skysight-inc/HackerNews huggingface dataset:
I can't figure out why I'd want a Yubikey.

Every year or so I try to figure out if a 2fa device practically has sufficient support that using it would improve my security. The answer has always been no.

No 2fa device has sufficient support that it could increase the security of my 1password account, which I use on Linux and Android. No 2fa device has sufficient support that it could be used to unlock the lockscreen of any of my devices either.

Edit: There is a way to use a Yubikey to decrypt Linux full-disk encryption. It relies on an abandoned personal GitHub project. Sounds fun, but not sufficiently secure it's worth spending more than $100 to allegedly improve my security with it.
Fun demo but who is this really for? Is there a requirement for these devices anywhere aside from corporate security?
Which is why I said it’ll speed it up.
That all depends on how many years your attorney has been playing golf with the judge.
As I wrote in the Markdown file, there's also a usable package for Haskell called `ad` on Hackage. It has both forward and backward autodiff and prevents expression swell, among other things. This gist is just for illustration purposes.
I downloaded this and tried out a few prompts like, "Mark Twain holding an iPhone", and got back an image of Mark Twain - once in some surrealist nightmare fashion and another more like a 3D render. Neither were holding anything, let alone an iPhone. Cranking up the DDIM slider didn't seem to do much. Trying the same prompt on mage.space (see the creators comment in this thread) produced exactly what I assumed it would.

Is there a trick to it?
The law only disallows viewpoint-based censorship.

Twitter remains free to write and enforce an acceptable-use policy that disallows "bot-like" behaviors, as long as the policy and enforcement is viewpoint-neutral.
The constitution mostly applies to the US government ("Congress shall make no law" etc).

Also, people speak anonymously in public spaces all the time. I don't have to provide ID to stand on a street corner and shout about politics or Jesus etc...

I like the idea of separating public from private spaces based on charging.

Of course, none of this solves (at least one of the) core issue: if you have moderation, someone has to decide what is moderated, if you don't bad faith actors will lie, troll etc. Either way, real discourse is very difficult to achieve.
The point of the article is that hosts are demanding you clean the place yourself (and the list of chores and what to clean is growing), yet they also charge the cleaning fee.
Well, existing static analysis would break or need to add support for cpp2. In the case of pure cpp2, simpler tools could be written, but they would be new code.
Are ISPs considered common carriers right now? I know that's changed a few times and I haven't kept up with the latest.

Will social media companies be considered common carriers? That's still possible too.

Ultimately, a "common carrier" is whatever the government says it is.
Hydro is very hourly. During peak times, we use about 2x the electricity used at night. The grid is built for the peak.

Thus, as long as people don't charge during the absolute peak (about 2hrs a day) there's no capacity issue at all.
I grew up with Dutch subs and later English subs on the beeb (you could use teletext for that back in the day – maybe you still can?) in my teens. Then I watched stuff without subs for years just fine; I managed to watch Shameless without subs years ago (which was a bit hard at times; stuff didn't commonly come with subs back then). I turned on subs for The Expanse as the belter dialect was difficult to follow at times, and I've used it regularly ever since. It just makes things a tad easier; no more "wait, what did he say? ah well, whatever" At times it also makes things a bit easier to skip ahead when things aren't all that interesting.
Does ZFS snapshot every single operation you do? That sounds pretty cool. Unless you're saying snapshots are cheap but you have to create them manually, in that case it's not very useful against accidental deletion.
I think we're in agreement. To be clear, there is no expectation that these items arrive in any particular order. What is important is that they all be present. Ordering is situation-dependent.

So to your point, yes, this is typically how I would write an email. In fact, the "I am" part of an email is often adequately covered by the 'From' address.

On the radio, in contrast, I would explicitly say something like "This is four-two, actual" before proceeding with the rest.
I like your point of view and I'm sure we would be friends in RL because I'm usually around of people with strong opinions (even if I don't agree or even like it). I like to understand the thinking process of people around me - family and friends. The thing is I just don't have the energy to engage in disagreements for too long and I tend to avoid conflicts in general (maybe my personality is the biggest problem here?). I always feel that my energy was totally drained after super engaged discussions.
The energy delivered by a solar panel is overwhelmingly more than needed to make it. The gain is enormous. There is simply no contest.

Consider that makers of solar panels, and of the materials that go into them, get no break on their power bills. Each and every kWh that goes into making the panel is paid for, and necessarily has its cost folded into the price of the panel. Otherwise they would be paying power out of their own pocket, to give it to you for free.

Furthermore, the fraction of the energy used in making the panel that comes from renewables goes up every year, as their share of the total generated increases.

