skysight-inc/HackerNews huggingface dataset:
Second vote for Bitwarden.

Lastpass is a bucket of ass.

They've had security bugs in their browser extension before, but it is almost required to use it - the webapp works horribly without it. My least-used browser gets that extension, so it isn't running most of the time, at least. And with it, the UI is still terrible. The app is just awkward and poorly done.

The one good thing I can say is the user/group model is reasonably implemented.
Ask HN: How to become a ridiculously good back end staff eng?
A bit of a click-baity title, apologies. I'm a senior eng and want to really push myself to better levels. My non-tech skills (comms, collab, leading) are one of my strengths and I'm constantly trying to make them better. I constantly keep feeling that I don't know enough tech stuff, there's a ridiculous amount to learn and foundational blind spots and holes that keep cropping up.

One of the questions I try to ask myself is, if I joined a new team or company, what skills would I need to really help the team succeed quickly and effectively.

A lot of ya'll have been around the block a lot, and either been or worked with such folks. Your insights would be super appreciated
Other than an off the cuff insult, what do you mean by that?
Fragile in the sense that it might take you hours or days to get it all set up just right. It would be a disruption, like any IT problem, but it's not going to threaten an entire business.
I'd be ok with paying an annual fee for the app.

What I have zero interest in is increasing my attack surface solely for their bottom line.

I'm also increasingly uncomfortable with the company handling my passwords engaging in the sort of spin and dark patters we've seen from AgileBits in the past few years.
Between this and the Electron news, is Troy Hunt (haveibeenpwned creator) still going to endorse 1Password as his recommended password manager?
Next "feature".

We'll scan your passwords so we know you're know a terrorist

wink wink
Since I don't want to be part of Chrome marketing force, that is a very good thing to do.

Either go native or Web standards.
> Many of his followers still believe he will be reinstated as POTUS, allowing him the bullhorn of his Twitter account would be unethical as it would make it easier to galvanize these folks into action again.

That's quite ridiculous. Twitter was more than happy to back open rebellion in other countries, such as those in the Middle East. It comes down to a matter of what is Twitter (and Facebook). Are they just platforms, or are they in the business of publihing certain opinions.
Subscription based licensing is mostly rent-seeking.

The cloud storage, compute, and egress for a password manager is fractions of a penny per year per user.

Yes, engineering and upkeep and new features costs money. If those features are truly valuable, then the market would bear paying an additional one-time fee, just as photoshop 8 had to be better than photoshop 7 in some way to justify the purchase.*

But what new features could a mature password manager possibly have? Support for newer version of IOS and Android is the only must-have that comes to mind.

* File format changes not-withstanding.
Mosh sounds interesting! Thanks for mentioning!
You can also enter a random email. They don't verify it.
LA-Based Nanotech Energy Raises $64M to Make Battery Charging Faster and Cheaper
Well `RecordWildcards` has been around for 14 years... but even without it instead of `{..}` you'd just have `_`s. The main thing that is different is that your Kind example had nested case statements while your Haskell example tried to match everything on one shot, which makes for a non-equivalent comparison, and you purposefully repeated field names on both sides of `->`, which is not necessary even in vanilla Haskell when you work with records.

> Not sure how that could work, though. Idris had an interesting syntax, but IIRC it wasn't general.

RE Idris I assume you're talking about idiom brackets for applicatives? The general syntax is given in something like https://github.com/monadless/monadless. The idea is to basically take async-await syntax and generalize it to any monad.

So e.g. your `Maybe` example (using `!` for the equivalent of `await` for concision) would look like

Maybe {
x = !list[0]
y = !list[1]
z = !list[2]
x + y + z
}

but because it doesn't have to be in A-normal form anymore you can compress it all into a single line.

Maybe {
!list[0] + !list[1] + !list[2]
}

So you can take any normal code you have and put in a monadic context simply by inserting brackets around the whole thing and then sprinkling in `!`s as necessary.

