skysight-inc/HackerNews huggingface dataset:
Strongly recommend watching Eurodollar University, Emil and Jeff have some unique takes.

https://youtube.com/c/EmilKalinowski
Contact is write only too?
I disagree that storing these separately is “the whole point of MFA”. Passwords can be hacked in a number of places, not just client side or in the password manager, so TOTP mitigates MITM style attacks where the password is known by an attacker but it was not gained from the password manager or the site. I certainly get that separating them would be theoretically better, but with TOTP in my password manager I end up using TOTP everywhere.
i disagree. there is nothing in common between the modernist “nice guys finish last” and the principles of the kings, emperors and PMs. the latter were driven by divine right, by imbalances in knowledge, by having massive armies, by thinking their were right. the former is a mainly US anti-elitism, anti-education mantra that’s been a staple in that country for a few generations.
As a self thought developer I have learned most stuff by trail and error, and making mistakes, and some finds are expensive.
Why OpenAI recruited human contractors to improve GPT-3
On what grounds? And how exactly would that work? Through piracy in international waters? Or will the US liberate ports in Russia, Latvia or the Netherlands?
My guess is nothing…
> I was sometimes assigned stories no one else on the team had done anything like before, so at times I couldn't even ask the senior devs for help.

And?

Stop putting yourself in a “junior engineer” bucket. There is no eureka moment on the horizon that will suddenly make you into the N+1 developer that’s capable of solving problems without help. This is it, this is who you are. There is no good reason that a junior engineer with zero experience can’t perform better than a senior engineer with 10 YoE on any given problem. The difference is what expectations there are. If you’re good, the expectations of others pale in comparison to the expectations that you’ll set for yourself.

Honestly, it sounds like you are having trouble transitioning from the school model of contrived problems with an ideal imagined solution to the real world where things are far more ambiguous and you need to use judgement. I hated school and did okay at it, but I do well at real work, and I have very little to say other than that you need to stop trying to game the system and you need to start thinking about solving actual problems. Homework is to jiras what a wrench is to a horse.

Are you working hard enough? How often are you checking out at 5pm? Are you productive while you’re on the clock?

Your manager deserves some blame for not keeping you on track but honestly to me it sounds like you’re

1.) yearning for clean tasks with prescribed solutions to be implemented, and it doesn’t work that way.

2.) not working hard enough

3.) not using general judgment about whether the changes you’re submitting are going to accomplish what they’re supposed to accomplish.
The headline is immediately debunked in the first paragraph.

“… after she allegedly threatened to call the cops”
Our API service doesn't store data, only load them into distributed memory for computing and API serving.

I think you're suggesting that a queryable in-memory cache isn't storage. I don't understand that. What is it if it's not short term, non-canonical storage?
I would say don’t duel on this too much. Your current team seems unfit for your growth. It’s a single data point. Stay curious, ask questions, make notes (act of writing helps with memorizing). As a newcomer in the team, always ask for a buddy/coach.

If i would you, look for new opportunities elsewhere.
It's basically like you described - an informally specified set of rules the various "big players" in e-mail enforce. There's some consensus about the things you "have" to do to participate in e-mail but it's generally not a black and white "do these things and you'll be fine" situation.
> ...Since Florian actually got it working, my instinct is to just import Florian's version into git. Does that seem reasonable?

Bringing the original code to a runnable state is fairly straightforward using the latest gcc with mostly default options. Either with or without -Wstringop-overflow=0 (to take care of the string type design). Just the three funky lvalue decrements need to be untangled. Well, and the newlines added in the help.c

However, getting the resulting interpreter to pass the available tests (make test) could be a challenge. Not sure if anyone interested got these tests pass fully, which are mainly array and hash tests. It'd be helpful to have the included examples also run properly.

This may need either a code review or in-depth debugging to figure out the problems. Before embarking on extensive cleanup, modernization, porting to other platforms.
The team from 1password did a nice writeup, when they introduced storing TOTP in their password manager.

Gist is: Most people treat TOTP as a second, time based password (multi step authentication) instead of a second factor. If you truly want 2nd factor, you should never sync your passwords to the phone you are using as 2FA, and never use your passwords on the phone you are using as 2FA.

So it depends on your own security concerns if you want to treat TOTP as a true second factor or as a secondary, time based password only.

https://blog.1password.com/totp-for-1password-users/
The email user sending spam will get automatically suspended. The account admin can then un-suspend it though. From the TOS it seems to be an option for Google to permanently suspend such an email user. Not sure when that would happen though.
Short answer: Password managers offer this funcionality because there is a demand for it.

Long answer: In practice, TOTP schemes are used (from a webadmin point of view) just to stop credential stuffing attacks [1].

