skysight-inc/HackerNews huggingface dataset:
Whoever wrote this seems to have no modern security training.

> then your average employee is probably doing one of these three things: Writing passwords down on paper

> Hopefully, you have a corporate security awareness training program and have long been discouraging

Please, please encourage people to write down passwords on paper! That provides really good safety against most modern threat models, especially in a world where people are working from home.

> Even though Chrome, Firefox, and Edge browsers all store passwords in encrypted databases, by default all three products intentionally leave the associated encryption keys completely unprotected in predictable locations.

There was (is?) a long lived Chrome issue (which I can't find now). They reasonably make the point that operating system level protection is the correct way to protect this (ie, if a person can log onto your device they are assumed to be you).
People Live Life as a Game, but Remember It as a Novel
Do you mean South Asia?
Develop a technology that helps people convey complex ideas using narrative trails and other techniques on top of massive local storage, as portrayed by V Bush in "As We May Think" in 1945. It still hasn't been done yet, despite the problem of efficiently conveying complex information as being one of the most important challenges facing mankind (more than 75 years ago!)

If you can help people convey complex ideas, with all the context and nuance, you've created a new level of expressivity and productivity that could help us all in ways we can't even currently imagine.
Zero Punctuation did a hilarious and informative video on this topic in one of his "Lets all laugh at an industry that never learns anything tee hee hee" series.

https://www.youtube.com/watch?v=EB3jOD2wjUc
Home prices are pretty high in most nicer college towns.
I played sports at a relatively competitive level for a long time. I do not remember seeing players with significant leadership ability.

Maybe this is true on a relative scale (E.g. good leadership skills for their age), but I don't believe it's true on an absolute scale and an absolute scale is the only useful scale in a professional environment.

I also believe that leadership skill is domain-specific, so having significant experience in your domain along with good leadership skills (Real skills, not from courses or workshops or whatever) does not at all seem feasible by the age of 20.
I use BearSSL in a few toy projects, would love to see it get more traction and eventually some proper cryptographic audit if it moves out of alpha.
> Most viral vaccines actually infect you with the virus.

It is definitely not true that most vaccines infect you with the virus. Most vaccines do not use live viruses at all, and the ones that do are specifically modified to be extremely weak.

This particular Lyme vaccine, VLA15, is a recombinant protein vaccine. IIUC it is basically just a particular protein that your immune system can learn to recognize and attack.
Does this cover things like LassPass, OnePassword, BitWarden? Or just the built in managers?
> the prospect of war

Are you claiming that trade dependence between countries makes war between them more likely?
This is a bunch of silly hand-wringing. I guarantee that if browsers required creating and memorizing and typing a master password all the time, users would be less secure overall. Because people simply wouldn't use the annoying password manager. Using a password manager without a master password is way more secure than not using a password manager at all.

If you are a business and you want your employees to be secure, forget about anything to do with passwords. You need hardware second factor tokens. Which I notice the article doesn't mention at all. An article about login security in 2022 that doesn't even mention hardware tokens for two factor authentication is not worth anyone's time.
I mean, Discord didn't, and Discord is not a small player any more. Are you saying they are the exception to the rule?
> Students who are unemployed two years after earning their degrees, including any who are in graduate or professional school, aren’t counted.
As it happens, this particular company does not include a restriction in their terms and conditions that explicitly prohibits the same user from receiving multiple free API keys. Using a physical retail store analogy, there is no sign stating something like, "One sample per person. Thank you for you cooperation."

"Free usage tiers" are nothing like "free samples" in a retail setting. A potential retail customer does not _need_ to provide an IP address in order to take a sample. The retailer does not track the behaviour of potential customers who take free samples. Nor is it providing "free" samples as bait in order to collect data on behalf of other entities. This particular "API SaaS" crypto/blockchain company collects aggregated data for other entities. Their "legal terms" also permit them to sell this data. According to the HN comment, it wants usage data from IP addresses issued by ISPs not auctions.

The "free tier" problem being articulated here with respect to IP addresses is not that there are "too many" potential customers, i.e., too many IP addresses accessing the "free" API, thereby denying some potential customers from obtaining their "free samples". The problem is that the data collector cannot distinguish whether particular IP addresses represent distinct ISP subscribers, and whether such persons may be using automation to avoid mouse clicking, touchscreen tapping or other burdensome interaction. The complaint is that the "tech" company's efforts to _collect data about computer users_ are not working.

APIs can be rate-limited. IP addresses can be blocked. All with a few keystrokes. Users are granted _permission_ to use the "free" sample and that permission can be revoked. Retailers of physical goods have no such abilities. They generally cannot control how many samples a person takes, they generally cannot ban selected people from taking samples, and they certainly cannot do this with a few keystrokes. Generally, the physical retailer will have a finite suply of free samples. When one person takes a sample, that is one less sample available for someone else. Whereas when one person accesses data, it does not result in "less data" for another person to access. There is no such depletion.

