skysight-inc/HackerNews huggingface dataset:
This is the main thing. A password leak either gets the password or gives you a basis for attacking variations of it.
We can use it to create a zettlekasten system.
it's not the nukes itself that would kill. it's the nuklear winter. with highly reduced sunlight this planet will become a freezing hell. no plants -> no food
Using an insecure C standard does not improve the situation, broken compilers neither.

C is broken from C11 to C26 by committee.
GCC was broken from 9 to 11.
Python has at least the option to use GitHub, which can eventually detect PR's with unidentifiable identifiers. Linux will need to use linters to detect homoglyphs or bidi attacks, because reviewing emailed patches is impossible.
That's a good point, although they are threatening to release slightly more than just the drivers ("the complete silicon, graphics, and computer chipset files"). But the legal vs. illegal access is definitely interesting and probably not something they took into account. I don't see, say, AMD stealing from "publicly stolen" technology, I can't imagine the insane lawsuit that would ensue. Maybe some Chinese company might do it...
That's a good way to summarize the problems that traditional game-devs foresee with NFT games. Game purchases are viewed as speculative investments rather than entertainment.
Thank you. Your feedback is helpful: In hindsight, I can now see my comment could be misinterpreted as sarcastic, even if that wasn't my intention. (If anything, I think giving people more/better tools for creating online content is great -- with the obvious caveat that all this content will reside in "private webs of documents" controlled by a single company.)
Can you mine crypto in the browser? I know there are some native hooks, presumably JavaScript is never going to give a good hash rate, but it would be interesting if sites starting dropping JS tags that silently mined crypto in the background.
> Writing passwords down isn't the worst thing.

At home maybe, but in other environments this can be pretty bad.
I wish that was true, but look at the latest analysis by the Economist. The current sanctions against Russia are similar to those of 2008-2009 and 2014-15, and pale in comparison with the financial crisis of 1998-1999 (if we only look at the rouble-dollar change rate).
> For those wanting to involve NATO and set off WW3 along with the nuclear apocalypse, I wonder - why the rush?

1) Atrocities are being committed and innocent civilians are being killed right as you type this tone-deaf question.

2) Appeasing dictators only leads to escalation, and early intervention minimizes damage. This is not theoretical, just look at Putin's belligerent last decades.

3) The risk of Russia unleashing nuclear Armageddon over Ukraine is very small. For all intents and purposes the West is already involved militarily - doing so overtly would not fundamentally change the equation.
I obviously have no answer to that question but I will say you may enjoy the Closer to Truth series.

Here's one about "nothing":

https://www.youtube.com/watch?v=YkB-phz_2cA

> What is Nothing? What if nothing ever existed? Scientists claim that the universe came from nothing. But what's the nature of nothing? That's where the confusion lies. Featuring interviews with Richard Swinburne, Simon Blackburn, Robert Spitzer, Peter van Inwagen, Steven Weinberg, John Leslie, Timothy O'Connor, Victor Stenger, John Hawthorne, and Peter Forrest.
> The original JSON license is the crayon license whose flaws are easiest to understand. It contains the phrase "shall be used for Good, not Evil", which begs the question "who decides what's evil?" and opens up any user to a potential lawsuit.

I personally like the FOAF license, which is like the original JSON license, but specifies that "what's evil" is determined by the originator of the project.
what's next? HN featuring horoscope?
Yes they still do, without the greyscale as standard nowadays though. Its pretty great, you can "promote" 1-2 normal apps to work in that mode too. I used it heavily on trips where I only needed the camera and gmaps anyway - my trusty S10 lasted for days thanks to it.
Out of curiosity, how would you rank these?

