skysight-inc/HackerNews huggingface dataset:
Yep! Just store your backup key in a safe-deposit box with your bank.

Then go get it every time you sign up for a new account so you can make it the backup for that account

then go store it again.

and again. and again. and again.

oh no! you lost your key! time to go to the bank to get your backup, sign in to all the accounts, remove the old key, register a new backup, oh wait, got to wait for the new backup to ship, so i guess you can't do that yet. hope you don't lose your key in the meantime, anywho, time to spend a few hours painstakingly removing your lost key from all the 9 thousand sites you use.

yay! its a week to a month later, you finally got your new yubikey shipped, time to go log into to 9 thousand websites again to set it up as the backup for all of the sites.

Ok, time to take it down to the bank.

whats this? a cool new app my friend wants to show me, ok, time to go drive to the bank and get my backup key out of storage and sign up for this cool new app.

You know, this whole driving to the bank thing, its kinda inconvenient, maybe i should just store it in my closet safe.

What do you mean the gas line under my house exploded? but both my yubikeys are in there!

----

The above is fiction, and even under fiction it seems ridiculous how this would really go is even worse:

"Go get my backup key to use for this new app my friend showed me? fuck that"

.
.

"What do you mean i can't reset my password, but i lost my yubikey!"

"No, i didn't want to get up to grab my backup token when i was registering."

"Oh wait! i bet i still have the recovery codes as a pdf in my downloads folder. its a good thing no viruses ever think to look in there"

----
I find it weird how perfectly stable the marketshare is https://gs.statcounter.com/os-market-share/mobile/worldwide
What are the odds..
Edit:
actually Apple has gained marketshare in the last few years up to 29% then fallen to 27% and since stagnate to it.
Despite being much much more APKs than Ipas (and the gradient likely increasing (any data ?), this doesn't seems to affect much markestshare. What the IOS market needs to fall is to miss some killer apps.
I think it's even more fundamental than that. The current system is binary. An article either is published or it is not. There are nuances beyond this, like citation counts and journal rankings, but "published in a peer-reviewed journal" is a mantra that is often taken as a synonym for "established as truth."

Whatever replaces the current system ought to have an output that is more like, "Lots of people who have published things that lots of people think are worthy of note think that this paper is worthy of note."
Is a .slint file without an .rs file a complete example or just a work in progress? Curious how you do "cells" without a table widget (Not being a slint user it looks like they used loops to build a bunch of "Text" widgets, but it is the _logic_ of handling them as a cohesive table that I'm interested in, and that seems like a TON of work without a proper table widget)
Epic Games and Microsoft bring Fortnite to iOS via the browser
>
There's a reason that ADHD and autistic people come together under the umbrella of neurodivergent/neurodiverse. There's a ton of overlap between the two.

"Neurodiverse" also includes schizophrenia, bipolar disorder, schizoaffective disorder, and antisocial personality disorder (see [1]). I don't think that including such a wide net of conditions under the "neurodiversity" umbrella term makes a lot of sense.

[1] https://en.wikipedia.org/w/index.php?title=Neurodiversity&ol...
Using an M1 right now and Zooom/2 still works.
GeoParquet just embeds the geometry as WKB, so getting PostGIS geometry is as simple as going "SELECT geom::geometry FROM my_parq_fdw_table". The spec doesn't yet have anything to say about how to get a good spatial sort or carry out a spatial filter, so it's all pretty ad hoc on that end. Thanks to ogr2ogr, generating a GeoParquet file is now pretty straightforward.
Wait until you see the Roberto Benigni film co-starring his wife.
This is exactly when I can't deal with a mac as a desktop. My 30 year old muscle memories created in the late 80s with TWM use alt (on a std kbd, would be cmd on mac) + mouse button 1..3 to move, resize and iconify windows. Kde supports this, ldxe supports this, etc. I tried and abandoned using a mac as a desktop ~15 years ago because I didn't have this feature, and I didn't have true focus-follows-mouse.

