skysight-inc/HackerNews huggingface dataset:
It never comes into contact with the memory of a network connected system, therefore putting it beyond the reach of phishing or malware thus solving the overwhelming majority of risks actual passwords are exposed to.
Leetcode interviews create dead weight in teams.

These companies used to hire the best engineers and give them free reign to make cool shit. Now it's hire whoever can write some DS questions, then have PMs control 100% of their time.

I'm sure multiple people wanted to build tiktok way before it was built by bytedance, but the company didn't give them creative freedom. Now it's the meme of metaverse. They're never gonna learn.

Eventually companies like tiktok, roblox, nextdoor, etc etc are gonna kill you.

Funnily it seems that Facebook might be axing the wrong group here. Good luck meta.
Documented here:

https://docs.github.com/en/authentication/securing-your-acco...
> … so the only thing that an authenticator could display on your screen is "do you want to authenticate as user x to website y" …

That is exactly why you want it.

Consider, for a moment, that you have a key which is used to log in to your bank account and some other, much less critical site. Perhaps a GitHub account where you store some hobby projects.

Without an unforgeable indication on the authenticator to show what you're logging in to, malware can wait until you're logging in to the second site, and thus expecting a prompt to use the authenticator, but actually trigger the authentication process for your bank off-screen. You tap the button or whatever on the authenticator thinking that you're logging in to your GitHub account but actually all your money is being siphoned off to who-knows-where.

A key that signs whatever request is presented to it without any indication to the user of what the request actually was is dangerous.
This can also work great with production system management of software. Any data you need for decision making/verification should be captured via screenshot/copying data (Word is great for this); and before you do any action, you say what you are going to do (or write out the terminal command) so that a buddy can verify what you are doing.
I find it very poetic that this crash was triggered by a poem, here's the poem:

> Duration and the body: I thought about something I had read a while ago which said that a body, the body, is defined by duration. That a body in the present is inseparable from its previous state, that a body is linked in a continuous strand… and so on and so on… I thought about my body. It’s past. It’s present… Which made me think about the word and. And. And. And. And. And. Then.

> Now. Now. Now. Now. Now, I felt in the present like I was living always alongside a previous body. This is why I had expected to find myself in the apartment when I returned home from California.

https://durationandthebodyelizacallahan.cargo.site/
you can get a long way with something like

$ echo "<sqlite3 commands / sql queries>" | sqlite3 FILE
http://www.brightsourceenergy.com/coalinga#.YnRFv-nMLUJ
> So you don't believe in democracy?

No, not really. It's better at preventing the worst harms of government than the alternatives that have so far been tried, such as feudalism ("aristocracy"), dictatorship, and especially colonialism, but democracy still regularly perpetrates atrocities and steals from the poor to enrich the rich. Hopefully we can find a better form of social organization soon, one that doesn't offer the ruthless and ambitious quite so much leeway to enrich themselves by harming others.

I, too, condemn the strawman the rest of your comment rightly condemns, which as far as I know consists of policies that nobody has ever advocated.

Within the broad class of democratic societies, those that have stronger protection for private property and tighter limits on government power are the ones that are best at protecting the poor from the depredations of the rich and otherwise privileged.

Sometimes it has been said that democracy consists of two wolves and a sheep voting on what to have for dinner, but Trump's election demonstrates the truth is even worse: they apparently voted to eat library paste and boiled leather.
I don't think it's going out of its way to hide the fact that it's an opinion piece. I wanted to highlight to someone unfamiliar with the case and issues (however few that may be around these parts), that it is an opinion piece. It makes assertions through a lens of a bias to one side of the case. There's nothing inherently wrong with that. Using the word "bias" isn't intended by me here as a slight - we're all biased to a greater or lesser degree about everything. But a casual reader should be aware of it without having to e.g. navigate to a separate "about" page :)
I'd really like to be able to say "I like this _kind_ of thing, just not this specific one." You know, just because I don't like "Valerian", I still enjoy sci-fi.

