skysight-inc/HackerNews huggingface dataset:
It actually upsets me there aren't more harsh stories for kids.

I'm a huge One Piece fan (on of Japan's most popular manga and anime for the last 22 years). In the first season, one of the main characters has her adopted mother murdered right in front of her when she's like 7 years old.

And, if that's not bad enough, her town is taken over by thugs, she spends the next 10 years working on a plan to get rid of the thugs while basically being a slave to them. Only to have them discover and ruin her plan making all the sacrifies she made those 10 years in vain.

The show at a basic level is kind of silly and definitely for kids at some level but these heart wrenching moments are what made the show.

Unfortunately, 2-3 seasons later they started pulling their punches. Characters would sacrifice themselves (so heart strings tugged) and then a few episodes later they'd show up with a few bandages recovering.

Fortunately there's still been a few major un-pulled gut punches later in the series.
Perhaps no one has anything to say about it. If you're eager for an opinion: I was already familiar with D-Notices—they've been around in some form since 1912—and I think they're a necessary tool to stop the UK press publishing information they shouldn't publish. I don't believe they are egregiously abused although there is scope for abuse and they have been abused in the past. Super-injunctions are more worrying to me because there is even less democratic accountability.

https://en.wikipedia.org/wiki/Super-injunctions_in_English_l...
"For it must be cried out, at a time when some have the audacity to neo-evangelise in the name of the ideal of a liberal democracy that has finally realised itself as the ideal of human history: never have violence, inequality, exclusion, famine, and thus economic oppression affected as many human beings in the history of the earth and of humanity. Instead of singing the advent of the ideal of liberal democracy and of the capitalist market in the euphoria of the end of history, instead of celebrating the ‘end of ideologies’ and the end of the great emancipatory discourses, let us never neglect this obvious macroscopic fact, made up of innumerable singular sites of suffering: no degree of progress allows one to ignore that never before, in absolute figures, have so many men, women and children been subjugated, starved or exterminated on the earth."
It's not a victim of success, it's a victim of expansion greed.

Before your aunt, grandma, and gradeschool cousin could join facebook, it was a place to be pretty open about having fun in college. That openness didn't work well with expanding the population to people who wanted to do what the cool college kids were doing because the college kids didn't want to share their weekend party plans nearly so much when grandma started to comment on them.
It probably depends on the load? It's a Rails app AFAIK so if the load is low (which is likely for a family or group of friends) it should be able to run anywhere.
As a disabled person, I totally recoiled and revulsed at the OP’s audacity and emboldeness to demand how other should behave toward him.

I would never pull someone down to sit down to my eye level if in a wheelchair, never.

I would never pull someone closer to me so I can read lips better.

And certainly I would never remotely pull them to something that I want, as in this case, digital remote camera.

However, it is a courtesy to ask them to adjust for your sake. And only a courtesy.

This OP dude needs a proverbial slap across the face.

Just ask, curtly and nicely.
For web apps/services, the browser needs to be involved here too, right? (And maybe the OS?) How can I tell Chrome on my desktop to use my "software token" instead of Chrome looking for a hardware token over USB or finding it via NFC, so the remote service can ultimately interact with my (virtual) token?

(I don't even want to think about how to tell Mobile Safari on my iPhone how to find my key)

EDIT: My ideal setup, I think, is an app on my phone that I can use as my token - somehow signaling to my desktop/laptop that it's nearby and can be used as a token and ideally popping up a notice on the phone lock screen when there's an authentication request so I can quickly get to it. Then in my app, I'm free to export and backup my keys for all of the sites I'm enrolled with as I see fit. I know, I know, maybe being able to export the keys makes the setup less secure, but I will trust myself not to accidentally give the backup to a phishing site. (And I do worry that I'll accidentally get phished using a TOTP app, so I'd like to switch to FIDO, but I don't want the pain of multiple keys)
I have never heard this before. Is there more stuff like this?

Note: I can't test this right now because I don't have any sites that do this particular bad thing
No; each site to which you authenticate gets a separate, probabilistically unique credential id.
Hypothetically this is not a binary option, they could significantly ramp up the strictness of 3rd party sellers increasing the costs of making multiple, temporary fake seller accounts more challenging.

That said though - this would clearly impact profits proportional to the level of strictness/barriers.
> It may not make you a bad person, but it would probably make you a bad hire.

Ah yes, so the very people who champion "diversity" and "empathy" show their true colors by selecting against people with some kind of social anxiety or traumatic experience. So much for that!

> If you read the entire twitter thread, you will see that this is exactly what is being discussed.

Well it definitely wasn't described that way from the outset, which is an indicator of the Gergely Orosz's biases. Perhaps he should apologize and undergo some bias training.

> And if you haven't seen this behaviour in person before, you haven't been paying attention.

Or it could be that the field that I work in is largely a male presence and I haven't been on the interviewer side of the table with a woman.