The same argument applies to wind turbines, tidal turbines, wave engines, dams, and (in their way) storage media.
> A better comparison would be if Gmail placed emails you really want to receive in the spam for you. Actually, they wouldn't even put it in the spam folder; they'd just delete it permanently before you can read it

Gmail regularly does both of these things to me despite explicit filter rules to the contrary.
Wildlife Photographer of the Year (2021)
Even if you don't have any sense of taste and beauty you can coldly analyze other people's opinions.

When a car turns heads you notice, like a beautiful fashion model.

The Polestar , the Taycan, the Audis and the Mercedes are the only EVs which turns heads if you exclude they supercars and hypercars. Lyriq will be one of them. Teslas and Prius do not.
With the recently court decision against social media company censorship, this may become a major legal problem for Facebook.

https://www.dailywire.com/news/fifth-circuit-deals-huge-lega...

We can only hope!!
"Investors should assume “the currency is going to zero, ...”

When you consider that the dollar has dropped down to about 2% of its value from around 1970, it only has that 2% to go before it hits the zero mark.

Fun project for you to do: Look at films made over the decades. Compare the prices shown with today's prices. Very good for a laugh.
You draw over the part of the image that is not ideal and get it to infill it
I think a huge benefit of 2fa, one of the main purposes of it, was for securing accounts with weak passwords. Back in the days before password managers etc. I think these days password managers actually deprecate the need for 2fa
Brilliant to see this. I still miss Phabricator + Mercurial from my time at Facebook, best code review experience ever.
No AI. Only multiplayer at same keyboard. Hence the popularity, they were paired anyway 2 students at one computer only.
I came up with the following guess many years ago:

There are people who are totally unproductive at C++ and find it scary, mainly because they are not very exposed to it. They assume everybody is as uncomfortable and unproductive with it as they are. Nay, it is impossible for anyone to be productive with it, simply because they aren't. They will attack evidence that somebody has done well with it, because it is some defense of ego for them.

There are other complaints about C++ beyond this of course, with validity, and many of them from old timers and people who bitterly complained about it for decades from a place of knowledge and experience. People have been complaining about ugliness of C++ for longer than my own career. However, as more and more people come up in the post-C++-as-fashionable era, I think this above theory is more and more the bulk of the complaints.
Tell HN: Make your company have a contact page
Meetup.com's webpage has been throwing 400's and 502's for two hours, and still only half their site seems responsive.

There is no way for me to tell Meetup that their site is down. There's no contact page, no e-mail address, no suggestion box, no chat, no nothing. I want to help them get their business online but they have made it nearly impossible. Literally the only e-mail address I have found is for their recruiting/jobs page.

This problem is much larger than just one website. I've seen this dozens of times on huge websites over the past two years.

Years ago, a company I worked for was actually serving malware on their website, because a server got hacked and we had no idea. Somebody found it on a blackhat internet forum and wanted to tell us, but spent hours trying to track down a generic website contact just to let us know.

People of HN: Please tell your job that their website needs a contact page, and somebody in the company who checks the emails and sends them to the right group. This isn't rocket science, y'all.
Show HN: Krita Stable Diffusion Plugin
This is still a very new project under active development but I wanted to show it off in case anyone is interested in bookmarking it or contributing.

Demo here:
https://www.youtube.com/watch?v=maWR7dDf4SE

Although it will be improving, the codebase has a few issues

The Good

- ability to multitask within krita while generating images

- uses a queue so you can queue up multiple images without waiting for your other batches to come back

- no need for a webserver (uses sockets to communicate)

- clean code

- active development (i want to use this tool myself)

- uses stablediffusiond and stablediffusion as separate repos, these can be swapped out as desired with some hacking

The Bad

- currently relies on rabbitmq and doesn't provide another option

- plugin only does txt2txt. img2img works but is disabled

- must acquire the model manually

The ugly

- not all of the features work yet. in fact you can only generate an image.

- installation is somewhat involved (requires CUDA 11.3, rabbitmq and more) - there is an installation file and instructions but likely need improvement,

Krita Stable Diffusion plugin

https://github.com/w4ffl35/krita_stable_diffusion

stablediffusiond (daemon / queue runners)

https://github.com/w4ffl35/stablediffusiond/tree/feature/krita-plugin

stable diffusion

https://github.com/w4ffl35/stable-diffusion/tree/feature/krita-plugin

---

if anyone uses this and runs into problems, just open an issue in the appropriate repo and i'll do my best to help.
He said on a platform that's controlled by any of those organizations.
I don’t know why I decided to inject myself into a vegan argument
You're literally describing Twitter here.

