skysight-inc/HackerNews huggingface dataset:
That's fair, but also the fact that we're comparing hobby scheme implementations to two mainstream extremely popular implementations of Python and setting up conditions that forces (hobby) Scheme to play to Python's relative strengths is telling. :-)

The Python ecosystem has certainly received a lot of developer resources and attention the past couple of decades. Shall we compare the performance of CLOS on SBCL, which again has seen comparatively little developer resources, to Python's performance in dealing with objects? I'd take that performance wager.
Why not tax say 20% of the new profits and help the poorest who are most hit by gas price inflation?
Which SDK? I'm hearing internally that we do have extra context still.
> Did you know that Cinderella's evil stepsisters had their toes and heels cut off

The Disney version of Cinderella is based on Charles Perraults version, which is significantly different. An Perrault is older than Grimm, although both are based on older traditions.
Sounds so dystopic, I glad I was not old enough to use online banking back then
You wouldn’t believe how many near-FAANGS have hundreds of large backend services on Python without any issues and from times where typing was in docstrings.
You asked for a successfull web of trust, not a great example of an encrypted email client.
Wouldn't be that weird if they were. Perfect fit every time and any customizations he wants, for a relative cost that'd be indistinguishable from "free", considering how much money he has. Why not? If I could pay nickels per item and get bespoke-everything, I absolutely would.
> you're password

Pardon my pedantry, but you should only use the apostrophe (') to show you are joining two words.

In this case, the words are "you" and "are", merging into "you're". "you are password" is what I read.
> so if people like you, who don't care about that, select yourselves out - perfect!

This is an ad hominem.

You don’t know anything about security measures they do or do not take — just that they don’t appreciate a vendor mandating their security policy from a position of presumed authority.

That kind of bad faith comment isn’t constructive.
As a mac user, and more importantly, as an admirer of their UX design, I have to agree with this. Not perhaps specifically this point, but in general with the keyboard.

Muscle memory is not to be fucked with. Cmd vs Ctrl still gets me now and then, and even if it's rarer now, I can feel the cognitive context switch in my brain as I switch between devices. Sometimes it's better to play along even if you think you have a better way. Or at least offer the option (there is a time and place for spacebar heating).
Ask HN: Freelancers in EU, best bank to get paid in USD?
To my fellow freelancers who live in the EU: What's the best bank to get paid in USD? I live in Germany and currently use Revolut, which works fine. But I don't particularly like the company and the app experience. I'm planning to switching to Wise, even though they are more expensive.

Do you have any recommendations?
Is anyone working on adding Mermaid support to Swift's DocC ?
I believe this was called "slurp mode" when they first announced the product
That is exactly what Safari supports. Safari supports TouchID, FaceID (on iOS), and also supports storing data in a remote device with a QR code.
> Using an M1 right now and Zooom/2 still works.

Same, but Rosetta 2 won't be around forever. Dreading the day Zooom/2 stops working and I can't find a replacement that lets one move and resize background windows.
It drives me crazy when I try to scroll up to re-read something and the header pops up and covers what I was trying to scroll to.
As in "ASCII art"?

Generalized to "Unicode art" input, with smoothed output in SVG format:

https://github.com/blampe/goat
It’s just the v2 take on the crypto hype. There is no real need for 99.9% of the crypto yet they got value.
>I mean where am I supposed to store the recovery key if not in my password manager?

My password manager (keepassxc) supports multiple databases. I store all TOTP recovery codes in a separate database (and with a different unlocking password) from the one that has regular passwords and the TOTP secrets.

All my databases are backed up on someone-else's-computer, but I only keep the regular-passwords-and-TOTP-secrets database synced to my devices.
I'm surprised how often I reach for racket just to check something out or explore an idea quickly. I've never taken anything too far with it but it's an incredible tool for that, and because it's so easy to implement languages in it most languages have an implementation in it.

