skysight-inc/HackerNews huggingface dataset:
> Are you saying you have a stove that doesn't have an electronic starter?

Yes, during the same trip (to my parents') I visited an old friend and his parents' house had a good old wood stove, ie: a metal box with a chimney and a door to put wood in it

> Are you on a digital or analog thermostat?

analog (I use my body to determine if I'm cold or warm and my brain to act accordingly)

> New technology will always have an early adoption phase.

Fortunately lots of tech die in that phase and are never seen again, looking at "the house of the future" of the 40s, 50s, 60s I'd say most of it never goes mainstream

> Smart blinds ... no reason why they cant be as reliable ... It's not a complex thing.

Adding even a bit of complexity to an extremely simple system makes it much less reliable and less durable. You need PCBs, antennas, motors, software (with their updates ?), electricity, all of that to do something you could do with your arms in two seconds. Not even talking about the amount of e-waste generated and the fact that no one will be able to source spare parts by the end of the decade. And we all know these things aren't even built to last in the first place (motors with plastic gears, &c.)
Really at this point users should band together to steer Firefox back into better graces. Really all that’s needed is a bunch of servers running Firefox with something like Playwrightjs or Selenium and just juke the stats on features since the marketers and developers are ONLY going to make decisions based off that data.
I’ve done an escape room puzzle that had precisely this kind of premise.
All the discussion in this thread and in the bugzilla thread feel very odd to me. Like arguing that it's not very used, is a maintenance burden.... and it was already hidden off in a submenu!

I'm, of course, glad that the guesser can work more effectively. But isn't this a bit different from something like FTP (which can introduce nasty security bugs?)? And you still end up with "change encoding of page" with the guesser, so it's like... it's not like you are removing some lower-level functionality.

It's unfortunate because yeah people mention Flash getting removed in a similar tone, but at least with Flash there are things like ruffle that can pick up the slack. I don't really want to have to install a plugin for the couple of times I land on the page that miss this encoding, but when I do hit the page I'll be frustrated.

Of course the original sin here was browsers not throwing warnings or something on every page without the encoding set, and having users become the people who complain to webmasters about it like... 15 years ago or whatever. But meanwhile we had a really _fine_ place for the encoding picker. Maybe first click is "Guess", second reveals the menu... or something.

I don't want to hold too much malice towards the devs here cuz getting yelled at by all the internet sucks. But I hope there can be some resolution here that doesn't lead to massive burnout. I will be very happy if there is some backup solution inserted (even if it's behind a conf flag), and I would see this as an overall positive to FF if that happens (listening to feedback!)
I trust password managers more than my ability to remember a strong, unique password for each of the 200 sites in my password manager, and more than my ability to identify URL phishing attempts 100% of the time. I use Firefox' built-in password manager because it's hard to write a secure content script in an add-on password manager[1], and because Firefox Sync encrypts passwords before uploading them to the web[2]. I also know that, if my password manager is ever breached, my most important accounts are also protected by 2FA.

[1]: https://lock.cmpxchg8b.com/passmgrs.html
[2]: https://hacks.mozilla.org/2018/11/firefox-sync-privacy/
IBM 4704 Model F / Model M Transparent Key Template (2015)
The hand waving of 43.5 to 30k is probably being unrealistically conservative. Probably closer to 20 than 30.
Very cool, and thanks for replying to laymen comments such as mine.

Do you think this line of research will eventually feed back into improved designs of electromagnets, chambers and so on? My limited understanding of the field is that the optimal reactor design is a moving target that's changed a lot over the years due to engineering improvements in manufacturing, material sciences and so on.
It depends, though.

Meetings are expensive, and often a waste of a number of people's time. And sometimes figuring out _who_ should be there is a problem (and cause also burn time).