As such, the "limited supply" argument falls short. The complaint here is that a "tech" company wants to collect data about computer users and monetise it, and this is difficult because IP addresses do not necessary represent distinct computer users with certain charactersistics, not that a retailer is "running out of free samples".
What you're missing is that many of the problems you're describing are due to building cities around cars. You can get the mattress delivered (and even if you don't, you usually can't fit a mattress in most vehicles and probably need to rent one). You go to the store more frequently, and buy fewer things, at a grocery store that's less than 5 minutes way by foot. People can and do transport their children by bike. Walkable cities with public transportation are considerably easier for seniors, because many of them can no longer drive. You're also leaving out folks with disabilities, for which walkable cities with good public transportation are life changing.

You're also conveniently leaving out cost. Transportation costs in walkable cities with good public transportation is considerably cheaper. Cars, gas, insurance, maintenance, parking, etc. is extremely expensive. My current transportation costs are roughly $80 a month. When I had a car, they were roughly $800 a month (with averaged maintenance costs included).

(Most) Folks aren't saying that cars shouldn't exist, just that in cities, they should not be what we design for, because their convenience for some people results in the inconvenience of most people.

EVs should replace ICE cars, but we should restrict how cars can be brought in the city, and we should limit where and how they park (especially by eliminating free parking). The costs related to this should be progressive, based on income.
It costs more, because you need a bigger bursty supply behind, bigger hardware, etc. You have "some" economy of scale but not fully. This is why for example, you have many charging stations who are now coupled with batteries, to be able to smooth the load on the grid. At the end you get:

grid -> battery pack at the charging station -> battery of the vehicule
Make an excel spreadsheet, list the things you want in a town. Then start researching towns and list whether they have those things, point by point.

One thing I would suggest is that if you're moving, bear in mind that climate change is making some previously pleasant places much more unpleasant. Look at recent years of fire data, flood data, air quality from smoke, drought, heat, etc.

And finally, make sure the place you're moving to is going to have ample, clean fresh water, and no other environmental problems looming. Don't move to Vegas. Don't move to Salt Lake City. Don't move anywhere that is going to lose power if Lake Mead or Lake Powell dry up.

You can search EWG for your prospective towns. Be aware that many, many towns in the US have way higher PFAS / PFOA / etc. than you probably want. Many have very high levels of other contaminants as well. Some whole-house filters can filter that out but they're expensive.

Here's the EWG report for a sample California town: https://www.ewg.org/tapwater/system.php?pws=CA0110009

Search "town name + superfund". Search "town name" + "pollution". Search "town name" + {various natural disasters}. Search "town name" + "smoke". Search "town name" + "smell". Search "town name" + "water."

Go visit everywhere that's on your short list. Ask people about the town.

Good luck!
I don't think there is anything wrong with storing passwords unencrypted locally assuming the machine itself has encrypted storage. Malware that retrieves passwords from password manager could get them from an unlocked password manager as well.
Retarded is a fine word to describe a person that is acting like he/she has a mental handcap. Americans are sooo annoying with the language policing mania, tou guys really need to chill.
Olympia WA. Home to The Evergreen State College, Washington State Capitol, and Sea-Tac International is just under an hour away. Winters are mild, but very wet. Violent crime (20.4) is under the national average, while property crime is nearly twice the national average at 61.2.

I grew up in the Thurston County area in the 80s, and went to school at TESC, a hippie liberal arts college I remember the downtown as being charming, with lots of hip cafes, bars, and restaurants. I've considered moving back there myself. That said, in recent years epidemics of homelessness and drug addiction have taken a bit of a toll on the city, but I still think it's worth checking out.
Unfortunately we haven't figure this one out yet.
NSSecureCoding is so old at this point (macOS 10.8, 2012) that anyone still writing Obj-C who hasn't adopted it is essentially committing malpractice.
>That was my point, the second amendment does not mean you can own any arm you want and the heavy regulation on title 2 weapons, explosives and WMD's seems to work well in preventing their use in crimes without leading to tyranny and genocide.

my argument would be that it does mean you can own that things.

Bans on nukes, etc should be added as amendment to constitution if they're not allowed. They are arms. Should be easy to pass the amendment if the overwhelming majority agree.

The fact you can't buy a nuke isn't some gotcha on legitimacy of restrictions. Clearly nukes should be legal until the constitution is amended to exclude classes of arms and the hughes amendment for post-86 machine guns is blatantly unconstitutional.
Geneva has a very unique feature: the Fabyan estate with its recently restored dutch windmill, built nearby but looks straight out of the netherlands.

