skysight-inc/HackerNews huggingface dataset:
That was my reaction.

A tenant can be set up to expose the “don’t ask me to sign in again on this device” option, and to let the MFA last for a certain amount of time. It would be worth reviewing your tenant config. MFA shouldn’t be as big a pain as people are making it out to be here. If it is, it’s either been set that way deliberately (security concern) or accidentally.

I don’t get recurring Authenticator requests on my phone. On desktop, I use a different browser profile for each tenant I have admin rights to and sign in with accounts specific to those tenants. MFA requests are very rare.

If you’re using a single account to hop between tenants (like a MS partner acct), in a single browser session, it’s very messy and requires you to pay very careful attention to which tenant you happen to be in. I don’t advise this approach.
My 2 cents: This is a lot of work just to see it in action. I have to click, fill out a form to save a scenario, then start entering data. I can understand why it was built that way-- it makes sense from an engineering perspective to do so-- but it creates a significant obstacle, especially when there is very little insight into the mechanics of the model without going through all of that work. In addition, the data entry UI is a bit confusing, even for someone familiar with finance.

Would suggest:
* describe what the "black box" does if one bothers to enter all their portfolio info
* make several predefined + pre-populated scenarios that a visitor can choose from list in <= 2 clicks. You could even just dupe allocations from common investment profiles such as one might see in a 401k option or when choosing from typical passive ETF/fund vehicles
* make the above step "dupe" into a new scenario that the user can then edit/tweak to their preference
Unless you don't live in the US.
I wonder if he wears his ship captains hat to bed.
Incident Management 101
Git Is a Blockchain
> They would gladly get it or they would perish.

... people don't work like that. :/
Either force through regulations or gotta make it in their interests to support a public API. Financially or else. I don't think they'll do just for the sake of it.
The process to make MS-OOXML an ISO standard was a dirty one https://en.wikipedia.org/wiki/Standardization_of_Office_Open... and 2008 wasn't that long ago
I like to think about it in terms of what the code for managing a shopping looks like.

Without Temporal, you store the state of the cart in the DB, load it when the app interacts with your backend, run some business logic and serialize state back into the DB.

With Temporal, first of all, there's no DB. The entire flow is modeled in a single piece of code.
Your Workflow can listen to user signals to update the cart, queries to get the cart state, schedule durable timers to remind a user that their cart is abandoned after days and months.
High density is not desirable to affluent families when the alternative could be a 3,000sqft single family home with a sizeable backyard in San Francisco, and these people tend to make the rules.
Education Department Forgives $415M of For-Profit College Debt
I do really hate how links between attachments and password entries get broken pretty easily, though. I think this is an area for improvement.
James Webb Space Telescope Science Execution Approved Programs
"Want to use the James Webb Space Telescope? Here's how scientists book time with the giant observatory"

https://www.space.com/james-webb-space-telescope-observing-t...
I think this is just an acceptable responsibility that comes with driving on roads. When you have the ability to cause massive amounts of damage, you have to accept that there is a lot of regulation and compliance to deal with to keep this damage under control.

You wouldn't think twice about requiring private pilots to be subject to all kinds of safety and management rules and I think it's fair the same applies to roads.

If you don't want to take on this responsibility, take a train or bicycle.
They're "characters." Because they're members of the alphabet.
Cryptocurrency is akin to ‘Ponzi scheme’
Fortunately no one is suggesting we go 100% wind.

Wind, solar, biomass, geothermal, hydro, storage. Plus some nuclear if it is already built. That is what folks are recommending. If new build nuclear can compete, then great. But right now it can't, and models show we can get there without it.
It'd be way more cool if Meta was doing an A/B test of different corporate cultures on employees.
> I really don't know why all distros provide gnome by default.

As far as I know, GNOME is still the only Linux desktop environment that includes a screen reader, and possibly some other categories of accessibility tools. That's important for distributors who are legally required to provide accessibility options, e.g. because they're selling to the US federal government.
I think guelo is specifically referring to the Advertising ID that allows for apps' cross tracking. In Android, this ID is on by default, while in iOS is off by default.

Regaring the permission managers, I agree that both are currently on par.
It'd fit with the ship theme.
How does the first guess "peel off" 14 bits of entropy?
Yes. But/and I see posts on HN about every two weeks that indicate that most programmer types (a group that includes me) do not recognize that. (Your analogy to language is apt, I think.)
pronounce as four syllables for maximal amusement.
Nit: Basic in the expanse is not actually basic income, it's more like basic services: https://twitter.com/jamessacorey/status/902940152007462912

(Tweet from the author)
You’re absolutely right. It surprised me the first time I wore a heart rate monitor for a near max effort deadlift. Maxed out my heart rate in a mere five reps.

