skysight-inc/HackerNews huggingface dataset:
The magic link is basically using "forgot my password" e-mail recovery flow to just friggin' log in.

If you've served the user a link which takes them to a session where they can change their password, that session must be authenticated, by definition; you would not allow an unauthenticated visitor to change an account password!

And so, if that password change session is authenticated, then just treat that as fully fledged session. Don't force the user to go back to the login screen and use their new password.

The next logical step after not forcing the user use their newly minted password is to just remind the user their forgotten password is still in effect, and that they can change it in their account profile settings.

From there to "magic link" authentication is just some minor UI tweaking.

I've always thought that asking the user to log in with a newly set password was an incredibly poor and unnecessary user experience, which just amounted to punishing the user for having forgotten their password and to train the user to believe that password recovery is inconvenient and should be avoided.
I know, if you dont pay their wages via taxation, you get done over by them! Same goes for a lot of govt employees!
Chris indeed pushes it hard, I think indeed too hard, I agree. But it's reducing and moving to other shows (like OfficeHours.hair). To him this is the response to centralization of podcasting and I see that. As a member (I do 8$ a month, supporting 1 show but listen to all) I also see the imbalance in the attention that 2ct boosts get. It will go 1 of 2 ways I guess: 1) Boosts become the main income and keep getting attention (but at some cutoff like with NoAgenda donations. 2) Boosts remain a minor part and the attention decreases. If I were you I'd sit it out and let Chris try.

I do like putting 100$ every (half?) year or so in my podcast app and letting the app distribute it over everything I listen to. But that's also because I'm at an age where I have disposable income. I pay for the membership to get the ads out of my fav podcast.
I'd love to get more clarity on this: are you saying that FileCoin's innovation of "proof-of-storage blockchain" is inherently useless (or useless in comparison to centralized alternatives, like AWS's S3), and therefore FileCoin is a money-grab? Or are you saying that the incentive structure employed was unfairly favorable to only some participants in the system? Or are you saying something else?

I am trying to form informed opinions on this space, so I'd really appreciate an answer!
I run a lightning node at a cafe and we receive a few orders a day. Record had been 8 orders in one day.
"A network state is a highly aligned online community with a capacity for collective action that crowdfunds territory around the world and eventually gains diplomatic recognition from pre-existing states."
How much comp sci do you use on a daily basis at a FAANG company though? Especially, if you are working on front end stuff / UI work
I always joked about creating a Peanuts Startup with an app and a fleet of guys on scooter delivering at your door bags of peanuts at any hour you need, at the click of a button.

Do you think I could do it into Y Combinator?
Corruption inside, no other explanation
I know that reference. When I watched that movie I was just like ugh, and then I continued watching, and it just got worse.
Not sure what to think about this.

I was hoping unity would be the way for the indie studio to build AAA experiences (and indeed it seems to have already achieved that in some areas), but this kind of merger makes me skeptical about the long-term viability of that vision.

I do currently hold a long position in Unity, but this whole thing is starting to feel a bit yucky to me. Between Godot, UE, and the vast unknown of undeveloped engines, I think I need to re-evaluate my strategy.
Not in DE myself but scotch bonnet chillies are more easily found in the UK due to the Carribbean/West African connection. You may have a better chance of finding them instead and I'm told they are quite similar.
> Now you're on a website that looks like the one you expected (if the third party has done its homework) but is completely in control by the third party.

A simpler attack would be to for the third-party attempt a login on their end into your account, and if you happen to click on the Magic Link generated by their login attempt, you wouldn't be signing yourself in, but them.
Couldn't be any more vague if they tried.
And had access to a computer at school starting eight grade in 1968, at a time purchasing price started at $500k, 4 million adjusted for inflation.
They're not special. Cryptographers are mostly (but not exclusively) the products of a few academic programs around the world that teach the specialized math involved in developing and proving (and breaking) crypto algorithms.

The standards are either the outcome of competitions the US government (through NIST) has held over the years, or they're de-facto standards because they're provably better for certain use cases than other algorithms.
Feel like this is probably a better way to manage it if I'm being honest. Actually, this is a bit of a similar way I'd listen to jam bands (Grateful Dead, Phish, Railroad Earth, etc.) Usually too long to listen to on repeat, but interesting enough to listen to many times and pick up on things.
> but instead it takes me to a fake copy of the website ...

This is fine, but ...

> ... which then asks (again) for login details?

This is where the trick lies. The third-party copy doesn't have to ask you for login details. As your parent states: They get redirected to a pay processing site that looks just like the one from their bank, but steals their money and/or identity instead.

The fake site doesn't have to show you details of your account. It has to look just similar enough that enough people will think it's a legit payment site and submit their payment details.

