skysight-inc/HackerNews huggingface dataset:
This is well meaning and shows an unfortunate side of 2f-auth, but she seems to think that google is in the business of helping people. They are in the business of selling ads. True their search engine has greatly helped a lot of people, as has gmail.

But they are in the business of selling ads, and they are not selling enough ads to people who both a) cannot continuously afford a phone number b) are unable to afford an internet connection at home to be worth dealing with the complaints, manual verification and prevent fraud.

Google is in the business of making money. You make very little money from poor people, and you lose money if they cost even more to service.

This does not mean that it doesn't suck for the homeless lady, but this is reality.
Tik Tok is the reason I've been told several times I have ADHD. Pretty sure I don't! This phenomenon is so infuriating. The only half-convincing defense I've heard of it is that it could, maybe, theoretically, disseminate information about illnesses to people who don't have the money to see a professional, but the other effects are so much worse it doesn't seem worth it.
Managing k8s requires a strong DevOps team. A strong DevOps engineer is a solid software engineer plus a specialty. These people are rare and expensive and extremely hard to attract to startups.

Therefore you either can’t find anyone or more likely you hire less good DevOps engineers.

The solution is to not use k8s as a startup. The less a DevOps engineer can shoot themselves in the foot the better.
Before you do anything, read this blog. [1]

TLDR; he left a high paying job at Google to start out on his own. After multiple products, he’s gone 4-years and still hasn’t made any money (despite the fact he has a business generating $500k in revenue). [2]

This blog documents the huge challenge ahead. Must read for anyone wanting to go off on their own.

[1] https://mtlynch.io/why-i-quit-google/

[2] https://mtlynch.io/solo-developer-year-4/
Considering my experience with the migration and merging of various Microsoft accounts, I find this statement very surprising...
Pretty weird military junta that gives its opponents executive power every 4-8 years
They are still terminating the encrypted connection and get to see all data in cleartext so this is irrelevant to the concerns stated in gp. The only thing this scheme buys you as the website owner is that you can prevent CF from accepting new SSL connections without revoking the certificate entirely.
Hardware keys work well in place of a phone, and are in some ways significantly more secure depending on how U2F is implemented.

Some of the problem remains: If the user forgets their password the second factor won’t help them, and that includes the backup keys.

I’ve read the letter, and I see the massive problem, but I don’t think it’s been fully solved yet.

Q: “How do we remotely authenticate a single user, in a way that cannot be forged, without relying on their memory?”

There are solutions to every part of that sentence, but I do not know of one that solves it entirely.

They could write their password down, but then they’re exposing themselves to the obvious risk of it being stolen. You could trust the librarian in a 2-of-3 system, but this seems very easy to abuse by the library staff.

Genuinely not sure of how this is solved.

A cryptographically-strong biometric key store at the library (e.g. finger-print or face scanner) that will only authenticate a physically present user and release a FIDO signature that could then be used in a multisig authentication?
How would they verify their identity?

Those sorts of password reset systems are regularly bypassed by convincing scammers who have stolen some personal information.
I believe you can set up multiple keys. In this manner, a librarian could keep a "master key."

This compromises security somewhat, since the library houses one of the second factors, but IMO it's preferable to total account lockout (and still superior to SMS verification).
Lots of services are available to opt-in to validate identity. In fact, Google sells solutions on the cloud side.
I wonder if kids would still self diagnose after having witnessed first hand what those illnesses are like and what they do to someone you love.
Yeah, I wash just countering the idea that "AMD and Intel make GPU drivers for Linux so drivers on PC hardware isn't a problem".

On Macs it's a big deal; about as big a deal as making open source AMD drivers was before they had official open source drivers. And people did that, and people are working open source GPU drivers for Apple's GPU now.
Don't worry, it only applies to everyone else's world views and belief systems. Yours are accurate and reliable.
> Then dependant software can never estimate the impact of update.

They can read the changelog. And if they can't be bothered to read the changelog, then why even update?
That is right.

For normal people the leverage comes mostly through market forces, consumer protection laws and regulations because then you are leveraging with your whole economy and sovereign power of your country.

Not as good as individual leverage but better than nothing by a million miles.
Can you imagine someone saying that a city is actually pretty good about driving because even though 75% of the houses are completely inaccessible by cars, there’s 1 road a block away that you can drive a car in and 2 more roads within 3 blocks of you?

Most Americans don’t even realize how auto centric their entire thinking is.
I wouldn't want to have to list on my privacy policy that we use a tool called snoop anything.

Change the name.
You are confusing economic profits (which includes things like opportunity costs) with accounting profits (which only includes explicit costs).

Under perfect competition the economic profits would approach zero.