Source: search for "Peñabots". There are great detailed documentaries about how far this went. That's one example, but this is ongoing for every major (geo)political topic and big businesses / hedge funds and the media "news" companies they own.
Peltiers simply can not scale. But compressor refrigeration easy can.
> Who is they?

Do you mean “Who is “Big Tech”?” Because I don’t want another ambiguous response in this chain, there are already more than enough we might be on completely different pages.

https://en.wikipedia.org/wiki/Big_Tech

> Are you claiming that some number of tech companies , a grouping you haven't defined, are in collusion?

Competition, not collusion.

> Do you have proof of this?

The terms and conditions for the various platforms. You know, the stuff you have to click to confirm you’ve read and agreed to but virtually nobody bothers.
It’s pretty silly as we’ve discovered efficient synthesis routes since.
Society made a bunch of rules about the employee/employer relationship. Society allowed business to use contractors to fill positions that didn't fall under that relationships, for example, to fill short term needs with contractors, or to bring in specialists that companies did need and couldn't afford to have full time.

Uber decided fuck Society's contract/norms for the business/employee relationship, we are going to abuse the definition of 'contractor'.
I like to call this a "macroservice" or "business function" repository. If you are dealing with the Billing function, everything to do with that is in the billing repository (UI, API, scripts, workers/jobs, database migrations).

This is my favorite for sure in terms of balance - you don't need the overhead of one repo per deployable artifact, and the size of the repository has a reasonable theoretical maximum and can still come close to fitting in your head.

You can also test it all together extremely easily and it's the perfect slice for a team to work on, or be shoveled off to a different owner of that function in the future.
No. At any point an interceptor can double proxy between you and the other side. It is also possible to hijack the connection completely and simulate the other side.
I had never actually tried Airbnb after reading about all the issues people have been having. When I take time off work and go on vacation, the last thing I'd want to do is leave it up to some random person in a strange city to screw us over, get stranded with all the luggage, and then having to fight with Airbnb customer support. I'll pay more for a basic hotel room to get predictability.
https://www.openbible.info/topics/obesity
From the article:

>The 'spellcheck' HTML attribute when left out from form text input fields is usually assumed by web browsers be true by default.

Text inputs. So what about inputs of password type?

MDN says this:

>If [the spellcheck attribute] is not set, its default value is element-type and browser-defined. This default value may also be inherited, which means that the element content will be checked for spelling errors only if its nearest ancestor has a spellcheck state of true.

https://developer.mozilla.org/en-US/docs/Web/HTML/Global_att...

So do browsers apply spellcheck="true" by implicit default to inputs with type of password?
Golang uses : to assign in struct initialization and := for new variable assignments so there is some prior art.

Practically speaking I find : to be challenging to quickly scan out of source visually. In golang this objection is muted slightly because struct initialization usually ends up being clearly indented by the formatter.
A similar project has been created to make a ULA-less ZX Spectrum 128K: https://github.com/DonSuperfo/Superfo-Harlequin-128

There are a number of 48K clones as well.
On Windows, actually.
Lambda calculus is mathematically foundational in a way that Lisp of course isn't.

The question is what does Lisp give us as an interpretation of those foundations? Or does it admit issues that might be unhelpful? (Are macros a good thing?)
I thought the problem with even FedNow was that it's still domestic only. Perhaps a parallel "digital dollar" platform can have a more global reach.

The US Dollar is still the backup currency of a lot of the world, and being able to say "here's a means to access our stable currency without trying to get worn-to-tissue paper notes from a sketchy exchange dealer" plays well into that narrative.

Of course, it's likely that when China said there were plans for a Digital Yuan, we had to match it.
>Mining tech is essentially the same since ever, we just have transferred some physical efforts to machines

You could say that about literally anything
Oh my God, my uncle has been doing this to me and I only just realized it because of your comment!

At least it's useful stuff, though.
MIT's discrete math course [1] is listed as a prerequisite for the algorithms course so Problem Set 0 doesn't seem unreasonable in that case.

Requiring an intro programming class and a discrete math class won't require you to delay teaching algorithms for "several years". Maybe just a semester or two.

Universities can also start teaching basic data structures and some algorithms in the programming classes. For example Stanford teaches some in CS106B Programming Abstractions [2] and then goes into more detail in CS161 Design and Analysis of Algorithms [3].

[1] https://ocw.mit.edu/courses/6-042j-mathematics-for-computer-...

[2] https://see.stanford.edu/course/cs106b

[3] https://stanford-cs161.github.io/winter2022/
Personally, I prefer the "approval" process of YubiKey/U2F devices over having to enter a code, but I also dislike having to have a hardware device on me at all times. Also, with WebAuthN and passwordless login, YubiKeys are now able to be used to authenticate people, so I figure it would be nice to have a software solution for that.

