skysight-inc/HackerNews huggingface dataset:
No.

The user has to know they are interacting _directly_ with the authentic site, vs a malicious party intermediating the QR-based login.

There is no way to solve this with mere QR codes; you want the communication channel itself to be authenticated, and that communication channel is abstracted completely away. So you can authenticate and create _a_ session, but you aren't sure it is actually going to be your session vs an attacker's.

WebAuthn has the code managing that channel (e.g. native code within the browser or underlying OS) craft an authentication request specifically for the site being accessed. It does this over a separate communication channel to the authenticator device, or internally to the underlying platform.

IMHO, the biggest risk to WebAuthn is arbitrary client software, as a 'fake' browser can misrepresent why you are tapping to create sessions into other websites. This is why several operating systems lock down the ability to talk to FIDO keys directly over USB/NFC/Bluetooth, and instead provide a native API requiring entitlements. Normal apps may get credentials only for their own sites, while a Browser may be vetted at a higher level of scrutiny to get credentials for any site.

Actually, no, the biggest risk remains script injection - XSS and WebExtensions.
Or maybe, the more you are experienced and able to solve problems. Any problems. And produce quality software that performs. Then maybe the more unique that makes you. Which is not what FAANGs are looking for. They want a smart enough human, that is replaceable enough. And they will pay a lot for people that accept to play by the rules.

Hey just a theory. I am probably wrong.
It takes consistent organizational effort spanning years to build hardware, maintain vendor relationships, merchandize the product (advertise, sell, ship, liquidate), inventory management, and continuously develop new hardware to bring to market.

Valve has traditionally focused on their Steam platform, which has a much tighter feedback loop and none of the aforementioned effort that comes with physical products.
Try giving your Texas CCW to the TSA to board a plane. They’ll take a Costco card with a shitty pic, but not the CHL
Linux Support. Decent battery life (7+ hours).
So I’ve seen ‘Closer’ and I have to be honest: I do not understand how anything Chapelle said was hateful.

Could someone who does see what he said as hateful explain, like I’m 5 if you feel it necessary.

Quotes would be helpful. I’m willing to watch it again if need be. It seemed to me that he was trying to both reconcile his own feelings and cast some light on his friend, who apparently took their own life after being attacked by a Twitter mob?

I don’t understand at all. But I’m willing to listen.
Legally distinct is not the same as chemically/biologically distinct.
That's a wild over exaggeration.
Please critique: I try to explain the Bitcoin whitepaper in 15 minutes
Would be cool to see something client side using ffmpeg in browser, like https://github.com/ffmpegwasm/ffmpeg.wasm

Found a previous post from someone using that lib https://news.ycombinator.com/item?id=26580333
[dupe]

Discussion over here:
https://news.ycombinator.com/item?id=28866805
Internal Boeing e-mails between various Chief Technical Pilots and other Boeing staff are available at [1]. It shows that there was an overarching requirement for the program to to ensure that 737 pilots could fly the 737 MAX with minimal "Level B" training (e.g. no need for hours of simulator training).

Per [2], MCAS was poorly designed and exhibited a failure mode (e.g. AOA sensor failure) that required immediate pilot action to avert disaster. For pilots that were aware of the MCAS failure mode and how to respond, simulation showed they could respond and avert disaster within typically 4 seconds. A delay of 10 seconds from a pilot to respond correctly to the failure event would be catastrophic.

A Boeing staffer wrote to the Chief Technical Pilot now indicted[^][1] regarding the pilot action required in those critical few seconds:

"I fear that skill is not very intuitive any more with the younger pilots and those who have become too reliant on automation"

The Chief Technical Pilot now indicted[^] responds:

"This is the path with least risk to Level B. We need to sell this as very intuitive basic pilot skill".

