skysight-inc/HackerNews huggingface dataset:
A construction worker moving to cloud security and in a single sabbatical year already scrutinizing by himself the firmware and closed OS of a treadmill.

makes me happy. Hope a lot of people can leave behind those low paid high effort jobs thanks to this 2 shitty years
> Defense against rainbow tables is obtained via salt, not via slow hashes.

And bcrypt includes stores a unique salt next to the hash for every password, making rainbow tables completely useless.

https://en.wikipedia.org/wiki/Bcrypt
Yeah, the mikrotiks recommend populating only every other slot if you're using RJ45 transceivers to avoid overheating.
It is funny, because to me "only a file you have to sync (and backup)" sounds more like an advantage than setting up an entire server environment just so you can access your passwords.
Do you increase revenue with hard DRM measures? I believe it depends. I did pass games because of their DRM requirements and that includes Blizzard for the last few years. They don't need my money as they were doing fine, but their obnoxious battle net certainly drove me away. Same is true with a lot of other developer specific platforms. I accept some because they provide added value, but the vast majority of DRM does not.

On the other hand other services have proven that piracy is most often a service issue. There will still be piracy, but it is questionable if those users were able or willing to spend anything in the first place.
> coke already has a lot of industrial uses.

Which nearly all involve converting carbon to atmospheric CO2.
Yeah, from his WP link quines are, among other descriptions, "self-replicating programs". And in the same blog header he also says it's a TiddlyWiki. That's one of many kinds of TinyWikis, and a rather interesting one in that it's self-contained: The entire source code for its Wikifying is contained as JavaScript within the actual HTML page itself. I guess that's what he means; TiddlyWiki pages are kind of "self-replicating" and therefore kind of quines.
> Apple has long been extremely compartmentalised

Oh, I have been told that Apple could only build such great products because of the tight integration that would never be possible if Apple was split into e.g. a hardware and software company.
Larger enterprises have their own images and would never put a preinstall on a users' desktop.
Yeah that's where you go from a linear to a nonlinear system, and why the associated discipline is called complexity science. It's still just an extension of the same concept into high dimensional space, but attractors in high dimensional space can be a lot less intuitive than 2d ones.
Yeah, not surprised given the satellite images there. ;-) It's how I imagine setting off a nuke of the larger kind would look like.
"Rather, they rarely land in front of the people who disagree with the contention held within."

You are likely right as those involved will probably dismiss any criticism. However, I believe the authors of this open letter probably want their position put on the record for posteriorly.

However, such is the outrage against Scientific American and Associate Professor McLemore that this open letter may have a life of its own.

The outrage was palpable 14 days ago with the HN story The Demise of Scientific American and many of those who posted shared the same discust. The public release of this open letter signed by many prominent people will probably reinforce this view and give the matter a continued existence in the public domain.

I've posted a link to the earlier HN story below.
How often do you seen an intellectual debate regarding Jan 6, rather than an emotional one in which the other side is vehemently attacked?
Apple: Fix for Safari Bug Allowing Websites to Decipher Browsing Activity
commit: https://github.com/WebKit/WebKit/commit/f73005ed826014988f8e...
Hi Elon,

Population collapse is not necessary bad.

The nature will find a proper equilibrium, shake off the metastatic human expansion, heal Earth's surface wounds, digest the plastic.
Detecting a new login is not one of BW's strengths. It's never detected one for me. But you can train yourself to "create new login" via the browser extension, _instead of_ expecting the extension to pick it up. This does work better for single-page creation flows. (Instead of using the web page to create a user/pass, enter it into the extension.)

It's pretty business unfriendly IMO, as most users simply cannot pick up a new, rarely used flow.

I switched away from 1P after they dropped the perpetual license option. They failed me by taking VC money and then chasing growth at users' expense. Not that the other PWM vendors aren't worse -- some of them much worse.
Linux 5.17 Picks Up a Real-Time Analysis Tool
You can use sqlite with valutwarden which ia more suitable for personal/few users usage.
My first HN post was "Nginx established as a company"[1]. I guess this starts the third chapter?

1. https://news.ycombinator.com/item?id=2776622
How to Build You Own Slack Bot
Happy to see people agree that Bitwarden is a great tool.

Thanks to the Bitwarden-Team.
random.org also offers 'true' randomness, derived from atmospheric noise.
I do wonder if there's any way to determine which of these is more random, and if that even means anything.
I don't think it would create a tsunami, it's all about the nuclear bang.
I own a switch.

It’s not the same as the wiimotes or the physical game gimmick ala wii sports. The physical movement was a big part, similar to what VR is trying to do now.

