skysight-inc/HackerNews huggingface dataset:
Not OP, but the processing of learning that being X isn't a joke in and of itself taught me respect for other groups. You compare the joke about being gay vs a joke that someone is gay. One is a funny commentary on the gay experience, and the other is homophobic. Learning that difference, through experience help teach me where to draw the line between appreciating other cultures and cultural appropriation. And yeah a lot of these lessons can be taught other ways, but I have often found experience to be the best teacher. We should encourage kids to discover better morals and not just follow the morals they are taught. We learned a lot over the past century letting kids do that, we shouldn't stop now. The youngest generation has constantly shown the older how to be more accepting of neighbors, and kinder to our friends.
I have a few quality of life apps that take me a couple minutes to set up on a new machine. I spent like 2 months debugging bluetooth problems on my arch machine. Don't even mention Windows in my presence.
Research is research, but anecdotes are anecdotes. And anecdotally, I can tell you that having done the same drive in the same conditions many times with both a Jeep Wrangler and a Toyota Prius, the Wrangler consistently has far more bugs on it, and requires multiple cleanings per leg of the journey. The Prius requires no cleanings for the duration of the trip.
I've been using https://www.artpip.com/ for years and was annoyed when they added paid features but I'd love something different. Are you planning a Windows version at all?
I don't discount the effects of pollution and consider climate change to be a very important problem to recognize that said, more humans are thriving (as in not starving to death or dying at young age) today than in any time in history.
"Inclusiveness" is a pretty loaded term which doesn't really seem to apply when you consider how it is used elsewhere.

Your aunt didn't need to see that you were invited to a kegger on Thursday, and you didn't want her to.
Well one main issue for the court is that, having weighed in with Roe and its successors, they can't help being still involved one way or the other now.

More broadly, the ongoing total dysfunction of Congress (and/or the entire political system) has meant both parties have increasingly turned to the relatively-functional court to get their wins. The fact, at least historically, that Supreme Court precedents are seen as quite durable is another factor weighing in favor of the court's involvement. The insulating effect on the politicians is a good point, too.

There's also I think the factor that both parties have found it convenient for the Supreme Court to be very powerful and involved in lots of issues just as a motivational factor for their bases: the dialogue around presidential and senatorial races now routinely revolve around Supreme Court appointments as maybe the only important issue.
You could also encode them in DNA nucleotides and use CRISPR to modify your own DNA with your GitHub codes. /s
> There are security teams inside those megacorps that have a general objective of reducing the number of account takeovers

Said security teams have at most zero incentive that the privacy of the policy subjects is preserved.
More than that, I would ask what their acceptance criteria are. I’ve taken a test like this only to get feedback that felt like a giant “got you!” from the hiring manager. There’s so much that goes into coding one of these up, and there’s a limit to how much effort a candidate is willing to put into free work, so this felt kind of bad. This was for Thomson-Reuters on their Clojurescript team.
Your assertion is that reading or hearing about life experiences does not prepare a person for a similar life experience.

This is absurd on its face. I'm sorry I don't have a journal article to substantiate my claim.
They don't have to be fighting for your cause, even if you believe that cause is noble. If someone driving a white honda totals your car, you don't harass random drivers of white cars. This cult of skin & genitals, that's called "progressive" for unknown reasons, is a shallow lunacy that's appealing to people who can't see further than the skin color.
Yeah, they should be ashamed of themselves — forget losing it, what if it fails...?

It's bad practice to register just one hardware key, if your service has no side-doors.
We all have opinions. The 1984 reference is unhinged.
Lyrebird – a voice changer for Linux, written in GTK 3
Yep! As the author alluded to elsewhere in the comments, if you want to make _really sure_ that the user is a person in a browser instead of a rogue malware process on their machine you can combine this with a yubikey tap or webauthn attestation step.
> f the environment lacks these basic capabilities though..

And that's the point, right? You're evaluating the toolkit, and if it lacks the features to make these tasks fairly easy, then it's going to be harder to do a lot of straightforward things.

I imagine a similar set of tasks could (and have) easily be contrived for other common libraries/toolkits that are used, such as HTTP client libraries, numerical libraries, etc.
The historic solution is in a safety deposit box at a bank. If you're talking about things like crypto cold wallets which might be extremely valuable, why risk leaving it at home? The cost for small items like documents tends to be reasonable. Good practice for things like ownership deeds and wills.

I don't think the average home thief would know what to do with a printout of your 2FA recovery code especially if it's buried in other paperwork. The real risk is loss from negligence or natural disaster.
It’s baffling to me how something like Svelte can be so much better in nearly every way for developers, businesses, and end users, yet still fly under so many people’s radars!
What does "Modern" python even mean?
US sees largest productivity drop since 1947 [pdf]
I have. Many times.
> Still probably should have a spec sheet, since your target demographic probably cares quite a bit more than average.
I've suggested to George to add a more prominent spec sheet. It's there, but you need to scroll a bit or go to the shop, so it's not the most visible.

