skysight-inc/HackerNews huggingface dataset:
The 2FA the site supports is either SMS or time-based token. According to them SMS doesn't work outside Australia, and having access to the site might be useful outside the country, so the time-based token seems the better choice.

Except they apparently decided that the standard TOTP apps like Google Authenticator weren't good enough for them. Moah bits better, or some such. Anyway, although it is a time-based token it isn't that time-based token and you have to install their app.

OK, we'll do that then. Carefully navigating past the almost identically named app with a similar icon that is for proving your identity to them, and trying not to think about all the user reviews saying myGov Code Generator doesn't work, we get it on our iPhone. Now, it doesn't work like any other TOTP app and read a QR code or have you enter a number. Instead, you have to enter your username and password into the app. [1] At this point, for me it just hung with a white screen. Exactly the same behaviour is described in the top listed review, from 2020, in the App Store, with no response from the developer [2].

This was a little scary: am I now locked out of my account? They won't help you get back in; you have to create a new one.

They also have you create a backup 2FA method (SMS) after you've logged in with the time-based token. This would be a little late if you got locked out after something went wrong on your first outing with the Code Generator app.

The linked video seems to have been improved since I tangled with the app. I don't remember at the time knowing it was possible to have both the SMS and app enabled for 2FA. It seems it's still not possible to have two apps enabled, on two different phones, for example to replace your phone. Bear in mind that there are residences in Australia with no mobile reception at all.

No doubt they had meetings in which they congratulated each other in devising a time-based one-time password scheme which is theoretically more secure than the usual TOTP. Never mind that both are adequate for the job, and the alternative is SMS. I wouldn't be surprised if someone got a conference paper out of it. I guess if the system is actually built by someone else, you can only get promotion and a pay rise by adding knobs to the specification. If the incentives valued robustness, they would have simply used the standard TOTP.

I think the biggest failing is that this problem has been all over social media, and is mentioned in the App Store reviews, but nothing has been addressed. According to the revision history at the App Store, it last got bug fixes in December 2017, with only edits to help text since then. The developers were nowhere to be seen in the Whirlpool thread or at the App Store.

In my opinion this crosses the line from incompetence to misconduct.

[1] https://www.youtube.com/watch?v=m-gf448FDFA
[2] https://apps.apple.com/au/app/mygov-code-generator/id1305497...
The Supreme Court gets a “non-scalable” fence
This really is a fixable problem.

Heavy taxation on NPD (non-primary domicile) housing solves this by itself. It's just that convincing people this is in their best interest will take a lot of effort - not to mention that there's a fairly ubiquitous problem of local politicians being in the pockets of property developers in the areas where these problems are at their worst.

People still believe that their home is a good investment, without any thought given to who's going to buy it from them later or where that person will be getting the financing.
“If not” (i.e. else) translates to “si no”. Imagine finding that in a line of code… You need a tilde “‘“ to say “yes” (sí) but… are you really going to introduce keywords with accented chars?
> I would prefer a higher language where I can try=crash

What you're describing is the `catch_unwind` mechanism that Rust does have. Because panics are implemented with unwinding (by default), you can catch them. But it's not the normal error handling mechanism; it's the "oh god an assert just failed, or we just OOMed or something, who knows, most bets are off" mechanism. If you have a main loop that's sufficiently isolated from individual tasks, such that you think you can do something useful with the fact that one of your tasks just vanished in a puff of smoke, then catching a panic coming out of a task might be a reasonable thing to do. That often makes sense in server code, where your main loop might want to keep trucking, or at least gracefully shut down other connections. But for most library code, the right thing to do is to allow most panics to propagate and crash the caller.
Thanks, didn't realise you were not the parent poster.
As a kid I was traumatized by War of the Gargantuas.

I just remember a part where one of the monsters reaches into a building, eats a woman and spits out a dress + bones.

Now sort of amusingly, I don't want to watch the movie again for a different reason. It's because my memory of it is entirely sort of a "native memory" going back that many years.
Russian cosmonaut assumes command of space station ahead of Crew-3 departure
The oldest rustc version I target (for a tiny project, admittedly) is over 6 years old, and it's fine. When code works it also works on the latest release. When code doesn't work I get a reasonable compile-time error message, not a mysterious segfault at runtime.

It's not easy, even in a few hundred lines I had to remove many conveniences to go that far back, but it's very legible. The compiler has my back, I'm never confused about whose fault it is.

Rust is young, but I don't expect this to be any different in 2030.
Star Trek was actually good though. Netflix pulp is completely devoid of content other than politics. Nobody wants to pay to watch propaganda.
I'll pile on to the burnout suggestion with my own personal solution to how I fixed that problem.

I'm early 40s, started coding around 13 or so, so it's been 30 years of software for me. About ten years ago after living in the web programming world for a few years I got kind of the same feeling you have. I missed my forms and windows app development, so I went to another company doing what I remembered enjoying.

