skysight-inc/HackerNews huggingface dataset:
let me quote NIST Special Publication 800-63B: https://pages.nist.gov/800-63-3/sp800-63b.html#memsecret

> Verifiers SHALL require subscriber-chosen memorized secrets to be at least 8 characters in length. Verifiers SHOULD permit subscriber-chosen memorized secrets at least 64 characters in length. All printing ASCII [RFC 20] characters as well as the space character SHOULD be acceptable in memorized secrets. Unicode [ISO/ISC 10646] characters SHOULD be accepted as well.
I think the only real response is that isn't my problem to figure out. I'm sure you could come up with 10 highly unethical or outright illegal monetization methods off the top of your head, and the argument against them isn't "well here's an alternative" but instead "these are bad and shouldn't be done full stop." And this is how people view ads, it's a values based judgement rather than a utilitarian one.
Some Unicode characters can be represented in multiple ways, maybe it’s better to normalize password strings before storing or hashing them
Please revive Posterous!
When the senators behind the program are out of power.
Funny thing that the top comment right now criticizes Rust.
[1] "...The Saturn second stage was built by North American Aviation at its plant at Seal Beach, California, shipped to NASA's Marshall Space Flight Center, Huntsville, Alabama, and there tested to ensure that it met contract specifications. Problems developed on this piece of the Saturn effort and Wernher von Braun began intensive investigations. Essentially his engineers completely disassembled and examined every part of every stage delivered by North American to ensure no defects...

...This was an enormously expensive and time-consuming process, grinding the stage's production schedule almost to a standstill and jeopardizing the Presidential timetable.

When this happened Webb told von Braun to desist, adding that "We've got to trust American industry." The issue came to a showdown at a meeting where the Marshall rocket team was asked to explain its extreme measures. While doing so, one of the engineers produced a rag and told Webb that "this is what we find in this stuff." The contractors, the Marshall engineers believed, required extensive oversight to ensure they produced the highest quality work. A compromise emerged that was called the 10 percent rule: 10 percent of all funding for NASA was to be spent to ensure in- house expertise and in the process check contractor reliability..."

[1] https://history.nasa.gov/Apollomon/Apollo.html
I saw another piece in which he dug holes in which he slept inside the homes. He probably used those holes for staying cooler (or perhaps warmer).
Those ads will give you 10% of the RPM of the ads that track.
If you are dealing with any kind of tinnitus it is worth trying to massage the mastoid process and mastoid portion.

Just a small circular motion behind the ear accompanied with light pressure.

This has worked to alleviate certain tinnitus.

Before downvoting this, please consider that the causes of tinnitus are not largely understood and alleviating it in any way is hugely relieving.

Also recommend range of motion exercises
SLS wouldn't put people back on the moon. The actual moon lander is Starship.

If people land on the moon. Starship will be the impressive inspirational thing, not SLS.

And Starship is what you need to have a permanent moon base. Its a simple fact that there is not enough budget for a moon base, as long as NASA is forced into SLS. Do the math and you will see.

There is a reason literally everything other then Orion is already taken away from SLS. Both science missions and all other moon missions and landers are no longer going to use SLS.

SLS is literally just there to put Orion into moon orbit. That's it. And that could be achieved other ways as well.

SLS is just a crouch that NASA is forced to use. And on the pictures on television, when Astronauts get out on to the moon, it will be a large SpaceX rocket.
Unfortunately this is accurate, much like the bounties put on certain people within Afghanistan where it sure seems like it was abused by certain local tribes to take out some rival and profit from the US Government in the process. In areas where you'd want to put a bounty on people, there's bound to be enough corruption and misaligned incentives to make it not work the way you hoped.
Right, in a free market rides are incredibly cheap and have a 50% chance of getting more expensive at the end when the driver who hasn't had a background check robs you.
I use Bromite (Chromium fork + ad block) on Android.

It's pretty sad to see Google stoop so low. Back in the day they used to win because of the innovation, best products and openness. Now they can't build anything new and just trying to squeeze every last penny from what they already have.
You mean, something that “blocks ad”?

