skysight-inc/HackerNews huggingface dataset:
> Also, I'll put my money where my mouth is. If you can make any changes to a domain that is not yours or a friend's via our help desk, I will send you 10k USD, no questions asked.

> and to clarify, said account must be protected by 2fa to begin with.

I appreciate what he's trying to say... but perhaps he should instead recommend white-hats instead create a test account and try to access it without using the 2FA mechanism.
Sorta tl;dr. In my case, remote is favoured because I have a good working environment at home so I can work without interruptions. It's also quiet with a door, so that my video/audio interactions don't annoy others. I also don't have a long/frustrating commute which lets me actually get more work done in less wall clock time.

Others might prosper, or think they prosper, in the bullpen environment but I find that far too distracting for actually accomplishing anything. As per Rands, I need to create and maintain State when doing something difficult and recovering State takes time when interrupted. YMMV.
How is one "proper" while the other is not? The blog URL is literally in the tweet, and it's NASA's official account.

Of course if you're doing citation for your paper the later one would be better but this is "just" posting on HN. I would even go so far as to say I prefer the tweet link so I can easily retweet, and no information is lost.
Old school guy here; there's something about using Github (as opposed to merely git) that just feels wrong. While I get the flipside, might be cool to rifle through somebody elses dotfiles to see how they do things, having your big ol' batch of configs on the "site designed for public consumption" seems weird.

Especially in light of Microsoft et al perhaps not always playing nice here (see, e.g. youtube-dl)
Ironically, that xkcd strip is crap advice. A dictionary attack breaks a mere four English words in half a jiffy. This approach should be enforced to a 9-10 word minimum.
Vanilla Breeze: Convert Tailwind CSS to Semantic CSS
I see a lot of mention of unicode and unusual space/null characters here which makes sense, but I was not allowed to use @ in my pw for my Amex account, and that seems absolutely crazy.
Are you trying to equate the cost of the entire development program with a single launch?

Hint, SpaceX has an assembly line and is cranking out new starships and boosters every couple months while SLS will launch only every few years and then be chunked into the ocean with a hardware cost in the billions PER launch.
I think most tech people went from considering intel-based macbooks as a splurge, to the single best value proposition for consumer laptops.

Before there were many tradeoffs for choosing a macbook, most of them around performance/cost, but all of those are gone when the base $999 macbook air beats way more expensive computers.

I'd recommend this machines to literally everyone that needs a laptop, which is something I can't say for the rest of Apple products or any other piece of tech for that matter
This doesn’t have any meaningful legal implications.

You will still be in trouble if you deface some random Namecheap customers website to claim this bounty.
Maybe you could put your actions where your mouth is and just add a 2fa step to the support portals login process? As a namecheap user I don't want to be randomly targeted to prove a point in some face saving contest.
Yes, NextDNS and Brave is my stack.

Sadly, it doesn't work on IG.

But I have blocked a few meme sites, and now I'm doing less mindless scrolling.
There is probably an overlap too , I mean it is not like people who work for ad networks like Facebook and google want to see ads either
Enter Sandman – Metallica – But the lyrics are AI generated images
That's sunken cost fallacy. Single flight of SLS will cost 2 billion dollars.

2 billion dollars! Each, single flight.

You could build, launch and operate 3 Kepler Telescopes for that. Kepler is the telescope that was used to discovered ~3 thousand planets.

You could build, send and operate another Curiosity/Perseverance rover to Mars for 2 billion.
I've been approaching a similar problem, recently, in trying to represent my javascript node-graph elements as plain text. Very different output and use case, but I settled on the same kind of "psuedo-selector" idea that you seem to have. Hash to tag id's, wrappers to allow for complex content, and I even went as far as to use query string format to allow for dynamic event raising (when a node is hit, I can trigger an event with a key and value pair).
I can show a video of it, if it's of interest, but I don't think there's much I can help recommend. This comment is just to say that I like what you're doing and have found myself in a similar situation so I'll be very eager to hear what the community has to say about your project!
I used to work in a company where people would write a message in the Skype group saying they weren't coming in. Then the other thirty people in the company would reply with "take care".
"It wasn't a mistake, just a deliberate compromise."

