skysight-inc/HackerNews huggingface dataset:
Sometime in the not so distant future

> Those old yubikeys [or similar HW device] have a flaw and are weak so we [read: the government] are deprecating them. You can change them here for the next year or use your phone or install our app.

Further in the future after a few cycles of the above

> Too few people use HW tokens so boot up your spy device now to log in.

Maybe it won't be HW flaws maybe it will be software. Maybe they'll mandate use of some chrome only feature. Maybe they bring out the Xbox authentication drink cans.
https://github.com/danstiner/rust-u2f
https://github.com/google/OpenSK
Agree with what? OP is no making any point, just a joke.

And if I am to take the joke more serious, it would mean that there is no defense whatsoever for using SPA. It just indefensible. Which is a different argument of ”SPA for everything is ridiculous”.

So either there is no point for you to agree with or you disagree.
I'm using 2fa for email as well. It made my life more secure.

When I read this announcement I was happy because this means 2fa is getting even more known,.accepted and used.
there is a good chance Musk moves to some sort of subscription model in any case, in an effort to wean off dependency on ad revenue. He might also just run Twitter as a loss lead, so long as it is not a money pit he might not even be motivated to make it into a profitable business.
Hands-On: X25519 Key Exchange
If your social anxiety or trauma prevents you from interacting with men and women in an equitable way, then it's absolutely fair for your interviewer to reflect on how it impacts the workplace and proceed accordingly. "Treat men and women equally" is a perfectly valid professional expectation.
My favorite is when Intel demoed the new ivybridge iGPU by having a guy fire up VLC player to play some footage of a racing game while he pretended to control it with a steering wheel controller.

I looked this up and it's actually even worse than than I thought. When called out he claimed it was being control from backstage.

https://www.techpowerup.com/158448/that-dodgy-intel-ivy-brid...
> that key cannot be reversed to get the original features

"As a result, the early common belief among the biometrics community of templates irreversibility has been proven wrong. It is now an accepted fact that it is possible to reconstruct from an unprotected template a synthetic sample that matches the bona fide one."

-- Reversing the irreversible: A survey on inverse biometrics

https://www.sciencedirect.com/science/article/pii/S016740481...
NREL Scientists Advance Renewable Hydrogen Production Method
No. Nim always throws an error if you try to define multiple variables/procs that are conflicting.

--styleCheck:error strictly enforces camel case.
I'm so sorry, I'm not 100% sure I understand this comment.

Would you mind explaining what you mean by asking others to adjust for your sake in the context of mobile web accessibility? I'm having trouble connecting it to the content of the article. I'm not the writer, but would love to better understand your point of view here.
Just to put this window Mr.Overton left us where it belongs, it is a criminal offence in Britain to say anything deemed homophobic even within the confines of your own domicile even to your own family members.

Law described:
https://www.christian.org.uk/news/views-expressed-in-private...

Law passed:
https://www.gov.scot/news/hate-crime-bill-passed/
I'm already using 2FA with github and it doesn't impact anything else (including git / ssh).
> the extra computation to do everything in WGS-84 space is insignificant

There is still significant overhead involved in conversion - arbitrary trig functions, even optimised, are still really expensive compared to planar geometry. Remember these folks will be working at super high resolutions too.
I highly recommend Swish as an alternative to Rectangle. Recently discovered it and wouldn't go back. The main thing that sold me is the ability to resize two windows by dragging the divider between them (similar to how Windows works).

https://highlyopinionated.co/swish/
Weirdly enough, not true for flies. They love vinegar.
Ideally there would be a way to create "tickets" or something from an authenticator in advance and then use them for registration without physical access to the device. Then I could have 100 tickets from my backup on my master, keep the physical backup in a secure offsite location, and enroll new services using master + backup-tickets. When I run out of tickets, generate 100 more.

Being able to export/back up/restore master secrets would be nice too.
Indeed it was. But no more. The Perl community has decided to make many of the mistakes again. It is very frustrating.
I remember being at minor league baseball games in the 90s, waiting for dark to see fireworks after the game, and getting absolutely rained on by moths falling from getting cooked in the stadium lights. The cloud of moths would be so thick it would partially obscure the lights. The girls would scream and the boys would scoop up handfuls from the ground to throw at the girls.

