skysight-inc/HackerNews huggingface dataset:
It's still an additional authentication factor, so in most circumstances, yes it would benefit security. However, you can (and should) use U2F for 2FA, which involves hardware making cryptographic assertions that cannot be phished or man-in-the-middle'd. It's possible to remove SMS as an option after turning this on in Google settings, but unfortunately not so with many other providers.
> Ctrl + x + Ctrl + e : launch editor defined by $EDITOR to input your command. Useful for multi-line commands.
--

Great, I was just trying to remember that key combination the other day. Just got back to work after being for awhile for a child bonding leave.
Ah, thanks for the detail regarding the origin of this. For some reason I just assumed it came out of some scrum cult type thing as the rise of that was also for around the time OKR became part of the lexicon. I completely agree. Are we just stuck with this then for the foreseeable future I wonder? It seems to be that there are enough people that share this sentiment that this whole overbearing process ritual has become largely performative and toxic.
As someone whose primary social media is in the Fediverse, the discussion in this thread is ... confusing? It's so disconnected from my experienced reality of the Fediverse I don't even know where to begin.

Functionally, my experience within the Fediverse is it's literally just Twitter but with moderation fully broken up between instances and not agreed on. An instance's administrator(s) can decide what instances users are allowed to interact with. This is done either via whitelisting or blacklisting, though almost all instances work via blacklisting. Furthermore, administrators have total control over moderation.

Users pick the instances that closely align with their own ideals. If they don't like the moderation, they can move instances.

The software that backs the Fediverse and the software that consumes it is quite varied. Users are unusually adept at navigating all this.

We had the same sort of frontend diversity in Twitter for many years. This isn't much more than that, honestly. Now you just can match any client with any set of moderation rules you like best. It's very much a free market approach to the question of moderation of user generated content by Big Tech.

When it's so easy to move between instances and you have a large selection of moderation rules to select from for your account's "residence", you no longer really have a legal leg to stand on for "censorship" because you can just move next door where explicit adult gifs are totes cool and your followers will be updated with your new home. There's literally a network of instances that can be as moderated as your most loathsome ban happy video game board to as unmoderated as your favorite anonymous image board. And you get to pick. Not Musk. Not wall street. And certainly not Congress.
I also had a burnout recently.

As far as I know there are no different kinds of burnout. A burnout is always caused by long periods of stress exhausting the body.

The causes of stress can of course be very different. Working below or above your level can cause stress. But also long periods of physical pain can cause stress. Or being overstimulated all the time. And it can be a sum of all kinds of stress. For example when you struggle in a relationship it is much harder to cope with stress at work.

Stress eats your energy.

It's also difficult to prevent a burnout yourself because after a long time you can get used to being stressed. You forget how it is to be relaxed.

Sometimes it is just not clear what caused a burnout. It just adds up.

The best way to prevent a burnout and to recover from it is to accept you are stressed and tired and you need to step back.
This is also the most difficult thing to do.
> (though it would have been better if single characters would have been used for McCarthy operators and double characters for the bit string operators)

(It probably is better on net, but) not as much as one might think, actually. It's a clear win in terms of Huffman coding, but there's also a general principle that small infix operators have higher precedence, and large ones lower precedence, like how multiplication in math notation uses "·", or more often nothing at all, while addition uses "+". (It also shows up in natural languages; consider "Tom and Dick and Harry as well as Alice and Bob".) It's (probably, usually) worth subverting for assignment, because "=" is used a lot, but I'm not sure if it's a good tradeoff for boolean operators, eg:

if(x == 3 & y == 5) foo(); // look's a bit too much like it's saying
if(x == (3&y) == 5) foo(); // ie (x==(3&y)) & ((3&y)==5), rather than
if((x==3) & (y==5)) foo();

Though, like "=", the initial misleading hueristic might wear off with sufficient exposure, and you can usually fudge it by adding spaces around the low-precedence operator.
Advice: Get out and walk at least once a day, and try to look at things far away once in a while. Otherwise, if you're just staying inside as a resulting habbit of Covid, you can give yourself pseudomyopia (temporary near-sightedness) which can be scary (source: happened to me recently).
that's smart. We always had 1:1s where we would just step out and walk. In a way, it forced 1:1s to be 30 mins long. Now 1:1s have become "you can have 15 mins back in your day" lol. 1:1s can definitely be done walking, even if some of the other meetings can't be.
Whitelisting transactions is a fools errand and not a policy solution.