I think in generally the switch is awesome but it’s closer to a traditional console GBA or DS. Nintendo threw away what was a gimmick and what parts were making good gaming experiences.
A lot of times, the obvious _must_ be stated or else companies do whatever they want because "it's not written anywhere that I can't".
Really? Its less than the cost of a pint. Not exactly expensive considering the benefits. Sure it could be free, but its not expensive.
Track Elon Musk's Tesla Roadster in Space
They will still successfully bully speakers at conferences, threaten their security. I don’t think the cultural revolution is such a far fetch comparison. Somewhere between the cultural revolution and the Hollywood blacklist/McCarthyism.

And the exercises of forced public contrition if you violate the orthodoxy are right in the middle of the cultural revolution. As is the gilt of class (now “whiteness”), or the liberal use of "fascism" in every sentence (now "white suppremacy" associated with everything in America on MSNBC).
I think the standard position of free will non-compatibilists is that there is some dimension of mind whose future at any time T is not uniquely determined by its state at time T-1 (but it is influenced by that state, it's also not purely random). In this model, each agent possessing free will has a series of possible choices with "weights" for each choice pre-determined by the prior state of the agent (their history, their racial instincts etc). Which choice the agent will select cannot be known in advance. Usually it is implied that the agent has a resource of "will" that they must expend more of to select one of the choices with higher "weight". After the agent selects one particular choice, the universe proceeds deterministically (or probabilistically) until the next moment when an agent must make a choice. Whether this phenomenon is happening directly in material reality (the agent can influence wave function collapse or some other such idea) or it is happening in a separate world of mind/spirit and then there is some miraculous reconciliation of the two worlds is somewhat irrelevant.
We don't want to deplete oxygen in the atmosphere. Plants are much better suited to capturing CO2, IMHO, as they also produce oxygen.
"Somehow" doesn't mean we should entertain options that are guaranteed to be futile. There are already better methods that have been devised an even tested at small industrial scales.

This isn't a problem of scale, and the problem is that optimistic people just don't get this.

There is no way to make this work, ever. It's like the old joke: "Sure, we're selling every unit at a loss, but we'll make up for it with volume!"

You can't take a "business plan" that inherently loses money and try to scale it up to... what? Even greater losses?

(In this case, this is both a thermodynamic and a financial loss. You're burning both energy and cash!)
I take it using that data type in MS SQL Server doesn't use as much electricity as a small country, though?
Depends on the version of OpenServer.
Up to 6 (released in 2005) it was a descendant of Xenix, so plenty of AT&T (well Bell Labs I guess) code still in there probably.

Later on SCO finally died and Xinuos got the trademark, which was reused for a FreeBSD-derived product as well
in india for example, the monthly cost of netflix starts from $2 per month and amazon prime hiked their price to like $ 18 per year so yeah
Tsk, tsk. Keep bragging and soon enough we all hear:

All GPS devices MUST be switched off for the duration of the flight.

Because terrorism. /s
Sounds like a cluster bomb, weren't these declared illegal?

https://en.m.wikipedia.org/wiki/Convention_on_Cluster_Muniti...
I have this controller, and I was able to mostly workaround the dying issue by having a cron script ping a network device every minute, and when that fails it restarts the link - `ip l set enp70s0 down; sleep 6; ip l set enp70s0 up`.

But that's acceptable only because that machine has a workload which can tolerate not having network access for a few minutes per day or so.
I switched to 1Password simply because I liked the browser extension, and the Mobile app better. I had issues with autocomplete with bitwarden on phone
I have wondered, could this be part or answer to Fermi Paradox? That is advanced civilizations naturally die-off as they don't see anymore need to reproduce over replacement rate as automation will provide them sufficient pension?
It's a pity they chose to ignore cloud native and got completely overtaken by Envoy. Legacy software now, and Unit has been worked on for almost 6 years and nobody uses it or knows about it.
Well, it did create quite the bang: https://twitter.com/DAJOOCE_/status/1482445576864079873 (best on headphones or good speakers, turn up the volume for an immersive experience.)

So yes, it was real violent.
Website still managed by a just graduated 21 year old?
> buf[len] = ‘\0’;

So why didn't you use one of the bazillion library functions or third party libraries that terminate strings for you?

I feel like most of the criticism is coming from people who punish themselves by rejecting library functions and then telling that strings are hard. Doh.
Even though the damage types are not analogous people still want a crude metaphor for how "big" the blast was. Since people are going to compare it to a nuke regardless you might as well have some rough criteria for how a comparison could happen.
Why do you think Brexit was what it was?

UK wants to dominate and enslave its population for the political gain of the ruling class.

It is clear as day to me.
Can AI Really Improve Your Writing? (30 grammar checkers/40 mistakes benchmark)
> And the vast majority of democratic countries are run by people who have a decent appreciation of the rule of law

Remarkable claims need remarkable evidence. Where is this democratic country that is run by people who appreciate rule of law?
Client-side databases are relatively popular in ClojureScript land. DataScript and Fulcro both come to mind immediately. DataScript is an immutable in-memory database that uses Datalog to describe queries and Fulcro is a full-stack framework that automatically normalises your database.
Which mode do you/would you use? Hybrid?