I don't know what makes you think civil servant are illiterate idiots, but they aren't.
NASA has selected Starship as the only lander, if SpaceX wont make it to the moon, neither will NASA.
(One of) my pet peeves is requiring a certain format for passwords but then not telling you at the password prompt.

I mean, you're not supposed to write down passwords, but with all the various restrictions you can't even use a consistent convention so you can actually remember them all.
Why not just change your DNS server to one of the many free public ad-blocking ones?
Yes but that's a terrible way to enforce it. I've said here before I'd actually like the browser to forbid users from reusing passwords when signing up to new sites. I'm guessing there is actually a plugin that does it.
Our 2022 College Rankings Are Out: See How Your School Did
> Surely someone as smart as Elon will find a way to distribute starship production to please the wonderful members of US Congress - he does plan on building a lot of them.

All indications point towards the opposite - that he considers low cost and high performance to be more important, and that vertical integration is an important part of achieving both of those goals.

While it's true that SpaceX is doing work in CA, FL, and TX, there's not much indication that they'll be farming out subcomponent work to high-40s number of states ala the Shuttle/SLS.
> However, you play around with words the same question always remains what was before.
> Where did this super dense black hole come from? What caused it to be? What was it before it was a black hole?

These theories are just that - thought experiments to try to come up with possible explanations. They are not claimed as proven or facts.

There are a lot of open equestions. It is work in progress.

> Our current theories for the origin of black holes as far as I know does not include the spontaneous appearance of a black hole for no reaosn.

There are actually theories that black holes can form spontaneously. This is because particles are theorized to be able to spontaneously form and under the right circumstances they'd form a black hole. They would most likely though evaporate nearly instantly. But again that is not proven.
For a while this was a thing and still is to a degree. Not directly in DNS so to speak, but in whois.

whois ycombinator.com|grep -Ei "phone|email"
Registrar Abuse Contact Email: abuse@support.gandi.net
Registrar Abuse Contact Phone: +33.170377661

This used to be a way to get contact information for domain holders but spammers have effectively squashed that concept. Phone numbers are also commonly stored in LDAP/AD databases and can be queried over DNS internally within an organization.

If one were so inclined they could share their contact information in DNS in TXT records. Not many people would know to query this unless it became a standard at which point spammers would squash it there as well.

Another semi-standard domain related place people could put contact information if they were so inclined is humans.txt [1]

[1] - https://www.python.org/humans.txt
I respect your opinion of,

someone hav[ing] used a tool for personal reasons and may recommend it as a good tool for work is not enough to justify spending on those personal use cases

I am sharing that I have an equal and opposite opinion, which is that the someone having used a tool for personal reasons and may recommend it as a good tool for work sometimes IS enough to justify spending on those personal use cases

You are right that data can inform the decision, of course, keeping in mind that the benefits include intangibles like goodwill, which goes further in the techie community than in a layman community imo
You are moving the goal posts. You were claiming they were far right. Now you are just saying right wing. Unless you think everybody on the right is far right?
Try img to img using decentralized cloud: https://mirror.xyz/bitkevin.eth/F3cZoh630VvRKgmPzVQ3QXM5gQu_...
It's far from covering the needs in December.
Have you looked at shielded twisted pair or optical fiber for that run? I have a similar project planned but at the moment I’m not looking forward to trenching the cable into the ground so it hasn’t moved forward yet.
>there's even porches and overscan included in the signal

Well, I guess this explains some of my "why the fuck is this even an option" when trying to make a TV just display the signal as it was received.
Genius girl engineer shows all the boys what's what. Her future is so $&#$# bright.
I never understood the motivation for allowing tuples without surrounding parens. There are a few very simple functions that look cuter this way, but it constantly trips me up in more complex situations.
In the age of SpaceX, a rocket costing billions is a waste of money before it ever takes off.
Honestly, that's quite the list. From the title and even the home page, it looks like yet another dotfiles manager, but it looks like it can replace what I've gotten with half-baked scripts. Integration with password managers is great!
A catalogue of errors one can implement with CSS classes (as easily as using other CSS selectors) and of bad solutions to nonexistent problems.

