skysight-inc/HackerNews huggingface dataset:
How do you proxy MFA unless you're using a third party service for authentication? Plenty of password apps can bind to specific URLs and ports to support TOTP. In what ways do you think it is more secure if an authentication provider gets hacked? Then they could just as likely proxy the hardware token handoff. I don't think hardware tokens are all that much better than someone who is more security conscious, but they are certainly great for people that have no clue what they are doing or just one step in a MFA process.
I imagine in the next few years the referer header will just be blanked out always when crossing to a new domain. I believe the path was removed already.
>>Oh the reparations are not happening.

That is not how anything works in history. When Britain gets weak enough, The sub continent will likely invade and exact its reparations by strip mining every last square foot of Europe.

To think that some war or conflict stops for you just because you are former party to it is hilarious to imagine. What do you think your victims will do the moment they have any power over you?
That was immediately the thought I had. Most people, except absolute jackasses, won't throw around remarks like this unless the person pretty much had it coming.
Then there is stuff like Adobe Cloud, where it's forced on you, and you don't really use the cloud features anyway.
In conservative towns, a call is usually a sign of mutual respect between the two parties involved. Making everything digital destroys the community between buyer and seller and is a reason why there is service fatigue and exhaustion in left-leaning communities today.
To add, Chrome currently supports webauthn using your phone via BLE. When you try to enroll/sign in, if you click 'add an android device', that QR code will also work in the iOS camera app and allow you to use icloud to store & log in with that security key. The only real requirement here is a browser support and a desktop with bluetooth, something not super common on gaming / custom built PCs until a few years ago.
I recommend posting the articles as you intended to. You’ll never make everyone happy anyway.
How would you have a digital collectible without blockchain? The alternative is just a private database somewhere that depends on the whims of a company/individual for its continued existence.
> Fate somehow has exactly the same magic system as White Wolf Mage even though it's too old to have copied it.

Unless there’s a different Fate that also started of as eroge and spawned a massive franchise, it was first released in 2006, 13 years after White Wolf first released Mage: The Ascension, and so was very much not too early to have copied from Mage.
I had a similar issue sometime when I wanted the field to increment in powers of 2 (2, 4, 8, 16, 32, etc). I think the best way to go about it is to create custom spinner buttons which increments and decrements according to your rules, and then use the constraint validation api to set the more restrictive validity if the user inputs a value using the keyboard.
It's the weakest link problem. Uber can have near perfect security but all it takes is a single one out of 20K+ employees to click on the wrong link, install the wrong app or trust the wrong person and suddenly the entire system is compromised. So in that sense your small business is more secure since there are way fewer possible targets.
TouchID unfortunately does not work with Firefox. Making it non viable for a large rollout.

Yubikeys have the advantage of working with all browsers
The blockchain proves a chain of custody. Please explain how you mint the proof of boss kill without an authority.
GNU RCS
Trojanized versions of PuTTY utility being used to spread backdoor
> I want a replacement platform that transparently functions the same way but better.

We have that. It is called iMessage. It replaces SMS, has all the added features, and transparently "just works." You just need to upgrade your phone to one that has it.

Google should be asking Apple to release iMessage for Android, not this silly "green bubble" campaign.
Because everybody have a price and most of us, when given the choice, would have done quite the same for this sum of money.
It’s a service offered through LinkedIn for corporate accounts. One of my former bosses was able to do a crazy level of snooping into my private life.

They also were able to contact an advertising firm with it and get most of my Facebook activity. I had some albums with my drinking exploits (young and just out of college) and my boss could see it all even though he wasn’t friends with me and that info wasn’t public.

He told me all of this a few weeks into the job. It was shocking just how much info he could pull on me by just being corporate and asking the right people and paying some cash/using a background check.
You mean pluton is going to give us a smartphone kind of locked ecosystem disguised as a PC.

https://secret.club/2021/06/28/windows11-tpms.html
Maybe if you have SmartReferer, or for some reason your browser isn't sending it. I had to disable it to see it in action
You must have a browser setting that blocks Referer headers or disables JavaScript by default.

Here is the snippet of code that does the redirect:

<script>
try {
if (document.referrer) {
const ref = new URL(document.referrer);
if (ref.host === 'news.ycombinator.com') {
window.location.href = 'https://google.com/';
}
}
} catch (e) {}
</script>
The regular language should include the fact that you might include a dash between those sets of numbers, e.g. "A1B-2C3".

I really can't think of any case where changing a "0" to an "O" is a good idea (or vice versa), except like base 58 whre you're explicitly avoiding both.

