skysight-inc/HackerNews huggingface dataset:
I made this mistake when I enabled 2FA for Uber some years ago. Same old story. Somehow forgot to grab my recovery codes for Uber even though I had for everything else. I got a new phone, manually transferred all my google auth codes from my old phone, somehow missed Uber. And then a few months later after I had already reset my old phone I installed the Uber app and oops, I needed a 2FA code. Couldn't get one. And because Uber is tied to your phone number I couldn't even just create a new account without getting a new phone number. So I emailed their support (which is useless), got a bunch of bot responses about how to reset your password, finally got one real person to respond after several weeks. But they had no idea what I was talking about and clearly had no ability to actually do anything about the 2FA issue. So I gave up and now I'm just permanently locked out of using Uber. Which is fine, cuz fuck 'em. Now I use Lyft exclusively. Which doesn't matter because in my experience every Uber driver is also a Lyft driver.
There were a large number of allegations in the dossier. So, pulling numbers out of the air, but... say it was something like 70% of the allegations were false, 10% were verified true, and 20% could not be verified as either true or false.

As I said, the numbers are made up. But I think the general gist is right - mostly false, a bit true, and some that is unknown.

But this is why people say the dossier was discredited - the majority of it was false.
From an evolutionary perspective it would seem wrong to actively go towards the source of stress when the opposite direction clearly leads to safety. But then again what do I know. Perhaps my flies are adrenaline junkies.
> Traditional academia built the internet

That's not quite true. Traditional academia developed the technological foundation (TCP/IP) but the actual internet was built by industry.

And "less and less of actual value" != "nothing of value". And the work on TCP/IP was done 50 years ago so that's not a particularly strong data point to argue against my claim.
I know it's petty but: the ludicrous endurance of the 2-column journal paper format for publishing ideas, shows how resistant academia is to doing things that are useful outside of the rules its insular game.
I always turn this on as well, but yes, it doesn't allow different moving of windows.
I propose that to simplify geographic calculations, we should all pack up and move to venus.
Thanks for this question. It's one we've given some thought to. You're absolutely right that the ability to make new threads allows for the possibility of heavily branched conversations, which could be tricky to follow in their entirety.

Our thinking about this was that we want to make it as easy as possible to follow a conversation between two people, however long and involved the conversation gets. So, while conversations can branch endlessly, it's always easy to follow what any two people are saying to each other.

In the longer term, we might also add some features around seeing an overall conversation branching structure, but it's not on the short-term roadmap.
I take issue with two aspects of faith as it's often used in religion / spirituality / metaphysics:

1. When faith is claimed to have a direct physical effect. For example, faith healing in which ones faith conjures divine intervention, or in the Christian Science sense where faith directly alters your physical reality, or in The Secret where faith in having something "attracts" it to you, etc. The malware in this idea is that it corrupts the very concept of evidence. If you try to find evidence that it doesn't work - by having faith and not observing the proposed effects - it's nullified by saying you just didn't have enough faith.

2. When faith exploits our innate social impulses. For example: Jesus died for your sins, how cruel of you to deny him. Or if you don't have faith you will be excluded from the club of Heaven and you will be permanently separated from all your friends and family who were true believers. Or when not having faith alienates you from your existing friends, family, and community. The malware here is that it short-circuits your natural process of observe->think->decide and turns it into observe->consider-social-contract->think->decide. If someone presents you with a good argument for why something is or isn't true, but it violates the social contract of your faith (ensuring your initial impulse is to feel guilt and fear), then you are short-circuited from thinking.
The only places that want SSO will be larger enterprises who don’t have a problem paying $$$ for an enterprise package. Tying SSO to enterprise plans is a great way to segment your market!
OpenPGP's web of trust model is broken at the fundamental level.
https://archive.ph/WY6Pr
At the same time, speeds have gone down. I’m considering going back to my Verizon hotspot.
I remember clearly as a kid scrubbing my head furiously for weeks after a local spelunking adventure where the guide jokingly told me that, after a stalactite dripped on me repeatedly, that a stalagmite would grow from my head.

