skysight-inc/HackerNews huggingface dataset:
> I wouldn't trust anyone with the power to set the default

This is why Americans don't have health insurance by default :)

In other countries these defaults are setup by union, politicians, NGOs, interest organizations, etc.

I think you have a fair point though: you can't easily create trust -- nor can you easily build up a system of such defaults. It takes time.

For example: In Denmark there is no legal requirement that your employer pays into a pension scheme. Yet, almost all employers do, negotiated through unions etc. And when you get a job the usually setup a default contribution from you too, which you can tweak/reduce if you want to -- most people never touch it.
Every time I try to understand the 4th+ dimension, my brain just completely breaks and I'm left feeling angry. I'm a highly visual thinker so it's difficult for me to grasp concepts like that.

Someone once told me that in the same way a 3D object casts a 2D shadow, a 4D object casts a 3D shadow. I just...can't. I can't wrap my head around that no matter how hard I try.
+ This map shows these statistics https://www.electricitymap.org/map
I'm using Firefox Nightly, but many of the issues are present on release too:

- Saving images doesn't send the cookies, so you can't save images gated behind a login. (over 1 year old, not fixed, #17716)

- Switching tabs (by swiping the address bar) sometimes shows the old tab's contents/interaction, with the new tab's address bar. (unsure if reported, I should report it.)

- The menu shows a "sign in to sync" or similar prompt. When I click it, the settings screen shows me as logged in. When I close the settings screen, the menu shows me as logged in. (#19657, possibly #19036 too)

- Reopening a tab moves it to the very top of the list, before your oldest open tab. (fixed in nightly, #10986)

- Opening the tab menu scrolls you to a random place, rather than the currently open tab. (got fixed a few days ago. #20637, possibly #20960 too.)

- Reader mode randomly switches to default theme (fixed a few months ago, #17865)

The tracker is at https://github.com/mozilla-mobile/fenix/issues.

The impression I get is that Firefox Mobile is shipping broken code and unwanted redesigns, and testing in production. Perhaps it's from a lack of engineering culture and management. Looking at issues like https://github.com/mozilla-mobile/fenix/pull/21038, I feel Mozilla is more interested in marketing, design, and analytics, than solid engineering. It's nauseating and depressing to see Mozilla fall so far.
My wife is a family medicine resident and explained to me that she has a 28 hour shift next month
Because the only reason to do it is to fool the recipient into thinking a human wrote the letter. It's certainly not more readable or efficient than laser-printing Helvetica.
Natural infection was one event vs. natural infection + vaccine being two events separated by a time interval. It may be that we are stumbling upon a natural mechanism that makes recurring infections almost impossible past 2nd event.
A password manager ties them all together into one thing you know, but it's still a thing you know. The database by itself will be useless under a reasonable configuration.
I think technically they are henotheistic or monolatrous if they don't deny the existence and divinity of other gods.

https://en.wikipedia.org/wiki/Henotheism

https://en.wikipedia.org/wiki/Monolatry

(although there are probably religious traditions that don't have an explicit view or doctrine about some of these questions, so they might be hard to classify in this framework)
> But at the end of it all, WebAuthn is here today, it axes multiple major vulnerability classes that are used to compromise accounts globally every day, and any future improvements are going to start from that point.

and to be honest, i'm glad to see it! it's huge!

i just push back because history tells us that leaving something that big as an exercise to the reader means that it will be gotten wrong and, well, i'm not sure if you really get too many shots at getting the whole web to upgrade authentication methods.

there's been some interesting articles in vice magazine recently where they talk about the expense of mitm'ing someone's text messages only costing about $5. i'm sure as soon as phishing goes away, as a result of something like this, all the fraud will shift to the next easiest weakness, which seems like it would be underspecified standards for resetting one's public keys/credentials/etc.
ClickHouse uses skip indexes. They basically answer the question "is the value I'm seeking not in the block."