The social justice types are funny to me. They issue proclamations about *ism from their ivory tower, all the while assuming the worst intent from anybody who doesn't act like they do. It's actually laughable. The moral puritanism needs a rest.
This sounds a lot like what some Python package developers are trying with Rust (example being the cryptography package), which also has the unfortunate side effect of limiting support for some less popular platforms.
Now you must share a detailed account of your interview! Congrats!
That's just another popularity contest with all of the exact same perverse incentives. How do you think people get on conference committees / journal boards?

We should stop worrying about popularity contests (citation counts, prestige-signalling conference committees/paper venues, etc.).

When we decide whether to retain an academic as a visiting scientist, consultant, etc., I am always the voice in the room encouraging folks to disregard everything except for one question: after having read 3 or 4 of this person's most relevant papers, do we think they can help us with the specific problems we face?

When I sit on grant review committees I ignore all the academic prestige shit and ask: is this a real 10-15-30 year problem for a field, does that field matter to the funding agency's objectives, and does the description of the plan of attack have a good chance of success? I don't need to evaluate popularity contests to answer those questions.

Popularity contests are low-effort short-cuts for the low-brow scientist/program manager. Best to ignore them if you have real problems and need real solutions.
So true, excellent point! I just do not understand startups choosing Python/Ruby in 2022 when you can get most of the features, type safety, concurrency, async and 5 times more speed in other languages.
Thank you for the nerd snipe. Fascinating.
I'm not opposed to what you're saying, but be aware that Page Rank literally came from scientific citation indices which computed similar centrality measures long before page rank (I don't get why everybody thinks page rank was particularly clever or interesting; centrality measures were an active area of research well before that, and many people were epxloring applying it to web ranking at the time).

And we have some modestly successful sites that kind-of do what you're saying (Faculty of 1000: specifically F1000 Research).
> As stated, you can have as many backup keys as you like.

That does not solve anything unless the backup keys are enrolled to each and every one of the services you use. Adding more backup keys and storing them more and more securely just makes it harder to be sure that you've enrolled them all to the latest service.

This is not an issue if users are explicitly allowed to enroll "virtual" soft authenticators that they can back up and restore as they see fit, but that's an additional requirement that comes at some compromise, since some services might instead want to ensure that you're enrolling a non-cloneable credential. (E.g. your physical bank or non-remote employer, that can easily verify your identity via additional means if needed to restore your access.) The WebAuthn spec allows for both models.
I've seen a lot of bad analogies on HN. This is the worst.
>Basically Python performance is just a hot mess all around.

Maybe don't use Python where performance matters? Just a thought.
It has less features and less ablity to control the diagram than plantUML, but it is supported out of the box in a number of locations. Gitlab and now github.
> Its not what we have in academia.

If you are blind to this then you are either in a very sheltered environment or you're part of the problem.

We haven't build such a system yet, which is exactly the critique OP had.

The broken funding process based on citation count and journal impact deincentivizes building and participating in such a system.

It's all self enforcing with the publishers reaping in billions.

It took years till european academia finally started to rebell against elsevier, and even now open access gets sabotaged by golden path open access publishing.
Most of my UML is what I call whiteboard UML because we draw something that looks almost like UML on a whiteboard, then start implementing that. A couple weeks later we realize the implementation and the UML have diverged because didn't think of something so we erase the whiteboard. The initial drawing was very useful to get the implementation started.

20 years ago I worked at a place that keep the UML up to date. It was nice to have, every week I'd print out the latest and paste it on my wall, then as I developed I'd look over at the poster to answer questions. It only worked there because we generated out code from the UML and so up to date UML was always easy to find. If you don't have a dev process that keeps it up to date I don't think it is worth it.
2FA satisfies the "something you have" authentication type. Passwords satisfy the "something you know" type.
As we don't have long cables, guess we'll have to time it perfectly.
Trump and his people are always trying to claim credit.
If you're small then the benefits of SSO aren't really there anyway. When you're a team of 10, what benefit is SSO really giving?
Do you have evidence for this trend?

"The extent to which traditional academia has managed to maintain its privileged role in society despite contributing less and less actual value"
How would you weight say a highly ranked computational biologist reviewing a paper in cultural anthropology?
Wonder whether it's related to attack on Heroku.
Author of the post here. Realistically this is about as dangerous as what you have already with anything behind an SSH server. If you really need to be sure an actual human is making a request, use a yubikey 2fa challenge. I'll update the post to include this on Monday (I'm off for the rest of the week).
Vue supports JSX as well, and has been doing so for years.
Did the thread drift without me noticing again? I thought this thread was about cultural differences between parts of America[0] rather than who has power inside it?

