skysight-inc/HackerNews huggingface dataset:
2FA is an abbreviation for "two-factor authentication" means that to authenticate a client, you require two of the three factors: something secret that they know, something they physically possess, and something they are (biometrics). It's important that you require both of the two factors to authenticate, not either of them. Email and phone numbers are not even one of these three factors, so not only are they not "standard methods of 2FA", they aren't methods of 2FA at all.

Someone who claims they are using 2FA, but actually authenticates with email and/or phone numbers, is committing fraud.

Even if, for example, a phone number were something you physically possessed, authenticating with only the phone number, or with the phone number plus any number of additional physical possessions, wouldn't be 2FA, because you're still only using one factor: "something you have".

Historically, voice-based biometrics were a valid form of biometrics, even without a trusted path: you could prompt someone to say something they hadn't said before so that an attacker couldn't play back a recording. That is no longer the case. As https://news.ycombinator.com/item?id=29712024 pointed out, Tacotron made this a plausible threat already in 02018.

What do I expect bank employees to use? Well, starting 34 years ago in 01987, classified voice communications used a STU-III, which authenticates both parties with public key certificates. PGP made that level of security available to everybody 30 years ago in 01991; Git uses it to sign tags, and Debian uses it to sign packages since 02005: https://wiki.debian.org/SecureApt. Every HTTPS website uses something similar, though browsers routinely trust untrustworthy CAs, which vitiates the security of the scheme.

While we can't expect bank employees to be as technically sophisticated as Debian volunteers, I do think it's reasonable to expect them to be less than 15 years behind, particularly when tens of millions of dollars are at stake. I don't believe that this will actually happen with the existing banking institutions; instead, I believe that they will fail and demand bailouts, which will just expand the scope of the disaster.
DRM manages rights like jail manages freedom.
This is a great explanation of the NFT market
In the thinkpads I added a sata ssd to replace original 320gb or 500gb spinners. Either crucial or Intel,nothing fancy. For one of them I replaced the DVD drive with secondary 2tb HDD for photos / movies... Ah ultra bay, how much we miss thee :). The 420s (slimmer version) is basically as lightweight laptop as I need, but has great keyboard and easy modularity of drives memory battery etc. What a time it was to be alive!

My main laptop is ThinkPad t25 which is basically t470 with traditional keyboard layout. 512mb ssd. No room for secondary HDD.

My main desktop is an aging beast - amd fx8350 and rx470 8gb. Bunch of ssd and HDD drives at any given point :).

Speaking of storage, synology 918+ as Nas fwiw.

Bunch of other computers around such as ThinkPad e545 and e580, plus an intel nuc around every tv. None of it fancy anymore, I have no time left for complex vlans or VMs or breakable OS's, but computers are my hammer so there's plenty around :-)
For example, if you have camera in car cabin, you could monitor if someone has hands on steering wheel.
A car is sort of essential. Bad comparison.
in Islam it's not an offering to God, and there are no rituals involved. It's attaching the goal of getting to heaven to any action. "I'm eating this food because it will help me worship God" so giving purpose to mindless tasks
our brain is the sole source of our thoughts, and most of our thoughts are baseless conjecture.
Is It Time for the JavaScript Temporal API?
By "lots of [high quality data]" do you mean seconds, kiloseconds, or megaseconds of high-quality voice recordings?
sounds like system language is a nice way to say "relatively low level" then?
This is not about some sort of language leaderboard. If you see the title (as phrased) written in %language%, you’d expect the proposed thing to work in that language.

Anyway, as someone else pointed out it’s a fork, so it’s understandable if docs weren’t fully updated from upstream.
Some of us actively take steps to avoid being tracked all of the time. People like you are the reason people like me have to try so hard. I’m so sick of this argument.
'The mind is the brain' -- his very first premise is a controversial assumption, one that's a long way from being universally accepted. Without that assumption, the rest of his argument falls apart.

There are many people, myself included, who think that while there is a connection between mind and brain (the brain clearly has a causal impact on the mind), the two are not the same.

I'm being quite brief here. I have done a lot of thinking, and even writing (this was a big part of my PhD) about this, and let me just say that there is a lot of room to reasonably disagree with Sean Carroll. His view is just one in the marketplace, and is certainly no more (and possibly less!) scientifically robust than the alternatives.
`sudo !!` is perfectly alright. It references the very last command, which in all likelihood is right there on your screen, typed by you a few seconds ago, and you're aware of the context.

$!(some number) instead is quite insane and much more likely to have unwanted effects due to (potential) lack of context.