For example, there are a couple varieties of Bloom filters, which allow you to test for presence of string sequences in blocks. This allows ClickHouse to skip reading and uncompressing blocks (actually called granules) unnecessarily.
> If a "calorie is a calorie" were true, nobody would pay extra for high test gasoline.

The total output of an engine has to come from the stoichiometry of the fuel, regardless of its anti-knock properties. The total output is the work obtained plus heat, plus whatever energy remains in any incomplete combustion products that are exhausted. Inefficiency caused by knocking means we get less work, but that has to be accompanied by more heat. If we are only measuring heat, or only work, we are doing it wrong. One way is to simply reduce one to the other: make the engine do some work against friction which wastes all of it as heat, and put that whole thing in a closed system (the calorimeter). It cannot be that you get more or less heat out of it if you burn the same amount of gasoline, and obtain the same exhaust products.

The conservation of energy principle is inviolable. If we capture and measure all of the inputs and outputs of an organism (heat, work and solid/liquid/gaseous matter), then any discrepancy between the energy content of two means it is losing energy from its energy stores, or else accumulating it.

The main fallacies in fat control are not violations of thermodynamic principles per se but rather these:

(1) it's easy to simultaneously control the work/heat output and/or the input to obtain an arbitrary desired caloric deficit.

(2) a caloric deficit will always be covered by releasing and burning fat in preference to anything else.
> It seems that setting up a security.txt file tends to invite a rather high volume of spam. Most of these junk emails come from self-appointed penetration testers who — without any invitation to do so — run automated vulnerability discovery tools and then submit the resulting reports in hopes of securing a consulting engagement or a bug bounty fee.

Yep, I have a friend who just set hers up; she said within days she had received several emails that seemed more like threats than disclosures or offers to disclose. Worse yet, maybe for all parties, the wording was on the "way too diplomatic" side and this led to a loss of trust.

Prior to this situation she said her favorite reports involved https://www.openbugbounty.org/ and friendly advice on how to resolve the issue.
Perhaps you should educate yourself about this, instead of dismissing it as outrage to bore my friends with. You can start with this article:

https://www.newyorker.com/magazine/2020/07/20/the-invention-...

I didn’t bring it up before because it wasn’t germane to my point, but I’m an African man (from West Africa, where the effects of chattel slavery are still being felt every day) who has lived in the US for a decade. So yes, as a person who has experienced both the racism displayed to us people
living in the so-called “third world”, as well as racism in the US, I think I am entitled to my outrage. Perhaps working in a cell-extraction team as you said is making you take this personally. But this isn’t about you, it’s about a system set up after slavery to keep black people in their place. It doesn’t mean every policeman / woman is racist, just as I wouldn’t say “all white people are racist” just because they continue to benefit from a system that was setup to heavily favor them. So please don’t dismiss my viewpoint as mere outrage informed by the Internet. Of course the world is a complicated place - even back home not all our problems can be blamed on slavery and colonialism (we have had terrible leaders, our government is rife with corruption etc). That doesn’t mean racism’s effects don’t play a huge part in our current state, or continue to lead to young black men especially having their lives treated as more expendable than their white counterparts.
Yeah my wife is an MD. Most of her continuing education is just part of her job and she gets paid for most of it.
nothing because Freedom != Liberty

people install vaccine passport app and get certain liberties but they don't have freedom nonetheless
Check out Altinity.Cloud. It's managed and works today.

Disclaimer: I work for Altinity, which operates the Altinity.Cloud service.
Today's code-reviewed perfection is tomorrow's mess, unless you refactor as the domain drifts away from the original model.

Code reviews can only enforce existing practices and style, rethinking architecture is a different matter.
> Okay, so basically they are just sort of pinky-swearing that your iCloud photos are encrypted on iCloud, but not in any way that prevents Apple or the government from decrypting them anyway.

How do you imagine that Google and Microsoft are able to scan the entire contents of your account? They can all read the data on their servers

>This raises the followup question of "why bother scanning the images on-device?

Because running the scan on device and encrypting the results protects users from having their account associated with the inevitable false positives that are going to crop up.