As a kid with a lot of anxieties (nuclear holocaust, overpopulation, etc) I really didn't need to be growing stalagmites from my head.

Up to about seven years old, kids take things very literally. Understanding metaphorical speech comes only after that period, and not everyone fully understands even as an adult.
Sometimes you need to prevent zoom in order to implement your own zoom though.

For example if you're making a WebGL app, or if you're making a map zooming widget that needs to progressively load more local detail as the user zooms in on an area.

If you don't disable zoom, the OS and your zoom logic will be fighting over the pinch gesture.
I work in a place that desperately needs a senior systems/embedded engineer, and our upper leadership is willing to throw so much money at that position that I'm jokingly suggesting that I should demote myself from Director back down to Sr Developer so that I can earn more pay and suffer less bullshit.
I do not get it. Ancient or modern the today's satire is still resorting on the same rhetorical strategies employed by Aristophanes, Horace, and Juvenal in the antiquity. Target changes; the need to poke fun – and invite the audiences to rethink those in power – stays.
Why do we need another AuthN protocol? We should extend OIDC as needed instead of again trying to reinvent the wheel.
(using a throwaway account) that's the day I was born!
mermaid (and similar diagrams-as-text tools) have a higher level of abstraction so they're quicker when you need something they're targeting.

Also: graphviz is good at graphs, but not every visual representation is a graph (e.g. sequence diagrams, railroad diagrams, gantt charts).
I've been hesitant about installing software like the previous suggestions, so I opened the Stickies app and resized them to create a guide. I like to have a space between windows so that the wallpaper is still visible in some of my Spaces.

My issue is that it's not efficient and I need to nudge some windows from accidentally moving them.
This assumes that the "attacks" you're concerned with preventing are exfiltration of data, rather than mutation/deletion of data.
Great tips. I've now enabled zoom in my accessibility settings in Brave. I've often been annoyed by lack of zoom
https://tidesandcurrents.noaa.gov/sltrends/sltrends_station.... shows the relative sea level trend for Boston. Eyeballing it, looks like a 10 cm rise in the last 20 years, with no sign of slowing down.

That alone suggests another 40 cm by the end of the century.

Why do you think the predictions are wrong?
Exactly. Ever since the covid "vaccine" hysteria emerged, the media have drawn extremely rigid lines between "institutionally-approved medical views" and everything else that doesn't fit neatly into what Big Pharma and its governmental collaborators want to disseminate. And if you question that, you're "putting people at risk". No one should be reading WaPo anymore.
The article mentions Anwar al-Awlaki, but does not mention that he was an American citizen (born in New Mexico) and executed via drone under an order signed by Barack Obama. His 16-year-old son, also an American citizen (born in Colorado), was executed by drone two weeks later. His 8-year-old daughter, another American citizen, was executed in 2017 under order by Donald Trump, with a bullet to the neck. Her last words were reported as "Don't cry, mama. I'm fine."

https://en.wikipedia.org/wiki/Killing_of_Nawar_al-Awlaki
If you leave zoom enabled on mobile, then the browser tries to handle double-tap-to-zoom, which adds a surprisingly large delay to all taps while it waits to see if there is a second tap coming. This makes websites feel sluggish and unresponsive.

Is there a good way to get lightning-fast response times to tap events without disabling zoom in 2022?
MyST: Markdown for technical documentation and publishing
Unlike fiber and cable, starlink does not benefit having a bunch of customers located in one spot. Bandwidth is limited and adding more requires either newer satellites with higher bandwidth backbone or more overlap on satellite coverage. The fee is to discourage people from being completely mobile with the ground station.

