skysight-inc/HackerNews huggingface dataset:
Seems like only on passwords, but great that it does at least have it on passwords!
I wonder if it would be feasible to have some sort of trademarked "Pro-User" badge, and an organization which vets apps and licenses the trademark to them?

I know such things exist for "cruelty-free" (i.e. no animal testing) -- why not for "MBA tech bullshit free?"
I thought some of the modules are checked for licence field prior to loading them. You could modify that if you keep the whole internal
I worked for a bunch of startups and I'm not surprised by this.

Nobody really cares. Security isn't a topic ever.

Founders pay you VC money to fly across the country to talk for days about UI wireframes, but nobody ever cares about where or how you store data.
That's perhaps from the days when water wasn't quite as clean as it could be, and other drinks were preferred.
Not true since that would then be a random will. Nothing free about that.
Yes, true, I don't think ipfs is meant to be censorship-resistant though, so finding the IP of hosts doesn't seem like a big deal for the project goals.

My point was more that the NFT metadata itself could still be usable x years in the future when another protocol has replaced ipfs – it would just have to make the files findable by the existing hash.

The biggest potential risk would be if sha256 becomes broken and finding collisions is trivial.
We raised three children without tracking data on their metabolic processes. We nursed them when they were hungry, changed them when they were moist or stinky, and comforted them when they were upset. The only thing we really measured is how little sleep we got. They have all grown into fine adults.

I have observed that one of the biggest causes of bad relationships between parents and their children -- and subsequent life problems for the children -- is when parents try to assert too much control. It's a fine line between responsibility and control, and the quality and quantity of information you need for the former before it becomes more of the latter.

The question is: do you need what the app gives you to fulfill your responsibilities, or do you just want it to satisfy your urges?
I frankly thing password managers are the most stupid thing.

We fake users inputing text to input boxes and spend crazy time figuring out how to do that and how to get around various sites trying to block that, so the site can still pretend it’s actual user inputting the password. Plus the manager needs to work around arbitrary password rules. Plus they usually don’t work at OS level; so you still need to remember that stupid iTunes password, that stupid Windows password, that stupid Google password on Android login. Plus you still need random PINs in random banks and other systems.

It’s better than memorizing, of course, and slightly better than writing it on paper somewhere (although that’s actually not that horrible honestly).

It’s just, they feel like a patch-fix from 1990s to a problem from 1990s.

I don’t want password manager. I wish I didn’t need password manager.
Reddit Announces Blocking Updates
> The point is this: for whatever reason (mostly, as you say, simple military inferiority), Hamas is no longer harming Israel to a great extent, and hasn't been in the last decade. Why then is Israel still harming Palestinians at the same rate it was back when Hamas was a major threat?

Hamas can't get a lot of kills because Israelis run to shelters, they have a very advanced bomb sirens and radars. Without this I'm sure Hamas' kills would have skyrocketed.
So it's not that Hamas isn't trying. BTW a lot of Israeli cities live under unbearable conditions, it has been shown the psychological trauma running for shelters (for years on years) is doing to young kids. I'm not denying Palestinian kids live under an even greater trauma, I'm only saying this is affecting both sides. I wonder what the UK or US would do if the kids in London and NY would need to run to shelters a few times a week because of missile attacks. I'm sure they would seek to proportionally kill just as many terrorists right?
It's not as if Israel can just decide to absorb this and do nothing, what country would do nothing in such a state? You seem to have no words of criticism towards Hamas for some reason - because yes colonialism and white privilege, gotcha.
Does the strap include a counterweight? I see the battery elite strap weighs 179g, but from memory the HMD weighs over 500g.

I wrapped a couple portable batteries (they're dense) in a bag and tied it to the back of my basic strap, and I don't even need to tighten the strap anymore, the weight is mostly pushing down on the top of my head now. It's an incredible difference, to the point that I'm offended they don't include a counterweight by default. From memory my counterweight is around 350g.