You can guess what happened next. I hated it. I remembered all the things that annoyed me about windows app development, and realized I was just tired of coding every day. Coding has never been what I like about coding, it's building things that do things. I started focusing more on the building side, this time with the team around me, and also just some non coding fun projects like learning auto mechanics, etc. I drifted into a management role by accident and found a ton of fulfillment in coaching and mentoring. After a while I started to miss the coding side, so I went into an architecture role where I still got to do coding but it was mostly exploratory POC stuff to decide on new technologies or not. I took a role after that as a principal engineer, and while these are all mostly just title changes, it gave me enough variety to be exciting again.

Today I tell prospective employers that I am someone that drifts between IC and leadership roles. I believe experience in both helps both. My drive waxes and wanes but I think that's totally normal for humans. I just came to terms with it and stopped worrying about it, and now I'm very satisfied in my career.
Yes, I agree that disabling the SIM cards makes little sense. I wonder why they did that. Perhaps they think that if customers haven't upgraded their phones yet it's because they don't intend to.
Down in the commments [1], OP has said they had COVID earlier this year. There's a strong possibility that the symptom OP is experiencing is "brain fog" due to post-viral syndrome.

As a PSA: People are recommending exercise in the comments. If you are experiencing symptoms like OP's, do not start vigorous exercise unless you're sure that post-viral syndrome is not the cause. If you have post-viral syndrome, return to exercise needs to be slow (months) and graded. If you overdo it you are at risk of "post-exertional malaise". I've been dealing with these problems since early last year and it has had a profound impact on my life and work.

If you're experiencing symptoms like OP describes after COVID, talk to a doctor.

[1] https://news.ycombinator.com/item?id=31282305
Average home prices in New Zealand reaches 8.8 times average household income
If my email's hacked I have much bigger worries than a fake delivery pickup. That's a real stretch of a scenario.
If you have n units of housing and 5n people looking for homes, no amount of rent control is going to help. There is no fixing the market without a substantial increase in construction.

My suggestion is somewhat simple: return to the early 20th century model where if you own the land, you're free to build homes on it. Even if it means the neighbourhood now has reduced parking, you block someone's view of the mountains (Vancouver I'm looking at you), the building casts a shadow in the local playground, etc.
Sorry for not adding up to the discussion, but I can't help https://www.youtube.com/watch?v=B9tzoGFszog
> Why do you think this is?

Successive Australian governments since the early 90s have expanded public service outsourcing dramatically.

Here's a comprehensive discussion from the early 00s: https://www.aph.gov.au/About_Parliament/Parliamentary_Depart...

The basic argument is that competition reduces costs and improves quality, therefore we should introduce competition into the provision of services to government.
How to stock your pantry for the apocolyps
I'm 40, I'm a skilled software engineer and, here in Italy, I'm really far from making any 6 figures.
I guess that's something wrong with my careers.
Well, they basically took the __looks__ of Perl and bolted on a dynamically typed Java on top of it. I don't think there are languages more different in concepts and values than Perl and Java, and PHP is the result of that unholy mixture. Perl is crazy, but it has a very precise logic behind the madness. Java is boring and predictable. PHP is crazy while being completely random.
I think seeing a therapist sounds like a good idea. If you don't know what it is you're feeling a therapist can help with that.

To you're original question I'm sure you can still learn, it's just that you can't, at the moment, learn what you think you should be learning. There's undoubtedly a complex mess of social and physical and psychological reasons behind this. Doing the work that's required to understand this mess and find a way through is hard but you can do it. Take care of yourself.
That's good to hear, I might it up again.

They forgot the golden rule of tv, make a good show first.
> "Why do the richest most stable countries feels so insecure?"

Are you referring to only USA/Canada?

I don't feel so much sense of hopelesness or insecurity in Germany.
> From one of their employees: «While at the store they can reactivate your account with your old number if it is still available»

What the fuck? Here in Germany, customers have the freedom of porting their number over to a new provider 30 days after contract cancellation [1], precisely to prevent such scenarios.

[1] https://dejure.org/gesetze/TKG/59.html
No need to be so rude.

The story was ambiguous. Don't pretend it wasn't, and don't turn that into a giant strawman.
Forests, and even whales, are potentially renewable resources.

(The Inuit had hunted whales, sustainable, for many thousands of years, with oil amongst the benefits obtained.)

Fossil mineral resources are literally unsustainable by definition. Any activity described as mining, unless there is some geological process that creates new deposits faster than they are exploited, is entirely uneconomic. Extant value is being destroyed.

Fossil fuels might have served as a bridge resource to a sustainable track. To date, this has not been seriously persued or attained.