I haven't had to write any password storage code since before Argon2 won the 2015 competition so I haven't gone deep on the "side channel attack vs. memory hardness" tradeoff question when picking the mode. I am curious which mode others are using.
2.5GBASE-T and 5GBASE-T are designed to work across 100 meters of Cat 5e. Nothing crappy about it! :)
It has asked me lots of times, but just yesterday it didn't for a new account in none less than google.com. Its code to detect when to ask must be... weak, to say the least.

So I went on to add a new entry manually. Oh my, the UX to do so is quite bad. There is such low hanging fruit here for improvement, like copying the "UI on a new tab" style that LastPass does... meanwhile Bitwarden insists on doing everything on a stateless pop-up window [0]. LastPass UI might be worse for some (that's debatable), but the UX of opening it on a new tab is simply superior, just for the fact of it being stateful. I don't get why Bitwarden doesn't adopt it.

I'm happily paying for Bitwarden to support its development, but would never consider suggesting it to my grandpa or to serious business. The flow and experience is just far away from what is expected; a very good software, but with still too many rough edges.

[0]: https://community.bitwarden.com/t/persist-bitwarden-ui-and-m...
‘New Eyes’: Gamers Greet Microsoft’s Activision Deal with Guarded Optimism
> nothing was leaked in august, we followed the hackers request, secured our services, hired an extra sysadmin, ran extra audits.

Oh yes, what could ever go wrong with keeping already compromised passwords? Plus it was clearly a white hacker that helped them secure the website, the required fee was for this service.

/s
The browser was called Guide. OWL is the company name (or nickname, since the formal name was Office Workstations Ltd).
Now all that's missing is the explanation of what it's all for. :-)

[EDIT:] But that's just my personal wish, in the larger context. Sorry, forgot to note that you'd fully answered my original (G[G...?]P) query for something that doesn't stink of scam. [/EDIT]
>It's fairly inconvenient to have to use your phone as the remote, especially when you want to do something on your phone (or watch something else) while the kids watch netflix.

But when you cast from an application with integrated chromecast support (as e.g. Netflix) then the phone is free to use as you wish while the kids are watching. I do this all the time. I start the cast, then use my normal TV remote to pause, for volume control etc. You don't need the actual app for most things and you can use the phone/tablet for other things (I have to find translations for my wife, for example, while watching).
Modern Poker Theory as mentioned by the other reply is good. I'd also suggest Play Optimal Poker by Andrew Brokos. The former outlines a lot of strategy in the game and talks a little about game theory and its implications. The latter gives less direct poker advice but uses "toy games" that share some similarities with poker but are simplified to demonstrate some of the implications that game theory has on poker. It does contain some direct poker advice but it's more of a book to teach you how to think properly about how game theory applies to poker and how you can use that to study with something like a solver and actually understand what you're seeing. I would suggest you pick up both, I think that the Brokos book assumes you know certain poker terms and doesn't contain a glossary whereas modern poker theory is almost like a textbook and has a section where it defines all of the terms it uses. Modern poker theory will have more actionable advice but the Brokos book is excellent to teach you how to think about game theory and requires more self-reflection and has more questions to the reader.

Applications of no limit by Janda or mathematics of poker are recommended by a different reply here. I would caution that these are extremely academic and extremely dense texts that would be a very tough read for a newer player. Mathematics is less practical and more of a math book than a poker book and applications is Janda showing how to work out solver-like solutions before solvers existed and also contains a lot of math. I think the other two above are more practical and aren't going to lead you to put the book down a 10th of the way through.
Air pollution, the particles, are its own poison in the air; it's a slow killer in its own right, even if it's nothing like radiation.
I find it somewhat amusing, in that the attacks on someone like Wilson for his minor prejudices and ill-chosen wordings looks petty and out of proportion when considering all the worse offenders in the world, just as the attacks comparing this situation to the acts of authoritarian regimes is out of proportion.

There is a nice sort of proportionality to how everything is hysterically overdone and out of proportion!

That said everything is on a sliding scale here, and the worst enforcement of orthodoxy on the mildest offenders can certainly be compared to much lesser attacks if they stem from similar impulses.

If you cannot make a comparison of this sort then the world would be a place with unconnected events and patterns, and no real way of defining or discussing how situations move from a not bad condition to a very bad one, or in the other direction.

There would never be such a thing as warning signs or worrying trends, because those things would not be relatable to absolutely awful things they might lead to.

Conversely if you were living with awful things there would be no reason to discuss how they could improve, because the improved version of life would not be comparable. How can you make legitimate and necessary criticism of actual authoritarian countries if you cannot compare bad with less bad?
Another factor: data centres moved to fiber. And fiber is less physically robust and not great for desktop connections or plugging in to a laptop.

