skysight-inc/HackerNews huggingface dataset:
Capitalism has very little in common with Darwinism because of the nature of the rules involved. Darwinism has a lot of physical rules which you can't circumvent. Capitalism deals far more in social or soft rules which can be circumvented and give you an advantage if you aren't caught. And if you are caught, the punishment might only be a percentage of the total profits.

I'm not going to stay alive because the universe forgot to enforce the dying part of me being mauled by a bear.
If you want to store you passwords locally, then at least use something like Keepass or KeepassXC. It's far from a perfect solution as it's still vulnerable to targeted attacks when it's being used if your computer is compromised. But at least they're not store in plain text. Also password auto-typing and generation are nice to have.

You can sync the encrypted files to your phone or other computers.
> London, Tokyo, New York and pretty much every other major metropolis has problems akin to the Bay Area

I've never lived in the Bay Area/SF so I can't comment on the problems there, but I have lived in London for the past few years.

I volunteer extensively with the homeless, and I haven't seen a fraction of what people describe in San Francisco, or anywhere near the level of antisocial behaviour or crime. Every week I'm serving food on the streets for at least a few hours; I've never once been threatened with anything other than words (and even then maybe twice with words?), never seen needles lying around (co-volunteers have, not common though), and never seen human faeces on the street.
On the Liquidation of International Memorial
Wearing a cloth mask does nothing. And taking a vaccine might save your life.
How about you "get behind those ideas" because they are factual, based on widely accepted science and policy consensus and just generally a good idea. Why is that not enough for you?

Demanding people do stuff that they already told you they know won't help solve the actual problem before you agree with objective reality seems pretty childish?
> It's just a shame the salary is so bad you're almost forced to move on.

UC Berkeley, for example, pays its postdocs $60k to $65k per year. It's challenging to live in the Bay Area for that money. Also, remember many postdocs have kids or are planning to have one. Child care is at least $2000 a month in the Bay Area. Asking bright, motivated individuals to delay their life decisions in pursuit of ill-defined scientific ideals is something I have a tough time defending.
I see nothing wrong with using a plaintext file on your computer, that’s likely going to be safer than using a cloud based solution for a desktop computer that only you access, especially if you don’t have remote access.

Important questions might be how secure is your computer (encrypted HD, multiple users, etc), what incoming services have you enabled (ssh?), does your computer ever travel (is it a laptop, is it prone to loss or theft), and how secure is your apartment/house (is a robbery plausible).

The main thing a desktop file is, for most people who use password managers, is inconvenient. Without some kind of remote access at home, it might mean not having access to passwords when doing errands or traveling, any time when not physically at home. But with remote access, the password file access does become riskier, that does become cloud access where you’re responsible for the security of all methods of remote access (are any ports open you don’t know about?).

Having my password manager on my phone has been incredibly useful at times.
Where the money was coming from when Facebook, Google, Youtube, Twitter etc were really good places that were free to use? They all were working to "make the world a better place" and not making money as they were burning billions each year, challenging the traditional and profitable companies. With Amazon prices were amazing, you had unlimited rights and not only buying but also selling was great. Bezos was worth quite a much but his company never made any profit up until a few years back.

The news business was destroyed in the process, just as the retail and once the establishment lost its ground the money began poring in. From 90's up to late 2000's the internet was amazing as everything was paid by people who were about to reap their investment back a decade later.

My point is, following the money is tricky. Maybe we are at the verge of another change where the costs are payed by crypto bros who will be splitting countries and starting wars once they are done growing the landscape.
Why not start an indie tech book publisher?
Ah it appears I was confused by the word "state"-- according to Wikipedia, the thinking is it was more of a capital and/or the seat of a ruler and territory controlled could have been a lot bigger, although we don't know for sure.
Spotify isn't in a position to just let the profits keep coming. In fact, they've never posted a profitable year yet.
The body doesn’t have a diagnostic port or log file. Even top-tier doctors are wrong frequently.
> I just wish it was still as I recall it.