Additionally, there's little competition for starlink because it's such a new tech. There are a bunch of companies working on similar tech that will launch in the next few years. Mobile satellite internet has been pretty shitty in the past with major companies like Inmarsat, Iridium, and Hughes that can only provide slow, expensive links. The best service from Iridium is only good for 700kbps.
This looks neat, but it only seems to be useful for touchpads, which is the vast minority of users. And while it's not expensive, it's also not free. Any software I have to manage with an extra license is an added time burden. (even if minimal, it adds up)
U2F has been supported for a while: https://docs.github.com/en/authentication/securing-your-acco...
They can send whatever data they like but they have no right of control over what I do with it or how it’s rendered. Browsers would be better if they prioritised user preferences over website designers.
Exactly. Most people don't know or care. It's a perception most common among the incessantly online and/or political, rare elsewhere.
Yeah, I'm not surprised by that. The extent of my web experience in R is calling rcurl occasionally, so I've never tried and failed to do anything complicated.
> I don't know what you mean by middle ground fallacy when "Yes, sure, for some things SPAs are appropriate." is pretty much what I'm saying too.

I'm saying "Overuse of SPAs has reached comical proportions. That doesn't mean there is no legitmate uses for them."

You're saying (correct me if I'm wrong): "Hey, SPAs are right for some things, wrong for others. Why bother talking about it?"

One acknowledges a huge problem, while the other claims the problem is overblown.

> I don't buy into your numbers if only because I have zero clue where they come from

Honestly the proportion is probably much higher than 10:1, but the numbers are not based on research. They come from my personal experience of observing that most landing pages and simple CRUD apps these days are written using SPA frameworks. Based on my personal experience, it seems like it is the majority. It's possible there is some selection bias based on my browsing habits, but I don't get that sense.
Just did one this week on site .
Semantle Nightmare Round
At risk of sounding snarky, you do understand how video hosting platforms work? Customers, even enterprise ones, don’t have shell access let alone control over what file system is used.

There are a hundred ways this problem could have been prevented but ZFS isn’t one of them.
Oh, you think its functuonal?

Send an email signed with openPGP to your bank, can they validate your signature?

Have you ever tried to get an OpenPGP key to sign your email, do you know what a nightmare it is? Because i have, and I couldn't, I have also built kubernetes clusters from scratch, and it's easier.

Okay, say you got a key, send it to your IT department, what % of IT proffeshionals can use OpenPGP, 2%? What % of 'normal people' can use it, 0%?

That is your great success, 0-2%.

That's way worse than the system academia has now, it might be crap, but its not 98% crap
Gotta love the idea of a dude named "Kwak" making a show about ducks. Talk about nominative determinism.
On the repo it says this:

"This project is not being actively maintained... Spectacle users have recommended Rectangle as an open source alternative."

This is actually how I found Rectangle. :P
A nicer tone wouldn't hurt.
Page rank was interesting because it's a little hard to do at scale, and because no other search engine would do it (because it's not profitable -- AdWords is main innovation behind making PageRank practical)
They let you enroll a hardware token after you enable either a TOTP or SMS 2FA method. No idea why, seems to defeat the point of the additional security that a hardware token offers.
1 rem is supposed to be the font size of the root element. 1 em is the font size of the parent. If a browser isn't implementing those in such a manner then it seems like it would be a bug.

https://developer.mozilla.org/en-US/docs/Learn/CSS/Building_...
This is odd - they sure do support WebAuthn, I've been using a YubiKey for years.
This website [1] (actually, its codepen [2]) has a demo and even describes all the user-hostile reasons why developers might want to disable the right click menu.

There are some other accessibility tricks that Firefox advertises [3] like ignoring website font and color choices.

Firefox also has native support for overriding website CSS [5] but "modern" websites often come with impossible to understand DOM and CSS structures (if they even use CSS and not just forcefully insert style into the DOM directly because separation of concerns is for losers I guess).

Then there are websites like Github and some shitty forum software that insist on hijacking keyboard shortcuts like Ctrl+F and Ctrl+K. You can go into about:config and set permissions.default.shortcuts to 2 (Services.perms.DENY_ACTION) to block websites from overriding shortcut settings by default. You can go into the site settings and manually enable them again by going to page info (ctrl+i), then tabbing over to permissions, and changing the value for "override keyboard shortcuts" from "default" to "allow". Or, you could simply block the websites that offend you from that screen without changing the default.