Maybe you can try it out by loosening the strap and using a finger to tug down on the back of the strap, and see if it balances on the top of your head and feels good.
LastPass, everyone hates it including me.
> I already feel disconnected from the world around me, my community

By all means, I see your point and agree in general. But VR is not different from sitting at a desk.

I think we already live in some, not so healthy, virtual realities: online echo chambers, search engine/filter bubbles, ideologies perceived as normality.

In more extreme cases, anti-science and anti-intellectualist movements and so on.

But this is not a tech problem.

> nature

You can still go out for a hike. VR is not different from being inside a building.

> fresh air

No snark intended: you can open a window or have a heat exchanger with filters that is better for your health, comfort and energy usage.
I AM THE KING! Why does everyone keep ignoring me and my orders?

What is sad is that anyone is even talking about this guy. From the beginning people pointed out he is lying and yet he is still somehow able to be talk about.

Most obvious con-man that is still able to stay in public spotlight.
One reason why you would want to know how Git internally works is to make a better use of it. The interface it exposes is relatively low level and as such suffers when uses don't understand how the software internally operates. If anything, used being repeatedly pointed to docs shows the lack of understanding of Git's inner workings.
Maybe we could start minting coins or NFTs from captured CO2?
Loose Coupling with Signals and Slots
State of JavaScript 2022 is open
It's not only about money, but also privacy. Services like these shouldn't know who their customers are.
take that, sola fide!
Lax prosecutions drive a surge in package thefts for Union Pacific Railroad
Concretly, how often do security breaches happen due to timing attack? I can't grasp how severe this things are.
Science Fiction Revisited: Ramjet Propulsion for Interstellar Space Travel
I always wondered if any of the online tools like JSONlint or any other tools that manipulate data would save it or try to extract data as it is often used to indent or decode potentially sensitive data.
Have government fund it, then limit or tax net emissions and now there is tech on the market to capture carbon to reduce your net emissions.
Show HN: A website where you can watch and listen to sorting algorithms
Wow. Do you have any pointers to this information?
You can get easily 2GB with a SBC for less than $60.
The expensive part is the case, and power supply.
I've used it before, it sucks.

It does the job, but very poorly. Same as LastPass.

I use 1Password now. If I didn't want to pay for it I'd use KeePass.
Hmmm. Thanks for the tip.

Maybe a dumb question, but how would I even make a counterweight for it? I guess I’ll try tying random things to the back of the headset..
“Artificially limiting” by choosing not to port games to those platforms? Would you say the same of studios who don’t port games to PC? Do you believe 98% of the industry is “artificially limiting competitors to the detriment of consumers” by not porting to macOS or Linux?

> it's not their desire for the games to run there

And yet they can prevent their games from running on Proton like some devs have done by anti-cheat measures. IIRC Overwatch refuses to run on Linux and risks a ban because of the Vulkan translation layer.
was the header really last edited 15 September 2001? I can understand the sentiment even more, if so.
Yes but ... this was not simply about them doing whatever *they* want.

This was about them legally forcing others to also do what *they* want --- with private hardware and software and infrastructure that *they* have no logical, legal, moral or ethical claim to.

The sheer arrogance required to even ask for a court ruling is kinda astounding. The ad industry needs to take a step back and reexamine their game plan. All this tact will do is build more incentive and determination to block them.
Does anyone know if this kind of connector works with a PCIe to M.2 adapter? i.e. I have a PCIe card with an NVMe drive connected, could this be used? My motherboard doesn't have an M.2 slot.
The BBC has a piece on the same story: https://www.bbc.co.uk/news/technology-60036861
I wonder if there isn't just a simple way to make timing attacks impossible. Find out the longest possible runtime, add some overhead, and then do the encryption in a different thread or process. Then call back after a constant time. It seems like this should be a primitive that is used a lot.
it's clearly a false dilemma but the people here saying "they A/B tested it wrong" just won't say that

this requires more inspiration to solve than just pointing at having vs not having cash bail

for now, they ended cash bail without implementing any additional system, and that has undermined a merely familiar balance in our society. there is nothing saying that balance could be restored while also not having a cash bail system, but people are pretending like these two concepts are intrinsically tied.
No. The first priority in a nuclear war is to negate the enemy the capability of waging war. So, you'll be targeting military bases, ICBM silos, airstrips and command and control facilities.