This might describe 80% of all the disagreements people have.
In the UK it's £10 to register a company online in minutes.

Direct debit instructions require nothing beyond a name and account number.
The university is not directly in contact with the specific professors of its prospective students though?

When the Eastern European students ask their professors to write them a reference letter to Cambridge, the prospective students can point their professor to this guide. I'm not sure how else Cambridge is supposed to reach 'potential professors of potential prospective students'.
This. The disease is gross wealth inequality that leads to a certain sector of society having to figure out where to put all that money while the bottom 99.99% are facing real problems.
> ome of it isn't even seriously on the drawing board yet

Citation needed.

NASA specifically called out in their report that SpaceX had done a huge amount of work on refueling already and they were impressed with the amount of detail.

NASA has also handed out contracts to study fluid dynamics of cryo and SpaceX got a contract to study that.

This is not some mystical thing. Refuling in orbit has been done for 50 years. Yes, its now cryo fluids but pumping cryo around in orbit is already required for upper stages, so its not really even that new or different.

And btw, refueling Starship is a required part of Artemis if you want to transition crew in earth or lunar orbit.
> but we can spend billions on what amounts to a blank check to the aerospace defense industry in the name of "science."

Do you really think single-digit billions is going to pay for a meaningful increase to teachers' wages, plus feeding students?

NASA gets $22B per year - less than $12B of that goes to manned flights.

There's 3.1M public school teachers in the US. If you took ALL of that money and gave it all to teachers (which is ridiculous - they're paid by states, not federally) - that amounts to a ~10% raise - and if you count future pensions - it's not even a ~3% raise.

You have $0 left over to pay for hungry students. There's also another 3M employees at public schools beside teachers that get nothing...

It's almost as if NASA's budget has nothing to do with anything you mentioned.
For those who are interested in the CS3110 textbook and don't like Google sending them wristwatch shopping instead, here is a link to the textbook{1].

[1] https://cs3110.github.io/textbook/
Uhh what exactly is Google cracking down on if Blokada has always been distributed as an apk precisely because Google has never allowed this sort of thing on Google Play?
Very few launch vehicles get off in their first launch window. There's a lot of procedures and adjustments to get juuuust right to make a launch window 90%+ of the time.

The issue here isn't really an "engine issue", but an issue with putting cold gases through the engine so it's not thermally shocked at ignition-- some combination of lines and valves probably want a different procedure and thermal profile.
> Why would laziness be "unpredictable"?

Well, it's an empirical observation that Haskell programmers, however experienced they may be, are constantly surprised by the memory footprint of their programs — IIRC sometimes even the GHC's core developers get blindsided.
Do CPUs make a noise? I thought they were dead silent and any noise is the fan or a rotating disk.
Compare SLS and SpaceX, not Artemis and SpaceX. SpaceX became a part of Artemis when it was selected to take Astronauts to the moon. SLS will only take them into orbit near the moon. SpaceX will take them to the actual surface of the moon. That’s a kinda important part of Artemis.
I haven't used the new generation of MacBooks yet, but I might request one from my employer just to get a feel for it.

The Apple experience is more polished for sure, but after Linux, I doubt I will accept any form of proprietary OS/hardware for my personal computer ever again.
Well, I think my point of learning from how people actually use make in the real world to be perfectly valid for learning, as is learning any kind of language/tool.

But here's my criticisms:

> Instead, ask make to use > as the block character, by adding this at the top of your makefile:

Changing this is like replacing java curly braces with square brackets because it's easier to type. A good developer should be able to cope with different stylistic choices to match the existing code without strain IMO

Maybe if it was a greenfield project it's ok, but the article doesn't say either way.