Matt Ridley is an exceptionally uninspired apologist for nonsustainable extractive practices, and is not a relaible or credible guide.
I think people object to the bad faith with which these actions are done:

- sharply criticizing the US on race, but hiding black characters in Chinese movie posters (eg, Star Wars)

- sharply criticizing the US on sexuality, but removing gay scenes from Chinese and ME versions (eg, Harry Potter)

To me, it’s like men who beat their wife because they’re angry someone at the bar was rude — but are too cowardly to confront him, so they take out that aggression at home.

Similarly, movie companies aren’t standing up to real bigotry in China or the ME — they’re coming home to abuse us domestically, over things we don’t even do.

I think that abuser mentality is abundant among the “Wokerati”.
I think it is more to do with your maturity allowing you to see more of your weaknesses.

When you are young, myopia makes you think you know it all and can solve everything. Young devs run gun ho into things and they focus on happy paths and ignore a lot of the complexity that you learn from experience, noting there is some exceptions.

The second problem is scope, when you are a junior you normally have a single project and a lot of guardrails to support your learning, and typically just need to think about a small bit of code. As you become more senior you are suddenly responsible for a P&L, other people, lifecycle management, stability and scalability.

Last year I was feeling overwhelmed and couldn't learn Quarkus and Java. Turns out I just needed a week of focus. I was able to take my years of .Net, PHP and JavaScript experience and produce amazing code in Java.

My biggest blocker to learning was managing other people, projects, scope, budgets, requirements, approving leave requests, preparing status reports, managing vendors, interviewing candidates, dealing with shareholders, backlog grooming, workshops, committee meetings, CAB preparation, ARB negotiations, and the desire to be instantly good.
The Future of CSS: Cascade Layers
Yeah, PHP sometimes pretends it's a C derivative. I think it's a stupid idea most of the time, especially with regard to strings. C string handling isn't anything scripting languages should copy.

Besides, PHP now has its own (partly duplicate) class-based stdlib for some things, why not be consistent and "replace" all of the old stdlib?
Of course, IBM's consulting record here isn't great generally. They were also behind the Queensland Health payroll system disaster too, which began as a contract for less than $10 million and ended up costing $1.25bn.
It's not really my place to warn you since it's not my problem, but I take exception to your assertion that the poster is in error. I think we should raise the bar, and check ourselves when being too critical. Try not to panic when other folk throw out ideas, even when you find fault in them. I didn't expect this to be a political topic, unlike abortion the last few days. Yeetsh!

I've been recently working on a new system that involves a custom IDL. We ended up adding a "[<=]" syntax, but we were worried it would be confusing to new developers. We realized it would make people happy to have an excuse to type smiley faces, though.
Oh lol, the synth part started right after I quit
Where do space, time and gravity come from?
That still offers very little explanation about what their motives could be. Do they just want to generate some money, or are there actual concerns about backwards compatibility?
> This RFC proposes to deprecate options 3 and 4 in PHP 8.2 and remove them in PHP 9.0.

Why remove it? Why break everyone when you can just deprecate it indefinitely or at least for a very long time?

Deprecated it, write clear warning messages with links to official docs, suggesting alternatives. Update official docs to reflect the idioms. Done.

PHP as a language and ecosystem seems to be evolving backwards from a reliable, productive and accessible tool to something that is breaking callers, introduces versioning and upgrade issues.

And it's already harder to debug than competing languages, because errors are spread across the server, the language runtime and even within that there's different types of error systems with error reporting, exceptions, error values and so on.

I'm impressed by some of the improvements that PHP went through and there are some rock solid tools and libraries (the star here is composer) but at the same time I feel less and less confident using it from a stability perspective.
You are watching the wrong ones.

Watch some that are on film festivals, on quality tv channels (in Europe public tv broadcasting channels) etc.

Usually someone just wants to show interesting stuff without a political agenda.

Unless they are doing it the opposite way - have and agenda and want to support it with their documentary film.
I'm currently watching the Andy Warhol documentary series. 20% of the documentary is about his art and 80% of it is about who he slept with.
Lifting weights doesn't translate to deadlifting. That's just one exercise of many. Weights and other exercise helped me. I don't deadlift though.
I also love Clojure and find it a very productive language. But surely the article makes it clear it falls very short of ‘real’ Lisp environments? There’s not much that Emacs and CIDER do that is so different to modes for other languages mentioned in the article with REPLs. If you’ve ever had stale protocol/record definitions in a Clojure REPL you know it doesn’t provide the features described. The whole ‘reloaded’ workflow is built around these limitations.

All that said I’ve never really liked this idea of editing as you go with extreme late binding in the debugger. Just seems a recipe for non-reproducible code. I love being able to explore and experiment in the REPL, but ultimately everything coalesces into code and tests in files. These give me far more confidence to move forward than a long lived REPL session.