Urban centers are secondary targets, and never because of their civil population per se, but because usually industrial installations are located in or very closely to the biggest urban centers. But then again, if you plan on conducting a land invasion and an occupation there's some reason to refrain bombing your enemy all the way down to the Paleolithic
Hi, I have some questions about Sanakirja, if you don't mind..

It stores 4kb blobs, right? Does Pijul first parse the data (copying it to other allocations), or does it use the data as is? I mean, there are some libraries like cap'n'proto[0] and rkyv[1] that can directly use the file contents as an in-memory data structure, without a deserialization step (or rather, deserialization is simply a quick validation to check the data isn't corrupted), I was wondering if Pijul did anything like that.

And like, is this btree header [2] stored exactly like this on disk, and does Sanakirja exploits this to avoid further copying data?

(I guess there's a trouble with compression there: to decompress you really need to write in another buffer)

Also, is the I/O done with something that prevent userspace copies like mmap or io_uring, or does it eventually calls read() to copy the data to its own buffer?

I want to build something like Sanakirja, but with those features to avoid copying data, so I'm wondering if there's any overlap.

[0] https://github.com/capnproto/capnproto-rust

[1] https://github.com/rkyv/rkyv

[2] https://docs.rs/sanakirja-core/latest/sanakirja_core/btree/p...
KeePassXC does support autofill in desktop apps
Password managers are the most stupid thing, really? What better alternative do you propose?
I’ve heard that called the “weak man” as opposed to the straw man. Almost all debate I hear is against the weakest or nuttiest form of an argument.
The GBU-57A/B is rated for 61m of penetration. I believe there has been testing of munitions that can do 100-150m, and that is roughly the depth you need to have a hope of fully containing the blast to eliminate fallout. I’m not aware of any munition in operational service that has a public penetration of 100m though.
They are dead. They lost unbackuped drives. They found god and abandoned technology all together. Abducted by aliens, or taken by time travellers.

Craig Wright is just a scammer, caught red handed lying so many times, why would you trouble yourself and your anonymity to prove water is wet?
See also the Xbox 360 RRoD plague from the same period.
In Bitwarden you can achieve that by creating Custom Fields [1] for each letter.

[1] https://bitwarden.com/help/article/custom-fields/
Since everyone's asking for a good password manager for their use-case, I may as well so the same. Thanks in advance for any replies.

I've been looking for an alternative to Enpass, which:

1) Supports using WebDAV as a backend (or an "app" exists for Nextcloud, if one exists).

2) Supports biometric authentication on Windows and Android.

3) Has a client which unlocks off the system keyring on Linux (Enpass doesn't do this).

4) Uses in-line autofill (through the Keyboard) on Android. Enpass said they'd add this month's back... but never did.

5) Has a not-ugly UI which at least partially matches GTK/Qt on Linux, Fluent on Windows, and MD2/Material You on Android.

6) Has Chrome and Firefox extensions that "take over" as Autofill like the Enpass extensions do (you can see it in Chrome Settings -> Autofill, if an extension does).

I don't mind if it's paid, as long as it isn't relatively expensive (i.e. no more than Enpass because I got that on discount).
Isn't this already common for young people in cities? I used to change apartments every year on average.
Subtitles aren't piracy in any way though. Kind of similar to legality of torrent sites but even less questionable.
Fatal airline crashes are forever popular as news stories, yet are now essentially non-existent in the US, and very rare worldwide, despite the ever expanding number of passenger-miles flown per year. The news industry's solution, I guess, is to serve up reports of near misses.
”In the cloud” for web 2.0, ”On the block chain” for web 3.0
Indeed, a 4K video can hardly saturate 100Mbps link https://www.reddit.com/r/PleX/comments/eoa03e/psa_100_mbps_i...
If you have any non-ASCII characters wouldn’t the C collation be very surprising? I’m having a hard time seeing how the C collation is a sensible default for UTF encoded text. If you want to limit to ASCII the why are you using UTF?
Lastpass. I didn't know it was possible to make a web page that slow.
Honestly, not as a big a deal as some people make it.

