skysight-inc/HackerNews huggingface dataset:
While this is accurate, a more concerning secondary impact is the increased deposit. In Australia specifically, house prices are soaring. The most in-demand markets increases are currently ~$1200 per day [1]. For many people their home is a more 'productive' than they are, greatly outpacing their own earning potential. Those who already have wealth can buy in, or continue to buy in and leverage themselves into the market as it skyrockets. Anyone not in this position is left to watch as the ladder disappears into the clouds.

Shelter has changed from a base need to a commodity that's traded in a rigged system and the societal implications of this are frankly terrifying.

[1] https://www.abc.net.au/news/2021-08-26/fact-check-are-house-...
Actually this is sort of a thing. For example the polio vaccine has a killed vaccine (analogous to spikes) and a live attenuated vaccine. The live vaccine has higher risk of side effects but provides more robust immunity.

Vaccine schedules can be designed to give the killed version first for some immunity followed by live vaccine to provide more robust immunity.

None of the COVID vaccines so far are live attenuated vaccines as far as I'm aware.
I presumed you were using “blockchain” as a short hand for “distributed fault tolerant system that solves Byzantine generals problem.” If not then I agree blockchains in the literal sense probably are a transitional tech.
> Power users are a small share of users of knowledge management software, so it is difficult to build a system only for them

In practice, knowledge management at companies is a specialization. There are <5% of employees that go around and document/organize things for everyone else. Most employees are passively consuming information and information hierarchies built by someone else.

If you're not building tools for those power users, you're not building for creating and organizing content in your system at all.

As an example of how nuts this is, managers at my company regularly try out various search terms, create index documents, and do "internal SEO" to optimize how other employees will discover documents. This isn't a byzantine environment like public web search is, why do I have to hack around the wiki's default notion of page relevance?
For the same reason most vaccines require two doses. And for the same reason some countries are planning or doing booster shots.

Antibody levels drop rapidly after an infection, if they persist at all.

Getting a vaccination after infection re-triggers the immune system and makes antibodies more likely to persist for longer.

Reading up on this many months ago it seemed likely that natural infection plus a single vaccination would be equivalent to two vaccine shots.

There was research about only needing to give one shot of vaccines like AstraZeneca to people with previous infection. It was considered too complex to manage, and the research as to efficacy wasn’t finalised, so they stuck with two.

Having had Covid, plus two shots of something like AstraZeneca is presumably somewhere in the region of a standard two-shot-plus-booster campaign.

I don’t really understand much of this paper, but given other comments it seems to be a reasonable idea.
There do exist multi-year and even multi-decade PPAs, but an enormous amount of power is bought and sold in the day-ahead and even 15-minute spot markets. The article we're commenting on actually has a graph of prices in the day-ahead market; maybe you missed that.
Because no one knows about it. But also, looking at their list of servers, the majority is offline. Assuming this is because any person can run one, it's probably the reason.

On top of the above, the likes of Google are enforcing their DNS servers. For example, I run AdGuard Home with it's DHCP functionality. I am unable to rely on the DHCP settings on my Android phone because Google forces the first DNS server to be 8.8.8.8 with (as far as I can tell) no way to disable this.

I think at least for the foreseeable future the solution is to run Unbound and stop relying on DNS resolvers combined with a firewall that redirects all DNS records AdGuard Home/PiHole. This is obviously not a solution to the general public.
I am very sorry for the shameless plug, but if you look for more amazing reads on Wikipedia, I built a little site which aggregates and ranks interesting Wikipedia artices. [0]

For example it's the reason I read this article.

[0] https://www.mostdiscussed.com/
I recently bought a second Yubikey and wanted to go through my accounts to add it as a backup; you know, have one locked up so that if I ever break my primary, I'm not SOL.

