skysight-inc/HackerNews huggingface dataset:
But the attacker controls the TLS connection already, so they'll just strip out the hashing functionality or send a piece of JS to steal the password directly from the password field.

It's not that I don't understand where you're coming from (I once almost started writing such a library a few years back!), but I just can't think of a threat model where this makes sense. That's also what moved me away from working on such a system.

To me, this approach feels like an attempt to recreate software-only U2F, but outside the browser. I don't think client side code can fix these problems. It can make stealing passwords more difficult for criminals if every website uses their own bespoke password processing script, but that'll also add a huge attack surface to your code and it'll be a burden to maintain.
I'm still not convinced. They said the answer is pink. But...it wasn't pink, even to their own admission. A pink shoe, when placed under pure-green lighting is no longer pink: at this point we're out of illusion territory and into lighting trick / semantics territory.

If they'd have said the answer is green-gray, then fine, this would be an illusion for those people who incorrectly thought the shoes are pink, but their answer is still wrong.
Lüning et al. June 2019.

"Abstract
The Medieval Climate Anomaly (MCA) is a well-recognized climate perturbation in many parts of the world, with a core period of 1000–1200 CE. Here we are mapping the MCA across the Antarctic region based on the analysis of published palaeotemperature proxy data from 60 sites. In addition to the conventionally used ice core data, we are integrating temperature proxy records from marine and terrestrial sediment cores as well as radiocarbon ages of glacier moraines and elephant seal colonies. A generally warm MCA compared to the subsequent Little Ice Age (LIA) was found for the Subantarctic Islands south of the Antarctic Convergence, the Antarctic Peninsula, Victoria Land and central West Antarctica. A somewhat less clear MCA warm signal was detected for the majority of East Antarctica. MCA cooling occurred in the Ross Ice Shelf region, and probably in the Weddell Sea and on Filchner-Ronne Ice Shelf. Spatial distribution of MCA cooling and warming follows modern dipole patterns, as reflected by areas of opposing temperature trends. Main drivers of the multi-centennial scale climate variability appear to be the Southern Annular Mode (SAM) and El Niño-Southern Oscillation (ENSO) which are linked to solar activity changes by nonlinear dynamics."
https://www.sciencedirect.com/science/article/abs/pii/S00310...

Edit: Bonus climate reconstruction from 1268 studies of the MWP https://www.google.com/maps/d/viewer?mid=1akI_yGSUlO_qEvrmrI...
The winning one, the phantom queen, it's not what I would call an optical illusion.

It's more of a magic trick, like when they cut a person in a box in two.
That was interesting. Scored 14.

About 6 weeks ago I got a lens implant to replace a cataract-ravaged lens in my dominant eye. One of the first things I noticed after surgery was that the color temperature of that eye cooled noticeabley. My other eye has a less advanced cataract and of course the lens has yellowed. I found some of the rows easier with one eye versus the other. Fun test!
You also need to know Austrian to understand Frankenstein
From a top comment on the article by "Mark D":

> I’m a captain at a U.S. major airline with a lot of time in 777s. [...] Also, this is something that SHOULD have been caught by at least two separate checklists, which they obviously didn’t do.
> This letter is interesting in several ways, but you'd be wise to approach it from the angle of it having been approved by the government.

Which government? Beijing would absolutely not allow the publication of a piece that uncritically regurgitates Washington's narrative about "mass detention of minorities". It's Saddam-has-WMDs-and-is-allied-with-al-Qaeda all over again. Fool me once.

It's best read as a letter for Western/liberal audiences. That is clearly the intended audience.
Esperanto is widely miunderstood by the general public. It's often lumped together with fictional languages (languages from fictional books or movies) like Klingon or Elvish. But there's a very important distinction. Fictional languages like Klingon are created to appear as if they're natural languages—reflecting their fictional cultures' customs, idioms, and ways of thinking. They often have a level of complexity comparable with that of a natural language, but lack the vocabulary and expressivity of a non-fictional language. Esperanto, on the other hand, is better described as an international auxiliary language.

As an international auxiliary language—and by far the most successful, with upwards of 5 million speakers worldwide—Esperanto has a number of notable features:

1. It's arguably the easiest language to learn, for speakers of European and non-European languages alike. It requires an order of magnitude less effort to learn.
That makes the best candidate for a bridge language. Imagine that speakers of two difficult, mutually incomprehensible languages need a common means of communication. They could either attempt to learn one another's languages, or they could learn a bridge language, that would save them a lot of time. English is a terrible candidate for such a language, since it takes 10-20 times more time to learn to fluency, and is full of idioms, irregularities, nonsensical spelling, and other difficulties.