- approval of your manager
- approval of your engineers
- approval of your customers on things your team has delivered
- correcting course set by upper-management
- communicating high-level directions to engineers
- communicating and getting action on issues raised by engineers to higher-ups
- levelling up your engineers and team
- likeliness of promotion in title or compensation
- anything else important that I didn't list

Other than putting promotion/compensation as high as it should go, was there any discomfort/doubt in trying to be honest with any of the items?
If they're your family members, any stress from work comes home. There's no decompressing or escape, which can lead to conflict at work and home. If things go wrong, you run the risk of blowing up both your professional career and home life.

If they're other family members, same deal as you'll be caught in the crossfire. Meanwhile if things are going well, you'll still never have the same level of access to your cofounders as they have with each other.
There's no population upper limit if the soul can travel throughout the timeline. I.e. when it's done being me it can then become a cave man next or vice versa.
If this is a true thing, I would think it should be clearly stated on the coursera courses.

Just last week I got someone started on that google learning path.

This would be a strange kind of fraud if the course sucked your time and money but you were not aware that you could not work google cloud unless you moved to [insert cheap country here] - imho, maybe it's not but it should be.
> Without the network effects, nobody uses them in the first place, and then you're either

not true, see [matrix]. You hardly say nobody uses it

Still, the reason why it (and Signal) is not used that much in the first place, is the network effect working much better for WhatsApp and iMessage.

> 2. or you try to convince them to use a decentralized service, which almost certainly doesn't have the usability or polish of an app built by a company.

App built by company and decentralized aren't mutually exclusive.

> And if it gets bad, we'll change services. Simple as that.

tell that the people still stuck with WhatsApp
This is such an bad faith take I don't even know how to engage with this. It's not that you believe it was installed in a CIA backed coup, you just _KNOW_ it.

Being from Eastern Europe, I can tell you, it is worth standing up to Russia and not kowtowing to it. It's normal people want to live in close connection with the western world and not in whatever the heck kind of local order Russia is trying to create. And, also, yes, orange man was unbelievably bad and led to the destabilization of the world around. Calling anti-Trumpism stupidity, lets me believe you are the one living in a delusion unable to consider the realities of the world.
Always funny to read these incredibly dumb & crazy conspiracy theories, and not surprising given how much shit Trump & Putin's propaganda put into your heads.
The closest I've got to that is Disco Elysium.
> This happens with people who are deeply insecure.

I hugely disagree here. You can feel insecure and try to better yourself. Alternatively, i've seen very secure people (financially at least) being at the apex of self-justifying greed. The number of people who try to buy a conscience or justify "their" spot in this world by whichever myth they suscribe to is way too high. Way too high.
> Why aren’t we sending an email to every user?

> We evaluated the risk and consulted with our privacy lawyers and legal experts, and took the approach that we thought appropriately mitigated any issues while being open and transparent and did not believe emailing directly was helpful in this case.

Seems like a pretty weak justification. "Our lawyers said we don't have to notify users."
You never know where that repo is going to go. It could be private today and public tomorrow with a totally different license. Git should be thought of as sticky in the sense that it's intentionally designed to preserve a history of everything for all time in the most efficient way possible. Anyone who's ever had to scrub an API key they accidentally pushed or optimize a monorepo can attest to this.
Active battery management is common to all EVs now - only the first gen Leaf and other weird niche vehicles like that don't have it. What Tesla does is an incredibly refined, efficient and integrated hardware coupled with great software. If you watch Munro's teardown of the new Model S, they basically state that they don't think it can really be improved.

It's basically head and shoulders above the competitions: https://www.youtube.com/watch?v=m1kHsd3Ocxc
is that an aero dynamic issue?
Thank you. That's what phreack said too. See my response to him here: https://news.ycombinator.com/item?id=30555760
Is the IO monad in the same state at the start of execution of a program, and at the end of execution of a program?
Ukraine has held TWO elections since 2014. Those events are moot at this point.
A feeling of progress is hard to convey to users if the iceberg is mostly invisible. I assume much of the work on Google Docs is harder to see like backend improvements/scalability, rendering compatibility across platforms, file-format compatibility with MS Word (both being able to read/write with high fidelity and supporting the useful features).

