skysight-inc/HackerNews huggingface dataset:
I can do over 270Mbps down and 80Mbps up (May be limited by my upload, download is a CPU limitation) on a RBM33G as a client-router.

I'm not 100%, but it may actually be 370Mbps down, but I don't want to advertise that number without being sure. I replaced it with a RPi4 as a router-on-a-stick WG gateway. The RPi4 has no problem keeping up with my 500/100 fiber connection.

The RBM33G has a pretty weak MTK7621a dual core 800mhz MIPS cpu.

I should setup two of them and run some proper benchmarks at some point.
Took some digging, but I found a Visa submission to the EU / European Banking Authority stating that cart abandonment due to Verified By Visa / 3D Secure was nearly 14% in Spain (worst case), 2.5% in the UK, and 3x - 5x higher with 3D Secure than without. The context appears to be Visa recommending Risk Based Authentication (RBA) anti-fraud methods, rather than the EU legal requirement for Strong Customer Authentication (SCA) via one-time authentication methods.

"Furthermore, Visa observed that independently of the SCA method used (SMS, Password, Bank credentials, etc.) when customer intervention is requested the abandonment rate is between three to five times higher than when authentication happens frictionless via RBA."

https://www.eba.europa.eu/node/81948/submission/532

EDIT: While I'd prefer to take Visa's own numbers, "Global Banking & Finance Review" published statistics in May 2021 claiming decrease in conversions of 25% - 50% across Europe after the introduction of the EU Payment Services Directive 2 requiring Strong Customer Authentication.

https://www.globalbankingandfinance.com/the-real-impact-of-p...
The code your dealing with is probably deterministic. The answer is in the code. Read the code. Run a mental model. Use your creativity, imagine edge cases to the code you see, and investigate what would happen and if that is what is happening. Rinse, repeat.
Attending conferences are a good chance to discuss areas of interest with others. In many ways it's the same reason that a lot of us regularly visit HN :)
If a real conflict starts over Taiwan those who oppose the lab-leak theory will become the new ‘deniers’; after all we’ve always been at war with East Asia.

I get whiplash from watching how rapidly the public gets jawboned. I’ve seen many people, even those close to me, completely switch positions on ‘strongly’ held beliefs. Not only do they not acknowledge the inherent contradictions but they seem to have forgotten holding the original positions in the first place. Those without memory are living in an ever changing present, and those of us with memory are stuck with a past that no longer exists.
I'll check it out with a compass next time my dog takes a dump in the forest!
Sure, good on you, but once you got that position, what's stopping you from monetizing your users by selling their personal data to advertisers?

I don't understand why anyone would celebrate and worship monopolies? Publicly listed companies are not your friends. You're just a dollar sign for them.
I think Peltier modules or other thermo-electric generators only have <10% efficiency, not 30%.
Good point! I guess the prudent FAANG engineer would buy a total market fund and then short a portion of their employer to net out the overexposure. Would sure feel odd though!
I don’t think its popularity (other than obviously dead projects won’t get updates).

‘Growing a Language’ by Guy Steele is probably more relevant than ever here — and for all the dislike Java as a language gets, it is remarkable in how lean it remains even today, resisting the urge to add everything and the kitchen sink.
(~ Upton Sinclair)
Nope.
They are part of Providence Equity

https://en.m.wikipedia.org/wiki/Providence_Equity
It's weird seeing ppl downplay this exact scenario. They raised $100M, can they hit sales in a recession? Rates are rising for VCs, they need to generate a winner quickly more than ever. Just in time before the expected 75bps rate increase
The benefit of DCA (in my mind) is avoiding market timing risk. Sure, as another commenter pointed out, if a stock is only going up you better just get in and ride it up. But who knows? If you buy at the peak of a bubble, like in January 2022, it's not so great. If you're not studying the market all day, you can't really predict where it's gonna move (or even if you are).

And of course, many of us don't have a big chunk of cash sitting around waiting to get invested.
I which they didn't start with 1).