Apple can't decrypt the scan results your device produces until the threshold of 30 matching images is reached.

If someone issues a warrant to Apple for every account that has a single match, they can honestly report that they don't have that information.

Google and Microsoft give you no such protection. Any data held on their server is wide open for misuse by anyone who can issue a warrant.
When I say don't anthropomorphise animals, I don't mean it in a diminutive manner.

I grew up on a farm. People who know next to nothing about animals are often quick to let me know that it's not humane for farmers to treat chickens that way or to treat sheep that other way, because "how would you like being treated like that".

Two examples of why this line of thinking is flawed: taking a sheep from standing position down to the ground, will have the effect of calming the sheep. Some types of fish that are used in aquaculture will calm down and decrease their stress levels if you turn off the lights.

If someone suddenly takes you down while you're walking down the road, or suddenly turns off the light while you are in a stressful situation, you will probably freak out. That's because you're not a sheep or a fish.
Most source code will also be badly readable if you print it out ;)

So should we change our use of C++ to make it more GitHub-friendly? Or should we fix GitHub to properly work with the C++ source code that already exists?
I like the zoom level to information ratio a lot on Apple Maps, especially in the UK. It’s not very good in my country so I reluctantly use Waze instead when needed.
> As said, not everyone learns at the same pace and I think this setup gives many students lost of opportunities for a good outcome.

Zoals Joris Luyendijk heel correct uitlegt gaat bijv. slimheid veel meer over de kwaliteit van het Nederlands wat om je heen wordt gepraat als kind, dan of je werkelijk intellectueel sterk bent: https://www.nporadio1.nl/nieuws/binnenland/f4dce416-6b35-49f... - @ minuut 08:43

Ook in de docuserie 'Klassen' laten de regisseurs zien hoe het onderwijsstelsel juist het klasseverschil in Nederland verergert: https://www.2doc.nl/documentaires/series/1doc/2020/klassen.h...

"In Nederland zijn we ervan overtuigd dat iedereen gelijk is in het onderwijs en dat je dus niet rijk hoeft te zijn om naar het vwo te gaan. Is dit wel zo? Deze vraag stellen regisseurs Sarah Sylbing en Ester Gould in de zevendelige docuserie 'Klassen'."

Het NLse systeem is misschien in sommige opzichten beter, maar het deelt niet de gelijke kansen uit waarvan de meeste mensen geloven dat ze het doet.
If you follow American media, you will actually see accusations against Facebook, Apple, Google, etc. "censoring" content all the time. Have they gone as far in America as what the article indicates; removal of applications in Russia associated with candidates that oppose Putin? I am not aware of any American legal action that has been used to remove applications that are allied with or against any political parties or candidates. It would be quite a revelation if there was such an action!
> and all the major bugs have already been found

Excuse me while I die of laughter.

People are still finding bugs which existed in XP. Which was supported for 12 years and was released 20 years ago.

7 was supported for 11 years and was released 12 years ago.

> Nevermind the fact that everyone is almost always behind a NAT and are basically unreachable for attackers to exploit remotely.

Sure, except that the vast majority of malware doesn't come from a remote attack.
> So you're saying that if the government only steals money from a few innocent people, that's OK?

Yes! Just like it is OK (as in better than nothing) to have innocent people imprisoned sometimes, or denied common rights unjustly due to judgement mistakes. Policies are hard like that. There's a thin line and to discuss them it is important to understand everything that will happen if you move one.
Your IDE could automatically add those annotations as rich text or embedded HTML when you copy the source code out from the IDE into the E-Mail.
> This will basically make flying like teleportation

And if airplane would be in crash it would be easy to switch OFF all on a board before plane crashed on ground.
Who's fooling who? This distinction sounds a lot like the "no true password" fallacy. In the common usage, passwords are not as narrowly defined as your usage here. I'm sure you're familiar with the trope of people writing passwords on post-it notes. Would that make it not actually a password? I don't think so. I don't think most other people do either.