EDIT: Or to think of it another way, just move the `get` from the left-hand side of `=` to the right-hand side. I'd recommend renaming it to something to indicate that this is a syntactic transformation, rather than a normal function (which is why I like something like `!` or anything else that has a symbol in it to indicate this is essentially a macro).
It's about the supervisory relationship, not simply the coworker relationship.
How about the guys trying to make a quick buck by rent-seeking in a system based on massive waste of people's time (all the social media basically)?
Bitwarden and iCloud Keychain user here. I'm looking forward to the 2FA improvements in this year's macOS. It'll mean I could, in theory, mostly ditch Bitwarden as that's the big use case there for me.

You can create a shortcut in the iOS shortcuts app to open the Passwords area of Settings via an icon on your Home Screen. Just open the following URL in the shortcut:

prefs:root=PASSWORDS

Best tip I have for you around iCloud Keychain right there.
So you agree they should be at work instead of on vacation.
These SV of X articles always talk about the technology infrastructure, the venture capital, the universities, the mega-corps, the number of start-ups, etc. but I have yet to see one that mentions any sort of ethnic diversity as a key ingredient. Stockholm might be the Silicon Valley of Sweden, but unless it is attracting (and keeping!) global talent, it will never punch above its weight and compete with the actual Silicon Valley.
I'm not a Mac user these days, what OS features will it be missing now?
This would probably have the opposite effect of what you're looking for. You'd penalize non-targeted ads, which require a larger spend to be effective.

Personalized ads are ultimately cheaper than non-targeted ads because you don't need to buy as many impressions to hit the audience that you're looking for.
How is this solved by buying a stablecoin? It’s pegged to 1 USD regardless of inflation.
> The amendment would also limit the tax credit to EVs that cost less than $40,000.

Also worth clarifying that this would apply to the existing tax credit that Tesla and GM don't get anyway, rather than the new ones that have been proposed.
Being able to act without fully processing trauma is a deeply important evolutionary adaptation. Our brains will compartmentalize things to help us cope and survive and continue on, because our ancestors who didn't do it automatically were more likely to die. That's not to say we all react the same to trauma, but a common reaction is one of tiny adjustments and a slow dawning of the fullness of the experience.

We also are surrounded by people who are well meaning but make mistakes and our socialization prepares us to be forgiving of them. To give time for repair. Abusers use those social structures (consciously or unconsciously) to give themselves space to do what they like. It's a big move to fully separate yourself from someone, and abusers see that if they can make it more comfortable to simply live further away from them, that they can continue without changing or facing the damage they have caused.

I really encourage anyone who doesn't understand why assault or abuse reactions look this way to imagine what actions they might take if their current boss were to suddenly grab their genitals without warning or permission. There's an element of the personal violation that, I think, is difficult to appreciate - but the practicalities of addressing it are, I think, obvious once you start to imagine it. Who would you tell? What consequences would you suffer? How outlandish might you seem to peers, other managers, etc? Personal violations like this are deeply treacherous and the people who commit them take advantage of that fact to keep doing it.
If spinning up/down is fast+smooth (e.g., no reconfiguring stuff each time), you could drop that down to ~40h/week taking you to under $500/month. Still pricey, but combined with not having to pay the ~70% markup another commenter mentioned, it could be under $2,000/year.
Your bank is already a third party with its hands on your financial information, likely stored "in the cloud."

Check out Chase's privacy policy as an example:

https://www.chase.com/digital/resources/privacy-security/pri...

A number of information sharing activities cannot be limited. This is typical of any bank or financial institution. Your bank has its own vendors, many of them are themselves SaaS and cloud hosted!

Even large, sophisticated banks can be hacked:

https://www.nytimes.com/2019/07/30/business/bank-hacks-capit...

My point isn't to say "Why care at all? Just open the floodgates!" Instead, my point here is that trust and security in our society is only as good as the people and institutions that back them up. We don't use bank vault doors for our front doors just because we have the knowledge that anyone with simple tools can defeat a home lock.