On the other hand I’ve done high rep air squats and while I wasn’t wearing a monitor, it felt very much like the cardio zone.
Given how prevalent and regressive fines are I really don't understand why there isn't more noise about changing them. A $350 fine could be trivial for one person and life crushing for another. Something like mandatory community service would actually cause rich assholes some pain.

Of course there are probably plenty of ways to game community service so there would need to be strict requirments, or maybe there's a totally different system that would be more fair.
There’s tons of trackballs with wheels. Both CST Lasertrac and Kensington Expert Mouse have them.
What if I want to use GNOME's nice touch functionality and rich set of apps, but not the style? (Which in my subjective view is wayyy too gray).

Why do those things have to be tightly coupled all of a sudden? We've made it through decades without breaking theming, what changed?
PayPal and Venmo to Begin Charging a Flat Fee for Crypto Trades Under $200
And Grace Hopper worked for Aiken.
This is like seeing Obama do a charity event with Halliburton and Dick Cheney.

Disney is probably the company most directly aligned against the values that Mozilla purportedly holds. They spent decades funding projects to kill the modern web.

Has Disney indicated that they have stopped being the bad guys? As far as I can tell, Disney is still pushing their dystopian nightmare world. The least that Mozilla can do is not normalize them.
Have you checked on the prices for prefab homes? Even in the Midwest 40k won’t even get you the cheapest ones unless you go with something like a used mobile home.
Thank you for taking the time to describe how it works in the readme. I loathe "magic" - and love seeing the mechanics of how stuff like this works. Makes your project useful to me, even if right now, I rarely have computer (with a cli) close to my TV.
A lot of times you can deny access to many of those things and the app will still function just fine. Most of the apps on my phone I am not giving half the stuff they ask for.
Or GAMMA for Google, Apple, Microsoft, Meta, Amazon
I think it was "ushers of a totalitarian corporate surveillance state."
> So, you see no difference between invading and defending

I obviously see difference, but a war crime is a war crime.

> Where you live?

A world in which neither the Ukraine nor Russia are stupid enough to risk nuclear escalation and obliteration.

Where do you?
You can read environment variables via os in the cpython standard library: os.environ["VARIABLE_NAME"]
Positionstack (by APILayer) Geocoding-API down for over 14 days, with no ETA
Are you sure? I thought the US repeatedly called for unconditional surrender of the military, not total surrender?
Dylan is an incredible mind - he’s behind KISS Linux and neofetch. KISS is worth looking into as an alternative to Linux From Scratch - I learned a lot with it.
In the late 70s and early 80s I did a lot of programming on Texas Instruments DS/990 computer systems.

The manuals for those systems were quite interesting.

If you had a question, you could read the manual and swear that the manual did not answer the question.

Once you figured out the answer by some other means, if you went back to the manual and read it carefully you would discover that it actually did answer the question precisely.

I don’t think it was just me. Several of the people that I worked with on that project reported the same thing.

I really enjoyed working on the 16 bit mini computers from Texas Instruments. They were a lot of fun.
"??? My first guess has two green letters, or 8 bits of the hash are known. This excludes 255/256 of possible passwords"

Sha256 is a one-way hash. Knowing some of the sha256 doesn't tell you anything about the plaintext.

Put another way, the matching SHA characters are just a decoy. That's the joke. They could give you the SHA256 hash up front and you'd still have to search the entire password space.
Might be more effective and cheaper to just help homeless people, rather than criminalize them like this.
Depends. Come live out west on some acreage, own a tractor, build stuff, etc. Pretty easy to end up in the place where it makes sense. All my neighbors have large trucks and a "legitimate" reason for them, as long as you consider living the life you want to live on the size of property you want to have, legitimate.
Imagine you are walking down the street talking to someone either on your phone or in person. Facial and voice recognition are very advanced these days.
personally I just think of them as the Song of the Suburbs.

But yes, 2-stroke lawn-care engines are egregious offenders in the climate and air quality battles. At least make it all electric like CA's been doing.
Nitpick: Zoom isn't Electron-based on any platform AFAIK. On Linux it uses Qt. On Windows it uses its own fork of DuiLib [1]. I don't know about Mac.

[1]: https://github.com/duilib/duilib (apparently only documented in Chinese)
Right now, if what Troy is saying is true, then self-signed certificates are basically every bit as good as a LE cert - because no one actually verifies the chain of authority. But oh no, self-signing is a bad practice, and effectively useless because browsers will throw up warnings. So you go to LetsEncrypt and get a certificate that has a pretty green padlock.. because their `certbot` made it with 0 review of who you are or what the site does? How is this different at all?

