skysight-inc/HackerNews huggingface dataset:
What if these people were outting gay people? How about sex workers? Would that be acceptable behavior? I think not. Illegally obtaining the information, followed by disclosing it to the public isn't cool. How about if they were blackmailing them to keep their individual names from disclosure? Where is the line? What if the people outted found the hackers or people publishing their information and performed "frontier justice " upon them? See where this goes? This isn't the hallmark of a civilized society.
Qt Allstack II – Adding Firebase
> That isn't at all what the article is talking about.

Just an anecdote, incidentally related to the article.
From my own experience with Electron apps and 1Password beta a few months ago, putting resource usage aside (even if we should not): OS-native spell checking is missing. Lack of OS standard shortcuts. Everything is a single window. UX performance: lots of things has just a little bit longer.
I want people to be precise about what they want so that there is actually something concrete one can discuss without hand-waving all the time. Fixed money supply, for example, does not require any crypto currency, just pass the necessary laws to fix the amount of money at the current level. And we can now think about the consequences of this, for example that it will encourage not spending money.

There are many others.

Which?
Have you tried actually using that in practice? It's extremely clumsy and inconvenient, requiring a whole lot more pointing and clicking and waiting and typing to attach the file, look at its contents, copy its value, or even edit it, than a simple multi-line text field would require.

And in the common case that the text is only on my clipboard, for example if I copied it from a web page or shell, then I have to go to all the effort of first saving it locally into a file somewhere in the file system, before laboriously navigating to it again with 1Password (often having to wait for my USB hard drives to spin up again as my Mac is frozen for 50 seconds showing the file dialog that scans all the attached storage devices) and finally adding it as a file attachment.

And then after all that extra busy work, the plaintext secret file now is floating around unencrypted in my file system somewhere, which is exactly what I didn't need.
Is There a Cure for OCD?
I have been suffering from contamination OCD for last 7 years. After it became very severe I got admitted to a rehab. I have been taking medication and ERP therapy for last more than a year. Although my compulsions have come down a lot after undergoing intense ERP, the underlying fear never really got treated and I still don't quite enjoy life as a normal person. I have hesitation in doing simplest of things and often indulge in avoidance behaviours. I would be grateful if some of you can share some advice or experiences.
People were pretty supportive of each other for a long time. The community was a somewhat tighter-knit group of people just enjoying seeing what could be done with Javascript. Nowadays everything is so enterprise and formalized (see Typescript), and if you don't do X thing exactly in Y way, you're unemployable and non-"standard" (even though the "standard" changes every 6 months).

On jQuery, it hasn't really been re-invented by much these days, except for a lot of it being moved into the browser APIs directly (e.g. querySelectorAll()) which I would argue is not "re-inventing" things. Just replaced.

Anyway, maintaining Javascript projects is a chore now. People are rude, demanding, spammy, whiney, persistent, etc. It didn't use to be like this, and you don't see the same thing in other language spheres quite like you do with Javascript.
> I'm not sure if this effects other frontend frameworks as much

Depends. Angular is the same old solid brick you can toss towards your enemies since 2017 or so. Vue has had at least one major breaking release, but there's a migration path, so it's not impossible to transition(although I know of one instance where the team opted for not doing that because of uncertain estimates).

But none of them have this goldfish-memory-like attraction to the new and shiny.
Then we agree, and that was my point, Allied bombings of mostly civilians is a crime.
There are plenty of countries which successfully cracked down on drugs.
It's just an internet exposed network, people target those all the time anywhere.

Just because it is critical infrastructure doesn't mean its a geopolitical thing.
Sadly, I won't be responding to this survey anymore due to its data breach [0]. I appreciate the transparency of the disclosure, but you only get one chance with my data.

[0] https://dev.to/sachagreif/disclosing-a-state-of-javascriptst...
There are hundreds of accounts of people who have had substantial recovery (thought probably not full) from ME/CFS. The problem is that what works for one person doesn't work at all for 99% of other sufferers. Some people say injections of B12 fixed them up; others move to the desert and get away from environmental issues (and perhaps stress); others benefit from a very gradual incline of exercise; a few have had spinal fusions; and so on.

My wife has had ME/CFS for more than a decade. Honestly many of the touted remedies she finds online sound like snake oil, but if you are suffering and nobody has a good clue, you try each one in turn hoping you might be one of the lucky people who responds to a given modality.

Cort Johnson runs the website Health Rising, which acts as a clearing house for recent news about ME/CFS (and recently long covid as it relates to ME/CFS) and there is a community built around that site.

https://www.healthrising.org/about-us/cort-johnson/
Find another company to work for. Not making people look bad for being less productive is absurd, and there will be many high performance teams where that is not an issue. Shoot for more prestigious companies, and there will be rewards for productivity. Either that, or find an early stage startup where you can help set the tone and culture.
This is so very important, as titles can often inhibit information flow.