But if we look at release notes for the past year, we see a sequence of smaller features.[1] These include ML-driven quick replies for comments, being easily add smart links to people/docs/lists, being able to add image watermarks, and Japanese grammar suggestions. These announcements are in small blog posts [2], and are usually covered by the tech media [3] (largely summaries with a bit of flavor or - cheekily - instructions on how to turn features off). It is hard to feel like there's major progress in Google Docs when features, even useful ones, trickle out like this. Perhaps the big release every year model isn't that bad, for communication purposes. It's just not in the DNA of Google or any online service, however.

If you look at the roadmap for Google Workspace, it's very much about collaboration.[4] This plays to the brand and strength of the online-first vision of Google Apps - it's easy to jump in and collaborate on docs, the suite works well together. I think companies that choose Google Workspace do so to transform the way they work. It's not really about just replicating the Microsoft experience on the web.

That said, I think Microsoft has done an amazing job pulling their apps to the web and adding collaboration/sync. Their online version of Word has basically no caveats, and their realtime editing is even better than Google Docs in some edge cases. So its unclear which way the market will go. Perhaps Microsoft has effectively fended off the online-first threat and can use its inertia and muscle to keep Office at the top. In any case, we'll move to a more heterogenous world where many suites or even individual tools are viable businesses.

[1]: https://support.google.com/a/table/7314896?hl=en

[2]: https://workspaceupdates.googleblog.com/2021/10/easily-add-t...

[3]: https://9to5google.com/2021/10/20/google-docs-menu/

[4]: https://cloud.google.com/blog/products/workspace/the-future-...

Disclaimer: I work at Google and used to work in the division that develops Google Docs. These are all my opinions.
WASM Monero miners were a big problem years ago.
If you're in the US, you can release works into public domain by writing "This is public domain".

In other countries, public domain doesn't exist and in order for someone to use a work, there needs to be legal proof that you have the right to use it. Hence the requirement for licenses.

In a lot of ways, I prefer the latter approach because it puts the burden of proof on the copier, not the creator.
Cloud Technology News of the Month: February 2022
I find it incredible that Docs is still unable to number headings. And they're trying to sell it to large organizations...
Are you blind?

- https://www.bbc.com/news/world-europe-60567162

- https://t.me/odessa_info01/19201
Shane Warne RIP
Shelter UKR
Society is still grappling with this new world where being technical and good at it matters as much as, and in many cases, more than knowing people (business) or rules (law).

I.e. business/law/finance used to run the world for centuries, suddenly technology talent is valued, but the old power structure doesn’t know how to keep these people a peg below where they ‘belong’. Spending more money, and being the ‘boss’ of people will be ‘valued’ by the ōld-ˈɡärd more than technology chops for many years to come.

Forcing people who want to have more of an impact and be paid more into ‘boss’ like rolls is a causality of this old power structure being challenged.
And it turns my computer into a nice little space heater.
One problem with this strategy is that you never know if there has been a leak. Proactively changing passwords protects against such leakage, such that the leaked password must be used within the window where it is still valid.
My journey for dual displays with my M1 Pro Mac (2021)
If you do not reuse passwords and one of them does leak, then the only thing affected is the site/service that was compromised. Hence the word "unique" in the title.
I think it was in-use more than you might think. I remember seeing a program about it and there are plenty of people needing to shift large cargo at expedited speed and as one customer put it, "if you are 2 weeks behind, you can pay for the 225 and buy that 2 weeks back compared to a ship". Also, the amount of time it takes for them to fly these vast distances means it was only available 2 or 3 times per week anyway.

They had an office in London for booking and planning so it must have earned them some decent wedge, especially without any direct competitors.

I don't know how much maintenance it needed in between though.
For companies/job seekers: I'm working on a remote job board called Remote Leaf[1], a curated remote job newsletter with a personalized jobs list based on the user's location/timezone and skills.