Therefore, I think that the choice of more inconvenient solutions made just to avoid some nebulous what-if scenarios involving privacy is often (but not always) the wrong way to go.
You can't use filecoin (or bitcoin, or eth or anything else really) without buying some too. That's not a structural problem.

If you fill disks full of junk, you're increasing the write wear on those disks. Despite the rumors, GPUs don't just wear out.
100% same. I've been a happy subscriber for years now, and recently switched to the Family plan to try and get my parents to start taking security a bit more seriously.
It opened for me in firefox on mac, but it broke the back button
I guess that I am claiming that using Coq, Idris, Agda, etc, (in a setting where we are actually using them to prove correctness properties that are halting equivalent), is itself a particular way of working in a language that is not Turing Complete.

As an aside, "Turing complete programs" seems like a category error?
If you use ‘vi’, in insert mode, it’s CTRL-V then tap escape button. Followed by [31m or whatever code.
The lost tablet and the secret documents
Finally, a Flying Car SPAC
Glad to see privacy being made into another black and white issue people froth at the mouth over.

How soon before we declare a war on it? We need to spend trillions to fix it like we did WMD, terrorism, drugs and communism.

Since we're on HackerNews, I also can't wait for millions to be poured into dozens of blockchain_crypto_privacy_big_data_new_company.
Anecdata, but I've not experienced a single one of the issues you're seeing, and I use it across 2 Macs an iPhone and an iPad dozens of times a day.
But make sure to do it in a new tab, because it breaks the back button
Correct me if I’m wrong, but membrane based air dehumidification seems to require a lot less energy than other approaches. https://www.researchgate.net/publication/270721905_A_review_...
It opens a free, vscode-like editor in the web where you can make quick changes to code
yeah the interface is crap compared to 1password but i do find a bit of comfort that even though it's not the best interface it's fully opensource unlike 1password.
> Yet for all our efforts, local development remained brittle. Any number of seemingly innocuous changes could render a local environment useless and, worse still, require hours of valuable development time to recover. Mysterious breakage was so common and catastrophic that we’d codified an option for our bootstrap script: --nuke-from-orbit.

I know not everyone wants to run Linux or FreeBSD, but this is one area where ZFS shines for me. I take regular snapshots on a cron schedule and also whenever making system changes. If I manage to get the system into an unexpected state, I just rollback a snapshot and optionally reboot. Save for the potential reboot, it's an instantaneous operation. I don't need to spend hours restoring from backup.

Using the built-in ZFS support in Ubuntu, you get a nice split between system and user data. You can roll one back without the other. Snapshots are created on every mutating apt operation.
I've been using 1Password for 3 years now. Been paying $35/year and I'm with you on this one. I really like their service. The integrations are great. I rarely use their Mac app. I use my Apple Watch to unlock 1Password in my browser. That for me, is a game changer. It's such a seamless experience. I'm a happy customer and I love the service.
When you write "there's enough empty homes to house every homeless person," the only possible interpretation I can come up with is that you're saying that capitalism has provided enough housing already, and that we should use those existing houses.

Is there another interpretation that you can provide me, that I'm not understanding? Because I see that claim repeated all over the place, and I only see it in response to the idea that we should build homes where people want them, as a reason for not building homes.

I would be greatly relieved if there was an interpretation of that statement which was not just a defense of the status quo.
Sharing cross platform. Also I share some vaults (with my kids, and also with my aging parents).

But this is such a step backwards it doesn’t seem worth continuing with 1Password, after more than a dozen years.
I remember warez groups distributing .ans files as their brand.
Also, TheDraw was the preeminent ansi tool back in the day.
Thanet residents given chance to work from office on Margate beach
If they beat lxml it is pretty impressive. Too bad that they don't support xpath
But what's insane is that the "apple is more secure" billboards are currently up around my city.
Just because a user can't tell the difference doesn't mean we shouldn't call out the fact that it is. Electron apps use way too many system resources. For lower powered devices, this becomes an issue.
You obviously can't expect people to continue social distancing. It's not sustainable, and harms mental health.
I really don't want to move away from 1Password but they're really forcing my departure here.
I wonder what Google uses for Spanner/Firebase.
Its just a matter of time before the browser plugins stop working. Otherwise, the software should continue to work.
they are losing me as a customer because of that

I don't think they care - they are chasing the enterprise market who doesn't care how well the desktop client works as long as it integrates with their enterprise SSO solution and gives them the audit logs they need.

