skysight-inc/HackerNews huggingface dataset:
> If I'm traveling I can just buy a SIM card at a kiosk and pop it in

I don't understand this comment.

Pre-COVID I used to travel a lot for business, with an iPhone.

iPhone has physical SIM + virtual SIM.

My "home" SIM would stay in my iPhone.

Meanwhile I would have one of the many eSIM apps (Truephone, GigSky etc.) on my phone, which I would activate for international data for X days which would enable me to continue doing VoIP and messaging apps as normal.

I don't see the need to go buy local SIMs (and indeed, in some countries, buying SIMs as a foreigner is difficult for legal not language barrier reasons).
Age can't authenticate when encrypting to a public key because it doesn't support signatures. So don't use it in this mode unless you know what you are doing.

Most people should just use GPG for stuff like this.
Thanks for Stadia maps! Happy paying customer here and it substantially lowered my map hosting bill compared to mapbox.
Hmm ...

Application error

An error occurred in the application
and your page could not be served. If
you are the application owner, check
your logs for details. You can do this
from the Heroku CLI with the command

heroku logs --tail
> I’m not sure that’s true; some people do get weirdly evangelical about WFH.

I don’t think its evangelical as much as protective.

I for one have had to endure grueling years of working in open office environments. I’ve got pretty severe adhd and anxiety, that’s not a good place for me.

With covid, the world shifted to working how I prefer. I’m terrified it’ll go back to how it was.

So I’m sorry it’s been a rough couple years for you, but please understand that it’s been a rough lifetime for people like me.

Because office work is still the default mentality for most people, this new world that’s aligned to my needs is in constant jeopardy.
Yeah, what doesn't make sense is that the emails we all received says:

"Someone just used your master password to try to log in to your account from a device or location we didn't recognize"

so either:

- the email was sent incorrectly i.e. our master passwords were /not/ used to login. In that case, why was the email sent?

- the email is correct i.e. someone does indeed have access to our master password (it was confirmed to me by one of the support agents -- that email is supposed to be sent out when the password is correct but used from a new IP) -- in that case, how is it possible that >20 people here were compromised?

In addition:

- many people here report never using their master password anywhere else

- and... not all accounts were old i.e. from 2017. A few accounts were from October/November 2021:

https://news.ycombinator.com/item?id=29711950

https://news.ycombinator.com/item?id=29710262
> Phones already were water proof when they had sim cards and phone jack.

Water resistant you mean. Eliminating more holes will just make them more water resistant, it’s a spectrum of course.
Interesting, do you also take advantage of the excess amount of water being pumped through your system with a reverse osmosis system?

I would imagine this would be of great benefit if You are already moving the water to heat and cool your home.
Zen. I do the "shikantaza" version of it every day in a 40 min session (20 min sitting, 20 min walking - yeah I know shikantaza means "to sit" or something related). It's a very intense type of zazen meant to gain a very clear perception of your body and surroundings. When I first learned about it, the example was that the engagement is not unlike engagement you would have if you engaged into a swords battle to death. That you cannot slip and need to be super duper alert. There are many elements that come into it actually and it's all well described in a book "3 Pillars of Zen".

I have noticed that the intense focus does me much better than calmer types of zazen like counting breaths. I'm only intense during formal practice, but in daily activities I just try to relax and focus on the task at hand - nevertheless, if it was not for the daily practice of the intense version, I would not be nowhere near as alert when I'm more relaxed.

The combination of formal practice (40 min of shikantaza) and the right attitude (to engage well into every task, no matter how menial) did wonders to my wellbeing and quality of life. It is a powerful tool for change and a great way to practice spirituality.
But my phone with USB-C, 2 SIM, SD card and headphone jack is alraedy waterproof. I literally wash it with soap and water to clean it...
I on the other hand have been on Verizon's no-SIM CDMA network. Didn't like it, and don't want to get back but this time giving the power to phone manufacturer's. SIM is giving power to the customer, and I actually don't understand those sheepish comments on HN.
> Unless @gregsadetsky had his computer access full hacked.

