skysight-inc/HackerNews huggingface dataset:
Here's how I do passwords - require a certain amount of entropy, and compare vs common passwords on the backend. That's it.

Here's a gif of it in action: http://files.jjcm.org/password.gif

And an example webcomponent that implements this: https://github.com/jjcm/soci-frontend/blob/master/components...

The ENTROPY_REQUIREMENT variable means you need a password that has at least 2^n possible combinations, given the character set and the length used. There's no restrictions other than that. If you want to only use lowercase letters, that's fine, as long as the length is long enough. If you include special characters, the length requirement drops.

I use a simple message to tell the user whether or not a password is acceptable, along with a radial progress bar to demonstrate success: "Not strong enough. Add complexity until the circle fills."
I’m assuming all these websites point to Google web frontend servers and for some reason it’s no longer able to map the Host header to the proper backend to proxy to.
Seems like another DNS issue - switching to Cloudflare 1.1.1.1 got me back online...
I mean, it depends on context what “numbers” are acceptable. For an overly general solution:

const allowNumbers = {
all: () => true,
notNaN: n => !Number.isNaN(n),
finite: Number.isFinite,
integer: Number.isInteger,
smol: n => Math.abs(n) < Number.EPSILON,
lorge: n => n > Number.MAX_SAFE_INTEGER || n < Number.MIN_SAFE_INTEGER,
}

function isNumber(n, allow = allowNumbers.all) {
return ("number" === typeof n) && allow(n);
}
I can confirm this on my side too
Why would the restaurant want to pay a cut from their menu prices and use this service then?
Your cynicism is justified and clearly based on the same experience I have :)
I guess that this touches the topic of many discussions on HN: how valuable is a test that you can beat by memorizing solutions?

(Not bringing up the discussion, just mentioning it.)
Eg: https://simons.berkeley.edu/talks/michael-mislove-2016-08-30
Disclosure: I am the cofounder https://www.clerk.dev

Here's the direct link to NIST 800-63B - it's really a fantastic document with sensible recommendations on every authentication method: https://pages.nist.gov/800-63-3/sp800-63b.html

The tedious part of NIST's password requirements is "Do check for compromised passwords"

HaveIBeenPwned exists, but most open source tools don't leverage it and this requirement goes overlooked.

At Clerk, we follow NIST guidelines by default, including integration with HIBP. In a world with password reuse and "credential stuffing" attacks, this feature is critical to securing your user accounts (unless you go full passwordless, but that has its own tradeoffs).
Your example with cars is flawed when you are talking about

1 having the thing but hiding it for Windows or Linux users because "vision"

2 having the thing, everyone else having same thing but you remove it because of vision.

So is not about just 1 dude demanding Gnome or Chrome to add say something weird like "vim" keyboard support , but many users asking something basic present in similar products and in previous version of same product or for the Chrome issue I mentioned the feature is visible but only on Mac.

Btw I appreciate our conversation, is refreshing to disagree with someone that puts effort int he comments and is maintaining respect, thanks

EDIT: about wayland, we will have to disagree, in my opinion Wayland could have been implemented much better like

1 have a protocol

2 implement this protocol and share the implementation with all DEs, like Xorg , so only say Rust guys could have a go and create their own version in their cool language

3 define the extensions and implement them, not do "X11 did this but it is stupid, it is not our job, go figure it out yourselves"
My stuff is running OK on GCP, with GKE usage. Maybe it's related to nameservers?
To add to this, it appears to work perfectly without lifting any of my NoScript restrictions.
> Men in marriage live longer and healthier lives on average to men in long-term relationships and to single men.

What a blanket statement. Does that apply to every married man, without fail? What about women? Do married women live longer and healthier lives too? If so, why do they file for divorce?
We bypassed our Google load balancer and pointed DNS directly at the IP addresses of our servers and that seems to have helped
https://www.navidrome.org/

Self hosted Spotify. Compatible with subsonic clients.
Unfortunately no, and it was about 10 years ago so I don't remember the details. But there's not too much prep involved, just get some beans and get cooking! :D
I have a few services running from the same GKE cluster, same ingress controller, same nodes, same GLB, same everything.