My company uses 1Password, and their license includes a free 1Password family license for employees.
In this thread you've repeatedly demonstrated you're not willing to consider other peoples concerns about it then declared you're "running out of patience" with people who aren't on the same page as you.

That to me suggests you've made that position part and parcel of your identity.
I stand behind the idea that forcing everything through SSH to a VM they control or over HTTPS to a web app they control has meaningful security advantages. Of course you can craft a hostile client for any service, but it adds a barrier (and a place to run countermeasures) that wasn't there before. It definitely lessens the likelihood of getting caught up by some dumb untargeted drive-by malware, at least.

Also, do keep in mind the target audience for Microsoft's enterprise products - if something lets you check off a bunch of boxes on some government or industry compliance checklist, then that thing has value to those customers, regardless of any actual security benefit.
I'm using the Windows beta, and there are 3 background process. One is using 4.5mb of RAM, one 32, and one 43.9.
Amazon and SpaceX were not profitable when started and remained unprofitable for many years.

Our collective heart is in the right place. I have my own plans to do something about it but I am not in the same position as say Elon Musk for example. Not yet anyway ;)

I am in tech however. And I believe passionately that tech can solve this problem. Even if it is just a symptom of global climate change.

I think we must start solving these problems fast and with novel approaches. The same old tired routine isn't working. We've kicked the can enough down the road with government and fire prevention. New ideas and methods are needed and needed fast.
VS Code would like a word with you.
I love 1Password but the subscription-only path doesn't sit well with me. They're intentionally removing key features so they can justify providing a service that I can do myself.

I'm increasingly sick of good standalone software suddenly moving to this model. They are a business, I get it.

However how many subscriptions are we going to have to end up with?

I get it with Slack, Dropbox, Github, etc as they all started with infrastructure to run. But 1Password (and Adobe and others) are pushing profits far far above their users. It's a shame.
Not necessarily, you can have packages and automatic dependencies using yum or apt?
Crypto is almost always implemented as a library, and probably ultimately as a kernel module in most cases. There is no reason at all you should need to call out to a remote service to encrypt and decrypt data. That wouldn't even make sense, as it would need to be encrypted before traversing the network to be of any use. And there are plenty of commodity chat applications like Mattermost and RocketChat that you can self-host, again not necessarily needing to use someone else's cloud service but also not need to roll your own application.
Twitter: I want to give a bit more depth to Chirp, our new typeface
Cracking Kubernetes Node Proxy (a.k.a. kube-proxy)
You are technically correct. I could have been more precise in my wording. As you say, though, it doesn't change my (or your) conclusion.
Another problem-- probably a much bigger one-- is the huge amount of mercury fulminate used in munitions throughout much of the 20th century. It's much more soluble and dispersible than native mercury, and there's a lot more of it in weapons dumps.
I hate Electron as much as the next guy, but man have I been enjoying Obsidian. I mention this only because it has changed the way I write notes and manage them and I've been through the path of Evernote > Apple Notes > Bear > Obsidian.
Without the keyboard shortcut you can just change any `github.com` link to `github.dev`

https://twitter.com/code/status/1425503238145650691
I have seen Imposter Syndrome refereed to as "Fragile Narcissism" which only increases the discomfort.
Your basis for the conclusion that Stockholm is not "attracting and keeping global talent" is that some random person once was very rude to you? Or is this a general experience you've heard from other people?
It's wonderful that code written for Windows 3.1 still works well today
This is great advice. I really appreciate your comment! Thank you so much!
If it‘s worth the effort to you, you can try to amend the password rules here: https://github.com/apple/password-manager-resources/blob/mai...
As long as the Google form doesn't ask for emails or names, I'd be interested.
do you have a link to anything about it? I'd love to learn more.
>With Apple and Google continuing to make changes via their browsers and operating systems

Firefox not even mentioned
Can we start talking in terms of "Environmental Impact"?