----

There's also a simpler, alternative attack I mention in a sibling comment: https://news.ycombinator.com/item?id=32081724
This. If electricity becomes that scarce I think keeping your website up would be least of your concerns. Things aren't that bad right now, not even close to that doomsday scenario.
What a burn
Proton is less accessible to folks without Twitter accounts
I inherited one of these from a friend in 2000. The ‘l’ key switch was broken. It (like most) were only booted into C64 mode and used for Batman and stuff. ‘L’ was broken because of ‘load’? I think that was the command. It’s been too long.

I passed it on, but wish I didn’t. At this point, I probably could have replaced the switch.
It's essentially a form of sharing, with lesser secure channels for less important transactions.
Having done consulting work for a company that does performance management software the thing I found funny was pro-union workers the model kept flagging as lower productivity compared to neutral or for non-union.

When I tried to look into it the model was scoring them lower because of "activities spent not increasing bottom line".
Not the future. It's the present, and the reason behind this acquisition.

I agree, it's a bit sad to see.
The decrease in pay may be more than made up for by the reduced travel and/or living costs.
I didn't have a great time with Godot 3. I got stuck trying to call a function on a different game object. Find node didn't work.

I'm hoping for Godot 4 to be a massive leap in quality/ ease of use. I'm also playing with some lower level tools.
Couldn't this just be the current economic climate? Business people tend to have a harder time getting jobs than programmers, and when you remove jobs in an already very tight market you will have many people who don't get any jobs at all.
Sometimes there are gaps at the beginning or end. These videos make the song loop perfectly.
I really appreciate these kinds of websites.

But i wonder if we eventually go full circle and it becomes easier and cheaper to send a wasm linux kernel with virtual disk access over websockets instead of processing stuff server side.
Smart Textiles Accurately Sense How Their Users Are Moving
Doesn't that defeat the purpose to a degree?
Meta's dystopian AI has no impact on the world. If you allow yourself to be dependent on this AI, then it can of course have an impact on your world, and your world may become some AI dystopia. But if you reject it entirely from your world, suddenly, your world is no longer an AI dystopia.

Welcome to 2022. I own no social media accounts, I have privacy, and life has never been better.

(okay, maybe HN is a social media account, but that's it)
For Blind Internet Users the Fix May Be Worse Than the Flaws
It makes my eyes water sometimes when i see all of the cool things so many people on the planet are working on, and that they also have users.
Show HN: Simple cloud deployments with CD as-a-Service
Hey folks, I'm Ben from Armory.io (YC W17). We just launched Continuous Deployment-as-a-Service (CDaaS) to make it easy for developers to deploy their apps safely to the cloud. We’d greatly appreciate (raw, candid) feedback from the HN community if this solution improves the speed at which you deploy to production. We have a free-forever tier that gives you up to 25 Application Targets[1] (our unit of scale for pricing).

Try it here: https://www.armory.io/products/continuous-deployment-as-a-se...

Our Story

We’ve been helping large companies with CD since 2016 by selling them our distribution of Spinnaker (spinnaker.io, originally Netflix OSS). We’ve learned three big lessons:

One reason developers are drawn to Spinnaker is because it provides an imperative approach to orchestrating deployment workflows
Operating Spinnaker “on-prem” (usually in the customer’s AWS account) requires significant effort
Doing true continuous deployment to production requires the use of advanced strategies to mitigate risk

These learnings inspired us to build CDaaS and make it easy for developers to employ well-understood deployment strategies like blue/green and canary deployments without having to write custom code. With CDaaS, our aim is to deliver many of the features developers rely on from Spinnaker, but in a declarative manner that supports the GitOps approach they know and use extensively.

CDaaS currently supports deployments to Kubernetes but we’re adding additional cloud providers quickly (AWS, GCP, Azure, etc)

How It Works

Connect any number of Kubernetes clusters to our central control plane by installing a lightweight network agent. Once connected, you can configure your application deployment logic in a declarative YAML file that can be checked in alongside your app’s source code. Deployments can be invoked from our CLI which allow you to use your existing CI platform (Jenkins, Github Actions, CircleCI, etc) to trigger a deployment. Monitor deployments (and take additional action like rolling back, if needed) from our UI.

More Information

CD-as-a-Service product docs: https://docs.armory.io/cd-as-a-service/

Short Demo (8 min): https://www.youtube.com/watch?v=r29UCKMXEi4
Package Management for Your Projects
I agree, however I'm curious what the incentive for calling it a merge is? Is it part of the deal with ironSource?