First off, you'd have to assume the attacker knows the bcrypt hashes are bcrypt(md5(password)) – an attacker wouldn't always know this

Also it assumes there is password reuse, but that the password is strong enough that the md5 is uncracked.
I looked it up again, you were more right than me ;) If you speak German, you can read about it on Wikipedia [0], essentially it was the only format from 1996 till 2001, but because it was completely ignored, they went back to allowing DD.MM.YYYY, since 2020 it also includes that the old format is only to be used for national mail.

[0]: https://de.wikipedia.org/wiki/Datumsformat#DIN_5008
Unintentionally public data for web 2.0, intentionally public data for web 3.0
I had a look at the screenshot and frankly, that sounds terrible. I mean, you are already stressed about all your new parental duties. Now you add the stress of the app. This is the opposite of what you need - that is, being relaxed.
In this case though the problem isn't irreversible transactions, it is that Craig Wright does not and has never owned the coins he claims to have owned.
C your data structures with rellic-headergen
A lot of that sounds pretty incredibly wasteful and I don’t think it should be something to strive for more of.

Docker images are layered for a reason. If you’re having to download multi gigabyte docker layers multiple times, something has gone very wrong.

Azure charges (like the other major cloud providers) by egress data. I feel bad for whoever is paying the bill for 20gbps going out.

In general, people in ML shouldn’t be pulling raw data in the hundreds of gigs down to mobile workstations. That’s a security and scaling disaster.

Trying not to be too much of a curmudgeon here, but this is the problem with 1 gbps connections. They are so good they prevent you from doing the right architecture until it’s far too late.

A good remote work setup should leave all of the heavy lifting close to the source and anything that does need to be downloaded should be incremental/shallow copies. You should be able to work from a stable coffee shop WiFi connection.
Sanakirja does all those things indeed: Sanakirja doesn't parse anything, doesn't call read().

The answer to all your other questions is yes.
Bitwarden is open source. It is auditable. You can host it wherever you like or you can support the devs. I think it’s great.
I use keepass with the app.keeweb.info frontend and a gdrive backend. keeweb.info has totp as well. Seems pretty straight forward and its free. Make the backend file accessible by link and forward a bit.ly to it and you can pull it down anywhere you have internet. Phone app works great too. Everything works offline too if gdrive isn't your thing

Every computer I normally use will have a copy of the file in the case that I can't access my gdrive (which I don't see happening really).
Is this an advertisement? It just links to the bitwarden website. Why is this even here?
> I hate when people use latin characters to 'sound out' russian words

Except nobody knows how the Russian characters even sounds:

https://youtu.be/m0i8IBZklZg?t=9
I think an average user password would be shorter than a sha256 hash no?
Ah nice! I was interested in looking but don’t know the codebase.

That method does look better. My idea assumes that the method has already been checked to see if it is a valid method, which has its own cost. Otherwise, POSABC would be parsed as POST. Their method does that more or less on the fly.
I'm confused. How is this post not violating hacker news terms of use, and in addition to that how has it attracted 176 points?