If that leaves everyone with a void and absence of any policy solution, that's where we are.
> We generally refer to it as the Fourth Amendment

Help me understand what protections against warrantless “searches and seizures” has to do with the State regulating medical procedures?

> 3rd amendment

Which says: “No Soldier shall, in time of peace be quartered in any house, without the consent of the Owner.”

I’m at a loss. You understand the Constitution is a legal document, right? Not a sequence of metaphors and allegories? Is a fetus a “soldier?” No? Then the Third Amendment is irrelevant.
> A standard tournament with 100 golfers playing a 165-yard hole with a $10k prize sets an event back ~$235.

The $235 price just seems like two high a cost. I don't think the hole in one contest adds that much value to the event experience. If you are charging $80-100 per participant, and the course is already charging you $50 per player. You are eating 5 players worth of profit. These contests are always on the hardest, 170+ yard holes, so an ace is more rare than the 1 in 12.5k statistic.
I really wanted to do this when I was younger, but the complications of filing taxes always turned me off the idea.
> What you're suggesting is the equivalent of saying they should wait until morning to go through the alley.

Exactly. And yes, it depends on your threat model and how much you personally value your privacy. If someone wants to avoid leaving any footprint, more power to them. This should not prevent other people from enjoying better baseline privacy. We can have both: decent privacy by default, and possibly much better if you want to.
The corruption Lord Nawaz Sharif is there in London, UK
> Current solutions like Docker, Sandstorm, Cloudron, command line scripts etc. are "easy" for developers but not for ordinary users. What is easy for ordinary users? Installing a web app by uploading files to a folder on a server using a GUI FTP app is one example for PHP.

Eh? Installing an app on Sandstorm or Cloudron is basically the same UX as installing an app on your phone. Certainly much easier than uploading files to an FTP server.

I agree with your comment with regards to Docker and CLI.

I'm also happy to agree that Sandstorm and Cloudron hosts are much less ubiquitous than PHP hosts, and that's a real blocker to ordinary users... but it seems weird to classify them as developer-oriented on that basis?

(Disclosure: I co-founded Sandstorm.)
“Among the weirder things he’s insured? Cow patty bingo (video here).

“It’s big in the Midwest,” says Gilmartin. “You divide a big field into, say, 100 squares, give each one a number, then let a cow loose. If the cow poops on a preselected number, the person wins a prize.””

I burst out laughing at this one. Can any Midwestern HNers confirm? Are people watching the cow with bated breath? Are plots closer to the gate considered better?
So "web servers" is a particularly competitive category and there are number of options that are all solid choices. For most categories I have 1 or 2 options with 1 recommended. For web servers I have 6: axum, actix-web, warp, rocket, tide, and poem. With a couple of sentences for each explaining why you might or might not want to choose that option.

For me Axum should be the default recommendation because it's the least quirky option. It's also a very thin layer on top of hyper, and built by the tokio team, both of which have a very long track record.

Actix-web is a fine choice, but it's a bit of an odd duck in things like not being based on hyper, which makes it a little harder to integrate with the rest of the ecosystem.
What did it expose specifically about him?
You can't use RAII in Rust? What on earth could this possibly mean? RAII is an extremely pervasive pattern in Rust and is fundamental to many of the safe APIs in the standard library.
relevant: https://brython.info/
Brython is designed to replace Javascript as the scripting language for the Web. As such, it is a Python 3 implementation
As a middle-class/small-rich person, how does anti-ML, KYC legislature make my life harder and poorer in any meaningful way?