Do they, for some reason think that merge sounds better then acquired? Because I'm in the camp that acquired would be more appealing.
To be fair I was thinking about the way MS-DOS solved problems that came along later like having lots more RAM and larger file systems. 640k, expanded memory, extended memory, file size limits. Things that I don't think CP/M was developed long enough to have to solve, so maybe it's not really fair to compare the two.
For me, I think short term this is kinda how it works. Although a point I'd make is that is not that I enjoy it less often, it's just that I move onto other things.

Long term though, songs I loop like this can always return and restart their cycle. So it doesn't completely ruin it for me or anything after a few days.
Interesting. Where is that cafe located?
I just recently implemented a magic link flow for a project I’m working on, and “authenticated in the originating browser” was a high priority item for me.

I think it’s just so much nicer of an experience to not have to worry where you go check the email or which browser opens when you click the link there.

The site you used to login was clearly where you intended to be, so that should definitely be one of the authenticated sessions when you click the link.
Yes, this is called "n dimensional chess" (usually 4d chess, but it depends on how silly you feel) theory I believe.

It seems to stem from the same instinct that often leads people down the path to conspiracy theories - that reality can't be this stupid.

If I've learned anything in my approaching 4 decades of time on earth, it's that reality can in fact be that stupid.
So guests who stay overnight have to enter a new password after your script runs at 00:01?
3 pages? Is that common in your profession? If it's not, why don't you trim your resume?
These are not just some services, but rather gov unregulated global social platforms.

Getting banned from them for some people is equivalent to being banished from society in pre informational age.

Yes your don't need to visit your local market, you can always forage for berries in a forrest, good luck with that.
This analogy is invalid.
The legal standard is material adverse effect. It’s a very high bar. As commentators have noted, it’s unlikely any court finds for that legal standard. This is why Elons lawyers have been using pretextual reasons to walk away. He is notably not saying he is walking because of “too many bots”. He is saying that twitter is breaching an information convenant because he needs to find a pretext that will stand up in the court of law.
Every single supplier will squeeze EU countries for Gas money because they know the EU is caught with their pants down.

EU countries will have to budget accordingly to match the new cost of a failed Energy Policy based on hydrocarbon dependency. Hopefully this will accelerate the extinction of the Oil&Gas lobby, both for the environment of our future generations as well as our geo-political resilience.
Some time ago, youtube-dl, a downloader tool for YT, faced legal troubles from RIAA simply for showing a copyrighted video URL in a demo. Something about anti-circumvention. [1]

Given that this project is an alternative to Adobe's features, the latter may feel tempted to claim this is a tool intended for copyright circumvention.

[1]: https://commonsware.com/blog/2020/10/24/youtube-dl-avoiding-...
> Yeah there is Youtube shorts

You could already upload short videos, why would a shit UI for short videos be a plus?
I can recommend godot. Got into it last weekend and compared to unity it runs like a dream. No freezing for seconds every time you make a change to a script
That is just preference.
> I’m 3 days into the tablet and will soon start experimenting with culturing for yoghurt.

I’ve heard tell of people “training” kefir grains to uptake other strains of bacteria through repeated exposure during the culturing process. I wonder if you could get a more stable culture by introducing kefir grains to that yogurt for a playdate. I’d imagine some concerted initial exposure plus a periodic Reuteri booster would give you kefir grains that’ll perpetuate the strains you want. Perhaps it would be enough to crush a few tablets in some milk before adding kefir grains, but the yogurt first approach seems easy enough if you have an instapot or other yogurt making device.
Hm, yeah, I would have called it a "transceiver", but SDST uses "transponder" in the name so I started using that term without thinking. I guess the terms are used interchangeably in this context...

Edit: what's Iris? Also now I'm not sure SDST was sending the data -- was that on a different radio?
Usually you can find them at super markets (Rewe, Edeka) sometimes Discounter have it as promotional item (Aldi).
I recommend growing yourself just use seeds from the bought fruits. They are rather easy to grow.
I can also send you seeds, if you like.
I personally disagree (but I agree that there might not be a "correct" answer - unless IETF stepped and defined exactly what a bad request is). If the server knows that "a" is not valid, then on the server's perspective it's an invalid request - therefore it's semantically-invalid for that server (and a minor nitpick - "a" is invalid in almost all servers, it should be "/a"). Client errors need not to be the user agent - it encompasses even user errors.
Note that the OEM README[1] for MS-DOS 2 (the first version with a hierarchical filesystem) suggests that it was at IBM’s insistence that MS-DOS used backslash for directories and slash for options, rather than slash for directories and hyphen-minus for options (even though Microsoft’s own programs for CP/M apparently used slash for options due to DEC influences, instead of the brackets used by CP/M itself[2], so this is a bit of a tangle). The documentation and examples for CONFIG.SYS[3] also bear an evident Unix influence, note in particular AVAILDEV and SWITCHAR. The MS-DOS-specific calls for file descriptors (as opposed to CP/M-compatible calls for FCBs) are called “XENIX file calls” in the source[4]. (All DOS system calls for files accepted either separator, but the option parsers would retrieve SWITCHAR[5] and give it precedence.)