He stored the LastPass password in KeePass, right? KeePass has had vulnerabilities allowing JavaScript on any web page read secrets from the KeePass storage.

I'm not saying that's what happened, but I don't think it's safe to say that "had his computer access full hacked.".

There's also plenty of NPM packages and similar which has had vulnerabilities which could have extracted passwords from whatever storage is used. Then it doesn't matter if the account was dead or not.

Also, it's not safe to say that "there must be a software all these victims have in common". An attacker can specialize in LastPass and may have purchased several credential lists right? Maybe some credentials were extracted via some vulnerable NPM library, maybe some via KeePass vuln, maybe some from password stuffing.

We're just speculating here, but I think what you're saying is a bit too definitive based on what we know so far. To me, LastPass seems a bit like a mess so I would not be surprised if they are to blame though.
Also, you can have 9 (or more) inactive eSIMs installed and one active eSIM and switch between them at will.
Yes, it's entirely soft skills. But they work very hard at using their soft skills to solve trivial business problems.

Every worked a marketing or revops job? It's mind-numbingly trivial, the likes of you and I wouldn't last a day. But these MBAs do it all without blinking, and do it passionately. And I, for one, appreciate them for that.
OK, then one would just tell B Corp to remove them the list no? I don't see how this invalidates all companies on that list.

What company is this anyway?
Most of the examples of a free business model I can think of are built on advertising, which also requires control of the playback devices to prevent you from skipping them.
This has been already posted at least five times
Show HN: Turn GIFs into ASCII animations for the web
Ahh, okay, but requiring identities means you must have a central authority to issue them or they must be extremely costly (proof of work or similar).

Of course this doesn't make this useless. If identities are all you need then you've devolved the role of the central authority to nothing more than something that says who you are. If there is no provision for centralized identity revocation then you don't have a censorship problem because once you have an identity you have it forever. Identities could also be anonymized keys where only the central authority knows the true identity, minimizing privacy exposure surface area.

Decentralization isn't boolean. This is more decentralized than Raft.

Edit: I suppose proof of work for identities could be less costly than continuous PoW. The work required just has to be high enough to make sybil attacks expensive enough to meet your threat model threshold.
This seems like critical prerequisite infrastructure, which is fantastic — although not yet what I was asking for. As far as I can tell there is not yet a way for individual WordPress installations to actually benefit. However, it seems that work is underway: https://gossamer.tools/project/wordpress

> The intention was to allow security vendors to offer code reviews of open source dependencies

What I care most about is just quorum publishing where multiple independent identities sign a release, so that an attacker has to compromise multiple trusted identities to execute a supply chain attack. I'm not too excited about reviews beyond that. The main thing is to upgrade collective ecosystem security by hardening automatic updates.
Google is pushing the new language Logica to solve the major flaws in SQL
It is because you and others got your facts wrong.

Telegram is not unencrypted. This is a lie spread by certain WhatsApp and Signal fanboys (not all, count me in with the Signal fans - I just happen to be a reasonable one that to some degree know what I'm talking about) with the excuse that "of course we mean end-to-end-encrypted when we say encrypted".

What we see now is the resulting confusion: why don't law enforcement have access to it if it virtually unencrypted? Well, the answer is despite all claims of how lousy the encryption is for some weird reason[1] it doesn't seem to leak data.

Now that we have seen the confusion that stems from saying "encrypted means end-to-end-encrypted when we say it does", can we stop repeating that nonsense?

Also, can we think twice before mindlessly repeating such stuff in the future even if it was originally said by some extremely smart people that are well respected for good reasons?

Because those very smart people were the same who recommended WhatsApp for a long time until it became painfully clear to everyone that:

- WhatsApp leaks metadata to Facebook which cooperates happily with basically any government as far as I understand

- WhatsApp has uploaded unencrypted backups to Google Cloud (yes, probably over https, but Google got all you messages and it was known that they would datamine it.)