Don't conflate the two.
Perhaps you'd like Rust, where all the choices are offered, as functions on integers such as:

carrying_add (separate carry flag on input and output)

checked_add (result is None if it would overflow)

unchecked_add (explicitly unsafe, assumes overflow will never occur)

overflowing_add (like carrying_add but does not provide carry flag input)

saturating_add (the integer "saturates" at its maximum or, in the opposite direction, minimum - useful for low-level audio code)

wrapping_add (what C does for unsigned integers)

Rust also has variants that handle potentially confusing interactions e.g. "I have a signed integer, and I want to add this unsigned integer to it". With 8-bit integers, adding 200 to -100 should be 100, and Rust's provided function does exactly what you expected, whereas in C you might end up casting the unsigned integer to signed and maybe it works or maybe it doesn't. Likewise for "What's the magnitude of the difference between these two unsigned integers?" Rust provides a function that gets this right, without needing to consult a textbook for the correct way to tell the compiler what you want.

If you can't afford to ever get it wrong, WUFFS simply forbids overflow (and underflow) entirely, WUFFS programs that could overflow aren't valid WUFFS programs and won't compile.
Faraday bags are great.
Also functions, loops, conditional statements, and arrays are considered abstractions.
Tell HN: Backblaze backing up on a metered network
Word of warning for backblaze users: it will keep backing up even if your computer is on a metered connection. Just cost me a lot of money...
At the time I was very young and the whole thing was a scam. I couldn't believe that there actually is a green card lottery. /Tangent
Might be because I use the web client? To be honest I haven't put any time trying to get it to work as I've got a simmering resentment about having to waste my time on things like this! On the plus side I've built up a good playlist on SoundCloud.
Can you navigate C-r history, or are you forced to see only the last command?
It's nothing new, and yes, checking licenses is a usual task to have on your CI setup.
IIRC siri uses google for web searches and siri falls back to web searches for questions it does not have a specific integration for.
Not out of their own personal convenience, I hope. And especially not without teaching them first how to properly maintain things safe and in working order.
I touchpad or mouse with both hands, to balance the stress on hands
If Apple was doing this, everyone would know by now. That’s why I buy Apple. They at least pretend to give a shit about privacy.
>>Europe is pretty happy with its public services [...]

> Are Germans "pretty happy" with 30% higher energy prices in a single year, due to anti-nuclear (anti-science) policies? [1]

I think you might be conflating two things here; energy is not a public service in Europe, electrical power is provided by commercial companies, so I don't quite see how this is relevant to the discussion of public services.

Right?

> Your appeal to European supremacy

I'm letting this one slip for now.
How old is your domain? I have noticed that email providers are biased against new domains.
The CPSC doesn’t exist to ban children from using products for their own safety.

The CPSC exists to ban companies from putting children in danger for their own profit.
We're in delayed fulfilment hence some additional risk (quite some time between selling the service and delivering the service) so I get it

1. They already hold 50% (!!!) of all our revenue in reserve for 90 days for the last months (currently a couple of MILLION USD)

2. We are already in the process of moving away from Stripe but they have until now never pulled something so low. The reserves are already massively hurting us, hence moving to an actual acquiring bank but now giving us 2 days in between Christmas and NY is just insane.
That's OK, as long as they understand the issues and make an Informed Business Decision(TM) to accept the risk.
Forte Agent was the only reason that I had a windows PC in the mid/late 90s. Yep an IXer posting with Agent may have made me the butt of the joke, but that was some of the most intuitive software ever written.
It's not "ironic", it's one more proof that "AI" doesn't work. The danger of AI is not that it will take over the world by itself, it's that we will trust it to drive us off cliffs.
I would agree for million (depending on market segment, you could be talking straight with mfg then). But we were talking about 1k, a tiny quantity as far as production rounds go.
Sounds like it's game over for El Presidente soon - technology aside, the entire strategy is sketchy as hell, to my knowledge.

Everything around Chivo appears to be classified, including who holds the Bitcoin. Nobody in financial regulation or central banking is prepared to talk about it - why?

I have spent only a little time there, I drove across it twice, and it's staggeringly beautiful, but my key takeaway was that the country has very strong reasons to not trust their government. The current leader has been demonstrating all the classic power moves of a dictator and "creating a volcano-powered Bitcoin city" is one hell of a dead cat story.
Pirated content doesn't need ads because they steal the work of people who do.
There's a way: don't use the app.
My Pixel 4a supports multiple eSIMs being installed, but I don't think you can use two actively.
Need more context.
You can! If you do C-r again, then it will show the next command in your history for the given search.
Literal collision variation:

You are walking down one side of a hallway. It is only wide enough for two people to pass side by side.

Due to shoddy logic puzzle-appropriate workmanship, the hallway lights only work when nobody in the hallway is moving, and otherwise it is complete darkness.

A person is coming in the opposite direction, on the same side as you.

As a logician you are far too shy to be able to speak to this other person directly.

How do you avoid colliding with them?
Hmmm, pulseaudio volume control allow me to change the volume and device used for every single source (app, firefox tab...) I am running.
What's an example of decreased utility? Less parking?