But you can still have unlimited of accounting profits, even in a perfectly competitive market provided you are delivering enough value to customers with some sort of unique value proposition.
> we found the start times with Kubernetes too slow

Just curious if you could elaborate here? I work with k8s on docker, and we're also going to be spinning up ephemeral containers (and most of the other things you say) with jupyter notebooks. We're all in on k8s, but since you might be ahead of me, just wondering what hurdles you have faced?

Our big problem was fetching containers took too long since we have kitchen sink containers that are like 10 GB (!) each. They seem to spin up pretty fast though if the image is already pulled. I've worked on a service that lives in the k8s cluster to pull images to make sure they are fresh (https://github.com/lsst-sqre/cachemachine) but curious if you are talking about that or the networking?

From what it looks like in your repo it might be that you need to do session timing (like ms) response time from a browser?
Yes, the answer that evolves is co-operation, i.e. in the real world, regulations and legislation, binding all the individual players to do the thing that's best for all of them and punishes defectors to ensure incentives are aligned.

The better analogy for the prisoners dilemma is a drug deal or a spy swap. How can you trust the other person to do the right thing with no legal system to enforce penalties if they don't? Without that, less deals are made than they would otherwise, a loss of efficiency.
I think that's a bold claim from somebody who has not been tortured, whose friends and family have not been threatened for their personal actions, and who has not actually lived in a dystopian dictatorship (but possibly gets kicks out of fantasizing and "preparing" for one).

Worried about dystopian future? Go out and vote, run for a city Councillor, participate in your local school board, educate and spread awareness. Be a political activist. Engage others, be persuasive and empathetic. Promote understanding and openness and getting along. Be the change you want to be - open dialogue with neighbors, fellow parents at school, teachers, city service people - instill the habit and values of open society. Bitcoin is not going to prevent the dystopian future or save you from it, and your noble death on the altar of bitcoin will not move the needle for anybody else.
It's not like most people will know they might lose everything if they sign up with google. Most rightfully expect that google, like most other companies, has customer service. By the time they realize, they're too late

We need to start seriously spreading the word that Google cannot be trusted to hold anything important to you
ICQ!
HackerNews is a collection of brightest minds of software engineering who all know better than incompetent Googlers. So asking for how the brightest and bestest of HN engineers handle these security cases is educational for everyone.
GPT-3 creates and sings rap song about Linux
https://bloggingfordevs.com/
Indeed, that's my point. What you've described (Mac US vs Mac UK) less significant than comparing a UK Mac and a UK IBM keyboard.

I'm not suggesting that a UK Mac keyboard is "the same" as a US Mac. Just that for someone used to a UK IBM keyboard, a UK Mac keyboard will feel different (and visa versa for Mac users switching to IBM keyboards).
Making these (and especially electronic ones) mandatory is a baaad idea : <insert random dystopian example>
This phenomenon made me convinced I was unable to move my eyes as a child. I thought I had some strange condition where I could move my focus without my eyeballs moving.

I remember my elementary school teacher saying "don't roll your eyes at me" and me trying to explain I couldn't move my eyes and her awkwardly going "right..." Then continued to believe it for another few years.
Yeah you just moved the RIP upstream, rasterize before the rasterizer :) We did that for a few jobs that caused trouble.

I haven't worked on the innards of those machines but my suspicion is that it's a combination of 1) Not much RAM, to keep costs down, 2) An inability to handle a large number of resources i.e. no swapping out to slow storage on a least-recently-used principle or similar, and 3) extremely strict conformance to avoid surprises in output.
BP Opens Its First Charging Station for Electric Trucks
The government is slowly figuring out digital ID and will show up to regulate it.

Identity is too critical a business for services companies like Google to walk away from. It’s stupid, because once the camel gets it’s nose in the tent, it will cost them more.
It's about the underlying structure of the legal system, not one particular law or political leaning you don't agree with. The checks and balances system in the US is definitely far more resilient than any of the commonwealth countries, Roe v Wade notwithstanding.
Yes, profits need to be reduced by means of paying employees more when there is inflation. You can't keep wages stagnant with a rising inflation and keep up profits, works out for stock holders in the short term but for those who don't sell fast and for basicall everyone in the economy this isn't sustainable and can even be called the prime cause of a recession.
me too. Hello @mindtropy
It works on Linux, but there's constant stuttering when the game starts. I do play it on Linux, however it's easier to boot into Windows when it comes to odd LAN party here and there and playing games with friends without looking into which Proton runtime to use and such :)

Thanks for the heads up, I did know but I appreciate the intent!
I have literally no idea – but since it hasn't happened and isn't likely to happen… who cares?
Or terraform/terragrunt, Pulumi or one of the other options out there
Golang is the admission by the creators of B, C, Unix, and Plan-9, that Wirth was right.
Nope, I like k8s. What I don't like is people trying to be overly smart with it and leaving a configuration hell of templates, weird network configurations and broken certs behind them. For my personal workloads it's all basic containers with a reverse proxy, though.
Tiktok and pop-culture generally make me very skeptical on "ADHD", the so-called "spectrum" and "neurodivergence" generally.