I don't want to use some app that could be abandoned and end up like the parent, this kind of configurability should be a core OS feature.

Oddly, on a latop its fine, I somehow have a different set of muscle memories for touchpads.
The Windows 2000 demo reminded me of just how clean, fast and consistent Windows was in that era. Compared to today.
> The point being, the FIDO Alliance reserves the right to blacklist any device that an attacker manages to extract the secret keys from, which has the consequence that 99,999 other people have their devices bricked.

1. By what mechanism can they blacklist a device? A given relying party can choose to use or not use attestation and, if they choose to use it, which certificates to trust. But that's between you and the RP. Authentication doesn't "talk to" the FIDO Alliance--which is just a standards body and does not (AFAIK) even publish anything like a CRL for "bad" attestation keys, so I don't understand what you are talking about here.

2. The intention of the attestation, as I understand it, is to enable RPs to use attestation to limit authenticators to e.g. those that pass FIPS certification (or similar enterprisey requirements), not to ban a whole batch because one key is known to be compromised. That's crazy; can you point out where anyone other than you has ever proposed this?

3. DNA scan? What are you talking about?

4. This assertion you are making, while bizarre and wrong, is very different than the assertion the grandparent made ("Yubikeys intentionally have a very small number of devices signed with one CA key...so those devices do have a basically unique identifier"), which, while also wrong, is I think a genuine mistake and not a bad-faith argument.
Gaming on Linux
Maybe a safe or cameras would be useful for when you're not home.
I sometimes leave my laptop on with motion started: https://motion-project.github.io/
What’s so particularly frustrating is that despite record unchecked obesity, we are encouraging children to eat more than ever. In infancy, we always have bottle or breast ready where they cry. In toddlerhood, most activities and all preschools include “snack times”. My kids elementary school has 2 snacks plus lunch plus a snack for after school. Then if sports they are encouraged to have a snack before or after. Add in breakfast and dinner and they are eating 7-9 times a day! Additionally, the vast majority of these “snacks” require they be non-perishable which usually means mostly carbs and fat. I don’t understand why there is this constant emphasis on eating when it seems clear we eat entirely way too much.
I've tried unlocking my laptop's scanner with my other hand and I've asked other people to put their finger on it to see if it does some kind of weird matching based on finger type. No problems so far. It even works across both Windows and Linux if I use the right Windows reboot incantations.

Since there is nothing genetic about fingerprints, I'd personally consider your daughter's laptop to be defective if you're able to unlock it. A critical part of the laptop's security mechanisms is clearly broken and should be looked at. I can't find many other stories about Dell specifically so this may be a specific unit or product line that's broken.

You may even have something to gain by reporting it; I don't know if Dell or their manufacturers do bug bounties, but this definitely sounds like something that should be accepted in such a program. Even if they don't, writing a short blog about it with the brand, model, and model of the fingerprint reader might get the press rolling, forcing Dell to take action. This is simply unacceptable.
Julia's CSV package is pretty close to supporting it already. (it lets you pick the delimiter already.) It should be pretty easy to change the newline character.
Wow. Italy's demographics are basically reverse pyramid in just a decade. New babies are still precipitously falling off a cliff. There are actually an astonishing number of 80+ year old women.

https://en.wikipedia.org/wiki/Demographics_of_Italy#/media/F...
because it makes your passwords significantly less likely to be guessed
Interesting! While I disagree with you that I've made the forum worse, this conversation has cause me to reflect on the importance of using low-stakes sarcasm like this, which has refined my internal justification for doing so. So, I guess everyone benefited. Have a good one!
It can be very buggy (even on iOS 15), especially when you start doing anything complicated. It’s also still relatively new compared to UIKit and AppKit, so it can be hard to tell if something is not working because you aren’t doing it right or if there is a legitimate bug.

It’s missing a lot of features that are currently in UIKit and the way that views are structs and it’s a declarative UI means it can be hard to add custom UI and work around missing features. You have to wait for Apple’s developers to implement things. In UIKit you can just start overriding things (even if you probably shouldn’t).