Some are 404ing at the moment and others work just fine. Feels like a GLB issue.

Nothing in my GCP dashboard seems to be aware of the issue however.

Only reason I found out is because I use an external service to ping me if a site is down.
Cryptocurrency (dumb term) just means token - it is a very broad concept. Tokens can have stable value pegged to a fiat, or represent share of a company, or a non-fungible item like a house, or a fungible share of a house, or claim on profits from a financial protocol, or memecoin, or a way to pay for transactions. Of course traditional valuation models can be assigned - it just depends on the characteristics of the token in question.
They're super common now for backcountry hikers and trail runners. The plans start at $15 a month on a per-month plan (no lock in).

There has been speculation that Apple would build this into their phones, which IMHO would be a killer feature. Imagine having an emergency feature that could be used anywhere on earth. How much would you pay per text? $5 per text message would be an absolute bargain in many of these remote locations.
SpinLaunch using a Centrifuge to get to space
>There aren't that many mobile home parks in wealthy areas of SV

There are some... Buena Vista Mobile Home Park is right off El Camino in Palo Alto. I grew up with a friend who lived there in a normal family and went to Palo Alto High.

Admittedly, I don't know what a standard number of mobile homes is for comparison.
Since I believe a password is the user's responsibility I use the UI to inform the user what a safe password is because most people have no clue.

For example:

Choose your password:
A safe password contains many different characters, for example a sentence.
Don't worry.

DEFCON 5.

Everything is fine.
Everything is under control.

Or not...
A run on goods is demand gone wild, aka hyperinflation.
I had a math minor in college and took some upper level analysis courses, so I know what abstract means in the context of higher mathematics. I wasn't talking about calculus.
'The way it works today' is a bit cludgy and there's actually no reason you couldn't have the reimbursement instantly. The 'non tech' reason would be related to internal approvals, but with the right tech, it would be streamlined.

It's also possible that the government could get some of their taxes right away. Obviously not in call cases due to varying accounting issues, but it could work.

FYI there's no reason for 'all your transactions to be on the blockchain' - that's just the way it works today but that can change.
Yes confirmed its because netlify's origin servers use Google Load Balancers. According to this blog they claim "We can easily move the entire brains of our service between Google, Amazon, and Rackspace in around 10 minutes with no service interruptions.". Lets see if thats true. https://www.netlify.com/blog/2018/05/14/how-netlify-migrated...
I appreciate that you've been through a difficult experience. HN users are welcome to share their experiences here. However, it's not ok to translate the emotion from the experience into flamewar comments. That's the problem with this one: you swerved into generic gender war rhetoric. That's harmful and not ok here.

Of course it can be very difficult not to leap from painful experience to dramatic generalization. But it's the sort of thing we all have to work on in order to have HN be the kind of community we're trying for: https://news.ycombinator.com/newsguidelines.html.
IMHO the need for unions is a symptom of a poor political system (yes, this goes for my own country too, not US-bashing here). So yes they are broken and shouldn't _need_ to exist. That's a different argument though and I agree with your point.
Looks like it changed to that title in 2011. http://web.archive.org/web/20110408072631/http://www.google....
Gojek and Tokopedia too.
> It can run native Wayland applications remotely

Have we come full circle?

Also, similar interesting, but old, project is: https://gitlab.gnome.org/GNOME/gtk/tree/master/gdk/broadway
I'm sure you sound very smart saying that but in this case, there were no restaurant listings nor customer portals.
For anything non-trivial (read: more than around 10-20k SLOC of C or equivalent; straightforward with minimal branching logic; non-critical) you cannot, in any practical sense, have CI without automation. Unless, of course, you want a garbage system. If you do the minimum things necessary to ensure the system is correct (in both verification and validation senses) and of decent quality, and you have no automation, you will not have CI because you will introduce delays between code change and deployment ranging from days (for smaller projects) to weeks or months (for significant projects). That delay means you do not have CI. And it also encourages batching many changes together so that you only have to have one test run (or a small number of test runs) which is also the opposite of CI.

