skysight-inc/HackerNews huggingface dataset:
I used to like watching Tuple, but the founder of Tuple has, in my opinion, become increasingly obsessed with money and what him and Tuple are able to do with it. From how he bragged about and marketed his $200k Stripe Capital loan ("in this economy?!"), to talking about overpaying engineers "because we can", to saying $25/mo is a rounding error for individuals (re: ngrok's pricing change). I'm not a fan of this behavior, and this blog post echoes the same: he has money and wants everybody to know it. It's a bad look, at least to me (fellow founder here using a throwaway). The majority of us are going to stick to using SSO as a way to charge enterprise customers more.
No, but Terraform has a way of importing it (via the `terraform import` command), although it is clunky to use for an account with lots of resources.

CloudFormation (the AWS-provided IaC product) may have something, though.
They = idiots
Yeah I believe this is a generational thing. I learned double-space as well, but pretty sure not long after me they stopped teaching that, and I've totally stopped doing it.
This is what I do as well, and its real nice to be able to black hole a specific to email address vs trying to unsubscribe from every piece of spam email sent to your one email address.
thats why I raced to buy up a bunch of books with my points and then cancelled immediately (you can keep the books). its one dark pattern after another, good riddance.
How is this different from any other industry? My VW engine will probably not work in the new Ford, will it?
They don't though.
Real GDP per Capita is almost 2x what it was in 2000, and 3x what it was in 1980. Hdi has also increased over those periods, though not as much as in European countries.

I'm actually not sure if there are any metrics that show us living standards dropping, much less "significantly" from the late 20th century to 2020.
What's the hack for fixing the fridge ice maker issue? Mine is doing that, and I would love to know how to fix it.
The '?' was removed from the title some time in the past 6h, making "They're right" much stronger.

Why do you think the '?' would be "inspired by legal"?
It's only as profitable as what advertisers will pay. Porn is at the absolute bottom for ad value.
Aw man. The author is going to be pretty sad when they learn that the brain is made of atoms.
This is a bit off topic: The parent article mentions some higher math talks - out of curiosity, anyone can see one? I don't doubt everything got restored, but I can't seem to find any math.
This is common, and so is the 1-2 years experience dev churning out a ton of code. It gets work done and builds credibility, but then they make some glaring architectural mistake thats tough to rip out. PM can't see it, and eggs the dev on to keep delivering. Sometimes this is great, sometimes not. Depends on the company and the needs of the tech stack
Fond memories. I met my now-wife on Orkut.

I remember when I quit using it, too; the platform just became dominated by a language I didn't understand.
But isn't this category of "bad" the entire dispute? People opposed to pornography don't typically agree with your perception that it's just about their individual tastes; they argue that it is "bad", in precisely the same way as racial slurs or planning a crime or any of the things that you and I think obviously need to be prohibited.
I'm currently reading this in the Bern train station, since my train to Basel was cancelled altogether.

(Though yes, there's another one soon.)
It's grim. Thompson did just about everything they could have done to escalate their sentence short of finding a way to traffic explosive devices or desecrate a veterans cemetery. The sentence in reality will come down to how they account for losses to the victims, but any plausible number here rockets you to the bottom of the sentencing table (the difference between 50MM and 250MM in the sentencing guidelines is much smaller than the difference between $5k and $100k).

Roughly here, you get:

6 base sentence level for 2B1.1 crimes
+20-28 victim loss(!)
+4 multiple victims
+2 sophisticated means or multiple jurisdictions
+2 trafficking in access devices (incl. account numbers)
+4 (maybe) jeopardizing the safety of a financial institution
+2 PII
+4 malware (the indictment more or less demands this one)
+2 obstruction or destruction of evidence

Assume no criminal history for the defendant, then, without replicating the whole table, level 10 is 6-12 months, level 20 is 3 years, level 30 is 7-9 years, and level 40 is 25-30 years.
Just like everything else, you need a killer app/feature. Smart phones was basically internet everywhere first and then all the apps followed after. I have no idea what will drive the masses to want VR. Games in the space have mostly been lackluster, and the only app type that sounds interesting to me (but not enough to warrant the price nor having the headset on) would be the recreation of large movie experience.
Mullvad has been tremendous and the ease of use is terrific. I use a VPN relatively infrequently, sometimes going months without turning it on, so the one-time payments have been wonderful. The app is simple to use, and it's so, so easy to reactivate for a month when I need it.