Boeing it appears then opted for updating Non-Normal Checklists (NNCs) for pilots instead of:

* Fixing the MCAS flaw to remove the failure mode altogether

* Ensuring pilots were trained to handle an MCAS failure in a simulator

* Otherwise ensuring that pilots were aware of the non-intuitive nature of MCAS and the particular failure mode requiring immediate <10sec response from pilots

If the failure mode with MCAS did occur, pilots didn't even have 10 seconds to find the NNC and go through the checklist steps before catastrophe was set to occur. They were not aware of MCAS being present on the aircraft and per the Boeing staffer raising the concern, "that skill is not very intuitive" in relation to acting on the failure mode should it have occurred.

[1] https://transportation.house.gov/imo/media/doc/Compressed%20...

[2] https://www.incose.org/docs/default-source/enchantment/21031...

[^] Assumed from job titles in the e-mails, as names are redacted.
Exploring Programmers' API Learning Processes
I find it interesting that the discussion about this feature is only about design/interaction principles.

I mean, maybe this is right and a merged search/URL bar is the best call from a design standpoint. I don't mind having one.

But do you really think that's why Google implemented a feature in Chrome that sends more people to Google?

It was, I'm sure, a revenue decision first and foremost, and Google is probably delighted when people identify it as something else.

The same logic applies just as well for any browser vendor who makes money off of search partners.
Carbon's been trending recently. Seems like everyone and their mother is using it. Can't complain, though... Looks great!
> That sounds like they are knowingly incompetent?

That sounds like they are knowingly underfunded, which they are.

> And aerospace engineers are dirt cheap.

They are? Where are all the airline startups? I assume they measure in the hundreds with all this dirt cheap talent running around.
I think you’re deeply misunderstanding the purpose of the FAA and the magnitude of the problem here.

Like almost every other agency (the FDA didn’t do the vaccine trials; are they incompetent too?) they don’t do the tests. They just police the industry.

Theoretically if you set laws and regulations and dole out severe punishment for bad behaviour, you don’t need to be the one running the tests.

People should want their government to run on trust (if their culture is compatible with trust) because it’s far cheaper and more efficient.
The point I think you missed in that comparison is the risk analysis: polio has scary implications that are directly in front of you. So do things like ebola, HIV, etc.

People can understand them. When your everyman sees 99% of people doing fine pre-and-post covid, you can't ask them to have the same fear of the disease. It's unreasonable for you to to do so.
Explaining in Style: Training a GAN to Explain a Classifier in StyleSpace
> Is already very bad for health insurance, with people being denied to have an insurance just because they're slightly overweight or they have pre existing conditions

Are you talking about the US? Because the ACA made that illegal years ago.* Your slippery slope hand-wringing doesn’t hold water.

*Under the ACA, premiums can only be based on three factors, IIRC: age, sex, and whether you’re a smoker. (And zip code.)
I think you are talking past each other, depth-of-field is dependent on the physical aperture not "F-Stops", which are often also called "aperture". Yes, afaik it's derived from single-element lenses but so are most other measures, and I'd be surprised if a real lens behaved different (at least in the center).

Your 35mm f/1.4 lens has a physical aperture of 35mm/1.4 = 25mm, so the equivalent 70mm lens with a 25mm aperture would have an F-stop of f/2.8. Hmm, can't think of many modern 70mm lenses besides Sigma's 70mm/2.8 macro which should have the same DoF, or if it's a standard zoom they should have equivalent DoF as well (unless it's Canon's f/2 zoom).

The (acceptable) depth-of-field is derived from blur-disk diameter, and the circle-of-confusion, for an object at a certain distance from subject ("point of focus") and relies only on physical aperture and distance to subject as stated (or alternatively, f-stop _and_ focal-length, because "phys. aperture = focal-length / f-stop").
Majority of Americans on Google Docs: “What You Talkin Bout Willis?" (2007)
D is dead
It was awful: "Space-Radio Synthesis [with a] Large 'Y'" or some such.

And then, the SKA was split in two: half in Australia, and half in South Africa.