[1] https://github.com/microsoft/MS-DOS/blob/master/v2.0/source/...

[2] https://news.ycombinator.com/item?id=30510935

[3] https://github.com/microsoft/MS-DOS/blob/master/v2.0/source/...

[4] https://github.com/microsoft/MS-DOS/blob/master/v2.0/source/...

[5] http://www.ctyme.com/intr/rb-2752.htm
Bankers are quite exposed on tje debt financing and possibly underwater despite the fees on the deal work
Interesting; I may have been misinformed.
Not code, but perhaps an algorithm.

"The author has in fact barely resisted the temptation to name the present volume 'The Programmer's Cookbook.' Perhaps someday he will attempt a book called 'Algorithms for the Kitchen.'" -- Knuth, TAOCP
How does an electric piano work?
> That definitely wasn't the original goal of Bitcoin though.

What was the original goal of gold?
>I guess the hard part there is that no one building software thinks their app is 'low-value'.

I know the things I'm working on are low-value and appreciate it. In fact, I genuinely dread ever working on something high-value.
Inflation rose 9.1% in June, even more than expected
>So almost half of all contributors are actually paid to work on free software projects full-time.

I'm not sure the report allows this conclusion. I think what it says is that there are full-time employees who work on FOSS projects as part of their employment. But I don't see where it says how much of their paid time they can spend on FOSS work.

>But it seems to me that in no way is free software dependent on any company funding

I don't know. Linux does look very dependent on corporate contributions. But maybe this is a special case as most kernel code is device drivers.
I agree with you. Looking at Bill Gate Sr's wiki, it shows he worked at Preston Gates & Ellis, LLP or a firm he co-founded before.

https://en.wikipedia.org/wiki/Bill_Gates_Sr.
presumably they mean adverts elsewhere for the game they are being driven to. Although of course if those other places are also mobile games, there is a certain bizarre oroboros to the whole idea... talk about zero-sum games, this is negative-sum
Agreed, to be a "religion" it should have more than one follower. I don't think they have to all believe exactly the same things, as there are variations and divisions of belief even within mainstream religions. But there should at least be some commonality of belief, or a shared administrative structure.

The idea that Christians should serve God and the poor was popular in my day.

But a religion could be molded gradually by a series of tiny steps, especially if given time to develop apologetic explanations to cover for what seem like contradictions. I remember reading that a prominent Christian leader proclaimed Donald Trump to be sent by God to rule us, and his idea gained some popularity. I prefer to let the religious sort out for themselves what's consistent with their doctrines.
What the fuck...

That Youtube video is like something out of a dystopian nightmare. Some smiley happy woman talking to me about the radioactive blast that I should prepare for.
A significant improvement over most current in-flight meals...
Yeh so the bindings with GDNative do absolutely help performance, and I imagine Rust with Godot would be even faster than Unity with C# (You can also use GDNative to add ECS as well I believe), but out the box, and therefore likely the direction Godot is heading in, seems to favour workflow above performance.

That being said, it could be a "grass is greener" issue. There are plenty of engines that offer better performance but a worse workflow, Unity for one, that I'm not using and instead using Godot, and I guess bindings are as close as reasonably feasible to getting the best of both worlds, so I cant complain much.
I think you want "utility", not "pay". Utility includes all of a person's subjective desires.

The downside is that utility might not be computable, or a person might not have a well-defined utility function(if they give inconsistent preference rankings between 3 or more choices).

Pay is easily computable, and also has lots of data in pay stubs and government tax records. So pay is better than utility if you want to poll people or gather data.
They run mobile game monetization, like micro transactions and ads. There is a reason they don't want to be open about that, everyone hates that and thinks it is toxic, but it generates a ton of money.
There are studies widely available just regarding health (0).
The other reasons are equally valid if not moreso (1,2)

0. https://jamanetwork.com/journals/jamapediatrics/fullarticle/...

1. https://www.med.upenn.edu/CEP/assets/user-content/documents/...

2. https://healthpolicy.usc.edu/article/mandatory-masking-of-sc...
chroot from an OS whose terminal is not broken and a shell other than bash
Having jumped off the Gmail boat recently, as well as a couple other Gboats, reading news about Google has become a much more pleasant experience. I wholeheartedly recommend it to anyone who gets unnecessary stress from stuff like this.