I would like your recommendation on scripts which comprehensively delete posts/history on Reddit, Twitter et al. and make them unrecoverable.

edit: I just noticed a post by @randomuser87178 which probably answers my query
Discussion from yesterday: https://news.ycombinator.com/item?id=28132830
Maybe they should fix their community “standards” first. Rampant transphobia is acceptable to them, but god forbid you call someone a boomer
Unless they remove support for local vaults from their mobile apps, you can continue using the classic self-synced method. I sync my 1Password vault across Android and Windows using SyncThing, using 1Password 7 and the legacy browser extension in Firefox. I don't get the inline 1Password prompt in password inputs, but that's the only disadvantage (Ctrl+Alt+\ brings up the password selector anywhere in the OS, not just the browser).

In fact, if you're okay with only editing/creating password entries on your phone, you don't even need to pay for the desktop app, because you can use it in read-only mode. The Android app has no limitation to editing local vaults, and it's pretty rare for me to actually have to set up new accounts these days, so I'm fine doing it on my phone. I considered paying for 1Password X (their online offering), but it's simply not worth $45 per year for that minor convenience. I can't complain at all, because I use 1Password completely for free.
Actually a sensitive product is exactly where this does NOT make sense. No matter how good their security is with their cloud version it will still be less secure than having a vault locally on your disk. That is a fact.

Subscription services to me are only justified if they are providing a SERVICE which they are with the web version and ability to sync through their own servers, however, using a local version with your own vault can be done without any service at all.

So to me this looks like them intentionally crippling their own software in order to force people into paying a subscription fee that is not necessary. They already hide the ability to purchase a standalone license for 1Password 7 trying to get people to pay the subscriptions so this is the next logical step.
I don't see any inherent moral issue with writing an employment contract that way. Of course as a developer, I would heavily discount the value of options designed to work like that - which Ethereum miners should have been doing this whole time.

Software development is a pretty free market as far as labor markets go. If a developer doesn't like the terms of the contract they're offered, they can bail and work somewhere else.

With Ethereum, their "Minimum Necessary Issuance" social contract has been very clear in the docs since the beginning of the project.
There have been copy-protected vinyl records.[1] Seeburg, the jukebox company, made some for their background music system. Recorded by Seeburg's own orchestra, to avoid copyright problems. Nonstandard groove width (.5 mil stylus), nonstandard hole diameter (2 inch), nonstandard speed (16 2/3 RPM), nonstandard outside diameter (9 inch), intended to be playable only on a special Seeburg record changer. They didn't bother to register copyright, back when copyright had to be registered.

So some people have obtained the correct record stylus for these, made a 2 inch hole filler, set a modern turntable to the correct speed, and transcribed these records. If you like 1950s elevator music, it's available.

[1] https://en.wikipedia.org/wiki/Seeburg_1000
What's the main point of Bitwarden or competitors over traditional password managers such as KeePassXC? Better autofill features?
> Google has problems money can't solve as a company.

Right. Such as their entire business model being "hire smart people to get other people to click on ads."
No. They have a selection bias because they're pretty anti-leftist but that's different than a purportedly open-platform (like youtube) selectively removing videos from one side of the political spectrum for whatever excuse they can muster.
Well it’s your lucky day! If you refuse these cookies you don’t get that content, that’s the whole point.
One is vault sharing. Most companies I've worked with will give me a corporate 1Password vault that snaps nearly into my system with no conflicts.

Another is MFA support, native keychain doesn't support that at all.
I might just hold out with the 1password 7 and dropbox for as long as I can...
New developers will get in using vscode web ide, and have no easy way to switch.
I'm OK with the graphics though (installed a graphics upgrade). My main issue is that I simply don't sync with Lord British's world view. My share of RPG is heavily skewed towards Computer DND games.
Maybe that'll be an use for a proper AI. Maybe a human cannot take a dispassionate look at humanity and we'd need an eye with an outside perspective. We are afterall made out of meat.
Do you have a link to read more about the loss of iCloud sync?

If that's accurate, goodbye 1password. I was irked (but understood) the move into a subscription model, but this step would make no sense from a personal sec-ops perspective. While I generally am not a fan of iCloud (and how it forces certain things to sync onto devices), I really do NOT want yet another "cloud" to store incredibly sensitive info like password vaults.
What was missing for me in the article is the fact that they don't call a function by name AND by validation of hash.

Instead, only by hash(<method name string> + "(bytes,bytes,uint64)").slice(0,10) which is brute-force-able.

Still, this sounds just like one of my worst nightmares. A code in production having bugs that will lose all my money to an untraceable environment (the tornado chain).
I don't know what specifically you're referring to. A lot of companies make bold claims about wanting to "change the world" and whatnot. I'm not aware of any public Facebook policy where they acknowledge wanting to take over all governments, control all thought and communication, and act as the sole arbiters of truth and morality for society.
Uh, i guess you're talking about Enpass?

I've switched from 1Password to Enpass as well, however my experience is a bit... mixed...

Not sure i'd fault something specific, however the overall polish 1Password has still isn't there.

I'm using Enpass on Linux, Mac and iOS - my SO still has an 1Password 4.something install (i think) on her Windows computer.

If that one is going to somehow "expire", i'm going to selfhost Bitwarden probably...

Edit: ok, wow - there really is an App called Elpass - TIL...

Edit2: sure, bring on the downvotes :S i guess no one ever naively assumed that 2 letters almost next to each other could have been a typo.

To further explain why i assumed it was a typo is because i've never, ever heard of Elpass before - all the while being a user of password managers for years. Even more so when researching my options about 2 years ago before switching to Enpass and never heard of Elpass being mentioned, not even once.

I suppose it is pretty new-ish then? Or a hidden gem? Or gosh both?
Worked. Past tense.
I feel I'm swimming against the current of contemporary dev practices, but I actually believe trying to run as much of your apps and development locally is important. Not exclusively, but at least from time to time I think shutting off your network connection and seeing what happens is important. It flushes out all sorts of assumptions, especially around dependencies, you may not have realized you had. If you at least occasionally code in a local, non-networked environment, I think you end up with more robust code.