skysight-inc/HackerNews huggingface dataset:
With Google it's fairly clear there is no expectation of privacy - Google doesn't particularly boast about it, and the fact that there's a ToS and "privacy" policy link below the download button on the Chrome website's page reinforces that.

If you ignore the privacy aspect, Chrome is actually a very good browser and has a healthy ecosystem of extensions. A lot of productivity-enhancing tools are distributed as Chrome extensions.

Firefox on the other hand constantly boasts about privacy which just gives a false sense of security - actually obtaining privacy with Firefox requires not only opting out of Mozilla's own bullshit such as Pocket, sponsored tabs/links and telemetry (the latter should be opt-in as per the GDPR) but also install a third-party ad blocker such as uBlock Origin.

Browser-wise, Firefox isn't stellar - it's slower than Chrome, lacks certain features and the extensions ecosystem is boring with a lot of the extensions that used to make it great have been killed off with the switch to Web Extensions.

At least with Google the business model is very clear, while Mozilla pretends to be on your side and fight for a better web experience while in reality being as nasty (if not more) than the competition.
An Absurdle exists[1], but instead of giving no hints it is adversarial, e.g. changing the secret word to dodge your guesses.

[1] https://qntm.org/files/absurdle/absurdle.html
Chewing sugar-free gum reduced preterm births in a large study
> The overwhelming majority of people are not psy-ops operators or 4chan trolls.

People yes. People that will interact with a given issue on social media? Now that's a totally different thing!

> The solution to bad speech is good speech.

100% agreed.

But note how very different that statement is than the more common "the solution to bad speech is MORE speech".

If good speech is drowned out by the megaphone of bad speech it is as if it doesn't exist. This is what we need to protect against.
In fact, the NRC uses a cost/life of $9M when evaluating if new nuclear safety equipment is needed. ALARA includes "R" for "reasonably".
Actually we are using json patch/json pointer extensively to limit data sent through network or update live data on a client(its embedded world). If user is changing single parameter on a client we sent just json patch as defined in RFC(including arrays modifications). Libraries are mature and simple to use(on client, on server we are using C++ so I suppose its a in house solution), thats why it's hard for me to understand why we need another solution for the same problem. Having said that I haven't used them in Kafka world.
I use the yubikeys - they seem pretty good and never had a problem unless computer was hard to plug into.

I also use google authenticator which is TOTP. Never had a problem there either.

I will say that I like the google login flow. MFA is only needed ONCE every 30 days per device. That's the right tradeoff. A business bank I deal with is MFA on every login (with an org login then an employee login) AND MFA on various transactions. That really is instant MFA fatigue! I'm certain no one is even matching up things anymore (it'll do the MFA to approve "1 transaction" with no details on trx). They do have a phone call method, but same issue, press X to approve "2 transactions".
This would be kind of fun to write a solver for. You'd burn the first few guesses to get some positional constraints, then filter a rainbow table down to viable guesses. I'm not sure you'd be able to get a very good success rate in just 10 possible guesses though.
> But that's very different from claiming that western music is derived from the universal mathematical properties of the harmonic series,

Western (classical) music is marked (one might even say "distinguished") by its attention to harmonicity, which in turns is rooted in ideas about consonance and dissonace. These ideas are absolutely rooted in the mathematical properties of the harmonic series. As noted elsewhere in the comments, the work of Plomp & Levelt and then Sethares has shown how human perception of consonance (with dissonance being its reciprocal) is rooted in the averaged amplitude-weighted sum of the pair-wise disonnances between all the partials.
It’s pretty much all their fault. The same way the internet is overflowing with ad-riddled blogspam due to Google, the appstores are filled with scammy/exploitative clones because that’s what makes the most money when there’s no competitive forces to drive quality control of any kind.

For example, if the Epic game store became known as a source for good mobile games, customers will stop browsing the App/Play store for games and will instead go to the curated and high quality alternative, because why the hell wouldn’t they.

If Apple and Google are forced to stop suppressing competition on iOS/Android, it may lead to an entirely new mobile gaming industry that’s actually somewhat respectable.
It seems like there are a lot of ways to do things which seems overwhelming to a new user.
Everyone has different opinions on how to approach things in the books, videos, and tutorials I've gone through.
For example some people like to code custom components heavily in c# including animation transitions, but others highly recommend not doing that.

Also many tutorials and examples are too toyish and are missing practical concerns like cross controller compatibility, and other real world concerns. I've got some very simple 3d games working, but I'm missing how to take them further feature wise and make them closer to "real games".

I'd really like a resource that's very opinionated and pragmatic for independent game development.
> I gave up on the Microsoft authenticator and just switched to manually enter tokens from an TOTP app.