Because there is "a" wild life market in Wuhan which does sell wild bats from far away (and many other animals which can get/transmit covid).
Or maybe in artificial magnetic field?
>Someone who won’t install a trivial and safe free app to maintain connection with you is perhaps not as valuable a connection as one might think.

That's a pretty radical stance and I respect it.

However, I consider that keeping in touch with people that don't get why they shouldn't use Meta or Google is actually more productive than bubbling myself in a hacktivist bubble. I actually have more chance to get them interested in mass surveillance concerns by keeping in touch than by ghosting them.
"Captain does time" and "company closed", all "done even before police starts asking questions" doesn't sound like "due process" to me.
Happens most of the time I spend a few hundred dollars or more with N26 (Germany), Revolut, ING Direct (Australia) and Nubank (Brazil). OTP via their mobile apps (or SMS fallback).

1. Ye, it'd be great if I could configure it to do 2FA on all online transactions. Does anyone know what exactly triggers 2FA?

2. I have an account with BTG Pactual (Brazil) and their virtual card gets a new CVC after each transaction, pretty cool.
Why would we open up NS2 if NS1 isn't even being used due to Russian decisions? What would added capacity do when they're not even using the existing links?
Argentina’s 4chan taken down by admins after would-be assassin suspected as user
> get_data_from_data_attribute({{ data|to_json }});

This constitutes an injection vulnerability that can be demonstrated with string "</script><script>alert(1<2)</script><script>".

If you want to inject arbitrary strings into a script tag, you need to reach for some more exotic escapes, starting with things like </script> → <\/script> or \u003c/script>. But I’m not going to give you a complete solution because I don’t want you to think this is a good idea. (But if you really want to know: look at the script data state in the HTML spec, and follow the parser. All up, you could do it two different ways, one requiring three things and the other two, though one of the two/three is impossible after JSON encoding.)

People often treat auto-escaping template languages as safe to do anything in, but they’re just not if you use HTML syntax—there are quite a few hazards to be aware of. Here you disabled auto-escaping (mark_safe in the to_json body) because the auto-escaping broke things in one way, but it introduced another vulnerability. For sanity in this context, you need to use XML syntax (by serving with the MIME type application/xhtml+xml), though some JavaScript libraries might misbehave due to side-effects if they make bad assumptions, and third-party templates might not be designed for XML syntax. (All up, I don’t generally recommend using XML syntax, though it’s a close thing.)

Fun fact: you can actually use entity encoding in JavaScript in the HTML syntax… by using the SVG script tag instead of the HTML one:

<svg><script>alert(1&lt;2)</script></svg>
For (effectively) state-owned companies, politics trumps economics 101. Removing sanctions will cause a marginal drop in natural gas price for a few weeks, but no more.

At this point, the European natural gas market is sufficiently skewed by state involvement that "economics 101" is marginally more useful than astrology. Geopolitics 101 is what you should turn to for answers.
I'm not the op but I find the Android experience to be pretty terrible. It almost never gives me the option to auto-fill my passwords and when it does it's usually because I already went out of my way to open Bitwarden. It's very inconsistent and frustrating. I'm not running any weird Android version either. Pixel 5, stock OS, always up-to-date.

The thing is, I've never used any other password manager on Android so I can't tell if the problem is Bitwarden or if the problem is Android.
This isn’t particularly the case changes to the render server are handed off before the runloop iteration ends, and before the runloop iteration ends all changes are aggregated (with the latest evaluated, i.e. @State, etc.) then we see the view invalidated once commits are handed off to the tender server.

What you’d need to be careful off is ensuring your @State or @Published changes don’t too take too long to skip frames
I don't know about magnetic alignment, but as a dog owner, there is clearly _some_ kind of search algorithm running in that little brain. My dog will weave a path all over the yard before finding an ideal spot.
I have a 10 month old daughter. So far raising her has been an incredibly rewarding experience. My wife and I frequently find ourselves wanting a break. Even if for just a few hours.

You can love something and want to dedicate your life to it and still need a break from it from time to time. Is that not normal?