Not only do only about half a dozen services I use actively support hardware security keys, even fewer support enrolling more than one. Worse, many only support SMS 2FA as the backup option, which I just can't abide.
Even blog comment sections are overrun with spam links.
Judging by the other comments in this thread and the upvotes to my original comment, many people seem to agree with me also.

you are an unpleasant person to talk with
Honestly, as I've now lived in 9 different cities all across the US, what I've learned is that the US is wildly heterogeneous and generalizations about it are therefore rarely useful or resonant.
Unless you have a source for that I'm highly doubtful on your last statement.
I am surprised by the lack of corporate sponsors [1].

1. https://www.openssl.org/support/acks.html
https://archive.is/PwfVx
Read actively.

* If you have a working hypothesis as to what the code is doing, state that hypothesis as a comment.

* If you think you know what it is doing, making that comment executable. ie. put in an assert. Better an assert punches you in the face than you rely on an incorrect analysis.

* If you don't know WTF happening, or not sure, turn that comment into observability, add logging or something.

* Make microcommits using rebase or the like, add observability, add asserts, add unit tests, add refactorings, make behavioural changes.

* Do only one thing per commit, makes review and test much easier.
It'd be continued progression of the services that are already on offer[1]. And I don't see aus enacting any legislation to curb this sort off cooperate surveillance without a massive shift in voters general apathy towards their privacy.

[1] https://www.nearmap.com/au/en
This is interesting. It is like an oppositional amicus curiae. If you don't agree with a law, you will file suit as an advocate of the law to test the validity of the law. Does the US legal system allow this? I know it is easy to file a suit, but will it stay in the court system?
We used the hosted version. It would lag on the order of seconds while trying to type in the issue description box. We switched to another issue management software.
> * isn't 2 keys (win-R) away.

Unless it's always on - an Alt-Tab away. I use Notepad++ for that, it comes in handy with seemingly infinite undos and autosave.
Velocity effects are extremely important.

https://fred.stlouisfed.org/series/M2V
Nope. Left as an exercise for the user and 2FA provider, and/or the service to provide an alternate recovery system.
Watch “How an Ising machine solves the traveling salesman problem” on YouTube
And how do you protect your secret keys, if passwords are fundamentally broken?
"Yet you've been able to present none"

What am I supposed to present? A complete history of computer science and system design?

"isn't possible"

Any app on any system, if exploitable, can be used for a chain attack to exploit further vulnerabilities (and 14.8 was a bandaid for just such an attack). That's ignoring that iMessages is also such a high value target for its own data, in the same way that Signal and other messaging apps are high value targets, and not just as a path to chaining 0 days.

This is a not useful conversation that I hesitated engaging in at first glance (when someone does the "if only they just waved hand everything would be great" it's founded in dubious logic 100% of the time), so feel free to reply into the ether.
The long-term trend in urban housing is diffusion, not densification. One hundred years ago a family of five lived in an apartment now occupied by a couple.
I agree. This is why I've tried to make use of Confluence's other tools to make content findable and also improve search…

1. give pages labels. This lets you insert a label-based index, and also makes it possible to narrow search by label

2. use spaces. Separate the content into spaces based on who is likeliest to need that information. You can narrow search by space, and put a search box on the page in the space.

3. use the hierarchy. You have to put the pages somewhere in the hierarchy anyway, so try to make it reasonable.

4. Make useful index pages. Obviously, this doesn't scale, but if you can provide people with useful starting points, it will help them. For example, at Khan Academy we have a space for the whole org with a front page to get you to every team's front page. The engineering team has a front page with a small collection of useful & commonly-used links

5. if you have a page in your hierarchy with a lot of content underneath it, add a search box on that page that constrains the search to that set of pages.

The biggest problem Confluence search has is that it's terrible with relevance, and using its tools to narrow down the search can improve the relevance of the results considerably.
In my understanding, you have to prefix all your keywords with "+" for all of them to be necessary for a page to be included in your results. This makes the behavior slightly closer to Google.
As I understand the sales pitch for Flow, it's a browser that can run on low power devices and remain responsive and useful.

Never used it myself, it was one of the possibilities we looked into recently for a set-top-box thing that would render most UI with a browser.
Thanks, you're right and I've updated it to clarify.