I can't speak to their privacy as my VPN usecase is usually just "I need an IP in another region," but to the best of my understanding they are one of if not the best in the business.
Some of us have really crappy ISPs (that also happen to be monopolists) that do things like HTTPS MITM (when they try to force you to install their root CA certificate and HTTPS simply doesn't work unless you do it), block DNS requests unless you use their DNS servers, or store all your traffic (this is being done in Russia, but it's close enough). I very much prefer to cover the precise details of my communications from my ISP and 'outsource' that stuff to Europe.
Disclaimer - just my theory, but...

The love for tech companies on Wall Street stems from their ability to scale up revenues much more rapidly than their costs. Human review is costly, and at YouTube's scale, every reasonable request for more human attention opens the floodgates for tons of other, equally reasonable requests. Thus, any broad policy change that increases demand for human review can eat into profit margins and stock prices big time, and will therefore be resisted with great ferocity and vigilance.
> The writing is getting boring.

What is this obsession with writing not being boring? If you're reading the passphrase to disarm a nuclear missile do you think you might get bored halfway if the sentences are too long?

I never understood why people insist on having short sentences. Human thought does not come in a small pre-packaged short sentence form. Some of the best philosophers wrote very long sentences, look at Nietzsche, Schopenhauer, Kant. Let's not dumb ourselves down by sacrificing rich, deep thoughts just because our ADHD might kick in and we might get distracted by the next YouTube cat video.
Any way to get a kit to test yourself? Or can any doctor do this? (Asking from NY in the US)
Not really anymore. There are many places that do self service SSO after charging you for it.

The best happy medium I’ve found is allowing “sign in with google” for free and true SAML paid.
Out of those, only the Aftab case predates moot selling 4chan.

That one was done by partyvan crowd who had been driven off from 4chan by that time.

It would’ve been 888chan, 711chan or rockstararmy. Of course, journalists don’t care about such distinctions and will group all of them together as “4chan”.

https://web.archive.org/web/20110902152829/http://partyvan.i...

Blaming 4chan was just a part of the fun, the mods could ban these threads and the people posting in them, but they’d still get the blame.

And FWIW, your other links tend to be more about 8chan than (post-moot) 4chan.
Beer Might Do a Man's 'Microbiome' Good
Yup BOTH need to get smacked with the regulation hammer. Not that they will.
Action Plan for a New CTO
I read https://www.pyret.org/pyret-code/ and I still think it’s strange to not just use python or some other language that’s more marketable.

Presumably most people learning to code are doing so in the hopes of gainful employment at some point, so it’s handy to learn a language you can put on your resume to maybe get a job.
The real trick is that the comic has always been about what is "acceptable" content, which in the US is what advertisers deem acceptable.

When this comic was first printed it was partially a response to big platforms like Reddit having massive waves of bannings. It has always been about systems that are advertiser friendly, even if Munroe is too dense to realize that.
That's not necessarily true. A lot of state surveillance comes through having backdoor or legal access to lots of services. Many VPNs have been tested in court on whether they actually have information on you to disclose, and some even have independent audits to verify that such information is not even kept.
Failure to pay a parking ticket by the due date or failure to appear in court to contest a traffic ticket can result in a bench warrant for your arrest which results in a criminal record. Also, in many jurisdictions if you do not appear for a petty misdemeanor traffic ticket, you can be found guilty for failure to appear which also results in a criminal record.

