skysight-inc/HackerNews huggingface dataset:
Right, but that's sort of what I was getting at. The article doesn't talk much about the password other than it's "insecure". It's probably worth mentioning that a dictionary attack at some multiple of ~2/per-second/per-core is possible. So it's not just top-10,000 list, but maybe "top million" or more that's a bad idea.
A complete beginner? Nope. Well, at least not yet!

Eventually I do want to make it a one-stop-shop which will teach you everything and take you from a complete beginner to someone who can immerse in native media as soon as possible. We're not there yet, and the site works best if you're at least an advanced beginner. The bare minimum requirement is that you know hiragana and katakana already.

Your best bet would be to start with a textbook of some kind and/or some actual lessons with real teachers to learn the basics. The more of a beginner you are the more the human touch helps; the more advanced you are the more you can depend on apps.
This is awesome. I would 100% buy a battery operated version
This is changeable, however, passport could be a form of primary ID.
> Ozan Varol is a rocket scientist turned law professor

> "If you multiply two numbers together, shouldn't the output be a larger number?"

Glad this guy isn't building rockets anymore :-)
Tips for Building High-Quality Django Apps at Scale – DoorDash Engineering Blog
An amount of fraud that would be reduced by simplifying the processes or making them universal. Currently everything is so complicated that fraud is undetectable. A good part of fraud is bad actors with expertise in these processes leaping in front of victims who find those processes unintelligible so have no idea that programs exist or if they're qualified for them.

edit: the best part is when somebody manages to fill out all of the forms, navigate the administration, get approval and help finally, then get another letter that says that they were retroactively denied benefits and have to pay them back. It's a minefield.
I think it was a mistake to even involve the online community. Of course nerds want you to build a high-quality native experience on every platform because they are heavily invested in their platform of choice. Listening to these kinds of users at all will drive your business to ruin.

Honestly building on "tech stack power users hate" is probably the easiest way to fire all your worst, most needy, users.
I wrote and maintain Lacona, a Mac productivity App (https://lacona.app). The majority of my revenue comes from being a part of the Setapp subscription service.
Ha, I had the same challenge and was actually annoyed to find out that Javascript doesn't have a builtin function like str.reverse().

I totally see your point, though.
yes broader but also includes that.
80,000 fucking software engineers and they can't handle an extra SKU on their multi-tier product line?
> If there's consensus that for some domain, certificates don't actually mean anything, because anyone can get a CA to issue it, there should also be consensus to accept self-signed certificates for that domain.

Or my preferred hybrid approach: use a self-signed certificate and include the fingerprint (base32-encoded) in the domain name. The browser would recognize this pattern and accept the certificate, for that one domain, because it already meets all the requirements for domain validation. Discovery remains an issue–we need browsers to list the local mDNS services—but once you have the URL you can bookmark it and know that no other device can impersonate that domain/certificate combination.
That is insightful but also depressing. Paraphrasing... 1) the incentives are set up to create more companies like Joon, but 2) the nature of the solution space ensures those companies tend to be parasitic on society rather than helpful. i.e. all solutions in this space will be net negative on society, but the space is too fertile so solutions will grow and find traction. Externality perfect storm.

Do you think there's a way Joon can take their mindshare and pivot their audience towards healthier behaviors without tanking their business?
The "bumps" (industry term for solder left on bottom of chip to attach to a board/circuit) in question are specified by the GPU chip vendor, not Apple.

This is why every single NVidia customer during this period was affected, not just Apple. NVidia ended up making several large compensation payments to several big vendors such as HP too etc.

Its amazing how quickly people have forgotten what a big a deal this was, it was terrible for much of the laptop industry for a year or two. It was after "Bumpgate" as tech media termed it at the time that Apple's relationship with Nvidia ended too, coincidence or not.

> https://semiaccurate.com/2009/08/21/nvidia-finally-understan...

As for it being "he-says she-says with those chips", I can't agree. There was an entire settled class action lawsuit at the time directly blaming NVidia for all affected Dell, HP and Apple computers. I've had to raid web.archive.org, but you can still find the details:

https://web.archive.org/web/20101011074425/http://www.nvidia...
Keeping the average business owner from being harassed by fake/false/dubious unemployment claims would also be good.
Interesting advice about just having one "app" for the entire website. Makes sense to me.

Also, re "Avoid Fat Models":

> This pattern can be kind of awkward if you have some logic that doesn’t really need to operate on a full model instance fetched from the database, but rather just needs the primary key or a simplified representation stored in the cache. Additionally, if you ever wish to move off the Django ORM, coupling your logic to models is going to complicate that effort.
It's per month!
I agree, very cool. Here what I do not like so much:

a) the wood frame seems to be too large (probably there is a technical reason for this), but still. Not much too large though, just maybe 25%?

b) the wood (at least from the pictures) looks cheap (plywood?)
I like them good masks like the 3m aurora provide a good breathing experience and they protect you from seasonal flue as well. Added benefit now in winter they even keep your face warm I am going to join the Asian countries and will wear a mask from late autumn to early spring... covid or not.
In many ways, I think joining or creating those teams is the secret to long lasting fulfillment in engineering. We focus so much on the compensation aspect that of course we underindex on quality of life at work.