The only problem with this approach is that people look for other markers of "status" (like, for instance, the amount of time you've been with a company.
It’s beautiful! Love it.
> Adding third-party libraries is a huge step to take for a project

Really? I've can't think of a "real" project that did not include 3rd party libs.

Reinventing wheels or struggling with poorer implementations (unittest vs pytest, http vs requests, etc) is huge drain for a project. A huge misstep.
Sue them in small claims court. They won't show. you'll win by default.
I don't think it's helpful to make assumptions about the reason for someone's personal preference or comfort and then to deny them the respect of empathy.

If you're rude because you jump to the conclusion that I "irrationally" fear covid, you may need to consider that you're at risk of radicalization. Just a thought.
I agree with this sentiment. I used to be a Reddit user. With my Reddit account and my Reddit app. I say used, because I too, grew tired of the constant, aggressive, innecessary nagging trying to push me to install the app. I already have the app. Let me just read this short post in peace. I don't want to open it in the app. I want to read it here and now, and then close the browser.

But since they decided that I don't align with their business plan, I had to close my account and stop using Reddit completely.
I have been using Verbatim mode for years. The quality of results for this mode has declined too drastically. Verbatim mode is not true to its name anymore. For the last several months, verbatim mode has been performing even more poorly for me than the default mode.

Various prior HN discussions on degradation in Google search quality have talked about Verbatim mode too.
> We take an entirely different approach by building direct integrations...

> Private APIs need to be reverse engineered and are liable to change at any moment, so we had to develop systems to catch breaking changes and are always on alert to address them.

Isn't this still, essentially, screen-scraping? Reverse-engineering private APIs (presumably from their mobile apps, I'd imagine) and doing the abuse/block dance with their protective systems?
I had a coworker working on a data-pipeline sort of thing once. They for some reason wrote their own date parser (Akamai logs) and used a regular expression to find the month. For whatever reason, the RegExp didn't work for March (I think) and so at midnight 1 March the year of first deploy, we started dropping all the logs as un-parseable (causing the NOC to think the traffic had gone to 0 or our system was buggy). We all got paged and eventually figured out it. It had been running in live for several months without problems at that time.
> I think Japan was on the verge of surrender anyway

What's your evidence for this. From what we can tell from the knowledge of the people that actually matter in Japan, they were not that close to surrender.

Even if you had gone away from Unconditional surrender they were not close to a majority.

Even after 2 nuclear bombs, the peace party didn't have a majority, it required the emperor taking a direct political role against the war party to manage getting negotiations.

Soviets were just mopping up in Northern Asia, they were no thread to a Homeland of Japan. At best Soviets was a hope held up by some in the War Party, that if somehow they would flip against the US with them.

> If this was truly about saving lives, like the traditional American narrative goes

It was about saving AMERICAN lives back then. And it did.
> Crypto is fun for people who want their capital to not be debased unless they join a ponzi scheme

And how do the valuations of crypto currencies differ from a Ponzi scheme?
This is also extremely practical and often more efficient. I don't how many times I see ads for X even several days after I finished shopping for and buying X.
It's problematic to be pedantic about something that isn't true. A vaccine causes an immunity response. A therapeutic cancer vaccine is a vaccine because it relies on an immunity response, not because it prevents the spread of cancer. Vaccinations are often the best method of preventing a infectious disease but not all vaccines prevent contagion.
I'm not sure what to say about this... maybe that the guy on the right feels like he's in the weeds?

I had to give up watching a couple of minutes in.
I've found my attractiveness is largely determined by my weight.

When I was over 300 pounds I had no luck finding a partner. At 240 pounds girls chat me up at bars, set me up with their friends, etc.

I'm also not longer diabetic !

I still have some health issues I'd like to resolve so I'm trying to get down to 220.
> And most techies went along with it because they shared the vested interest, or did not appreciate the existing system that creates the real life shopping experience we see every day.

I don't agree. I think a lot of tech people (like me) felt like the whole system was a grift and that nothing of value was lost when LE offered an alternative. If you start a business in my jurisdiction your paperwork is going to get a lot more scrutiny than what the certificate authorities were (or are) providing.
Hah, I didn't catch that I was responding to you. Definitely would defer to your experience. Love your search engine btw. It brings the fun back to the web!
They also hire firms for regular security assessments (I did one of them) and publish the reports: https://support.1password.com/security-assessments/
That idea is called "aphrodisiacs". Many have been tried throughout history but I don't think any of them really work.
That's still a password manager. GP was asking what alternatives to the entire class of applications exist that provide equivalent security for unique passwords and keys
When you seriously download and run multiple executables a day I wouldn't call that a common use-case. At least 99.9% of my downloaded files are not executables. Those are usually pulled via the package manager or git, so basically I only download an AppImage if both the repos and flatpak can't install it.