[0] a topic about which I know basically nothing, as I’ve only visited the USA for a total of 4 months total and not lived in it properly, and while that was both east and west coast and covered 8 states, it was mostly spent in the company of a literal self-described anarcho-communist Green Party activist who I strongly suspect isn’t even vaguely representative of any part of the USA.
I think their point is that they don't want to have the window of vulnerability (to loss) when they have added a new account but haven't yet rotated their off-site key?

That said, the real answer is that FIDO keys can be synced by e.g. Apple (as described in more detail here: https://www.wired.com/story/fido-alliance-ios-android-passwo...). So you can potentially just make your offsite backup be a hardware key that gets you into your iCloud keychain, and (if you are willing to trust Apple) use your iCloud for backing up all your other accounts' keys.
but that's all a social network can be any way. what do you expect? they already own instagram? what are all those engineers doing? if I was Facebook, i would cut the staff and development a long time ago and just rake in the profits..
This. HTML was actually created to be accessible by default. One needs to make an effort (unfortunately not very big effort) to break it.
Using Ego-Clusters to Measure Network Effects at LinkedIn [pdf]
I tend towards a --dry-run flag for creative actions and --confirm for destructive actions. Probably sightly annoying that the commands end up seemingly different, but it sure beats accidentally nuking something important.
A keylogger can take my password but a Yubikey can not be copied.
I try to.

Does posting this vague (pithy?) comment result in a reduction of horrific things occurring?
But now all the complex math is hidden away behind abstractions, and the extra computation to do everything in WGS-84 space is insignificant. Yet the benefits are huge in that every engineer who works on the design won't need all this extra knowledge of many custom coordinate systems and the way conversions and interactions between them work. Not to mention the huge possible costs when someone messes up and uses the wrong coordinate system for something and a beam ends up only half the thickness it should have been because the top was constrained by something in one coordinate system and the bottom by something in another...

I think a close parallel is the complexity of UTF-8 is now worth it over encoding things using codepages.
That’s my cue … to exit GitHub … and Google mail as well

I don’t have a phone number (that I am willing to fork over) so there’s that.

Welcome me, GITLAB!
Clever but not really appropriate for HN.
The event loop is the original sin of node.js.. I feel like you either fight the broken concurrency model at every step, or you slip beneath the waves. The fact that languages like erlang have been around forever makes it a real slap in the face.
If we want a free and open internet, why is the current web designed to let server owners control our experience? This leads to accessibility fails like the inability for visually challenged people to control font size or contrast, but also leads to lots of other bad effects, like the fact that my browser gets more and more bloated every year and essentially has become a tool to let other people run programs (javascript and wasm) on my computer, and display content that they want (ads, etc.) rather than content that I want.

I really want an internet where servers provide structured content, but where I control my user experience.
> Can Apple/Google/Microsoft ever block/ban my account, preventing me from logging into my bank, etc

If you don't accept their 10,000 word ever-changing terms of use, and if don't let them check for the marks on your forehead or right hand, then yes, you won't be able to buy or sell.
I think there's a weird cognitive dissonance in how this shows up in their externally visible behavior. Their weird superbowl ad, for example, was simultaneously about getting the gang back together nostalgia for a down-and-out relic of a bygone era ... and the metaverse. It targeted an older generation who perhaps has drifted away from or lost track of the people that used to be important to them, and tries to sell a shared virtual reality. Is the hope really that boomers are going to lead the way into the metaverse?
> You have to look at older versions of OSes, too.

Perl 5 was released in 1994. It is incredibly portable. If you have a system that legitimately has Perl 4, I would love to hear about it, but …
I think this is the best approach, the one mobile key allows you to add your other devices as you use them so it's not adding a ton of overhead.
Finra Fines Wefunder $1.4M for Crowdfunding Rule Violations
I don't know that I'd call Pleroma "very light", but it's very light compared to Mastodon for sure.
Is there any way to embed diagrams in code comments and have it render in any IDE or source code hosting platform?

Am I wrong for wanting this?
The management you're describing becomes necessary when the goal is to advise large teams of researchers. It is not something that will benefit you much in a lab of 4-6. There are research fields that do this kind of "big science" and researchers who run giant, hierarchical labs. Usually they're working in areas where a single person can't contribute without a team effort. I have not seen any evidence that this is a general approach that will unlock major research gains in other areas.
Unrelated to what you wrote, but it is actually jagoff or jag-off. It is not related to jacking off.
This announcement is primarily not about hardware keys, right?
>We used Microsoft's whatever-it-was-called at the time for writing webpages.

Frontpage, I'm going to bet. :)

I was an early user of Frontpage, shortly after Vermeer released it. A few months later, it was bought by Microsoft. Looks like Frontpage was absorbed and discontinued (https://en.wikipedia.org/wiki/Microsoft_FrontPage).

It was handy but I was just messing around with a very simple personal website and most of the time I'd just use Notepad or something like that.

>About the same time Java on webpages was a thing.