2. As a language with a history of almost 150 years, there is a rich body of literature in Esperanto, which you won't find in any other constructed language. Sure, you can find translations of Tolkien books in Elvish (unsurprisingly), and other token translations, but the largest Esperanto-language libraries have over 30,000 volumes. Many of these are available for free online. Learning Esperanto is thus not just an intellectual exercise, but a means of unlocking a whole wing of the library.

3. As a largely unidiomatic language, Esperanto just makes sense. If you can think of a way to express something, that's usually the correct way of expressing it. That isn't true of most natural languages. (Have you ever been a language learner, surrounded by native speakers, asking them if you're saying something right? Why do we ride on busses but in cars? It's because English is impossibly idiomatic.) Thus, Esperanto is a fantastic candidate for an international scientific or academic language, since it's just easier to say what you mean, and to be understood.

There are so, so many reasons to learn Esperanto, in particular, and those get glossed over when you're lumping it together with other smaller languages. Check out https://lernu.net/ and start learning it.
Right... that would be awesome. But it would still be susceptible to a hacker replacing it with a traditional login page with some logging... unless somehow you could prevent any traditional web pages from working.
you gotta buy stonks
What would you say are the main differences between a fuzzer and QuickCheck? The authors of quickcheck don't call it a fuzzer so I assume there is some difference but both seem to randomize inputs?
>"You seem to be implying that's a good thing. It's literally not."

I think it is.
Read what is the current top comment in the article linked above, from a U.S. captain also flying 777's, for the list of checks the crew apparently missed.

Biggest flag is flying pilot apparently selecting autopilot on immediately after takeoff. Emirates note to their crews,is even more bizarre. Like an hospital reminding Anesthesiologists to check if patients are fully knocked out before operations.

Incident still under investigation but it looks bad.
i wanna do stuff just not at my job
The parent commenter possibly meant: with an incoming request, sending a password in clear-text, how do you cache it? You hash it, then store the fact that authentication was valid with some expiry.

Once the next request, again with clear-text password, comes in you need to look up its validity. You want to check without hashing, that's the entire point. If you look up whether the hash is validly cached, you gained nothing. Hashing was required. To look up without hashing, you will need to use the clear-text password somehow. Hence it has to be part of the cache somehow, i.e. its index.

If that's all in memory in a memory-safe language, I guess it can be argued that's not unsafer than before, but I'm no expert.
Here's some progression of panel efficiency over time:
https://news.energysage.com/solar-panel-efficiency-cost-over...

I would suggest it's a matter of "nothing changes in a year but everything changes in a decade."

Partial apologies for the tone; I'm personally kinda sick of Internet comments crapping on people's work by default.
And that's very relevant when you're talking about FIRE. You shouldn't have to liquidate any substantial part of your portfolio at one time. Once you're no longer on your own income, you should plan ahead with a 1-2 year runway (deciding the exact amount is an optimization problem that can be run against historical data) to hedge against having to sell off too much at a loss during a downturn.
PAKE isn’t about preventing compromise at the serving of the front end. That’s still the responsibility of the server maintainer. PAKE is about reducing damage potential. The responsibility of keeping your servers secure applies regardless of use of PAKE. PAKE just makes it possible that if your database is leaked in some smash-and-grab someone can’t just run a rainbow table against it to suss out passwords against emails.
With Squid Games being one of the most watched and talked about TV-series last year, and Parasite winning the Oscar for Best Film the year before, I find it odd that you consider SK to be past it's prime.
Why Student Debt Keeps Growing–Even When Borrowers Keep Paying
HTTP basic auth RFC is 14 pages. The OAuth2 RFC is 76 pages, and that's only the framework. Perhaps we have a different understanding of what "simple" means...
Some of them actually work quite well in real life. Even when looking with two eyes (thus giving your brain information about depth) and from a non-perfect angle. I've had exhibitions with these in the physical world, and no one can avoid seeing the illusion, even after picking up the objects and seeing the secret. The brain is stupid!

https://github.com/Matsemann/impossible-objects
This article deserves a post for itself.
Market crashes are unpredictable, and anyone who says otherwise is not expert, but a charlatan. Having said that, if your investment horizon is sufficiently long (as in more than 10 years), we can be reasonable sure that you're likely to get a positive return on your investment, regardless of whether the market crashes or not.
> One thing I do is use an app like WiFiman, or a laptop with nmap, to scan and find any existing network devices and determine what they are.

doesn't that only work if the spying devices are on the same network? to detect all wireless devices you need something like wireshark + wireless adapter than can be put into monitor mode.
Retool Series C: Raising less money at lower valuations for employees to benefit
This is only a problem if you receive a windfall. Otherwise you should simply be continuously investing some portion of your income at all times.
What tech companies were you invested in that were flat? The sector grew the fastest of any major sector.
APFS doesn’t “prefer” anything - it it will not change the bytes passed to NFC or NFD. The bytes passed for creation are stored as is ( HFS will store the NFD form on disk if you pass the NFC form to it). However APFS is normalization insensitive (if you create a NFC name on disk , you won’t be able to create the NFD version and you will be able to the name by both the NFC and NFD variants) just as HFS is - they both use different mechanisms to achieve normalization insensitivity.
Click once has some extreme limitations. The main one for me is that you can't have an app installed for the whole machine, only for the user. While that may be useful for basic consumer stuff, it's just not usable in larger company scenarios, remote desktop logins, etc.