- and more¨

PS: Some time around half a year before Telegram launched WhatsApp actually sent data unencrypted, i.e. as plaintext. And they sent it over port 443..!

PPS: Stay safe folks, opsec is probably more important than the exact messenger you use. My bets today are Signal in the short run and Matrix as soon as possible, but personally I send photos to my parents using Telegram and receive a lot more info back from various groups.

[1]: Meaning either this is a bigger honeypot than An0m and everyone Three Letter Agency including both FSB and NSA are in on it or Telegram actually got something right. Or they have just been extremely lucky for 9 years in a row or something.
You could run a quassel server somewhere. If you're already running a server somewhere for something else, adding quassel to the mix is pretty easy. Then use quassel as your IRC client.

I've been doing this with IRC for about 3-4 years now, and it means that I'm "always online" as far as IRC is concerned (except for server maintainance stuff). To a reasonably approximation, I never miss anything.
The article is very weird. If the author doesn't understand the value of the aerial imagery (global) they have obviously never tried to license this stuff globally.

That alone should give Microsoft "platinum" status.

Secondly, you need users to justify investments in these products. Microsoft brings users. Now businesses and others start paying attention, updating their details etc.
Songhay is from the 15th century and was developed after contact with other civilizations.

Tamasheq is not sub-Saharan as it was developed in North Africa.

I commented about Ge’ez and how it’s fairly modern (1k years old). So I agree that it’s sub-Saharan, but just not that old and unlikely to be used in the area that is presently Zimbabwe.

There may be other written languages in sub-Saharan Africa that we don’t know about that were used in ancient times where we would be impressed with these engineering structures.
FWIW, it seems like the parent comment was just quoting you, not using scare quotes. I didn’t find your use of the words particularly self-evident, it might be worth patiently explaining what you meant rather than attacking.

Parent’s valid and legitimate point is that if nobody pays for the content then it’s not a viable business model and it won’t get made in the first place. You can’t pirate a movie that doesn’t exist.
ooh, I can answer this one. It seems abundantly clear that the premise of the article is that many people don't believe that African civilizations in that time period could have built walls or drainage channels like this.

It was little clues in the text that gave it away, like this: "That is because, says Mr Chirikure, Great Zimbabwe should be a “symbol”, not just of Africa’s power and potential, but of how outsiders have too often told Africans’ stories—and got them wrong."

If the prevailing idea is that this relatively rudimentary technology was too advanced for the people of the region, then this discovery is evidence to disprove that. It doesn't have to be "sophisticated" on an absolute scale. Only relative to expectation.

Imagine a 5 yr old wrote working Java code. Any working program, even the equivalent of a drainage ditch, would be worthy of praise. And something as simple as a linked list could be described as a "sophisticated technique" (for a 5 yr old)

Understanding context and reading the article are, as ever, the keys.
Solving the problem you care about requires doing what I just said. :)

And, yes, there is a lot of work necessary to get WordPress to use Gossamer. I can't guarantee a deadline right now, but 2022 looks hopeful.
While The name is Smartphones, but it actually acts like a computer. It is a multi function, multi paradigm devices. There is nothing "phone" about it other than the name.

Smart TV is an appliance with software applied on top. No one wants all that smartness interactivity. You are fundamentally still just viewing content on it. But those smart features often did nothing "smart" other than complicated the hell out of the process.
Tie between Julia and Haskell, for different reasons.

Julia has an intuitive and expressive syntax, while having good flexibility and the ability to work in multiple paradigms. Also, being a scientific programming language, it lends itself well to much of my work.

Haskell is rigid enough to force good design; this "higher barrier" generally results in better mental models by front-loading the understanding of a problem.

Honorable mention to a non-language, the Makefile. Especially with things like help targets[1], it's a very good accelerator for picking projects back up after they have sat on the shelf a while.

