skysight-inc/HackerNews huggingface dataset:
Thanks for your response!

I guess I should do some benchmarks comparing different technologies.

> Things like Serverless go the opposite way and tore both your incoming request through a complex set of hops, and also your backend database requests.

I didn't know about that, thanks. If you know some good resources on the topic, feel free to put them in a reply to this message!
They were profitably bootstrapped for years and then chose the VC route, no clue why but perhaps the founders wanted a huge pay package.

Then things went downhill.
Oddly enough 1Password could innovate productively here: use some market clout to push for a standard way for password managers to do automatic password rolling without user interaction.

Imagine a world where a standardized protocol let a company put out verifiable "we've been hacked notice" and my password manager would just take care of it next time I opened it (or throw a prompt or something).

Doubt this is going to happen though.
White supremacy as an ideology is as poisonous as black supremacy or any other "ethnic" supremacy.

White supremacy as the label being used by "progressives" has nothing to do with the ideology other than in sharing a name. The label is just one of the many applied to those who dare to divert from the narrative, often used in situations where the "progressive" has talked herself into a corner from where there is no getting out other than by creating a path of labels to escape on.

I think it is better to only use the term "white supremacy" when describing the former. Don't use it as a label for something you find distasteful, only use it as a term for a specific ideology. The same goes for words like "fascism", "racism", all the "-phobias" and more. Take back the language from those [1] who have used it to drive their own narrative.

[1] https://newdiscourses.com/tftw-derridean/
What Xbox will likely do with its $68B purchase of Activision Blizzard King
Is the power consumption (and heat dissipation) a function of bit rate? E.g. would the same 10GBASE-T transceiver consume less power when running at, say, 2.5Gb/s than at 10Gb/s?

Would love to understand this a bit better.

(edit: corrected the units.)
Because they merely make really hard things hard and simple things painful. They solve a problem (albeit one that can be better solved by a decent package manager like Cargo/NPM).

And in return, basic operations like merge/rebase start breaking in unintuitive ways.

E.g., I work on repo ss14 that has submodules RobustToolbox, but never modify them in my PR.

I rebase my changes. I have changes in RobustToolbox that are only visible in Git Bash. Other Git clients show no changes... Ofc `git submodules update --recursive` might help or something, but it made a simple operation more complicated.

And that's if I didn't change the submodule. If I did, merging/rebasing becomes its own, separate nightmare.

> They solve the problem of "pin a specific version of some external 3rd-party repo" really

With Cargo/NPM you can pin your dependencies to some version you control like a fork or a local directory, making submodules non-necessary.

And unlike submodules, they don't require you to modify your workflow to sprinkle `git submodule update` everywhere.
Referrals are (or should be--I know some will refer any and all for the referral bonus) really intended to refer someone you have some first-hand experience with. I'm going to refer someone out of the blue to the company job site.
Be careful with that. It may generate challenges that only it can solve and take over your site ;-)
Something similar was discussed in November 2021.

https://news.ycombinator.com/item?id=29323993
Webpacker Is Retired
You can knock over a server with malicious requests of static content. In fact, what you are describing (requesting different pages) is the first step to trying to defeat a firewall rule that would protect against that attack.

This is the era after the invention of Low Orbit Ion Cannon. Attacks that would previously have been technically sophisticated can now be done with a few GitHub downloads and either many volunteers or many compromised machines.
End users don't have to compile the software each time they want to run it. A dedicated performance testing setup with realistic hardware is better than wasting a developer's time waiting for their machine.
Presumably a stepping stone on the way to 1Password being acquired by a major tech company, e.g. Microsoft, Google, or Apple?
Spot on. What's the best thing to migrate to?
No they probably didn't, because by getting almost 2B$ in funding they forced themselves to compete with MS and the likes.
All Roads Lead to Arch: The Evolution of Linux Distros Used for Gaming over Time
Because cloud and enterprise.