Thumbs-down on a video seems to remove the whole category.
Vice: Kids Are Now Skipping College to Be TikTok Famous [video]
Favorite comment on that page: "Google is a small indie company btw"

So, more seriously, what might cause this (mis)behavior?
Funny that Netflix's top "original" (in fact, the top show in the entire graph), Cobra Kai, was actually a YouTube Original for the first 2 seasons.

Disclosure: I work at Google, but no on anything related to this.
Did this bug emerge after their Orwell word policing update?
Ah. So not something with the text data model.
Zero knowledge proofs in RISC-V
Safari can generate 2FA codes natively as part of keychain since 2021 - probably the most accessible way to do this for a non technical user. https://9to5mac.com/2021/11/16/use-safari-password-manager-a... Has more details.
Thanks. Nit-picking here but ground is usually abbreviated GND, not GRD.
> C and Python are not black boxes to each other

Yes they are - the C interpreter knows nothing about what your C extension does. It can’t optimise it because all it has is your machine code - no higher level logic.
From his story I can tell he found one big mistake. The tedious work itself.
Great, using solar to help put fossil carbon into the atmosphere.
To work around this I sync multiple Ledger devices with identical seed phrases which allow for duplicate FIDO devices that can be shared with any teams that need break-glass root account access.
I’m curious what this will do to a google form.
On the rare occasion that I have to fill out a paper form, I read it aloud.

Saved me from starting from scratch due to a minor error at least a few times.
Sounds basically like a key store/loader like this one: https://www.cryptomuseum.com/crypto/usa/kyk13/index.htm. I have a little experience with its successor. There’s a legit purpose for it but it’s a different animal then an HSM in my opinion.
Liking moderate behavior is because you're a moderate. Which is basically my point.

You didn't explain how it's a fallacy rather than just state it is. The middle ground might be right in some stuff, it might also be extremely damaging in others.

I'm sure you can think of examples for that.
Everybody should do a 'Linux from Scratch' at least once in their lives.

If for no other reason than to appreciate how much they owe to their distro's organisers.
This is more about ordering individual declarations within a block rather than blocks themselves.
They don't. And it's also not supported in the mobile app, which is a huge pain.
Some people might get off on that kind of culture. But this story makes me glad I don’t work there for some reason.
I love this comment. This is a hugely under-appreciated fact of the now-mature Information Age: that we are oversaturated with all the ... information!

This occurs across a variety of dimensions: too much information about the goings-on of our friends and family, about the world at large, about all the things we're supposed to do to "stay healthy", etc.
Jason here, cofounder of OurResearch, the nonprofit behind OpenAlex. I appreciate everyone's feedback! Happy to answer any questions.
https://www.amazon.com/FIBBR-Female-Active-Extension-Optical... provides USB-to-fibre-to-USB in a single cable, and a copper pair in parallel for power.
thanks, I'll consider that tact
Why the move away from NPM registry? · Issue #2667 · SheetJS/sheetjs
Yes, that's the macro-op fusion pattern Hoult said they were recognizing in his post.
Finally some hacker news.
TOTP is one of the supported 2FA method. There's a lot of TOTP implementations that don't require having a separate device. And if you're not happy with any of them, this is such a simple protocol, you can write your own in one evening.
Many graphics tablets don't have scroll on the pen.
FDA Limits Use of Johnson and Johnson Covid-19 Vaccine
Backup a 24 word seed phrase once on a FIDO device that supports BIP39.

Now go enroll 100 sites in it and then lose or destroy the device.

Enter the 24 word backup to a new device and access to your 100 sites is restored.
Good point. This in turn shows the risk of endless event propagation loops: So you decide to solve the formatting problem by using floor() and only showing the integer parts.

