skysight-inc/HackerNews huggingface dataset:
If there is interest in other formats and people are willing to pay on our model for them we can likely add instance types for things like this.
Unless you're pile is in the millions, there's no way you can handle potential US health care costs w/o insurance. The catastrophic costs might damn near be infinite. Unless you have one hell of a DNR clause for your heirs. For example, 3 weeks in a small-hospital ICU in PA in 2009 was 450K. We've had a little inflation since then, and all that this paid for was keeping the patient alive. No surgery, etc.
Thanks for pointing this out; I was unaware. There's also a table of cross-sections later in the linked Wikipedia page, but I hadn't paid much attention to it because of not knowing how to perform a meaningful comparison.
Ask HN: What is wrong with Xcode? Why are people complaining about it?
I haven't encountered any major issues in recent versions.
It would be an apt username, given that tosh is British-slang for rubbish.
How do you solve double spend?

So you make your objective rules as to what is the best block by defining some measure of quality (maybe include the most transactions that fit in, maybe sorted by fee-per-byte or so).

Now all the good nodes agree on the next block B1 and then start working on B2 (not much work to do, because no PoW, but whatever, they build the next block B2.) Meanwhile, evil actor Eve has transferred a lot of money in B1 to Alice, and received something worthwhile. Now she makes an alternative block B1', transferring the money to her friend Bob instead of Alice, where B1' has even higher quality (higher fee, say), and quickly creates B2' and then B3'.

How is a new node coming in to decide between the chain B1->B2, and the chain B1'->B2'->B3'? The latter chain is longer and has higher quality.
Are these not constant enough?

https://news.ycombinator.com/item?id=31272505

Surely there is some time allowance for extreme changes in supply and demand for margins to settle down again.
Games are a fun way of trying out a new toolset. I've implemented a few sudokus now.
I don't necessarily begrudge the authors for including chapters on advanced topics, it's not like people have to read the whole book. But you raise a valid point. For languages like OCaml that are both large and also veer into PL research territory, some guidance about how many of the advanced topics one needs to understand to be a "real world" programmer could be a big help to the language's adoption.
Why would they pay anything? Is the government not wiretapping everything through XKeyscore or the like anyway?
Apparently they've decided that lobbying is their most important product.
You might just want to integrate a policy rules engine like open policy agent: https://www.openpolicyagent.org/ It can act as a server which you bounce a subrequest against to get an authorization answer from a policy you defined ahead of time with a simple language.

And if you don't have time or want to do that, check out Pomerium it's basically a forward auth proxy with OPA policy engine integrated into it already: https://www.pomerium.com/
The book ‘Turn this ship around’ by L. David Marquet goes into a little bit of detail about this technique and also about managing a nuclear submarine more generally. Great leadership reference!
I guess you will still be able to install FreeBSD manually by just directly accessing the (virtual) storage devices? That's how I install OpenBSD on my droplets. Through either FreeBSD or Linux first.
You can technically do that in Xcode, but I don't think they love it as it's been getting harder to do, even though it does still work. For colors it's more interesting since the color itself can be embedded in the source code.
Hey @brandonkelly, would Craft CMS be a practical foundation for a catalog of millions of "things", each of which contains anywhere from tens to hundreds of things? I'm thinking of a use case that I've been assuming would require an application-specific CMS, and now I'm wondering if Craft CMS might be an option.
The vendors here are proposing a platform synchronization method such that these are both backed up as well as shared across devices within a particular platform account.

There likely is a hardware key that supports export and import of keys (even if that winds up being a fork of say the Solo key firmware). However, as an end-user one doesn't want to accidentally forget to export keys for a while, nor do they want to worry about how to properly secure a backup. So, you likely would want additional infrastructure such as vendor software which would do this for you on a schedule.

There are interesting models which could work here, such as a factory-paired 'set' of keys being sold in the same package, where only the second key (the one you kept in your fire safe) has the necessary keys to decrypt and load such a backup.

The question is whether a security manufacturer would be interested in this, as the presence of such a mechanism may prevent them from getting certain security certifications and being able to sell/be used in certain markets and scenarios.
The design of OCaml/Reason is the sweet spot of functional programming for me but every time I must deal with Dune after working with the tooling of Go or Rust I want to stab myself in the face repeatedly and I think that maybe that might just be related to the general concept of "masses" + OCaml.
It’s time theft if you put in 40 hours of work a week while at home but then you’re told to do 8 hours a week of commuting and by the way you still have to do 40 hours of work.
I think “time theft” sums it up nicely. You had something and then it was taken away.
You should try reading it instead of just skimming it. Their steps for using TOTP (the first list of steps!) do not say anything about putting in a mobile phone or list any requirements about adding a mobile phone.