> And their conclusion is that even then a good dose of vaccine allows the body to eliminate it.

That's not the same thing I got from the conclusion, it sounded like you needed to have a previous infection + the vaccine to clear it. What am I missing?
how is that spikey?

how is a soap bubble not a sphere? you mean a pile of spheres od differnt sizes?

a hypersphere is a smooth stack of spheres, just as a sphere is a smooth pile of circles.
https://en.m.wikipedia.org/wiki/Human_challenge_study
You broke the site guideline against name-calling quite badly with this. Please review the rules and stick to them:

https://news.ycombinator.com/newsguidelines.html
So, a website, which on Mac uses a bunch of native UIKit text inputs, buttons, checkboxes and selects is native?
Seems dumb to be conditioning on married couples. My parents were unmarried dual income earners. I likely will end up being the same.

Given that long-term unmarried couples are both increasing in number and (I believe) more likely to be dual income, this tells the opposite picture.
TLS 1.3 is much better than TLS 1.2, and has fewer options and knobs (e.g. no need to choose cipher suites), but it is not what a modern protocol designed from scratch would look like. For that you should look at WireGuard, or the general Noise Protocol Framework.

For custom protocols, libsodium would be a popular modern approach. If you need compatibility with TLS, try locking down TLS to only version 1.3, or if you can't do that, lock it down to only TLS 1.2 with tls_ecdhe_rsa_with_aes_128_gcm_sha256.
> I wonder if its possible to avoid code that is meant to represent real-world business logic from being too complex.

Yes. But only for the first couple of hours until someone who {missed the meeting, forgot something, didn't check, etc.} comes along with changes.

(Alas, this happened to me over the last two weeks and now the pristine simple logic is a fudged mess.)
This was the realization that made me backburner my physical password manager project https://github.com/jareklupinski/zamek

I'm more interested in exploring ways to ease the burden of "thing you know" for a lossy human mind, than racing to the bottom of "thing you have" with a bunch of other hardware vendors.

So far I really like those spinning wheel codexes you can keep on a keychain :) Looks random to everyone else but only I know the exact pattern to turn jumble into password.
Wow and thanks! I always wondered why there was Xbox* software built into Windows 10 that's seemingly uninstallable, even on my DISA STIG'd work computers. I guess this doesn't really answer the question, but at least now I know what that Xbox Game Bar one can be used for.
these is why 'real news' is as fake as fake news
I'm using NixOS with i3 as my daily driver, can recommend.
Did I misread? This super spike protein defeats merely the vaccinated, but not the naturally infected and then vaccinated, AFAIU.
Sounds like your organisation has just limited the 2FA options in the auth settings.

Hardware keys are supported on Teams, along with software phones (that have a static number / extension) and a linked desktop/mobile app.

In fact FIDO2 hardware keys like Yubikey are part of what Microsoft refers to as ‘passwordless’ - see https://docs.microsoft.com/en-us/azure/active-directory/auth...

I assume you aren’t an admin on the account just because otherwise you could just disable 2FA properly rather than disabling it with a weird twillio workaround, although I have to give you credit, this is the most effort I have seen someone put in to subvert a security policy.
How is that testing the right? Is the fifth amendment supposed to confer the right to be free of scrutiny or suspicion based on one's refusal to self-incriminate?

If an officer stopped you in your automobile and asked if you had any drugs on your person and you said "I plead the fifth", does that alone give them probable cause to search your car?

If you crossed a border and an officer asked you if you were carrying any dangerous goods and you answered "no" they might let you continue. If you answered "I plead the fifth" would they be constitutionally required to also let you continue or would they be able to discriminate based on that answer?
If everyone used OpenNIC what would be different about this case?
The issue with plasma donation is that the plasma contains antibodies which are temporary (6ish months). What we want is to elicit a response which produces memory B cells so the vaccinated individual can create their own antibodies. That can only happen through vaccination or infection.
Usual Android phones' support is bounded by Qualcomm's commitment, which had been 3 years. I think they now have extended it to 4 years though. This is one of the biggest motivation of why Google is developing its own silicon.