So now when the user enters 72°F, it shows 22°C. However, in a naive implementation, updating the celsius field would trigger a change in the other direction as 22°C converted back would round to 71°F. But 71°F rounds to 21°C, triggering another change, etc etc.
Everyone forgets that the majority of people don't use password managers let alone FIDO/WebAuthn and similar technologies. It will take really, really long time to replace passwords.
And being cut off means you lose potentially life-altering opportunities?
Really enjoyed the conference this year, sad that I probably won't be able to make it to next year's event in Tokyo. Definitely take a look at the technical program [0] if you're at all interested, I think pretty much all the talks are up on YouTube now.

0: https://rwc.iacr.org/2022/program.php
Have noticed that. Also, some agencies that are required to work with people (no way to automate that) remain incredibly under-staffed and/or have huge work backloads piled up. One told me the other day (after a two-hour phone battle to reach a real person) that there were no appointments available for 'over a month'.
I did this exercise with Godot Engine : https://triptych.neocities.org/sevenguis/index.html
Uber to Wall Street: We're Not Lyft
Even migrating to variants of android other than the vendor installed one is a major pita, that is only possible for an increasingly small subset of phones.
Looks like HN is able to handle it just fine, though. :)
I don't have any concern over having to use the internet to reference things or find samples that save time.

In the 90's I had a large book collection that I used for learning and for reference which served similar purposes. That plus the man pages and SDK docs you got with libraries was basically your goto. And even then, we still had programming forums (BBS) and usenet for finding help and samples.

Oh and if/when you did Microsoft programming keeping the MSDN docs on your machine was an option, which was like 4Gb if you installed it all.

FWIW: I do fairly often write code without internet but if I am using a library I am unfamiliar with or need to do something that is less common I'll save some docs or key web pages locally to help me.
I remember discovering that pasting a specific emoji to Google Slides causes the slide to become "poison". You could not view or edit it, the web UI would crash if you clicked on the slide. I discovered this by accident, but did not think much of it as I was able to work around by deleting the slide from the document overview.
If you don't want to change your workflow too much, you could:

1. Download documentation for offline use (https://devdocs.io/)

2. Create a local copy of SO posts (https://github.com/tools4j/stacked-off)
This is amazing, at one of my previous employers, a colleague had started learning python and was able to automate a lot of the tedious work with python.

Something like this would have been perfect.
Microsoft and Epic Games team up to bring Fortnite to iOS via cloud streaming
Certainly. It's definitely less quick-and-dirty and more focused on long-term value.
Twitter isn’t the town square, it’s the theatre
New research resurfaces on link of legalized abortion and crime reduction (2019)
This is apparently the lifecycle of outdoor fishing brands. Orvis (100+ yr old fly fishing company) places more emphasis on clothes than fly rods, flies and waders-- the margins and addressable market are probably both larger. Field and Stream is Dick's spinoff to target outdoors customers, and they typically dedicate 70% of floorspace to clothes, too.
I wouldn't mind living in the alternate universe where browsers adopted Ocaml as the built-in scripting language instead of JavaScript.
Ryan Dahl is totally on-point here. It's one of those things that will be obvious in 10 years or less. Only SASS providers need bother with linux containers or "real" operating systems, the vast majority of everything else will be glued together over emerging runtimes like Deno/CFW, HTTP, and WASM.
Following the guidelines I see

> Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith
Existing devices with BIP39 random seed backup support have you covered here with far less complexity.
Lasting and solid foundations are made by experiencing

Doing With your hands. Seeing in reality. Getting burned with the
soldering iron. Smelling the flux. Hearing the signals and seeing them
on the oscilloscope. We need presence, feeling, the ownership of
knowledge as personal experience, not vicarious hand-me-down accounts
or diagrams.

As a kid I wired up NAND gates and transistors. When it came to logic
it felt like there was something tangible I could reach out and touch
through tactile imagination. Building a computer from chips,
wire-wrapping hundreds of connections to a 68000, RAM and EEPROM chips
took a whole summer. After that I could see a data-bus and an
address-bus. I know what they feel, and smell like. I got good at
patching dataflow DSP because 20 years earlier I spent hours in the
studio patching analogue synths.