The question you're posing about academia specifically is interesting because a I assume a conference would be at least somewhat work related and part of the experience in academia. This is very different from a sabbatical where presumably you do whatever you want that's not related to your work. However maybe it is? Maybe some people in academia use their sabbaticals to write essays or books or whatever?

This seems like a weird question tbh.
JetBrains has already done it for years. [0] Hundreds of millions in revenue. Profitable. Zero VC capital raised. [0] Supporting, sells and develops open-source software used by millions of developers worldwide.

When I see capital raised, the treadmill for an expected return starts running and it is not for everyone.

[0] https://twitter.com/chetanp/status/1205907182396395525
> There's also the question of what fraction of Russian export capacity to Europe would vanish in the hypothetical where the pipelines going though Ukrainian territory were destroyed for whatever reason (I can think of at least three scenarios leading to that).

Jamal is 33 billion m³ a year [1] and Soyuz 26 billion m³ [2], while each of the North Stream pipelines has 55 billion m³ capacity [3] - meaning that even in the case that both Jamal and Soyuz are irreparably destroyed for whatever reason, North Stream has more than enough capacity to take over. And that was the entire point why Ukraine, Austria and Poland were so opposed to the buildout of North Stream - had both been opened, Russia would have been able to completely cut out all the transit countries, leaving them completely at the mercy of Russia and Germany's notoriously Russia-amorous politicians.

[1] https://en.wikipedia.org/wiki/Yamal%E2%80%93Europe_pipeline

[2] https://en.wikipedia.org/wiki/Natural_gas_transmission_syste...

[3] https://en.wikipedia.org/wiki/Nord_Stream
The problem is that the way the questions are posed comes across as "what are they hiding?!?"

You have to admit that it's not a good way to kick off a discussion of the subject in earnest.
It's subtle, but the sheer amount of time that it takes to become a top level GM make it such that there's a bit of "GM Speak" that all of them seem to do. So, there is first a cultural variation: the way he speaks doesn't sound like the rest of the experts. By itself, it isn't damning.

However, people at the GM level also tend to have an ability to look at a position and remember what they were thinking at that point of time. They internalize lines in a way that is a branch of moves. So, in this case Be6! is such a sharp position that you would expect them to talk a bit through it because it takes a lot of prep.

Further, when they turned off Stockfish analysis, his analysis goes down sharply.

Further, he was banned from chess.com twice because he was cheating with an engine.

Further, when he was talking about a set of analysis, he made something up on the spot involving a match between Carlsen and GM Wesley So, and Wesley So said that what he had said was impossible for multiple reasons on another chess streamer's twitch.

It's a lot of little things that don't add up. It's like if you were in an interview and asking a developer to explain some code on their Github about ML, and they sounded like they didn't understand the basic principles of the model they coded. It doesn't mean they didn't write the code, but it casts suspicion.
Hating What You Love – The Conservative Obsession with Searching for Trans Porn
My bad! I mixed up Stable Diffusion and Midjourney in my head. MJ has the open office hours and is worried about gore and porn and so on, not Stable Diffusion.
Came here to say versions of 4 & 5.

As a more junior programmer, I would sometimes resist the perceived effort or inelegance of the divide-and-conquer approach and end up spending much more time than needed to get to a solution.
Actually it's possible you did get a 3D Secure prompt, but many US banks don't do anything with it and just instantly redirect back with authorization.

It's impressive how far behind US financial institutes are.
It’s a 22in custom tyre?!

That’s insane. And not in a good way.
> Hard to beat dollar cost averaging the entire stock market, which is what VTI represents.

Unless you invested in 2021…

The common “wisdom” of dollar cost averaging the market only works for those (1) who never sell (2) continue to have an ever inflating dollar and QE and (3) an ever growing economy

Right now energy prices are 3x-5x a few years ago. That will dramatically reduce growth and may even shrink the economy. Arguably the real economy has been stagnant for quite some time.

Not financial advice, but at the moment I would consider holding cash or other solid assets. Waiting for the energy situation to stabilize then buy in.