My biggest issue with increased density is shit design. Like, when they spent all the money on lawyers to get approval and stiffed the architects. When it is a nice 5 story building I love it.
I could have, if I knew that it was him who said it. Thanks for the info.
Good point. I hadn't considered panic!() in particular which is used in std, and the Debug implementations in std won't make a huge amount of extra sense after macro-pre-processing either.
Offhand I'd say there's at least 3 reasons. Notoriety - either pseudonymous or otherwise, bait - like a state actor, and as an attack or exploit against a site operator. This is assuming some definition of public where a casual user not searching for or desiring it can discover it.

So basically the same reasons as any other undesirable or "illegal" content being found publicly.
If the title were written in Mandarin I would have no clue at all what this software is about.

I too was slightly disappointed to find in the repo that this version is for Mandarin, but the amount of life time lost by clicking on a Github link does not make me want to complain about it. I got over it pretty quickly.
I’m currently working my way through the Hugo award winners and am in the time of The Forever War and Gateway. I also recommend them for the most part. Rendezvous with Rama around that time is also really enjoyable.
Much bigger mistake is the need for parent to wait for its children si they can be cleaned up. Isn't that what the OS is for?
I usually complain about stuff like that. But honestly it is really well executed here. And it's only for the introduction.

I think that we are so conditioned to have shitty experiences, that we brace ourselves at the first sign of multimedia.
I'm sorry, tell me more about the $4000 pair of scissors.
I kinda agreed
I still recommend Name of the Wind. It's frustrating, but I would rather have loved and lost, than not loved at all.
What do you mean? I have never had a problem with them.
A common example of a CPSC ban is “lawn darts”, which were weighted metal spikes that you’d throw in the air and try to embed in a target. Enough children were killed that they’re now outright banned, and have been for something like thirty years.

Was it right for them to ban a children’s toy that was specifically designed in a way that, when used correctly, would have a significant chance of killing children?

Another instance of CPSC recently is seen in the Peloton treadmill, but they’ve been doing safety recalls for dangerous
yet little-noticed stuff like Generic Crib ABC That Strangles Babies from the market for decades now, once their process established a true risk of harm due to design defects.

I think I’m net comfortable with their existence, personally, since they don’t seem to issue recalls needlessly, and they’ve materially improved the safety of children without banning many products that will be missed.

Lawn darts may be cool, and it’s probably uncool to ban them, but no child is going to suffer for a lack of lawn darts in their life. Development requires human attention and play time (not screens), and there’s plenty of other ways to achieve that without CPSC-banned products.

I get that my views here are a viewpoint and an opinion, but I’m not yet persuaded that either the CPSC is overreaching in general by existing, or that their involvement in smart assistants would be overreaching in specific. Fortunately, since they do exist and they’re required to act when safety concerns are reported, my views are ultimately irrelevant to their decision-making process on whether to engage on this topic or not. Only legislation could stop them from choosing to care, and so any prediction on whether they will or not is entirely unnecessary.

I think liability overreach is the fault of legislators, who are too cowardly to set reasonable limits on when parents can sue for payment for untoward outcomes. The American legal system encourages “$1000 for a skinned knee, $100,000 for a broken bone” junk lawsuits where chance accidents are plausibly not the fault of playground builders (though in certain cases, they are, and the CPSC intervenes!). Resolving that “grow a spine” issue with our leaders and judges is independent from whether CPSC deserves to exist and is beneficial to public health.
>At this point it feels like biblical fan art

Snorted.

Thanks for that.
This ignores the potential to build stuff in space, which would create a market for metals, like say aluminum. Sure aluminum is cheap on earth, but the delivery fees to space are $$$$.

This article also seems to have a basic misunderstanding how travel in space works. You spend energy to accelerate/deaccelerate in space, you don't pay per meter like you do in the atmosphere. So once in the asteroid belt you can reach any other point in the asteroid belt with very little fuel, if you are patient.
So was the answer “stripe think we’re committing fraud by charging for and not delivering goods because of this delay” or something else?
Corecursive podcast #069 "The Original Remote Developer" about Paul Lutus and writing software for the Apple II - and making it rich. Quite an orthogonal thinker, which made it inspiring even if it isn't 1985 any more.

https://corecursive.com/remote-developer/
> Someone who claims they are using 2FA, but actually authenticates with email and/or phone numbers, is committing fraud.

OK. I'll send you the list of all the companies that have done 2FA with me via email or a telephone number, and you can hit them up for fraud. Good luck! /s
Fits the Zeitgeist (of today)
I've noted once within my personal bash cheat sheet this:

Search the command history

* Search as you type: Ctrl + r and type the search term; Repeat Ctrl + r to loop through results.

* Search the last remembered search term: Ctrl + r twice.