My office considered Microsoft authenticator, but there was push back after looking at their privacy policy and how much access the app wanted on people's personal devices (location, storage, contacts, etc). The nice thing about a little TOTP hardware token is that you avoid the push notification problem and it doesn't collect massive amounts of your data to use against you or sell to 3rd parties.
Not too bad testing these things with mocking libraries.
SEO Checklist – 300 Pre-added detailed SEO tasks
“The Four Most-Used Passwords Are Love, Sex, Secret, and God”
No? You'd use the same USB key on the second computer, and the third, and...
I just looked this up. It's $995/year, or approximately 4% of the fully loaded cost of an FTE software engineer at most companies. i.e. about 3 weeks of a developer's time.
What I was referring to is that such a situation is highly unlikely. Even if we do not take current labour shortage and the historic lack of IT people into account I am certain that there would be more than enough employers or business partners who do not care about whether or not someone is willing to shake their hand.

But yes, in general if a society places enough value on a social norm to decide whether or not to do business with a certain person it is possible that certain people will be alienated based on their willingness to participate in such a social norm.

And, to address your edit: I am fully aware that we are currently in a pandemic and I am not saying that we should go around and start getting overly close to one another for no reason.

As the original content all the way up this chain I was mostly referring to a time post COVID, assuming that such an outset is realistic. If not then hand shaking will be the least pressing problem regardless.
The fun cartoon guide isn't quite right...it's indeed usually entrapment for police to offer you a big sum of money to deliver an illegal parcel.
Once you fix the indentation, this code is always syntatically correct; it just happens to raise an exception on Thursdays.
It's fair to note that this is contentious - I would just point that the most recent scholarship has focused on (not surprisingly) Stalin's point of view with the Ukraine (and he absolutely did view it as a systematic way to weaken the Kulak's and the Ukraine), and Historians seem to now be generally viewing it as a genocide. That's not universal, but certainly the way that the scholarship (at the moment) is trending.
That's why the topic is a political football. The scope of that volition is a constraint on the scope of effective governance, particularly as fueled by blame.
This. is. awesome. Thanks for sharing! I manage a lot of designs and guidelines for Open Source projects and the amount of time I spend translating color information into different values to make sure everything is "on brand" is ridiculous. This is going to save me ton of time
Bitcoin mining ftw
"Secure password practices" are at best aspirational and in most cases almost worthless.

If you value security give employees unphishable FIDO tokens, require them everywhere you can (e.g. Microsoft Office 365), and make requiring them a necessary part of tenders for new IT. If you want two factors require the tokens to do that for you instead of messing about with layers of extra stuff.

I can more or less rationalise outfits which don't really care about their users anyway, like Twitter, having rubbish security but I don't understand any employer including my own that still thinks passwords are a good idea in the twenty first century. Yubico will sell you tokens your employees can use to entirely defeat a bunch of the "Top problems" that are probably on the whiteboard of your "Head of cyber security" or whatever, for less than you probably spent on their Christmas meal last time there wasn't a pandemic.

Crazy.
(I'm the author)
As part of lifting you convert the x86 instructions into an IR so you can do optimization passes. This is how I was using Cranelift as a codegen backend; there is essentially an abstract interpreter over x86 that feeds into their function builder API. Cranelift then has optimizations for constant folding and things, along with redoing register allocation from the virtual registers that their IR uses internally before lowering to x86 again.

This is how qemu and DynamoRIO and things work too, where they have an IR which allows them to more abstract transform the code than having to keep it normalize to x86 or some other assembly the entire time.

As part of switching to my own IR I'm going to have to write my own optimization passes for it as well instead of being able to piggyback off Cranelift.
I'm sorry if any of our previous interactions were less than professional. I often answer support queries from my phone when out and about, so tossing off a curt, one sentence reply will happen.

I generally get multiple app issues per day so I can't afford to reproduce every one: just yesterday I asked a customer to provide a reproduction, they worked on it and found the issue was in another gem their app used. At my scale with ~2000 customers, this happens almost every day.
The problem here is MS's terrible MFA & "SSO" implementations. If I didn't need to MFA multiple times per day into Azure¹ (i.e., if I could sign in truly once per, say, 24 hours), and if MFA was just a literal MFA², the fatigue would not be so incredibly high to begin with. Solutions like a Yubikey Nano are going to seem like future tech to anyone that has to put up with MS Authenticator.

All of the articles suggestions just seem to make more work for the alright overburdened user. Fixing the fatigue at its root is what is needed. (But the article is oddly targeting administrators, for whom such a fix is impossible, not … MS themselves.)

¹different Azure tenants, despite being tied sort of to the same user, require separate MFA/auth sequences. In a separate AAD tenant, my user is technically separate, but also technically not; best I understand it is that it is sort of like a shadow user ("guest", in AAD) to my real user. AAD knows they're connected … but not well enough to matter for MFA.