Theres a reason that Ted Lasso is such a phenomenon - people want to be on a team where they can trust their teammates and everyone is trying to accomplish a shared goal.
Show HN: AtomicQuote
How is formatted printing related in any way to the internal representation of strings?

printf is what you call when you want to print X in hexadecimal with at least two digits, left justified on an eight-character wide field. I don't see how the sanity of whatever string representation the programming language uses is relevant here.
Yeah, it seems to be pretty heavily trained on Python. It's honestly still (and should be used as) a glorified autocomplete, which is pretty useful from time to time.
Wow, that looks great!

My main complaint is that I haven't known about this until now. I frequently search for Japanese resources and specifically did searches to find pre-made decks of Japanese content from Japanese language media, but never encountered your site.

Thank you for the effort to revamp the Heisig kanji keywords - makes me wish I didn't already learn it the RTK way. The way to teach new kanji by introducing the enclosed primitives first is smart - it's a good compromise between "primitive first" and "usage first" approaches.
That's making some unfounded assumptions.

Good content is not a fixed % of total. So if you increase total you might just water down the % of good content... Or worse, if practices focus on quantity entirely you may end up with 0% good content.

Even shows I used to enjoy seem to have taken a steep decline since about 2018.
Microsoft (MSFT)-Activision Blizzard (ATVI) Deal Shows Big Tech Metaverse Push
It's not just that I can't use them for email anymore. I wouldn't mind that.

But now I'll lose access to any purchases on my phone, my Youtube purchases and history, I need to create a new account for my phone, etc....
See also

https://youtube.com/playlist?list=PLcHD1WG0WKcQX9Eln6-3Cb1YK...

More episodes on PBS

https://www.pbs.org/show/wpt-archives-1980s/collections/new-...
No you can't? I'm aware you can point it at different fields and add additional information. But you can't make it fill in a password field that asks for 3 random characters.
The title was not originally accurate. The changes apply only to England, not the UK or the "British".
You guys know about Mk Ultra by now right?
Thanks will check this out. Hand't heard of them before.

Slightly more expensive than Fastmail but seems like better security / privacy considerations.

That said, the space per inbox seems far more limited.

Seems we have some interesting options here!
Best: solve the problem, but also add the caveat that _technically_ there are edge-cases that wouldn't work.

Worst: spend the entire interview explaining why you can't solve this problem.
> Obviously our use case isn't that common (it's been "legacy" for years) but still annoying to know that there's probably some script I could run to do this, but nobody has built the web UI for it.

Sounds like a perfect opportunity for a 20% time project. Surely you aren't the only Googler in this situation?
I use this constantly, oh my gods. Thank you so much for making it!! <3
What a way to solve for X! Do it by decree. What a moron.

This is what you get in a political system dominated by lawyers.
To be fair, it is a bit of a privilege. Like most things, it requires a lot of work too, but people learn humility and kindness from each other. Those who grow up with loving parents are a lot more likely to become loving parents.
Excuse me, can I see your vaccine card so you can enter this store/restaurant/theater/polling place/etc.?

Minorities, Blacks in particular, have lower vaccination rates than whites. Ever heard of the Tuskegee experiment? Who can blame them? Given vaccine rates by demographic, it seems like many places are hell bent on introducing racist vaccine passport policies. I thought we weren't supposed to do stuff like that anymore.
>> missed _almost_ every single time.

> Microsoft is extremely successful with Azure.

I do not see any disagreement here.
How would you define expressiveness (as its commonly used, so a definition where Turing complete languages can have different expressiveness) if not as how much something can be simplified and thus aiding comprehension, rather than detracting from it?

>Programming languages are not theoretical things. They're concrete, practical tools that _enable_ other stuff. Engineering, not science.

You can't escape theory, engineering is applied science.
Wow, this is great! I was actually just thinking about hacking something like this together on my own, but $200 seems really reasonable for a pre-built product, and it looks much nicer than it would if I built it! :) Any plans to support non-Google calendar accounts?
#thetagang
I hope it will be soon.
Pop music, Hollywood movies, and book publishing have done this for years. There is just more data than before. It is about as soulless as it ever was, but maybe less so: there have been some great shows in the last decade (not as many great movies though)
Why commit at all if you're going to reset? Sounds like the intermediate commits are just used as a backup method. The real trickery is mentioned in the last part, if commits don't break up tidily along file boundaries you'll have to commit hunks somehow and then go back and test whether the code works.