Then at the bottom for using a security key, it says "You must have already configured 2FA via a TOTP mobile app or via SMS". A TOTP app does not give out your phone number, does not rely on network connectivity, and does not require you use a mobile phone to use.

So 2/3 of the options absolutely do not require you give Google your phone number.
The ability to have a backup does not imply any ability to exfiltrate the master secrets.

It is enough to have a means to wipe out any information contained in the device, including any master secret.

At that point, there should be a means to enter a new master secret in the blank device, before proceeding to use it normally.

If a device provides this feature and it does not contain any other secret information introduced in it by the manufacturer, then it allows the owner to have any kind of backup that is desired.

I am also one of those who would never use a security device that contains any kind of secret information that is not under my control.
On paper, Python is not the right tool for the job. Both because of its bad performance characteristic and because it’s so forgiving/flexible/dynamic , it’s tough to maintain large Python codebases with many engineers.

At Google there is some essay that Python should be avoided for large projects.

But then there’s the reality that YouTube was written in Python. Instagram is a Django app. Pinterest serves 450M monthly users as a Python app. As far as I know Python was a key language for the backend of some other huge web scale products like Lyft, Uber, and Robinhood.

There’s this interesting dissonance where all the second year CS students and their professors agree it’s the wrong tool for the job yet the most successful products in the world did it anyway.

I guess you could interpret that to mean all these people building these products made a bad choice that succeeded despite using Python but I’d interpret it as another instance of Worse is Better. Just like Linus was told monolithic kernels were the wrong tool for the job but we’re all running Linux anyway.

Sometimes all these “best practices” are just not how things work in reality. In reality Python is a mission critical language in many massively important projects and it’s performance characteristics matter a ton and efforts to improve them should be lauded rather than scrutinized.
Thanks. Who said HN wasn't educational?

OK. I'll play:

1: Please RSVP
2: PIN number
3: Free gift
4: true fact
5: ATM machine
6: Chai tea

PS: PLEONASM sounds like a Spoonerism.
A lot of weird people in here basically arguing for goatse to be shown to children.

There’s no good reason to show children traumatic events. A lot of them do internalize it. Just because you didn’t doesn’t mean others won’t. This has little to do with bad parenting or other such things. Some children are just able to take what is in a film and vividly imagine it towards their own life or have too much sympathy.

HN obviously isn’t a great place to get advice about how to raise children from people who are known to be chronic over workers and absentee parents…
I don't see what problem decentralization actually solves. If you want fragmented special-interest communities of like-minded people, that's been easy to do for years. Listservs, subreddits, phpBB forums, newsgroups. Something like Twitter is about global reach. A place that a notable person like Barack Obama can message 100M at once and even interact with them in a controllable way. All sorts of niches and interests and personal connections can happen at once. And when the platform becomes unusable in one way or another, there's an authority that can be appealed to and they'll make a decision that best serves the platform. In a decentralized world, when there's disagreements factions just part ways. The authority problem is really just that the decision-making right now is generally skewed towards what will maximize revenue.
Exactly. You’d sell your california house making gains from 5 years. Rent for three years and then get 10% back.

I think you’d make more money just holding onto the house as I think the appreciation over three years would be higher than the 10% loan.
I feel like there's still not enough people that hear this, so I'm repeating it:

YAML is not a programming language, or a configuration language. It is a data serialization language. Biiiig difference.

YAML is not an interface any more than a CSV file is an interface. But if it were an interface, it's not a good one for humans. It's read-only for humans, and sometimes not even read-only for machines, as different parsers can result in problematic behavior.

YAML is not a "lingua franca" any more than the Latin Alphabet is a "lingua franca". Just because you can represent information using one written form doesn't mean two different subjects understand what each other are saying.

If you want a program (not a human) to save and load configuration, and require preserving data types and including triggers and templating, YAML is great for that. However, if you just want to save random key-value strings, JSON is simpler, and thus better. If Pulumi really wanted "the simplest, most broadly understandable and recognizable, and easiest to generate option", they should have gone with either JSON or INI.

When you start "extending" your YAML to include interpolations ("${ .. }"), now you've gone and started inventing a shitty programming language. Do not fall into that trap! Either process the entire file with a templating/preprocessing engine, or don't do interpolations or logic at all. Either write a language or serialize data. Do not conflate the two!! It's not that hard to write a real language parser anyway!
The mac model since the beginning is direct manipulation, not "select subject then apply verb". Obviously there are plenty of exceptions (for example text editing does include cut/paste!) but that's the baseline approach. And Windows made some specific design decisions to be different from Apple to reduce conflict (i.e. lawsuits).