Having broader discussions in a Slack thread has the benefits of:

a) it fosters transparency -- others are able to see the discussion, and chime in or move on

b) it's asynchronous -- others can chime in when they're able to, vs. having to drop what they're doing and join a meeting

c) it's self-documenting -- others that may not have been able to attend the meeting, or may just want to know the context/takeaways can just review the discussion

Of course, it has the downside of blocking a decision, where a meeting can help arrive at a decision more quickly. But -- at least, in our experience -- most decisions aren't urgent, and the turnaround time a Slack thread yields is typically sufficient. When it's not, we'll jump on a call.

Email, to me, is the worst of both worlds. You mention below that it forces more thought, and I agree with that as an upside. But typically (again, in our experience), people are pretty put together pretty well-thought-out discussions together, so it's not really an issue for us. We _never_ use email, and I'm perfectly happy with that.
A Starship can't land at any random commercial airport, a 787 can. The 787 can also divert to any other airport due to aircraft issue, weather, or whatever. Starship doesn't have anywhere close to the same cross-range capability.
Were the problems with just unconditionally adding small string of all such characters to every password, whether the site needs it or not?

generated_password = base64.b64encode(bits).decode()[:16] + '0@#Zz'
Are you suggesting a business should pay tax on the gross income, regardless of their costs? A store should pay income tax on the gross sales, without deducting the cost of purchasing the things they later sell?
A completely different approach to fusion that may or may not work but can do direct generation of electricity without a turbine is pollywell fusion
I'm just an old man, pointing out that it's all been done before, and it will all be done again. The big difference is it looks like they're in the realtime controller for the plasma, rather than determining static settings for a subsequent run.
You're coming up on a year after RFC 8996 (saying to stop using TLS 1.0), which is itself almost three years after the die-die-die draft and RFC 8446 (TLS 1.3)

I get why s2n has an SSLv3 implementation, even if it SSLv3 was already a bad idea by the time s2n existed, and I would likewise understand why it still has TLS 1.0, but I don't understand how it makes sense to advertise a "default" strategy that enables TLS 1.0 but not TLS 1.3 in 2022.

If as I assumed in my earlier comment "default" is rusted in place as meaning "The thing that happened to work when this was popularised and now we dare not change it" then I guess that's a sad way for s2n's team to learn about Hyrum's Law but you should just stop advertising the "default" feature having learned that lesson, continuing to have docs that say "Use the defaults" when the defaults are rusted in place is bad.

Or maybe I just don't understand and s2n is only intended for some niche legacy scenarios where TLS 1.3 won't make sense?
Thanks, but is the fuel cost a significant factor in fission plants? And the waste disposal? There's already lots of radioactive material in the ground, after all, for example in uranium mines.
> You could consume a single glass of heavy water without suffering any major ill effects, however, should you drink any appreciable volume of it, you might begin to feel dizzy. That's because the density difference between regular water and heavy water would alter the density of the fluid in your inner ear

https://www.thoughtco.com/can-you-drink-heavy-water-607731
Because you're sitting on that embedded energy, at the opportunity cost of someone else not being able to use it.

So it's additional supply of both material and embedded energy that otherwise could go to someone else, or wouldn't need to be spent until you were sending you old car off to be salvaged.

There's a time value to it as well, just like with amortized financials.

Think of it this way: if everyone used that strategy, we'd have twice as big of a vehicle market, requiring twice as much material and energy.

Even if you expect each vehicle to last twice as long, it all has to be paid for with capital costs up front. Both your cash out of pocket, as well as manufacturing capacity and energy/resource extraction.

You might get effective use efficiency of 50% for twice as long, but the overall cost in dollars, energy, and emissions is much greater because of amortization.
> Presumably the bureaucrats that wrote that bit of the GDPR (apparently without consulting anyone who knew anything about the web) do use the web and they must have noticed how annoying it is.

The GDPR mandates that non-functionally-essential tracking (regardless of whether it’s done via cookies or other means) should be strictly opt-in and the consent process shouldn’t annoy or trick the users into opting in. Pre-ticked checkboxes or making the opt-in button more prominent than the decline button aren’t allowed.