The story behind the estate is very interesting, iirc Fabyan was obsesesd with finding hidden codes in Shakespeare, thinking he could prove Francis Bacon was the real author. By the time World War I broke out, he had gathered a library of historical cyphers and had a team of codebreakers working for him, who quickly changed course from Shakespeare to the War Department.

It's a frank lloyd wright house with a well done japanese garden right on the fox river, worth taking the tour :)
To show that their perfect influencer personality has no unauthorized opinions or alternative.

https://www.serialreader.org

https://1paragraph.app
I highly suspect that, in the vast majority of legal proceedings (all but the most high-budget high-stakes ones), all involved simple assume that all the (PDF exports of / hard-copy print-outs of) emails in the case files are genuine. I doubt that the possibility of email tampering even occurs to them.

And, in the minority of cases where it really matters, and where they really suspect foul play, them I'd assume that they rely on numerous bits of technical evidence (proxy copies, CC'ed copies, file system forensics), plus on one person's testimony vs another's, because as you say, DKIM's usefulness is limited.
Juicero teardown is one of the best youtube videos ever made.
What an incompetent shitshow.

I don't believe this will impact AAPL's price though. Shareholders and ad sellers are the only "customers"/"users" Cook's Apple is interested in and works for and news of this vulnerability will be shushed or soothed outside of tech forums.

Whether this will be somehow fixed (Dear Cook's Apple, consider starting with not keeping decryption keys together with encrypted data, duh) or ABI/compatibility will get broken, Apple's marketing will sell the news to shareholders as an improvement and the magic of capitalism will boost the price.
Gmail is free and universal. I haven't had issues with others.
> UNpaid workforce

Automation is far from unpaid. At very least it expects you to give it food (electricity, gasoline, etc.), shelter, and healthcare (repairs and maintenance). Generally the same things that humans expect from you.

Automation is significant not because it is unpaid, but because it can often do much more work for the same amount of pay.
Go to Montana.
Hardly Possible
I'm just vibing.
Perhaps to sell "Made in USA" tools to the US government, https://news.ycombinator.com/item?id=32462829
Winter is the best time of the year. It keeps housing prices down from people that can't deal with it.
Ya for instance protein supplements. If you didn’t know you have to be very careful about the origin and the process the company use to produce those. But because it’s very hard to test even with an independent testing company, you have all kind of speculation about which company to avoid and the ones that are good because you can never know. So if you see one company doing shading things or not being 100% transparent then even if the production line is fine it’s still casting enough doubt in the “expert” users to avoid to buy them. And again testing was easy then all this won’t be here. We will just test the protein powder and that’s it.
Apple originally intended to require NSSecureCoding in some way after it was introduced in macOS 10.8 (2012) but constantly delayed those plans due to the compatibility issues sibling mentioned.
Hauling junk really isn’t in the purview of a transit system to be fair to parent
A number of states are offering grants for remote workers to relocate, offers vary but generally you can get monthly installments of around $1k paid out over one or two years. You have to apply and be accepted, be verifiably employed full time, 100% remote, and if you leave within the first couple years you either lose out on the balance of the grant or you might need to pay a portion back.

The programs are generally designed to bring people into rural areas, you need to pay close attention to make sure there is sufficient internet for you to work remotely. Places like Frontier top out at 1.5mbps, a little further down the road your internet might be line of sight wireless. Then inexplicably the other side of a hill might be top of the line cable internet. You can’t really trust the web sites, they need to come out and confirm an address can be serviced at the speed you need (without you paying them $10,000+ to run cable)

Oh! Your employer might need to be registered with the state so they can submit your withholdings. You should verify with your HR department which states they can support.
As usual with security discussions, one needs to start from analyzing security threats and attack vectors. Is a simple to memorize and likely multi-use password is a bigger security threat than a unique, hard to guess passwords in a file storage? It depends.

Is this a laptop without disk encryption that travels a lot and especially internationally? Sure, these semi-unencrypted passwords on disk are likely not very safe from lost laptops, customs inspections, etc. Might still be better than a common and simple password though.

Is this a laptop sitting at home most of the time with a strong disk encryption? I’ll take unsecured browser password storage with unique hard passwords any day.

Edit: formatting
The growth obligations embedded in our institutions can't realistically be met, leading to derangement and a surrender to those willing to try to keep up the façade as long as possible. The can has been kicked down the road for an amazingly long time, but the end is nigh. Late stage capitalism is running out of steam.
This is my #1 fear going to a doctor. I change my address every 6 months or so for work/study purpose, and I have to specifically ask the clinic to send me unpaid bills over email instead of mail. Sometimes I wish the US could swear off sending bills over the mail and just do it electronically.
The better car simulators already do this: “Physically informed car engine sound synthesis for virtual and augmented environments” https://air.iuav.it/bitstream/11578/264484/1/SIVE15_submissi...
Never trust anyone who uses a series of tweets to say a paragraph.
Lyme Disease / Lyme Borreliosis : https://en.m.wikipedia.org/wiki/Lyme_disease

A Vaccine for Lyme Disease is in its Final Clinical Trial (August 9, 2022) : https://text.npr.org/1116500921
There's a reason Poor Richard has the aphorism "lost time is not found again"

Books are the exception, for a brief interval, reliving the past feels like it. But experientally, not outside of your head. So either recall as fictional flow or relived inside, yes. But outside, game over try again is always forward motion, inescapably.