So it didn't hold up at all, but at the time, it was fun.
The language creator is a complete tool and has repelled anyone intelligent from contributing.
A public web service is not the threshold of your home. If you want to make a domestic analogy, it's the box you drop off at Goodwill. You put something in there that you didn't mean to, and you understandably feel violated now that people are browsing it on Goodwill's shelves, but you can hardly blame the shoppers for that.
None, because they weren't mine. I did rent some of his stuff on VHS, though.
I used to drive a sedan and it felt like I was dropping down on entry and climbing out on exit. Along came kids and I've been driving a mini-van instead ever since.

One thing I really like about the van (Honda Odyssey) is that you step slightly up to enter and step down to exit. Very comfortable. And this is on a car that's so low to the ground (good for little kids and old dogs) that it's like a snow plow if there's more than a few inches of snow.

I want something lifted more than a sedan so I step up to enter and also has more ground clearance for snow, potholes, rough roads, etc. But that doesn't mean 44" tires with a lift kit.
Dave Chappelle isn't calling for violence, though, not in any way, nor hinting at such, nor alluding to it, nor expressing any kind of support for it. I watched it the other day.

Suggesting the stand-up comedy of Dave Chappelle is somehow akin to the work of Joseph Goebbels, how can someone respond to that? It's literally absurd. It's so outlandish that it can only serve to undermine whatever position you might want to argue.
This was my takeaway as well. When he’s in his final bit, before he reveals his friend commits suicide, he mentions her wanting to be seen as a person having a human experience… which he promptly affirmed, agreed with, and got applause for.
Well, for my own personal stuff I omit just about all that I can—head/body start and end tags, html end tag (not start tag because it has at least a lang attribute), tbody start tag where possible, thead/tbody/tfoot/tr/th/td/li/dt/dd/p end tags almost all of the time, attribute value quotes where valid… mostly just because it’s fun doing so, and in some cases because it makes things decidedly cleaner (especially tables). I also don’t use autoformatters because I will often disagree with their opinions in specific cases.

For stuff I’m working on with others, I’ll act more like a normal person, though I will still prefer to drop at least <head></head><body></body></html>, and I’ve never worked with anyone that wanted to put trailing slashes on void elements (and haven’t ever used Prettier on HTML, evidently).

As for Prettier putting the trailing slash in: huh, that’s a really weird decision (and no flag for it!), given that they’re not emitting valid XML (not escaping >, at the least), so it’s just the personal preference thing, for something that was just added as an XHTML compatibility mechanism.
They're _still_ not caught up and don't have the clean design it had. Unbelievable. I still can't align my phone correctly on my wireless charger like I could with my Palm Pre.
Thank you. I was just nitpicking, there.
We're talking about 2001 when apple's revenues were declining and it was losing money, though it had been in even worse shape a few years before. The stores were part of a Hail Mary.
>Money is simply a belief held by a lot of people. A collective trance. Money is simply the distillation of a shared confidence in the future.

This is the fundamental lie used to market bitcoin. Money has nothing to do with beliefs. People are forced to buy dollars to pay taxes. That's the actual origin of money and what's it backed by. Because they need it for taxes, they start selling stuff for it and are willing (or even forced) to borrow it.
Fiat currencies fail when backing enforced by the state fails: states try to demand more real wealth that they can actually get, whether because they are too weak to enforce it, or there's simply not enough wealth to go around.

Gold (and other metals) was an early technology for state-backed money. For the first time since thousands of years gold isn't backed by any state - and the ancient meme 'gold is money' is already almost dead in less than 100 years.

Bitcoin isn't backed by anything so it can't be money, ever. It's irrelevant how popular it is and how many people think it can work as money - billions of people can think magic works and yet it still doesn't work. As a group, bitcoin holders collectively lose money relative to everyone else - and within that group, early entrants gain at the expense of later entrants, ensuring it's eventually self-extinguishing.