I'm definitely not convinced that the brave new password-less future is an improvement. I still don't understand how I'm supposed to log in to the same account on two different devices. WebAuthN and others seem to just punt. "That's the relying party's problem".

It feels a lot to me like I'm slowly getting funneled into some MegaCorp's identity database. No thanks. I'll get rid of my passwords when someone can show me something better.
That's why you still use a decently long passphrase and use an offline password manager.
>If in October 2013 you bought a just released Google Nexus 5, you would have had official updates until December 2016.

Wait a second are you sure about that? The last official version released was 6.0.1 which was released in October of 2015.

I remember this because the Nexus 5 was the phone that finally sealed the deal for me in leaving the Android ecosystem for good.

These "engineers" on the Android team did not QA their software so when I upgraded to 4.4.4, it broke the camera such that every video I recorded had messed up garbled audio. It totally ruined a special eurotrip where I had taken tons of video. I guess it was my mistake for trusting Google enough to update right before the trip started.

Anyway seeing that there is a section on Wikipedia devoted to all the hardware/software issues of the Pixel line, I think I made a wise choice to stop wasting my time with this ecosystem.

Went to a used iPhone 5S and ended up using that phone for 5 years. Was the best phone I ever owned.
Account is not the same as your device
IIRC HTTP3/QUIC mandates TLS[1][2] so it itself still relies on TLS. It seems like it's set on TLS 1.3 as a baseline and I would hope the negotiation of the protocol is future compatible but I will admit I haven't fully read the RFCs.

[1] https://datatracker.ietf.org/doc/html/rfc9000#section-1
[2] https://datatracker.ietf.org/doc/html/rfc9001
I like Windows 10

it having un-disablable telemetry and mandatory updates finally made me switch to Linux everywhere

otherwise it's no longer My Computer... it's Satya's
Why do people think you need 20% down? You don't need 20% down on a mortgage. There are first-time home buyer loans where you can put down as little as 0% and for conventional loans you just have to buy personal mortgage insurance if you're below 20% down.

This is such a weird home buying myth and I don't understand how it sticks around.
I took the view in this thread that downloading a file with the whole text would have a lot of big advantages compared to an API. A lot of other commenters have expressed this idea too.

But I want to highlight something from a comment of mine further down: while looking for examples of downloadable sacred texts, I found this page

https://hackathon.bible/data/

which has -- alongside downloads -- a whole bunch of actively-maintained APIs for Christian Bible verse access, some of them run by pretty prominent organizations.

So, all of our intuitions about the merits of downloading sacred texts to bundle with apps are, apparently, not entirely shared by other developers. :-)
I’ve always liked modified preorder tree travelsal for such usecases as they allow to deal with sub tree queries very easily at the expense of heavy writes. Probably not ideal for comments though as they change the tree way too often.

https://imrannazar.com/Modified-Preorder-Tree-Traversal
Nothing is going to be perfect for everybody, but still, working from home has given a break to the planet and to most of the people.
While I am a complete neophyte, from what I learned so far immunity is non-linear. Antibody dependent enhancement and original antigenic sin come to mind. We can't just pile up vaccines and expect the effects to always be positive.

https://en.wikipedia.org/wiki/Antibody-dependent_enhancement

https://en.wikipedia.org/wiki/Original_antigenic_sin
Sort of: https://news.ycombinator.com/item?id=28593034
> VMS support?

Is it a bad thing to support OpenVMS, given it is still an actively maintained operating system? It isn't used anywhere near as much as it used to be, but it is still used. It has even been ported to x86-64.
> Just allowing more houses to be built doesn't solve it entirely. For example, labor will be more expensive in HCOL areas.

Labor increased cost is really nothing compared to the zoning barring new construction. If labor was truly the barrier then when upzoned no construction would take place. Additionally a large reason why labor is so expensive is from the constrained housing in the first place -- again stemming from the zoning.

> Not really, although it might be a secondary component. The main part is taxes and regulation.