I'm not saying these things don't exist, but much of it seems very difficult to falsify -- which needs to be the gold standard of determining these sort of things; e.g. "By what process can someone reasonably determine that they are NOT neurodivergent?"
This reminds me of every other student while taking Abnormal Psychology in college.
When Intel kept settling lawsuits with them for large sums of money to avoid being broken up. These generous settlements kept AMD alive.
> your thing is a little toy

> With Docusaurus we are looking to compete with top notch documentations, not simple ones.

> Do you truly believe that your home-made setup would be sufficient to output a top-notch doc site?

> I doubt these companies would be satisfied with a home-made setup like yours.

> I'm not sure why you went through all this pain, but if you don't report it, how can we fix it? Others do not have the same experience afaik.

Your combative attitude throughout your comments here has really put me off trying Docusaurus. You don’t have to lash out at people who prefer an alternative approach.
sudo apt-get install archivemount

archivemount mydbimage.tgz /mnt/mydbimage -o big_writes

// -o readonly disable write support

// -o nosave do not save changes upon unmount.

//open/cache /mnt/mydbimage/mydbimage.db

//flush

fusermount -u /mnt/mydbimage

//No LGPL/Rust/cargo dependency issues...

//as SQLite's best use-case is embedding ;)
It's a review of 70 papers. The evidence is overwhelming.
I really wish Rancher didn't abandon Rancher 1.6 and moved to k8s.
This was a perfect solution for a small business and bare metal.

I am trying to move on k3s but it is just too complex to run anything and there is still not solved problem of exposing services to internet.

What I want is to declare I want this service to be under this domain and this IP - so for that you still need to configure your load balancer (bare metal) manually, setup certificates etc. I am writing a tool to automate this, but it's been a pain.
You can replicate the analog clock illusion without having to move your eyes. Open https://www.online-stopwatch.com/large-online-clock/ in a new tab and Ctrl+Tab, then Ctrl+Shift+Tab. It may take a few tries, but if you switch at the right time it will look as if the seconds hand freezes for more than a second.
TFA mentions YubiKeys, and acknowledges that they would work, but that the barrier is paying for 450k of them.
I distinctly remember lynching from HN security crowd when SIM cards were being unlocked and moved to new people from "trusted companies" like Verizon and AT&T.

HN demanded for such security holes to be disabled and prevented - what changed since then?
K3s is awesome!

I used it to host several small projects in cheap virtual machines. The setup is very straightforward.
I guess we just need better editing support of YAMLs.

Thanks for the recommendation!
Odd that many of our recent presidents were not in the military, and that top generals are regularly fired by civilian government. The whole vote on everything all the time, even dog catch, thing seems like a real waste of time for a Junta.
Anecdata: Just a few days ago I was entering a road after checking really carefully for absence of traffic (I had a heavy trailer attached and knew I needed some more time). Visibility on the left was excellent, but on the right not so much, so I waited for the right side to clear... look left, also clear, great... quickly check right again, still all clear.
I was surprised by the car coming from the right honking at me after I entered the lane, because I was 100% sure that it wasn't there before and could not have been "hiding" behind the A-pillar. Maybe they were too fast, but now I think it's realistically possible that my perception tricked me because the glance to the right was too quick. Will definitely adjust the timing for that.
Use Twitter’s iOS app without signing up for an account
AI, Autonomy, and the Risk of Nuclear War
1. I used to use it at an old company in the early days of K8s. We ran our own setup, as EKS and AKS didn't exist. GCP did, but we were on AWS. It really is very complicated, however, with EKS, GCP, and AKS, it makes it a lot easier. Note, for users it's a lot simpler than the alternatives. Sure it's no heroku, but it vastly makes things easier compared to running on AWS, GCP, Azure, or worse, on bare metal.

2. Essential. K8s solves a problem that's quite complex. You can't really solve it in a simple manner.

3. Probably, but that 10% will require the additional abstractions and complications anyway, and it'll be easier to manage one system rather than 2.
Continuing the hypothetical without really knowing about today's filesystems, such a system could presumably calculate a moving per page, fd or process- compression factor and turn it down or up if it started seeing lots of incompressible data?
I wrote a music playing bot/radio thing with XMMS that could remotely queue songs via a simple web interface and people would join in via Icecast.

My first open source contribution ever was for XMMS codebase, where I implemented two remote functions to get playqueue position for a playlist position and vice versa.

Thank you for the trip down the memory lane!
Yes! My startup of 5 people did. We started out with a managed Kubernetes cluster on DigitalOcean, but there were a number of reasons that caused us to not be very comfortable with that setup.