... Not me. Other boys.

Anyway. I don't think the mosquitoes got the memo. I feel like I get more and more bites every year.
Your comment represents the same worthless platitude.

It doesn't make sense to say "yea your life is significantly worse than your parents, but hey at least you aren't a slave building the pyramids at Giza."

The fact is it's relative. People are, in general, worse off than their parents were in the west at this point in time. That matters.
Until they very quickly ruined Marketplace by heavily promoting low quality new and "shipped to you" items rather than local used goods.
Completely anecdotal but I seem to remember flies banging their heads on windows a lot more when I was younger.

Now they seem to be able to navigate their way out with comparative ease. Open a door or window and waft them in the general direction and they seem to be able to escape.

I've been wondering for a few years if this was evolution.
LEARN - EARN - LAUGH

The Maverick Of Wall Street.
This guy plays in his one league.

He educates you 100% FREE.
He brings Gov. crimes into the light.
He rant's in such a funny way that you get addicted.

Learn, earn and have fun with the one and only MaverickOfWallstreet on YouTube.
No, I'm offering an alternative solution that would have a greater impact on the good
But they need your password first. So you’re not in a worse position than if you didn’t have 2FA. Parent was implying 2FA made it worse.
Why do you trust your laptop scanner? Have you let other people try to unlock with their fingerprint?

FWIW, my daughter's laptop is a Dell.
The blog post only mentions Mobile Push and WebAuthN. Is Github deprecating TOTP 2FA?

I also can't believe how many people are complaining about requiring 2FA. I have 2FA enabled for every single service that gives you the option. Backup Codes live in my password manager, and I have multiple yubikeys that I enroll whenever it's an option. It's been 10 years since I started doing this, and I've never been locked out.
I think the point is it's up to the relying party to make the decision; so an uneven user experience is possible.
It's the reason why IIRC Server still has the old Start button which emerged in Windows 95 . Consumers version are plagued by the new menu but you can cure it with a free software called "classic start menu" or something like that.
Fair enough, but the beatings must continue until the attitudes improve.

It's the only way.
Interactive Brokers | Go Developer | New York/Chicago/DC/Chicago/Ft Lauderdale/Connecticut - United States | Hybrid www.interactivebrokers.com

If you love working with Go, this is the job for you. This is a great opportunity for someone looking to break into the Fintech industry. We are a small technology group seeking a self-starter that enjoys the craft of coding and developing innovative solutions. The ideal candidate is someone who can communicate well with the business side and take a project from conception to a finished project. We offer mentor-ship from seasoned, senior developers. Position is hybrid model 3 days in office 2 days remote.

Apply online here https://boards.greenhouse.io/ibkr/jobs/6023048002
> You can put an auth cookie in a browser and achieve 2FA for 99% of use cases without bothering anyone.

Confusing, obviously incorrect.

> No reason 2FA can't be just two passwords.

Maybe somewhat less obviously incorrect, but still incorrect. Passwords can be phished easily, are managed by users, etc.
Show HN: 20 thoughts on marketing your side projects
How is this not Amazon minus each storefront page is custom designed?
> Watching the current war, I think those drones are not that useful

I'm going to copy an analogy I saw elsewhere: what we're seeing now is the equivalent of how planes were used in WWI; slow, not very effective, with limited range and roles. By the time WWII came around, there was technological and strategic improvements leading to to high-alt bombers, fighter escorts, dive bombers and jet engines. Nothing a WWI pilot would recognize. Drones will likely evolve in ways that would make their current use seem quaint.
> The fact that GitHub assumes to be in this position is alarming.

it's kind of true, isn't it (for certain programming languages)?
But we did see performance improvements by restricting the language in certain ways that aid in static analysis, which allowed for more performant runtime code.

Well, yes. In Python, one thread can monkey-patch the code in another thread while running. That feature is seldom used. In CPython, the data structures are optimized for that. Underneath, everything is a dict. This kills most potential optimizations, or even hard-code generation.