Also in my experience performance can be awful in ways you can’t work around or fix easily, if at all. e.g. The framework is supposed to diff and determine if things have changed, if two views are equivalent, etc. This can slower than just forcing the system to consider everything changed and nothing is equivalent so it should reload everything. This might be a bug, but sometimes this diffing can happen even when you change nothing. Ive gotten incredibly stuttery performance when scrolling. When I hook it up to the performance analyzer I see it’s trying to diff the whole screen multiple times every frame for static, scrolling content. But this only happens with finger scrolling. Programmatic scrolling (e.g. with the crown in the watch) doesn’t do this and is stutter free.

Finally, Xcode support is bad. It still gives inscrutable errors (that are usually just a misplaced parenthesis or brace) and the type inference system can peg up the CPU at 100% CPU (and then the system will throw up its hands that the type is too complicated to figure out.)

Prototyping in SwiftUI is so, so much faster than in UIKit though.
He said it himself.

https://www.marketwatch.com/amp/story/elon-musk-admits-to-un...

I can’t tell nor would I diagnose someone I don’t know.

However
- his current tweet storm has included imo a lot of Juveline type stuff. He also seems to be tweeting more than usual.
- this matches with the impulsivity you’d feel in a manic phase. You’re also full of dopamine so you feel like you “can do anything”. This can lead to irresponsible behaviour and grandiose dreams that you feel “are totally possible”.
- it’s possible he has a low-grade bipolar type mood swings. I had something like bipolar, but not quite, before I had my first psychotic episode. Very high highs and very low lows. Same as he’s described. I’m not sure if you can live your entire life this way, but it’s possible that it is and he’s a case. His behaviour certainly reminds me of my own previous to my outbreak.
- one of the things that destroys you with bipolar and that they warn you about is compulsive buying. Your impulsive behaviour + money is the worst aspect of even a low manic phase, since you can easily blow all your money very quickly.

Looking at his purchase of twitter, his prolific tweeting, the way he’s acting in those tweets (juveline, impulsive) he really really reminds me of someone in a low-grade manic phase.

In a manic phase you are pumped full of absurd amounts of dopamine, so you have tremendous energy, you think you can do anything, you can fall into impulsive buying, and you are so led by impulse you can do a lot of irresponsible behaviour.

Him purchasing twitter reminds me of people who buy boats/homes in mania essentially. He doesn’t seem to have a master plan that I’ve heard about to turn it around. Even if he does have a master plan, his behaviour suggests mania to me.

Like I already said I can’t diagnose anyone, but his behaviour is so familiar I can’t help but wonder.
Drag the left or right border of a window up or down.
Is "expansion greed" just another way of saying "inclusiveness"?
I suspect the rabbits chose to take up residence inside the roundabout to avoid predators, who are probably unwilling to cross the busy traffic at most times of day.
Does China have hidden reservoirs of growth potential?
Microsoft could still make an Android fork the same way they rebased Edge on chromium. Since android is mediocre on many aspects (e.g. no modern and performant Java support) they could differentiate and create a market opportunity. Their name is big enough to create a store.
They already have a linux distro BTW https://github.com/microsoft/CBL-Mariner
I subtracted the stock compensation for my figure already.

My number still stands. Or if looking at net cash, it was never enough to cover all expenses.
What you want is achievable with https://dappnode.io
Insane to me that this isn't the default. So much more ergonomic than press-dragging.
2FA has screwed me over in multiple instances over the years across different services.

Realizing one weekend away that I forgot to do a quiz for a uni course, trying to login to the course website on my phone and then remembering my hardware key is at home in my laptop.

Being forced to add a phone number to secure accounts I could not give less of a shit about but have to use for one reason or another, coming back months later to login, and realizing it's an old number and I'm locked out.

Emailing support in those cases and them just removing the phone number or changing it without any additional proof making the 2FA utterly useless.