Granted, this is still just a demo, so it's a long way off from something somebody would regularly use.
Plenty of very muscular people would have your BMI as well. I don't think you should ever use BMI as an individual. But I'm told that for a population is provides a reasonably useful signal.

Still - I wish we could use body fat percentage more often for individuals and populations. I don't see it being a perfect metric, but I'd rather see it used than BMI.
Can you define what do you mean by sufficient support?
I don't see anything particularly technically difficult in separating hosting from moderation or having users able to moderate for themselves. Most forums already do this in some capacity with showdead or personalized block lists per user.
> As soon as you say something that doesn't fall into line, like against the monarchy, then you get censored.

Or anything crypto-related. The HN 'anti-crypto squad' will flag, downvote and censor anyone that talks about it or attempts to defend it.
> If someone needs psychological safety before they are disagreed to, I say they need psychological help.

I think the point where this was mentioned feels like the author was looking for an excuse to use the current buzzwords. And I don't think it really fits.

It's a feature of the environment whether and to what degree "permission to speak freely" is a thing or not. Nothing to do with psychological safety at all.

(Not that psychological safety is a good concept; the discussion I see is all about perception of being safe to disagree, which is very much putting the cart before the horse of whether or not there are actual repercussions for disagreeing.)
Why do morons find this site interesting?
> PVs have finite lifespan

And your car doesn't? What kind of argument is this?

My panels have 25 year warranty, whats the warranty on a diesel generator?

> questions of how petrochemicals are to be produced if the Green goal of eliminating oil is accomplished.

Petromechicals have no relevance to Climate change and CO2 emissions. You can keep using single-use bags and straws and throwing them into landfill untill you use up all the oil on earth.

They have relevance to our health, i.e. microplastics, but thats a separate problem.
> If you want to argue that it's fair that some people are rich while some people are poor, there has to be some natural inherent difference between the rich and the poor.

I don't buy this at all. There can be no difference between me and a billionaire who inherited their wealth, but I feel under no obligation to call that unfair. They were just lucky, and that's fine.
Good Lord that city is disgusting.
Except talented developers on those platforms make ~$120 and hour and up, the people who make smaller salaries are usually either just starting out or don't have unique skills. I wouldn't want to live in this world because I don't like remote work, however from a salary perspective I don't think it would be that bad
Yeah, I guess I couldn't find any examples of journalism for profit since 1981.
Or maybe, I chose an old example to make a point about how it's always been for profit.
Them: “You must censor hate speech on the internet!”

Also them: “I didn’t mean you should censor my hate speech!”
That really isn't true. I second the opinion that you should take that meeting. It's part of the job. It's how you make sure you're working on the right thing, and that execs know it.

That said, it's totally fair to not want to climb the latter beyond a certain point. But, you seem a bit bitter, so perhaps that's not your case.
This is primarily of use to people who want to disregard hardware authenticator requirements imposed by third parties without their consent.
I know about that (even though it's a worthwhile addition to this thread for other readers), but I don't think it's what they had in mind, since they were talking about “Rust devs get bitten by this all the time when trying to reuse "safe" library code within an unsafe context” in their original comment[1], and I really can't see what they are talking about except some variation around “from C++, I passed some uninitialized memory to a Rust library and Rust went boom” but maybe I'm just misunderstanding.

[1]: https://news.ycombinator.com/item?id=32878775
You understand wrong what kiwi farms is. The moderation there is far better to facebook for example. Not in small reason due to the fact they don’t censor. They comply with the law. Unlawful content is pulled down immediately, lawful content stays up. Cloudflare lied to you when they said “human life is in immediate danger”.

In matters like this, it’s best to actually look at how both sides present the issue.
Amazing that even though Stack Overflow was the first of 100s of Stack Exchange sites, many which were killed off, that SO still has more daily traffic then all of the other sites combined; this based on the total traffic and SQL queries per day stats on the linked page.
I really hope you have a reputable source for that claim.
glad its not just me
I used to think that way but then I had a phone die and lost my Google Authenticator - I lose access to many servivces and had to go through the pain of resetting so many MFAs.

Then I was like "1Password will sync these to my new phone so I never lose access to everything again? Fine."

I also started to get questions from my wife around how she could access things in the event of my death and it seemed having a 1Password printout in a safe deposit box she could access - and having that include the MFA too - was a good idea.

My master password in 1Password is quite secure (A long obscure sentence and with special characters etc.), I have it auto-lock pretty quickly (thanks TouchID!) and I guess that will have to be enough unless I shift to something like a Yubikey on my keychain for things down the road...