* End the search at current history entry: Ctrl + j

* Cancel the search and restore original line: Ctrl + g

Try of course at your own risk. But works for me.
see also https://medium.com/embarkstudios/homegrown-rendering-with-ru... , a technical post where "Tomasz, a software engineer at Embark explains on how [they] approach 3D rendering of user-created worlds, how Rust helps achieve [their] goals, and share some exciting open source news."

(no discussion on https://news.ycombinator.com/item?id=29636218 )
There's a level of irony in complaining about malicious code, and still recommending a closed source password manager.
Sorry for stupid questions, so what’s there and is it worth it?

Also, do you think that “mind” part is singular or plural, per universe? If plural, where do they come from?

Where is the mind science central, is there a site or a starter kit?
What's the name of the coffee shop? :)
Nope, we're in travel and hospitality (so people book early and stay later) and they don't want to bear the refund risk with Covid-19.

Again, I'm not forcing Stripe to do business with us (even though we never had issues in 4 years and processed millions through them). I just want them to give us a bit more time than 48 hours to switch to another processor in between Christmas and NY.
research community that writes papers rather than software.

This is like lamenting that physicists are not creating enough physics. The foremost goal of computer science is to understand.
If you don't see the arrogance in telling someone talking about the tools of their trade to consider instead downgrading and donating to food banks, as if the two are mutually exclusive, or one topic begat the other: then there was never much of a conversation to be had.

You're free to martyr yourself though. Act like I'm just tearing you down. Not addressing anything you've said in these comments.

-

Maybe in a moment of introspection you might realize that no one would tear you down for suggesting food banks exist, and maybe, juuuuuust maybe you did something wrong when you:

- Tried to make it about choosing between spending money on tools and donating to food banks, as if the two are mutually exclusive.

- Made assumptions about a complete stranger's donation habits based on a monitor purchase and telling you not to make a tooling choice a morality play...

- Claimed that people talking about a monitor are actually saying they spend all their money on themselves.

Of course, it'll be easier to not do any of that and go on thinking that there's this weird Ghanian guy who hates food banks and spends all his money on himself because he likes the Apple Pro Display XDR.
Idk if I’d say it changed my life, but as a home owner, a FLIR camera for my phone. Helps you spot leaks, bad insulation, HVAC issues, and also it’s just super cool to see in thermal vision.
Let's say I have ten hard drives where no more than two are the same size, so at least 5 pairs or maybe 10 different sizes. For this, zfs cannot be used to expose a single mountpoint.

Perhaps with something like ipfs a single mountpoint could be exposed and allow replicated data to be retained?

The key word here is "replicated" - as in a certainty that the data exists on more than one physical storage device.

I'm spitballing and this isn't necessarily directed at the parent of this comment.
> So hoping that someone here can escalate.

Ahh the modern P/I/SAAS method of working.

What’s your resilience plan? Surely you have a plan if a supplier stops working with you? With 10M revenue it seems irresponsible to have all your eggs in one basket.
Since Rob Pike wrote this note in 2000, there have been many commercially important advances in systems software:

- iOS and Android: Power-efficient mobile systems, wakelocks, etc.

- Docker, Borg and Kubernetes: Container isolation, cluster orchestrators.

- Modern browser environments, with high degrees of isolation.

- Fast JavaScript runtimes and specialized JITs.

- WASM.

- Ruby and metaprogramming, which rose to considerable commercial success and then petered out. But by the standards of 2000, there's some neat language design there.

- Rust, which successfully applied a lot of lesser-appreciated academic ideas including affine types.

- Type systems retrofitted to many dynamic languages, including Typescript. Typescript is really rather remarkable, even though the types are "unsound", in the technical sense.

Some of these trends were already underway in 2000, when Rob Pike was writing. Admittedly, much of the most important implementation work happened in big tech companies, or occasionally startups. Not in academia. But that's largely a question of scale. Even as early as 1990, it was hard for a professor and a few graduate students to directly change the industry. But plenty of the items on the list above do have roots in academic research.

And Rob Pike did get to write Go. He deliberately ignored quite a bit of interesting research to focus on a specific aesthetic vision, which is fine. And a lot of good systems work has been done in Go.
The product is Alexa the voice assistant, not the tiny speaker+microphone.

Amazon makes this product.

When the child spoke to the device, Alexa made a deliberate decision to look up a challenge on the internet (presumably, from a website it deems as safe). In doing so, Amazon endorses the challenge.

The product put a child’s in life in danger.

This is not very complicated.
Okay, that's one use that I can relate to.
https://github.com/cantino/mcfly

Life changer
There are many miscategorizations like that. It is also clearly written by an American leftist, with, for example, Michelle Obama's biography as "mind expanding books everyone should read". I am sure they are completely oblivious to their political and geographical/cultural bias though, as typically happens.