A couple weeks ago there was a burst of posts on HN about prolog, a language family I know nothing about. Took no time to spin up dr racket, find a prolog dialect in it, and play around.

I probably do something like that with it every couple months. And yeah being able to easily visually output stuff from a new language without having to grapple with the tooling and output quirks of a new language takes so much of the initial friction out.
If you are talking about large sets of numbers, then the speed up will be far below 1%.
I work in a small company and we have to have SSO for compliance reasons (SOC II, HIPAA, NIST, etc)

It’s dumb but without it trying to tick all the compliance boxes is much more annoying.
Can you not do that just fine with karabiner-elements?
Excellent list of UI challenges. I’ve been working through a similar list of my own to see if I can make a widget library I’m building in Nim do this [1]. Building on an event-driven immediate mode GUI has been fun.

Now I’m totally going to run off this list. I've only got circles and cells left before I can do all of these challenges.

1: https://github.com/elcritch/fidgets
You can move (or do anything to) a background window without focusing it by holding `cmd` while clicking or dragging.
How to conquer American political divide?
Many argue that the right/left political divide is particularly pronounced at the moment in the United States - perhaps too much so.

I'm not for a moment suggesting that this problem should be "solved" per se - a healthy political divide is necessary for the exchange and development of ideas. But I wonder if there's a way to render it more effective, and at least mitigate the seemingly visceral divide in American society. Any ideas on how the internet could help in this realm (for once)?

What about a website where ordinary citizens of opposing views get matched up, and are forced to have a video call with one another on a particular issue e.g. abortion. I presume a video call with a stranger would somewhat encourage "listening" and general "politeness", more so than on Twitter/Facebook.

Maybe you could record the calls and post them for others to watch.

Any thoughts on this topic?
Always do a dry run when deleting many things with code.

- Captain Obvious
This feels like you are describing julia, startup cost included :).
>Despite being much much more APKs than Ipas (and the gradient likely increasing (any data ?), this doesn't seems to affect much markestshare. What the IOS market needs to fall is to miss some killer apps.

Market share doesn't tell the true story. It's all about revenue. Apple generates nearly twice the profits of Google from one third the number of devices.

https://appleinsider.com/articles/21/01/05/app-store-earns-7...
Had a similar experience with Cub Scouts in the 70's. I just stopped going. Joined the Boy Scouts because I had several friends who'd joined and were talking about the awesome camping adventures they had. That went well until the Scoutmaster quit 2-3 years later for whatever reason. The new Scoutmaster wasn't into the high adventure camping and believed the troop should head another direction. That was the end for me.

That's the single biggest problem with scouting - your experience is going to be largely dependent on the adult leadership. You can have dramatically different experiences depending on what pack or troop you're in and leadership changes often make what was a good experience a poor one.
> the actual job of being a professor has a lot more to do with politics than it does with academics. Teaching, which is supposed to be one of the core businesses of the academy, is actively frowned upon.

Any actual or former professors here agree with this? I don't.

People with equivalent seniority in industry spend plenty of time on politics, early startups possibly excepted.
> As a footnote, Python does package management much better than alternatives.

If you use it as a scripting language, that might very well be the case (it's at least simpler). When you're building libraries or applications, no, definitely not. It's a huge mess, and every 3 years or so we get another new tool that promises to solve it, but just ends up creating a bigger mess.
I think facebook really used to be a useful tool. It was easy to meet and add people there, organize events, share photos. And then it became more, and more, and more, and stopped being useful at what it was useful at.

If I was heading facebook product, I would move all that fluff to other apps, and make the core of facebook a useful simple tool to connect people again. The removal of the historical newsfeed is the first thing that shows that it’s not made to be useful anymore. Listen to the users.
> Is it not economically rational to replace people with machines and concentrate wealth in the hands of the machine owners regardless of minimum wage policy?