There’s stuff like Reveal[0] which is interesting but I’ve only ever found it a marginal upgrade on pretty printing, at the cost that it sits outside Emacs so slows me down anyway.

0: https://vlaaad.github.io/reveal/
Isn't another issue also that WGS-84 is fixed globally, which'd mean that due to continental drift, local coordinates would be constantly shifting? Whereas the current local grids are usually fixed with regards to the local continental plate, so coordinates remain relatively stable-ish because the whole local grid moves together with the continental plate.
Question, if you are a library/program author why would you intentionally use a panic and not cleanup and return an error? Maybe I misunderstood and in fact good developers never trigger panics unless there is no way to avoid it, like if they could not prevent it with more checks or is it impossible to cleanup because they already fucked up, wrote garbage in the process memory and safest thing is to kill the process.
TIL!

Though I've got ... questions and concerns about how certain we are that there's no large-scale heavy-element fission occurring within the Earth's core.

I'd think that within the nickel-iron core, one might find even heavier elements, that those would have sunk through the primordeal (and one presumes, not-yet solid) inner core, and would tend to have greater radioactivity.

How to demonstrate this does seem something of a challenge. Decay products and/or neutrino flux, possibly?
"then there is less incentive for investor/landlord to build housing, which makes housing scarcer and drives prices up."

This doesn't ring true, it just moves the incentive to people to build housing to live in them selves, and with less competition in the market it would drive prices down.
Rather short article, loaded with ambiguity and very short on useful information. In hopes of saving you a click, here's my own summary:

Basically, China's government has ordered government agencies AND "state-backed" (which I think means, "government owns some portion of shares") corporations to dump any technology - hardware and software - not domestically-produced. Bloomberg cites anonymous sources only, received no reply when contacting officials. Order is likely to exempt stuff they can't replace with their own equivalents realistically for the foreseeable future, like CPUs from Intel or AMD (example cited in article).

Source claims Linux to replace Windows for most use cases. Multiple Chinese companies saw shares up in Hong Kong and Mainland exchanges on the news.

---

Discussion:

If China intends to have folks drop Windows for Linux, does that signal an official and total shift in future policy for TIA efforts? (TIA = total informational awareness; their domestic spying, dissent monitoring, and information control campaigns.) Since Linux source code can be audited by the entire world at will, does that policy shift signal that they intend to target hardware-based backdoors and related vulnerabilities/exploitation almost exclusively in the future? Seems that's the trend anyway, but does this signal an official shift in future policy?

And if so, what are the larger implications for software security on Linux in the future, if any? Will a reduction in vulnerability research for Linux kernel and adjacent projects inadvertently allow more exploitable bugs to worm their way in over time? If it's not actively targeted, how are we going to detect new, emerging vulnerabilities? (Other efforts and lack of existing disclosure - aka "private exploits" - withstanding, of course.)

If indeed an official shift in policy is happening, will the re-allocation of efforts toward hardware backdoors functionally increase the risk borne by citizens of western democracies (and their governments) when using PC/server hardware components manufactured in China? (E.g. if you buy some RAM for a new rig, and that RAM was manufactured in China, will you have more risk of that RAM being stuffed with backdoors in the firmware than you already do? Swap in any basic component for "RAM" here, you get the idea.)

Admittedly some of these questions might be a little bit tinfoil hat territory, or reading too much into things, and their reasons for doing this are obvious and well-founded. I think we in the US should bar all Chinese-made components for the same reasons. And as governments start doing that, I worry about the long-term implications of the lack of cooperation between people/researchers/engineers worldwide, and what narrow-minded, myopic outcomes might result over the next ~25-50 years. Will we wind up so isolated in our own little silos, so militant in believing "our tribe is the best tribe", that cooperation/interop between the two cultures and technologies will become nearly impossible?
> Exceptions gives us a nice way to let problems bubble up to the surface, while also stating what the problem was, and where it occurred.

Work is ongoing on some of this, but there are popular libraries in Rust (like `anyhow`) that let you attach backtraces to regular errors, add context, etc. Propagating erros to callers is handled with the standard `?` operator, which means "short-circuit and return this if it was an error, otherwise give me the successful result". This has the benefit of making early exits explicit, without interrupting the visual flow of straight-line code.
Don't panic: this deprecates `${var}`, which is a less-common syntax for interpolation, but leaves the most common ones, `$var` and `{$var}`, in place.

It reduces the number of slightly different ways to do one thing, and clears the ground for adding any-expression interpolation, which PHP is currently missing.
We could debate that for a long time, but my point was different: There's no sane function in today's PHP that parses ints and handles errors (defaulting to 0 doesn't count).
That should be the idea, but the match score never worked out well for me personally.

Specifically at some point it seemed like Netflix started weighting all their own content much more heavily than others so the match scores on Netflix shows were much higher, even though obviously Netflix producing a show has almost no bearing on whether I'll like it or not.