skysight-inc/HackerNews huggingface dataset:
But it is not the same functionality at all. In terms of privacy and security, the older versions do not come close. And we reworked many pain points in 1Password 7 — better lock screen, improved sidebar, new watchtower, item editing, (in)security questions, fully encrypted item icons, item location bar, tag autocompletion, special handling of the scenario where 1Password becomes locked in the middle of the editing session — and I am not even listing 10% of all the improvements here.
During development I sometimes end my tests with assert 0, and only once I get to that failure do I know I've finished
They are not saying it's arbitrary, they're just saying it can't be consistently derived from some fundamental, smaller set of principles.

'Music theory' is much more of a working practice musicians use to communicate with each other and document their work and discoveries. How programmers feel about their notation systems isn't something working musicians should be concerned with, I don't think.

There is no fundamental thing that makes some notes or combinations pleasing and others not. It is all culturally mediated. I know that possibly seems unlikely and uncomfortable, but nonetheless it is true. If you drill down far enough into music you find the harmonic ratios, and human culture. That's it, there is nothing else down there at the foundations.
Now, I don't disagree with what you are saying, but the simple truth is that people didn't do this anyways. In fact, the one time I tried to explain to my grandmother how this whole thing works she then told me:

I just need to type in that address by hand and make sure I don't mistype right?

She then proceeded to inform me that her bank person had made sure she knows what an internet address is and that chase.com is in fact not chase.com.scammer.ru

EV certs are not unique. If I were to want a cert saying that it is issued to Chase Inc. then I would just have to found a company called Chase.

Domain names however are unique.

EV certs were always an ugly hack and quite frankly a bad one as well. I think LE handing out certs just for encryption is good. Users should not associated encryption with identity verification.

If you want something like that then the easy way would be to not use CA at all, but banking apps that connect to a server with only certain certs. Or maybe hand out Yubikeys that perform a handshake with the website.

But relying on EV certs is like relying on the fact that a certain envelope has a logo on it.
HN hug of death? Mirror: https://archive.is/Vz4M5
I'm not saying that there isn't something biological or authentic to it, but you probably saw a bunch of Disney movies and a bunch of other cultural messaging when you were a child that helped prime you to have this response.
Obviously the opposite, isn't.
This is great and makes a ton of sense as a refinement to their work on Flight previously. InfluxDB IOx already supports Flight, but we'll almost certainly be updating to support Flight SQL before we launch. We've been thinking about adding Postgres wire protocol support, but this would be even better if enough downstream clients and projects end up adding SQL Flight support.

Great work to the Arrow team!
I was told Slack has some Linux-specific issues that they're working on with the Firefox team, such as some complications around screen sharing depending on the window manager (as mentioned in some other comments below about Wayland vs X11).
High quality news is paid for by people who want to read high quality, sophisticated news. There is ample free news out there - I would call it buzz feed, instagram, local media websites, and on and on. These are more bite-sized and ad-driven. Most people don't want to read their news in novella format, but for those that do, they are more willing to pay the fees necessary to produce it for the limited audience that reads it.
Anyone with a system that is running full of Electron apps knows how awful it adds up and how slow they are. Sure just 1 app makes hardly a difference. But I have 16GB of RAM and it gets awfully slow very fast with all that electron mess.
Where do you get that the profit margins are tiny? TSMC has a net profit margin of 38%; that’s higher than Google (27%).
My first Hackathon-A lesson – Tips for hackathons
A cronjob to sync the time instead of a proper NTP client doesn't sound that good either. I know that each place has its own weird things because historical reasons but NTP is quite ancient.
And it really works better this way. If you just ride around the same block 10 times and then arrive at you job (at home, say) it doesn't feel as good.
Haskell doesn't have null, so Optional is the usual alternative (actually called "Maybe" in Haskell, but it's the same thing)

Haskell values can throw exceptions (e.g. for division-by-zero, etc.); but catching them (and therefore branching on them) is an IO effect.