I'm not an expert, but at high level it seems to me that the only way to get trust is to tie every digital property to a real person, do some sort of KYC on them and allow for dispute resolution. The usual bureaucratic pains of doing anything in the real world would extend to the digital world, and the usual arguments about increase in regulation entrenching existing power structures and slowing innovation apply.
Very cool. I imagine one could still do this on a ham band. I think PSK31 is still in use, as are many other data transmission protocols.
The ZX Spectrum manual reminds me of the time in the UK when you had to purchase a plug in addition to your electrical appliance. It was also the consumer’s responsibility to ensure the plug has the right fuse. (The plug you just bought probably had a 13 amp fuse fitted.)
You also never hear anyone complain about the thousands of hosting providers that build their business around the LAMP stack. I wonder if it is because Amazon is so big, or just the lack of competition.
Oh no! What have you done! I can not unsee this now.
Motorcycles are loud outside the car, nobody argues that. Most cars have heavy sound insulation though. E.g. I can hear emergency sirens but just because of the different spectrum, if it had been engine sound at the same level I'd likely would not notice most of the time.
I'd be interested to see what difference, if any, there is in people who learned addition and subtraction in fundamentally different ways. Number line vs counting grids, pattern based, mental imagery, etc.
I'm seeing active misinformation/free floating hostility in this post. There are ways to express discontent that don't sound like Mozilla murdered your puppy, but that is somehow the tone of some of these posts.
Congrats on the launch! I'm the CEO and co-founder of https://teller.io that uses private mobile banking APIs to provide access to bank accounts too, and you're right it's the way to go. We don't think regulation or OAuth based APIs will ever yield an improvement on this approach (explained why here - https://blog.teller.io/2021/06/21/our-mission.html)

You're going to quickly find out that these API endpoints are commonly very well protected as build out your coverage however!
title was fixed by dang! fortunately he knows HN better than we do...
You're right.. Go long on $FB
Name one.

Google won’t: https://opensource.google/documentation/reference/using/agpl...

Unless things have changed recently I know Amazon won’t, and I’m fairly sure Facebook still won’t.

For most corporations it’s simply not worth the risk
They come to that conclusion after the end of the war, by asking Japan officials. We all are smart after a battle. Can you do this trick NOW?
8 bit computers were basically glorified calculators that could double as video game systems and perhaps BBS terminals. Even data storage was very much an afterthought on those machines until well after floppy disks entered common use. Then again, as late as the 1960s a programmable desk calculator could be quite valuable for plenty of serious uses.
There are fart cars everywhere all over NYC now. Definitely annoying millions.
Pretty dang good for an 8500lb vehicle with a 14,500lbs towing capacity! Again, better than owning two special purpose vehicles.
And where’s the privacy in that? I’m walking down a public street in the largest city in America talking out loud. There’s nothing private about that situation.
No kidding. Brick foundation, exterior plumbing, knob and tube wiring with 1 electrical outlet and 1 ceiling light bulb per room, zero insulation, single pane glass windows, dirt driveway... all features of my "charming, historically accurate" previous residence.
I know it seems like a strange rule at first glance, but I think (or hope!) it will seem less strange if you get the point being made here: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que.... Basically, there's a big gap between the type of account that uses HN primarily for political battle and the type of account that uses HN for intellectual curiosity. That's just an empirical observation. The rule is a reasonably fair way to take advantage of that observation for HN's good, since one of those poles is very much what the site is for and the other very much not.

When I say your account is a borderline case, another way of putting it is that you're kind of falling in that gap. Not many accounts do that but some do. And yeah, in that context, everything you're saying here makes sense.
Lol.. that's new grad pay right now
I have very limited experience with Linux but every time I try to install something, I find that I lack some dependency and then wind up trying to build from source. What could fix these types of issues? Why does most software just install effortlessly on Mac OS? Is there something that Apple does that could be mimicked in Linux? I may be naive, but seems like a legit question.
Thanks, I couldn't remember where I had seen the opposite of what they were claiming :)
> I worry about commercializing too soon because companies need to turn a profit

Is this really the case though when Tech Startups routinely go public without ever turning a profit and with no clear vision on how they eventually will?
I did feel like you and did the same as you, however I noticed I am just fighting a different fight in macOS than Linux it is not all that better you still have to fight the system to make it work for you

- Convoluted first setup , you need x-code command line tools for even say git.

- Docker doesn’t work completely for all builds and still needs a Linux vm to run

- your servers are not usually arm64 not everything works as it would locally

- node < 12 projects need Rosetta hacks which are just as annoying to get to work. Similarly support for older versions runtimes /apps /libraries limited

- Applications like Dropbox have(or had) limited or no support and only slowly adding them

- I have to still setup basic coreutils and dozen other gnu basics which either are not there or very old versions from 80s

- Procfs and other standard Linux goodies you are used to are not there .

- you have to keep in mind BSD isms and context switch. Flag order matters in BSD /Mac world rm /dir -rf won’t work but will in Linux.