No you will not go to prison over it but if you are subsequently pulled over, you can be arrested for your unpaid traffic ticket and held in jail until a court has a hearing on your case (and it goes without saying this will result in a criminal record).
I’m curious, what language/country was that?
I had very different experiences.

I worked for an acronym company in which the majority of "leaders" were smart, driven, capable, and despite mistakes that anyone can make, it would have not been fair to call them incompetent.

Some were incompetent, they got promoted into positions of responsibility and power when the company was scaling up so fast that they could not hire externally for those positions fast enough, and the internally vetting was weak. Then, they created their "network of power" within the company and they went on working incompetently for a few years. And then there were people like my former boss who are idiots with an academic title of some weight. Many such cases.

I then worked for a huge company, but not an acronym one, and at the Director/VP/C- level there are pockets of incompetence that are difficult to explain to others and to accept as possible.

CTOs that know little about technology, VPs that ask LinkedIn for surveys of employer retention to make the case that they were not losing more people in a year than, say, Google, but not accounting for the fact that we could not hire anyone for months while Google is so worried about false positives that they reject plenty of very viable candidates. The same slides presented at each all-hands meetings not to reinforce the vision or goals, but because they are too lazy to prepare new slides for an audience of 500 people, who looked at themselves asking: again?

One might say that they are competent at navigating company politics, which is like saying that the employee sleeping with their bosses are competent at getting promotions.

When I worked in academia (not in the US, if that matters), there were plenty of
tenured professors that I would say were in the bottom 5 or 10% in terms of competence, research plans, management of students and postdocs, when compared to all postdocs in the same research area. Useless professionals that schemed their way through academia. And everybody knows that, but people who are inside have nothing to gain by exposing them, and people who leave academia they say, well, not my problem anymore, f them.

In my home country, the vast majority of politicians are incompetent outside of their core competence, which is getting votes.

I was under the impression, when I was younger, that I was wrong whenever I saw someone in a position of power, be it in the private sector or public office, who I saw as incompetence. How is it possible, I was asking myself, that somebody can get promoted, assigned huge responsibilities, be accepted by their peers when they are not at their level or at the level of competence required by their position.
But it is very possible and in reality quite frequent.
What is that and how is it used?
That happens pretty often with random channels.

"This page isn't available" YouTube - search it and you'll see thousands. The other thing that can happen is if the channel is marked as private.
Wrong as in there are non-enterprise customers that need SSO
Do they take crypto?

I’ve funded some virgin addresses from Tornado Cash notes, running from my own local node

Thats sufficient and definitely less cumbersome than Monero.
He defined these states through spin flips and I assume we sample slower than decoherence. This is a semi classical system without complicated qm effects.

But even if we didn’t restrict ourselves

log(# of states)~entropy

and there is a maximum (and finite) amount of entropy you can have in a finite volume (actually it scales with surface area) before you get a black hole.
I think these studies failed to take into account the labor value of the individual (typically wife) who would have been home. And even better, that labor isn't taxed.
hmm not really. It's more pointing out a good reason for the global disparity. It's a simple statistical thought process... another example is that the US is also heavily overrepresented in the number of LGBT people, because many other countries, particularly high-population countries repress that.

If you don't compare all-else being equal, you're going to have other factors playing into the resulting figure.
Would a good Air purifier help?
Of course, rapes aren't the only crime that goes unpunished in certain parts of the world. Half of my family is from the African country of Liberia. Google tells me their incarceration rate is 1/10th of the US.

I don't know what to tell you if you think the crime rate there is 1/10 of the US.
It really isn't, it's just an extension of the flawed mentality that people like Munroe exhibit.

