skysight-inc/HackerNews huggingface dataset:
A TPM can harden a pin such that it is stronger than a biometric. As a simple example, suppose the TPM has an exponential back off algorithm such that you need to wait 1s after one wrong guess, 2s after two wrong guesses, 4s after 3, etc. No one is getting anywhere close to 64 guesses in that case much less the hundreds you might need for a 4 digit pin (assuming it isn't someone's birthday).

However, you are correct that a fingerprint is faster than even a 4 digit pin. And even a TPM does not solve the problem of pin/password reuse and being easy to guess, it just makes it harder by giving you much fewer guesses.
>The effects can't be attributed solely on the death penalty when trafficking

Sure, everything is multimodal. But likelihood of getting caught (consistency of enforcement) and penalty size can both mediate the incentive. I'm not sure why everyone likes to boil it down to "PENALTIES DON'T WORK ONLY SOCIAL PROGRAMS".
Time…is motion. A clock is just a standard measure of motion, not time itself.

https://www.motionmountain.net/
> natural hypermedia

Like, observed in the wild?
I guess I always figured that your 'clock rate' was linearly correlated with your overall metabolism usage up to a point.
Clamp it, charge the statutory maximum for parking on private property; then after a relatively short period of time you can start the claim for ownership on the grounds of abandonment. (There is some DMV paperwork involved).

That van is worth something if repaired, airflow on a sprinter is normally something you can do yourself. If not there is a whole lot of scrap metal sitting there...
70 fps would be "absolutely no issues" if it were a 95th percentile min. as an average figure, it leaves room for meaningful improvement in a multiplayer shooter (you are definitely dipping below the refresh rate of a 60hz monitor).

or from a different perspective, if a new CPU can give you a 70% framerate increase, you either spent too much money on your GPU, or you spent too little on the original CPU. bottlenecks that severe are a sign that you have misallocated your budget.
Later in 02019 Emily built a hardware one: https://www.youtube.com/watch?v=TG9oGRJAS5g

I don't think hers uses actuarial tables, though.
Yes, that's the way that works. To scale memory bandwidth, you would need a new chip. It wouldn't be an M1 Max anymore. If rumors of them using multiple m1 maxs is true, then they have 400mb/sec of memory bandwidth.
I think I have answers to all of these questions.

1. Worse. Geographic areas that already have a lot of wealth would receive a ton of investment, and poorer areas would struggle to access funds.

2. That'd be cool. Not sure how anything on the website addresses/encourages/works towards that.

3. We would need to use less commercial fertilizer, right?

(This is meant somewhat sarcastically - I guess I just don't understand what these questions are actually meant to drive at, because taken at face value they seem sort of meaningless to me.)
Something I remember from Netflix's documentary Inside Bill's Brain- He reads really fast and synthesizes really well...That's a gift to read 150 pages an hour...90 percent retention.

I follow his lists/ recommendations and in the process have read some very good fiction/non-fiction books.
Are you aware of how many people have been driven away from Rust because of their community? I've never seen people talking about avoiding Linux even 1/10th as much as they talk about avoiding Rust. It's entirely due to the culture; developers don't like a culture in which a programming language needs a multi-member moderation team (who resigns because they can't punish people 100% of the time).
> Yes, farmers do go out and rescue cows (and sheep, and goats, and pigs, and chickens) from the wilderness all the time.

Really? How many of the 70 billion land animals per year slaughtered for food were rescued from the wilderness, as opposed to bred in captivity?

> Btw, what happens if we stop breeding farm animals? What's the plan at that point [for the ones alive]?

The ones currently alive will be eaten by omnivores. Because we're not going to all switch over to veganism over night. Ideally there would be less demand as people stop buying animal products, so fewer are bred over time and livestock numbers dwindle. All the farm animals currently alive are goners, unfortunately. I'm suggesting stopping the cycle for the future ones.

