skysight-inc/HackerNews huggingface dataset:
Would you apply that opinion to music as well? Yes, it is shorter and more practical type of media, but people tend to consume it until it "wears off". Other media consumption is much more demanding, complex and immersive and it is sometimes a drag to do it more than once, but it can be worth it if it made that deep impression on you.

I don't consume a lot of media for the same reason of wasting my time, plus trial and error of finding satisfying material takes additional quantity of time I don't have. With that I justify occasional media reconsumption as I can get equally satisfying emotional response from rewatched material.

Also, why would death play any role on how many different material one needs to consume?
It seems that in EU customer protection revolves around making sure one doesn't get scammed out of their money, warranties are honored in time, things delivered actually match what was described at time of purchase etc.

All of this falls apart if the goods/service is free... And one can't really argue Google is a monopoly with regards to email services (search and ads are quite separate).

So I doubt EU could do anything about it unless one uses paid services.
It is so simple to not do this. Either they could schedule a generic meeting among the lines of "I have some questions" or they could just tell you what incident this was going to be about.
ActionDash: A digital wellbeing and screen time helper for Android
YouTube Irks Users by Displaying 5 to 10 Unskippable Ads in a Row
I’ve been planning to migrate off Gmail, and stories like these are increasing my sense of urgency about it. Google shows such callous, reckless disregard for its users’ lives. I feel kind of stupid for trusting Google with this much power in the first place!
Most online platforms are. But the average US user doesn't realise or assumes otherwise
A controversial viewpoint: Figma is selling the user data - labeled design, all for training the next big AI killer app - prompt generated UI/UX design.

Google had an interest, but Adobe upped the offer.

Yes, I know this will be downvoted to hell:)
Yes, because the Berne convention is a beacon of moral virtue to be respected in all possible ways.
Not sure where the pasta methaphor came from, but I generally like the author's style, and the performance gains are intriguing. I'd be curious what the actual impact is on real-world Vulkan/zink test-cases?
Telegram, at least from a UX perspective, is better than whatsapp in every way.

I use both a lot and whenever I switch back to whatsapp I accidentally try to do telegram swipes because they are so much better and intuitive. When I switch to tg from wa this never happens because wa has trash UX.
Hardware acceleration in robotics news. Hard vs. Soft: Software may be eating the world, but hardware monetizes better, ROS 2 HAWG #11, Intel CEO warns of more tough times ahead, Nvidia claims 'record performance' for Hopper MLPerf debut, Fully integrated AI platform for industrial robotics
Om a similar way to the way you didn't read the article, I haven't watched the video.

Any chance of a brief summary of the point it's making?
Whereas currently your google account can be taken over without any social engineering at all.
They did for a while but it was too expensive. Uber uses OneLogin, who I'm sure is also investigating. We had apps on our phones that received as "is this you trying to log in?" notification. You had to consciously hit "Yes" in order to continue the login flow. It wasn't offline 2FA like Authy or something. There _was_ a much higher standard of security there.

This was _social engineering_, something that even the finest MFA algorithms don't guard against.
Because they are under no obligation to continue contributing, and if the organization is serious about the future of the project and spot some talent, they'll want to try and get that person into a more permanent role. The real question is actually the opposite of the one you asked: why wouldn't they want to try and pay you for your work if it's beneficial to the product/company?
Even without SaaS I get weird URLs on login pages. The login page for my personal Chase account is

https://secure07a.chase.com/web/auth/#/logon/logon/chaseOnline?treatment=chase&lang=en

At least the etld+1 makes sense, but most people aren't going to recognize that generally the etld+1 is what you need to verify and you can ignore the rest.
Competition only gets you so far in spaces where conyism, corruption and monopolies are in place. For example, the eu could have tried to promote competition by encouraging carriers to make deals in other countries to get roaming charges down, but the truth is that the deals were already made, just that it wasn't advantageous to carriers to drive down the prices, and stirring up competition by starting a new carrier is both infeasible and futile, because established carriers won't give you a better deal because they have a vested interest in the status quo.

Regulation has gone swimmingly, especially when you consider that roaming charges were completely arbitrary. It costs a carrier functionally nothing to forward traffic to another carrier, eçept for whatever price that carrier has set arbitrarly. Regulation has given me a 25 Gb data cap when travelling, greatly increasing the quality of my vacations, allowing me access to information, safety tips and travel-oriented services as a tourist.