10GBASE-T exists, but it turns out pushing 10gbit/s over 100m of twisted pair requires chips that are hot and power hungry. Again, not great for desktops or laptops. And because it’s not used in data centres, there are no economies of scale or trickle down effects.

Gigabit Ethernet and wifi being “good enough” combined with 10gig over twisted pair being expensive and power hungry means that the consumer space has been stuck for a long time.
Right? I can see taking a conversation forward and saying no at a juncture where you see the purpose of it failing but to say no right in the beginning is just blunt and can come of rude depending upon the relationship person has with the other. The other person should walk away with some perspectives behind your (calculated) No not the bad feeling surrounding the blunt No. This doesn’t mean that you have to give him something you don’t or shouldn’t. But there is always pragmatism possible in most scenarios to keep the future conversations open and civil.
The link in "A redesign of our backend, Sanakirja, to make it significantly faster", to https://pijul.org/posts/2022-01-08-beta/2021-02-06-rethinkin... is broken (I get a "Not found")
That fixes the problem of a buffer content after allocation by the language/runtime/platform. When a buffer is reused at the library/application level, no zeroing is done.
> according to their CV, this is basically their job. That'd make Opensubtitles a for-profit piracy site, i guess.

Guess what: Non-profit != for-free && Non-profit != for-a-loss.

If in order for opensubtitles to fulfill its envisioned role needs full-time attention, it is legit to pay yourself or hire an employee, paid by the ad and or subscription money. That's what also happens on all registered non-profit organizations.
It's out there but it gets deliberately buried instead of promoted.

Back when I had access to a decently-sized database of scraped app data, a sure-fire way to find hidden gems was to search for apps that did not ask for internet access.

Of course Google does not let you filter for that in any way in the app store, because people making and sharing apps without aggressively monetising them does not make money for Google.
Major U.S. airlines warn 5G could ground some planes, wreak havoc
It depends how you use it, if you dont need to synchronise the database between machines (much) then KeePass is likely the easiest solution and works very well, beyond that Vaultwarden makes it easy to maintain a single centralised database accessed from multiple systems
Sorry, I don't have time to example all pros and cons but:
- UML is complicated and nobody really knows that and it's sad;
- Simple tool like Miro, Dia is the easiest way but you have to keep it updating manually;
- PlantUML was fine. We used it on a PHP project but it was once and many years ago;
- DOT language can be a mediator between code and visualization (graphviz) but nobody really develops it. I didn't find a library to parse it and language is full of problems like mixing visualization with representation, decomposition and etc. Huge potential but right now even XML is better.
> That’s why missing a vsync results in exactly 30fps on a 60hz monitor, and that isn’t a good user experience.

It depends on the game. What does Civ need 60 fps for? Not sure if they have a limiter because I'm not playing 6 due to some of their design decisions that tick me off.

On the other hand, I do keep my Minecraft limited to 30 fps.
If the link doesn't work, try https://medium.com/writers-blokke/can-ai-really-improve-your...
> The Security Services has to protect a country

Implied is the statement that the end justifies the means. But how do you weigh the proportionality of measures taken? Do you adopt a utilitarian point of view, looking at, say, deaths prevented? Is anything game, or should agencies be expected to uphold a code of conduct, bill of rights or exclude entire categories of information? How do you assess what is or isn't a threat to a country and thereby something it needs to be protected from? What is a country - the president, the party, the government, its citizenry, businesses?

Second, with the popularity of invoking "national security" as an authority argument, how can these agencies ever be accountable? Who watches the watchmen? Are we to trust agencies reporting on the number of e.g. terrorist incidents prevented, especially if the information sources are opaque and there's an obvious conflict of interest?

Third, given the existence of programs like MK Ultra and Cointelpro, is it really safe to say agencies won't try to overreach? With examples like the Stargate program ("Men Who Stare At Goats"), should we have faith they know what they're doing?
Maybe there were people out on boats and filming, only that they are gone now..
I can’t find exactly what they said, but a weapon that size is the easiest to deliver because you just bury it in your own backyard. It’s so destructive it doesn’t matter if it explodes on your enemy or you.
If you do self-host, please consider still buying premium from Bitwarden. It's only $10 per year. It's well worth the money and since you're still using the clients, which are still developed Bitwarden, it'll help towards keeping the product alive.
Yes, but they are...better built than your quick social network poll application thingy with customer's special sauce that you had 5 days to specify, develop and deploy.

C is a tremendous tool, but I don't think it's the best for customer facing web apps.
It's also recommended to read the NIIS statement regarding the research piece by Privacy International:

https://niis.mynewsdesk.com/news/statement-regarding-the-res...
Of course it's all relative. $4 is infinitely more than $0. On the other hand, $4 for keeping my most important secrets safe is cheap.