Work out the energy use per hour of the old vs the new system * number of installs. See how much extra millions of tons of carbon 1password is spewing into the air because of their technology change!

Reminder: when a company chooses a technology stack that suits them (the developers of the software) and NOT the end users, then things tend to go badly.
Firefox worked fine for me. On linux too.
It's working great so far!
Natural selection within a group of animals. Male cats can kill kittens of other cats, so their genes have better chances to exist in the future.
Windows that come preinstalled from a hardware vendor have OEM lisc.

If you buy windows that isn't OEM the keys are now bound to your email address (more accurately your Microsoft account) those version of windows are easily transportable between hardware.

People often make the mistake of purchasing OEM windows because of the reduced cost but fail to realize they are hardware bound at registration.
Whatever cloud dev environment you use will shove productivity metrics up your manager's ass.

E.g. Employee A ran the tests 4 times an hour whereas employee B ran the tests twice an hour.
> Why do you think it’s going to be slower

Have you ever used an electron app? Typically slow and laggy. Worse, your workflow is typically slower since the user don’t get any the advantages of native integration.
On Polio "The fact that the virus can only survive in humans (and no other animals) makes it possible to completely eradicate the disease from the world – if it was a virus with an animal host such as influenza (birds) or tuberculosis (cows) that occasionally mutates to attack humans, polio could only ever be controlled but not eradicated."

Covid transmits in animals. CDC says based on current data, transmission to human is low (but not impossible) but more studies are needed. The fact they can get it is already not on the same scale as smallpox or polio.

https://www.cdc.gov/coronavirus/2019-ncov/daily-life-coping/...
sorry, quick correction. It was dashlane.
https://blog.dashlane.com/virginia-tech-passwords-study/
Pro tip for Roblox competitors: Make a product that children really, really like, and make sure some of those children are those of executive leadership at the company you'd like to influence.

You'll get exceptions too, and you don't even have to be a unicorn (Roblox got an exception well before that, after initially getting banned from the App Store).
Oh, ok, then I was ignorant about {..} - sorry! You still need to rename every field you need, though. So Haskell is, at best, comparably verbose, and, at worst, much more. It also kind of encourage one-letter variable names.

About the monadic syntax, that is really clever, and makes a lot of sense to me. I want this implemented, now. Will keep that in mind. (And accept PRs!)
It's not the schema matching your model, it's the result of any query.

How many different types do you need to represent the result of all possible projections on a single 10 attribute relation? Now join that to another 10 attribute relation, how many types to represent all possible projections of a single join between two relations? And Maybe is not the answer, Maybe is a lie. The data is either part of the result set or it is not based on the query.
Sorry, but where else other than Desktop or Mobile are there to view data?
What a shame, I liked 1Password in particular because of the high quality of their native apps.
Some past related threads:

Developing Online with GitHub Codespace - https://news.ycombinator.com/item?id=24565606 - Sept 2020 (54 comments)

First Impressions of GitHub Codespaces - https://news.ycombinator.com/item?id=24339118 - Sept 2020 (93 comments)

GitHub Codespaces - https://news.ycombinator.com/item?id=23092904 - May 2020 (601 comments)
I've been using it via subscription for some time. Really happy with it.

To be honest, I didn't know it supported local vaults.
Why do Cloud costs go Haywire?
Most organizations face larger than estimated bills within months of cloud adoption. From our observations in the trenches, top reasons why the Cloud costs go haywire:

https://cloudoptimize.io/3-reasons-why-cloud-costs-go-haywire/