Now, you could bypass all those tests and reviews and just deploy it anyways. And then you'll have a shitty codebase, but you'll have CI so that's good, right?
Lower Mainland Secessionists-- this is your moment!
Are you able to access your data in the AWS-hosted datadog instance?
Half the internet is down because of a Google Cloud global issue on their load balancers, including Spotify and Etsy and GCP status is all green: https://status.cloud.google.com
If you ever wondered why GCP is a distant third runner in the enterprise cloud space, here is your answer.
https://news.ycombinator.com/item?id=29235554
OP, I don't have any advice to offer but this is the exactly how I feel. Some people write so eloquently, even their random comments on reddit which I presume they didn't put a lot of effort into, is so elegant. My vocabulary on the other hand feels so constrained it might as well be a programming language.

I see a lot of advice here saying - read a lot, but where?
Could you please point to some sources where you read something and felt - well, that was eloquent.
In practice, I suspect structured concurrency will frequently requiring using the escape hatch for scenarios where a long lived background like task really is the right fit.

But the scape hatch works by.... coloring functions! Specifically if a function needs to spawn a longer lived background task, it needs to take a nursery parameter.

If a function wants to call a function that might spawn a long lived function, it needs to either own the lifetime of said nursery, or more commonly accept a nursery as a a parameter, and pass in the supplied one.

In practice with java, the nursery concept (StructuredExecutor) will only be used for those cases where it is actually helpful, (i.e. where you really want the function call to not return until all concurrent tasks are finished), and everywhere else, like background tasks, existing primitives will be used.

And all nurseries/StructuredExecutor is buying you is the ability structurally enforcing joining of the relevant virtual threads. It lets you avoid some of the common mistakes in structuring such code, but I'm not convinced that is where the eldritch horrors of concurrent code debugging live.

I think the real eldritch horrors come from buggy attempts to implement low lock code, failing to realize that locks or other synchronization is needed when accessing a certain variable, etc. Basically race condition type situations.

I personally almost never have had substantial concurrency issues related to failing to join my concurrent tasks.
The mainstream economic theory genuinely believed that handing out central bank securities would work just as well as, say. adjusting a UBI or normal fiscal policy. Yes, it's a suspiciously convenient idiocy --- especially because they also think wealthy households spend less (even if they don't think wealthy bussinesses do something similar) --- so certainly it's not something that can be completely fixed without a fight, but that doesn't mean all trying to "fix the policy-academic consensus" is useless.

For example, Republican Jerome Powell is no Pinko, but under his watch the fed has become less closed minded about that "full employment" should look like. This is good, and is precisely because that and the pandemic checks that we are seeing great bottom half wage gains (in real terms too) and increased strikes.

So yes, ultimately you can't trick "the man" with new ivory tower shit, but you can at least attack the straw mans and deflections. Maybe the best theory of change is to create new pandemics so they will have to print more checks to defend the system, and eventually, one of those strike waves will be the revolution :D. (Is this conservationism? I don't think so, because it's about the system's response to a bad thing making "working class lives" better not worse.)
The key with 90s web design is the relative absence of Javascript. There's virtually no asynchronous requests; and Castanet works fine with NoScript, most modern sites do not.
Just to be clear: the people working on PNA thought about how likely it was for IOT devices to support this, and the default behavior for most devices is expected to be fail-closed.
congrats! following you for a while now and i think this could hit a sweet spot that is currently only occupied by retool.
There used to be one for about half a year I believe, but I found 280 dollars a month (gpu cloud is crazy expensive) too costly for just a demo.
Isn't the idea of web3 to also be browser agnostic?
> JWT is crazy annoying compared to "pass an API key" in the header.

An API key and a JSON WEB TOKEN have a completely different purpose. API keys don't solve authorization.

A single JWT provider can authorize many different servers.