> The key message here, of course, is to choose a specific shell. If you’d rather use ZSH, or Python or Node for that matter, set it to that.

I disagree with using ZSH as it adds another dependency and shell to learn to build your project. This introduces more ramp up in knowledge, but also something build systems will have to pull in.

The vast majority of steps end up as simple unix commands and program calling with specific flags in practice.

Python is a maybe if that's the only language you're working with. Otherwise anything but simple function calls is better served by an external file. Even a simple module function call becomes clunky on one line.

This is an interesting idea worth exploring in general, though.

> Make has a bunch of cryptic magic variables that refer to things like the targets and prerequisites of rules. I mostly think these should be avoided, because they are hard to read.

See point 1. This is like choosing to not use regex because the symbols are confusing.

~

The rest of the article has good stuff in it though, esp. the file structure and bash flags. The rest is just questionable opinion and has little impact to a good makefile.

Can you give some arguments against what I typed above?
SpaceX is a profit motivated company with large degrees of flexibility. They move fast and break ships.
NASA is a research institution focused on scientific advancement and space research. They also are very rigid due to the way they receive funding. NASA cannot afford to move to a starship style system because the SLS contract was locked in.
Maybe the other 35 aren't extraordinary
Cool. This reminded me to delete my personal and business Namecheap accounts now that all the resources I had with them have been transferred or expired. Thanks, idiotic Namecheap CEO!
>In terms of simplicity, the native content type, “gemtext”, is meant to be loaded in a single request, therefore there are no inline images, no iFrames, fonts, scripts or anything else.

Good luck replacing the web with request/response markdown. I would figure at the least something that could serve Wikipedia would be a bare minimum.
You can work around the restriction, and thus store any arbitrary information you wish, by encoding it as binary; e.g. "one zero one zero zero one..." :-)
For characters between U+0020 and U+007E inclusive, there's no good reason at all, and it probably means that they're storing passwords in plaintext instead of hashing them, and that they aren't using parameterized queries to protect against SQL injection.

For characters outside that range, there is a good reason: it's hard to type those characters consistently across different platforms/systems, and they don't want you to lock yourself out over that.
Commercial providers can and do fail just as hard. I'd also question cost estimates based on nothing actually built or seriously planned through.
Everything you need to know is that I’m the descendent of Palestinian refugees. If you think I’m some right winged neo nazi you’re a fool.
Or worse, Web3 ends up intertwining AI/AGI with it.
Somehow, other OECD countries don't have these problems. They just properly fund public amenities and they magically function.
Same teat provides for SpaceX - they wouldn't exist without DoD funding (and not just for early days - Starlink was heavily financed by US military)
As others said, it’s important that your users can enter their password on all devices they would want to use.

Because of that, outlawing the likes of line feed, carriage return and backspace (raw input on a tty will store those in passwords, but good luck entering them in a web form) makes sense, as does normalizing Unicode input (typing ‘é’ on their phone may produce a byte sequence that’s different from typing ‘é’ on their PC)

Apart from that, it should not be necessary. If, however, you don’t trust your programmers to do the right thing, you may want to rule out characters that are related to security incidents such as single quotes, and also may want to prevent users from entering strings that might get decoded to such strings such as ‘&quot;’.

That path can be endless, though. If you forbid ‘&’, because your programmers might accidentally html-decode it, should you guard against double html-decoding? URI-decoding and then uudecoding? Getting programmers you can trust to do the right thing and giving them the time to do so is the better option.
As a rule, Java is not very productive.

Yes, it has a lot of good libraries, and bad frameworks. The focus on code generation, distributed systems, and high complexity environments are all on the wrong side of starting something up. (One of those may be right after you are big, but then, Java isn't the best choice for any of it.)

The one large selling point of Java, that is to help you enforce a minimum level of quality on code that lots of people change, is completely meaningless for a small team starting up.
> I mean, you're not supposed to write down passwords, but with all the various restrictions you can't even use a consistent convention so you can actually remember them all.