Without centralized force, only commodity money can exist: things that are useful in itself. The most obvious fundamental unit of value in the universe is energy which can be transformed into everything: maybe in the future intelligent entities trade antimatter packets, assuming practical storage, or some even better energy form. On lower tech levels it becomes heterogenous: shares/bonds, salt, seeds, oil etc, traded both directly and as IOUs. Just as hundreds of currencies currently exist, a true free market economy would have thousands of inherently valuable units being used as a unit of exchange, account and as a store of value, with popularity and liquidity varying both in time and location.

Anecdotally, younger people are much more likely to get into newer coins/tokens instead of bitcoin - wealth transfer attempt by older holders is too obvious when it's something where 'they' generated majority of supply for themselves when you were only a young teen (or even a kid) and now tell you to buy from them because of reasons.
Search isn't influenced by payments, ads are. It's not that hard to understand. If the idea of ads offends you that much, the organic results are a couple inches down.
I agree the logic. To me conceptually god and the creator in cthulhu maybe the same
Do you have a source for this? I know a lot of people at Google and have never heard of this. In fact, a few years ago I explicitly asked a Google recruiter about this, and they said it wasn't an option. Is it a more recent thing perhaps?
How do you become one of those kind instead of smashing your face against CORS constantly
dupe: https://news.ycombinator.com/item?id=28835703
FYI: Show off your TC Timeline

https://www.teamblind.com/post/Show-off-your-TC-Timeline-qqi...
> They are the opposite: telling you what not to eat.

There doesn't seem to be a difference to this to me. When I go to the supermarket or eat out I simply have a lot of choices excluded from me.

> It's a lot easier to follow your family and culture around you with some minor adaptations.

While I wrote what to cook, I guess figuring out what dishes I want to cook isn't really tough. I'm more stressed by logistical issues: it's more necessary to be able to cook, and also, when you're lazy or don't have time, pre-mix and intermediate ingredients that allow you to skip steps usually don't cater to the vegetarian or vegan.
Please re-read my parent comment. A few weeks after Apple announced Metal at WWDC Khronos members met for the first time ever to kickoff then project to replace OpenGL. I don't believe that is a coincidence. Maybe Metal was the straw that broke the Camel's back, maybe not.

I also noted that AMD donated Mantle as the starting point which is why Vulkan didn't take 5 years to finalize.

In any case claiming that Apple is somehow at fault for not adopting Vulkan doesn't make sense.
Brother printers are something else. After getting tired of having to do major troubleshooting for my printer at least a few times a year and deal with minor annoyances from time to time, I decided to leave my old printer to my parents (as I was doing a cross-country move at the time, so the less I brought with me the easier it would be). As soon as I settled in, I got a Brother MFCL2740DW printer. That was almost 5 years ago.

Let me tell you, the longer I have it, the longer it keeps blowing my mind. I've only set it up once, and then forgot about it forever. Since then, I added bajillion different devices, built a new desktop, switched routers multiple times and completely redid my wireless networking, etc. On every new device (including smartphones), without having to install any additional software or screwing around with settings, I can reliably expect to just click "print", and my printer will show up in the list of available printing devices, and it will just work. Toner cartridges last forever and are priced very reasonably. I can simply take the printer, put it wherever I want, and it will just work with any device from which one can print without any extra actions.

Normally, a lot of devices start like that at first, and then problems start arising, and things start becoming unreliable due to compatibility issues with newer devices and such, new firmware updates are needed, maybe certain workarounds in settings, etc. But nope, not a single hitch with this one, as it is coming close to 5 years of regular use in many different configurations.

And no, I am not getting paid to advertise for Brother printers. I just simply love when a tool is super powerful like that, but also "just works" extremely reliably without any thought needed, very seamlessly and in the background.
Code (and layout) is written for the human reader first. The machine does not care about most whitespace, should we write everything into a single line? (Some of my colleagues seem to think so.)
> The scientists obtained 92% efficiency at the remarkably low input energy of 230 kWh for the capture and conversion of a ton of carbon dioxide.