I take my paycheck, and I invest it into the SP500. My investment costs are minimal, and my investment gains are correlated with the overall health of capitalism.

In what way does KYC or AML affect me? I'm not looking for theoretical tangents, I'm looking for tangible negative impact.

I understand that there are criminals cheating the system, by doing something illegal, and then working around those restrictions. But how do these restrictions place an onerous burden on me? Showing ID to open a bank account is not an onerous burden that keeps me poor.
Apple patents a Surface Book-like iPad with macOS
Clear safety glasses block UV as well as tinted & polarizing sunglasses.
Isn't the entire point of Mastodon to do exactly what Elon Musk is buying Twitter to do? Like how does the buy out of Twitter push people to Mastodon, if anything it'd bring people back from Mastodon to Twitter.
Equivalent in Common Lisp:

* (let ((a 1))
(defun foo ()
(setq a 2))
(foo)
(print a))

2
2
I've had pretty bad burnout earlier in my career and this is what I am doing now

* Better frameworks. If a framework adds complexity, it needs to enhance the feature set and developer experience by 2x. Otherwise, I just stick with the basics. Example: I was working on a react codebase with insane level of hooks, contexts, 7 layers of abstraction. Solution: Axios/Fetch right next to the form, entire backend functions in the controller: no f's given.

* Business requirements first: I hack off 90% of Agile methodology and just do what makes sense. Which is a balance of acceptance criteria and user stories, or contract driven development to pull the features into production and deliver.

* Thursday and Fridays I don't work, and if it do, it's on something completely new or exciting. Last week I played with DallE as an API. Unfortunately this means less pay.

* In the winter if its sunny out, I leave around 2pm. And come back and work 7pm-10pm.

* One meeting a day, or every other day. And Monday's meeting I come in fresh and excited, cite what I am grateful for, and talk about how incredible everyone's effort is. It can sound cheesey but it works for me.

Last burn out was right before the pandemic. I took a position at a startup that told me they were light on meetings, but I ended up spending all of my time in meetings and getting absolutely nothing done. So I left, and took a big break. I forgot a lot of things but realized what I forgot were skills didn't matter. Attitude matters over skill. I am not interested at all in React 18 and instead focusing on Vanilla JS, HTML5, just regular CSS, and just SQL. Day in day out skills. Stuff that won't change in 10 years. If I forget something like a new feature in React 18, then my mind is telling me it is useless in the long term.
Man, this thread is such a shinning example of why "trust, but verify" is a phrase.

There is ABSOLUTELY an option to enable 2FA on a Google account now that does not require giving them a phone number. There's a clear "Advanced Options" link that lets you choose a security key, which is what folks should be using anyway.
I tried learning invisible stiches to repair some clothes - nothing as hard as kaketsugi - but later found out about easier techniques that leave the the results are visible but still looks good.

- Sashiko https://en.m.wikipedia.org/wiki/Sashiko
- Boro https://en.m.wikipedia.org/wiki/Boro_(textile)
- And this sub with heaps of exampled and tips https://www.reddit.com/r/visiblemending/
> I just don't see the excuse for building something that isn't at least as good as solutions that already exist,

Why does anyone need an excuse to build anything? He’s doing this in his free time. He doesn’t need the internet’s permission.
Have fun with partitioning...and ffs(2) ~aka ufs2
I walk about 3 miles a day. I'm interested in trying sandals + socks. I'm concerned about exposure to MOAH substances in Vaseline. Is there a good alternative to vaseline? Shea butter?

Do the Teva XLT2 sandals provide enough shock absorption for walking on concrete?
Yes, I had exactly that thought as I was going through it. I could see many times a pattern, but was it the pattern that they wanted? Pretty small samples to triangulate on.
Most of python system i've seen is full of bugs, lack of stability, which causes huge damage from developer resources as well as operational costs. It's too hard for a junior Python developer to produce a reliable system.