I have no idea in what situation I'd need to load so many executables via the browser.
Not "Allied" but all bombings, including Axis bombings of purely civilians were a crime. However, you have to make a decision do you engage or sit back and watch the larger crime happen?

In great wars like this the distinction between military and civilian is tenuous. Japan, like Germany, was thoroughly a martial economy.

If you start a fire, don't complain later you got burnt.
Facebook Employees are now called Metamates
I think the issue of "how to reunite the rogue republic of Taiwan with the motherland" predates silicon manufactoring in Taiwan by a few years :-D
Hah, I hear you, and the funny thing is the more I get paid the less I feel they keep me busy. My first job was by and large the most stressful.

Sometimes we'll get an interesting bug that requires a pretty involved deep-dive, but I definitely spend a lot of time twiddling my thumbs, too.

I've heard with WFH, some devs are multiplexing multiple jobs simultaneously. Seems effective, if not somewhat unethical and potentially stressful if one job suddenly requires a massive time investment.
Arrow keys also work, but you need to focus the image first...
To control information, and influence public opinion.

For example, with the trucker protest right now, all the mainstream media outlets have been very critical of the protests, describing them as violent, racist, homophobic, and so on. Conversely, almost everything I've read from people who've been there in person has been that the protests are peaceful, with a party atmosphere.

Rex Murphy (well known political commentator) talked about it here: https://nationalpost.com/opinion/rex-murphy-in-ottawa-the-sk...

Having bailed out the media, the media are very friendly to the government's portrayal of things. (Heres an article from the left and right on the consequences of media bailouts: https://www.canadaland.com/canadian-media-liberals-trudeau-g... and https://westernstandardonline.com/2020/10/how-trudeau-bought... )

I don't believe the opinions on the trucker convoy would be nearly the same if the media was reporting what was going on. It makes me look at past protests -- such as Occupy Wall Street -- differently.

With the mainstream media in line (or, in stronger terms, with the decimation of the fourth estate), there are still people using wrongthink -- people speaking on social media. Clearly, that has to be dealt with. Wrongthink must not be allowed!

We've already seen how the major social media platforms are disallowing freedom of thought and speech in the name of protecting people from misinformation. This is the same problem Joe Rogan is facing -- he interviewed some doctors who said early treatment of Covid makes a big difference, and, rather bearing down with real science which asks questions and looks at the data in different ways, people want to shut him up, denying him the right to his free speech.

I believe that the scientific process was one of the first casualties of the pandemic, and things are looking grim for free speech in Canada.
There were not military targets worth targeting.
Assuming that you're talking about being a generalist in SW, there are many companies (including the one I work for) that has job positions that just state "software engineer". This is sometimes an explicit choice that we are just trying to hire good people who are competent software developers.

In general I'd say this would work at places that are:
a) Fairly small (dev team <30 people)
b) Make a complicated product or deliverable (this usually means you have lots of moving pieces that need to work together)
Yep, that's exactly what I thought.
I know you joke, but with the existing costs of fab manufacturing I wouldn't expect that using a diamond substrate would take up that much of the cost.

New diamond manufacturing processes include chemical vapor deposition, which would make integrating with fab processes pretty feasible. I'd guess it depends on weighing the performance graphene can offer vs the cost increase over silicon.
they would have access to the socket not the key, sure a very elaborated attack can probably figure out how to exfiltrate a lot of things (since they have already compromised the host) but for most, if they don't see things in ~/.ssh they would just go away and figure out another host to exfiltrate keys
How to Use Tree Sitter to Perform Static Code Analysis in Golang
Oh yes. Any time I see code that tries to do some kind of scheduling, the first thing I ask is if they have considered using a library someone else has written. Way too many things can subtly go wrong, but new folks tend to think it should be easy, because how hard can it be to work with dates?
> Unity made tons of strange decisions over its lifetime.

Heh.

None of those of those decisions seem strange once you view them through the lens of some game devs full of hubris :-)
Water is crucially important to fabs, true. But get real, water is important for everything in Israel, and why it had strategic value to warrant annexing it after the whole--the whole war that happened, the casus bellum of which cannot be done justice in short comments like this.
You're not missing anything—some people just like to grumble. I've never seen anyone come up with a reasonable alternative that isn't "rely on your own faulty memory."
> If you apply this procedure to intervals using harmonic timbres (timbres composed of partials with frequency an integer multiple of the fundamental frequency), the dissonance curve has minima that happen to be at small integer frequency ratios.

In practice that's pretty much "the ear cares about ratios" isn't it? Sure, it's caring about the ratios because they align with harmonic timbres in non-percussive instruments, but various human cultures do listen to a wide variety of instruments and voice with harmonic timbres, and perceive melody and chords based around [reasonably close approxiaations] of simple integer ratios sounding more consonant.