Either way, in the end it's up to developer discipline to make clean commits, git doesn't really help all that much although in my (long) source control history before git I never thought of committing hunks.
I suspect 1Password sees features like iCloud Keychain coming and is trying to grow into other markets because a "good enough" built-in password manager will significantly decrease their value proposition in the consumer space.

Not great if you like their product as a consumer, but 1Password's biggest feature differentiator right now is better family sharing than iOS provides. That could easily change in a future iOS version, and then it's suddenly a lot harder for 1Password to grow by selling a $60/year password manager subscription.

Enterprise features on the other hand, that's not something that OS vendors are likely to ship.

While I don't like the newer versions of Dropbox as much as the old ones, I can understand how pressure from iCloud and OneDrive pushed them toward enterprise features over consumer users.
Agreed.

I think we also have to come to grips with the fact that there is a significant portion of the population of first-world nations who desperately WANT a crisis so that they don't have to acknowledge that their lives are miserable for reasons well within their control. Most political radicals on both ends of the spectrum fall into this category. The quantity of blue-checked Twitter personalities who appear to have this belief regarding the pandemic is pretty shocking.
I once got a contract, early in my career, migrating marketing landing pages to a new format in which the contents of the pages (anything inside of the <body> tag) were moved into `marketing_page_name.tmpl` files in a directory. From there they'd be pulled into a shell, and all kinds of tracking and link magic could happen from there. A few things like anchors needed new template variables instead of hard-coded links.

I realized I could automate this after the third or fourth page. There were hundreds of them, so I did a quick calculation: How long will it take to automate this? How long will it take to do it by hand? You know, the one we always do, then ignore because we want to automate stuff anyways.

In this case the automation made sense. I was paid per hour so I only stood to lose money.

I realized automating it and lying about how long it's taking would be immoral. I needed the money (I think this was my second job, ever, before ever getting a full time job. Maybe year 2005!). So what, do I just do it by hand and struggle through the monotony? No, that would be dishonest in a sense, too.

I talked to the people who contracted me and explained the options, showed them a sample of how well the automation worked, talked it through. They were really happy. They gained trust in me and my abilities. After I completed the project, they wanted to hire me for full time work. They gave me great references for years.

I couldn't handle automating my job away and slacking off. I love learning. I love doing my best work for people, providing real value. The cool thing to me about my job is that I can offer more and more value over time at a scale I couldn't in any other job my brain could navigate.

So all that is to say: this guy's story sounds awful to me. Let me automate it, then if I'm redundant, I'll go find something else interesting to do. I'm sure as hell not going to sit around playing counterstrike.

Not to say this person is bad or wrong or whatever. It just sounds like misery to me. The key difference might be that I enjoy my work and this guy doesn't, really.
A few channels right now:

- Participating in the web dev communities

- "Powered by Linkz.ai" footer in the Link preview popups

- Campaigns on Product Hunt, Reddit & similar

- Soon: Affiliate, LTD, targeted ads for Webflow/Squarespace ecosystems
I'm not sure you can trivially "dropbox" TLS because unlike dropbox, every application you use TLS certificates with needs to be aware of how to load and find and (potentially) acquire/renew them in the first place. Unless you are going to "dropbox" literally every TLS-enabled FOSS app you could want to run, and automate their deployment and renewal. Or you could centralize on a tool like like stunnel to literally terminate all TLS connections but this comes with its own flaws (e.g. annoying protocols like IMAP upgrade the connection from plaintext to TLS "in situ" via STARTTLS.) But if you just use a single TLS terminator and wrote some glue for it, sure, it might work for a reasonable amount of stuff. "Dropboxing" the whole stack is basically just another way of saying "I am going to make a turnkey software appliance" and most people won't want it.

Someone else proposed things like DHCP servers announcing a local CA and self-signing. Aside from circling around to where you started at (how do you know the DHCP server is not hostile a priori without landing back at stage 1?) it would also require massive extensions to all kinds of software to work. You're going to get pushback on this without extremely good reasons, even if it wasn't a shitload of work, so it's practically unviable. (Alternatively you have people who actually believe things like "Just typing in a 40-character base64 pubkey is _obviously_ the solution" or whatever when most people just want a nice fun hostname for themselves.)

Here's what I do. Just put your local (firewalled) network IPs in an set of records on a zone you own, and then use LetsEncrypt's DNS challenges to issue a cert for them. Then put the cert where-ever you want. Done.

e.g. enter an A record for service1.a-domain-i-own.dev that points to 192.168.1.XXX (or 172.X.X.X, or 10.X.X.X, whatever) which is a local-only subnet. Issue a DNS challenge to LE for this record using whatever tool you like. It does not need to contact the service, it only needs verify a corresponding TXT record. Then you can just take the resulting certificate and put it on your router, your server under your desk, whatever. Use the domain name as usual while on your home network. Viola, you're done. This lets you piggyback of the existing public LetsEncrypt, DNS, and CA systems with minimal effort and time, and you don't need any software at the subnet level to manage anything, and even your appliances/game consoles/whatever (that can resolve DNS names and handle TLS) will work fine.