Sure, carriers have lost some income over this (not all, only on european travel) but they are massively profitable, and should be treated as a public utility already.
This is a good point.

2FA is a great thing and I think everyone should use it.

With that said, I don't want 2FA on my alternate/testing/dev accounts. I simply don't want demo accounts linked to my phone number. I'd like to opt-out of "standard security" (MFA) and accept the risks on non-primary accounts.
For email I'd say the most important precaution is to have an address at some domain of your own.

You don't need to host the email servers yourself. Many email hosting services will let you use our own domain with them.

If you want to use an email hosting service that does not directly support using your own domain, many domain registrars include free email forwarding so you can forward mail sent to your domain to your address at your email host, although there might be problems with sending from your domain if you use the forwarding approach [note 1].

It might at first seem that this is just pushing the problem back a little. Instead of the problem being losing your account at a mail hosting service like Gmail, you now have to worry about losing your domain.

The big difference is that a domain registration is a lot more passive. With a Gmail or other mail hosting account it is something you are actively using. Content you generate goes through it. Content other people generate goes through it to you. That gives all kinds of opportunities to trigger false positives on their automated anti-abuse systems.

With a domain you register it and designate name servers and periodically pay to keep it from expiring. Most registrars include basic name service so you don't have to deal with finding a name service provider. Once you've set up name service to designate your email host as handling your domain, or set up forwarding if that's what you are doing, you pretty much don't have to touch anything there and content to/from you doesn't go through those systems so there is simply much less opportunity for something to trigger some sort of automated anti-abuse systems.

Pick you domain and registrar carefully. Don't pick a domain name that is close to some trademark. Pick a top level of .com or .net or maybe your country's top level if you are going to want to send email from that domain [note 2]. Pick a registrar that is not in some country likely to do things that get your country to put sanctions on it.

[note 1] You might not have enough control over the headers on outgoing mail to be able to send a mail that doesn't look like a forgery attempt. For email addresses that you will just need for receiving things the forward approach should be fine, which will cover email needed for account recovery in most cases.

[note 2] The newer top level domains that are available for general use have been pounced upon by large numbers of spammers, to the point that having an email address in them can make it very difficult to get through spam filters. Spammers are all over .com and .net too of course, but that's also where most of the non-spammers are too. With the newer top levels the spammers jump on in large numbers from the start and so from the point of view of a random email receiver those domains are mostly spam.
When a comment has the insight you expected from the article.

Thanks!
Upvote from me. As a dad of a 5 day old (and a 3 1/2 year old) any hints on how I can help sooth baby for even relatively short periods of time would be super helpful.

The problem is with a breastfed baby they are very focused on getting their milk supply where it needs to be and if that means feeding practically constantly for hours at a time, that's fine by them.
Ah, no, not really. My family is not exactly wealthy, and they traveled frequently to France by car. And with Ryanair is incredibly cheap to travel nowadays.
Same here. I feel like I tune into the low frequencies of either the engine or the motion of the vehicle itself and I fall asleep instantly.

I was quite worried when I learnt to drive that it would be an issue. Fortunately not, having tasks to concentrate on foils the effect
Do they not just say they'll forward you to the right department and drop you into a hold queue though? I've done this a few times when the support department had a broken automation flow and it got me to the queue, but the people at the well manned department didn't actually do the support for me.
As a manager, it's trivial to just add "you're not in trouble" to the end of a message like this, even if you can't imply what it's about.
There's a big difference between Google (which will lock you out for no good reason, or ban your account without stating a cause, and has no support or appeal process) and 1password (which AFAIK doesn't randomly block/ban accounts). You can still forget your password to either, but one is clearly safer.
Yourforth an educational Forth in Intel assembler, with exercises (2014)
Blockchains are not the only way of achieving what you describe. It's just one mechanism. You seem to be conflating the "result" achieved with the "mechanism".

If a game company wanted to provide the same properties without a blockchain they could do so in other ways. A more extreme example is they could provide you with an actual legal certificate of ownership and transfer all rights to the digital property in that certificate. A deed of sorts. It could include a full description of the item and the available operations on it. You could host your own API to allow interactions. You could even host it on the blockchain if you wanted.