You could cost average, but timing the market can produce multiples more gains if your calm / collected, informed and willing to wait.

DCA reduces risks, particularly on the whole market. They said it doesn’t remove risk and it definitely reduces potential upside.
University of Virginia 3D-prints living soil walls that sprout greenery
I was going to go into academia, however I sucked at it compared to private sector. Why? You have to hyper focus on one thing possible for years or decades to make an impact, this is either a strength or a weakness depending on the person. So how I see it, from someone that would love to really drill into every possible question into a subject:

Conferences are a great way to network, still get work done yet feel like you are participating in a larger community. My professors largely were mostly hermits to a degree, sure there were meetings but mostly to secure funding to organize with their junior hermits with their hyper focuses. So actually getting a chance to breath and hear what others are doing can be fun, also showing off your work must be incredibly satisfying to just be DONE.

Sabbatical, great way to refresh after hyper focusing on only a few topics, not getting much breathing room for other things. Largely I see this as a method for staying creative and staying up to date with what you otherwise would have missed.
For some reason, localtunnel program stopped working so I'm trying less-popular ngrok program now. Maybe at least it warns about stopping work.
> comparing the governments of US and China to my family

Hi there. My intention was not to make this about your literal family. The "your" was intended to refer to a general addressee. Sry for that.
My mistake, it's Midjourney that has the overrun of gore, the weekly office hours, etc. Not Stable Diffusion.
> We are absolutely talking about billions of records.

> But when you say "return excess data to the application" I'm not sure what you mean. Not doing lots of complex JOINs doesn't mean not filtering the queries at the DB at all. Nobody is pulling back a billion records at a time.

The question then becomes "Are you gaining anything by not using foreign keys on the database?" What is the additional speed impact of JOINs actually costing you? How denormalized is your database already, if JOINs are costly?

If you want raw speed at billions-of-records scale, you want as flat a schema as you can get and good indexes are actually going to fit into RAM.

By that point though, you should be able to recognize your use case is not the 90% (or even 95%) case, and your specific requirements are driving doing something different. That's very different than the vague "high-volume" statement you made at first.

My experience has been in assisting clients in migrating to data warehouses and specifically during the heyday of Hive/Hadoop/Spark years ago in seeing clients mistakenly believe they were "big data" and go down the rabbit hole of trying to scale out before it was actually necessary. The problem I have with the vague notion of "high-volume" is that I saw clients with 500m records believe they fit the bill, as well as clients with as few as 20m records who thought the same. The reality is neither of them did and they wound up wasting a lot of money in pursuit of slower systems.

> Here's an example of what I'm talking about - read the first comment on [...], another venue for this same debate.

That's not an example though, that's just some vague statements about needing to profile your query and evaluate the costs for yourself, which should be rather obvious.
Usually you need to combine multiple different beans and legumes with rice to get the right macros
I'm not going to believe athlete based statistics, way too much incentive to lie about being vaccinated and absolutely they have the means to get a doctor to vouch.
You are making this claim with no evidence, as you’d have cited it otherwise.

Which begs the question - why? What is so important to you that you need to accuse “the other” of lying, in such a public forum, in such a transparently unsubstantiated fashion?
I'm currently arranging for a cleaning company to come in and scrub my mothers house down and I'll also be paying them what they ask.

In addition, I've been paying the same husband and wife to clean my house for something like 5 years now. How did I find them? I paid a company for a cleaning then offered the woman who showed up to cut said company out. They make more, I pay less.

5 years later and I've been completely happy with the arrangement, but I recently moved so will have to find someone else.

---

I pay what I'm charged. If you want to blame someone for these workers not being paid enough, blame the companies employing them.
Being able to have strong passwords without manually writing them down somewhere. All of my passwords are now at or near the maximum allowed character limits/complexity.

