skysight-inc/HackerNews huggingface dataset:
>Since there only seems to be 2-3 reports of this, and they're self-reported and not cited, it doesn't seem like LastPass was compromised.

There are now over 20 in the original HN [1] thread. ( Excluding reports from Reddit and Twitter ) From password never used since 2017 to account newly created in the past few months. OP has full Bio, Links and Credential, others have long history on HN and karma points. I did at one point suspected a PR attack on Lastpass, ( sorry guys ) but that is somewhat unlikely.

Of course, this doesn't rule out a malware running wild.

[1] https://news.ycombinator.com/item?id=29705957
Well according to the article it destroyed a lot of banks when asset prices stopped rising.

> “You could see that no one anticipated that adjustment, even after Volcker began to address inflation. They didn’t think it would happen to them,” Hoenig recalled. Overall, more than 1,600 banks failed between 1980 and 1994, the worst failure rate since Depression.

I had not personally made that connection to S&L failures but getting out of a bubble has to impose costs to somebody.
Sorry, but that's definitely not accurate. You quoted it as part of a personal attack: implying that someone was lying about making a mistake, imputing sinister motivations to them instead, and adding a name-calling putdown into the mix (accusing them of being inside a "reality distortion field", as if you know more about their world than they do). All that is clearly against the site guidelines: https://news.ycombinator.com/newsguidelines.html.

I'm sure you didn't intend it that way, but we have to go by effects, not intent (https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...). Intent doesn't communicate itself, so the burden is on the commenter to disambiguate (https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...).
The article “dodges” the notion players should “own” their in-game items to the same extent you underplay the implications. consider what the article emphasises: the contradiction implied in a live game being rebalanced in real time, affecting “owned” assets.

Do you really own it if the item’s form, function, and even in-game existence persists only at the whims of a centralised authority—the game’s administrators?
It's still a salient point though. For example, I'm constantly seeing a pileup of delivery drivers parked illegally around restaurants while they run inside for a pickup. You're probably a lot more motivated to cut corners like that when you're hustling to make a living from delivery fees, and at the same time the prospect of paying a ticket yourself is a lot scarier on $200/week. Maybe these companies would care more that their service model basically requires drivers to break the law in urban areas.
Docker (in my opinion) is a poor solution for distributing apps. It resembles a quick hack rather than a solid, scalable, future-proof solution. The problem is: you need to deploy an application with all required libraries with specific versions and build options. Obviously, a proper solution would be a package manager which would read the declarative, non-executable configuration file and install or build necessary dependencies.

Another problem is that you want to run an application on differen platforms, not only Linux. Again the proper solution would be to write a cross-paltform application and install it using a cross-platform package manager.

Docker doesn't offer a proper solution; instead it suggests that you create a virtual machine, install a whole operating system (without a kernel) there and then write a bash script that will download and build dependencies. As docker image configuration file is an executable script, it means that it cannot be processed with automated tools; it can only be read by a human.

Also, docker requires a daemon running as a root. This increases potential attack surface.

Docker is not good for desktop applications because it doesn't have portals which can restrict access to DBus, audio daemons, file system etc.
OG names are names that are (and always were) in high demand, and therefore were quickly taken. The fact that your name was still available means that it wasn’t in high demand. OG names are being pilfered because they are in high demand and therefore highly valuable.
OpenSea is just one attempt and it's pretty centralized. That's part of why SOS is getting so much hype, a decentralized auction platform along the lines of Uniswap but for NFTs.
The claim seems to be that the game will attract people who don't view the game as an income stream, but rather just as a game. They pay the entry fee, and then may also buy assets from other players, thus funding the play-to-earners.

I think there's a slim chance this could be a viable business plan, but probably not in any socially-good way. The mobile games industry reaps a good chunk of its profits from "whales", customers who spend crazy-seeming amounts of money on games. Blockchain-based games may also be especially dangerous to young gamers who get access to a parent's credit card and rack up huge charges. This already happens in games like Fortnite, but whereas Epic Games can be pressured into giving refunds to parents when this happens, a blockchain offers no protection if the rules of the game don't allow for it.

We're probably better off if it _is_ a Ponzi scheme.
> you are hearing them all the time. You become used to them and even start to ignore them, and that is why people still get crushed

I don't even work in construction, but I hear these so often every day, day after day, that if there's one coming up behind me, I'll likely get hit. The only way I can live my day to day is by having trained myself to ignore them. It's really useless as a safety measure. I know at least one person (elderly family friend who had perfect hearing) who got squashed by a large truck because she was in the same situation. Didn't bat an eye at the beeping right behind her until it was too late.
pgbackrest
and/or
wal-e/wal-g btw.
it's important to make wal archive backups if you have a big database.
https://www.postgresql.org/docs/14/continuous-archiving.html

so most of the time, both things are good.

there is also:

- Barman

- pg_probackup

(P.S: with archiving you can even have a "delayed" downstream cluster)
> The weather sure does suck though.