Somehow the places we lived when we were 20-30 years old always seem worse when we look at them 10 years later.
I have the feeling that buyers feel they are getting more value if the item was "generated" by grinding than if it was created ab nihilo by the developers. Why, I have no idea.
Bitcoin has a use case for money laundering, tax evasion, evading China's exchange controls, and drugs. That market turned out to be larger than expected.
Fuck me, how do I position myself as a developer being poached for $200k?
I concede these are indeed good points :)
You can't even send a domain name that uses the .xyz tld via SMS. It gets filtered out silently on most US carriers.
> I'd auction and sell it

Where could you even do this?
To those who are recommending all different password managers, I have a question: why not using Chrome (or Firefox/Edge/<any other browser>)'s built-in password manager?

I have been using it for a couple years and haven't noticed any issue. Even if Google decides to screw me over and terminates my Google account, I can still access the passwords via the local copy in Chrome, so that is not really a concern.

(Though, don't take this as my recommendation to use Google' password manager. I have not done enough research in the password manager landscape, which is why I am asking this question in the first place.)

EDIT: also include other browsers' password managers. (It appears that it is a mistake to mention anything Google on HN :/)
Seems useful, the name gave me a chuckle. If I only saw the URL, I would imagine this was a service that providing info on preserving your buttocks.
When I get really bored I create a new account for fun. I normally realize it’s a waste of time and stop after about 6 hours of clicking trees or ores lol. However it’s always cool to see it’s still there and normally changes quite a bit every time I go back to it. Skills go to 120 nowadays for example!
> Either the master passwords were reused and this is credential stuffing, or there is actually a LastPass breach affecting all users.

As you mention yourself at the end, there are other plausible explanations (e.g. malware on the machines).
Funny how in your world the bad manager from your example would be difficult to fire as well.
It's not obvious to me. As phones get new features, it stands to reason that the attack surface would also increase.

Note that I'm specifically referring to the mobile phone industry (people in at-risk countries rarely have computers).
It matters if not everything is about money.

Is 15k extra per year an effective boost to happiness?

Is 15k enough to keep working for Big Brother, in a job with very limited freedom, professionally and socially

Is 15k enough to keep working in a company that keeps users addicted to unhealthy behaviors?
>Because each hardware key is unique, this is not a feature currently available nor likely to become available.

You don't necessarily have to do it crypto wallet style and have the private key be exportable. Just adding a public key export (on the security token side) and a way to enroll a token by its public key (on the browser/website side) would allow you to enable 2fa without having to make a trip to the safe deposit box (either to store your backup codes, or to fetch your backup token for enrollment).

>Each token from the yubikey is not (readily) linkable to the key itself since the underlying secret is opaque and can't be exported

That's not an issue. You can derive more ECDSA public keys from a single master ECDSA public key[1]. The corresponding private keys can only be derived using the corresponding master ECDSA private key, and the generated public keys can't be linked back to the master ECDCSA public key. Bitcoin hierarchical deterministic uses this property to generate wallets that don't need regular backup (all your addresses are derived from one key) and apple's find my network uses something similar.

[1] exact mechanism is described here: https://bitcointalk.org/index.php?topic=19137.msg239768#msg2... starting at "Type-2 is a bit less obvious [...]"
“Sounds like actual hell in comparison” What gives that assumption?

I have been taking the Caltrain for work in the past decade, sure it isn’t the most ideal or perfect railway system in the world debatably but it sure is the workhorse of a bustling population that doesn’t get as much praise for doing it’s job.
I understand how and where they are installed.

The question is, when 2 packages, pkgA & pkgB bring in the same library, call it "thelib.so" into the system, logically, only 1 of them can be refered to by the symlink in System/Index/lib.