²MS Auth requires a double PIN entry on the phone in order to respond to an MFA. It used to be you could just tap the notification, but at some point, that got axed, and the fatigue went up like 3x. MFA is supposed to be proof of possession (I have the phone), not proof of knowledge (password, pin). An non-pin-protected notification is fine; the password still covers the "what you know".
Given that speed/timing is important, and the rules are designed to impede your progress, how about calling it Hurdle?
Inherently with a (proper) hashing algorithm, the value and placement of characters in the hash means next-to-nothing in terms of the actual original text. For example:

password = 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8

passwurd = 1966e583daff0fce5630d5de44f303f0e77f77940f02c7d648defadc31059c7b

Notice they're very different results, even though the original text only has 1 character difference.
My problem is that I quite early learned most basic music theory. But I’ve never really figured out how to use it. I read sheet music and I can play several instruments (not particularly well any of them). It feels like I learned a list of keywords and syntax rules, but never figured out how to program.
Enterprises have very fine-grained ways to manage the 2fa flow. My AAD-based account requires I type in the full number on the Authenticator app; not choose from 3 numbers.

https://docs.microsoft.com/en-us/azure/active-directory/auth...

https://docs.microsoft.com/en-us/azure/active-directory/auth...
The context matters - when it comes to technology, the web and the Internet, Disney is pretty hostile as a media company that has an interest in restricting user's freedom when consuming media - going totally opposite of what Mozilla stands for (or rather, pretends to).

Nestle or oil companies have their own problems but at least those are completely unrelated to Mozilla's purported mission.
Yeah that’s pretty wild. This resource pops up here a bit and it’s cool but there’s always a point where I’m like why would I do this in Bash and not Python/Ruby or something else.
For a while they had work and personal accounts using the same email but different passwords!

There were some really weird loop login situations you just could not break - perhaps in part due to account type confusion or an existing login or legacy account stuff on old accounts.

I was an early Microsoft Passport user, not sure if that's hung around as well.

In fairness the google home user vs apps user distinction is also annoying (can't share google home control with various google account types etc).
It might also be that it was just a bad timing. A large number of submissions do not get to the main page just due to a bad luck. Later, some of them are resubmitted and get the deserved attention. See also: https://news.ycombinator.com/pool.
The Assassin's Teapot [video]
If only. If there was a good mainstream push for them we'd actually end up seeing decent support. Not just on the service side but also on the local hardware side. NFC would be the way to go since you don't have to worry about 3 different ports (USB-A, USB-C, and Lightning). Laptops could have a receiver near the keyboard and desktops could either have a standalone receiver sitting on the desk or one embedded in or mounted to the monitor.
Anti-Protest Law Sweeps Across Canada Financial Sector
I don't imagine I'll ever make as much as I made within big tech, but I use the 2.5% rule (instead of the 4% rule), and I moved back to the Midwest where things are much cheaper.
Didn't Japan have pretty substantial territory gains by 1935?
More specifically, the United States didn't go to war at all against Germany until Hitler declared war on the United States.

But it's worth noting that he did so, because Roosevelt, in his eyes, was the chief Agent of the jews.

So in other way, the United States did go to war because of murdered jews. But that is because he saw the United States as agents of the Jews.
>The Japanese media and text books are notoriously light on truth. You should not take them at face value.

and american media and text books are not? i think people are just uncomfortable with the possibility that the bombings may not have been justified
> Solar and wind are cheap

They're cheap on sunny windy days. On a cold frosty night solar and wind are very expensive.
> Corporate press releases don't make the best HN submissions

They do if they come from Apple though and it's quite funny especially with this news.
Other anecdata: I had Pfizer, my girlfriend had Moderna, we both had Covid back in March 2020. Neither of us got Omnicron despite exposure. A friend who had Covid early on and had J&J did get Omnicron.
This page is only for submissions without links (AFAIK even if they do not have "Ask HN").
IDK, humans can achieve all kinds of goals not only in temperate climates but also underwater, in the Antarctic and even in outer space; and in the environments where extremophiles operate we can do all kinds of interesting things that they can't.

It's not about the capabilities of unassisted body - I can influence stuff in a volcano without sticking my bare hands in it.
Syncthing does work on iOS devices via Möbius Sync. It's not perfect but does the job.
https://apps.apple.com/us/app/möbius-sync/id1539203216
> Also many tutorials and examples are too toyish and are missing practical concerns like cross controller compatibility, and other real world concerns.

Don't worry about "real world concerns" until you have stuff that works at all. You're not building a winning product on your first try.

> I'd really like a resource that's very opinionated and pragmatic for independent game development.