Zoning is regulation.
Personally, I just type Win+R and then `no`, down, enter.
That really couldn't be further from the truth, especially in Jira. Jira keeps virtually every piece of interesting information in a custom field, including built-in fields like issue titles and points (known as system fields but effectively the same thing). Every view you see is the product of a zillion complicated joins across field definitions, field schemes, field values, field permissions and other bits and pieces.
I run this on a few small sites (e.g. https://tommasoamici.com) and it’s very cool that people can fully know what you’re tracking and eventually delete all the data you have on their own.
The developers are also very open to feedback and suggestions.
I highly recommend it!
IMHO passwords always had been broken from the get to go for general purpose usage.

This doesn't mean bad password rules haven't made it worse.

Neither doesn't it mean there are special purpose use-case where passwords can make sense, like for a a way to unlock whatever you use to eliminate passwords.

But even then there are always better alternatives, like word pins.

In my opinion there are a few services which should have a high level of security, like e.g. email. In which case I would argue a password is not enough and should be complemented with a hardware token or similar which prevents certain kinds of fishing attacks passwords (or word pins) are prone too.

Some have a security level where a password, word pin or HST+PIN would be ok.

But many more are partially irrelevant logins which are best of with a password manager, HST without PIN, SSO, or similar which all can (but often/mostly isn't) done in a reasonable privacy aware way.

> Passwords Put You In Control

How, do you have more control?

Any data sharing can be done and promoted even without SSO or similar.

You still login with email or worse phone number, which (in general) gives much more information away then any HSK.

And let's be honest I try to avoid making accounts if possible/reasonable but still accumulated ~70 logins. How am I supposed to remember more then a small number (let's say 10) secure passwords which must not have any pattern or there is a risk if a site is corrupted.

That wasn't ever a option, never feasible and always broken.

It doesn't put you into control, it forces you to use "something" to give control to (a notepad, password manager etc.).

So IMHO if we want an improvement we need some form of privacy preserving, open anti-decentralizing "SSO"-like protocol/system which can be feed by HST, Secure Modules or simple Apps.

Does it exists? Probably, somewhat? But making it widely used seems as unlikely as people (in general) choosing passwords if they have the choice to not have passwords.
Pop has been pretty good on my gaming PC (is a Thelio, so probably not coincidence. :)

Really depends on what you want. (I run Gentoo otherwise, but that's probably not everyone's preference. ;)
> Housing is a great way to establish a level of security for your family and kids; but there's a finite number of houses with proximity to good schools, jobs, and other necessary resources, and so families needed to dedicate larger and larger portions of their income to compete against other dual-income families that were bringing new money to the housing market.

One way out of that is simply to increase the supply of desirable neighborhoods. The number of those are finite, but can be increased. The hard part is how to do it?

Sometimes I like to imagine there existing something like Kickstarter but for cities. You get a few thousand people that want to build a house but can't afford land, a handful of employers, and maybe a University that wants to establish a new branch and they pool their money and buy a couple square miles in the middle of nowhere. They divide it into lots and start building. Property values rise, and as that happens leftover lots get sold to finance construction of infrastructure, schools, fire departments, and so on.
I am in my 2nd year as a FE so still learning a lot. I've found that I am very good at reading other peoples code. I think being self taught and initially starting as a solo founder before entering the professional world helped me greatly in this department.

However, I am not as strong at getting a project going. I've underestimated how long it will take me to do something or missed key parts that should have been thought through. Hoping this chalks up to still being new-ish at my craft and in time I get better at this.
There is a way out: a simple assembler that can be hand typed and easily checked that allows the user to type-in a more advanced one ... until a compiler or interpreter with checked source code can be run and bootstrap tools whose source can be checked by hashes.

It is already doable: https://bootstrappable.org/ https://gitlab.com/janneke/mes https://git.savannah.nongnu.org/cgit/stage0.git/tree/README....
I think most mac browsers use the keyring, and I know chrome on windows uses CryptProtectData which is fine. Those both depend on your login password. Firefox won't be secure by default but the average user isn't on Firefox these days.
Not in the US, it didn't.