You're supposed to use a password manager. Preferably with a passphrase and a second factor like a keyfile or hardware token.
Rewriting my blog in Rust for fun and profit
Oh damn. my take-way is that my keyboard needs a whammy bar now.
How would your average thief get into the phone in the first place?

Do people just not have encrypted devices with reasonably strong pass codes?

I'm wondering what the threat model is here. Is an agency with the capability to break into the device going to be fooled by these?
AdGuard Home is another option along with the PiHole another commented mentioned. I have that running at home forcing all port 53 traffic to it via the firewall. So ads are blocked on all devices on the network. So easy I sometimes forget I have it running and then I browse on mobile away from home and get bombarded with ads and am reminded why I do it.

They do also have their own paid DNS service, but I haven't attempted to use it. Might be a way to deal with mobile better.
Great comment.

From prior research, the hormonal interactions around the thyroid and immune system are complex. You've boiled it down fairly well here as related to zinc.

Wasn't there some discussion about hydroxychloroquine being effectively only in conjunction with zinc as the hydroxychloroquine encourages cellular uptake of zinc. Ergo, zinc is the key ingredient.

Further, I seem to recall the book "The end of alzheimer's" (high recommend) talked alot about zinc wrt neurological health.
Randomly stumbled over this video. Apparently uses the Midjourney[1] bot to generate the images used to make the music video from the lyrics of the song.

On the one hand the generated images can appear to capture some abstract ideas, in other cases it's terribly literal. Still, a fun experiment I thought.

[1]: https://www.midjourney.com
One suggestion: migrations should all feature downgrade capabilities and should also be idempotent (i.e. check if the table exists before creating it, etc.)
Also discussed yesterday at https://news.ycombinator.com/item?id=32625766
I've been pretty happy with my HP elitebook. I don't even bother with an external keyboard. But upgrading the RAM is a bit more painful than it needs to be. Haven't made use of support yet, hope I won't have to!
Thanks for replying. Useful data to me.
Frequency and cost yes, but reliability is more complicated.

ULA has 148 launches with NO accidents. SpaceX has put up more, but had an accident in flight with the Falcon 9 in June 2015, and another on the pad in September 2016.

Mind you, ULA started with a known rocket design. While SpaceX has been iterating as it goes.

But still, we don't have significant statistical evidence about which is actually more reliable.
1. It's a trade-off so real-world implementations are likely to suck at both ends of the spectrum. (eg. Old Ruby servers are neither responsive nor they have large throughput)

2. The trade-off is more about computation in general. In typical "service" scenarios you almost always want to prioritize latency over throughput, while in most "batch processing" scenarios which you want to optimize overall processing time you want to prioritize throughput.

Examples:

1. Erlang server: Great preemptive scheduling thus the theoretical overall computation throughput is relatively lower. But in practice, Erlang servers are extremely fast and responsive. (Prioritize latency over throughput, great for "services")

2. Traditional C/Java blocking (non-async) server spawns threads: Theoretical computation throughput is greater but in reality, it's very easy to DDoS it. (Great for batch processing but suck at "services")
What a weird thing to get excited about.
You can’t win the lottery without buying it first but still a lottery is a lottery…
The space bar is just a big obvious form of audio attack that even humans can do with no tools or training, but really, if an attacker can hear you typing the password, it’s very heavily at risk. You can infer much more purely from the sound about the positioning of the hand and likely finger movements: in timing, most simply, but also in how sound bounces differently from different parts of the keyboard depending on what else is around (including the hands), and more. Practical attacks of this kind have been demonstrated.

It is thus a security Best Practice for streamers and the likes to mute their microphones while typing passwords.