In addition the UX research on direct manipulation vs select-and-operate seems to have shown that the mac made the right call, but the only work I've read in that area was done long ago.

This BTW is why shift-select doesn't work in icon mode (as a different commenter posted) because it was confusing for some people in a way that just drawing a selection for icons is not.
Curious: sell at what price.

This is something I have thought about for many years. If we have small form factor computers that sell for, say, $5-$25 why not distribute pre-configured, free, open source servers on well-understood hardware^1 instead of having to test on various different hardware possibilities, not all of them well-understood, or making assumptions about what hardware people should have available. IMO, there is value in server configuration. A purchaser could choose to compile and install the software herself but having an example of a working configuration can be invaluable. For me, good examples are usually worth more than countless pages of verbose documentation. The question I have is the dollar amount of that value.

The example I have thought about in the past, rightly or wrongly, is the WRT54G and what became OpenWRT. To me, focusing on one item of hardware initially has advantages. That is generally what vendors of off-the-shelf products do. Yet with open source software, there is usually an expectation that it must work on a variety of hardware, which is likely to make things more complicated.

1. I am not implying this has never been done or that it isn't still happening.
I understand that, but that's not supported by any current standard as far as I know. We'll need a new TPM standard for this, which probably also means it will take years before every device supports this feature as modern computers can easily last five to seven years if you replace the batteries and don't cheap out. FIDO needs something that works now, or maybe tomorrow.
My bank account number is also sometimes freely shared, so I think this is applied at national level (at least in case of Poland)
Trustless means you don't have to trust anybody to know that a transaction you initiate will happen as you expect. No one can block or alter a transaction you make. This is achieved through multiple cryptographic mechanisms - one of them is PoW.

PoW makes it expensive to attempt a double spend. You can't practically double spend because it is too expensive to do. The high cost of PoW is what gives the network security from double spend. Therefore it is not wasted energy. It is energy spent to secure against double spends.

You could use PoS but that is centralized and vulnerable to manipulation just like fiat.

Slow depends on what you are needing the system to do. If you need to pay for groceries, then Bitcoin is slow. If you need to do remittances or settlement then Bitcoin is extremely fast - much faster to reach finality than anything else. Therefore Bitcoin is only really useful as a base layer of the financial world. But that is also extremely useful. Faster layers like Lightning can be built on top.
Yeah, I recall being quite taken a back, initially, when a Hemingway profile mentioned his A&F spree.
Just technically it makes no sense. WebAuthn is a great technology that addresses many privacy concerns, but once they had an excuse collecting phone numbers they don't want to stop. Even though it's not the most secure method. Google, and many others are the same way.

2FA is often used as an excuse to obtain more PII from people, and to verify your identity, as a whole. Most businesses want to match logins to individuals, not roles. And that's what 2FA provides them.
I use the "multiple security keys" approach, and the biggest problem is keeping track of which keys are registered with which services and making sure the list is up to date. A few examples of situations where this is a problem:

1) I don't keep all of my keys on my person, so if I want to sign up for a service when I'm not at home, I have to remember to go back and add my other keys at a later time. If I wanted to, for example, keep a backup key in an offsite location such as a safe deposit box, this would be even more painful.

2) If I lose a key, I need to go and change every service to deactivate the lost key and add my replacement key. This is both time-consuming and error-prone, as it requires me to keep a full list of providers that I use keys with somewhere.

3) Some providers do not even allow you to register multiple keys.
128b/132b is the more efficient coding. The closer to 1 the fraction is, the less coding overhead it has, and 128/132 is larger than 8/10.
This is huge! It sounds like they're finally going implement cross-device synced credentials; a move I've been advocating now for the last two and a half years[1].

Widespread support for this feature is, in my opinion, the last thing needed to make WebAuthn viable as a complete replacement for passwords on the web.

The white paper is here: https://media.fidoalliance.org/wp-content/uploads/2022/03/Ho... Seems like they announced this back in March and I missed it somehow.

[1]: https://hn.algolia.com/?query=ajedi32%20webauthn&type=commen...
> 2FA is used to get unique identifiers and data mine people.

How do they get unique identifiers from TOTP?
I'm currently on vacation.

It is not automated but I concede that hn might have become an excessive hobby over time (wait until you see the log of articles I don't submit though! so there is also some curation on my side).

It basically is as simple as: I stumble over something interesting, thinking one thing that would be even better than this is a whole discussion about it, submit, crickets or discussion actually happens.

edit: many (most?) submissions (like this one for example [0]) are actually based on something I read on hn so there is some tree traversal and recursion going on as well now that I think of it.