Furthermore Go already have several good JWT libraries.
Yeah, you're right and I think we agree here. I should have been clearer about that.
I don't believe the study is comparing absolute numbers, it's talking about risk on a per-individual level.
Might be Google Cloud outage: https://news.ycombinator.com/item?id=29243753
A lot of people live in a world where the courts, police and politicians are corrupt. Using smart contracts is a tradeoff for lack of rule of law.

Its essentially people thinking "we're not getting a fair shake here from human law, let's try robot law".
Ten years ago the software wallets were crude, generally for individual projects/networks and not exactly easy to use. MetaMask is so cool comparatively; you can switch between networks, testnets and mains, add your own networks, interact with sites built to use it and it's a browser app. That said I think you're right and this is pretty common in the space as a whole still but it is becoming better. Security is still a huge issue IMO and I would never use metamask as anything more than a means to an end.
iirc: originally brave embedded metamask but with their own branding, metamask then changed their license so that other companies couldn't do that without paying a license fee, so the brave version stayed on the older version without the license fee and slowly became outdated and less useful. I guess this is them updating their fork from that point and adding some features back.
Is this a perspective on Castanet?

Because there is literally at least one super distracting animated GIF ad in view 100% of the time while I scroll that page (which, on my iPhone, is not exactly easily readable due to lack of responsiveness).

On the OP article I see zero ads but I think that’s possibly my PiHole kicking in (which notable fails to block any of the presumably locally hosted adds on Castanet).

I agree with some of your other points but let’s not go to far :)
For just a bit of context/anecdata, I'm talking to my brother who lives in Vancouver and he wasn't even aware this was a problem. The road closure[0] on hwy 1 near Abbotsford/Chilliwack is a good one hour drive away from Vancouver core[1]. So while it sounds noteworthy for an entire city be technically flooded in, unless you were driving to the boonies, you're probably not actually impacted in any meaningful way.

He also mentioned the weather cleared since yesterday, so floods should start to subside. You can follow the updates here[2]

[0] https://www.drivebc.ca/mobile/pub/events/id/DBC-35180.html

[1] https://www.google.com/maps/dir/Vancouver,+BC,+Canada/Abbots...

[2] https://www.drivebc.ca/#listView
> This is a replacement display AND a replacement microcontroller. I'm not using any of the original tester other than the shell.

https://twitter.com/Foone/status/1302453246536028160
Right, this is the sort of thing that can really hurt your career progression. At this rate, you'll never be able to work three simultaneous jobs.

Or you could just quit your primary job on your resume, but keep working there so you can collect a paycheck.
She is the best. Her premium membership is worth it.
Looks like they use a giant centrifuge to toss up to 200kg out of the atmosphere, then use a rocket to get the payload into low earth orbit.
Agreed, 100%. I would be beyond livid if a coworker did this to me if I were the original committer. OP does not realize the insane level of mistrust he just created with this action.
Other way to fight this issue is using a pre-made friendly fungy & bacteria mix.
Cheers. We've been working on it for quite some time so I appreciate your kind words.
Google Napa: Scalable Data Warehousing with Robust Query Performance
That is a very valid concern
Most importantly this game I play for leisure is down!
The ultimate filter is: do not visit the website. It comes down to the cost of having the freedom to do the filtering yourself vs. outsourcing that effort to a company sharing (some of) your values.

The latter locks you in since you are in no position to change the company's mind.
Shadow Palette Generator, a tool to create lush, realistic shadows in CSS
AWS typically has the same issue
Don't know why I got this reply?
Green onion bottoms that normally would go into the compost aren't expensive, and the tap water here is very soft.
Thanks + it's open source which every dev tool should be!
Everyone wants gender equality but no one wants to date a man earning less than them.
If finding couriers is the bottleneck for the restaurants then sure. I can see that as the sales pitch.
The 404's changed into 502's.. I guess that's progress. Fingers crossed it's back up soon
Would be a lot less work if he didn't do this package splitting nonsense
I can't say how common this is, but many (most?) online accounts I personally interact with are disposable, represent no sensitive information, and I couldn't care less if they're compromised. They're one-time sign-ups, junk accounts, free trials, free tiers, etc.