The reality is that speech is ALWAYS a slippery slope, and those who believe it isn't are always surprised when they become the next target.
Relying on severing SSO access for this purpose is not enough. Those SaaS can be running processes that don't require an online user, or could support non-SSO API keys, or could still be taking up license seats. SSO in general is not a substitute for the full identity management lifecycle, protocols like SCIM are. I also believe these fall squarely in the convenience arena, but I also know that convenience and security are not orthogonal.
Near the beginning of the pandemic, I had a pretty bad toothache spring up out of basically nowhere. Bad enough that sleeping was difficult and eating was impossible. I went to see a dental surgeon (I forget the proper name for this) and he told me I needed a root canal, and backed it up with X-rays. It made sense, I had trouble with this tooth before and a previous dentist told me that a root canal and crown on this tooth, while not strictly necessary at the time, would probably have to be done eventually.

The root canal itself was quick, relatively painless, and not super expensive after insurance. But he couldn't do a crown, apparently that's only a dentist thing. Since my previous dentist closed his office, I asked for a recommendation and he gave me a referral.

The referred dentist did the crown just fine but the price gave me sticker shock: about 4x as much as the root canal itself, after insurance! It basically wiped out my HSA account for the year. When I went back for a general checkup and cleaning, the same dentist said they found SEVEN cavities. Which was a little mind-blowing since in the decade previous, my old dentist only filled ONE cavity and always complimented me on the state of my teeth.

I asked how much it would cost out-of-pocket to address the cavities and they gave a number somewhat north of $200. Oh, that's not so bad to have a bunch of cavities filled. Oh sorry, nope, that's the price PER CAVITY. I asked what I was doing wrong because I _had_ been flossing and brushing every day and got a very hand-wavy answer. I was in a literal state of shock so made an excuse about my schedule being full for the next couple weeks and beat a hasty retreat. After the root canal and crown, I literally couldn't afford to have seven cavities filled.

Fast forward a year and I finally find another dentist for a cleaning and evaluation and to tackle at least the worst of those seven cavities. You want to know how many cavities he found? None. None at all.
Man, checking this one takes like 10 seconds. Not only they do take "crypto", they also have a 10% discount if you pay with it.
Just because a sedentary lifestyle is bad for your health, doesn't mean smoking is harmless.

Do you know anything about these chemical? If so, please share. If not, well, ....
Sorry that was really unclear, I edited. It's the kernel build configuration for my laptop, with module loading disabled. All the drivers are statically linked.
> Interestingly nobody would be fined by the regulator had the misconfiguration not been discovered by someone stupid enough to to post about it with their real name, organised criminals would have been smarter about it.

Isn't there a third option, fully anonymous disclosure by a grey hat?

Seems like the best outcome would be from showing it to a scrupulous journalist who protects sources, and it looks like you're discounting that.
But what is also great about Mullvad is that they're actively working to make their remote and local security better. They're involved in the stboot[1] project for example.

1. https://mullvad.net/en/blog/2022/1/12/diskless-infrastructur...
Maybe they should prevent a single borrower owning so much in the first place.
> Single sign-on, however, is a convenience feature, not necesarily a security feature.

I can’t fully agree with this, at least in an enterprise setting.

In an enterprise setting that has already standardized on <SSO solution>, any product that doesn’t support SSO will require a one-off set of processes for:

- Onboarding

- Password reset / recovery

- Offboarding

- Profile syncing

Each of these introduces yet another potential avenue for compromise, and at best, introduces more complexity into the environment - both for the IT team managing it, and for end-users. SCIM helps, but a product that doesn’t support SSO probably isn’t going to support SCIM.

Even if the app provides strong authentication with no opt-outs, there is now additional burden on end-users to be aware of potential app-specific phishing expeditions. IT cannot continue to say “the only real password recovery email looks like xyz”. There is now more burden on IT to ensure every non-SSO app has proper offboarding. Every non-SSO app is a misconfiguration away from being an attack vector for disgruntled former employees.

You may be right that SSO is primarily about convenience, but convenience isn’t just about the end-user and their login experience. Convenience can also be a security feature, if it means that the app can automatically benefit from some base level of security policy with little effort. Convenience becomes a security feature when the lack of that convenience leads to an equivalent lack of security - directly or indirectly - and this is often the case with apps that have no SSO support.