No. Automating a person's job away makes sense only if the cost to automate is equivalent to or less than the cost of a person, and also if the automaton does work of equal value or higher value. Otherwise, it is not worth it. There are also situations in which a automaton is never the correct answer. For example, a barista: the culture of a coffeehouse is such that a human is preferred. This is likewise true for a pub, and myriad other situations. The only way that these jobs get automated is if the economics of them becomes otherwise impossible.
I think you mean they underestimate how resilient kids are.
Only if you think the amount of energy released by burning 16 gallons (US) of petroleum spirit is "large".

I'm sorry; I don't agree that "c^2" is an important part of the equation; it's a constant, so if we're setting aside units, then it's meaningless. And it's just one of several constants; focusing on the speed of light as the key constant is misleading, making the constant of proportionality look "big". But it's not big or small; there's nothing to compare it to, so using comparative adjectives isn't reasonable.
Totally agree. I go pretty far out of my way to make sure my mom gets plenty of time with her grandson, which she loves.

It also burns my ass to hear my wife say “I couldn’t have imagined how much I would like being a mom”. Society and culture is so screwed up around children and raising a family.
This is typical no-information opinion piece. IMO, there is nothing wrong with only having "old" people on your social network. The 30+ age group is the one with cash and eyeballs to spare anyway. The 30- group change their apps like cloths, have little cash and has attention deficit. Which age group should you be focus on?

The problem with FB is just their newsfeed algo. If I go to individual friends, they have lot of interesting posts but none of them show up in my newsfeed. Someone in that org ruined FB.
Ethylene: For Fun, Profit and Produce
For most people living in a western democracy, this is a pretty minor consideration to their threat model.

Most people default to what is easiest. Before TouchID, most iPhone users did not lock their phones with a password. Making biometrics readily available and default means more people are walking around with more secure devices than would be if we only encouraged people to use the absolute most secure options available.
I think "ideally" you print out the codes and physically secure them somewhere, so the risk isn't high. Recovery codes aren't about safety from being hacked, they're about mitigating the risk of you losing your 2FA code device.

In practice, 2FA is just another password anyway. What it really helps with is password reuse.
David Sacks: Investor sentiment in SV is the most negative since dot-com crash
What company isn't? My problem with this is that I can't think of a company that started as anything other than a missing feature.
For apple devices the keys are stored in a secure element. You need your password to access when booting, or after certain timeouts. Until then you can’t use faceid/touchid
Does YouTube’s Autoplay Feature Hurt Its DMCA Safe Harbor Protection?
Chess.com absolutely addicted
Show HN: Building the metaverse version of the Million Dollar Homepage
I look at it this way, and see two counterpoints (though I could be wrong):

1) the product has to get to you anyway. Whether they do that in two days or a week, it doesn't seem like the T+NUM_DAYS variable would impact the environment differently.

2) if not for rapid shipping, a lot more people would go out shopping at stores a lot more. A single truck making a lot of deliveries-- even though it's running for 8-13+ hours, may still be more efficient than all of those people making multiple trips to different stores to get what they need.
I use FreeOTP+ open source authenticator with Paypal without any issues.
You make very good points! The user focused design work of the FIDO group feels like a large departure of traditional designs, but need not be viewed that way in terms of those elements.
NordVPN may pull servers from India following IT Ministry order
Swap out NVIDIA for Netflix and you can still have AANG.

And then the fire nation attacks.
Writing good VQGAN+CLIP prompts part three – environmental modifiers
Your local pawn shop is also aware that possession of stolen property is a crime, and in some jurisdictions, a second degree felony. During every transaction, pawn shops will ask for a government-issued photo ID for recordkeeping purposes for the very reason you mention: the possibility of acting as a mechanism for the fencing/laundering stolen goods. Social media and blockchain make it exceedingly simple for an owner to announce their digital asset was stolen/fraudulently transferred, so ignorance is unable to be used as a defense.

https://en.wikipedia.org/wiki/Possession_of_stolen_goods
The best-case ordinary person is going to store them in "<user name>/My Documents/Security Keys/keys.txt".