One of the reason as i know is, they have no idea of using unit test.
Awesome that they use a 3:2 display instead of 16:9.
If ever you get tired of Google - and for those who get tired of Apple or Amazon or whomever they have entrusted their digital photo archiving needs to...

Any of the personal cloud things - Nexcloud, Owncloud, Seafile, Syncthing and others - can be used to sync files - and with that photos and videos - from mobile devices to some server somewhere. This can be the server-under-the-stairs, your NAS at home, a wall-wart with a Raspberry Pi and a drive taped together, a VPS or a commercial entity offering these as SaaS. You can keep using your phones with or without Google, that is up to you. If you run the stuff yourself you'll need to install and configure the parts which make it work, if you use a commercial instance you just have to install the relevant app and tell it to sync your data. You can do this in parallel to using Google Photos, just to make sure you have a backup in case Google wants just that one extra piece of personal data to allow you to access your photos which makes you give up on them. Just one more piece... and one more please...
Heart of american liberalism right there. "Other people living under slavery is better than me having to deal with the political consequences of ending it."

Same shit continues really. The "blue states" might be "free" of "the conservatives" even now, but what about the people living in those states? Abortion isn't even that overwhelmingly unpopular in the south, those states are just gerrymandered to shit and under effective voter suppression. But hey that's their business right let's just leave them to it.
Is this a fair summary?

I rationalize my choice of inaction when I feel obligation or guilt to take action. I am unable to observe the interior rationalizations of others' inaction.
I used to work at a place that ran a hole-in-one competition at many golf courses around North America. Can confirm that we used insurance to cover our ass.
The book is about the inner design of software (how you implement your product), not about product design (what the user sees).
The problem with using a burner phone is that you could be assigned a phone number that has been blacklisted due to its abuse by a previous owner. Then Google terminates your account as soon as you use the banned number.
> Let me propose an experiment. For a whole week, do not consume your regular media diet and instead consume “the others”. Walk a mile in their mocassins as it were. Take it as an exercise in empathy.

Here are the results of such an experiement.

https://www.theguardian.com/media/2022/apr/11/fox-news-viewe...

> In an unusual, and labor intensive, project, two political scientists paid a group of regular Fox News viewers to instead watch CNN for a month. At the end of the period, the researchers found surprising results; some of the Fox News watchers had changed their minds on a range of key issues, including the US response to coronavirus and Democrats’ attitude to police. Polls have previously shown that viewers of Fox News, the most-watched cable news channel in the US, are far more likely to believe the false claim that the 2020 presidential election was stolen than the average American, and are more likely to believe falsehoods about Covid-19. By the end of September, the CNN watchers were less likely to agree that: “It is an overreaction to go out and protest in response to the police shooting of Jacob Blake in Kenosha, Wisconsin” and less likely to believe that: “If Joe Biden is elected President, we’ll see many police get shot by Black Lives Matter activists”, when compared with their peers who continued watching Fox News. The CNN switchers were also, as Bloomberg’s Matthew Yglesias reported, 10 points less likely to believe that Joe Biden supporters were happy when police officers get shot, and 11 points less likely to believe that it is “more important for the President to focus on violent protests than the coronavirus pandemic”. In addition the CNN viewers were 13 points less likely than the Fox News viewers to agree that: “If Joe Biden is elected President, we’ll see many more police get shot by Black Lives Matter activists.”

> The people in the experiment, Kalla said, were “overwhelmingly pro-Trump Republicans”. Given Trump had spent much of his presidency bashing CNN – a regular chant at his rallies was “CNN sucks!” – the results are particularly surprising. “A lot of people might expect this audience to completely resist what CNN had to say, but we see people learning what CNN was reporting and changing their attitudes, too. It is therefore surprising that watching CNN had any impact at all in this experiment,” Kalla said.