> There’s a general sense that it was designed by committee. Even if it was, consumers have come to expect Apple like fit and feel and polish and unity in the presentation of any electronic product over $1000.
Not sure exactly what you mean here, or rather where you got the impression. Can you elaborate?
nice. I figured out just holding down space eventually starts clearing a lot of lines until it crashes.
#1 says TOTP mobile app but any desktop app would work.
What do you mean by a honeypot? Both are pretty well trusted devices, and users easily have tens of billions of dollars deposited on them. Given that, I feel pretty comfortable using them for 2fa.
> > These guys aren’t usually that good

> To further this point, the person in this article is nearly blind in one eye.

You mentioned that he's nearly blind in one eye in response to someone saying that EBUGs aren't usually that good. And yet, he stopped 2 of the 3 shots on him securing the game win. So perhaps, he is actually that good.
There are so many bugs in the OS and I just work around them.

Two recent ones I can think of:

Issue 1 is: Shift+click selection doesn't work in Finder's Icon view.

To reproduce: In finder select the "icons" view. Click on the first item, Hold shift, and while holding shit then click on the tenth item.

Expected behavior is to select Items 1-10 including ten.

Workaround: Switch to list view.

Issue 2: Lock screen keyboard shortcut doesn't work when mission control is activated.

To reproduce: Open mission control via app or hot corner. Press Control+Command+Q to lock screen. Screen won't lock.

Workaround: Deactivate mission control view before locking screen.

Yea...it's dumb. But in the words of the late great Steve Jobs, 'don't hold it that way'. I get that apple is different. But sometimes it just seems counterintuitive.
I think FIDO is not meant to be backup at first place. It's more a derived key exists to authenticate certain device safely without being stolen to authenticate other you aren't expected. Make it easily backupable actually defeats its whole purpose if it is intended to be used this way.

And for service that actually want it to be used as major key. I think they can just make the one authenticated able to authenticate another(and even decide whether this new device can auth yet another or not). (Like the way google use: popup on user phone, and ask if user would like to let the computer login.)

I think the one we actually need is a common protocol to authenticate new fido device from existing one. Although you can do it currently, every website have different flow to do it. And there is not currently a common way here. A common and machine understandable way to auth new device from existing one may ease the pain.
Security is resilience with respect to your threat model.
The usual security objectives are confidentiality, integrity, and availability.

Nothing is "secure" forever and ever. For each objective you need to state some assumptions that are required to uphold it.

Haskell allows you to express more assumptions in code, not just comments, to be enforced at compile time.
And with some careful handling Haskell types provide a solid foundation without going into full deductive verification mode.
Until you figure out how to motivate people to turn out and vote for boring candidates, the system is going to cater to crazy.
With the Elon Musk news, I finally decided to try reducing my Twitter usage. With the exception of 3 or 4 specific tweets that I viewed because of a discussion on a site like this, I haven't been on Twitter in 10 days. I already feel much less "on edge" than I used to. I was already mostly off Facebook, basically checking once a day for 5 minutes max since a parent group I help lead in real life uses it as a primary form of communicating with the group at large.

Now to get off of Reddit and be more judicious with my usage of this site.
> Apple users are, on average, much wealthier...

That someone willing to pay for a premium product is likely to be wealthy is a reasonable conjecture for items where the item is so expensive that a typical middle-class customer is making a substantial sacrifice to purchase, if they can do so at all.

So for architect-designed homes, small-volume luxury cars, cigarette boats, personal jets... Absolutely. Middle-class people can and do buy small-volume luxury cars, but it's a big compromise and most of the people driving Bentleys are actually wealthy.

iPhones are not that kind of luxury item, they're what we might call "affordable luxuries." Even the most tricked-out iPhone is within reach of your typical 9-5 full-time employee if they want one.

Other "affordable luxuries" include things like premium alcoholic drinks, expensive basketball shoes, carbon bicycles, and Fashion brands such as Polo Ralph Lauren that specialize in pretending to be exclusive but distributing their wares in department stores.

Owning an affordable luxury in no way suggests you're significantly wealthier than people who buy an affordable substitute for the same product. It's more about signalling taste than means.
> There is no sync to provider servers on any TOTP implementation I use

That's hard to dispute, but will you accept https://guide.duo.com/duo-restore as a counterexample?