The implications for creating chordal music with synthesised inharmonic timbres designed to be consonant are interesting, but not widely applicable to what we actually listen to as music; and much of what we hear that goes outside simple ratios with the express intent of sounding dissonant...
Frankly I'd rather pay for 1Password sync that have Dropbox installed on my machines anymore with all the low-level hackery and product shenanigans they've pulled as the internal pressure to "innovate" and move up market has taken hold.

I'm also worried about 1Password in the long-term with this recent VC investment which likely will create the same kind of pressures, but for now they still have the best product in the space by far and I'm in no hurry to switch to an inferior product in order to save $3/month.
Firefox And Pixar Animation Studios team up to help you show your true colors
> you're just one "npm install" away from the key being exfiltrated

It's not as easy as that if your private key is protected with a passphrase, which IMO ought to be the default option.

I am amused by the rationalization going on here, though... taking extra steps to secure your SSH private key because you might "npm install" something bad. There's nothing wrong with enhancing the security of your private keys through dongles or TPM chips but it's a lot better to attack the root of the problem: just don't run "npm install" (or similar untrusted code) in an environment that you don't want to get pwned.

My day job has me working with javascript packages but I don't have npm installed on my system, and never will. All of my work with npm happens inside docker containers. This offers many workflow advantages besides a layer of security.
Uh, "leak" is a strong word. They are PUBLIC keys, to think of them as anything other than public is your mental block. If you share your public key with someone, expect them to publish it publicly.

Try thinking of SSH pub keys as identities or usernames and you are more on the right track.

I tend to have 1 pubkey per thing I care about, so 1 per github account, 1 per gitlab account, 1 for work, etc.
Also, 1Password security audits:
https://support.1password.com/security-assessments/
Did you mistype $2.99? Because it's $2.99 for one person. The $19.99 is for ten team members using the business product. A family of 5 gets it for $5 per month.
I like the idea. What do you define as a startup for this? Should it be listed on the stock market to be able to be invested in?
Bad employees are far rarer than bad management.

Employees don't go out of their way to steal from customers and give to the company, unless management pressures them to.
Then why is your cloud provider charging by GB-secs? This is the future after all.
I very respectfully disagree. You got your sauteed onions, mushrooms, maybe a blue cheese. Nice tomato slices and some juicy greens and then you get into sauces. That plus whatever the patty comes with - flavor explosion. No need for whatever the beef is trying to contribute.
Different brokerages take different positions on these sorts of integrations - some go after all third-party integrations aggressively (including screen scrapers), while some will turn a blind eye as long as you're not abusing their platform. For a brokerage like Robinhood, we've only seen them take enforcement actions against individuals if they send a high volume of orders in a short timeframe.

It's worth noting that even with sanctioned integrations (such as the one we developed for TD Ameritrade), sending too many orders at once or not appropriately batching orders will still get you in trouble - we guide people that integrate with us through these nuances so that their users don't get angry calls from risk departments :).
that is the point I'm trying to make. we judge comments on how well they adhere to our standards of civility and decorum, but not by their actual effects.

having a mod jump on you demanding peer-reviewed validation if you criticize the place is bad, even if they do it civilly.

hn surely does "take criticism seriously" in the sense that when any is detected, it is fully and publicly focused on. but in all the cases I've seen it comes with a hostile degree and intensity of interrogation that makes it hard to believe it is a good faith exercise in organizational-self improvement. it just puts such a high burden and consequence on publicly pointing out the faults that people don't want to do it.

shit I try not to do it on purpose because it's such a draining unpleasant experience to be the center of attention of dang and whoever has decided to be his crew for the day.

being civil doesn't protect you from these arguments! these things are bad, no matter how civil people are being about them. and I am sometimes not that civil about them, but that doesn't make me wrong, or a moral inferior to people who can keep their cool.
Doubtful the audiences can, unless maybe they just heard another piece in 440 for comparison. Maybe those with good pitch memory would notice something before they readjusted. Maybe.
Who is liable if the user's brokerage account gets blocked?
What's the Difference: JSON diff and patch
Now that's a unique excuse when arriving late for meetings.
> fees associated with a crypto transaction pale in comparison to that of Western Union.

Sending 1k USD to India via Wise costs 7.5 USD. The only reason remittance via crypto currencies seems cheaper is because pretty much every coin trades at a premium on Indian exchanges.
Show HN: SvelteKit Headless UI Starter
You expressed curiosity about why people dislike handshakes. I've been in the biz for over 20 years now. In my experience, about 1 in 100 guys are going to do one of the two behaviors I mentioned. That means I can expect at least one every few days at a conference. "Rare" in your experience doesn't translate to "uncommon" in mine. It's not an irrational fear.