The problem is that up until now enforcement has been non-existent. Thankfully this seems to be changing - the Internet Advertising Bureau’s “consent” framework has recently been ruled non-compliant so hopefully there’s going to be some financial pressure (in the form of fines that everyone has been fear-mongering about) to fix this properly.
Nuclear byproducts storage (let's not call it waste since MOX fuel is the future for humanity) do not cost much, it's not a point that is salient enough to male fusion relevant in any way.
Ask HN: Simple way to pull banking transactions to CSV?
Hey HN, does anyone know of a simple way to pull transactions from various US banks/credit cards? I know about Plaid but its not really usable for a single hacker. I have also seen tillermoney.com which connects with my banks however it only exports to a Google Sheet using some extension.

Anyone have any scripts/projects/APIs/resources that can help?
My main gripe with so much of the communication moving to Slack is that a lot of highly technical discussion moves into synchronous chat, and that removes the expectation which email often carried that the author spends time organizing their thoughts into clear linear writing.

Of course emails don't always come out coherently either, but my personal experience has been that moving into the streamed sentences model overall reduces the amount of effort put into organizing thoughts before communicating.
> Though I'm not completely discounting the possibility that ad companies are deliberately obtuse.

They are definitely being deliberately obtuse. Nothing in the relevant legislation requires anything like the party of dark patterns we see in many sites, in fact many of the consent forms are not conformant with the legislation at all anyway.
You have to properly administrate those servers else you'll lose all your files and everything will be inaccessible.
Please read my other comment in this thread - the vast majority of cookie consent modals aren’t actually compliant with the GDPR. The problem is that there’s been zero enforcement.
Several of those flagged comments are personal attacks, e.g., calling the person being replied to a sociopath. That certainly deserves to be flagged as a violation of HN Guidelines.
The "reality-based community" quote also came to my mind when I read the article, so I wonder if the writer also thought of it. It perhaps wasn't highlighted, though, because it further serves to undermine their point, since Rove and Trudeau are not what I would consider ideological allies, and it can't be ignored that ideology is making a huge difference to how events are playing out (and even underpins why there is a policy being protested against in the first place).

I suppose there is a sense in which Rove and Trudeau share the same view on power, but that doesn't mean it is helpful to group them together as "Virtuals". We already have a word for people who try to influence the world using political power, and that word is "politician".

While it's reasonable to say that politicians are often disconnected from the situation on the ground, that is not a new observation, and I think we need more than the examples of Iraq and the truckers protest in order to prove that the mentality of politicians is deficient. One could even argue that both Rove and Trudeau have actually been successful, since Bush got re-elected (and gained US military bases, and oil, and reconstruction contracts) due to the "disaster in Iraq", and Trudeau gets to paint his opponents as Nazis who are attacking the ordinary citizens that he is standing up for.

A more insightful analysis might be that the powers available to politicians in modern Western democracies mean that certain types of problems can't be avoided (whether that's terrorism or pandemics), and that only a limited set of options are available to politicians for trying to solve them (such as war and law). The fact that wars are messy and some people are disruptive when their livelihoods are threatened is not really surprising.
Does Freeciv use this approach? Or any other significant open source game or roguelike?

ECS sounds somewhat like how I was thinking of a civ-like game engine while falling asleep a couple months ago when I was thinking why Civ scaled so poorly under some circumstances: traditional games used to have everything in memory, but civ type stuff could just have a database with some indexes and spatial indexes for quick lookups, but otherwise just sweep the various tables. Thus the size of your game was more constrained by disk space than RAM.

Per your discussions with cache conservation/thrash avoidance, does ECS work well for mapping entities to specific processors so that cache-hopping doesn't occur in modern multicore processors and NUMA stuff?
Hey thanks for that info and the link, that's really helpful. Interesting about the MVNO corrections too.
> Slack shouldn't be replacing e-mail or meetings or phone calls.

Absolutely wrong. We use Slack messaging and huddles to replace these things and are a more efficient workplace because of it. Really this is the point of Slack.