> Are you perhaps referring to the Google Authenticator or the Microsoft Authenticator apps when you refer to TOTP

No, I'm referring to the actual RFC 6283 TOTP protocol. Which uses a trivially-cloned single private key. Which is, see the example above, in fact trivially cloned 'for convenience' by at least one widely-used 'enterprise' security solution.

> What makes you think they don't "securely" make a few duplicates themselves?

Since that literally makes no sense if you know how hardware tokens work.
Interesting, but the latest release dates back to 2015!
I feel cynicism in your answer. I can still give you an honest answer to your question.

Behavioral questions are far from new and not unique to Amazon. They serve two purposes: first, as a cultural match, and second, as a performance predictor.

The thing about Leadership Principles in Amazon is that they are not just slogans on the wall. They play a role in your day to day work. Things like your performance review and promotion consider how you apply these LPs to an extent.

Does it sound terrible? I can relate. But what is the alternative? I believe culture is a property of organizations. If you don't explicitly set a culture, one will emerge on its own. I have worked for several companies, and I appreciate the LPs. At least I explicitly know what "rules" to operate under.

So what if you think LPs are dumb or you hate them? that's fine. That means you wouldn't like it here, so it saves both from a bad match.

Back to your point about the interview. What useful information does this convey? quite a lot actually.

First they act as a sanity check. If we ask about Earns Trust, actually we are doing sort of the Asshole Test from OP. We are trying to determine if you are a pain to work with, or if you can establish good relationships with people. With Learn and be Curious we are trying to determine if you are open to learn new things. If you actively refuse to learn and just want to do your thing, you will probably struggle here. Things change fast and most everyone needs to adapt to keep up.

Second, they act as a calibration for role and leveling. Say you are hiring for a senior engineer position, and interview a candidate with +10 years of experience. However all of the candidate's examples are very simple, such as implementing a small feature. Will this candidate thrive as a senior engineer in Amazon where they will have to lead several engineers in multi-team efforts? At the very least we can say we don't have enough evidence to judge.

Third, it turns out some of them are actually good on-the-job performance indicators. Amazon has an internal science team that runs experiments on hiring. One of their experiments determined that high scores in certain LPs correlate with good performance after hire.

So there you go. You might personally dislike behavioral questions, and that is fair. However there is plenty of evidence to back up their usefulness in making hiring decisions. Now it's up to you to decide whether you want to work here or not.
Have you ever noticed that you can't cut and paste files with right click or the drop down menu in OSX?

It's been a few years since I've used OSX, but every version I've ever tried has this intentional bug. I say intentional because when I first got a mac in the 10.4 days I noticed that 'cut' was greyed out in the menu so I thoughtfully filed a bug report. To their credit they did answer the bug report several years later but they explained that they would not fix this as it is desired behaviour.

Baffling.
On linux, this is something I use every single day. It's awesome!

Haven't seen this in the thread: You can resize the window by using right-click instead of left.

This works on both i3 and KDE for example.

Mod+Left click = Drag windows around
Mod+Right click = Resize window
You're right, that's woefully insufficient. The authentication challenge should clearly (using color and text) whether or not the challenge is an established part of your trust network and the hardware token should be able to validate the authenticity of the challenge modal itself.

Users should be able to take an action they trust, while at the same time having the choice of that action taken away (or made more cumbersome) if they are about to get themselves into trouble.

There are people far smarter than me working on these problems, but I feel like they are so hyperfocused on state-security that they refuse to listen to anyone regarding actual usability.
Great perspective, and it's something I'm definitely keeping in mind as I think about this. In fact, I think I can draw a lot of lines (some of them quite complicated) between my current work and "potential impacts to climate science", but I'm trying to consider options that have a more direct/obvious connection as part of this exercise.
> the number of bugs goes way up

In case you are forced to use the unreadable long-named unintuitively-syntaxed methods, add unit tests, and check that input-output pairs match with whatever formula you started with.
B.C. health agencies target workers who report under-staffing, burnout
Prospect Path | Web development engineer | REMOTE | Full-time | prospectpath.com

We build innovative marketing platforms that help connect buyers and sellers of enterprise software. Thousands of organizations use our data and insights to improve the selection process.

We’re looking for somebody to join our small dev team to:

- create new products

- modernize some of the systems and processes behind our platforms

- expand and maintain existing features

Full job description here: https://careers.prospectpath.com/o/web-application-developer...
1Password is in that list.
marketplaces like Amazon have trained consumers
to expect products delivered to their doorsteps
within 1-2 days

I am always surprised that delivery takes so long. Why does it have to take days?