[1]: https://www.codeinwp.com/snippets/disable-right-click-contex...

[2]: https://codepen.io/impressivewebs/embed/zYYxepW?height=265&t...

[3]: https://support.mozilla.org/en-US/kb/accessibility-features-...

[4]: https://superuser.com/questions/318912/how-can-i-override-th...
They made a _one_ button mouse for many years... Maybe it's an Apple culture issue?
The difference is that beliefs can be updated by new information. Faith cannot.
This was the case in the Midwest in our basically-the-same-shape-as-modern-cars 90s family cars. We'd use the windshield cleaner thing next to the gas pump nearly every time we stopped, when on road trips, and for good reason—there'd be a few large splatters and a bunch of smaller ones, every time. And that's if it wasn't particularly buggy out that day—there were some times we stopped for the windshield, not for gas.

I think I've done that like... four or five times, total, since the year 2000. And I think every time it was for a single big bug-splatter.

[EDIT] I also recall there being tens of times more large insects—butterflies, large moths, grasshoppers, katydids—around in general back in the late 80s and early 90s, even in the 'burbs, like they were just all over the place in the Spring and Summer, you'd walk through lawn-length grass at the school playground and tons of them would be all around you, hopping away or taking to the air, and now I have to try pretty hard to find even one... but surely that can't be right, can it? That'd be super noticeable by scientists who track that kind of thing. Right?
He could have just skipped the IPFS part and used data URLs to render his colors. He would have probably saved on storage as well. The URLs could be generated dynamically.
FWIW, AWS has support for FreeBSD: https://aws.amazon.com/marketplace/pp/prodview-ukzmy5dzc6nbq (also for ARM)
The standard answers for these things is to use both; they’re not mutually exclusive, and for important things you almost certainly want both.
Dodged a bullet’: how whistleblowers averted a second US nuclear disaster
Do those apps need to be in the foreground? It kind of defeats the purpose if so
You don't actually need a lot of music theory to get started and make something.
I also used to play an instrument (guitar, classic and electric) before producing music with a DAW. While that helped me learn faster, I also realized you just need some basics to produce music that sounds good enough. Here the most important factor, imo, is practice.
You wrote "it has a totally different API", did you mean "it has an actually sane API?" Because that's what I think of when I compare pandas to polars.
I think the only way to make capturing CO2 valuable is to tax the economy and pay for actually captured CO2 directly.

Fuel manufactured out of CO2 might be easily verifiable proof of capturing CO2.
Are you sure you are talking about moving them?

Because you can move them by grabbing them by the title bar and dragging them to the spot you want.
You don't need to give your phone number to enable 2FA on github. They'll annoy you every few months to give them your phone number as a backup but you don't need to do that. I hope it's never required either.
General Relativity with a mathemtical understanding, which requires tensor analysis and some differential geometry. If you have a CS background you only need 5-6 courses to reach graduate level understanding of General relativity.

Occult just for fun. Pick an author and go with it. Crowley, Madam Blavatsky, or more ancient texts so one has a purpose to learn Latin.

Cold war geopolitics. Read original documents and newspapers from archives instead of from books which only serve as inspiration unless written by serious researchers. Many materials are not accessible but some are.
It has not!
You can do exactly this with BetterTouchTool. You can also set it up with Hammerspoon.
VirtualXP – Windows XP running in the browser thanks to WebAssembly
I don't know how much scientific is the references on this article [1], but it's a good read about the topic

[1] - http://web.archive.org/web/20190423155359/https://medium.com...
Texture Cruncher for Unity. Dramatically reduce build sizes
As the age structure 'moves upwards' it shrinks due to some people dying. What I'm guessing is that retirement ages will continue to increase to the point where that birth year group which is the biggest now won't be as large anymore due to attrition - that whatever band where the pyramid is still inverted will simply be defined as "working non-retirement age", even if that is decades older than now.
Oh, that's lovely UX... "After you configure 2FA, using a time-based one-time password (TOTP) mobile app, or via text message, you can add a security key"

So, after you enable a broken-by-design 1.5FA method, which you don't want, and which will further expose you to account takeovers, you can, possibly configure actual security.