(Added) Of course, this doesn't explain why Samsung doesn't provide longer support. And I also don't know the reason but I guess their mobile division perhaps doesn't have enough power to negotiate against its chip division...
I tried their hosted version for a bit on their 30-day trial or whatever.

Virtually every page load took upwards of 5 seconds.
My experience was with DOD. They made major strides by 2010 to use smart cards (CAC) for access control to all the major systems. Some systems still had passwords, but everything new was supposed to use CAC and everything old was being migrated to support CAC in addition to passwords, ideally dropping passwords (not always possible due to how some things were accessed).
They're mostly old and EOL.
> o Passwords ARE fundamentally broken and they do not put you in control. Passwords must be shared to work, therefore they can never truly be secret.

There's one notable exception to that: the root of your trust (a device you decrypt) needs to be something you know, rather than something you have like a token. You can have private keys on that encrypted device, and you can have physical tokens as a second factor, but unless your root of trust is something in your head it can be taken from you.
The more general model of "local password that unlocks a key" seems like better security at every turn, and something that's feasible to implement on any system. This leaves attackers with the same options they'd have with 2FA: Gain access to the device that produces/stores the key, or crack the crypto. There's no technical feasibility concern for implementing good security, there's just endless incentives for these big players to pretend it's hard without you handing over control
I like this a lot.

The longer extracts are more useful than the shorter extracts.

For Brave New World, I noticed the first 100 - 200 comments are short, and not useful as reviews so much as indicators of preference. Then after that, the comments are longer, and hence, more useful because they explain something.

It would be useful to be able to filter word length so as to be able to distinguish between Opinion Mode vs Review Mode.
I have to say, one has to be some special kind of "dumb" to learn Clojure, but at the same time lose the ability to understand Javascript or Java. One doesn't choose one tool simply because "they don't know the other tool". Sometimes, and quite often, the decision gets made precisely because they gained significant knowledge in both.
On many Android devices you can flash an AOSP RON which is a very viable alternative
Stockpiling cash isn't a crime and unless it reached ludicrous proportions like a 25 year old barista having $5 million in a safety deposit box then burden of proof should lie on the government obviously people would have records they paid taxes on said amount surely though.
You should look at the median and not average.
Even simpler, just take a 3D knot, and pull on it. Where it gets stuck, just lift a strand up in the 4th dimension.
> Cost of living would be much higher in SV and most companies would cut pay for remote work over there so it would be similar.

I would validate this by getting an offer. Even adjusting for location, my guess is it's still significantly higher than what you're making locally. The adjustment isn't, say, you live in SF so you make 400k, you live in Houston you make 150k. It's ~15-20% for most places, at most.

> Yeah, I use RN to do all the platforms.

I want to point out those bloated teams that aren't lean from SV? They made ReactNative. They made Flutter too if you were thinking of swapping.
When Windows NT first came out in 1993 its 12-16MB memory requirement was considered to be a major obstacle to adoption, IIRC.
Embracing Asymmetrical Design
Focus Mode / Do Not Disturb infuriates me. All I want is for my notifications to not light up the screen and make any sounds except for calls. Is that so hard? It keeps getting more complex.
> The bar is on the floor. So when you exceed that bar and actually help someone quickly and efficiently, they turn into super fans.

I had this exact experience from the other side with Seagate the other day -- completely unexpected and out of the blue. I'd had a few drives on a raid fail. I spoke via a chat app with a support agent who listened to me, understood my zfs configuration and accepted the "smart status: failing now" as grounds to RMA.

When I then was late actually doing so (because I was an in-patient in hospital and a colleague replaced the drive), they gave me a prepaid ups label as a get well soon card. I note that their competitors are doing things like calling different drives "WD red" and "WD blue", with very different drives inside and reaching to the bottom.