> one of the most frustrating experiences

I understand this frustration as a mismatch between the user's non-expectation of security and the service's obeyance to industry security best practices.

Placing a cognitive burden of memorizing a new password just to try out your product strikes me as cruel.

Maybe only enforce password rules as progressive enhancement once sensitive information comes into play? After all, what's the point of protecting junk?
Compounded by areas with sparse infrastructure, like B.C. I've done the drive from Washington to Alaska twice, and once the road was washed out somewhere not terribly far north of Vancouver, which necessitated a near 1,100 KM detour inland!
A typical virtualenv for a project I work on is > 500 MB. That adds up.
Maxima (Software)
Babel's splitting doesn't make much sense and is purely ideological. It's a monorepo, so split repos are not a development advantage. Plus, releases are often in sync. Plus, they recommend using presets rather than cherry-picking the specific plugins, making it kinda useless for end users. Plus, it's a CLI tool, so it's not really a necessary optimisation (and it would be a bad optimisation at that: having everything in a single package would make everything smaller and easier to compress).
Research Paper: http://vldb.org/pvldb/vol14/p2986-sankaranarayanan.pdf
Things are back online again!
Well duh!

Print lots of money

Give it to people who have lots of money (banks)

The rich get richer.

What is so hard to understand about that?

The powers that be decided that an increase in wealth disparity was a price worth paying to keep economic activity happening (that and inflation, interest rates could well balloon over the next decade).

An alternative was to print lots of money and give it to poor people. That would still have cause inflation, but improved wealth disparities.

But the powers that be do not have that sort of power.
As far as I can tell everything is up it's just that our load balancers aren't routing traffic and just returning 404s.
Possibly useless comparison with a similar infrastructure failure: a section of I-85 on the way between the Atlanta perimeter and where a lot of people commute from caught on fire and collapsed. It took a little over a month to repair. That's with other worse but usable alternate routes, so maybe it'll go faster here.
I'm in no position to give you any pointers but on my list of languages to learn are:

* APL/J/BQN array programming language of some sort

* Some LISP type language

I'm not a professionally programming, mostly a novice but useful languages I did learn, as at work I'm stuff on Windows, VBA and Autohotkey. I'm proficient in both but no expert.
Apples USB-C charging bricks are quite capable on their own. The new 140W brick uses a 32-bit Arm Cortex-M0 STM32G0-series microcontroller with 36K RAM, 128K flash ROM, running at 64MHz.

Source: 9:45 minute mark of the video in this article: https://9to5mac.com/2021/10/29/teardown-shows-details-of-app...
To put this in context, the Pacific Northwest and British Columbia are being hammered with extremely heavy rain. Roads are being washed out or struck with landslides.

Seattle already hit the third-rainiest November in history and we're two weeks in. https://www.washingtonpost.com/weather/2021/11/15/atmospheri...
What is even more naive is thinking there are no other colleagues "that they haven't found a situation to screw you and the rest of the team yet, and that when such a situation happens, there's a chance they will act accordingly".

Just because you do not know whether someone cheated on their spouse does not mean they did or didn't or would or wouldn't. It means you don't know.

And just because someone did or was willing to do something in one context does not mean they would do so in another different context, but they would probably do so in a similar context.
Why? That's not part of the ad contract. They will get refunded for GCP if it goes out of SLO.
Yeah it's more usable than 95% of the websites I visit, e.g. pretty much every news site, Reddit, etc.
This is a sort of repetitive outage for Google. They've wiped out the GSLB configs before. A year ago there was also that big outage where they blanked out the whole Gmail delivery configs and started rejecting all mails (even for gmail.com). Config safety is not their strong suit.
I'm surprised there's no shortages yet because trucks can't get to the city. Or does Vancouver import most non-regional goods from the US (and not the rest of Canada) anyway?
Nah, just disappointed that I haven't shown up in the Paradise Papers yet.
On one hand, Spotify is much cheaper, on other, perhaps artistd gets paid more (assuming you acquire music legaly)
See also: “Reuse Versus Compression” chapter from the book “Patterns of Software” by Richard Gabriel.