Descartes Error is a book by Antonio Damasio [1] that talks about the
weakness of purely rationalist epistemology. The foundation is laid
long before we are even aware of knowing and learning. That book had
an influence on me to understanding cognitive activity as embodied.

This is why we need to let kids fix bikes, fall off skateboards and
climb trees. It's why giving them tablets and chromebooks instead of
things that get their hands dirty is no good.

[1] https://www.goodreads.com/work/quotes/100151-descartes-error...
A backup key is a good idea, but there needs to be a way to enroll the backup key for a new account (ideally automatically) without the key being physically present, since otherwise you can't (practically) store the backup key off-site. To this end, you should be able to enroll a key using only the public part of the keypair.
Past comments: https://news.ycombinator.com/item?id=23551983, https://news.ycombinator.com/item?id=30237205
Compared to most Scheme implementations?
Has anyone found a link to the new specification draft? I'm wondering if the spec for the authenticator will be open so that anyone could build their own
I almost want to ask if this is a real question.

Obviously, things have changed since then, but there was a time that not everyone had 24/7 always-on access to the Internet. Really, that's only a recent thing. How do you think programming took place -- across a generation or two -- before then?

In my case, it was 1999 before I was able to get an Internet connection that wasn't dial-up Internet -- but I lived in a small, rural town in the midwest, not in a major city. I was the first person in our area (perhaps a 30 mile radius) to have an "oh-my-$deity-this is-so-amazingly-fast" 768k/128k DSL line (besides the two guys who ran my ISP) as I knew them and they asked if I would, effectively, be a "beta tester" to make sure things were working as they 2were supposed to be before they started offering the service to customers.

So, yeah, before then it was possible to program without a Internet connection. That was the "default", normal situation, in fact. We had (dead-tree) books, for example, and could telephone other people, there was FIDOnet ("before Internet"), Usenet ("after Internet"), e-mail and mailing lists and, eventually, even the web (from 1991 on, of course). Plenty of programming happened without Internet access before then (in fact, all of it did, basically).

Of course, some programming is more complicated nowadays, when you need a library for every little thing you do, so I suppose programming without an Internet connection might not be possible if you need to download a library for for .. loops or something.

(By the way, when I was in high school, I'd write code on paper (whatever program I was working on at the time) while sitting in class. When I'd get home after school, then I could type it in on the computer.)

Of course, if you are one of those "programmers" who have to stop and Google something afte every five lines of code, well, it's probably not possible.
How does science fill the void that has caused so many people to be totally detached from society-- having no friends, no spouse, the only reasons to leave the house are work and groceries. There are practically epidemic levels of depressed people who feel disconnected from society
> Remotely exploitable bug causing grammar check api to fail to perform grammar checks? Doesn’t sound too exciting.

famous last words. finding security relevant bugs is often a game of identifying what the original developers might have found to be not "too exciting" or places they were out of their depth and then focusing intense effort on finding their mistakes.
If someone shows up sounding completely different than they did in the interview then I think most people would assume that the candidate had someone else take the interview for them, resulting in a massive red flag.
can you elaborate on the religious extremism part?
The object is not the true form of knowledge - the post is about a person's knowledge in the context of debugging layered systems.
Right now it is the temperature, but water acidity is a bigger problem actually.
> We need to group because everyone across the spectrum has things in common

Do they really? One of the articles on here recently was about how Autism is this gigantic smorgasbord of often very different symptoms and that every Autism disgnosis pulls from a different palette of symptoms.