Happy to provide a special discount for companies posting their remote jobs. Just send me a private message on Twitter or email(in bio)[2]

1. https://remoteleaf.com

2. https://twitter.com/abinaya_rl
its not out of the question, especially since resistance in its very nature becomes more decentralized and dirty the second the government is weakened or falls.

Take a place like syria, it went from a centralized government to a heap of insurgencies and many sides killing people en-masse.
What a great society we live in.
Multiple studies in The Netherlands have shown that decreasing the speed limit during rush hour increases the road throughput. So this isn't the simple equation you try to paint, there is a nonlinear interplay between the average velocity, the variance of the velocity, and the vehicle/lane density.
Setting aside the absurd notion that form isn’t following function in existing aerospace design, can anyone knowledgeable opine on the claims made here about a vulvic craft being more aerodynamic than traditional “phallic” designs?
No, i crawled many multi-gigabyte sites with my raspberry2 for days.
Phishing campaign targets European officials assisting in refugee operations
I tried this the other day. I had a document with some tables that could use extra width, so I switched to landscape mode and reduced the margins. I then adjusted the width of the tables so they looked decent at 10 inches wide.

Later, I turned on pageless mode. Now the tables all had horizontal scroll bars. From TFA I see that I could change the view to medium or wide, which is a personal setting. Thus, if I use pageless mode with wide tables my view may be fine. Everyone else has a miserable experience until they find this setting.
This happened in one of America’s great judicial hell holes, i.e. Plaintiff friendly law, judges, and juries, so it may turn out to be quite interesting. There are multiple attorneys with multiple 9 figure verdicts within a stone’s throw of this incident.
jobs.google.com?
What does this mean? (Is a pool family a family with a swimming pool?)
From a GDPR perspective, it also covers logs, internal training data etc. If a user requires to be deleted, you have to delete everything, there can be no trace of their existence.
I use an add-on called Codeblocks. It lets you select a block of text and will format it as monospace w/ syntax highlighting in various themes.

Not quite as good as native support (e.g. doesn't update dynamically), but otherwise it's pretty solid.
Fextralife is great, they are a crowdsourced guide site that’s immaculately arranged and styled. There’s none of the sluggish javascript bullshit that newer game wiki sites have, just fast loading text with the occasional image. A few ads but no constant barrage of autoplay videos in the corners and pop ups.

The thing to be done about Fextralife is “wonder if I should give them money after once again using them to make my trip through a mysterious game easier”.

IGN’s sluggish, messy wikis, on the other hand...
I eventually settled on LaTeX - although I considered dropping all the way down to groff/troff and having TeX be an intermediate step in the process.

Custom LaTeX classes made this more trouble than I was willing to deal with, so I decided to not pursue it further. I suspect Markdown might have similar challenges dealing with this, although given that the "verbose mode" is just HTML, I might be able to make it work.[1]

The print media type has been around for eons, but the @page rules don't support everything I need and are generally absent in WebKit browsers.

[1]: https://github.com/chrisfinazzo/resume
Indianapolis is a decently large city, and it's not that far north nor in an obviously cold mountainous region. Most people wouldn't recognize it as exceptionally cold for the US. It's also south of several large Midwestern cities. So, it was a good way to show that a large fraction of the US (and of course Canada) gets colder than Oslo.
correct horse battery staple is a terrible password :D
you're right that they would be slower, but if I'm using a high level language I already have made the decision to have things be slower, so that I can focus on my logic instead of how the hardware works. I think maybe what I really want is a number type that abstracts away ints, floats, fractions, and maybe others. Then once I have it working I can optimize it to use specific types if it's not running fast enough.
Americans telling Slavic speakers what's a more natural alphabet. Feels like a parallel to something.
Say what you will about Canvas, but it is the only way to draw multiple million of points in a time series chart on a browser.

SVG ain’t gonna cut it.
No, don't host your own site.