[1] https://marmelab.com/blog/2016/02/29/auto-documented-makefil...
I’d hesitate to say that it helps (certainly does reduce attention span) but two beers does a lot more damage to my coding ability than two tokes.
I hope that they will refrain from "optimizing" the new structure in every major release... Looking at you, Windows!
oh, you don't know what you're talking about! let me tell you why IRC is vastly superior...

* tomasklaen has quit IRC (*.net *.split)
the only thing you can take out is your content... read here. That you don't have ownership of anything on a platform like discord should be clear with all the ToS threads about user generated content in the last years.

https://discord.com/terms under "Your Content"

or

https://support.discord.com/hc/en-us/articles/360004957991-Y...
> It almost seems like the google and microsoft spam filters are a bit of a protection racket, forcing people to buy their services.

I don’t have any evidence for this view but have believed the same for several years.
Whoa, sigstore maintainer here. I've never seen or heard of Gossamer before. It seems very similar in design!
Yes. OP has clearly not talked to any FAANG recruiters, for example. The default assumption is still that you’re moving to the Bay Area for in-office work, like it or not.
One could generalize this quite widely :) I think humans can always find a pain point...
This whole thing has "everything is terrible" vibes

Around 1:03 there's leslie nielsen introducing a section where they interview a bunch of hackers which is pretty funny
TL;DR NixOS uses hashes based on all dependencies that go into a package build and GoboLinux uses version numbers. Which makes Gobo easier to use, but less secure.
This video is from 2014
Things to consider before joining a bootcamp
Crimes of Fashion: Clothes in early modern England
A problem with renting any non-sedan car in the US is that the rental companies tend to remove the back shelf, leaving the contents of the trunk exposed. This means you can’t realistically stop anywhere and leave even small luggage hidden in the car. For this reason, I tend to refuse SUVs and hatchbacks, and insist on a sedan.
You’re certainly not going to build a clubhouse if you don’t have 500 errors under control.
Arguably being more permissive could lead to more recognition. Lovecraft's mythos probably wouldn't have taken off the way it did had he been the only one writing it, but he was very permissive about letting others write their own stories in it (although I'm still unclear as to how he kept his name so closely associated with it when there were plenty of other writers riffing on it).

In the tech context, if something you make gets a lot of uptake because a lot of people find it useful, then the spread of the useful thing could mean more recognition for you. But taking hold of that recognition will still require extra effort, like going to conferences to talk about the thing so people can put a face to the name.
I'm an Elon Musk fan. I have no illusions that he's a nice guy, or even particularly mentally balanced. I just think that his accomplishments are awesome, at Tesla and especially at SpaceX.

That said, I would never buy a Tesla. From the hit-and-miss fit and finish to the touch-screen-only interface, I'm just not at all attracted to those cars. And particularly the over-the-air updates, which are apparently not only buggy, but change the interface and capabilities of the car radically, often for the worse. I don't want to drive a car that's forever in beta test mode. I like my cars dependable and predictable, which seems to be the opposite of what Tesla is selling.
Actually, they can, and do. The Pixel 6 will not charge with cables and chargers Google deems "low quality", which seems to be anything that doesn't meet the USB-C spec.

https://9to5google.com/2021/11/29/pixel-6-reject-charging-ca...
Totally agree. I implemented a page with tons of posts on it that will hide the posts before the provided cursor in the url and I simply show hide them with display: none. Even if it’s 100 posts hidden, the images are lazy and clicking “show” unhides all of them immediately. If new posts come in we simply append to the top of the parent container with basic DOM apis.

The app were replacing with this page is heavy react and there’s a long visual stutter during the show hide because it has to render them all. Not simply show/hide. They actually load more bits to lazy load the posts in JS than to simply send the html and hide/show.
Ask HN: How does my Instagram keep getting compromised?
I was an early Instagram user and got my nickname as my handle and I keep getting either locked out of my account or compromised altogether.

Over the years, hackers have tried a number of things to steal my handle and I can usually tell how they get in. These days, I have no idea. I've been SIM swapped a handful of times. One time a hacker faxed a fake ID to Godaddy to try and swap out my domain to gain control of my email (they were successful).