In the case of many of these digital game assets out there you have a record of ownership but the actual asset itself is hosted by the company of origin. Which means that if they go down you have proof of ownership but no still have no recourse when the asset in practice goes poof. The more required it is for the game company to provide api's for the asset the less actual gameplay is possible. smart contracts are pretty limited and the more operations they allow the more expensive it is to actually play the game which creates a market pressure for the game to trivial as regards the gameplay on the chain itself. Because of this market pressure what happens is a boom/bust cycle for the game.

The only way out is to host more of the gameplay elements off chain which defeats the purpose.

Does the blockchain make interoperability easier? yes but so does any interoperability standard. Do the cryptographic guarantees of the ledger make it easier to prove ownership? yes but that doesn't address the issues with gameplay being both trivial and expensive because of the market forces you inserted into the game.
The claim of income from tourism is wrong: https://www.republic.org.uk/tourism

(At least if you believe the figures from Visit Britain, the government organization for tourism.)
You could copy the blobs from your own rooted TV, as with Switch jailbreaks.
And as other people have already written, that's the main issue. Not that someone got compromised, but that passwords for admin accounts to all those services were stored on a network share.
Maybe the robot was the perpetrator sent back by Skynet
> proximity sensor

Is this just the absense of your body heat? Or can you sit next to a newborn for hours without issue
The Sound of Nails on Black Vinyl Records
We have hired quite a few people on this basis at Docker. Always on the lookout for more.
At the extreme, do you think generating whitenoise from a phone would have the same effect?
> But you still need the degree to compete in most cases.

But who wants to compete in the first place? Those of us in the tech industry know better than anyone that the path that is beneficial is one where employers struggle to hire. Compensation and benefits rise where employers have to compete for talent, not where talent has to compete for jobs. Fortune favours those who are able to offer something that isn't copied a many times over; where competition is nowhere to be found.

Certainly that does make it easy for us in tech to sit in our ivory towers that lack degrees hanging on the wall and scoff at those flipping burgers at McDonalds who perhaps really did need a degree to win the spot, but there's something wrong if you have to burden the opportunity cost that equates to near one million dollars in a lifetime to secure a precarious minimum wage position. That needs to be scrutinized, not emboldened with additional government supports.

Whether or not the marketing was intended to be fraudulent, it is certain that colleges have benefitted from the commonly held, but mistaken, belief that a degree will increase one's income. That notion is what students use to justify the high cost of college, seeing it as a long term investment that will pay dividends later. In fairness, it was a reasonable prediction at the time it was first asserted given the limited information available, but now that we have more data it is abundantly clear that incomes have remained stagnant. The promise of higher incomes did not materialize and colleges are more than happy to sweep that under the rug.
How Quickly Do CPUs Change Clock Speeds?
In my experience, nothing beats mdsvex (https://mdsvex.com) when it comes to simplicity and power. It’s a staple in the Svelte community and authored by a core Svelte maintainer.

If I’m honest though, the one thing that can beat it for me is my guilty pleasure - pug in Svelte. If a better way to author web pages exists, I’ve never seen it!
What a lamb joke.
When we had our kid we also carried her everywhere, it has been pretty popular in Sweden for a while. It helps a lot with being close but still the cause of the crying has to be investigated. After a long period of no proper sleep we finally figured out what the problem was. Baby was allergic to milk protein and was crying because of the pain it caused. Due to bad knowledge and advice we only tried ruling out milk allergy for a week but it takes many weeks for the milk protein to leave the mothers system. When we got baby formula without milk protein our baby could sleep without pain and the dry skin spots went away. I'm wondering if most problems with crying babies are from undiagnosed milk protein allergy. It usually disappears during the first seven years.
While I whole heartedly agree with that you should tell people how to get better, I think if there is one skill a manager should have it is to emphatically communicate.

If a manager doesn't understand the communicative basic that there is always multiple messages:

- the message they intended to send

- the message they actually sent

- the message as it was read by the receiving person

Any decent communicator will always think about how the message/language will be read by the receiver(s). That means if they are a decent communicator this should not happen unless they have a very bad day or something.
> Google should be asking Apple to release iMessage for Android

I believe people have already been asking this for years, to no avail
Most likely this doesnt use AI, but remote control by employees from south america.
So are the Italians going to pay reparations to the British for the Roman occupation?