Msix is better, but still not well supported - you can deploy a service for example, but not on a windows server.
If I'm running a relay, and there's a possibility that somebody who dislikes me can upload something questionable and use it to make the cops show up at my house and make off with my computers... Well that's content that I'd like to censor.

I'm not taking a stand against the content itself, but as long as there are bullies that can be moved to action by bits on a disk, our protocols will need to either support censorship, of be zero-knowledge to the point where nobody knows which bits are on which disks.
That font seems to be broken on Firefox+Windows.

The "y" in "Hans Goudey" or the "B" in "Campbell Barton" have parts that look weirdly broken. Like in the B, the top right curve is very thick, but the bottom right curve is very thin. But comparing this website to the original "Heebo" font on fonts.adobe.com, it seems that it's a file format conversion somewhere breaking things.
It's worth pointing out, though, that having per-recipient prices would require a change to the protocols to allow the sender to know in advance how much it will cost for them to have their email delivered (and thus whether it is worth them writing the email in the first place), which breaks the "store and forward" architecture of email.

Not necessarily...people are already writing emails on spec because there is no guarantee that I will read it. It's just that they send it to thousands of people hoping that the fraction who read it will make it worth the time spent writing the email.

Without changing the architecture of email you could reject emails (e.g. 550: rejected, unsolicited emails require $0.50 payment). Or you could passively ignore emails that don't meet criteria (you could piggyback on the read receipt functionality to provide confirmation).

All of this is backwards compatible with existing email
seems slightly odd to use an angular unit for airspeed; the linear equivalent would technically depend on altitude. I guess airplanes don't actually fly high enough for that to matter.
You seem to be implying that an increase in money supply has to be the only catalyst for outsized annual S&P returns, and I'm not following that logic.
> suggesting [...]the previous flight crew had left the altitude setting at [...] 00000 feet

Does the system really display as "00000"? That seems like an odd design choice, I'd have thought just a single "0" would be far more legible in this scenario, especially if it's on a 7-segment display.

I don't think passengers would have noticed this as anything other than a regular takeoff, because ATC does request slow climbs (ie. slower rate of ascent) every now and then.
Are you trying to forward traffic received on that port over a VPN?
Oh, cool! I love the idea of taking positive control of one's life.

I had a similar-ish system for when I was unemployed for a long stretch years ago. It was a white board I cut into 8 parts and labelled, "Exercise, Hygiene, etc..." Each contained 2 marks and each mark was a pomodoro 30 minute cycle. Very helpful.
You don't take off with 30 degrees of flaps though, fortunately.
The picture is gray, but the actual shoes are pink, but bathed in green light. Some people sometimes can mentally remove the green lighting.
ASK:

----

I' building a 'lfg' (looking for group) website (playeeyay.com) for MMO games.

Currently there are community run discord servers for most of these games.
I'm building this so people can manage all their 'lfg' preferences for different games from one place.

I'm looking to connect with either a product or a UX person and get advise on things. I know how to build things but I trying to figure out what to build actually.

------

OFFER:

------

I can help you pick a tech-stack for your MVP or SaaS idea.

I can help you setup a deployment workflow for your hobby project.

Email is in my profile.
The incident description seems incomplete. With the high takeoff speed and slow climb rate, is it possible that the main error was an incorrect flaps setting?
Malta is about at 90%, yet the government is introducing more mandates to the chagrin of residents[0]. There’s been maybe ~three deaths in the entire country over the past couple of weeks; COVID hasn’t even been in the top 5 causes of death for a long time. Yet, you’ll now risk being fined €100 if you’re outside walking by yourself without a mask (of course smoking in restaurants and going to nightclubs is allowed, because that makes freaking sense).

Malta was even touting quite a bit about being the first European country to reach herd immunity..back in May.

In my opinion, anyone who believes continued restrictions have been about anything other than political theatre and positioning are utterly delusional.

0: https://timesofmalta.com/articles/view/this-latest-masks-man...
This tool will recursively unpack wars and ears.
I suppose you also think Typhoid Mary got a raw deal?

What on earth makes you think your personal freedom is more important than the health of others?

You have no right to harm others.
OT: text on the screenshots is blurry and it's a pain to read :/.
The internet has become like Cheers: A place where everybody[1] knows your name[2].