That sounds a lot like psychologists decided to call "Not Neurotypical" (however you define that) as "Autism" and then dumped everything into the category.
I contend that OP's usage of Freudian stage theory in a comic and mischievous scenario is an excellent usage of "debunked pseudoscience" that should be avoided in scenarios where it matters.
iPhones can do wipe on too many failed attempts as well:

https://osxdaily.com/2021/05/27/set-iphone-erase-automatical...
Because it's faster to start training from a relevant existing model than from random weights
Django has async support for everything except the ORM. async db is possible without the ORM or by doing some thread pool/sync to async wrapping. A PR for that was under review last I checked.

Either way, high concurrency websites shouldn't have queries that take multiple seconds and it's still possible to block async processes in most languages if you mix in a blocking sync operation.
> That's a barrier to entry that doesn't exist in the PC ecosystem.

Unless you're using some native language like C++ and cross-platform UI framework like QT or js/Electron you have even bigger diversity problem in the PC ecosystem. There are Windows (x86/arm), macOS (x86/arm), linux (variable desktop environments), Chrome OS, ...

You would need to provide builds for all the OS and hopefully also provide Store versions (Windows Store, AppStore, Snap)
A16Z joins Elon Musk on his bid for Twitter investing $440M
let wordlist_file = File::open("wordlist.txt")?;
// do something...
// we don't need to close wordlist_file
// it will be closed when the variable goes out of scope

What happens if there is an error when closing the file that I have written to?
I use entr for all my file-watching needs, if I need a roll-my-own solution. This article is a good introduction to the main ways to use it.

If you use Vim, however, its defaults can interfere with auto-build setups that depend on file watching: https://lee-phillips.org/badvim/
Devices like Ledger already have seed phrase backup/restore via BIP39, but this is only safe or practical on devices with a screen which Yubico is very adamantly against ever supporting.
I see Google has finally implemented the Zombie Strunk & White AI like I requested years ago.

I did not expect them to weaponize it, but Skynet does as Skynet does.
Shopify basically has the data for this. They could just exclude from the search sites that don't already get a decent amount of direct sales. There are other metrics as well like refunds/ chargebacks and return customers.
> implies anyone wanting to use 2FA would need a mobile phone

I will acknowledge they probably shouldn't use the terminology "mobile app", but the most common way for people to use TOTP is with a mobile app which does TOTP. FWIW, there are many ways you can run a "mobile app" without using your primary phone, tablets also run "mobile apps" and there are tools to run such apps on your computer locally. This doesn't in any way give the service any kind of connectivity or access or tracking of your phone, and TOTP does not use any kind of network connectivity to operate.

I'll agree the above is a pedantic point to be making, and I agree their documentation could be better worded, and I can understand there being a bit of confusion. However whether or not you need to use a mobile phone, if the solution is TOTP a la Google Authenticator/Microsoft Authenticator/LastPass/Authy/1Password (RFC 6238), the answer is always no. RFC 6238 does not require phone numbers, it does not require network access, its purely hashes on the current time and an initial shared secret.

https://www.rfc-editor.org/rfc/rfc6238
Everyone faces this pain. There is no single good source for all the data any nontrivial app needs. The main vendors are predatory and will change the goalposts to charge you as much as you can bear and more as you grow. In my experience this is a huge obstacle and probably a major reason there is limited innovation in anything like derived market data analytics. It’s not just you, it’s everyone.
compliance != security
I think conflating violent or frightening scenes with tragic scenes is a mistake here.

As a young kid I watched Lion King and Land Before Time, which both feature dramatic depictions of the death of a parental figures, which both lead to kids fending for themselves. I don't remember being traumatized by this at all, and watched them repeatedly. As an adult I see the tragedy and it's kind of shocking, but I think as a kid it was just make-believe and I wasn't relating to the characters in that way. And obviously tons of other kids watched and loved these movies too.

On the other hand the more intense scenes from Indiana Jones were terrifying and burned deep into my brain.
And thus has Eliza Callahan suddenly found themselves a poet with a lot more name recognition among tech workers.
What's wrong with dune? I thought it was really good.