It's possible to deal with that efficiently. PyPy has a compiler, an interpreter, and something called the "backup interpreter", which apparently kicks in when the program being run starts doing weird stuff that requires doing everything in dynamic mode.

I proposed adding "freezing", immutable creation, to Python in 2010, as a way to make threads work without a global lock.[1] Guido didn't like it. Threads in Python still don't do much for performance.

[1] http://www.animats.com/papers/languages/pythonconcurrency.ht...
Hyperdock is one of the best purchases I've ever made. It allows you to assign hot keys to window management - e.g.

alt-left-mouse: grab anywhere in window to move

option-command-left-mouse: resize window from anywhere in window

Hasn't been updated in years but it still works on Monterey though it occasionally requires some kicking. I've looked for alternatives that are more up to date but can never find one that does the above - it's really all I want in a window manager as I don't like automated tiling and other features.

https://apps.apple.com/us/app/hyperdock/id449830122?mt=12
I'm not claiming that people tell their children this verbatim. I agree that this is what they are effectively being blasted by from media sources and this is very detrimental.

I also think that the pessimism is vastly overstated. Constant comparison is a recipe for disappointment just as much as if you compared your life to a celebrity on social media. There are still vast sources for happiness and life satisfaction that are untappd
This page is meant to be a digression from my "{Protocol} Illustrated" pages (linked at the top of the X25519 page).

In all three of those pages (TLS 1.2, TLS 1.3, and QUIC) I've had to explain key exchange, and even describing as succinctly as possible it still interrupted the flow of the article (especially in TLS 1.3 and QUIC where it's the first operation performed).

To avoid doing a disservice to the key exchange process I broke its explanation out into this interactive page that lets you do your own toy exchange on the Curve25519 curve.
As, in "what does it mean to disable it, and how do I?"

Some corporate training long ago had "I can't see videos" and "I can't hear things" toggles that were not mutually exclusive.

If you set it to "Hellen Keller mode", you could just read the training at your own pace. It was glorious.

Thank you, accessiblity advocates!
If web of trust was a workable system, i wouod have been used in some industry by now - engineering, law, anything.

But you criticism is based on a fantastical benchmark that was never seen in practice
Thanks for taking a look! We're excited about the mechanism, and about our early enthusiastic users.

You're right that the conversations going on now are mostly a bit high-brow or formal. This is mostly an accidental feature of the way we rolled out the site to people we thought would like it. Many of them are professional writers!

But absolutely, Radiopaper is also a good place for banter or conversations about whatever (keeping in mind our content policy, naturally: radiopaper.com/policies). Sports gossip, politics, whatever — go for it!
My only experience with FB marketplace had a gal selling an iPad from the northeast…only to receive a receipt from a dude in Turkey.

FB, PayPal, the bank all stopped the charges quickly enough, but it was 6 weeks of bullshit in the meantime.
It's one thing to have someone write a toy program. It's another to have someone write seven increasingly-complicated toy programs. That's really grotesque and overkill.
Yes that's fun. a

List<Foo> getFoosToUpdate(List<Foo> foos, List<Bar> bars)

function is the first time I thought about time complexity in my job.

Say Foo and Bar have fields in common, such that you can say a Foo object "equals" or "matches to" a Bar object, like if they have name and dateOfBirth fields or something else that are the same (nothing like a common ID between the two). Now say there are some other fields too, like amountSpentThisYearOnDogFood that you know is always accurate for Bars, but might be out of date for Foos. How do you get the list of all the Foos to update?

Initially I did the nested for loop solution that's like

List<Foo> getFoosToUpdate(List<Foo> foos, List<Bar> bars)
{
List<Foo> returnList = new List<Foo>();
foreach (var foo in foos)
{
foreach (var bar in bars)
{
// check if "equal" or "matching" based on some criteria
// if equal, update foo dog food expenditure with bar dog food expenditure, add to returnList, and break
}
}
return returnList;
}

but that's O(n^2) right.