I have no desire to go back to the throat clearing and careful writing that comes with composing emails or wasting time in unfocused real-time meetings and phone calls that could have just been handled through a few async messages on slack. If a co-worker sent me an email (which no one ever really does) I would ignore it until they message me on Slack about it.

On top of that, Slack apps really decrease cognitive load by putting useful information into conversations or providing good prompts to start discussions from webhook notifications.
Also, in 2020 Schmidt was in the final stages of becoming a citizen of Cyprus. Let's not assume all is done in the interest of the American people.

https://www.vox.com/recode/2020/11/9/21547055/eric-schmidt-g...
Reddit had quite a story about CO poisoning. WBUR went on to summarize and expand upon it, making for a good (and somewhat alarming) read:
https://www.wbur.org/endlessthread/2018/03/09/something-wick...
> To me, it is incredible that Slack is used WITHOUT threads.

The first time information you need is sent in a thread that started a week ago and that you're not already on, you'll get why folks don't like Slack threads. They're an anti-feature, IMO.

If Slack offered a way to show all messages whether or not they're in a thread, as they come in, I'd be down. I wouldn't like 'em but at least I could work around their fundamental flaws.
How do we know it's a backdoor and not a technical error?
Money you need to spend is different from money you can save or invest. That's why they can do it.
To everyone frustrated at this, I would highly recommend checking out Twist. It is "threads-only", and async-by-default. Interface is pretty nice too.

The biggest issue with email is that by default it only goes to the people in the To/CC/BCC list, so information is silod. But so much else about it is _very good_, and I think that Twist gets to most of that.

The main issue with Twist preventing professional adoption for me is lack of custom emoji support. Especially in full-remote land, custom emojis help with building a fun internal corp. culture, and serve as a way to ad-hoc workflows as well. Twist, add custom emoji you cowards!

https://twist.com/slack-alternative

(EDIT: to those who roll their eyes at "fun corp culture", not talking about dancing parrots, just like stuff like our own corp logo or little stamps to say something is done and the like)
It's one specific problem with a solution that is invalidated by uploading the recording to a 3rd-party service. E2EE is not the only security measure a journalist should be taking, but it is one, and it is a fairly basic measure that isn't too tough for someone in the field to explain.

The reason why we advise E2EE is to make sure that the recording is only unencrypted and listenable on devices you control, it's not just because we like Signal. Transferring it raw to another service invalidates the point of doing your call over something like Signal in the first place, because the purpose was to not have the recording sitting unencrypted on someone else's servers that you don't own or manage.

My impression is that if a journalist is doing E2EE and then sending the recording off afterwards, they probably don't understand why that advice was given and they probably don't have an understanding of what the risks are we're trying to protect against when we tell them to do remote interviews over an E2EE service. We want journalists to be thinking about their source's privacy on a level beyond "I use Signal because I was told to."

I get what you're saying -- E2EE is not a solution to every problem, and you're right about that, there are other security risks that are in separate categories. But what I'm getting at is not to say that it does solve every problem; just that if a journalist doesn't understand not to send recordings off someplace, to me that indicates a lack of knowledge about other security concepts.
For me (on AMD Ryzen 9 5950X, Arch Linux, Clojure 1.10.3 [OpenJDK 17.0.1] and NodeJS 17.4.0), circle.js takes ~0.15 seconds and the circle.clj takes ~0.19 seconds. After running circle.clj 100 times in a running JVM though, it takes the time down to ~0.092 seconds for each run.
When I think couches with people inside I cant get Frank from Always Sunny climbing naked out of a couch out of my mind.
But you're still discussing unrealized gains/losses, when I'm suggesting to ignore them. If someone is borrowing millions, hundreds of millions, or even billions against untaxed collateral, then they should be taxed on what they borrow, limited to how much they can borrow, and/or taxed more on what they buy. It's their and the bank's problem if they're borrowing against unrealized gains or losses.