On top of that, a strange attitude: apart from the embarrassing argument that "old" technology is bad, the author assumes that HTML is written by hand, apparently by a team of monkeys taking pride in the intensity of their fuzz testing, rather than generated correctly from templates.

Hence the emphasis on defensive coding and on treating easily fixed mistakes as a disaster (as if web developers routinely edited pages in production without testing).
If I'm reading your comment correctly, then fingering has the same connotation in the U.S. as well, it is also synonymous with third base. (Also have never heard the term either.)
Also SF :smirk:
I've learned to "lean in" to my compromises.

It starts by accepting them, right off the bat, then using the time that I'd otherwise spend in fruitless pursuit of shiny, doing things like testing and documenting the codebase.

Experience gives me the ability to see them, at the start of things, other than waiting to run into them, later.
I have to plug my favorite "explanation" of the Y combinator, which is called "Lawvere's fixed point theorem".

In a cartesian closed category, if there is a function p : A -> (A -> B) that has a left-inverse, i.e., e : (A -> B) -> A with p o e = id_(A -> B) then B has a fixed point combinator Y : (B -> B) -> B, i.e., every function from B to itself has a fixed point: Y(f) = f(Y(f)).

The proof is like the Y combinator in untyped lambda calculus, but with extra ps and es. This is because one way to understand untyped lambda calculus is that you are working with a single type D that satisfies D = (D -> D) (so p,e are identities).

I like this because it makes the connection between the Y combinator and diagonalization arguments like Cantor's theorem explicit.

For instance, Cantor's theorem says that the powerset of a set always has higher cardinality. We can reformulate this as saying that there is no onto function p : X -> (X -> 2) because a subset of X is the same as a function from X to booleans (2 = {true, false}). An onto function has a left inverse (using axiom of choice) and so if we have an onto function X -> (X -> 2) then every function (2 -> 2) has a fixed point, but this isn't true! If we took Y(not) we would construct a boolean b : 2 such that b = not(b), which is impossible so we have a contradiction. I found this helpful in understanding why the "not" appears in just the right place in the classical proof.
Their goals are similar, NASA is just hamstrung by Congress and the general public. If NASA had the freedom to choose its direction they too would be working on a Starship style rocket by now, not attempting to pass off a dinosaur as modern.
I've only run into one site (Instagram) that forces the use of the app, and I just close the site instead.
Nonsense. It accepted a partition plan put forth by the UN. Arabs rejected it.

Declaring independence was entirely legal and supported by the UN.

The Arab rejection led to the invasion, the directive to the arabs from their leaders to leave so they could clean the jews out.

Solidly historically documented. Hard to argue against this documentation. Its sitting in museums collections at this point.

"guise of persecution from the holocaust". Literally tells me everything I need to know about you.
Some of the critical changes were previously vetoed until Apollo 1 confirmed the worth of doors that opened to outside rather than inside, despite increased weight of the sealing mechanism.
Which version of that are you talking about in Python? The biggest related gotcha I've seen in Python is when you have a trailing comma `x = 1,` and accidentally create a tuple.
It's always annoying when a special character is required in a password, but "no, not that special character". Presumably those devs can't figure out how to escape special characters properly.
Seems like the analysis is missing functional programming, which is basically flow based.
I would guess it’s more like 99%
What do you think the Artemis missions are for? The goal isn't a PR win or anything. Real science is happening. Even stuff like the Apollo missions gave us technology we still use today. With NASA those discoveries are more open and available to all. Elon and other oligarchs would have a financial incentive to hoard any advancement they make.
Good that you know so much more then the people at NASA who investigated the design.

The initial design has special high up landing engines btw, this solves the debris issue.

And in terms of the stability, Starship has enough mass-fraction to add whatever kind of legs on that thing they want. NASA didn't even list that as a minor issue in the report.
>>You end up with a lot of decisions being made by the minority that (1) feels strongly and (2) is willing to speak up.