Now, I will try to log in to my account and will just be locked out. The email I created specifically for Instagram is not recognized, and there is no way to reset my password.

I have two-factor auth on, I don't use the same password anywhere else, I change it regularly, etc.

My current theory is there is some employee at Meta that's ultimately stealing the account. Does anybody have any idea how they're hacking me?

PS: the worst part about all this is in order to get the handle back, I have to pull strings with folks I know at Meta, for a normal user, they would have absolutely no way of regaining access...

[Update] Just got the account back and still have no idea how my email was removed from the account...

[Update 2] Reviewing the security section I see a password reset email was sent to [username]@instagramz.com. No clue how or who changed the account email to that though.
> Schools don’t teach you a method of thinking.

This “schools should teach X” is quite the meme. Most of the things I learned in school were fast forgotten. So when someone says “X should be taught in school” my first thought is “we should promote X to become easily forgotten…”. :)
Tim Cook, is that you?

Seriously, as an extrovert, have you actually talked to any of your fellow extroverts? All of them want to be in the office at least part time. You’re in good company.

However, many people want full remote. And we all want more flexibility than FAANG is currently willing to provide.
I think they hate that question, because in theory it's a proof of digital ownership.

And in practice your are correct, it's only used for memes/avatars. Or even game companies use it as an avatar in their game.

The thing is:

Proof of ownership is not done digitally.

So while it's digital ownership in theory, in practice it doesn't make any sense.
Users just need to insert signed data into the database for tamper-proofing.
Many of the migrants are in fact legitimate refugees from conflicts that the UK was intimately involved in the last 20 years (Afghanistan, Syria). Others are economic migrants from parts of the world that the British empire was directly responsible for fucking up. Most of the people of UK don't want to hear this, but we reap what we sew.

In any case, Brexit has made the problem worse because now not only does the UK have a problem with boat crossings, but we have strained our relations with the country that the boats are coming from (France). The boats are indeed leaving the EU.

In the absence of any logical reason to have a poster with a line of brown people and the text "Leave the EU" emblazoned on it, the only reason can be a bigoted one.
True enough. But is this a problem with WFH vs in-office? Or this just an issue of people not prioritizing having a life outside of work? For most of us, it won't happen unless we actively commit energy to the process.

(I am commenting outside of the constraints of the pandemic. Covid obviously makes it much harder.)
PHP, unironically. I started in WordPress and have since moved to Laravel.

Although, I've started toying with Elixir and I'm considering moving to an Elixir shop when I get back from a big trip next year. If anyone is interested in hiring a senior software dev that actively wants to learn Elixir, hit me up!
To me, there is nothing to indicate this is a power grab by Apple.

Google supports eSIM. Google can sell you cell service for your iPhone from the couch.

If any phone manufacturer is trying to compete with the carriers, it would look a lot like Google, which made a global MVNO.

Yes, there is usually a business motive behind every business decision. The GSMA makes it sound like the carriers want it, as well as the phone manufacturers:

“Simpler device setup without the need to insert or replace a SIM card;

Devices that can operate independently of a tethered smartphone, with their own subscriptions;

A range of new, enhanced mobile-connected devices.”

Emphasis on “with their own subscriptions”

https://www.gsma.com/esim/about/
As a traveler you can have 10 or more eSIM profiles. That means you can have a great 130 multi-country eSIM like the AIS eSIM2Fly or if you go to a single country you could get their local travel eSIM ( for example the Thailand DTAC Tourist eSIM ). Just switch between your active eSIM as needed. iPhones have more than enough eSIM slots to accommodate your travels, with no more need for plastic chip fiddling.
Chrome: Version 100 Fails on energysavingspecialist.co.uk
Some governments already do, and sometimes at a massive scale. See for instance the mass import of French cadastre in OSM in 2008. We are talking about millions of georeferenced entities.