Guilty... I wrote a simple java applet to draw a polar plot of antenna radiation patterns. Later I added a calculator applet - after all, how handy would a simple calculator only a website away be?? I should have gone with the trends and converted both to javascript... but I did not.

>Then there was a fad that sites had to have some kind of animated intro on the front page

I remember the omni-present "site under construction" animated gif. As in, > 50% of websites had them somewhere.

Follow the link in this article (https://www.vice.com/en/article/9akenz/this-guy-compiled-eve...) for an eye-bleeding collection. Haha!
> It says the Steele dossier is largely discredited - I wasn't aware of any discrediting, let alone total. I don't know why the author thought this spin was necessary for the article.

There are at least two ways to interpret this:

1)If the Steele dossier is legitimate, then the author is propagandizing the issue.

2)If the Steele dossier is discredited (in some circles) propaganda, but you are not aware of the deception, then perhaps it isn't spin. This experience could be a reflection of the information you consume.

In the interest of avoiding inflammatory discussions, I'll leave it to other commentators to discuss the veracity of either side.
SDF has been a self-sustaining non-profit since the 80's. I'm much more skeptical of a newcomer than of them, personally
I enjoy how facebook/instagram can't quite figure out who I am and goes through moods between showing me $100k lab equipment, occult toiletries, and engagement rings.
You can't use Fastmail for free at all, custom domain or no.
This is a good step forward, I just hope they work on ensuring the end user experience for less technical people doesn't seem more complicated than passwords.

It's a work in progress.
I don’t know about the definition of touch,but I’ve been using the three-finger drag gesture for a while which seems similar in intention?
You're lucky! I'm still waiting for the thing to load!
What is the modern dogfighter though? My understanding is that the orthodox thinking was that the F-35 would be so powerful as to render dogfighting unnecessary - which is not a bar I believe it has or can hit. So it may be an effective plane, but it’s still a problem that it pulled the oxygen out of the room for developing modern dogfighting capabilities.
Yes, Apple doesn't count because they are in the consumer space.
Brilliantly trolled, sir.
Pricing info?
Wonderful. I love it. Thank you.
Of course they are MC68000 family assembler instructions, but the principle is exactly the same.
It's because designers work with placeholder data. I worked full-time as a dev and saw this over and over and over again. The good designers would adapt, but some never learned.

As soon as you put real data into a website, especially if the website is a CMS that you've handed-off to a _non-technical_ client, it's going to overflow every pretty, grid-based box.
Ironically, the custom styling on the code snippets prevents them from fitting on my screen at any zoom level.
The biometrics don't authenticate you to the remote service. They authenticate you to the device that has the keys that authenticate you to the remote service.

Biometrics are a convenient replacement for a screen lock pattern/PIN, but not a necessary one, of course.

https://www.wired.com/story/fido-alliance-ios-android-passwo... is a good explainer.
`DoneWithAllThat ` said it all. I'm not dismissing anyone's experience, I'm just making an assessment taking into consideration OP and the type of content he publishes, I'm sure there is women that have had that experience, the same way people of color and other minorities have, maybe even white males when the interviewers are all from a certain group. That type of tweet was crafted for attention and virtue signaling as he himself is not a woman(judging by his profile, if he(she) is , my bad), he didn't show an specific case of that happening or denounce it, so is not really anything besides a story(that could be truth or not) where he(and his team) were the good guys.
Eh, cats usually adapt pretty well when transitioning from house cat -> stray cat, but they're probably an outlier as they're predators themselves.
Caffarel do a (sort of) accessible version of this, not cheap but worth it ...
Guide to Abortion Privacy
"Once-mighty sites like MySpace endure, like abandoned digital ruins."

In many ways, Facebook is pulling a Myspace. User count goes down, so, to maintain revenue, ad content goes up. Repeat until it's all ads and few users.
It used to be—80s and early 90s—that a couple hundred mile drive down the Oregon coast would need at least one or two stops for bug splat removal. I made that drive last July and there were perhaps two splats for the entire 400-mile round trip.
Your position seems logically and morally indefensible. You accept that you individually and your society as a whole need both a (presumably effective) military and a defense industry. The latter must necessarily engage in significant defense research in order for the former to perform its role.

You say that you want the system to better than the current system. Well, who doesn’t want that? Germany would like to stop buying Russian gas, when it works for them. You draw benefit today from the imperfect system we have today. You could choose to abandon any claim to protection from the existing armed forces of your nation, or you can admit that you are a direct beneficiary of that system, and that it exists to protect you and others like you.

The people protecting you from a Russian invasion don’t deserve Javelin missiles to stop the advance of Russian tanks, or explosive reactive armor to keep them from being blown to bits by enemy shaped charges? Troops being sent now to garrison Poland and other NATO countries against a Russian assault are there on behalf of citizens of all NATO countries.