Either way if you're going to normalize you need a regular language, so I think you're kinda missing the point here on what regular languages mean in this context?
I think with color, it’s important to appreciate the irregularity that exists in this domain. You’re right that colors are defined as ranges of wavelengths or blends of ranges of wavelengths. And so there is a mathematical component to color. Yet, the mathematical view of color is imperfect if you ultimately are concerned with the perceptual end result. People are always trying to create better, more perceptually accurate color spaces, but all of them have their issues and weird corners where the adjusting the values in a certain direction doesn’t yield the expected result.
Really? I thought the purpose was to create a new landed gentry, with hereditary title to land.

200 years from now, your descendants can pay their annual peppercorn to the state each year (after inflation and the statutory maximum annual increase have their expected effect) while the plebs toil in labor to pay you rent.

It really is such a shame that the founders of our country were so short-sighted that they explicitly prohibited that in the constitution. Maybe we should think about amending that.
I had a similar experience biking on Mnt Tam. It was pretty amazing. I also recall it being pretty hot and sunny on the way up and the way down and it only being cold, foggy and wet at the very top. The contrast made even more magical.
Yeah, HN is not a general news and politics site or general purpose forum. Not once until today have I seen "democrats this" and "republicans that" bullshit. Yes, there are political discussions but they always follow the implied rule of applied criticial thinking and a well thought out opinion, not repeating some propaganda vomit you heard somewhere or party line tribalism. This just isn't the place for it.

However, if they can't find the right place you can come up with a site or app and do a "Show HN" post!
Let me say that again: why don't you think the plastics are changing the climate?
> You define centralized control over wealth and the ability of an individual to send and receive payments to whomever they choose

No, I define that as 'oversight' which is necessary for a functioning macroeconomic system. If we can't do that then we can't collect taxes. If you are opposed to all taxation then we have a fundamental disagreement on the function of society.

> There's no conspiracy - this is happening right out in the open - and the powers-that-be are happy to brag about their unfettered power.

You linked to two things from the past that were proposed and never occurred. What does that prove? The government is working as intended and bad ideas are usually stopped in their tracts. The difference is that if money is the be-all-end-all of power, then any rich person can just make their own laws, and I fail to see how that is a better option than a government accountable to its citizens.
PowerPoint, Excel, Keyhole, YouTube, Google Maps and Android could be significantly better. There’s no competition, which means they keep their users, which means they’re not incentivised to find those ways in which those products could be significantly better.

Okay wait, Excel does have some competition now, with Google Sheets, and that can be seen in Microsoft’s recent push to distinguish Excel from Google Sheets with new features like the ‘LET’ and ‘XLOOKUP’ formula functions.
Yup. I wandered around page for about 20 seconds before realizing it wasn't some sort of open source hardware plasma TV.
I have several messaging clients installed, by virtue of working and having friends all over the world. Since I use many of them regularly in many places, it has allowed me to come to a few conclusions based on my experience.

First, anything that requires a telco to be actively involved in service delivery beyond being a dumb IPv4/6 pipe is going to be terrible. Inserting those dysfunctional companies as man-in-the-middle on a global scale ensures mediocrity. RCS is a bad idea on that basis alone.

Second, iMessage is really good. It is consistently the best messaging app I've used in multiple dimensions. I use many other messaging apps on a daily basis and this gap is hard to ignore. WhatsApp is pretty strong in the greater ecosystem of messaging apps, but it isn't up to the standard of iMessage. There are other common apps used around the world are quite a bit worse. Too many messaging apps focus on trite features while underinvesting in a strong architectural core, and it shows.

Third, if you are going to have a big tech company orchestrating all of this, you can do a lot worse than Apple. Something being cross-platform or globally popular doesn't absolve it of being run by ethical organizations. Many popular messaging apps are expressly forbidden in some contexts, so they simply can't be used. I've never come across such a case for iMessage (or Signal), though I'm sure it probably exists somewhere.

There is a case for a strong cross-platform messaging app, but RCS isn't it. And whatever it is, it needs to be at least as good as iMessage or iMessage people won't use it. Average users just want something that is feature-rich, high-quality, and without a creepy company behind it. Most alternatives to iMessage struggle to clear this hurdle, so they feel like a downgrade to iMessage users. I don't think it is a tall order to produce something to the standard of iMessage but maybe I underestimate the difficulty because it doesn't seem to happen.
EU Cyber Resilience Act
The proposal for a regulation on cybersecurity requirements for products with digital elements, known as the Cyber Resilience Act, bolsters cybersecurity rules to ensure more secure hardware and software products.
NixOS has a nice module that can be easily enabled. After that default DE durden can be invoked with single command and can be interacted with as a normal VM/Window alongside your existing DE.

Admittedly I haven't tries making it my default yet, but seemed fairly well adaptable for tiling WM/Openbox needs.
That's a good point, but essentially what Waves Audio does with their plugins (OS compatibility forces you to upgrade).