[0] https://news.ycombinator.com/item?id=31272682 (h/t drewzero1)
Indeed, it seems to me that the inability of NTs to understand ASD minds is far more impactful in social interactions than vice versa. NTs have several advantages (some contingent on NTs being the majority) which should allow them to better leverage a functioning theory of mind to improve social interactions, but in general they fail to do so when interacting with ASD people. One such advantage is that NTs should just be more practiced at benefiting from their theory of mind, since they have more opportunities to do so. Emotional regulation is another; it's an often reported ASD trait that emotions originating from empathy can be quickly overwhelming, whereas the NT doesn't have this problem.
Github has alternative recovery methods though too, such as 2FA over SMS.
I'm just sad that treating someone like a human being is considered a positive

Sure. Everyone should be sad about that. There are plenty of people out there who don't have any willingness to treat people in service jobs like driving a taxi with any sort of humanity. Too many people will just ignore the fact that these people are living, breathing human beings with feelings of their own, and treat them as if either they don't exist, or that they exist to serve them. It's quite appalling.

Treating someone like a human being means having kindness, respect, and empathy for them. It means not expecting them to demean themselves just because you're paying them to do something. It's treating them well even without knowing them.

It's quite a high bar apparently, and a lot of people out there don't manage it.
I hear ya on issue 2, it’s one of the very few gotchas I run into (hot corners don’t work in this view either). If you weren’t aware, you can exit mission control with ESC or F3 again, if you’re used to that shortcut.

There must be something special about the overview screen that is stopping all default behaviour when in this mode, the cursor keys don’t work here either.
It may help to clarify the purpose of severance. Severance is typically not just a gift given to you to ease the pain of being laid off. It is a business transaction where they agree to pay you $X in exchange for various agreements after you have left: non-disclosure, non-disparagement, non-compete, etc. This often will tie you to behaviors that require you to play nicely with someone who let you go.

So when you think about whether you want severance, the question is not whether you need the money - it is whether the money they are offering is worth it to play nicely with them and with their reputation after you have left.

And in that context, yes, I personally love severance. There is rarely much more than fleeting satisfaction from ranting about being wronged by a company, so to me severance is getting paid to take some time to just get over it, move on, and not let a former employer take up any more space in my head than necessary.
> We can tell.

This is pure vitriol.

I couldn't tell. And I'm a frontend dev with over a decade of experience.
The pixel density doesn't generally refer to the density of the Bayer pattern, which can be even denser. Generally a cluster of four Bayer pixels makes up one pixel (RG/GB), but like most things in computing, the cognitive complexity is borderline fractal and this is a massive simplification.
Oh I loved The Queen's Gambit and thought the format was perfect too. However, I can easily see why a producer might have passed on a pitch.
I see that you are talking about exposure to negative stimuli (bad stories) having no demonstrable positive impact to individuals. Perhaps this helps: Psychology has examined the impact of lots of praise (the absence of negative stimuli - e.g not allowing criticism of others, getting a 14th place ribbon) on an individual, vs those that are given critical feedback (negative stimuli is provided and/or no positive stimuli is provided e.g no ribbon or “good job” for 14th place; being excluded from the running team due to poor performance etc) for at least the past 30 years. The overall conclusion of this research is that lots of praise is a problem, and fosters the development of narcissism and leads to poor outcomes when the individual experiences “real” results (e.g they got a high five for getting a “c grade” in high school, but in their workplace performance review they get a “meets expectations” and a verbal warning from their boss that if they don’t improve they will be put on a Performance Improvement Plan).

Lots of this research can be read if you look for the impact of developing high self-esteem in individuals (typically this is done as described above), and measuring the impact of these actions.

Example paper here: https://journals.sagepub.com/doi/full/10.1111/1529-1006.0143...
The folks that work on performance are not the folks working on packaging. Shall we stop their work until the packaging team gets in gear?
> the syntax for every different graph type feels like it was designed by different people working independently

That's mostly an artifact of trying to create a DSL for wildly different types of graphs. A unified syntax that covers sequence diagrams, pie charts, class diagrams, and more probably wouldn't be that pleasant, so why even try. You'll see the same thing in PlantUML.
Another effect that may be playing into all of this is that Android has a larger share of users who want a phone but not necessarily a smartphone. This demographic is less likely to buy an iPhone and more likely to opt for the cheapest thing on the shelf, which is almost invariably going to be running Android. These users basically do not exist as far as app revenue is concerned.

I don't have links but I've seen reports that on average, iOS users make considerably more heavy use the "smart" features of their phones (and thus, buy and use more apps), which lines up with this. While there are "power users" who make heavy use of Android's more technical features and deep customization, they probably aren't a large enough group to make up the difference.
Starlink took a $100 deposit from me over two years ago and I haven't heard anything, and their page to request a refund is broken.