Or emailing support and them asking me to send some drivers license or ID, then politely telling them to just delete my account because they never had that much info about me anyway.

2FA is a scourge. Just let me worry about my own security, if I care about your service, I won't make my password "asdfghjkl". In 99% of cases, that is fine and I have never had an issue.
This is not unlike dungeons and dragons in the 70s

Or Atari / Nintendo in the 80s
Is routing every traffic through my laptop „secure“ ?
Tailscale recently raised 100M for its product. While I appreciate the simplification it brings, I am not sure if routing everything through my, possibly insecure notebook, is really key to security.

Maybe I did misunderstand the core functionality, but from my point of view this setup only works in a very restricted corporate environment.

What am I missing?
Interesting, I wonder if in trying to replicate real world social networks, digital social networks are bound to replicate the brith and death cycle.

In that sense, being the "town square" (e.g. Twitter) is a better bet than being the place where you meet your friends.

Unless you are able to continuously create the new space where the young meet. But, historically, that does not seem to be the case.
> That is not precedent, but it is the Law of the Land until overturned.

The fact that a ruling sets the law of the land is what precedence means. It means other rulings follow the previous, preceding rulings.

Roe absolutely was precedence before Casey - that's why abortion was legal in the 1970s and 1980s before Casey v. Planned Parenthood.
Selling a color is not reasonable.

Admit it or not, most successful NFTs have artistic merit, and are capturing something authentic.

Although the NFT community has been shown to reward irony (especially post-irony), it has not been shown to reward cynicism.

People aren't going to line up to pay for spit in the face. They're not as dumb as the author assumed they would be.
All your arguments are very specific to yourself and is not necessarily indicative of "All teens". 20 years ago we didn't have the so called social media we have today. And back then we didn't have that problem atleast not to the extent we have today.
What is that important feature?
It seems as though enterprise customers of Heroku that leverage data products tied to their Salesforce instances, such as Heroku Connect and Salesforce Connect, are at risk of serious data breach and possibly haven’t realized it. Nearly a month since the initial 2413 incident, we’re still learning of its full scope. If customers haven’t rotated credentials — mistakenly thinking the incident is isolated to web apps and GitHub — the risk is still present. Can it go any more sideways? Yet the communications from Heroku and Salesforce are disjointed, even amateur.
One main distinction is that Shopify shops have a direct to consumer relationship. They can send you emails, and build up a brand. Amazon keeps the customer relationship, and if you succeed, they'll try to commoditize you. So it isn't that much different for the user (with a unified checkout out cart), but is much better for the store owner.

Edit: you might find this article about the differences between the Shopify and Amazon ecosystems interesting

https://www.nytimes.com/2020/11/24/magazine/shopify.html
My problem is with owner-of-PID, if you have directory traversal as root... good luck I guess.

You can store secrets in a process belonging to a different PID and get them with some kind of RPC.
Unlike in the US, European wild rabbits and domestic rabbits are actually the same species, so it's hard to tell if these rabbits are naturally wild, or were released.
I find this to be an excellent demonstration of the freedom of the web in the face of overwhelming resistance from Apple, and have editorialized the title to reflect that.
> Autism or at least high functioning autism is characterised by poor theory of mind.

Neurotypical people have (with few exceptions) a similarly poor theory of mind of what goes on inside autistic/Asperger people. But because the latter are a minority, it is those who get stigmatized.
Yes but this mimics how real-life possession works, at least for low-value assets. If I go to a pawnshop with a watch, they're going to treat me as the real owner unless they have a reason not to - even if I actually stole the watch.
I've replaced Zooom/2 with this open source tool: https://github.com/dmarcotte/easy-move-resize
That doesn't work if everyone does it.
For those who run Windows, I realize bing is a joke to most HN readers, but the desktop backgrounds they serve up are actually pretty great[0]. It's the only reason I keep the bing app installed on my machine.