That sort of exception is treated like an unfortunate necessity in Haskell; and user code tends to use a more structured, well-typed approach like Either (there are a few alternatives floating around in common libraries)
Nations are what they are.

India is among the least policed state, so it is not the power of the state that is holding it together.

A lot of people have been predicting the "balkanisation" of India and many are actively working towards that but to no fruition.
I only dabble in music as a hobby, started later in life, never had any professional instruction whatsoever. So occasionally I find myself on forums populated in part by people who have been taking formal music lessons from strict teachers since the age of three and OH BOY do they get fired up when someone suggests anything that differs even slightly from their training.

There is definitely some subset of musicians that cannot conceive the notion that someone somewhere on the planet might be learning music just for fun and don't WANT to take it uber-seriously.
> you could cause mayhem with __DATE__

It takes some patience, but people do try: https://stackoverflow.com/questions/11697820#16472369
Same for things like recovery codes / recovery phrases, although I'm not sure how highly i'd rate a security posture of keeping a password, a 2fa code generator, and recovery codes all in the same entry in a password manager.
Harmonics are the stacked ratios of primes. There's no 9th harmonic, there's the overtonal stacking of the two 5th harmonics. Or more literally, when you play a maj 9th on the piano, your ear is filling in the missing perfect 5th between them.
Chaosium Suspends Plans for Future NFTs
WebRTC: Journey to make Wayland screen sharing enabled by default
Hey everyone! DeploySentinel Recorder is a Chrome/Firefox extension that generates Playwright or Puppeteer browser automation scripts by automatically capturing input events (types, clicks, scrolls) as well as generating actions such as hover, await/assert text, and screenshots. This allows you to author browser automation tests incredibly quickly, but outputs clean code for you to easily adjust/edit afterwards. (No reliance on awkward helper functions!)

I put together the DeploySentinel Recorder because I really wanted a quick browser automation/test-authoring tool that can do 80% of the script authoring for me, with a really smooth developer workflow and output maintainable code.

If you’re wondering how this compares with a few other awesome recording tools out there - I’ve put together a breakdown down on the Readme: https://github.com/DeploySentinel/Recorder#alternatives-comp...

I've gotten some really great feedback from early users so far on the extension. Would love to hear any and all feedback from the HN community! :)

Direct Links:

Chrome Ext: https://chrome.google.com/webstore/detail/deploysentinel-rec...
Firefox Add-On: https://addons.mozilla.org/en-US/firefox/addon/deploysentine...
Github: https://github.com/DeploySentinel/Recorder
I'm a classically trained pianist with near perfect pitch.

I have ABXed myself with half-hour gaps on music re-tuned to 432, and music re-turned to 432, then 440, to control for that it has to sound like it's been retuned.

I have Audeze planar magnetics and a relatively quiet apartment.

I'm not able to tell the difference, even on music I listen to very frequently.

It's all horseshit.
+1 for dropping the carbs to leave the fog behind.

I used to do a large, sometimes carb heavy breakfast (french toast was my goto... with syrup of course). Brain fog killed me. Switched to 2 strips of bacon and 3 eggs instead (bacon done in the microwave, so easy) and that fog has lifted!
I got to ask The Alexander String Quartet at their Q&A about microtones and whether F# is really the same as Gb (answer: it's not for them).

There IS a notation that they use among themselves about microtones above and below the standard pitch, and they have to agree what pitch, exactly, they're playing at any given note.

Furthermore, the pitch they would use depends on whether the musical line is going up or down; in other words, it could be different in different parts of the same piece.