- Homebrew is not too bad as package manager but compared to Linux world (apt , Pacman, yum or emerge ) it is pretty limited in features and options
Douglas Hofstadter also contributed to Metafont, which is the 80s version of the MeTaVeRsE.
I mean from inside a car. The sound is very noticeable, stopped or within 2-3 car lengths while driving.
Who says they are my best practices? They are established industry best practices.

So again I'll ask: what case does 1PW make to deviate from those?
I appreciate the work the Go team put into pkg.go.dev, and I like the new features they've put in (e.g. flagging deprecated things, the search is great) and hope those get into godocs.io as well. But I really just don't care for how its designed compared to the old godoc.org. (and go.dev compared to the old golang.org) It just doesn't gel with me. I wish I had the design vocabulary to explain why. It just feels big, and loud, and cramped. And I really don't care for the animations and drop shadows. The old docs site and old home page just felt quieter, less commercial, yet still fresh and modern and professional. My ideal Go docs site would have the appearance of the old golang.org/pkg pages, with a fixed width.

I don't even agree with a lot of the criticism thrown at pkg.go.dev. In older threads Russ Cox gave perfectly acceptable reasons to not accept every license. (legal stuff, better safe than sorry) There's the fact that the source wasn't available for like a month at first, but that changed once it was brought up, and I don't think the Go team was trying hide anything or something. It's mostly just the design that gets me.

That, and, I'm little puzzled as to how they rolled out pkg.go.dev, and go.dev, and replaced golang.org with go.dev. Like, at first they rolled out pkg.go.dev, saying "godoc.org is really old, so we're replacing it". Sure. But pkg.go.dev obviously came with go.dev, which they just called a "discovery site" (or something to that effect, I don't remember). ...okay? Then they stripped off golang.org/pkg (the old standard library documentation) and the reason they gave was to reduce the number of doc servers they had to run. And finally, they just scrapped golang.org and replaced it with go.dev.

What's really odd to me is that, in retrospect, it seems like they had a long term plan to replace golang.org altogether, at least since they rolled out pkg.go.dev, but just... didn't mention it? It seems highly unlikely that they just rolled out a new package doc site, along with a free bonus "discovery site" -- they never billed it as a new home page until it became the actual home page -- and then noticed the discovery site could conveniently be the new home page.

Furthermore, on Twitter, someone criticized the way go.dev has corporate logos, and one of the Go project managers (or some such role, I don't know) replied that it was for funding the project. (I'll dig up that thread if someone REALLY wants me to) So, I'm really convinced that it was always the plan to replace golang.org, but its just bizarre to me that it wasn't communicated like that since the start. It sort of came off as a series of happy accidents. Why not just announce the plan to replace golang.org at the start? Why wait to announce your intentions until you actually do it? I'm not trying to be accusatory and suspicious, I don't think anyone should be, but it's something that I just can't get off of my mind.

...ok, all that said, I'm really grateful for the work and progress done with godocs.io. Keep it up! :)
Once you've understood the basics, get the Gradus Ad Parnassum by Johann Joseph Fux. A word to the wise is sufficient.
Having been too young to experience that period firsthand, those listings are a godsend when trying to work out what exactly the firmware does. The IBM PC manual doesn't even include an API table, it instead has it in the listing comments.
met-ah-mate-ees?
In the old days, manuals had to describe EVERYTHING, because you couldn’t Google/YouTube for your questions. Thus the 500-page beasts. Quite a contrast to today, where an iPhone comes with just a teensy pamphlet that if you’re lucky has an arrow to indicate the power button, and some 4-point type telling you not to stick it in boiling water.
There are plenty of reasons for choosing an OSS license - people can easily audit the code, people can self host for their own purposes, etc.

There is plenty of code that is only open-sourced after it has been fully created by a single organization/entity - no free contributions needed!

If we're talking about expectations not encoded in the license it's very clear that developers would just like to be able to release software with all those OSS benefits, but also to have a way to be compensated when AWS takes it, charges people to have it run it on an AWS server, and makes a ton of money.

I'm not denying AWS is adding value, but it sure is odd that they're the only ones making a dime there.
> a very large number of offline guesses

Right, the entire search space of random passwords.

The matching hash characters are tongue-in-cheek. They don't help you. They could've just given you the entire hash up front and you would still have to search the entire random password space. Sure, you could do it "offline", but it would still take forever to compute
I'd wager you have fart cars out there like we do in NYC now, right?
Just use one of the many generators

manual: https://regexr.com/

AI:
https://regex-generator.olafneumann.org/
People have been 'driving on roads' for over 100 years. Why do you think more and more regulation and oversight is now necessary, coupled with endless penalties? Surely train operators and cyclists (the latter often don't seem to think the rules of the road apply to them, endangering others) have similar concerns