...and don't forget to include the wonderboy/girl from the overpaid consulting firms that come in and tell the CEO they are doing everything wrong and should move everything to: (pick the latest technology fad)

and then 2-3 years later they come back and convince upper management to move to the next big thing...
> The article briefly mentions ReasonML, which offers a different syntax which aims to be more familiar to JavaScript programmers but is also likely to be more familiar to most programmers of C-family languages.

One thing I don't like about this is that they've replaced:

> let x = 1 in

with

> let x = 1;

In plain OCaml you only use semicolons on lines that evaluate to unit, so they're a clear indicator that you've done something with side effects. ReasonML loses this useful visual distinction in order to look more like JavaScript.
He did in the form of Posthaven [1] but I'd say please keep it updated. The last post on the Posthaven blog is five years old.[2]

[1] https://posthaven.com/
[2] https://blog.posthaven.com/read-about-how-fly-has-helped-wit...
How much do you think starship launches will cost? Hint, it's billions
Nobody lives in Eastern Europe and the Balkans. Everyone is Central European.
Yeah, I'm probably just explaining poorly. That's what I was thinking: horizontally scaling subsets of your verticals that need it (they don't usually all need to scale at the same rate)
Interesting you chose to become a VC given your reservations about growth v. sustainability: https://news.ycombinator.com/item?id=5229805 (:

Either ways, good luck!

(btw, love the production quality of your videos on youtube; and now, YC-- Dalton, Michael et al-- who do have fantastic content, can use a bit of that production magic).
It's definitely poor journalism but it's good for encouraging this girl to keep on going.

It doesn't cost much and can be helpful for society in 10 years when she's going to be the next Elizabeth Holmes.
Probably research chemicals or amphetamine
"Nefarious actors are attempting these things 24/7 regardless. As a registrar for millions of domains names, we are constantly under attack so this isn't anything new." - https://twitter.com/NamecheapCEO/status/1564077063480418307

I guess this makes sense. On the other hand such actions might have had legal implications before. I mean until the CEO actively allowed / awarded them.
Silicon Values
The definition of factorial (fac for short) can be broken down as

succ = \n\f\x. n f (f x) -- the successor function for Church numerals
F = \c\n. n (c (succ n))
fac = \n\f. n F (\x.f) id

As you can see there is no use of a decrement function. Instead, numbers 1..n are recreated by the iterated successor function.

We can follow the reduction of fac 3 as

0 = \f\x. x
1 = \f\x. f x
2 = \f\x. f(f x)
3 = \f\x. f(f(f x))
fac 3 = \f. F (F (F (\x.f))) 1
= \f. 1 (F (F (\x.f)) 2)
= \f. 1 (2 (F (\x.f) 3))
= \f. 1 (2 (3 ((\x.f) 4)))
= \f. 1 (2 (3 f))
Or they might have ran their original design of STS instead of one hamstrung and made hilariously expensive due to contract with DoD
Let's start at the edgest of cases.

Some emoji, for example, are combinations of multiple other emoji, and a given combined emoji may not be uniquely represented by a sequence of codepoints. In the pathological case, this could mean that an OS update on the user's system changes the composition of the same emoji, which might make it impossible for them to input their password. It is probably prudent for a system to disallow emoji passwords.

One step away from Emoji, Unicode also allows for other m̸̱̜̅ͅȋ̴̩̠̀s̸̺͐c̶͈͇͉̐͛̚h̸̤̣̆i̴͍͍͒͌e̴̲̽̓f̸̞̽̊. Chances are, full-on Zalgo passwords can lead to problems. Again, there are probably prudent reasons to restrict some characters. On the other hand, those modifiers exist for a reason, and disallowing phrases in the user's native language doesn't make for great UX.

Towards the more common use of Unicode, there is a pretty good _practical_ reason to restrict the use of some non-ASCII characters: if your system accepts ç, ö and ø as characters in passwords, and non-technical users venture into a part of the world where the keyboard layout doesn't, your helpdesk is going to have to deal with the occasional annoyed customer. From a systems design perspective, those characters seem fine -- operationally, they may cause headaches.