There are a lot of things that serious musicians know well enough to explain, but almost no one ever asks them.
Anecdotally, 90% of the "machines" I've met, also had a history of exercising significantly more than the average joe
I am constantly reminded how lame ruby and the rails ecosystem is. Consistency was solved long ago in the .Net ecosystem and using standard tools would not lead the author down a dark road of ‘it just works’ but it really doesn’t. All this ‘you could use xxxx but I haven’t setup my instance that way’ is just fan boys trying to pull the wool over your eyes to hide the fact that the tools are really crap. Consistency is paramount in the enterprise and anything less is just a lie that the system works. It doesn’t.
This was a PR move to counter the criticism by trying to avoid mentioning Electron, they were heavily criticized for that.
That’s odd. I would think Lorinda Cherry.
I have the same hardware and was also using Firefox, and I got decent performance (only briefly tried it out though). Maybe it is a settings/extension thing?
Daggy – Data Aggregation Utility and C/C++ dev library for streams catching
These technologies are key to certain high speed applications. As we move from monolithic devices to MCMs with lots of high-speed IO these technologies will be important.
Minimum Viable CD: Minimumcd.org
> As an avid vaporwave listener, I’d wager that listening to music slowed down / pitched down has a calming psychological effect in general.

slowing something down from 440 to 432 that's three minutes long will result in less than 1 screen frame of difference time

you wouldn't be able to tell the difference
One small detail I can see which already seems like something that some of us would consider signposts to the insanity of this sort of thing: the version in the browser has no access to your system installed fonts.
Not looking for a fight here, but it seems like there is a disconnect between 1Password/AgileBits praising version 8 while also trying to bury the fact that it is an Electron app. It seems like you are proud of what you are building (and that's awesome), but the Releases page for beta [1] doesn't contain the word Electron.

1: https://releases.1password.com/mac/beta/
This is true, but to clarify and expand a bit, you add support for FlightSQL to some datasource by adding Protobuf RPC handlers to it. This doesn't necessarily have to run in-process, the FlightSQL RPC service might run side-by-side.

The datasource also doesn't necessarily have to be a database. It just needs to implement the RPC methods. So you could implement your own data-access layer over any datasource (flat file, an external API, a regular DBMS, etc) by providing an implementation for "get all schemas", "get all tables", "execute a query", etc.

Some useful quotes:

> The idea is that the driver is a “one-size-fits-all” driver — a user or tool vendor only needs to supply a generic driver that can connect to an infinite number of databases. This is even future-proof — if a new database comes out, it can work with existing tools as long as an Arrow Flight SQL endpoint is provided. In fact, by adding an Arrow Flight SQL endpoint they would automatically enable JDBC connectivity too.

> Not only will Arrow Flight SQL reduce the technical burden on applications and users, but it leverages Arrow, which means it will provide better performance. ... having a single reference JDBC driver allows any data source that adds an Arrow Flight SQL endpoint to get JDBC “for free” as an onramp. So the selling point is add an Arrow Flight SQL endpoint to your data source and automatically get JDBC connectivity.

I have been experimenting in my free time with building a platform that autogenerates GraphQL CRUD API's on top of arbitrary datasources.

It lets you do federated/distributed queries and cross-databsource joins.

So you can connect it to a Postgres DB, a MySQL DB, a MongoDB, and a CSV file and then run a query that joins and filters data across them in a single operation.

I am using Apache Calcite for this, but am interested in potentially offloading the query plan execution using FlightSQL/Substrait[0] for better performance, since I am targeting OLTP workloads and it's latency-sensitive.

https://github.com/GavinRay97/GraphQLCalcite

[0] https://substrait.io/
https://news.ycombinator.com/item?id=30354391
AMS adopts double-anonymous peer review for journals
SSH keys have both a private and a public file. The private file is multi-line text.

I don't like putting the private key in the notes field, because its name is still "notes" (but I'd prefer the label be the key's file name), it's actually markdown formatted text, not literal text, and what if I still want to write a note, but I've already used the notes field for the key?

HTTPS certificates including multiple certificate chains, and private keys, and those are all multi line files. And each part should go into a separate clearly labeled multi line field. And I don't want to be forced to write a copy of my server's ssh key into a local file on my laptop in order to attach it to a 1Password file field, and remember to delete it quickly before Time Machine backs it up for posterity.

Right now I am forced to concatenate all my certificates and keys into the "notes" field, and write the file name before each part, and put blank lines between each file, which is terribly inconvenient and error prone.