You can do all of this with Traefik today in, like, 10 lines of configuration, not a joke. You don't have to fiddle with anything at all, almost.

I use this technique on a ZeroTier network I share with many (non-technical) friends and it works completely transparently; I can just hand them a link and it's as if it was any other website, and they are oblivious to the fact it's actually "on the local subnet"
I can easily give you a list of all valid 5-letter words in Danish. Would that do?
Thumbs up for revising the keywords of remembering the kanji.

I don’t follow his book but I do refer to it when studying and sometimes his keywords really can be far out. If I remember correctly he never clarifies if the kanji for “can” is “can do” or “can of soup”.
I am using MXRoute.com. They have a lifetime account with unlimited addresses and some limits.

Looks like the price has gone up since I signed up, but so did the storage included.
Thank you. Fixed it.
Blocking trolls is good though. Plenty of people want to watch the world burn and avoiding that is just fine.
It’s against the commodification of mindfulness/wellness. See girlboss/hustle culture. Unfortunately our society oversimplifies to the point becomes another marketing tactic.
Funny thing: the DNC agrees with you, at least right up until an identity has sufficient popular support.

I already expounded way more than was worth the effort on here recently: https://news.ycombinator.com/item?id=29981488

As someone on the boot-end of people who chant "no politics maaaaan, just vibin', peace and love with no ideology" to distract from the boot, I vehemently disagree.
PS: I'm unsure how the clue thing works?
How exactly you propose of doing that? I cannot convince frontend devs to not use Google fonts directly and upload it to their own CDN.
And none of the COVID vaccine rules are mandates then. If you want to go to public school, you need vaccines. Now, if you want to go to public work, you need vaccines. You can be a hermit at home and not get any vaccine in america and no one is going to come around with a needle and force it in you.
I guess he is wearing them because of rules that are in place in his country instead of throwing a hissy fit every time he goes shopping because of fReEdOm.
I must confess to copypasta for this approach. Yes, stack traces are incredibly valuable. The upx compression itself does seem to be a no-brainer with the exception of any situation where that 150ms time actually matters.
The more I read and experience such things along with the healthcare scam and sudden bills from hospitals and haggling with insurance, the more I wonder why I immigrated to the US when I could have taken my software skills and education to anywhere else like Europe or Canada. This country is for hustlers and grifters and the cunning.
The title seems to be backwards. Doesn't surging inflation cause the food prices to go up?

I have been seeing a lot of weird definitions for "inflation" lately and it's not doing the population any favors. The BBC defines inflation as "the price of things going up." This is like saying that a rise in shoplifting is caused by an increase in shoplifters.

Quite simply inflation occurs when you have less goods and services compared to the amount of currency in circulation. The cure is to increase production of goods and services to outpace the amount of new money entering the economy.
A lot of people in this thread find the story unbelievable. Having done IT consulting for law firms, I absolutely believe this story.

IT for law is 30 years behind in some cases. They still use Wordperfect because that's what all the templates are written in. Most lawyers have no clue about IT and are happy to pay people to keep things running. Most likely the law firm wouldn't even care if OP told them what they were doing as long as it worked.

Also, I know someone who was in a similar situation. He was a VAX admin in the 90s, when that tech was already 20 years old. He worked for a trading firm and all of their software was built on VAX. They made $1M a day from their software, as long as the machine was up during trading hours.

His only job was to sit at the terminal one hour before trading hours until trading closed for the day, and make sure the machine is running, and perform maintenance after the trading day ended. He got what in today's dollars would be about $500K a year to basically just sit there and teach himself modern programming languages while he waited for trading to end.

His boss was well aware of this, and straight up told him, as long as that machine is running during trading hours, the money we pay you is more than worth it. It was literally 1/2 a day's profits.
Aperture VC successfully raises their first fund using Dropbox and DocSend
Your provider is on the hook for properly configuring TLS on their mail server, but you still need to publish an MTA-STS policy saying who your provider is.

Unless your provider provides MTA-STS endpoints that you can CNAME your _mta-sts and mta-sts subdomains to. I haven't seen anyone do this yet.
Details announced for Lord of The Rings TV show: "The Rings of Power"
Good point. And AOE4 is apparently quite good too.
I found the technology connections video about dishwashers improved my washing performance 2 fold, that might help you.

The parallel commenters comment about stuff stuck in the arms could be the issue as well
I strongly disagree. I watch a lot of long form, in-depth videos on YouTube.
If your provider offers 10 Gbit/s, you only need to change the fiber optics modules at either end of the connection. The same lines can be used, no need to run anything extra.