A lot of password managers have some simple UI to show you your weak passwords and it's a but of a fun game when you first import all of your passwords. Take a few days and browse all of your accounts and either delete the account or beef up the password!
If you still think we have decentralized media figures simply copying each other...when all your media companies air the same advertisements from the same pharmaceutical companies, it's no surprise that they would all take the same opinions. Speaking for American media only. They might not be conspiring with each other, but they are certainly are taking orders from the same places.

This doesn't cover the other news epidemic we have of state intel actors propping up media conglomerates as a matter of foreign policy. Specifically in Ukraine, and I'm only referencing this as it's probably the most recent example- the US is currently offering grants to organizations in Ukraine right now [0], this actually doesn't seem very nefarious. It's been going on for quite some time however. This article [1] goes into details about various factchecking organizations that worked in Ukraine to promote and minimalize the extreme sides of far right orgs in Ukraine since before the Russian invasion. StopFake is specifically called out, an organization that was previously hosted by our very own spokeswoman for the now defunct Ministry of Truth, Nina Jankowicz. And we know Taiwan does it, via Epoch Times, Russia does it with Russia Times, and various other state actors use more sophisticated methods. Before I dropped off most social media, it was obvious seeing Chinese propaganda being pushed, oftentimes through New York Times opinion pieces. Israel and China are probably two of the more sophisticated state actors, up there with the US intel agencies.

tldr: nothing is real, most media is carefully curated to shape your opinions and culture, not to inform you.

[0] https://ua.usembassy.gov/education-culture/media-development...
[1] https://mronline.org/2022/08/08/most-of-the-fact-checking-or...
I have a large graphics card that takes up 3ish slots of PCIe on its own even if it's only taking the 16 lanes it gets.

There's room at the bottom for a wifi card with an external antenna that is connected by wires to the rp-sma connectors on the card.

That's it. That's all the room k have on a full size tower. I used to have a FireWire card fory audio interface but replaced it with a usb-c model to not worry about FireWire support in current year.
Look at the Wooting keyboards. They do this. I'm sure there are others.
Ask HN: What are the alternatives to phone authentication?
Recently my phone screen broke. Not cracked or shattered mind you, it won't turn on at all. At first, this didn't seem like a huge problem; I already have a new phone on order and it should be here in a few days.

However, as I am trying to sign on to my email and various services, I am realizing how difficult it is to access any of my accounts. Pretty much every service I am using wants me to use my phone to verify my identity.

For example, Google gives me three options after I login (I logged in with the password to the account...):
- Tap 'Yes' on your phone or tablet
- Use your phone or tablet to get a security code
- Get a verification code (at my phone number)

All three of these options require me to posses my phone and have it be in working order. After all these years, is this really the only way companies can verify my identity? I don't like this single point of failure.

Edit: Also of note, I have a secondary email address attached to that first Google account, but they don't give me an option to verify my identity using that secondary email. So why have that secondary email there at all?
Getting your money’s worth: making runtime logging more valuable
AFAIK they're far more sustainable since they need nowhere near the amount of land, water, resources and food as the animals in the dairy and meat industries do. This, and further minus all the torture, suffering and force-feeding
Why would the magnetic alignment be coincidental rather than fundamental?
Not in the UK - both coal production and coal power generation have been aggressively phased out over the last 50 years. (And natural gas - which has replaced it - flows through pipes, mostly.)
It’s not actually that simple. Livestock don’t necessarily eat the same plants people eat. Cattle can eat indigestible-to-humans cellulose in grasses and turn it into meat and milk. Grass can grow on marginal land without fertilizer or irrigation, unlike food crops for humans.

Pigs and chickens can eat garbage and turn them into meat and eggs.
Yeah, you really can't get away from the chattiness of IPFS because that's just how distributed hash tables work.

But the CPU and RAM costs... well, those are frankly exorbitant to what amounts to a glorified Apache web server bolted on with a Bittorrent tracker.
As you can see in [1] we import about 7 times more gas than we export. So closing exports (and thus also imports) would be pretty catastrophic for us.

I don't disagree that those in charge don't care, but that doesn't mean this problem is caused by exports...

1 https://www.ons.gov.uk/economy/nationalaccounts/balanceofpay....