I also put a multi-line list of all the user names and passwords that I set up on a server.

There are millions of other reasons why anyone might want to use a multi line text field beyond ssh keys and certificates, just use your imagination.

My question is why wasn't this obvious feature supported from day 1, like I fully expected it to be with I bought a 1Password license? Why did I have to find that out for myself the hard and disappointing way, because I never noticed a section in the 1Password manual or promotional advertisements about why 1Password made the decision not to support multi line text fields. I'd love to know the reasoning behind that decision.

[Edit in response to "Maybe I don’t understand, but couldn’t you use the notes section? Wrap whatever you need in triple backticks to create a code block?":]

I PAYED for 1Password, and the company I work for standardized on it and requires we use it, so I kind of expect not to have to jump through those kinds of pointless hoops with a commercial product. I should be able to select-all/copy/paste without meticulously selecting just the right text character-by-character. The time I waste doing just that would pay for a yearly subscription to a better product.
I think what you're effectively looking at is a rifled (Foster) slug. Turns out the rifling on the slug doesn't do much. The majority of the stabilizing effect on a Foster slug is from the fact that the center of gravity is well ahead of the center of pressure.

Having an actual hollow all the way through the slug with rifling would probably have increased air resistance compared to having the rifling on the outside, while rifling on the outside would have better ability to apply torque to the projectile. So knowing that rifling on the outside doesn't work well, we can estimate rifling on the inside would do even worse.
Well not quite.

In this case rewards are highly nonlinear, not proportional to processing work at all.

The value measure is how good performance is relative to competitors, with a vastly greater than linear reward if it is

I expect energy use (and other performance costs) do not matter much once your winning proof-of-work competitions due to higher performance (as apposed to simple scaling of hardware)

Given this is an experimental device it’s probably only the fab cost that is a barrier
Yeah, Twilio tried to force that on me as well. Couldn't enable 2FA auth without a phone number and since I'm a digital nomad phone numbers and sim cards are a pain point.

Opted just not to use Twilio.

It's bizarre because they own Authy so could have pushed more people towards that instead.
"To illustrate this monumental change in capacity, Musk pointed out that in a single year, a Starship launching three times per week could put as much mass into orbit as has been launched by the entire world to date (~15,500 tons). "

While that sounds impressive, the whole 3 starships per week for a year part just makes this seem ridiculous. Is Musk personally going to pay the <$10million per launch? <$10m x 3 x 52 = $1.56billion. That's just the launch. Never mind the expense of the payload being lofted into orbit. Nor the amount of time required to produce all of that payload. 3x per week is just an insane amount of launches.
Yeah. If it had been solved it also would have been bottled and on the shelf at Walmart.
I pressed the "print" button to see what happens and it crashed :(
Why BigCo Announcing a Product in Your Space Is a Good Thing
This was Rene Carmille, and that is a punch card
> they would have swapped in a pristine new board to make it look like a legitimate sale.

But then NewEgg would have admitted that NewEgg’s returns people lied about the motherboard being damaged. If only the returned motherboard had not had an RMA sticker on it, NewEgg could then have plausibly claimed that the returned damaged board was the same motherboard which was originally sold to GN, and blamed a mistake in inventory management, thereby admitting to a simple inventory mixup instead of admitting their returns people are scamming legitimate returns. But the sticker destroyed it; the sticker being there makes it both unlikely that it would have been sold to GN originally, but also makes it implausible that the returns people simply missed the huge sticker on the motherboard saying “From: Gigabyte; BROKEN CPU SOCKET”.
You’re right but it’s basically a cultural legacy.

Most browsers really want to show scary warnings for HTTP connections these days. But there are enough complaints about it as a concept that they have not implemented it yet.

“Zero trust” or “BeyondCorp” security strategies are not widely deployed; a lot of organizations still use browsers over HTTP for internal apps, and don’t have a captive CA or a way to satisfy Let’s Encrypt challenges from outside the firewall. No one wants thousands of companies to train their employees to ignore cert warnings.