- Taking random .yml configs from The InternetTM to install an Nginx Ingress with automatic LetsEncrypt certs felt not-exactly-great. It's no better than piping curl to bash, except the potential impact is not that your computer is dead, but the entirety of prod goes down.
- Because of this, upgrades of Kubernetes are a pain. The DigitalOcean admin panel will complain about problems in 'our' configs, that aren't actually OUR configs. We don't know how to fix that, or if ignoring the warnings and upgrading will break our production apps.
- Upgrades of Kubernetes itself aren't actually zero downtime, and we couldn't figure out how to do that (even after investing a significant amount of research time).
- We were using only a tiny subset of the functionality in Kubernetes. Specifically we wanted high-availability application servers (2+ pods in parallel) with zero-downtime deployments, connecting to a DO managed PostgreSQL instance, with a webserver that does SSL-termination in front of it.
- Setting up deployments from a GitLab CI/CD pipeline was pretty hard, and it turned out the functionality for managing a Kubernetes cluster from GitLab was not really done with our use case in mind (I think?).
- It would be bad enough if DigitalOcean shit the bed, but the biggest problem was that we couldn't reliably recognize if something was a problem caused by us, or by DO. Try explaining that one to your customers.

Summarizing: it was just too complex and fragile, even once you wrap your head around what the hell a Pod, a Deployment, an Ingress and Ingress Controller, and all of the other Kubernetes lingo actually means. I suspect you need a dedicated infra person who knows their stuff to make this work, so it could very well make sense for larger companies, but for our situation it was overkill.

We were not intellectually in control of this setup, and I do not feel comfortable running production workloads (systems used by 20k high-school students, mission-critical applications used by logistical companies) on something we couldn't quite grasp.

We went to a much simpler setup on Fly.io, and have been happy since. It's a shame they seem to be too young of a company to really be super reliable, but I suspect this is only a matter of time. In terms of feature set, it's all we need.
I’m always slightly confused at how easily intel is written off. They still generate more revenue than AMD and Nvidia combined, they have a huge foundry business attached, their processors are competitive and they are making the necessary investments to catch up.

AMD and Nvidia will always be beholden to TSMC - yes, they avoid the capital outlay and risk of foundries, but they also give up the possible upside of owning the foundry.

Perhaps intel will never be as dominant as they once were, but as the computing market grows there’s a growing pie to share in regardless.
I wonder if that's deliberate. My bank also accepted an email utility bill but they said they only ask for the utility bill to prove that you didn't make a careless mistake when entering your address.
I watched CNN and they have constant coverage of how bad the economy is and if there is a recession or not. Presidents are not kings, it is defective thinking to put all good or bad things on whoever is president.

Are you saying fox news and onn or whatever nutcase media are not constantly blaming all things wrong on Biden? "The media" doesn't just mean news outlets you disagree with you know.
I’m confused how we can do thing like playing sports if our brains are mashing reality this much. How does a batter hit a 90 mph pitch if his vision can be delayed by half a second?
Related: medical students' disease!

https://en.m.wikipedia.org/wiki/Medical_students%27_disease
> Mine accepted seeing an email of a utility bill on my phone.

To be fair, tons of places use those as proof of residence. It’s not as if it makes a real difference if you print them first.
How to nail positioning for your startup
Yep! Kotoba is quick and easy to use.

It has the added benefit of being integrated with the system dictionary, so if you add any extra dictionaries to the system, such as foreign languages, they will also be immediately supported in Kotoba.

Unfortunately: "App Store guidelines disallow using the built-in system dictionary to create a dictionary app"

Write up on daring fireball here: https://daringfireball.net/linked/2018/06/19/kotoba
And video games cause violence, and DnD leads to Satanism, and TV rots brains, and movies lead to illiteracy, and books lead to dangerous thought.
Gets hundreds of poor devils to confess to "running somebody over cause i was frozzen up" in court, meanwhile its simply you were driving to fast for your visual system and it made up a plausible story after your drove into a poor guy.

Guilttrip included.

Here be privatpersons posting about how actions must have consequences.
k8s is actually very simple as a user. It's complicated to operate it yourself without EKS< GKE, etc. But from an end user perspective you write some delcarative manifests, they get put into an event bus, and then the state of the world is reconciled with your manifests. Easy peasy.
So how does your company handle these cases while defending against social engineering attacks to steal all private data?

The security wisdom I've always seen was to use 2FA and prevent other attempts at authentication, but if Google is evil for doing this security... what's the answer?
Batteries dont need to discharge back to the grid to time shift energy demand.

Australia has heated water overnight att off peak times for years with ripple signals because otherwise the coal plants wouldn't run efficiently.

They don't need to use that domestic hot water to feed electric energy back into the grid, they just need to use it to avoid calling on the grid when they would otherwise have added to peak load.

EVs are batteries on wheels, with computer chips and internet connections to tell them the best time to charge. All the pieces are there and in actual use for decades.