¯\_(ツ)_/¯

https://doi.org/10.31219/osf.io/jrw26 (The manifold effects of partisan media on viewers’ beliefs and attitudes: A field experiment with Fox News viewers)
Ironically, I think deepL has made this better for novels. It's shocking how good human-edited deepL transitions can be, and how fast they can be to produce compared to fully human translation.

Before anyone brings it up, it doesn't remove the need for a bilingual translator. They still have to do (sometimes significant) editing.
I actually had a chat with a friend about prize indemnity insurance, he's a Lloyd's guy.

In the end it's the law of large numbers, pretty much what a casino does: take lots of small positive bets, don't let one bet dominate. If you do get something too big, syndicate it with some of your competitors to spread the risk. Of course also make sure everyone who comes for insurance is actually what you think, like the guy in the article says it's not necessarily a hugely detailed check but it is enough to stop the worst frauds.

You want a model that's robust, and you only have so much data about how often some guy hits a hole in one or a half court shot, and there's only so much you can know about whether they are a pro and the distance to the hole.

The big problem seemed to be competition. You only get to write the insurance if you're the best price but the best price is not necessarily one that makes sense for the business. If some guy is buying market share with a loss leader, what do you do? Every segment of the market could be affected by this at a given time.
The Far Sound: Bell Labs History of Long Distance Amplification
Driving is very stressful, and inherently risky (most people a cramped up in their car). Also, 45 minutes of walk is near ideal to get endorphins (AFAIK).

I try to double fork my commute, either explore some new path or do some groceries so the 45minutes are not just walk/train.

Right now I do bike - train - bike (but, surprisingly, trains are unreliable this month .. they're the one making me late :)
The Problem with Digital Marketing (Part One)
PayPal's IndyMedia Wipeout
Everything I said is true.

They all rely on having a mutable member reference to affect the outside world, which the borrow checker rejects. You can try to make it happen with a generic lifetime parameter for your structs, but you end up making invisible the thing you're pointing at, making it useless.

One can use unsafe to have shared mutability, or sacrifice speed with Rc/RefCell (increments/decrements) or Cell (copying, especially bad when copying Vecs which causes heap allocations).

Basic observers aren't possible. The closest thing we can get is some sort of modified observer-like substance that returns a command, which requires a lot of wiring and incidental complexity. [0] [1]

Dependency injection (the pattern, not the framework) isn't viable for the same reasons as observers: you can't have a mutable reference field without causing a lot of headaches elsewhere.

RAII isn't possible without sacrificing speed or safety. Most usages we see are backed by unsafe (FFI) or RefCell. We can't have multiple objects whose drop() affects the outside world, because we can't have multiple extant &mut references, and we can't just pass them in via parameters (because drop takes none).

Back references aren't possible because of the circular problem (having a mutable reference to your owner means nobody else can read it).

I'm not advocating for Hare, I'm just addressing the "I just don't see the excuse" remark, which can be ignorant of the costs of the borrow checker. The borrow checker is a great step forward, but not always a good tradeoff. An architect needs to be aware of these sacrifices before going all-in on a paradigm.

[0] https://stackoverflow.com/questions/37572734/how-can-i-imple...

[1] https://www.reddit.com/r/rust/comments/pwqju6/is_there_an_un...
Thank you for posting this. I have had a second email account setup at the company I work for, and hit this exact problem. I thought I was going mad! Especially because I had enabled 2FA with TOTP with an existing company account just a few months ago.
You should have been memorizing Tau, of course! Don't embarrass the human race to our galactic neighbours. Imagine what we'd think of receiving a signal that was an encoding of e/2?
I've tried that a few days ago.

You always need to add a phone as your first MFA method.

A simple hack though:you can add other methods, then remove phone.

Your account was likely created before phone MFA was mandatory (as the first method).
The Problem with an Always Urgent Workplace Culture – By Gustavo Razzetti
Wow, I was hoping for some feedback. I didn't expect to get on the HN homepage.