Ahhhhh you gotta embrace it and find the good in it or you'll just resent everything :) St Paulite here. This morning it was 9 degrees F on the way to the bus. The snow has a beautiful, sparkling layer of ice from the rainy drizzle we got the other day. Most of the plants were covered in a thin coating of ice, the streetlights reflecting through them looked like inverted icicles. It's snowing now, we'll probably get 2" this afternoon, lovely to crunch through.
Alexa suggests dangerous outlet challenge to 10-year-old
Selfhosting solution is not always the answer. It can be effective if everyone knows how to set it up. However, I imagine 90% (I want to say 99.99%) of world population don't have knowledge or the skill to set it up.

I tried selfhosting in the past and it is painful process to set it up since I don't have an experience with it and the documentations on selfhosting are barely minimal. I tried selfhost an RSS Reader (FreshRSS) through webserver that are closed off to the public network. It is rewarding BUT frustrating experience for me beacuse of how much it needs to be functional. And don't forget the difficulty of setting up a CA for the HTTPS (SSL/TLS), it is PITA to set it up and it kept having problems. I am considering Caddy server since it generates its own CA automatically. Their documentation are not beginner-friendly and requires some prior knowledge to set it up.
Then make it for HN comments and posters.

https://news.ycombinator.com/newsguidelines.html
Self-hosting is slightly better as you are not creating a honeypot. But it’s not inherently more secure against client-side attacks (browser extensions, mobile apps), and adds its own attack vectors (put a contaminated version on DockerHub).

I still self-host.
Doors from Around the World
Ok, so I had a similar situation. What it was is that I signed up for insta pre Facebook merger. Then I connected my Facebook account to insta. So my old username password combo were compromised because I re used them when I was a moron when I was younger. So someone gained access via the original Instagram password and username, changes my email. Then I would login via Facebook and have access at the same time. The different geo locations and unusual activity caused my account to be locked periodically. When they unlocked it I logged in quick, changed the email address and password on the account on the Instagram side and enabled 2 factor and haven't had an issue since.
Not from Heap, but I use https://github.com/wal-g/wal-g
Directed complexes in neuron connectivity networks [pdf]
That sounds great. I'll create a DAO to collect funds so we can create this game. What should we call it? How about Recursion?
This used to be a problem for me too, but later versions of Keepass happily syncs any conflicting databases. I use Syncthing to share my database.
Covid 19: Japan urges public 'do not discriminate' against the unvaccinated
That's an eye opening page.

I wonder if the drug cartels destabilize the region more than United States interference or if the U.S. is more destabilizing?

For example if you did a survey of the people of some of these countries that were destabilized if they think the United States or the drug cartels cause more problems for them.

I wonder what they would say. My suspicions lean towards the drug cartels just reading about how they treat reporters and students and police.
That's possible, but the audit log shows the event that triggered the email and failed logins as two separate things.

The events are "failed login" and "Login verification email sent". The second one is what triggered the email and this event seems like it should only happen if you correctly login but their additional checks stop it from authenticating completely. The email has a button for "verify new device or location", which sure makes it seem like the login was successful.

I hope they just mangled up their event logger and it really should have been a failed login attempt but was logged as a valid login and triggered the email.
As someone who worked on a midwestern farm as a child, I will respectfully disagree with your assessment -- farm labor is significantly more harmful to your body than working at a computer.
> This is really where blockchain comes into play. Diablo 3 tried to do this, but they were too early and too greedy.

Diablo 3's in-game real-money market wasn't based on a blockchain, and was doomed to failure for game design reasons alone.

> And, paradoxically, it's nothing new: Steam store "items" are basically NFTs. Fortnite skins are basically NFTs. It's just that without a decentralized marketplace, you can't sell them.

You can sell Steam in-game items just fine on the community market (https://steamcommunity.com/market/). You just can't cash that out to real money because Valve, quite sensibly, doesn't want to be classified as a money transmitter.
> you can compost these three technologies to build a decentralized webserver

I don’t know if you meant “compose” or “compost”, but it works both ways.
I believe it was pg's, The Four Quadrants of Conformism:
http://www.paulgraham.com/conformism.html

I still think about it quite a bit.