Mobile is a nightmare, no disagreement there. You have to keep all APIs up to date (new OS release every year?) as unpaid labor for fixed-price apps.
You're sort of forced into service model, not goods.
Testers may have found it, raised bug, got rejected as non-issue “as spec” whatever. Who knows.
That's Figma the software, not Figma the figurines, for anyone else who got it mixed up
Which docs are built with MDX that you prefer to the docs at Stripe?
I actually really like this theory and it does sound like a possible explanation. I used to know quite a few ex-Uber techs and I wouldn't put it past their ethics to do so.
Actually using a pw manager for TOTP is quite rare. People using a PW manager at all outside of the tech space is rare in my experience as well, outside of the built-in chrome PW manager.

Their 2fa is most likely okta or Duo style, in that the default authentication method is via push notification.

> Then they could just as likely proxy the hardware token handoff.

You can't do that because the security token itself receives the "relying party" in the form of the domain name it's trying to present authentication for. Requesting "uber.com" when on "ubeer.com" won't work.
A UN museum of escrow might be neat. Here’s all the awesome stuff people are too pigheaded to come to an agreement on, complete with explanations of why.
I block google.com and subdomains. Surprisingly, it doesn't do much collateral damage.

I do have one exception: I whitelist youtube-ui.l.google.com. As much as I hate Google, everyone on earth posts their video to Youtube, and invidious is too janky to replace it. I hope I live long enough to see a world where humanity has found a more ethical video repository than Google.
Considering their growth rate it probably isn't as high anymore.
RCS is older than even cvs, but this implementation still had a release as recently as February of this year.
You can sideload on an iphone for a mere $8.33 a month purchase of a developer profile. This myth needs to end.

Yes, there's some friction- you do have to compile the project first- but seriously clone-compile-install can be done in two shell commands. You can even run a coveted JIT compiler and install non-safari browser.[0]

[0] https://chromium.googlesource.com/chromium/src/+/main/docs/i...
Have you searched internally to see if someone has already built a solution you can leverage?
Can you provide more details about what exactly you're trying to solve?
GitHub Squash Merges Are a Menace
> McDonald’s on Wednesday announced plans to open a new innovation facility at its Chicago headquarters, relocating employees from its current innovation center in Romeoville, Illinois.

This seems like the wrong action to take if they actually want to put any pressure on the government to address this.
"Still, the moves mean Chouinard won’t have to pay the federal capital gains taxes he would have owed had he sold the company, an option he said was under consideration. On a $3 billion sale, that bill could be more than $700 million. It also helps Chouinard avoid the US estate and gift tax, which is a 40% levy on large fortunes when they’re transferred to heirs."

Rather than an altruistic play, it was an attempt to avoid taxes and keep the company under control of the family. Seems like others use this channel too.
Yeah, in retrospect, even wondering if that’s true about someone is pretty insulting. So again, sorry about that.

Glad you’re the kind of person to laugh it off, you seem like cool people.
AMP Email lets you build interactive emails for Gmail users.

https://amp.dev/about/email/
For now website owners can also remove it the referrer header if they would like to with Referrer-Policy: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Re...
I take with a grain of salt mega-corps complaining about "crime", when usually it's just used to deflect from other plans that they already have in place that just aren't as appealing to the public.

https://qz.com/2077384/why-is-walgreens-really-closing-its-s...
I've heard of this constructivist approach to calculus, but hadn't made the connection with nilpotents. that's really interesting, could you explain why nilpotenxy and forgoing the law of the excluded middle relate to each other?
I’ve tried it for years and years, paid customer. Had issues with Sony files and now have issues with Nikon Z raw files. C1 generates artifacts in transitions, terrible ones. Filed a bug report and got met with the worst customer support in my life, “devs don’t wanna fix this, use ICC profiles”, as if ICC profiles would fix bad processing of the files…

Which is sad because the software in general is a lot better than Lightroom, but your first point just isn’t true and that should be the primary thing to get right in a raw processor. Also, don’t conflate over sharpening and extra saturation for better quality (C1 defaults)
i work for big corporation running a large global ecommerce application

we use Apollo Client to communicate with our bff layer, which is Express and Apollo Server. The graphql resolvers in turn grab data from underlying Java REST apis, which are not exposed to the outside internet.

Overall it's worked great for us. Graphql takes a lot of getting used to, but it frees our teams up to move fast on their own, especially vendor contractors. Negative is, our schema has gotten gargantuan and needs to be heavily refactored.

One really cool thing Apollo Server unlocks is caching, and also a great metrics dashboard

Also did bff in the past for a health care company using Go. Challenge there was natural latency hitting slow backend apis and transforming the data
if y'all want a less friendly example of the same check out jwz's site: https://www.jwz.org/blog/
I’m glad I’m not the only one who thought of RCS as the precursor to CVS and SVN and finally…GIT.
I can't find details about the 501(c)(4) organization the 98% of shares were transferred to, but it feels unlikely that there's no family control of that? Yes, that's no longer family money, but it's also not like it's independent of the family.