[0]https://www.microsoft.com/en-us/bing/bing-wallpaper
If you increase the timescale, those numbers actually show that iOS has increased its market share by 10% since late 2018, which is also interesting.
Yeah it just allows you to use a B port as a host (if supported). It's still the USB protocol.
But.. is passwords being used a common way for them to leak? I've never heard of this before but I'm no expert. Isn't the threat model either company databases being (badly hashed and) leaked, or password managers being hacked wholesale?

I mean where am I supposed to store the recovery key if not in my password manager? My dropbox surely isn't better encrypted than my bitwarden. I work with the assumption that my password manager is the least insecure piece of data storage I use.

I really don't get it. How isn't 2FA just security theater if we're all supposed to store the recovery keys "somewhere safe"? Can we really expect people to deal with recovery keys in a more responsible way than they do with passwords?
Sure, but that's because Python has objects.

If your write an object system on top of your performant hobby Scheme implementation, you'll likely find that the performance of its method dispatch is about as slow as it is in Python. Probably even slower.

Purely procedural Python code isn't as slow as object-oriented Python code.
100 year anniversary WW2 era cycle is rearing it's head.
One could argue that Abraham and his son was the original narrow escape happy ending
I did build a PC last year especially to play Diablo2: Ressurected. I did write something at the time but never published it. Maybe I will clean it up.
While I agree that it's not an actual conformance test, in the sense that it won't detect deviations from the spec that all of the parsers forgive (for example, using a space instead of a line ending between "startxref" and the offset of the xrefs), it is in many cases more rigorous than an actual conformance test, because there are dark corners of the PDF spec that no PDF renderer implements correctly.
Since 2009: https://gs.statcounter.com/os-market-share/mobile/worldwide/...
I don't know if it's related at all to the decline, but "Line Goes Up" was released on YouTube at the exact peak.
Bonds are an interesting idea. I think there is a similar idea for email (it cost 1 cent per email to send, refunded if the email isn't spam). I think it would keep a lot of small sellers off the platform, and the math must say it's better to play the wack-a-mole game.
I like to implement a Conway Life engine for this purpose. Small self-contained problem that requires UI, timing loops / iteration, and graphics.

It's also embarrassingly parallelizable if your language supports parallelization primitives you want to exercise.
Yeah, that was my thinking as well… academia is not growing that rapidly to support that many professors. Even if every professor only supervised two future professors, the entire world would already be professors at this point.
But what about on the server side? We generally know about passwords being salted and hashed. How are these recovery keys stored, regenerated etc? (I suppose they are also salted and hashed, but they are shorter and potentially easier to crack than good passwords, given a breach, no? Or just one longer, tougher recoveryKeyGenKey need be salted and hashed.)
Good luck dealing with balaclava scarecrows if you just target anyone wearing one.
I think with Starlink there are 2 types of congestion: typical oversubscription and available frequency assignments in a cell. The former the market can evaluate like any other carrier but the latter is really more a known hard limitation they have to avoid.
The Steele dossier was paid political opposition research, and therefore does not need to be discredited. It is false unless proven true. You could be excused for not knowing this important detail if you get your news from US "journalists."
For security keys implementing FIDO (which sometimes you can see referred to as WebAuthn, although that is partially inaccurate), there is currently no good way of backing up the key. If you lose it, then you'll need to recover your account with every service you had it registed it with, meaning that you'll need at least an additional factor on each service that's most likely not as secure as a FIDO key, unless you're registering two keys for every service which is very cumbersome and still makes you re register a lost key with each service.

There are proposals to address this either by chaining trust between security keys or by sharing "passkeys" (a webauthn credential). see https://news.ycombinator.com/item?id=31272867 Only apple implements it today as far as I know so there's no good way to recover from a lost or damaged key if you're not exclusively in the apple ecosystem
Hi,

I built canvay.io, a powerful and user-friendly webhosting platform for deploying your PHP-based or static sites.

The backend has been developed from scratch with a heavy focus on providing the best user experience possible.

Would love to hear some feedback!
Email it to your wife or someone you trust. It will just sit in their archived folder until you have an emergency