Finally, we've arrived at printable ASCII characters. Restrictions on maximum length (usually 6 or 8 characters), and on certain characters (%, & or :) tend to be based on interactions with legacy systems (e.g. DES crypt() used to have an 8-character minimum), or on bad input handling. Either way, it's probably a bad sign.
A self-trained Italian blacksmith built himself an amusement park
The simple way to block YouTube ads on iOS is to pay for YouTube premium - it's unfortunate you can't get SponsorBlock through the regular/legal flow though.
"Lads, is it immoral to abuse the misery and despair of people to make money?"
GMO's are really a telling story of misinformation damages, look up to golden rice, a variety that could save millions of lives, held back by tinfoil hat conspiracies. Conspiracies that take hold even on the "educated" West.
Have you done the serious analysis and realistic numbers? It sounds very handwavy.
Yes, for me it was the poor value proposition that made me switch. I do prefer to not be locked-in to their ecosystem as well, but I will admit that my overall experience with Apple is positive (phone/laptop/etc.).

OP seems to have a poor experience with them and is switching for that reason.
Ha, the red balloon in the commit message gave my brain a quick "wait what's wrong, why does this repo have a bunch of red circles?". Just trained to see that and immediately think "something is broken".

Anyway, interesting approach using a secret like this. Is this approach used elsewhere?

Based on this it looks like the service will change what port it's listening on every N seconds. What happens if a port on the server is already open/ reserved though?

Also, not that it really matters from a security perspective, but md5 seems like a bit of an odd choice. There are faster options available. Might be nice to allow it to be configured.

Cool stuff.
right, but the fact that you smoke cigarettes doesn't give the US the right to lock you up without charges. The problem isn't that these people got hurt, it's that they got illegally imprisoned for decades without charges or trials.
I always enjoyed forums that had "Newbie Corners" where newbies could go to introduce themselves if they wished, otherwise I rarely saw the newbie welcoming type of interaction outside of that corner. (Unless it was obvious the newbie had run afoul of one of the forum's rules but that's on the newbie at that point.)
> also present in Slovakia and Hungary

And Bulgaria, and Serbia, ...
What are the biggest changes you want to do?
The post definitely needs rewording!
They come out of the woodwork and try to argue their position occasionally, but get buried in downvotes and slink away

The position is usually something along the lines of:

- They ignore the incredibly invasive tracking/profiling/security risks involved with downloading and running malicious third-party unvetted ad code

- It's stealing if you block ads

- Micropayments/subscriptions just don't work well enough
ATK stuff is super high quality. Like you said, probably worth it just to avoid reading the author's life story prior to the recipe on random food blogs.
That's my solution but it's bulky and consumes more power than it really needs to. The beauty of using the raspberry pi for these use cases is its small footprint and low power consumption.

You can remove quite a lot of laptop and still keep a working machine (all you need is the power supply and the motherboard, really) but there's no quick and easy way to do it, you'd have to design a custom case and everything. You'd also need a laptop that will just power on without keyboard, screen, and other peripherals connected, which is not necessarily a given.

Maybe if someone designs a modular enough 3D printed case design for common laptop motherboards so that you can create your own laptop server easily. In a few years, when USB C is available in cheap, old, second-hand laptops, I imagine you can build quite the home lab cluster with old laptop motherboards if you can design decent cases for them.
A visual guide of NASA's plan to get back to the moon
If you're storing a raw password in a database, limiting specific characters is waaaay down on the list of things you're doing wrong.
Yes, it's not mandatory. In fact, running sites themselves is not mandatory, so if you can't find a way to run a site which respects its users, then I'd argue you should fail. That's the free market at its finest.
There’s a paper about this and a demo site that can accurately derive your password based on a short training period and audio recording. They used distance between key presses and sounds of each key for their specialized acoustical analysis.
The Three Laws of Utility Classes
I had a very brief experience with OCaml debugging some seriously complicated networking code. Putting aside the quirkiness of the language, its compiler is a wonder of the world. It is practically as fast as GO which is a miracle given how much more sophisticated OCaml is.