The average-case person is going to ignore the generated keys because they are deluged with nonsense every day and can't filter out what is important anymore. Lots of people will get locked out of accounts before they learn that there is now yet another unwanted tech bureaucratic layer to take seriously.

I'm guessing in 5 years it will be normal to set up security questions for 2fa recovery keys. Or we'll add another 2fa for 2fa key recovery. The adding of layers will continue until we are all "secure" and we'll all have to ask for our misplaced keys from the NSA.
To be explicit, the fix is to go into the trackpad options, more gestures, and change "swipe between full screen apps" (poor name choice) to three fingers.
Younger people will be the ones enduring a transformation of our economy as they attempt to prevent the worst consequences of global warming.

Also, not sure what "grow up" means in this context. Quietly endure injustices and environmental catastrophe instead of speaking out and taking action?
The problem with Django services is the insanely low concurrency level compared to other server frameworks (including node).

Django is single request at a time with no async. The standard fix is gunicorn worker processes, but then you require entire server memory * N memory instead of lightweight thread/request struct * N memory for N requests.

I shudder to think that whenever Django server is doing an HTTP request to a different service or running a DB query, it's just doing nothing while other requests are waiting in the gunicorn queue.

The difference is if you have an endpoint with 2s+ queries taking 2s for one customer, with Django, it might cause the entire service to stall for everybody, whereas with a decent async server framework other fast endpoints can make progress while the 2s ones are slow.
Why We’re All Forgetting Things
Note: The max texture size can also be applied as a build setting. But this allows you to say set 99% of you texture max sizes to like 512, while setting a handful higher .
This is of course implementation dependent, but ideally a recovery key is single use. You should also be notified by email or some other channel that the recovery key was used. Then you are immediately aware if this use was unauthorized and you can take appropriate action. This type of response is not possible for unauthorized password use.
I'm guessing you didn't click the link.

The "content" was a forever-spinning "Loading" animation. To say something about how SPAs are sometimes really broken. It was a joke.

I made a joke about how developers need to be beaten.

The frog is now fully dissected.
Fair enough. Last I saw it was around 128 days total in a calendar year, which perhaps doesn't apply to you (the way you initially stated "you work in the bay area" seemed to imply you were here mostly full time).

These things are worth staying current with an attorney every once in a while. I don't imagine it would be very fun to find out the wrong way.
Mac OS on my iPad Mini 6 would make it a perfect device.
Gun – Decentralized Database for Developers
"they had no idea what I was talking about and clearly had no ability to actually do anything about the 2FA issue"

What are they supposed to do to fix your issue without compromising their security model?

What you describe sounds like 2FA working like it's supposed to.
I don't want my password to be something I leave behind on everything I touch, which the police have because I was arrested once, which can be ascertained from high quality photos, and which I can't ever change once stolen.
You forgot a couple letters, each of which represents actual human beings who have historically been denied fundamental rights and have been subject to violence, including state violence.

Also, your understanding of the origin of the welfare state is way off the mark. Sometimes, the best thing a person can do is spend a little time studying basic history.
AI-augmented interpretation of building blueprints in property insurance
It won't, at least not in the short term. For that to happen trusted platform modules would need an api to export a private key wrapped with a certificate signed by (none/one/all/a quorum) of members in the circle of trust and itself. This will need standardizing. Only apple has implemented it so far because it has total control of their ecosystem. I think for Windows and Chrome to work like this, they'll need to start requiring TPM vendors to implement this in their drivers, but I can't see it being cross compatible with the API in the apple TPM any time soon, especially because the circle of trust is now as weak as the weakest TPM, and it's a reputation risk for apple if a credential gets compromised because some non-apple device trusted by the user in an apple circle of trust got breached
Had a call with Tailscale (unofficially); this will be coming for Caddy soon.
>just that they don’t appreciate a vendor mandating their security policy from a position of presumed authority.