The wealth inequality problem in the U.S. is INSANE. If the U.S. had a population of just 10,000,000, literally 12 people would have as much wealth as the bottom 60%, i.e., 6,000,000 people, combined. And yet, here we are talking about how "impossible" it is to simply tax wealthy people.

These systems were made by humans. They can be fixed. Wealth inequality and taxation of the wealthy are not laws of nature that can't be changed.
I use SaaS password managers and I don't trust them. That's why I have MFA enabled on all of my accounts and logins can only be authorized through the authenticator app installed on my phone
It is tough to balance between sweating the details and not bikeshedding (sweating the details at the expense of the big important architectural decisions)
Has anyone used P2 (by Wordpress) as a replacement for Slack?

https://wordpress.com/p2/

It seems most similar to FB Workplace from what I’m reading.
I would downvote a one-word comment like "No." because this class of comment does nothing to further discussion.

If it were "No, and here's why" then I'd upvote it instead.
Does AI need more funding? Every government and the largest companies in the world are focused on it.
Okay, but is the fuel a major cost for fission plants? And it's not clear to me how nuclear waste can both be extremely long-lived and also very dangerous that entire time.
Cody's Lab where he drinks heavy water: https://www.youtube.com/watch?v=MXHVqId0MQc
And suddenly the plot of one of the better Spiderman movies was happening in real life.
I use Element on Android and it works perfectly.

I don't say that lightly, I'm pretty hard to please in general. Element is one of the few pieces of software that I don't have a complaint about.
The secret that nobody tells you about HN is that it's not moderated by dang and sctb, but by dang, sctb and all users. In a sort of emergent way by users, of course, because we just downvote the kinds of comments we don't want to see (and some probably actively look out for comments that break the site guidelines) and upvote the ones we want to see. Hence the constant chatter about the "hive mind" etc. I guess. If you have a large body of users up- and down-voting what they think is right/wrong behaviour there's going to be _some_ tendencies that come out on top in every thread, and perhaps in the site as a whole. But that's not to say that what these top-tendencies are won't fluctuate wildly, even in the same day.

It's complicated. A simulation would be interesting.
>
Used cars are not supposed to go up in value.

That's due to a demand spike and supply shortage. Blame bitcoin and video games and people not wanting to take public transit in the middle of a global pandemic. It's not because of monetary policy, or because Scrooge McDuck borrowed a trillion dollars for free to buy up a bunch of used cars, or because GOOGL doubled in value in two years.

> I expect asset prices to continue to inflate as long as we continue with our current monetary policies.

Why? If it didn't make sense to invest money at a P/E ratio of X at a Y%-for-you interest rate, why would you invest money at a P/E ratio worse than ~2X, at a Y/2%-for-you interest rate?

I get that the process of going from X to ~2X is painful, but why wouldn't it stop there?
Oh. I'm pretty sure it will be the same place most of the current tritium gas comes from: CANDU.
Thanks. So it sounds like you're saying that, unless there is some radically different plant design in the future, that there won't be an economic advantage to fusion over fission, at least in the near term.
Hmmm ... I'm pretty sure Axios's whole pitch from the beginning has been speed and succinctness.
It would probably be easier to remain ignorant if you didn't join in conversation about it.
Cert Pinning is more akin to "trust on zeroth use, only this certificate", HSTS is kind of unrelated since all it does it tell the browser to access the site via HTTPS. If the site is on the preload list all that buys you is the first access must be over TLS.

Pinning is more for the app case, HSTS more for the browser case.
> Maybe we should take a vote?

How do you think we decided on the current allocation?
I view it as a firefox fixing incorrectly written pages. It's nice that FF has a "fix-it" option, but ultimately, the author shoudl fix her site. The single-byte Latin scripts are semi legible, so that is enough for me.

When a website breaks because 3rd party cookies go way of dodo or the page relies on ActiveX, shoudl Firefox provide an option to run it?

I understand that some people have different opinion, but any page past 2005 should have encoding in order and older sites should fix their sites.