Hacker news was about cool hacker or personal project. This is a company advertisement.
Possibly that they're dead, such as with the Hal Finney as Satoshi theory. Otherwise they've could've lost the private keys, be in jail, became a hermit, or plenty of options like that. If Satoshi is multiple people, perhaps they can't agree on an action. Or maybe they could just like the chaos.
Cubans, Mexicans, and Puerto Ricans are all hispanic or latino but don't confuse them.
Satoshi couldn't care less about a scammer like Craig Wright, assuming Satoshi can move the coins.
CO2 is 0.04% of the atmosphere. Oxygen is 21%. We're not going to run out of oxygen.
Microsoft tried this years ago under Balmer and they called it Stack Ranking. They stopped doing it when it destroyed morale and they created terrible products like Vista and Zune. Just no. Read team books and do not create dog eat dog environments, we are not sales. We are knowledge workers.
Seems to be injected styles related to adblocking. Opera has an embedded adblocker. Try disabling it clicking the blue shield icon and reload the page. If my guess is correct the injected styles should disappear.
KeePassXC and Strongbox for (Apple products) personal use
If you loose bitwarden keys what will they do to recover data? They have similar security protocols so I doubt being open source would help that. It's not about being open source or not. That's just security

1Password says explicitly that you're not sharing the actual item in your vault and that it's creating a copy of it. It's probably generated client side and pushed to an external sharing service

I mean, I understand trusting open source but your statements seem like non-sequiturs. 1Password has been audited and has been an industry standard for a while. They seem to know security so at some level I don't find it difficult to trust them. Of course, I don't deny trusting open source and that's completely valid but not with these specific points
I think these kind of incidents are "averted" on a daily basis. It's just that air traffic controllers don't share that information every time. There's a great deal of near-miss incident at many airports around the world. But we don't hear about it.
how does this con-man make money off his cons though?
Satisfactory – Factorio with a Extra Dimension
I disagree harshly with the idea that social media _isn't_ an echo chamber. I mean, look at Reddit over the past few years. They've slowly (and successfully) removed nearly every conservative leaning subreddit on the site. It's clearly a hive mide ultra-lib circle jerk and anyone who doesn't see that has been drinking the blue reddit koolaide too long.

The only thing left really is r/conservative which is at best made fun of on the rest of the site - and even they have been debating going private.

Another annoying example: its frequently "fine" for liberals to say stuff like "I hope those who didn't get vaccinated die", which I've seen extremely frequently in things like r/politics and others, but when its the reverse (r/nonewnormal) it causes an entire ban of subreddit?

Not that I condone either side of these ignorant comments, but if you're going to take stuff down, at least be fair to both sides about it.

But hell, even centrists critiques like these are made fun of nowadays - gotta be a part of that extreme echo chamber to be cool, right?! So who am I kidding...
> Do you know why the majority of those people don't have bank accounts? Because they have no fucking use for it!

Everyone has use for a way to store their wealth, no matter how small. Economies that use money, in whatever form, are much more efficient than those based on barter.

> Do you know what 3.7 billion people don't have? Access to internet.

Yes, Bitcoin won't help people without access to the internet. There are still hundreds of millions (maybe billions?) of people that DO have access to the internet, but don't have a reliable way to store their wealth, either because of irresponsible governments or central banks.

You know what governments and central banks can do to the security and issuance of Bitcoin? Nothing. Absolutely nothing.

And that's very valuable to some people.
With a Repair Ship Many Days Away, Tonga Faces Weeks of Digital Darkness
> getting an exemption from a doctor is not so straightforward (even if it technically exists)

Perhaps you should try, they definitely do exist and you would know this if you actually tried instead of telling me it's hard before you've looked

> and questioning anything about a vaccine/booster (including relating actual personal experience) is either not well received or just ignored. On social media, it's even attacked

Then don't tell anyone you're exempt or get the vaccine, honestly I think you know what you're saying is just an excuse

You're making a mountain out of a molehill here
I moved to Bitwarden from Lastpass last year. Ironically I remember needing some premium feature, and having issues subscribing to premium. Support was 0/10, and made me move to Bitwarden, but I was really happy with Lastpass. Feature I miss today is security checkup.
Version control contains problems that are not trivial. Git exposes the right parts of the problems and conflicts for the user, that are in no way trivial for a computer and require human decisions on what should be done with them.
Probably 0.00001% of the cases.

The other 99.9999% is when somebody forgot to change a password after an employee left.
Use bitwarden (see related thread on HN today). Works great in Firefox, on mobile, Firefox mobile, etc. All synced. And it works in other browsers too.