The account is with the vendor in question. The vendor is literally the only entity in a position of authority.
I handle social media customer service for a medium-sized US based company. We only sell to US customers. About one out of every fifty contacts we receive via Facebook are from people in the US.
Alternatively its interesting to imagine if instead of buying Nokia, Ballmer had instead doubled down more fully on cloud and bought servers to subsidize the transition to the cloud in order to compete with Amazon AWS. Azure wouldn't be playing catch up now.

It'd be challenging to try to sell handset manufacturers a WinMo license to compete with Apple (who makes money from HW and only more recently apps/subscription services) when Google was giving Android away for free to the same handset manufacturers. Even historically low margin Amazon gave up on the Fire phone.

Additionally smartphones are a very visible consumer facing product and thus very visible from an anti-trust populism perspective. [1] Imagine Steve Ballmer testifying in congress like Zuckerberg, Cook, Dorsey, etc. - he would totally have bungled it.

That said for consumers (rather than MSFT shareholders) a triopoly is for sure better than a duopoly.

[1] Bill Gates thinks Windows Mobile would have beaten Android without Microsoft’s antitrust woes https://www.theverge.com/2019/11/6/20952370/bill-gates-windo...
Funny enough, USB-C can transport analogue audio over USB cable though :)

Tends to be too expensive for the cheapest of products.
It's real, it exists.

But people who want to ignore it like to pretend it's something that it's not. It's raw intelligence. It's saying "Hey, here are things we heard you should check out."

It's a lot like the VAERS database. It doesn't prove anything on its own, but it can indicate things we should look into more closely.

And that's how a lot of people treated it: These are things we should probably check out.
>Instagram only allows you 10 pictures per album

That is good, not bad. I have never sat through a vacation slideshow with more than 10 interesting photos.
Because they have Joe Rogan.
When professors apply for promotion from associate to full in academia, and they don't get it, do you think they apply again? Clearly you would have to jump to a different company in your case if you are denied the first time unless there has been a total management turnover.
I think the whole point of HSMs is that you can’t back up (read: exfiltrate) the master secrets. Having said that, on certain Yubikeys you can store PGP keys on them, and put the same secret key on several different Yubis. If you’re relying on a hardware key it’s probably a good idea to have a backup key and make sure both are registered with whatever system you’re accessing. LastPass and GitHub at least support adding several different security keys.
I wish my PGP key could be used as a root identity for my 2FA keys :/
Yeah that looks similar! I think I've seen open-source terminal GUI (TUI) wrappers too.
I can easily run Pleroma on 1G VPS and Pi3s; the heaviest part is the Postgres server, which can itself be tuned to be pretty light. It relies on PG's native JSON data type which is cool. I run a couple instances and poked around with it for a few hours. I'd love to see SQLite support in Pleroma given that it allegedly has JSON now; there is a 2 year old ticket on their GitLab [1] mentioning it tho I've not spiked in to see if it's 100% plausible to port. Pleroma is written with Elixir that has a DB abstraction library that supports SQLite, I was just looking into it this week.

Even if SQLite JSON isn't sufficient it could be realized with string columns for now, and indeed SQLite is recommended by Library of Congress for archival storage and used by iPhone so I think it's a solid way to expand Pleroma even if native JSON is not sufficient.

If anyone wants to pay me to do this as open source I'd jump, contact in bio. I don't know Elixir yet but am motivated and have 15+ years of dev experience in all kinds of systems, and experience in the adjacent parts.

1. https://git.pleroma.social/pleroma/pleroma/-/issues/1333
Yea it's a shame. I feel like all of this could have been avoided with a simple ":P" or "/s" on the original post that sparked the whole controversy. I think we were all really excited about the discussion, but a single off-the-cuff joke got taken the wrong way and well... here we are.