Sure, labour costs are expensive in our industry. But it's under-appreciated that once you need physical infrastructure, sales and enterprise support, that really tends to eat into your millions.
Web3 is the solution to all our problems!... obviously not

But something I've seen is that is making mainstream using private and public keys. We have Client certificates but those are hard to create and use, and not really compatible with mobile.

I think a good workflow will be something similar to connecting to SSH, instead of a static password you sign a challenge with your key pair.

I have a few weeks thinking of replacing the social login (FB, Twt, OAuth) with wallet login
https://github.com/amaurym/login-with-metamask-demo
It is the Unix way :-)
If it is illegal in one country does it make illegal in all other EU countries as well or is this left to individual law systems of each EU member state?

BTW. your site looks great. I like the running ticker on the side.
Your connection is not private
Attackers might be trying to steal your information from isgoogleanalyticsillegal.com (for example, passwords, messages or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID

No thanks.
For me the main thing that stops me from using is poor support for non-website passwords, which you already mentioned. I also miss having a "notes" field where I can write down what email I used to sign up, or answers to security questions (I like having "fake" answers for those).
How the brain is programmed for computer programming
There were also tens of thousands of years where you got TB and died aged 26, but I'll still take modern medicine when offered.
Adding insult to injury is the last Paragraph I actually missed:

> If companies like microsoft, facebook, twitter, nintendo or zoom can get hacked, what are our chances as a tiny team to not endup getting attacked ?

It's not about them getting attacked but they weren't the target of a three letter agency Throwing weaponized 0days their way either.

Anything that is remotely considered best practice would have helped:

Like having strong passwords for the "SuperAdmin" account that was compromised. It's called SuperAdmin for a reason don't you think?

Not using unsalted hashes in the first place?

Investing some of your ad revenue in making security updates to a system that was already bad the second it was conceived?

Their whole statement is insulting
Yep, this will go the same way as LastPass sadly. This kind of company must have a steady positive revenue stream from it's customers. If not, it is not reliable. They will not be paying this back any time soon.

Fine by me, 1password was too expensive to begin with. Sad to see they're wasting it.
MyDef – Programming in the next paradigm – your way
I don't recognize anything about the WP Apache marriage.
Thanks. I will add that
Might as well stick the Leetcode problem on job postings with this.
Meta: this website consistently crashes my browser (Firefox on Linux) if I move the mouse in and out of the map a couple of times. Does this happen to anyone else?

(edit: demo video url: https://dabbleam.com/jesus/Screen%20record%20from%202022-01-...)

Edit 2: doesn't crash on a fresh Firefox profile. Crashes upon enabling gfx.webrender.all, gfx.webrender.compositor and gfx.webrender.compositor.force-enabled. Very intriguing stuff, I'll file a bug.
I made a french version last weekend https://motle.fac3.org
Show HN: MIT-licensed IMAP client for Node.js with Promises
I found Keychain quite horrible. Everything is or at least felt just too abstracted away so that I don't feel in control of my secrets. Might have been just the UI though. And then it's obviously not crossplatform by default. Sync your password database between your Android phone and Mac? Nope. So it's another step into vendor lock in.
Maybe you can't. Everybody has their own risk tolerance, but at some point, everybody's going to have to draw a line. Maybe you're only storing passwords for local services, but almost all of the credentials in my password manager are for services run on some cloud. Even then, did you evaluate all of the code for each of those services? How about the compiler code or the chips? Dell shipped out machines with a hardware trojan in 2010.

I have separate instances for work and personal accounts, so one breach wouldn't affect the other. Since my passwords are distinct, the number of accounts that would actually be useful to them is minimal, and fraud response is a pretty important metric in deciding what companies I do important business with. Identity theft is a problem, but all of this is probably more likely to be leaked in some other database, like the Equifax hack, than through an account compromised in a password manager cloud storage breach.