I think some rules are valid for a point in time and become invalid over time (e.g. some of the old Jewish rules around food probably made more sense before modern food mgmt standards).

And pg's point is people / kids follow rules without understanding them for the most part. Or they don't follow the rules for the most part. And a lot of progress comes from the scofflaws who aren't wedded to the current rule set and reject the nonsensical ones.

At some point democracy and not having a blood line king/queen was against the rules. I'm glad some people decided to look past those rules.
Nix is great! But GoboLinux is actually a few years older than Nix, isn't it? First release in 2003. :)

Interestingly, GoboLinux Runners are basically the same concept as NixOS' FHSUserEnvs, where user namespaces are used to mount a subset of the existing shared libraries and other dependencies to make them visible (and the only ones visible) to a running program in a compatible way. This spares them some of the filesystem overhead of running a full OS container with its own package manager. So there's a bit of further convergence there, too.

I love the cleanliness and legibility of the GoboLinux file hierarchy, and I think the simple, Mac-ish app bundling approach it takes is something many users might like and prefer over the rough edges of Nix or the complexity of Flatpak.

A GoboLinux-like presentation could be great for a stable, impure NixOS downstream some day.

Thanks for the link to the Depot Lite paper! I'd never heard of it.
sure, schema changes are already in the roadmap
>identities means you must have a central authority to issue them

These are cryptographic identities. You create one by publishing the public key of your node.

There is no authority needed. You decide if you believable a given identities to be who they calm to be.
Lets say HN would run a node they would simply publish the public key on their website and if it has been there for weeks you can reasonably assume the page wasn't hacked and the key actually belong to the operators of HN. (The key can also be signed with the domain cert)

It doesn't really matter that 100 other nodes could claim to be operated by NH too. There is no need for a central authority because every user can easily figure out which one is the real key.
People can curate lists of nodes they "trust" and publish thous to make it easier for new people.
Since everyone can publish such a list the curator of such a list is also no authority.

The obvious downside of this is ofc that only existing "names" will be recognized.
If you just say here is my key and I have a cool website then most people would not add you for a long time. (You can still participate in the network.) But this is also wanted because everyone should only add nodes that are reliable, have the proper hardware and maintenance and all that. Basically being part of the community helps to exclude someone who just make a bunch of identities that look like they belong to different people.
Even if no one adds your node to the list you can still participate by relaying info form other nodes since the data is signed by the origin node someone who gets the data from you can still use that data even if it does not use your nodes data.

There are a few ledgers running on these principles today most notably the XRPL[1] since 8+ years.

[1]https://xrpl.org/intro-to-consensus.html
I entered software engineering by making simple web tools for my job in customer support. For a while I continued making tools for the department and those were some of my most effective projects because I knew the domain intimately and what the pain points were and the mentality of my former colleagues so I knew what kind of UX would work for my users.

So I don't think it's managers who need this so much as engineers who can do something to help, because as a colleague put it, laziness is a powerful motivator for engineers.
Oh, Atari ST; I assume that's where the graphics for the JS edition are from? It looks far to good to be the Apple version...

[edit]

Looks like there were many ports with similar looking graphics: https://www.mobygames.com/game/apple2/prince-of-persia/scree...
Famously Apple used to prevent iPhones from being charged with “non-lienced” lighting cables.

They seemed to have slackened of since then, but for a while there was a 50/50 odds of a cheap 3rd party cable causing iOS to throw up an error message and refuse to charge.
There are some comments from participants here: https://www.reddit.com/r/AxieInfinity/comments/qfe7fo/would_...
About 3-5 years ago, give or take.
Back in the day it was called iPod idk if Apple still makes them. I always wondered why phone numbers still exist when majority of people use IM apps over the internet. Obstacles can be not all people(friends and family) having the internet or not all people having the internet access atm so you need phone number to reach someone.
Appreciate the long comment. But you’re focussing on breast cancer while my comment was about testing in general. Surely for certain diseases it will be possible?
We should move to preventive medicine instead of reactive. I think frequent testing is one aspect of that future.
Map Animations with Ffmpeg
Hot Pod 2022 predictions: The next year in podcasting
> I'll even say that a significant chunk of adults think that the content in google info boxes comes from google, rather than from the site itself.

That's exactly why I consider those info boxes potentially problematic. If people trust Google and don't understand how the info box is formed, they will take it for an authoritative source which is exactly the problem with it. Google perhaps should not show those info boxes if they cannot stand behind the information presented within. Same thing with Alexa, if kids blindly trust it instead of treating it like snippets of text that happened to match on some page.. that's concerning.