Btw I hear this argument all the time and it's really silly if you think about it honestly. "If we stop we'd have to euthanize all the farm animals. Better keep doing what we're doing, which is kill them anyway plus countless more each year forever."
Can't go past Molly Rocket on youtube.
Strange that the race condition existed for 6 months, and yet manifested during the last 30 minutes of completing the patch to fix it, only four days after discovery.

I’m not good with statistics but what are the chances?
Could you please explain why you chose to participate in this/what it means to you?
Let me know if you have trouble. It's pretty fun.
I dunno about most languages - both JVM and CLR use UTF-16 for internal representation, for example, hence every language that primarily targets those does that also; and that's a huge slice of the market right there.

Regarding Windows, the page you've linked to doesn't recommend using CP65001 and the -A functions over -W ones. It just says that if you already have code written with UTF-8 in mind, then this is an easy way to port it to modern Windows, because now you actually fully control the codepage for your app (whereas previously it was a user setting, exposed in the UI even, so you coulnd't rely on it). But, internally, everything is still UTF-16, so far as I know, and all the -A functions basically just convert to that and call the -W variant in turn. Indeed, that very page states that "Windows operates natively in UTF-16"!

FWIW I personally hate UTF-16 with a passion and want to see it die sooner rather than later - not only it's an ugly hack, but it's a hack that's all about keeping doing the Wrong Thing easy. I just don't think that it'll happen all that fast, so for now, accommodations must be made. IMO Python has the right idea in principle by allowing multiple internal encodings for strings, but not exposing them in the public API even for native code.
I was also thinking that aha, would make sense
I was curious what WAL mode was and this Sqlite page explains it: https://www.sqlite.org/wal.html
Try bahn.com, it is English by default. There is a language selection menu in bahn.de as well.
No.

It's true that some races and classes are more likely to receive unfair treatment from the police and the justice system. It's true that they may receive disproportionate sentencing. It's true that those things need to be corrected.

But stopping prosecuting theft is not "correcting". It's insane. It's creating a a new set of injustices to try to "fix" the old. But that doesn't fix anything. It just creates more injustice.
His story, his choice, but man, what a shame. The world is already awash in crapsack dystopic sci-fi filled with unlikeable characters. Watney (and the entirely of the rest of the cast, for that matter) being a competent professional was so refreshing! I want to read about competence, not (as in PHM) self-absorbed whiny man-children who exhibit no growth across the entire story.
Ah fair. I guess I can’t know if the OP was pulling in an assumption that people would be tied to a single monarch, given historical monarchies were based on physical dominions.
Firefox already has Total Cookie Protection and other features like SmartBlock, which aren't exactly the same, but also work to block third party web-storage access while keeping web sites working.

It would definitely be interesting to compare and contrast the various approaches of different browsers.
URL based state is fine but you should use “replace” or “replaceState” so that each new location isn’t considered a new history page:

https://developer.mozilla.org/en-US/docs/Web/API/Location/re...

https://developer.mozilla.org/en-US/docs/Web/API/History/rep...
A comment on the meta-article: The presentation is ... unique. But very easy to digest. I might be tempted to apply same "story flow" in my articles.
Break Machine – Street Dance – Skill Dealers Crew
UCSB uses it I think too
This to me shows Google hasn't gotten in place sufficient monitoring to know the scale of problems and the correct scale of response.

For example, if a service has an outage affecting 1% of users in some corner case, it perhaps makes sense to do an urgent rolling restart of the service, perhaps taking 15 minutes. (On top of diagnosis and response times)

Whereas if there is a 100% outage, it makes sense to do an "insta-nuke-and-restart-everything", taking perhaps 15 seconds.

Obviously the latter is a really large load on all surrounding infrastructure, so needs to be tested properly. But doing so can reduce a 25 minute outage down to just 10.5 minutes (10 minutes to identify the likely part of the service responsible, 30 seconds to do a nuke-everything rollback)
I just checked, it's a BLM banner. Why is that considered political?

(I'm not from the US, perhaps I'm missing something?)
I’m aware that there are international copyright laws but they are far from universal if that’s taken to mean human society on Earth.
After I quit my job 4 month ago

One of the changes I've noticed it's that time has slowed down.