So we have both

/Programs/pkgA/1.0/lib/thelib.so
/Programs/pkgB/1.0/lib/thelib.so

And lets say the symlink points to the file of pkgA:

/System/Index/lib/thelib.so -> /Programs/pkgA/1.0/lib/thelib.so

What happens now if I remove pkgA? If nothing changes, the symlink would be dangling, and pkgB would no longer function because the libraries are looked up in the index.

My question is: how is the pkg management system resolving this?
I live downtown (North Loop) with my wife and two daughters under 5.

The crime narrative is strange, and the restaurant scene has never been better.

The downtown core isn’t quite the same, but that’s of course because nobody goes to the office anymore - but they’re still building everywhere (including another 40+ tower on Nicollet)
Not even loss aversion replicates well.
Hmm I think I meant menagerie. But yes, evolution and especially sexual selection creates a lot of interesting behaviors, and some of them a purely win-lose, and yes in people as well. There's a reason cheating on your partner is a trope of soap operas.
I never worked at Apple, but I've been an Apple developer, since they were a pretty scruffy outfit, and everyone was waiting for them to go belly-up.

From my perspective, Apple has always treated their engineers quite well. Guy Kawasaki once said that "Working for Apple is like being paid to go to Disneyland."

It may no longer be the case, but I have always assumed that engineers at Apple have always felt valued.
As a person who is hard of hearing, please don't wear your mask forever. Wearing a mask is not all benefit for everyone.
Studies are showing that everyone wearing masks are also stunting the emotional growth of newborns.
A cloth mask doesn't do anything, there isnt much benefit. Society as as whole will benefit more of people don't wear masks.
The "shouldn't" can be ignored when the hospital is at 100% capacity; when in crisis, things no longer happen as they "should". Even more so, some "shoulds" must be ignored, or you'll have patients queuing up outside the hospital.

Unvaccinated people literally have smaller chance of survival.

Whether vaccination status is to be included in the triage point score is an ongoing debate -- it currently isn't: https://www.denverpost.com/2021/11/21/vaccination-status-col...
America needs more science and technology literacy
Happy to give them credit. I just refuse to give them my passwords.

> The only thing I pay for is the managed hosting

Funny, I was happy to pay them until they removed my ability to store it myself.

edit:

> CVEs are relatively mild compared to LastPass

LP is not the relevant comparison. The relevant comparison is an encrypted store on my laptop.
That is how it works with my operator. Once the eSIM is activated, it's tied to the phone. But I'm not ruling out it's possible to make the QR code "reusable".

Getting a new eSIM is not terribly complicated. But you have to log in, click through some menues, wait for an SMS code and an email to arrive, wait a couple of minutes.
All the good docs I have seen were written by an engineer who captured their own knowledge for themselves or others. I have been at several corporations where I was able to onboard myself or resolve specific issues by searching confluence or whatever wiki was available. Totally different teams/divisions/departments.

Juniors need seniors more than they need docs.
AR is a superset of the smartphone
>> Why are you making stuff up?

I'm not.

Serious question: how many students and faculty currently at low-tier institutions have you talked with in the last two weeks? Two months? Two years? Do you sit on any boards or advisory panels at these types of institutions? Do you actively recruit from these types of institutions? I do. All of those things.

I know what I'm talking about. Stop being mean to me.

LACs pay junior faculty $65K and those faculty routinely place students in positions with >$150K total comp. These are facts, even at low tier colleges.

Every student? No. Some students every year? Absolutely. If you teach CS well and make $65K, almost all your students will make more than you do at their first position and many will make 2x-3x. More than enough that you'll start asking "why the hell am I here?"

> These sorts of careless lies...

This rant sounds extremely personal. Not going to touch this.

>> the total comp number for top-tier MBAs is about half of that.

> Wrong in a very different way here. You should stop.

Total comp out of a top CS PhD programs lately is around 200K-300K range with some outliers.

Total comp out of a top MBA program lately is around 100K-200K range with some outliers.