There is very little additional security in generating TOTPs on a dedicated device, such as a smartphone, compared to generating them on the password manager itself. Threat models in which a separate setup would have a benefit include only breaches of your password database itself.

For savvy users with unique passwords, protecting against that threat model offers little benefit at a significant convenience penalty, as such attacks are unlikely to begin with. If MFA with hardware tokens is not an option, then it might not be worth the hassle of TOTPs.

As such, password managers that offer TOTP are useful in scenarios where using TOTP is mandatory and does not provide security benefits.

[1] https://en.m.wikipedia.org/wiki/Credential_stuffing
Best practices for Compute Engine regions selection
US sanctions usually work by denying violators access to US dollar flow, US customers, or just punitive taxes on US operations.

So even if they can’t go and grab the oil, they could force the issue: you buy this pretend-not-Russian oil, very well, next time someone pay you in dollars, we take a 75% cut.

But in the current climate, they would like to agree that ahead of time with Europeans who are right now dependant on Russia hydrocarbons for dear life.
Old stuff: https://web.archive.org/web/20160219044114/https://dl.dropbo...
Sounds more like an issue with the team and onboarding than a problem with you, IMHO. I say: cut your losses and swallow your pride, share what you just told us with a senior engineer, and consider yourself "back in training". If you still have a bunch of things to learn that you absolutely need, then you need to learn them. Expecting you to know things you don't know is both pointless and soul crushing.

> The problem is at this point I have been on the team too long to ask any basic questions, one of the senior engineers even pointed out they shouldn't be helping me with certain processes at this point.

This is both mean and unhelpful. And possibly a sign that they don't realize how bad they are at training a junior.
Thoughts:

- never stop asking questions

- don't get discouraged if you don't get the mentorship you are looking for

- get feedback from senior developers who like you

- don't believe for one second that there's one correct way to do things

- learn to write testable code

- when you're done learning on this job, leave & get a different one
Honestly if a junior made a mistake that costed one month, there is some issue with the process and I REALLY hope they're not blaming you for it.

Also, unless the sprint duration is four weeks and there's no dailies, I really can't see a junior being able to delay anything by 1 month in ANY sane company. Unless you're preventing people from working, actively sabotaging things (and skipping code review processes!), I really struggle to see how a Junior Developer would be able to slow a team down like that. If this is happening, that's a huge red flag, and you're not in a good team/company. I really don't think you're the problem.

> When I first joined I struggled to even know how to start things.

That's how it is with new companies. I'm at this for 20 years and at some places it took me six months or more to unravel the massive amount of stupid code and processes before I was productive enough.

> The problem is at this point I have been on the team too long to ask any basic questions, one of the senior engineers even pointed out they shouldn't be helping me with certain processes at this point

I'm a team lead and I ask basic questions all the time. Sometimes to juniors or interns.

What kind of things we're talking about? Opening a PR? Simple programming questions? Opening up tickets in JIRA? This is basic. But deciphering convoluted code or navigating convoluted processes? Using an arcane shitty ticketing system? That's not really basic level anymore. But even if it were, that senior engineer was out of line...

PS: If you think we're being "nice" to you on the replies out of sympathy, it isn't. This is for real. HN is the kind of community that would call anyone on their bullshit.
It's very cheesy to answer, please take everything here a grain of salt!

Maybe you should quit and find a team more able to help you learning? That kind of environment requires safety, both moral and technical. For instance, you should ask those kind of questions to your manager, and get effective help.

In the meantime, it sounds like you could work on two areas.

First, create a documentation on your work infrastructure and processes. If it exists, read it in order to complete / update it. If you don't know it, you will learn it. If it doesn't exist / is incomplete, that will give you more grounds to get the answers you need from everyone else. Also ask why the process /infra was made that way, what do they wanted to accomplish, did they succeed in their opinion, what could be improved on ?

Second, you could improve on your work quality by putting more checks in place:

- write down the "definition of done ": how will the world be when your task is complete? That will allow you to check whether your work is correct. For instance, the definition of done for an account request is access at the qa level. Does my request do that? No, since I asked for a prod level, but maybe it's the same thing? Let's ask for the qa level as requested and go ask the documentation / someone about the difference.
- for production changes, if possible try to filter out as much as possible the resources you don't need. If the ui is not enough, write scripts

The main idea there is to have the Swiss model of errors in mind : https://whatsthepont.files.wordpress.com/2013/09/20130926-22...
For an error to happen, it must go through all slices controls. Add more slices !
Speaking to other people is now harassing?
Some of it is literally beyond me. I am pretty sure my subconscious has a good thirty IQ points on me. I am a decent enough programmmer, mostly through habits and attitude, but sometimes I will have to just ... fiddle around, do the boilerplate, write documentation, whatever, until my subconscious throws me a bone and I get the algo I need. This often happens while I am falling asleep or waking up, whole diagrams just appearing in front of my mind's eye, everything explained.