-----

[1] Or at least everybody big - all the FAANGs.

[2] And your occupation, and your shopping habits, and your family, and your car, and your address, and your hobbies, and...
I recently re-rolled a password auth protocol because Auth0 and AWS Cognito were just so goddamn complicated. Ages ago I used stormpath because it was so simple,

I realize there are many options today for federated logins, 2FA, SMS / phone password resets ... i just wanted an old-school password system for my dumbass personal site.
> https://youtu.be/jb29X2SrgDM

Expected Kokichi Sugihara to be represented as always, not disappointed. I will have to try and replicate this one as well.
> You will know then that Apple Daily and Stand News were pushing "freedom of the press" into territory that no western media dares to push in their own countries, including actively calling for foreign military intervention in Hong Kong.

I recall very recently some US media personalities calling for military invasion of Australia; doesn't seem very different.
Sorry, conscientiousness (big five personality trait) is a bit different from conscientiousness (Oxford dictionary entry). In particular, people with low levels of the big five personality trait constantly fail to do things they want to do. I posted about the big five personality trait because TFA discusses discipline and ADHD, where ADHD is having a very low level of the big five personality trait, but discipline is probably not exactly the same as the big five personality trait.

If someone cannot remember their keys or has trouble playing email tag, their problem may not be that their life is not rich with meaning.
It's too bad that Black Ice firewall doesn't work on modern windows OS. It was lightyears ahead of Portmaster's design and functionality even back in the late 90s (at least until IBM bought and ruined it). It seems like it's impossible for software to be self contained these days.
I did this about 4 years ago.
I use the aliases to have a separate address per website.

2 years ago they annoyed me by changing the ui and requiring an additional password entry to create a new alias. They also put the paid additional user above new alias.

Here's hoping they don't keep trying to fix things which are already perfect!
Heh. I have been at the butt end of that one a few times. Another favorite of mine is when they push back with Parkinson's law: work expands to meet time available for its completion.
"Wittgenstein's philosophy as it struck Kripke"
Implementing opaque isn't overly hard. You can find pseudocode, implementations, state machine diagrams, etc, online. Here's a good post that links to implemented code:
https://blog.cloudflare.com/opaque-oblivious-passwords/

I know nothing of framework support, I don't use frameworks. I'm likely going to contribute some open source code in the near future from my company to simplify things though.

But you could also just have your client do:

salt = sha256("your company name goes here" + username)
password_hash = pbkdf2(plaintext_password, salt)

and get some nice benefits.

> How would I ensure that my code for PAKE could not be overwritten if a hacker took over part of my server?

Depends on the server and the level of control. But it'll help in a number of cases. You're assuming the attacker has full control over the web-page's contents (among other things - even if an attacker had the web page's contents CORS means they couldn't send http only cookies to an attacker controlled server), which is a very specific, powerful position to be in.
You win the internet today!
For me FIRE is about how easily and effortlessly money can be extracted from the system.

Just look at webcam girls or if you want to avoid nudity chinese streamer girls. A girl can earn insane amount of money every day for 4 hours of just talking and smiling. It's absolutely ridiculous.
China’s Reform Generation Adapts to Life in the Middle Class
It's odd to me that there isn't some general purpose utility that can be tweaked to search for X files and apply Y logic to it. Find on Linux kind of meets that goal kludgy as it is.
This was 100% pilot error. You don't ever "follow the flight director" to determine when to rotate, you use the airspeed indicator.
"But when evening comes I return home and go into my library. At the door I take off my muddy everyday clothes. I dress myself as though I were about to appear before a royal court as a Florentine envoy. Then decently attired I enter the antique courts of the great men of antiquity. They receive me with friendship; from them I derive the nourishment which alone is mine and for which I was born. Without false shame I talk with them and ask them the causes of their actions, and their humanity is so great they answer me. For four long and happy hours I lose myself in them. I forget all my troubles; I am not afraid of poverty or death. I transform myself entirely in their likeness".

Niccolo Machiavelli, Lettere (ed. by G. Lesca (Florence, 1929) pp. 88-90.

This famous passage was written during Machiavelli's banishment from Florence. During the day Machiavelli trapped birds, visited the local inn occasionally and gambled with the locals.

David Perell has many brothers in his self-imposed exile.
Yeah, this one is a true illusion: they're actually the same color, unlike the shoe example.
I mean if we're doing this, you can probably go back to the 1999 Japanese book "Battle Royale", which lent its style to the popular UHC Minecraft mod well before "The Hunger Games" mods came out.
Surfing a bit, I found some slightly more detailed captions for this year at least. Maybe there are similar pages for previous years

https://www.zyvexlabs.com/contests/2021-2/

Edit: there are links for previous years, e.g. https://www.zyvexlabs.com/contests/2019-2/