My password manager being compromised would indeed be a huge time suck, but I don't think the long-term consequences would be any more severe than a few key individual accounts that are probably even more vulnerable. I think things like coordinated attacks where they social engineer their way through 2FA— which have been seen in the wild— to present a greater real-world concern.
JetBrains products. They're so well designed. Closest to 'smart' I've ever seen.
> Also, I sincerely have no clue how a password manager could be so expensive. Last time I checked, the excellent KeePassXC was still free open source and developed by volunteers in their free time.

Because 1Password is easy enough to use that my wife and I can share a family plan without her getting frustrated. If one of us has a login the other needs, we can easily share it. When I evaluated KeePass, the Wife-Acceptance Factor (WAF) was not there, though maybe it's improved.
You could of course try to actually put forward a definition of free will that is possible to defend which is not based on smoke and mirrors.

But you don't, cause you can't ;)

(and as the other response pointed out: this is exactly the kind of response I expect when I ask for definitions of free will, because the notion of it collapses rapidly when people try to define it)
> identifying people with nations anyway.

Always awkward after conquests.
Gould and Lewontin weren't debating. They were engaging in academic politics.

Arguing that an idea is wrong because it "lends support to scientific racism" is unscientific. To argue against an idea, demonstrate why it's wrong or offer a better alternative. "That's racist" is neither a scientific argument nor a serious one.
I wish the Apple password manager worked cross platform.
There are many finger-printing and tracking methods of which cookies is but one. A couple of them can effectively “break” the private/incognito barrier (perhaps with less accuracy and/or precision, but given enough data-points discrepancies can be averaged out).
It's a Let's Encrypt certificate issued by R3, perhaps your root certs are not up to date?
What about bots and elaborate macros? They have existed in almost every game I can think of. Once games go Play-to-Earn it will draw the attention of the most clever and enterprising individuals finding ways to exploit it.
The last time the evergreen college protests were brought up to me, it was by a friend who had started leaning right and he mentioned something similar to what you said.

When I looked more deeply in to it, the only mentions of people being held hostage came from far right sources, such as the youtube channel you linked, with little credibility.

Watching recordings of what happened it's hard to take you seriously when you say people are being held hostage.
But 1Password previously had the option to _not_ use their cloud, and they deliberately killed it to push people onto their subscription offering. So I think in the context of a conversation about how financial conditions will force changes which change the customer experience, I think it's entirely fair to compare them to a non-cloud option.
'I think the bigger turn-off is all the 'VIP' enclaves and their 'hospitality staff', often aka young women under pressure to offer extra-contractual services. Perhaps the burn should be more distributed.
Huh, it is working for me. It looks like a valid cert from Let's Encrypt to me. Do you have any more details? So maybe the author can fix it.
This is good advice. I'd add that while I'm looking for someone who's at least competent at the major technologies, demonstrating that you've got promise can cover for many sins.

To do this, you've got to be willing to take some risks, too. My additions to the above would be:

Show enthusiasm for the specific role and even industry that you're applying for. Don't just say that your goal is to be a successful software engineer, say that you're aiming to be able to develop UIs for large-scale ecommerce systems (or whatever, as the case may be). As a hiring manager, I want to know that you'll be interested and not just using us as a brief temporary stopover to fortify your resume.

When you're doing an interview, particularly the tech part, there will probably be many questions you can't answer. Don't just say "sorry, I don't know". I mean, do tell them that. But then go on to think out loud, trying to work out for yourself what the answer might be. That's going to demonstrate to me that (a) you're up for pursuing a problem rather than just giving up, and (b) it'll show me that even if you have a specific gap in your knowledge, you've got a sound foundation to build on.
Generally agree but there are important edges where that breaks down: shared vaults, one time access, posthominis access, etc.
Checked, also FF on Linux, works here, no crash.
I hope that's enough to finally make a Chrome extension that works. Theirs seems significantly broken half the time.
All over Great Britain we have Guy Fawkes night (November 5th) every year and burn a poor representation of a human being for reasons everyone forgot long ago. In advance it used to be dragged around by us kids asking for "penny for the Guy". Not sure they do that now.