Average outcomes vary considerably. That's why my original post is properly conditioned on "top".
Games that aren't fun are work. Axie, from all accounts, looks like work.

On the flipside, there are tons of regulated games that are both fun and allow users to flex their niche knowledge, like FanDuel (sports), BigBrain (trivia), and so on.

Just because Axie is a poorly designed game doesn't necessarily invalidated the larger point that jobs and income are changing, and gamification of skills is an interesting trend that is likely here to stay.
> It almost seems like the google and microsoft spam filters are a bit of a protection racket

That is expressed in such understated terms that one might be forgiven for suspecting the OP might be blowing smoke (he wasn't, of course; he just seems to be the sort of guy that doesn't care to rant).

I thought it was a very good, well-written article.
Yeah after living in Chicago for the last 7 years, SF doesn't feel very big like it used to when I lived in the Bay Area many years ago.
> Apple pays $180k over 4 years to prevent good engineers from going to Meta

Much better wording than what the article says, which is "likely meant to keep companies like Facebook parent company Meta from poaching employees".

Poaching, as far as I know, is illegal trafficking of animals. Why are media companies insisting we see the human workforce as animals, and that we should view companies offering better pay/work as "stealing" employees when in reality, it's just people switching jobs, something that is normal?
Apple is reaching a size where the un-coordination of its leadership and processes as it has grown (while yet rigorously enforcing other negative aspects of corporate culture) are producing a place that is harder and harder to enjoy working for. It worked for a while when the company was small enough and lines of command were short enough for leadership to control effectively, but it has grown while the people processes have not been consciously updated to fit.

Maybe this is just 1% problems. So let me be specific and you judge. Promotion within Apple is getting nearly impossible as a career path, because company-wide "standards" on how to promote someone (above a certain level) invite division-wide scrutiny and justification to peers (of the people doing the promoting). Not to say that it was a huge career path in the past (you had to be lucky), but at least you got paid competitively. Now, can't pay someone market rate because that would be going out of band. While at the same time, people who come in as "headline" hires from external are given not nearly such scrutiny and instead get $Ms and hiring bonuses and directorships. AIML, I'm looking at you. Strict standards for the masses, bonuses for the leadership.

And Apple is also not good at training/setting up/teaching people how to advance while working inside the company. So you are practically incentivized to leave and come back for your career advancement (once you realize it and want to stop banging your head against the wall). But not in any way that was deliberate, which loses the company a good deal. Maybe doing that better could have saved the company the billions they're having to pay now to keep people.

I remember a Steve Jobs quote where he said, "we don't hire smart people to tell them what to do, we hire them so they tell us what to do." It doesn't feel that way much at all now, because seems like Apple just wants labor.

And the annual review system is a joke. It serves just to gather feedback from peers and file it away in the drawer, since the salary bumps and bonuses are already all determined top-down from leadership. So what's the point of giving feedback or striving out of your way (unless you have some project that's got major visibility on the line)?

I thought that Apple was a welcome exception from the college-kids-software-companies, with some more maturity and rigor to it. Turns out every company has issues. Eventually you come to accept what the company is in your small pocket of it, and take it or leave it.
Won't be cheap but most of the colocation service providers listed here, will sell you 1U-2U of rack space and DIA/IP transit for a self hosted mail server.

https://www.seattleix.net/join

Don't have to connect to the SIX or have an ASN, just buy default routes from somebody with a presence near the "core" of the internet in Seattle. I'm using the SIX page there as a handy list of westin and westin-adjacent colo providers.
It's pretty awful.

I got Dell's "5k" ultrawide before the XDR, and at the time M1 Macbooks couldn't do fractional scaling at that high of a resolution.

The result was essentially a wider 32" 1080p screen. And while the text was crisp, the space efficiency was absolutely awful.