> That seems like a pointless distinction. Do you think kids even know what a search engine is?

I don't know exactly how a kid views Alexa and how they view search engines. To them, is Alexa just a toy, just another way to look things up on the net, or is it something more? I certainly knew what search is, at the age of 10 (come on, searching is pretty much the first thing you learn to do online), but there was nothing like Alexa in my life.

The question is not do they know exactly what a search engine is, but how much do they "trust" (or what kind of authority do they attribute to) Alexa vs how much they trust the list of results in search. I think Alexa is more opaque than a list of search results and there's a real possibility that kids would "trust" it (and also Google's info boxes etc.) more than they trust the obvious list of snippets of matching text on web sites. Obviously, there's no way to click Alexa for more context, or is there? It just blurts out "facts", not entirely unlike Google does with their info boxes. You don't get to judge whether these "facts" come from a sketchy site or forum or whatever else. Is "here's something I found on the web" sufficient to clue the kid on that it's just a search result and information taken out of context? I think there's some subtlety that might be harder to comprehend than in a list of clickable links with bolded snippets of text.
I will vouch that the Midwest is highly underrated. People are friendly; there's way more diversity and culture than people seem to think; it's affordable.
I found his bullshit jobs article to be terrible and unconvincing, and many of the things he said about jobs just inaccurate.

But I think your objection is not very strong and his thesis can be rescued from it.

> it isn't bullshit to the payer, even if it might seem like bullshit to the worker

I think a lot of jobs really are "bullshit jobs," not because they have no value to the payer, but because they have negative value to the economy overall.

For an extreme example, some people are willing to pay to have witnesses murdered so that they can continue committing crimes without legal repercussions.

Or, some people are doing jobs that are purely for positional advantage and that are even "cancelled out" by other people in other companies doing another job. Advertisers seeking to take over market share from competing companies.

Or, some extractive industries may be more beneficially halted because of negative externalities; but those who benefit from the extraction will still hire people.
Wait, is this an alt account? Created just half an hour ago...
Ah yes, that was it, thanks!
Delightful, I very nearly stopped my stream of consciousness to check the numbers, I wondered if anyone else would. It seems many of us share nostalgia around RS.
Sorry for the delay. If you're asking how we deal with users who aren't consciously shilling but are regurgitating the effects of somebody else doing that, the answer is that there's no way to distinguish that case from the normal general case of people having strong opinions and/or being wrong about things—which is the default on the internet. All we can do is fall back on the general rules of the site (https://news.ycombinator.com/newsguidelines.html). That means answering bad arguments with better arguments, and incorrect information with correct information, while remaining patient and respectful with each other, and seeking points to agree about as well as disagree [1].

When feelings are running high, of course, it can often be too hard to do that. In that case, there's a plan B: chalk it up to someone being wrong on the internet, let go, and walk away. When hot under the collar, wait to cool down before posting (https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...). The internet is mostly wrong about most things anyhow.

People sometimes object to this answer: isn't that just giving in to manipulation, or at least the effects of manipulation? There's a thought experiment that I find helpful here: imagine a Sufficiently Smart Manipulator (SSM) who is disingenuous and totally sinister, but also clever enough to reliably evade detection [2]. I think most people can agree that either SSMs already exist (and by definition, we're not clever enough to catch them), or soon will exist. So we're either facing this situation already, or had better get ready for it. What should we do in that case?

The answer is that we should do what we ought to be doing anyway: answering bad arguments with better ones, bad information with better information, etc., while remaining in good connection with each other. It's in the interest of SSMs to divide and polarize the community, and it's in the community's interest not to let that happen, and instead to pool our energies to figure out the truth together [3]. The answer to the Sufficiently Smart Manipulator is the sufficiently healthy community [4].

The value of the SSM thought experiment is that it directs attention away from the question of detecting manipulators, which is notoriously unreliable (people imagine all sorts of incredible fantasies about this, and the evidence nearly always points the other way [4, 5]), and toward the question of what positive things we can do to build up a sort of immune system. There's no way to know whether it will work, but in the long run, and maybe the short run too, I don't see what other option we have.

[1] The reason for that last bit is that it introduces a human, relational element into the argument, which makes it much easier for people to do curious, reflective conversation instead of reacting reflexively and hardening into battle mode (https://news.ycombinator.com/item?id=23959679).

[2] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...

[3] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

[4] https://news.ycombinator.com/item?id=27398725

[5] https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme...
CDC significantly lowers prior estimate of Omicron prevalence