In Lewes they do the night in style, though I have never been.

https://en.wikipedia.org/wiki/Guy_Fawkes_Night

https://en.wikipedia.org/wiki/Lewes_Bonfire
It really makes me wonder what kind of conversations had to happen to bring investors on-board. I don't want to give too much credit to investor types, but... surely this must have thrown up some red flags?

Exactly what kind of moon-shot ideas did 1Password start tossing around to get those wallets open?
Wouldn't KeePass + syncthing be just as ubiquitously available, with more security?
A more realistic goal is probably to get the court's blessing to authorize nchain, who maintain the only BSV client (therefore the entire blockchain) , to send Satoshi's BSV coins to Craig.

This seems much easier to achieve and allows him to steal coins from all BSV holders without taking from any one BSV holder in particular. Coins previously thought lost would be reintroduced, effectively inflating the coin's supply.

That's a quick and easy ~ $83M based on today's BSV price and a conservative estimate of the number of coins held by satoshi.
> It's also 3rd party apps (some closed source) and not official ones which is its own problem (-> trust)

Isn't the self-host server (Vaultwarden) also 3rd party?
I agree it’s so easy, if they add some sort of plugin that pushes to you phone to verify It’s you - game over.
Even the most basic municipal landfill is lined, capped, and waterproofed such that even hazardous materials that might end up there aren't "polluting the environment".

There are reasons to sort out certain waste, usually as a precaution to chemical reactions, but not leeching, but its mistaken to assume only "toxic" waste is isolated from the environment,

The reason they are called "sanitary" landfills is that they already safely contain concentrated sewage, and prevent it from infiltrating water supplies.
True. I’m reading this as an attempt to move into the enterprise auth space (e.g. Okta).
Mostly A. Why bother with ever getting a password and having to deal with it in any way, versus delegating that aspect of security to a FAANG-level company with a > $1m security budget?

You can store your password yourself, sure, but how certain are you that you're doing it "right" and that "right" today will be good enough tomorrow? 15 years ago MD5 wasn't perfect, but it was good enough versus the other common/stupid methods of storing the password directly or storing it encrypted vs hashed. How certain are you that Argon2 is going to stand the test of time for another couple decades?
Aluminium is weak as piss. I get verbally abused by our machinist for simply asking for an M2 tapped hole. Even on a CNC, your tap can break during a run and you will have a vey bad day. How any of those tiny screw holes is machined in mass production is beyond me.
Or could indicate you need to work on your communication skills...
Interesting, that's a new one on me! Thanks
> Do you think that if Hamas and all the other militant/terrorist organizations in Gaza surrendered all of their weapons to Israel tomorrow, conditions would improve for Palestinians?

Yes, absolutely. Conditions have been much much better before Hamas came to power. In fact Israelis and Gazans used to visit each other freely in the 80s and lots of Gazans worked in Israel.

> Do you think Israel would accept mass Palestinian (Arab) immigration?

No, I don't. That's the crux of the matter and also deals with your comment about who the "main aggressor" is. Israel wants to remain a Jewish country, that means settle the descendants of Palestinian refugees in their current countries. Given what Jews have been through it should be clear why Jews feel like they need a country of their own. Given the fact that Palestinians don't really want to live in a binational state with Jews, or in a democracy, and all the bad blood between the two peoples, it should be clear why allowing uncontrolled immigration to Israel is not a solution but a creation of a new problem (probably a new wave of jewish refugees)
As mentioned in another thread on this subject: EU privacy law is harmonized, there may be local exceptions but these are increasingly rare and over time I would expect them to fade away completely.

Note that the ruling confirms the GDPR, the EU legislation.
I disagree about the "ticker." Items moving on a page without my request and particularly without any purpose are annoying to me at the best.