As a result, I became less anxious, I sleep well. There have also been many good changes.

I know this solution will not work for everyone.
You'd be surprised. Additionally, that also includes parts of the US as well.
We call that FDA testing
A few days? This is better than not taking time off, but I need at least a couple weeks to even remember who I am.
Flagged for being pro-free speech, or mildly critical of GOP, or US, or Israel, or all of the above?
This could just be a simple stress response to the task ending.
> can serve almost as much HTTP requests as a Rust server based on Hyper

Do you have a link to a benchmark showing this?
I should watch the matrix again.
You don’t use Linux?
They will and do something called acceptance testing, which is nothing but testing in prod.
Absolutely, no. Bureaucracy is not a substitution for being properly socialized and knowing how to interact with colleagues. In an earlier time they called this good breeding.

Setting up little etiquette kangaroo courts with the power to arbitrate who is allowed to remain in the community is just fundamentally alienating.
I could imagine that the mitigations they had put in place were perhaps just in the process of being removed, perhaps by some engineer who was slightly ahead of the rollout finishing...

It's the same as me seeing apt on my machine is 88% done installing some package and deciding that's probably enough to make it runnable in a new tab...
How to make a selfhostable service that plays nice
FDA does not test anything.
> “dev” is a direct copy of prod but with different backing data

Then it's not a direct copy of prod. Many times it's the data that makes bugs appear.
This is an incredibly naive take. The U.S. couldn't care less about democracy in Cuba or anywhere else. It has a long history of supporting brutal dictators in South and Central America as long as they were right wing and pro American. One example: Chile 1973, a CIA backed coupe toppled and murdered the democratically elected President Salvador Allende.
> Because without farming they'd live in the wild where they'd suffer from disease

No. Without farming, farm animals just wouldn't exist to live a miserable life. Farmers are not doing them any favors by bringing them into the world.
Ask HN: What browser extensions are a must-have in 2021?
I've had uBlock Origin and NoScript installed faithfully for the past few years at least...

Kind of annoying having to whitelist every website I visit on NoScript these days but worth it imho.

Just curious if there are any others out there I should check out.
Are there other ads besides the wax seal? Am I going to end up sending my grandmother a packet of information about your company along with my holiday card?
https://youtu.be/hJ35ApLKpN4

It's already trivial - $500 consumer grade resin printers have sufficient resolution, and creating the model from photographs is super easy.

Same for facial recognition - you can do Mission Impossible style masks, and the most significant investment is in time spent learning makeup and wig work.

Biometrics are not secure, just like a vast majority of locks. All it takes is tools, knowledge, and motive to bypass them.
For backend I'd say -> Golang, PostgreSQL, Redis. I've just worked with Vue.js but I've seen some of the React codebases and don't really appreciate that complexity. Vue does a far better job and simplifying things.

With Golang, you actually don't need a mega framework to get started, you can use small libraries that will do the job for you without doing any magic behind the scenes. (Like, for sure you can use echo[0] but you would probably be happy with mux[1] and it's middlewares itself). And it's not uncommon in Go codebases to repeat yourself. I'd argue that's a much better paradigm than polluting your codebase with 10k indirect dependencies, the garbage that is the Node.js ecosystem.

[0]: https://echo.labstack.com/
[1]: https://github.com/gorilla/mux
I had a campus job where I was making a tiny update to the url of a spreadsheet on one page. The sysadmin showed me how to merge my code, test in staging and then promote to live he didnt show me how to rollback or ssh into the host or restart the host…

So I go in and I make my little spreadsheet update to seed the SQL table with my new data and then I add my one line of code to the git repo to point to the new spreadsheet. Perfect I see it’s working fine in dev, I merge into mainline and promote to staging. I sit there and wait for the deployment, perfect all my new data is there the site is working perfectly this is great, my Saturday sure is going well!