The solution with a Dictionary is obviously better. All you need to ensure is that you have a method for both the Foo and Bar classes that will produce the equivalent hash for both, if they would be considered equal or matching by whatever criteria you are using.

So you could have something like

int GetHashOfFoo(Foo foo)
{
string firstName = foo.FirstName;
string lastName = foo.LastName;
DateTime dob = foo.Dob;

return (firstName, lastName, dob).GetHashCode(); // convenient c# method
}

int GetHashOfBar(Bar bar)
{
string firstName = bar.FirstName;
string lastName = bar.LastName;
DateTime dob = bar.Dob;

return (firstName, lastName, dob).GetHashCode();
}

These two functions will return the same value if those fields are the same. So then you can do something like

List<Foo> getFoosToUpdate(List<Foo> foos, List<Bar> bars)
{
List<Foo> returnList = new List<Foo>();
Dictionary<int, Bar> barsByHash = new Dictionary<int, Bar>(bars.Count);

foreach (var bar in bars)
{
int barHash = GetHashOfBar(bar);
barsByHash[barHash] = bar;
}

foreach (var foo in foos)
{
int fooHash = GetHashOfFoo(foo);
if (barsByHash.ContainsKey(fooHash)
{
returnList.Add(foo.CopyWith(dogFoodExpenditure: barsByHash[fooHash].DogFoodExpenditure))
}
}

return returnList;
}

Which is faster cause you only have to go through the bars list once.

I actually messed up something like OP with this, but with doing undesired additions instead of undesired deletions.

You can think of it as having two endpoints, both expecting a .csv with rows being the things you were updating/changing/deleting.

The problem was, there was a column to indicate (with a character) whether the row was for an edit, or addition, or deletion, but this was only with one of these endpoints. For the other, there was only addition functionality, but I thought changes and deletions were also options for the other kind of .csv due to some unwise assumptions on my part (thinking that the other .csv would have the same options as the other). That's how we accidentally put in over 100 additions that should have been changes that had to be manually deleted. Luckily I had a list of all the mistaken additions.
Unlayer (YC W22) Is Hiring
Ukraine just called their Bayraktars useless, and all the stingers, switchblades, Javelins, NLAWs have not delivered on their promises.

I have sent my friends and families videos of Javelins and Switchblade videos marvelling at how amazing these pieces of tech are. But given the numbers that have supposedly been pouring into Ukraine and what is realistically happening it seems more like an unrealistic sales video than actual performance.

So you might want to rethink that. By all measures the war in Ukraine is fought with Artillery + reconnaissance drones right now. And the one with the better recon and artillery seems to be winning.

To your cost tradeoff. It actually seems more like the real tradeoff is cheap armour that your factory can churn out at a realistic pace, while being an uncomfortable powderkeg vs. really expensive equipment that you're too worried to use, because for every one that you use the other side can build 6.
and young people know they need to fix it - by misrepresenting and blowing every issue out of proportion and throwing names around so when actual problems arise most people have little more than a deep sense of tired antipathy towards others.
Search bar would bring the same problem to Shopify. Knockoff will always sell for cheaper, and will try to game the search so they'll end up at the top and quickly become the most purchased.

It's the lack of search that differentiates Shopify. You get to hear about the shop itself, instead of wanting a product and searching for the cheapest/best. This latter behavior means you'll always end up finding drop shippers or asian sellers. While in the former you find a merchant that you like, trust, feel has a good reputation, and you don't mind purchasing from them even if they don't have the best price (mostly because you can't easily compare the price).
That's not the same at all, you can still only drag the move bar – and it focuses the window, bringing it to the front. Moving and resizing background windows can very handy.
Rather than trying to convince web developers, how possible is this to get the feature depreciated in browsers?
It seems that lisp-like macros or more generally multistage compilation is close to what you have in mind.
> additional layer-7 context about identity, ... more identification of you

Mass surveillance. You can just say mass surveillance.
Thank you. A lot of people I know act like the problems of today are somehow astronomically worse than they have ever been, unsolvable, completely new, and in-addition-to all previous generation's problems ("nothing has improved in a hundred years!").