I can't even imagine the 16:9 version of that...
Having lived in Minneapolis proper for the last 10 years and growing up nearby, the restaurant scene is VASTLY better than it was before. We used to have stuffy, overpriced, mediocre restaurants. Now we’ve gotten vibrant, new and creative places that aren’t just serving the same old fair dressed up. Sure some of the old classics have closed, but there’s always been a new, better place taking their spot. Case in point, Lucia’s => Sooki & Mimi. Lucias’s was good, but Sooki & Mimi is phenomenal
> Gamers have a word, grinding, to describe repetitive tasks undertaken to gain some desired in-game goal, but are not fun in themselves.

Is this actually true? The linked article doesn't say anything about it being fun or not. I love grinding and think it's fun in itself.
This might be helpful for that: https://github.com/hhyyrylainen/GodotPckTool
Our Covid-19 Mandates Make No Sense Against Omicron
Agreed with "usually". When you model pipelines, you must know the cache behaviour of your workload, otherwise it is a waste of time. But when you do, in order to approach theoretical machine limits, you do need airtight core resource utilization in your kinner loops.
I find the same with photography. I notice when editing that the first photo of a scene / subject is the best photo much more frequently than chance.

Though it's also true that the last photo is also much more frequent. If I took 20 photos of something, I'd say I use either the first or last photo taken probably 1/3 of the time.
The reactors can be small, the plant has to be big to have economies of scale, right?
Navigating RISC-V Privilege Levels
Browser-based managers only work in those browsers.

I use passwords on my iPhone, MacBook, and Windows, so I need a manager that can provide passwords across all of those (and not just in a browser)
> Botting in general was the wild west in this game from about 2008 - ~2014.

There’s a weird, secret history around Runescape botting that I really hope gets told in full one day.

Essentially, the biggest and best botting client from the 2008-2011 era was Powerbot, later rebranded RSBot. It was written and managed mostly by some CS student from the UK, who went by the handle Jacmob, and used some bytecode editing + reflection to bind game objects directly, meaning that it allowed full interactivity with the underlying game, rather than just a simple image recognition and mouse control framework.

During this era, Jagex (makers of Runescape) made some big efforts to combat the botting. They started using obfuscators to make reverse engineering the bytecode harder, and reworked the handling of all String objects internally to mask them. There were more efforts, of varying success, but without fail, this one guy would have the botting client (and by extension, the whole botting ecosystem) back online in a week or so.

Flash forward to 2011, and Jacmob starts teasing something big for his RSBot 4.0 release: a “web-walking” API that would allow script writers to input any two positions on the world map, and have the botting client find them a path there, navigating through buildings, portals, teleports along the way. This was going to be an absolute game changer - script writing required insane attention to detail, trial and error, and tedium to navigate the world map in a slightly-randomized/hard-to-detect way. And yet a week or so before the big release… boom, another big effort comes from Jagex to stop the injection clients: the Great Bot Nuke of 2011.

This was different from the prior attempts by Jagex. Radio silence from Jacmob and the RSBot team, which was weird given the pending release. As the dust settled over the following weeks, it comes out that Jacmob, King of the botting community, has become Mod Jacmob, employee of Jagex, with very little fanfare both then and ever since. RSBot 4.0 was not to be.

Jacmob left the company several years later, but led their efforts through 2014 to combat botting, with great success. There’s very little information publicly available, but I strongly suspect he was using the obvious strategies of looking at probability distributions for click positioning on game objects and delays between certain behaviors to spot automation.

Jagex’s operations have grown much sloppier after his departure, but the scene has never returned to its former glory pre-2011. One nerdy, talented, quiet figure was responsible for so much of the Runescape community’s development - and yet you’d never know it without having been there yourself. Quite a world we live in.

(@Jacmob, if happen to read this - can I interview you pls <3?)

Edit: this is all from memory, I’m probably bungling the details in quite a few places.
This is 100% a submarine PR article [1] from the Society of Actuaries.

[1] http://www.paulgraham.com/submarine.html
20 years ago i had such hopes to run into that field but man am i glad something else happened (2008)