The transfer to the 2% trust passed through estate/gift taxation (apparently), but also skipped capital gains tax.

It's all within the scope of the rules, but this is clearly tax avoidance as well as whatever else.
I made the same mistake again as always -- writing as bullet points and not looking at it after submitting :(
A lawsuit against Vizio for GPL violation cannot compel them to open or release software from their OEMs. For example you are never going to get a functional driver for the display panel made by Panasonic.

It isn't even clear that Vizio would be able to comply with GPL enforcement, since they largely just OEM TVs built by AmTran in Taiwan and don't do much more than slap a logo on it.
I believe this article is correct in that college price inflation is caused by a perception of college as a requirement for a good life, but that perception is caused by a variety of factors other than college marketing.
I'm not sure if this has anything to do with what you're asking about, but I've been wondering if anyone uses the built in to Windows "Credential Manager" and best practices around it.
It wouldn't need to be a guideline if it was already common behavior.
It's generally good to encode these decisions in law rather than hand police even more discretion... but I 100% agree with you on Dean Preston and Hillary Ronin. They weaponize progressive language to preserve the status quo.
It is not very hard, it can go to a museum and can go around the country. After all in a democracy the people are the kings.

Personally I would not want it back, because it is just the tip of the iceberg. The church of England (now csi and cni) hold on to 1000s of acres of colonial land across the country.

The kohinoor is just a drop in the ocean.
Humans are much more discerning when it comes to people than other things. I have no idea what imagen's capabilities are, but it seems at least plausible it could have different results for drawing humans.
I agree, they should just implement the standard, for the multimedia and group chat features. I expect 100% they will keep the green bubbles though - I don’t blame them; knowing at a glance which messages my telco can and can’t read is a useful thing.
Glass houses etc etc

https://www.cnn.com/2019/11/25/business/mcdonalds-wage-theft...

https://www.abc.net.au/news/2022-08-12/claim-lodged-against-...

https://www.businessinsider.com/mcdonalds-wage-theft-lawsuit...
What I tried to say by that is that "give me all you've got" is the only kind of maximum a screen can do, and a brighter screen (or a quasar) will be brighter. OTOH, "reflect everything" is the absolute maximum for reflection, and no other object will top that.
There's been a ton of great work in math lately! I mean in number theory alone we have tools which would have made the greats of the past weep with joy, and we've only just begun to scratch the surface of what they can do. Implementing a formalism that frankly does not have a significant impact on any area of math which isn't directly based on working with it is not a sign that math as a whole is trending towards programming. Theorem solvers are, obviously, getting more awesome by the day though. Not quite there yet, but damn are they close
It isn't specifically limited to those specific narrow words by the most limited means you're thinking. I'm sure they could make that argument, but only a fool would risk a discrimination lawsuit based on hair color. Even if that is the specific reason a person would have to be either a fool or want to try to challenge the law, and there is no guarantee after losing that the Supreme Court would even take the case. I don't think the Supreme Court would even want to touch such a case nor that it would be ruled on in the manner you're thinking.
People whom go to university would have higher ROI regardless. Before covid companies continued to argue "no remote, this is how things are done and we know it's right". Then rules came along that forced industries to actually do things differently, and what do you know, we didn't need offices. Efficiency increased, useless corporate bloat deleted.

If tomorrow we closed all public uni doors, the companies that
profit from it will finally be pushed to fund education. Especially tech. They have the money, but we keep pulling money out of our neighbors pockets instead.

R&D in private industry does far more than any uni can. They don't have the market to be attracting top talent, or equipment nor facilities. Which is why you see everything under a company, not a university.

These are institutions far out of date. All we need to do is push it and it'll crumble.
It's good to have but in the real world that wouldn't have stopped a determined attacker. They could have social engineered them to run code on their PC
They've been feeding people crap food for decades. It is easy to google research into how diet is interlinked with things like crime [1]. Shutting down these places is likely a net positive.

[1] https://www.ojp.gov/ncjrs/virtual-library/abstracts/diet-cri...
Being significantly shorter, yes, but only because that's what short means. Any comparison of size is relative.
I hope they go at each other like two big evil flaming titans in a massive battle that mortally wounds both of them.

I sometimes sit and weigh out which one of them does more evil to stop innovation in the “digital creativity” space in the name of monopolistic greed.

So far I think Adobe is winning because their products are more average consumer facing. But Autodesk sure seems to be racing to the bottom with its complete monopoly on 3D everything.

Both are evil… I hate both of them.