I ran the DCPHP group for years on our own site. We grew from ~10 to 400 over a span of 5 years. It was great. When I moved, the new leadership moved it to Meetup and grew from 400 to 1000 in a year. Meetup is the discovery platform for just about everyone out there.

In covid times, most groups stopped meeting in person (some stopped meeting at all) but Meetup is still THE place for discovery.

If you're deep and well connected into your local community (based on geo, not tech), you personally can probably skip it but you're also probably an outlier. Anyone less connected or new to your city or the field itself won't know how to get started without it.

Side note.. for 5 years, I ran ATXTechEvents - https://twitter.com/ATXTechEvents - and 50+ other cities broadcasting out via Twitter what was going on and that helped double meeting attendance but I realized pretty quickly, it was existing members. It drove some discovery but was more of a reminder system.
Nope. It is more like 1972 than 2022. It doesn't matter what Ukraine wants. It doesn't matter, in the same sense that it didn't matter what Iraq wanted in 2003, or Serbia in 1998. We need to wake up in the West. And Ukraine needs to stop thinking like a teenager who's listening to his dangerous friend's cheap advice (the US). They are nobody's good friend.
Unless I misunderstand you, you should be able to `ctx.drawImage` from one canvas to another, with `imageSmoothingEnabled` set to false, and it will do what you want.

https://developer.mozilla.org/en-US/docs/Web/API/CanvasRende...
ICANN rejects Ukraine's request to block Russia from the internet
They are just letting their emotions cloud their thinking.
Better yet, saying they won't invade, then two days later invade anyway.
What I want to know (but am too lazy to look up (-: ) is do the text metrics return the width and height of the text's bounding box, or is still just one of them? Can't believe this oversight has existed for so long, but that's the way the web works.

That said, I'm happy that canvas is getting some improvements. It's one of the more accessible ways to do fun things in a web browser.
Nicely put.

Your comment reminds me that I really need to re-watch ghost in the shell!
I can't tell you how pissed I was when the ex-Pres revealed my password with his "Man Woman Camera TV" rant.
It's a trade-off of convenience vs security.

If you're worried a password will leak, how frequently should you rotate it to maintain security? e.g. Even rotating yearly still seems a chore if you do it for websites you don't frequently visit (such as sites you made 1 order from).

The "add YYMMDD" or whatever is a way of working around a policy which automatically enforces a more frequent rotation than you want.
BMW i3 with range extender did that, don't know what kind of engine. Not quite intended as a PHEV, but I suppose it could run just on the ICE like most current PHEVs

Toyota's hybrids (Prius, etc.) have used Atkinson cycle ICE, instead of Otto (one maximizes fuel economy, the other power delivered, I heard).
Your comment was showing up as a reply to mine, so I assumed you were responding to me.

I read Norquist's article as more along the lines of "don't let the IRS determine what is and is not taxable," not so much about having them produce tax prep software. I suppose you can squint and read that, fair enough, but that does not address the issue of whether Norquist supports or doesn't support simplifying the tax code.
No. We should simply - like everything else - never lose sight of the source AND the context.

She doesn't get a free pass on Common (News) Sense 101 simply because her axe satisfies some bias one might have towards Bill.

If the info about his relationship is already known then...why is this on HN? So haters can hate?? There are plenty of other forums for such things. This isn't one of them.
One missed point, the advice is even slightly better than they argue, since they only argue that it's not necessary to change it, which is just an argument of convenience.

But updating a password is itself an attack surface. More so than merely using it to log in.

It's one of the times where an attacker may be tricking you into giving it to them, either by a fake page or app dialog, or in concert with maybe they have a way to receive the verification email or text.

Also it's a less frequent operation, meaning it's easier to fake. You are more likely to notice any tiny discrepency and detect a fake in the way your normal login screen looks than some account management screen.

Basically updating a password is a riskier action than the normal daily use of the same password.

And that alone is it's own even stronger argument for avoiding doing it unnecessarily.