I promote from staging to prod, I go to the site, hey this looks great its working but wait the data doesn’t seem to be updated. Wait a minute why is the page getting slower? Oh god the whole website is down… yea that was a great saturday for the sysadmin where he specifically told me not to merge to prod on saturday but I thought it was just a simple config update…

Since no code is completely bug free, we are always testing in prod to some degree, it’s an important lesson to learn and be prepared for.
Still no 2FA out of the box though :/ Emailing a code is way better than nothing.
This is what we do at FastComments! Our entire e2e test suite runs on prod post-deploy, and we have tests that periodically hit different components to make sure they're working and live. A lot of these tests even create and teardown their own tenants.

For example, uptime robot hits a URL that will, on the server, connect to the websocket URI, subscribe to a channel, send a message, and wait for the response, and respond with OK to indicate that the pubsub system is up. Lots of things like this make sure we don't break things.

Hell, our e2e test suite will even install the latest version of the WordPress plugin and go through the whole setup of linking the WP account with your FastComments account and doing the data import - on prod.

We test outside, prod, too... but prod is the most important.
Impulse Tracker was such a hugely influential part of my younger years. Met some great people in the local scene who’d dial in to a BBS to share IT files and samples, give advice and feedback to each other, etc.

I still use OpenMPT to listen to old IT files or play with some new track ideas every now and then, but nothing like the hours-and-hours-a-day feverish obsession of back then.
PHP: Function names were picked to make them fit into a specific length bucket
For me, if I'm working from home I tend to start my work day about the time I'd leave to commute. And there is no hard stop for the day. For my commute, I have a pleasant to drive car (nothing fancy, just a hybrid Fusion), with a commute that is about 50 minutes with small parts of it in traffic (without traffic the commute would be 35 minutes). So I do have a bet of zen time when driving to work or back home, and it is useful to see and be seen. However at the same time I have invested quite a bit in my home office setup (mostly time not really mone6), more than what they provide me at work. At the office I really miss my home 32 inch 4k monitor. Also I miss the coffee I have at home.
Same here. I wish I still had some of the tracks I wrote in Buzz 20 years ago. I had a way better creative ear for music back then. I tried SunVox but I can't quite get the same inspiration that I had.
This text has been rewritten for public consumption in quite a positive light... There are far mode details and contributing factors, and only the best narrative will have been selected for publication here.
Not quite. Nobody acceptance tests an airliner on a passenger flight. If we acceptance test a medical diagnostics device, we don't run the test the doctor later relies on with the DUT.
Mars has water (probably, or there won’t be any colonies), and CO2. Water, Oxygen, Hydrogen and Methane, all of which there could be a demand for in orbit.
> Look at how Brazil introduced their last currency, they understood this and had the balls to fix

And now we're throwing it all down the crapper...

I'm not sure, I was fairly young, but I'm pretty sure that when the "virtual currency" URV (Unidade Real de Valor) was introduced, it was no secret it was a step towards a new currency (the Real). We've had a few changes in currency before, it was nothing new. The difference with Plano Real is that we finally gave up on short-term solutions and realized that any change would take many years of consistent economic policies. And it worked.
I have historic feels for Hover (they're Tucows, aka OpenSRS a very early domain registrar with reselling as the primary), but having recently moved some domains elsewhere, I find it kind of distressing that Hover didn't remove the domains I moved from the account page and they still send reminders about renewal even though it's not expiring.
You may be interested in my notes in https://dercuano.github.io/notes/imgui-programming-language.... as well.
Lighthouse Alternative for iOS Safari
This is a common misconception about testing in prod. It’s not about the logic. To quote the article: “Once you deploy, you aren’t testing code anymore, you’re testing systems.”
2/3 of Americans don’t have and will never have a 401k or IRA.
Author, second line from headline:

> 'Testing in production is a superpower'

I wouldn't be surprised if most people stopped reading after that point.