Sounds like you're finding a lot of very opinionated resources. :)

However, there is no one "pragmatic" resource in game development. The pragmatic solutions are scattered about. Not to mention that, as you are already aware, there are lots of ways to do things. You just have to pick one and run with it.
Risk scoring has been problematic after AI/expert risk scoring systems produced politically unpalatable results.

It is difficult to see a productive way out of this dilemma since "correcting" the input data is a priori impossible to do in an objective way, and skewing the algorithms will almost certainly produce unintended effects (e.g. a violent criminal being underscored, released, then they victimize innocents again).
Ask HN: How can I get involved in newer tech stack and projects at my job
I work for a large enterprise software company on some legacy tools and databases.Company has projects where they are introducing newer tech stack and cloud platforms. For this most of the hiring has been external-those who have worked on those technologies or people who can sell themselves well and are buddies with management.

Despite learning Spark,dbt on my own and getting certifications in Azure, my management does not staff me in those migration and newer projects since I am doing a good job maintaining the legacy stack. I want to grow but even getting another job will need me to show that I have worked on a newer tech stack. What should I do?
Sort off, if you already have a lookup table of possible solutions.
That looks like a syntactically correct piece of code that fails at runtime.
Congrats on the launch and happy to see you integrated with us (Alpaca Markets - YC W19 - https://alpaca.markets) for both live trading and simulated 'paper' trading!
I'm not advocating for "use excess energy to mine bitcoin", but you don't need to convert it back into energy--the theoretical nuclear plant is calibrated so its power output is equal to the max power demand and any excess due to lower-than-max demand is channeled to bitcoin mining.
New: VM threat detection on Google Cloud
Diversifying their revenue with equally-hostile sources is not really solving the problem, not to mention that if Mozilla needs money, maybe better management of their existing money would be a good start.
Here's a version with client side filtering.

https://jsfiddle.net/hoyxL3u0/
So password123456 then?
So I could be off base, but I recall them being pretty defensive of the metric, and there seemed to be clear evidence that they were getting bad scores. I honestly can't remember, but that seemed to be what they were saying at times. No asians just score lower in "personality". It seems that others in the thread mention they're claiming they score white kids the same, which is at least a better stance.

I can understand the author saying they're gaslighting asian americans, because it definitely seemed that way to me. I'm really not sure what these people are talking about sometimes, because they seem to do a lot of tiptoeing around the issue, "debunking" claims that are either irrelevant or just easy to dispute, but not central to the issue. When they're not doing that they're questioning the intentions of the other side.

I think there's actually good reason to question people's intentions, but it can be counter-productive too. Anyway, your right that I don't really have much to back this up, I just read these stories and Harvard always looks terrible; I put the article down thinking "good lord, what's wrong with these people"
Good points.

I knew a Flash dev who failed miserably after Flash went down the drain.

I also knew a bunch who switched to other tech no problem.

I know a bunch of smart people who never finish anything, but I also know many that do.
Neat. I like it.

I do have one suggestion: you have it ignoring "SC2154: 'var' is referenced but not assigned" by default, which makes sense on the command line because you're often not assigning and then referencing the same variable in a single command. But, I think it would be useful to have a similar warning like "SCREPL01: 'var' is not defined in the local environment," or something, which you might implement in shellcheck-repl itself. That rule could simply check to see if 'var' exists in the current shell's environment or if it's defined in the user's current command.

I think bash is simple enough that you might not have to a full-blown parse on the input to pick out instances of variable use (just look for 'export var', 'unset var', 'var=', and the like). You'd also want to take into account special variables like $RANDOM and $HOSTNAME, but that's pretty trivial.
> Because they know that their users value their personal Minecraft skins more than billions of dollars worth of their employer’s stuff.

Or because the XBox team isn't beholden to corporate clients, so they're much more free to make changes which affect user workflows.
Do US courts not have the ability to refuse bail to people like this? You'd have the same problem if he had enough cash to afford bail. It seems like a complete failure of the system for him to even have the option of not being held on remand until trial.
https://en.wikipedia.org/wiki/Date_format_by_country
Great chart. Here is the source copied from the higher resolution version found on reddit, for those curious:

U.S. Energy Research and Development Administration, 1976. "Fusion power by magnetic confinement: Program plan"
ERDA report ERDA-76/110. Also published as S.O. Dean (1998), J. Fus. Energy 17(4), 263-287, doi:10.1023/A:1021815909065

The graph was taken from PPPL FIRE's 1976 report, freely available here:

https://fire.pppl.gov/us_fusion_plan_1976.pdf

Obviously the 1976 chart did not have inflation data from 1976 to 1998, so you can see why we are below Logic I even though the budget is close to 500 M.

The entire PPPL FIRE site is a treat for anyone with some time on their hands.

http://firefusionpower.org/