Net result? The next 40 TiB raid will probably have iron wolf drives in it. I didn't expect to come away from an interaction like that with a vague feeling of brand loyalty, but actually by not fucking it up and letting me speak to someone who knew what zfs and smartctl was as first-line support I found myself massively impressed by it, quite unexpectedly so. Business that are xkcd/509 compliant deserve more.
Crypto for Creative Communities
Compared to jira search Confluence search is quite good.
Interesting. Could you or someone else say what benefits does MAC Vlan offer over IP multicasting?
A kilometers-long cable sounds totally reasonable to me, and you can put an umbrella over the solar panels if the paint is raining at a different angle from the sunlight. There are a lot of existing machines on Earth that handle volumes like that in six times stronger gravity. Big Muskie's shovel held 295 tonnes of rock; over its 20-year lifetime it averaged about 1.5 tonnes per second.
Did I miss the part of the article that mentioned the average size of houses over time? The increasing code requirements over time?
They only tested the plasma from people who were infected, people vaccinated with Pfizer, and people who were infected, then vaccinated.

The 20 mutations they mention was a set of 20 mutations to a single spike protein that they then attached to a carrier virus to test plasma neutralization. It's not the full space of possible mutations that could cause immunity escape, but it is one that they found with a plausibly low number of mutations that it could occur in the wild that would result is almost total escape for vaccinated or previously infected.

An interesting result was that the infected then vaccinated individuals developed antibodies that targeted a very broad range of coronaviruses, including their engineered virus, delta, many other variants, and the original SARS.

It's suggested that future vaccines could be engineered to produce this broad immunity.

The immune system is almost terrifyingly complex.
Additionally, could that even happen naturally? Since viruses only reproduce asexually, there's no way for multiple strain's mutations to somehow be combined together, right?
My security is government tier.
For edutainment, there's a manga/anime called Cells at Work (https://mangarock.to/manga/1684/cells-at-work/first-chapter#...) whose final (June 2021) installment covers Covid-19. Includes a character called Killer T Cell, https://cellsatwork.fandom.com/wiki/Killer_T_Cell_(Squad_Lea...

> Killer T Cell is loud, obnoxious, and quick-tempered, resulting in rivalries with many cells. He also despises it when a non-white blood cell forms a friendship or relationship with one of his kind. As an immature thymocyte he went through training at Thymus school, where apprentice cells like himself learn to become Mature Thymocytes.

Season 1 is streaming: https://www.netflix.com/title/81028791
And be prepared that the online calculators grossly overestimate the daily expenditure, even well regarded ones like this:

https://www.niddk.nih.gov/bwp

I'd take the advice posted elsewhere, start with 1500/1300 kcal for men/women and see how it goes for a month.
I use BitBucket, because it's free and I've been using it for a long time. Maybe GitHub is faster, but I don't access BitBucket enough to justify migrating ~50 repos I have. Can't be bothered. Its UI/UX? meh. I got used to it.

I use Confluence and Jira because, again, we use them at work. So I guess I'm using them because I have to. I also understand it's a pain to move our company from one to another (oh we've had discussions to move to Coda and others) but again, I'm not taking on that project. Again, UI/UX, search - all meh - they are working and I got used to it.

The inconvenience of using them does not justify the amount of time I need to spend to overcome my inconvenience. Some things, you just have to let them slide.
One of NSO’s previous exploits targeted WhatsApp, so they seem quite capable of using “normal” apps to get their spyware on your phone.

Apple’s Apps are better targets of course because those are on every phone.

https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537a...
> but when organizations don't allocate time for intensive pairing/mentorship but expect senior engineers to somehow find time for it is what doesn't really work.

All organization has their own flavor of culture. Visionary vs mercenary, waterfall vs collaborative, explicit vs implicit. One can design/shape their organization to favor explicit knowledge sharing. I agree with you that it is a trade off. Just that all else being equal, I think writing good code offer way more leverage than getting better in reading code, knowing that they are not mutually exclusive