This sounds a little superstitious but my intuition rarely leads me astray. It warns me, "Don't take that job, don't trust that person, you should go over here" very subtly and I have learned that if I ignore it, I will usually regret it. The job I felt I shouldn't take, despite it sounding perfecto, got hit with huge violations for OSHA and other things. The person I distrusted on instinct is later found out to be someone I would rather not be entangled with, and so on.

I don't know what that guy in there is doing.
What a mad phantasy... Undermining your closest allies' economy to win the war?

And, no, it cannot confiscate the oil and, even if it would, most of the energy comes to Europe in the form of natural gas, which is moved by pipeline. So, yes, the US can stop that by bombing Austria or Poland.

It's obviously a bad place to be in, strategically, for Europe to be somewhat reliant on Russian fuels. But you should note that current sanctions are already far more costly for EU countries than for the US: https://www.ifw-kiel.de/fileadmin/_processed_/f/2/csm_mi2022...

For Latvia, it's 64x more expensive. Even for Germany, it's factor 10.
Ask HN: Any Regulars on Postcrossing?
Are many of you sending postcards to strangers via www.postcrossing.com?

Maybe we could send postcards to each other?
I think being targeted by government or a similar class of advanced threat is not something you should really think about when choosing how you manage passwords, as they will have many ways to target you that don’t involve password compromise at all. Password managers and MFA are about protecting from account compromise by run of the mill cybercriminals. Storing recovery keys on a piece of paper in a safe place is perfectly fine for that class of threats.
I think the first step is to identify an area that you are interested in, for example music, cartoons, computer games, puzzle solving, 3D models, etc. If you only know C, then part of your problem might stem from the edit-compile-run-debug-loop. Look at more interactive languages, e.g. Python, JavaScript as with a browser Dev-Tools, Smalltalk.

Although Smalltalk is not a widely used language, it does have a large selection of interactive playgrounds that some people enjoy. Another option might be to do more hands-on project with Arduino - where you can build and program robots, various automatons, etc.
If you are really strict about 2Fa, then in theory you would never be able to use your phone that you use for TOTP generation to login to Websites that use this TOTP Code either.

So I'm pretty sure I already broke this separation due to convenience. So might as well put it in my PW Manager.
Technical writing will be safe, but only if writers embrace computer-aided writing.

https://passo.uno/posts/computer-aided-technical-writing-is-...
What do you want to create? Pick anything. What would be fun about that?

Your question is that broad. There are many, many, many axes of difference to explore.

Another way to look at it is "what's fun to you?" If you can't think of anything, you're out of luck. If you can think of anything at all, incorporate some coding.
Could you share a bit about the company? What space is it in? Size of the company? How long has it been around? Remote or in-person?

I ask because I think you should get started on the leetcode, trying to make it to one year, and start looking for something else. Assuming you're reading things right ("one of the senior engineers even pointed out they shouldn't be helping me with certain processes at this point"), it's hard to change perceptions, and you're better off cutting your losses. Think about the team, the company, what would have helped you be more effective, and look for that. Do what you can to set yourself up for success by finding something that uses your existing skills.

If you really want to stay, focus on delivering value and not delivering un-value.
I think we're largely in agreement then, but I still believe that it makes more sense to say that the definitions of OTP and CCA are incompatible and therefore it's just meaningless to apply one to the other.
You are very right. What I said was sort of incorrect. I'm referring to this in the UK:

https://en.m.wikipedia.org/wiki/Town_and_Country_Planning_Ac...

In particular it means that owning land does not automatically allow you to build on it.
The way I use XFCE is to mark all the applications I use as favorites so they appear on the top level menu, then it’s just two clicks to launch anything, way quicker than click-then-type-to-search.
Great. I look forward to the 100 more queries about "can we add this to our app".
From the practical standpoint, it actually makes more sense to bet on tails, because it may be a symptom of unfair coin :) If the coin is fair the choice is unimportant, if unfair you win.
Honest and naïve question, wouldn't you be afraid that the mainland Chinese government goes to war to take Taiwan back?

Or is this exaggeration from the western media and actually we are very far from a full scale invasion?
Because I consider Russia's behavior in Ukraine to be unacceptable.
/dev/null is quite webscale as well, writing to it is as fast as heck!
First micro-feedback platform based on Ethereum blockchain
Hi,
We created the first micro-feedback platform where coworkers can be rewarded by crypto currencies.
Currently in private beta with a couple of companies and we are looking for teams that value corporate culture and are progressive in the world of blockchain.
you can extend the same logic to what are managers in OS/hobby projects.

And what "project management" method is used.
Once you grow up, you'll stop just trying to score points. And the only one pretending anything here is those that feel their "just the facts" attitude to life is somehow superior.