No wonder these guys are raking in the big bucks...
Safari only zooms if your input text is too small (less than 16px). The answer to defeating autozoom is to not make inputs that many people would need to zoom manually.
Doesn't seem very useful if you use your Mac with a normal mouse though.
Show HN: Generate Cypress POM from a web page your are on
yubikey 5 nano, get two. i use it w/ ssh. took a little googling to integrate the gpg authentications key w/ ssh. instead of using ssh-agent, you'd use gpg-agent to manage the keys.

there are other integrations, for example, i can also unlock my mac w/ the yubikey.
> I don't understand how this is supposed to be "quickly" verifiable?

You don’t verify, and instead you run assuming no verification is needed. Then if someone wants to violate that assumption, it’s their problem to stop everyone who may have made that assumption, and to ask them to not make it going forward.

You shift the cost to the person who’s doing the metaprogramming and keep it free for everyone who isn’t.

https://chrisseaton.com/truffleruby/deoptimizing/
I thought OTG was just changing up where the host controller is sitting in the USB relationship? So you can have a device that acts like a client when hooked to a computer, or a master when hooked to a thumb drive/webcam/etc...?
Building Security into ICs from the Ground Up
Why should someone be using a password manager? Generating needlessly complex, unique passwords for each service seems like a good way to lock yourself out of your own accounts in an emergency.

Laptop or phone stolen? No access to your own devices? Oops guess you can't login to anything.
>D-Notices aren't quite as obscure as the article makes out.

I think that puts it very mildly. There was a gigantic public scandal as far back as 1967 about D-notices.
I use FIDO U2F since 2015.

I got my Yubikey from Github for $5 https://github.blog/2015-10-01-github-supports-universal-2nd...
This is true if the slides are for a presentation, but unfortunately, many people in business (coughconsultantscough) use the deck as their deliverable and cram all the information in there. A memo or report would be better in most cases, but the culture is what it is, and at the end of the day, if the CEO expects a deck, the CEO is going to get a deck.
Anecdote here, but I think it speaks to academia holding a privileged role in society and contributing little (or damage in this case) when I have met multiple people with degrees (but from a degree mill) who make > $200k as software engineers and can barely code fizz buzz and cannot even properly package a cli tool.

Although this is a specific problem with degree mills not representative of all schools.
I don't know if there are any controlled studies, but there's plenty of informal evidence that naive people cope poorly with traumatic events. Resilience is a product (though admittedly not a guaranteed product) of experience.
I don't know about you, but I don't have time for reading everything gets published on the web – this is why I framed my sentence in the hypothetical. Reading my comment would have clarified my own point of view.
It's much easier to migrate adding/dropping fields than to make structural changes. Adding/dropping fields is the easiest form of migration.

I honestly have a hard time believing that you prefer:

asset.Asset.owner.Person.contact.Address.street1

to:

asset.owner.contact.street1

If so, I think you should really announce this first and foremost in your article so that everyone can take a proper measure of your sanity :-)
How much of the overlap do you think is due to the high rates of ADHD in people with Autism? From what I last researched (Dr. Russell Barkley's works on the matter), it's a one-way street i.e. having Autism greatly increases the chances of having ADHD, but the opposite is not true because a large majority of people with ADHD do not have Autism.
The problem with that is that possession is not ownership. If your NFT or other asset title is stolen, it still belongs to you, unlike in crypto world. Code is law is fundamentally incompatible with law is law, because a reconciliation process is required for exceptions, and then you’re back to a database instead of rigid enforcement of logic through code and a distributed virtual machine.
I think tarantula hawks will eat brown recluse but I can't really say I'd recommend trying to cultivate them.
I just tried this and it should be warned that this resets existing "three finger drag" (for mission control and switching desktops) to "four finger drag". This took me a while to figure out after thinking something was seriously broken, even after going back and disabling the new setting you mentioned.