Apps that lack this support also tend to lack other advanced security settings that would be needed to make up for the lack of SSO.

(Former auth PM for a big SaaS, so my bias leans towards SSO-first, but this is what I saw when working with many large customers).
Imagine Microsoft saying something like that...you cannot install your app on Windows because <reasons>. Can you imagine the uproar at that.

But Apple gets a free pass?

For all intents and purposes Apple's iphone is the Windows equivalent in many parts of the world. If you are not on it, you do not exist. So Apple needs to be treated like the monopoly/duopoly they are.
Reminds me a bit of Jordan Peterson's advice to rewrite every sentence until it's the best it can be, and then repeat that with each paragraph.

His son recently released Essay, a tool to help write better, in the sense mentioned above.

https://essay.app
Reuse the session across applications. Min 24 hour expiration. The more times the user is forced to reauth, the higher the chances of a keylogger or over the shoulder attack successfully retrieving passwords. Also, more time is spent relogging into apps rather than getting things done.
What if the chemicals aren't making you fat directly, but messing with your neurotransmitters and sapping your motivation?

Doesn't seem completely out of the realm of possibility.
Chinese staff can access TikTok’s US data: Report
Right, if your product is your company, this is the wrong attitude. But if you product is your product, then it's fantastic.
Having more than 20 employees or 1M revenues isn’t going to make an expensive product more attractive. I have been quoted twice this year at prices where hiring competent people would be a lot cheaper than purchasing the SSO option.

But I understand the need to milk the badly managed companies.
Perhaps a Swede can chime in, but I'd imagine Sweden has a lax regulatory approach, e.g. compare the fates of PRQ and Megaupload. It's, admittedly inexplicably, concerning that we've driven people to foreign companies (from American ones) due to government surveillance. It begs the question: under what conditions would a consumer be fine ceding privacy? Transparency? Remuneration?
Is lactose intolerance more common in the US than in Europe? In my country no one ever bothers with offering lactose-free products.
I'd say its one level beyond. Since "+" is so widely used, as talked about in the article, its trivial to remove. However with a non-standard domain and inconsistent username its not as easy to remove. These are some of the formats I use, they all offer exactly what I need (uniqueness, hard to programmatically attach to another, and culpability):

lyft@account.example.com

liftcarshare@example.com

email@lyft.com.example.com

example.com@com.lyft.example.com
The original claim was that we spend far too much on prisoners, and the rationale is that it costs 10x more per prisoner than per student without any regard to the actual costs and complications of doing each job. The fact is that prisoners are fundamentally that much more expensive to manage. And if society requires some violent and antisocial subset of the population to be removed from the rest of society, then this 10x cost is justified as far as I can tell. I'm offering the geniuses of Hacker News an opportunity to show that they can do it for less, since they seem to know better on this topic.
I think the difference is that in the past there were many publishers. You're right that editorialising and censorship has been going on forever, but in the past much of it was kind of (unintentionally) decentralized.

Not that it was always perfect or anything, but this is a key difference. You can get content out there without going through Facebook/Google, but it's much harder. It's like the postal service doing the censorship.

The challenges faced by Facebook and Google are also substantial, although most of these revolve around user-generated content, a bit different from publisher-generated content. Maybe it shouldn't treat them as identical.
It’s not just kids. Adult women don’t want boyfriends with Androids. Having green texts is unacceptable in such a competitive dating market.
NEWPRODUCT is almost always designed by Sales and OLDPRODUCT is old enough to have enough actual users that it works and does what is needed.

The end result is usually to force everyone to move to NEWPRODUCT and deprecate OLDPRODUCT violently (Salesforce Lightning vs Classic, etc, etc). Hopefully enough fixes for NEWPRODUCT get done before all the customers leave.
Ask HN: How do you style your hair?