Time passes.
That makes sense given their experience in mass production of plastic-based objects. How did Keter in Israel out-compete Chinese suppliers to manufacture injection-molded toolboxes for Milwaukee Packout and Ridgid, when both are owned by China-based TTI?
I noticed this was very different in different cultures. For example, when I went to Singapore, there was lots of Chinese vegetarian food and lots of Indian vegetarian food. The Chinese vegetarian food almost always used mock meat, while the Indian vegetarian food never did.

Personally, as a vegetarian for over three decades, I have sometimes been grossed out by realistic meat substitutes, but sometimes found them palatable and even appealing. Just a few days ago I ate a mock meat sandwich from The Butcher's Son in Berkeley that I enjoyed quite a bit (even though it's not very similar to anything I would normally eat most of the time).

I suspect this question is pretty complicated and varies a lot from place to place, person to person, and time to time. For instance, it might be different for people who associated meat with celebrations and feasts and then gave it up somewhat reluctantly, and for people who found meat unpleasant and unappetizing and always preferred eating other things. These two people would naturally have different cultural and emotional associations to the act of eating (something that seems quite a lot like) meat.

So I'd encourage people working in the vegetarian food industry to pursue both tracks: make mock meats that are more and more realistic, and also show people that things that are not very meat-like at all can be appealing and interesting to eat.
When I was in the military they would drop us off by vehicle or helicopter at some unknown spot in the woods, give us a map and compass, not tell us where we were starting, and tell us to collect stamps at certain waypoints within a given amount of time. It's much harder than you think if you start out lost.
They lost 100% of their power network to Maria. Hurricanes are becoming more common and higher intensity. Humanity's days in the Caribbean are numbered.
> a few dozen like-minded nerds will gentrify a small town

How does one do this in such a way that it's welcomed by people who already make their home there?

(I can imagine a lot of ways this could go work out badly, but don't immediately know a good approach.)
If you think that the operator in a Lisp form needs to be a function and if it were a function that it needs to return, then that's not the case in Lisp for probably 50+ years.

Lisp is not generally following an eval/apply model and/or call/return model.

(send foo :beep)

This can mean:

* SEND is a function, it's is called with the evaluated args, it may return or not

* SEND is not a function and does something arbitrary

Generally the model is:

(operator ...)

a) Where operator can be a special operator, something built-in, which is not a function.

For example (throw 'foo "hello"), where THROW is a built-in special operator which transfers control.

b) it could be a function, which is more like a procedure. The function could also do transfer control to some other place and never return, for example by calling THROW or by other operators which transfer control

c) it could be a macro. The args don't need to be evaluated. Thus no eval/apply. The macro returns code, which gets executed. Again this could use other primitives, which transfer control.

d) it could be a function itself like ((lambda (x y) ...) 13 14)

What it needs: the first element in a Lisp form needs to be an operator, which is usually a symbol with some meaning: special operator, function, macro.

Scheme then in the mid 70s added that the first element is evaluated and can be a general variable. Thus in Common Lisp:

(let ((actor (create-actor :name 'foo)))
(send-async actor :init))

could be written in Scheme

(let ((actor (create-actor 'foo)))
(actor :init))

given that the actor would be a function object.

> my-actor async messge_args

Writing it as

(send my-actor :async message-args)

Is basically just a syntactic transformation. The semantics could be the same.

If we want write

(my-actor async message-args)

then one would typically

a) switch to a model like in Scheme, where the actor would be a function object

or

b) write a translator for a new language to ordinary Lisp

or

c) write a new evaluator for that
Lambda/dynamo can work quite well

Dev/staging environments are virtually free

Prod will cost more depending on usage, but you could optimize costs and add caching (like cloudflare - at cdn level)
Just opened the promotions tab for the first time. There are ads there (USA). Don't see any reason to ever open it again.
Linux 6.0 debuts, missing some Rusty bits and a magic mushroom reference
Nicknames I heard were “Pine Box” or “Crime Bluff” (from a native who proceeded to stiff me of $150 so I should have known better than dealing with him to begin with)
Stitching – A Python package for fast and robust Image Stitching (Panoramas)
Read above. Skeptical, misunderstood the threat/risk surface, lack of coherent adoption of modern NIST expectations, focussed on the one story they know, which is the password manager keys are at risk if the machine is compromised.
Or at your house. Mice in my area have it...