Sadly, such nonsense is quite common in modern web design.
Knock on wood.
I use KeePassXC on my Mac and KeePassium on my iPhone and it’s so great. And it’s free. It’s some of the best free software I’ve ever used.
I learned the difference between Philips and Pozidrive at school, thank goodness, and this has saved countless stripped screw heads. I am surprised how few people know about it, even professionals.

It’s particularly important when using power tools. An electric drill with Philips bit will instantly munch a Pozidrive screw.

It is the 45 degree markings you’re looking for, in case that isn’t clear: https://shop4fasteners.co.uk/blog/pozidriv-vs-phillips/
The goal is, indeed, to make people more concerned about things that can be construed as racially charged, because of the first step to addressing inequity is to identify it. There are very many people who see what are obvious instances of structural racism (including the police interaction example you highlighted) and will fight tooth and claw to assert that no racism was involved. The result is apathy, lack of improvement, and continued racially-charged interactions between police and citizens. Pretending they aren't racially charged doesn't make them go away.

Before positive changes can be made, people need to recognize that do-nothing mindset is very common. On this, two days after Martin Luther King Jr Day, it may be value for us all to reflect on his words on the difference between the peace of the absence of tension and the peace of the presence of justice.
I scrolled looking for these. I get a few every year at my place but tend to marvel at their size, eat a couple raw then throw them away. I've tried oven/fire roasting them like we do macadamias but wasnt too great. Any preparation you recommend?

For people that dont know these, think pine cone thats a little bigger than a bowling ball. They are pretty amazing looking things.

https://www.abc.net.au/news/2018-05-12/australian-native-bun...
There already are rules that avoid most depreciation in this case. The Tangible Property Regulations allow a De Minimis Safe Harbor expense deduction for assets purchased, such as a computer or office furniture. The max amount is $2,500.
IRC. Gopher. FTP. It was "elite" just to be on. Also it was something to do after school!
Latest stable Firefox on Arch, it doesn't crash but the person stops moving after a few times.
Almost impossible no?

I guess for mainstream stream ISP's.. but a chrome extension can fix that for sure.
Interesting that he mentions the Dave Smith Instruments (now Sequential) Prophet 12. I have a Prophet P08, and have opened it up to repair it, and it is a work of design elegance. It contains five boards, each connected via an easily removed ribbon cable, attached to a metal body with just a few screws. You can trivially remove all the boards, and in fact I did exactly this to ship the boards to the company for a minor repair rather than shipping the entire unit.

Another work of design beauty was the NeXTstation, NeXT's pizza-box shaped workstation. A solid magnesium case with an elegant molded heat sink on bottom, opens with a single screw in the back. Inside there's a fan (two screws), a power supply attached directly to the case over the heat sink (one screw), a mount for the floppy drive (one screw), a mount for the hard drive (one screw), and the motherboard (one or two screws). And that's it -- that's the entire thing! You can break down the entire machine in less than five minutes. Did I mention it's made of solid magnesium?

How NeXT/Apple has fallen.
I'm surprised you're able to get anything reasonable for 10G over any modest length of cat5e, i made a few attempts at doing it for fun when i was upgrading some of my stuff and could only get anything to work with cat6 at a minimum for more than a few meters.
Funny, "private IPO" is exactly what I said to someone I was discussing these types of rounds with.

Going public has very tangible costs, but also massive intangible costs. Private markets are extremely frothy and keep ownership and control within an aligned group of investors. This can make all the difference in the world to management.
Kentucky Fried Theropods
I'll read those articles you shared, thanks!

Currently the CGI stuff I'm working on is to run stuff on a cheap shared host, so I'll have to check which category of servers that Apache falls in.

Once an application I'm running on a shared host becomes successful enough, I'm probably going to want to move to a different environment, but I'm still interested in what that would mean for performance :)
Bitwarden is free, 1password for yourself costs $36/yr. That was my reason for using it - I try to avoid subscriptions like the plague.