An acquaintance of mine told me over drinks, after complaining a lot about the current world and in all seriousness, that "I don't think there has ever been a worse time to be alive." I've heard similar sentiments, less drastically put, from quite a few people in person and all over social media. He wouldn't even backtrack after I started pushing him to seriously describe why life is somehow worse now than it has ever been.

It's infuriating, like seriously, you'd rather be born a random person 100 years ago instead of today? I can't even imagine someone wanting to be born a random person 50 years ago vs today (unless by random you mean "random middle class white heterosexual man in a western country" in which case, maybe your odds were better 50 years ago).

You'd have to be completely ignorant of almost all human history AND brainwashed by social media to come to this conclusion. Unfortunately I think this describes way too many people.
Show HN: Art Diario – Curated art on your desktop every day
Hey HN!

I made a little app that changes your desktop background to a new piece of curated art every day. Everyone sees the same art so you can talk to your friends about it!

I learned to code a couple years ago from a bootcamp to fulfill a lifelong desire to be able to create end-to-end applications. I've been a designer, I've been a PM, but I really wanted to be able to build the things in my head. This is my first attempt to build something entirely from scratch!

This seemed so simple at first. All it does is change your background! But I wanted a fancy little admin panel that allowed me and my wife to upload new art. I wanted to be able to make the crop that ends up on your desktop really straightforward. I wanted it to be cheap to host, so hella caching. Also, omg, timezones! Marketing images and websites!

There were so many pieces to this, it is honestly astonishing how much work indie makers put into their solopreneur apps. All mine does is change your background. The people who produce more complicated stuff are really impressive.

I'm excited and nervous to share this with you all! Thank you for taking a look!
yes, she was just a product manager
Free services with 2FA are a recipe for problems. You will eventually have your phone stop working, you will lose your hardware fob, and you will lose your recovery codes that you forgot where you hid. There is no paid support, so you get what you pay for. Trying to get back into your account, if it's even possible, will take a long time and lots of work. If you are abroad and need access, you might be screwed. If it's not hard to get back into your account at that point, their security sucks.

I think we all need to consider the possibility of moving off of GitHub, or at least keeping a mirror of everything on another provider, and making sure any long-lived services that pull from GitHub know the other provider to use. You don't want an account lockout to mean you've lost all your work.
True. In my case, I'm using Github's built-in Jekyll implementation, and I prefer to keep it as bog-standard as possible, so I went with in-browser rendering. I expect that one day many years hence, something will break and my diagrams will stop working.

One day, I should sit down and manually render them all to .png and update the markdown to use the .pngs instead. But today is not that day. Tomorrow isn't looking too good, either.
This is an incredible API I wish existed in the browser (maybe over WebRTC?)

addEventListener("fetch", (event) => {
event.respondWith(new Response("Hello world"));
});
> upstate NY— the birth of fly fishing!

According to Wikipedia, fly fishing was known in the Roman Empire ¿Am I missing an obvious joke here?
It's more like 19 being too busy to be at the game in first place on the infinitesimal chance you get called up.
Well most articles on HN work fine with JS disabled by default, apart from /show which usually has JS SPAs.

To be honest, it is a pain sometimes having to temporarily enable JS with uBo just to make a website work, but it's the price I pay for a modicum of privacy (and accessibility) on the web.

I have good muscle memory though, and the act of enabling JS with uBo is so ingrained in me, that I often do it without much effort.
> That's not Python doing numerical stuff. That's C code, called from Python.

That's sort of a distinction without a difference, isn't it? Python can be good for numeric code in many instances because someone has gone through the effort of implementing wrappers atop C and Fortran code. But I'd rather be using the Python wrappers than C or especially Fortran directly, so it makes at least a little sense to say that Python "does numerics [...] well".

> Not unless they're pushed to, like Python was.

R and Matlab, maybe. A web server in Stata would be a horrible beast to behold. I can't imagine what that would look like. Stata is a terrible general purpose language, excelling only at canned econometrics routines and plotting. I had to write nontrivial Stata code in grad school and it was a painful experience I'd just as soon forget.