And there is a small but vocal set of folks who believe one should not have to satisfy a CA (even Let’s Encrypt) to put up a website.
It depends on the nature of the activity that got the account blocked - we place limits on the types of legitimate account activity that are likely to get a user blocked (sending too many orders too quickly, sending orders that could be batched as a flood of single orders, etc.), but for fraudulent or otherwise illegal activity, that liability is on the user.

When starting a new integration, we schedule a meeting with the brokerage in question (if they'll have us) to discuss issues of this nature. The response we've gotten so far has been "as long as you don't enable illegal activity or put unnecessary load on our service, we won't take action against you or your users," though we're sure some brokerages will have a more aggressive stance on this in the future. We aim to work in partnership with them and advocate for the ability to integrate in this way, and we encourage the brokerages that gives us an audience to build public APIs.
A substantial portion of those 240 pounds must surely be muscles?
16,085 respondents? That is not a lot. I don't know how many people use JavaScript in general, but that's probably at least 1 000 times that.
interesting name from Red-Hat

https://mir-server.io/
> You can't arrest people that have not broken any laws.

Train horns in residential areas, let alone at night, are against the law. Harassment is against the law. Parking vehicles in intersections is against the law. Do I need to go on? Stop pretending this isn't what residents are taking issue with, no one gives a fuck about protesting in and of itself.
A Laravel package that allow you to import data from a spreadsheet to your app
Hi,
I'm planning to build a Laravel package that allow you to import data from a spreadsheet to your application. Available UI components: React, Vue 2 / 3, Livewire, and Blade components.

The problem:
Every time you need to build this functionality from scratch, it takes a lot of time and effort to create the API that can have columns validation, file format, handle large import files (e.g. 1 million rows), and makes UI that can provide the best end user experience.

The solution:
A Laravel package with great, tested and documented API togheter with UI Livewire and Blade components. A npm packages to provides UI for React, Vue 2/3.

* Ease and flexibile integration in any Laravel/React/Vue projects.
* Define columns with their validation rules
* Support format: xls, .xlsx, .ods, and .csv and Google Sheets Integration.
* Templates of imports.
* Styles customization. Will use Tailwind CSS.
* Listen for events: Import started, Import ended.
* Send notifications to the user when import is ready.

There is a concept, it's just the first vision as I see how it has to be:
https://youtu.be/JPveTY--rss

I was inspired from this product: https://layercode.com, another example: https://flatfile.com. But I consider that as a Web Artisan I can have this directly in my application and even cheaper than paying a monthly subscription.

I'm thinking to make it as a software license, one-time payment with one year updates, as Spatie.be do.

What to you think? Will be useful for you?
Show HN: Relayshun.com – Tokenizing Metasocial Relationships on the Blockchain
Even if it's registered in a local jurisdiction, the paper work may not be reliable and it will be possible for scammers in those jurisdictions to get that paper work. It's not like there aren't plenty of shady incorporated companies already. It's still going to be a time-consuming and expensive process to track down the paper trails. Probably it will require a specialist. It can get pretty difficult pretty quickly as people use shell companies and god knows what other tricks that are available in these systems. And the police aren't going to just jump on the case and do this all for you. They don't have the resources. For the average person, your police report is going to go in the bin. You're gonna have to do a lot of work or pay someone to do it.

- there will be scammers even in the areas with stronger legal systems (look at one of the other sibling commenters RE: Britain, for example)

- having a paper trail is reactive, not proactive

- the average person will have a difficult time tracking down a paper trail
Oh yeah, sorry, I shouldn't have worded it that way. the decorators are being transpiled at runtime to standard JS, so why shouldn't tooling like jest be able to work with that?
Take one minute and try to sing a perfect 5th over a drone note. You'll waver around that beautiful sturdy 3:2. And if you're lucky, or if you practice you'll eventually lock in to that resonance/ratio and feel a universal truth as important as the right triangle.

All of music is based on resonance. And resonance is a ratio