Really, all senses leak information like this. Wifi signals are enough to see round corners and steal passwords. Even wearing a sleeveless shirt and having your upper arms visible to a camera leaks a little information from the small arm and theoretically even muscle movements.
I'm not privy of the technical details.I don't think it acts on cookies themselves, it merely removes the nagging banners, and in that case the EU-compliant site is supposed not to set any cookie or other tracker since none were explicitly accepted.

Basically at a high level it's like what DNT should have been i.e "as a default don't track me since I'm not giving consent"
Blind exploits to rule Watchguard firewalls (CVE-2022-31789, CVE-2022-31790)
I feel like F# addresses quite a few items on the "dislike" list:

* It has // for single-line comments

* You can use newlines as a list separator, as in:

let some_list = [
1
2
3
]

* Similarly, multiple let-bindings can be separated by newlines and the "in" is optional in most cases

This comes from some drawbacks: for starters, when I mention "newlines", it's actually significant whitespace, so you may or may not like it (as a heavy Python user, I just don't care).
You have a brown lawn because you haven’t embraced xeriscaping.
> The problem [he] describe[s] is nonexistent. [He] say[s] <div class="card big"> is bad because

some other CSS can come along
and co-opt what big means

To me the complaint is like saying, when programming, that I shouldn’t define functions with names in a file that’s imported into another file, because “some other” file can “come along” and redefine those names. If that’s a problem then that’s your problem, not the existence of classes. Or names.
SLS has been obsolete since its creating by the Senat in 2011. It never made sense and it was never needed. Its purely political.

I remember in 2017 when people said Falcon Heavy is not real, SLS is and all this bullshit.

SLS has no logical justification, even if either Falcon Heavy nor Starship existed. It just doesn't make sense if you actually think threw the problem.

NASA knew this, and didn't want (outside of Johnson) but were forced to do it.

> But Starship is order of magnitude more complicated, optimistically it will not fly for several years.

That quite the claim.

I would bet you 10k$ that Starship will reach orbit 5 times before SLS reaches Orbit twice? Interested?
> It is probably prudent for a system to disallow emoji passwords

In addition, not all keyboard environments are capable of inputting the same set of emoji. A coworker once got locked out of his macbook because the UX when changing the password when already logged in allowed inputting emoji, but the OS login screen did not (could be misremembering some specifics, but the broad point remains).

Which I suppose is really a subset of the sorts of issues around ç, ö and ø, but how it can happen even on the same system in different contexts.
You don't even need nightly, ublock works great on the production version too
dubious that consuming more content will ease concerns about not being able to consume more content

people will find more personal engagement and happiness learning about what ever sparks their interest be it physics or fashion
The normal PM process wouldn't work, but I think normal PM processes are broken anyway. It also wouldn't cover all the wonderful small features, ports and fixes people like you contribute.

Any notion of "setting priorities" would go right out the window. It would have to entirely be about giving gifts, which is what open source is based on, anyway.

"I talked to 5 of our users about this problem. Here's what they said in summary, with some pull quotes. Here's how 3 other libraries solve this problem. I added 2 more ideas, made a table comparing all of them. Here's the 1 I think is the best, if anyone wants to make it."

Then it gets picked up or not (probably not lol). But no "influencing" past that. The influencing is just doing useful research, idea generation, and sharing it.
List of mergers and adquisitions Embracer Groupo
Seriously, who are these guys?
Whether or not the program is a failure depends on what you view the end goal of SLS to be.

If you look at it as a federal jobs program that just happens to result in a rocket, then I'd say it was pretty successful...
Only if you also include instructions to decode it using the ten hundred most common words, I think!
I grew up in North Dakota, and yeah, everyone said that but it was only because we couldn't think of any other logical reason to live there. (I grew up in the western part of the state during the 1970s and 1980s, when the economy was terrible.)
Even at 18 years old when I first got a taste of Unix at university the `finger <username>` command made me snigger. But I was (and still am to some degree) very puerile.
Good point, all too often a death-by-thousand-cuts situation arises, or a single much bigger bottleneck is the problem. As always, profiling is very very important before any form of optimization work.