> Did you read the full text?

https://news.ycombinator.com/newsguidelines.html

> Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that."
Bingo, if I was being paranoid, I would say someone leaked knowledge of this exploit after it was discovered.
That's exactly my transition (although I also used DirectNic for a while after Netsol in the 2000s). I'm happy with NameCheap but CloudFlare has a better interface, more features, and it's a bit cheaper.
This is a strange comment to make on an article about go.dev, not pkg.go.dev.
Let me quote myself:

> Of course dev is not 1000% identical to the very last bit, I’m not going to argue that. … Like I said, we’ve yet to experience a prod-only bug that didn't reproduce in our dev env.
…

> You can cut out many of the issues and frustrations surrounding testing in staging by actually practicing continuous integration. Build mechanisms and policy that severely limit the frequency and distances that staging systems diverge from prod and I wager you’d get much much further than the comfortable status quo of merging to staging, manual and automated integrating, and then a cadence-based release to prod. So yeah: test in prod! Just don't use your real prod unless you have to.

I’ve seen plenty of staging envs that look nothing like prod, and that what I’m calling the real sham.
Is the idea that if you build the framework you can build the ideal platform for the framework with a nice warm customer base and collect that sweet recurring revenue. Way more upside than selling licenses.

Sounds like timescale, metabase, and posthog.
https://beetcoin.org/how-it-works
So that's what it is! Thank you.
Show HN: Cracken – A Data Driven Approach for Password Generation (DeepSec21)
I had it for a class in college and it was an absolute nightmare for me. This was from someone well known in mastery learning so I don't think it was poor implementation.

The only thing I learned was empathy for people who struggle that way with the typical mode of instruction (which works very well for me).
Nobody knows what anybody is worth, come on.

You know a high performer from a low one. Anything in between is anybody's guess.

Salaries are reflections of the negotiation market, which reflects merit, but only barely.
I don't quite get the objection. For me, "testing in prod" is "we observe the actual running system, with production traffic and users directly interacting with it and its results being live". That's not quite what "acceptance testing" in the mentioned-above domains is. If you have an acceptance testing stage, prod follows it.
Yes, NextJS does ship with an imperative router, but you cannot construct a custom route on the client-side without adhering to the core concept of building your routes based on the pages directory.

I also agree that there's more to caching and SSG with NextJS. I'm simply stating some notable differences between NextJS and Remix, answering the top-most parent comment.
Pretty high with enough bugs.
This anecdote is cited by Bogle as the inspiration behind the title of the book.
Remix, like other such attempts, will need to get into the hosting business. Give out a good framework to ensure lock-in, then sell the infrastructure/runtime to deliver the app built on your framework. Then sell add-ons like $5/mo for authentication, $10/mo for I18N, etc.
@1MachineElf can't thank you enough! at risk of asking a stupid question: on the https://keeb.io/products/iris-keyboard-pre-built, are "rotary encoders" literally just rotating or are they like little mini joysticks that replace a mouse?
The majority of the suffering in Cuba is due to being cut off from the world's largest economy. The population is largely happy, but have had to survive on little due to the compounded effects of many decades of US embargo. The people are well-educated, have a rich culture, good medical system, but live in an economy that has been strangled by an outdated US policy that causes immense suffering. The Castro's obviously have problems, but the effects of the embargo are as much, if not more significant.
I really enjoyed:

"Uprooted" by Naomi Novik.

The Man Who Solved the Market: How Jim Simons Launched the Quant Revolution by Gregory Zuckerman

Spoonbenders by Daryl Gregory
Look into Invidious if you haven't already.
Yeah it s nice to be trivially shardable ! Ours is not: stock market connections to 13 countries with clients having global trading controls across these countries - so we can shard some parts and not others and each country having specificities, guaranteeing a cross market feature works for a client, if it impacts control, is tested in prod, either after market close on mock exchanges provided by the various countries, or during trading hours on small orders.

No amount of testing in the bank has ever been able to spot the weirdest issues, so we continue while really trying hard to make the prod "pilots" (we try not to call these tests) as routine as possible. But, we still find crazy issues, notably those only the client notices (so wrong specs they couldnt prevalidate by plugging their monster system on our monster system in QA)