Like, riddle me this: if you're such a rational genius that you're never motivated by this girly weakness called emotions, what's the point of telling us about it?
Yeah, but we’re talking about inbound port 25.
> Boosted subpopulations have fared much better within all of these 3 jurisdictions than the population at large.

Not lately, according to the data the UK has been reporting. The UK has about 90% of its population vaccinated with at least one dose, and about 70% of its population have had boosters. In last week's UK report, nearly 90% of the new COVID hospitalizations were vaccinated people, and over 90% of the COVID deaths. And 87% of the new COVID hospitalizations and 78% of the COVID deaths were boosted people. When the percentages of hospitalizations and deaths of people in a given category are equal to, or greater than, the percentage of people in that category in the population at large, we would not normally say that category of people has "fared better than the population at large".

Of course, as of this week, the UK will stop providing the data that I have just described. So we won't be able to see how these various populations continue to fare. That doesn't look to me like a government that is confident in the benefits of vaccines.
Interesting point, what would explain it is non linearity. If you get 20% efficiency at 5 but 35% at 7km depth it might still be worth it. Would still have to outperform exponential drill cost with depth
Does anybody know how NY Times decides to include or omit a comment section from articles? Seems random
Sometimes people get irritated because it seems like I over engineer my laptop. I can't get the damned HDMI working or maybe resolution is not proper. I pity myself and feel guilt that I'm wasting somebody's time. Point is, it's a candy shop when it comes to Linux, you make what you want. For me its okay to debug again and again.
> The businesses will still be better off though

Depends on the downtown area.

If there is enough population living within walking distance of the shops to sustain those shops then the businesses will be fine. And the area will be more pleasant for those who do live within that area, so that's nice. It does become exclusionary for those who live outside the area as parent poster said but perhaps that's ok, as long as the population density there is high enough to keep it going.

But many downtown shop areas don't have enough population within walking distance to keep the businesses viable. Those areas depend on people from farther out driving in to spend their money. For those, making parking difficult (too far, too expensive) can quickly go into a downward spiral of shops closing, area decaying, becoming less attractive to visit, leading to even more shops closing, until the old downtown core is a ghost town.

So population density is key. If density isn't there one can't just slap a prohibition on cars/parking and expect it to work well.
Even more relevant now in the context of the Russian invasion of Ukraine.
If you lock your password manager with a hardware security key, you get the best of both worlds. The NFC Yubikey works well in this niche.
But Google has a whole set of AI writing tools - https://experiments.withgoogle.com/collection/ai

So by their own definition they are producing spam?
Confused, and probably mistrustful of whatever organisation confirms their existence.

The problem with UFOs is not the aliens part, and only to a certain extent the government conspiracy part - it's mainly the absurdity of the central claim: that aliens pop in on earth every so often to probe random people, blow up the occasional aircraft, and appear as shining lights in the sky every so often.

Well, why? Why would doing any of that make any sense to an alien species that must (with our best understanding of our local interstellar geography) travel several light years just to get here?

It's like if Christopher Columbus landed in the Americas, and decides "huh, okay, we've got to this place, but let's not actually interact with the locals or claim any of the resources, or really do anything that would make this trip worthwhile; we'll just float just off the coastline and stare at them through our telescopes for several decades instead".
The research hasn’t yet been published in academic journals, or peer-reviewed. I believe that why that specific language was used.

Nonetheless I find these new discoveries fascinating.
Trainee surgeon is struck off for dishonesty over research paper submission
Good to know.

There is near zero overlap between NFT stuff and 3D virtual worlds that actually work and have users. Despite all the PR about Decentraland, few people go there. Here's the current user count, from the live servers. Total is at the lower left.[1] 1222 connected users right now. That's all. (The only trustable number is connected users right now, because that's checkable from outside.) Biggest user count I've seen is 2600, a few months back. The trend seems to be downward. Decentraland claims large numbers of monthly active users, but those numbers may be fake. If you don't connect with a wallet, you get a new identity on each login.

I've been disappointed. I want to see big virtual worlds, like a bigger, better version of Second Life. We are not seeing much implementation from the NFT crowd. At best they bash something together with Unity that looks like My First Unity Game. At worst, they just sell NFT "land" and claim they'll have a 3D world someday.

[1] https://decentraland.github.io/catalyst-monitor/

[2] https://restofworld.org/2022/investors-land-metaverse-decent...

[3] https://www.unrealengine.com/en-US/wakeup
What really bothers me when I see a project like this is that the window manager should be able to do that with every application, in a standard way.

Docking, tabbing, window-splitting, switching between the windows organized this way should be a standard feature, much like resizing, going full-screen, dragging, minimization, etc are.

I can't believe I'm the first person to come up with this idea, so I wonder what historical precedents are there. I can't remember any :(