Until all the coal burning power plants are shut down, that 230kwh is almost certainly better used displacing some coal. If it didn't already come from coal.
Dang, that's a bummer to hear. I used to do a pretty thorough dive into the whole market (including iPhones) every time I needed to switch phones, but just kept ending up buying the latest Galaxy S, sometimes by a hair. This got me from the original Galaxy S to my current S10e, but it sounds like you're saying that that approach may have tapped out
It's worse...the call doesn't even support bind params. There is a "$wpdb->prepare()", but it's not real bind params, but rather a bunch of php quoting, escaping, and stripping. And in this case, they didn't even do that.
It's wild how a couple of nuclear incidents so horrified the public imagination, when in reality the death toll and pollution from more conventional energy sources is magnitudes worse than nuclear.
You can't (fully) control your health but you can control your driving style
The problem isn't so much concatenation, as it is, concatenation based on dynamic (e.g user-submitted) input. In some (admittedly rare cases), it's hard to avoid concatenation since not every part of an SQL query can be parameterized, such as table names.

(Fun "fact", I vaguely remember that, once upon a time, even things like parameters in limit/offsets weren't universally supported. Also, and correct me if I'm wrong, first class support for arrays (e.g., via any($1)) is relatively new).
Look, if you’re going to engage with me, cut the shit. You wrote:

“If Twitter could assess a huge penalty on the plaintiff for filing a frivolous lawsuit, maybe.”

If Twitter could assess a huge penalty, it would violate absolutely every single tenet of both the western justice system and all principles of natural justice. Companies don’t get to assess penalties when they think they’ve been wrong. Companies can sue for damages and Twitter has the right to do that here. However, companies don’t assess damages - JUDGES DO!

This is so simple that I can’t believe I just had to explain it on Hacker News. Tune in next time, when we do “Hello world” in Python.
I think it's worse than picking cost over safety. What Boeing did was knowingly push a bad position. They knew they were in the hole with the pilot training for the Max, they knew they had screwed up. Regardless of that, they kept pushing the line that it wasn't their fault right up until that became untenable. The issue here is a corporate culture that ignored red flags, that played games with the regulator and decided that they would gamble peoples lives and the entire company reputation (including all their employees) on a cost cutting, corrupt means of beating Airbus. The entire c-suite should be headed for orange jumpsuit land.
A quote from that excellent management training video, "A Bug's Life": First rule of leadership: Everything is your fault.
But that’s the thing—it doesn’t do that. If you want an empty div, you can’t write <div/>, because that’s equivalent to just <div>; you’ll have to write <div></div> instead.
Dear reader, what local alternative would you recommend?
Can anyone comment on the Quest vs Quest 2? I've heard that it's a difficult tradeoff, as the build quality of the Quest is better while the screen quality of the Quest 2 is a huge improvement.

If the plan is to use one for a monitor replacement for extended periods, which is a better choice?
Show off your TC Timeline
Thanks for the heads-up! Yes, we use vector graphics in pdf formats for all figures (outputted from matploblib). I overlooked the size of the arXiv version but my local complication is around 14.5MB (pdflatex under TexLive 2020). I will check what went wrong :)
I've been using Rust for just a little bit, building applications/services/scrapers/databases/forking libraries, but I haven't noticed these issues--the biggest compile time issue I had was including RocksDB. I'm trying to imagine what you're building. :} 99% of the time I'm just doing incremental debug builds, and haven't really minded the compile times when doing release builds. Overall it everything has been fast, to the point where I want to start scripting with Rust.
Ask HN: How are gasoline refinery inputs used after electric vehicles take over?
In the next couple decades as electric vehicles take over, what happens to the petrochemicals that were formerly used to produce gasoline/petrol and diesel?

For example, are they able to be diverted into other products? Do they become waste products? Something else?
I have something like 8 years worth of free credit monitoring from all of the healthcare providers who got breached lost my family's information.