If I have a fleet of cars and/or bikes that constantly swarm out from my distribution center, why can't a delivery be done in hours or even minutes?
Still changing jobs if work at the office becomes a requirement. They can pick any of an infinite different excuses for why it's necessary for everyone to return to the office, it's simply not going to happen. No doubt they can replace me. The company won't cease to exist without me. There will simply be a cost associated with the replacement process. Wonder if anyone has calculated the energy costs and the impact on the environment of that?
Adding onto that, it's super interesting that the 2011-2012 time period seems to have coincided with the most balanced market shares for both mobile OS and browsers: https://gs.statcounter.com/browser-market-share#monthly-2009...
Not just that, I was thinking that this would directly adversely impact everyone who is from "just above the 80% median income mark" to "affluent to not care" which I believe is a bulk of the tax payers.
Can you say a bit more about what you mean? Are you talking about this: https://api.slack.com/future? If so, I'm not sure how it relates, but maybe I'm missing something?
Jup, and Alt+Rightclick for resizing.
TransferWise. Except they renamed it Wise at some point. Zero bother and cheap as far as I can tell (costs get buried in exchange rates on some of these things).
> My kids have slack in their schedule. No, they aren't going to Ivy League schools. That's OK. They will survive somehow.

Thank you! I think we need more people with this mindset speaking up. Everywhere there's this paranoid fear in parents that without a totally filled schedule, tutors, AP classes and more their children are going to be destitute. Not going to an Ivy League school is fine, and likely anyway; having free time to play in their own self-directed world is also fine (and healthy).
Always go to lunch, whichever side of the interview you're on. Preferably a place with table service - could even be a diner. How does your counterpart treat service staff ?
Software Projects: 1984
I think poetry actually does solve it
I joined and got granted at 1560/share with Staff Dev share counts.

If the comp changes don't really do a lot, I'm out roughly a 6-figure number per year (CAD).
I'm actually with you on this. I've been reading articles about the trauma the war and displacement are causing Ukrainian children. I remember one mentioning older kids who knew about war already (because of stories or TV) had practically the same behavioral symptoms as younger kids who didn't understand what was happening. And this came from psychologists assessing hundreds if not thousands of kids.
No, I can't provide concrete sourced examples with a rubric. I'm not writing a paper. These are largely impressions I get from speaking to people in the world, and kind of being taken aback when people have what I think are kind of absurd views. Some, I know from speaking to people, are amplified by YouTube recommendations, and Instagram feedback loops. I don't really think it's a controversial take to say that recommendation algorithms paired with bubbles that match a few different tropes are going to amplify those views.

If you're confused by my rhetoric, that's ok. I'm confused from time to time.
ID can be easily faked.

Security questions are often shared between services, so someone who's hacked any of the other services could get the answers to these same security questions and then use them to bypass 2FA.
This is missing challenges which include async content and proper error handling, which are both essential in modern web development.

For example:

You're loading or submitting content asnychronously and must handle different loading states in order to give the user feedback. If an action fails due to spotty internet you must also include a retry or refresh button.

You load a model form to modify some data, and when you submit your changes someone else has already made modifications to the model.
Gregory Batson's theory was groups stay together despite all kinds of difference amongst members because of shared Rituals. A sort of irrational, repatitive activity, that the whole chimp troupe can perform irrespective of differences in intelligence, knowledge levels, personality traits, needs and priorities.

So look into how Rituals are constructed.
The fact that Alt+right click context menu works anywhere in any window was a godsend. Next best thing to close a program without moving your mouse anywhere.
Facebook is irreparably doomed as a social network, but will continue to thrive as a software innovator (React, osquery, graphQL, etc).

Can that software really “thrive” if the core part of the business were to fade away, though?

Big companies can’t live on tech alone. I’m thinking of companies like Sun and Yahoo that made some cool software but ultimately didn’t have sustainable businesses.
Creating “mosquito forecasts” with Google Earth Engine
> And only for the charge of revealing war crimes (apart from some trumped up “hacking” charges that the key witness now admitted lying about? [2]).

I've read the allegations. If the allegations are true, he's guilty of hacking. It does not seem to be a case of the law being perverted past its intent. I'm sure the extradition and prosecution is politically motivated, but the problem with doing something that's squarely, dead-to-rights illegal that also happens to piss off the government is that they are within their rights to put you away for doing it.

It'd be one thing if his supporters accepted the dead-to-rights-guilty part, and were making the claim that it was something akin to civil disobedience - illegal, but in service to a higher cause. Unfortunately, most of them are instead bending over backwards to argue that he can't actually guilty of anything. It's not very convincing.

Probably because the most noteworthy accomplishment of that higher cause seems to be 'spending the next decade being a shill for the Kremlin' and 'helping Trump win 2016'. Sorry, but not sorry - I can't say I have an iota of sympathy for the architects of either.
Endemic Pathogens Are Making You Crazy and Then Killing You