When you say "the British should be held accountable" all those individuals are dead and gone. It's a bit Catholic to hold the children accountable for the sins of the father. Its unlikely my forefathers even had the vote at that time. So please explain how I'm accountable again?
2FA is becoming a huge problem.

One day, I unintentionally left my phone home. At work I was unable to log into my Google account without my phone.

What a clusterf**k.

(And I never opted for 2FA. It was forced on me by Google).
"Uber reels from 'security incident’ in which cloud systems seemingly hijacked" - https://www.theregister.com/2022/09/16/uber_security_inciden...

"We're told that an employee was socially engineered by the attacker to gain access to Uber's VPN, through which the intruder scanned the network, found a PowerShell script containing the hardcoded credentials for an administrator user in Thycotic, which were then used to unlock access to all of Uber's internal cloud and software-as-a-service resources, among other things.

After that, everything was at the intruder's fingertips, allegedly.

The New York Times reported that Uber staff were told to stop using the corporate Slack, and that the call to quit the chat app came after the intruder sent a message declaring: “I announce I am a hacker and Uber has suffered a data breach.”

The Times stated the Slack message listed “several internal databases that the hacker claimed had been compromised.” Various corporate systems have now been shut down by Uber."

""Instead of doing anything, a good portion of the staff was interacting and mocking the hacker thinking someone was playing a joke," Curry said. "After being told to stop going on slack, people kept going on for the jokes."

Evidence of that misunderstanding has surfaced on Twitter in the form of a screenshot of Uber's private Slack workspace."

The message: https://nitter.net/vxunderground/status/1570626503947485188
I'm personally using KeePassX, and so, all I need is the kdbx password safe file, the key file, and software that opens it. The password file has backups, and is synced to multiple locations; the key file too, and it's something I can re-download from the internet from multiple locations; and there are multiple implementations of the software for different platforms. So for myself, I don't worry about this angle.

As an alternative, I read that other people print their password list from time to time, and put it in their actual safe or a bank's deposit box.
Does that then become a hack to misdirect the robot?
As a side note it also works on real people, a long time ago in a small town a friend and I redirected all the traffic on the main Street down a small side street after one too many on a Saturday night. Harmless and it seemed funny at the time.
While it was always a concern, it was not a practical concern.

It would not be reasonable to require an 1970s satellite launch to be able to clear out the debris if the satellite exploded after a collision, because that's something we aren't able to do even now, 50 years later (note that the proposal is for 'thinning out', not clearing it). So obviously it was acceptable for companies to throw their junk without having a plan in to place to remove the debris after an accident - they are required to have a plan to deorbit after a normal operation, since that is actually a reasonably practical requirement.

Stating that this is unacceptable would mean that essentially no satellite launches would happen, and so the society chose to explicitly accept launches without a responsibility for clearing out the debris.
Back when I was monitoring deno's progress, I came across this PR by Aaron O'Mullan that improved deno's perf significantly: https://github.com/denoland/deno/commit/3d2e05dc7b6735fe0b81...

I believe they joined deno shortly after.

So, I guess it does happen.
I tried Asciidoc last time it got a shout out on here, possibly by yourself. On a totally personal level, I found it really ugly and clunky to write, like going from Python to PHP.
True. The executioner that wrote the diary was literally a logger. He was ordered to "do the choppin" when they couldn't find an executioner. He was ALSO immediately thrown out of all his social connections. No one wanted to befriend someone who's job it is to punish / kill. It was devastating for his and his family's standing.
If they lock you out, then yes, but half of the stories are about disabling the account. I don't think the email forwarding would work then.
Former Uber employee. I'm not a fan of the company. But don't shit on the efforts of the security team please. They were actually quite thorough.

We used online MFA (you had to respond to MFA requests on your phone). Not even sure why this is a discussion as the hacker confirmed it was a case of social engineering. No MFA protects against social engineering (no, not even ____ - don't try to convince me).

And yes, at least when I was there, there was pretty good training on SE deterrence.

Further, OneLogin was used, Yubikeys were phased out early on. I'd be surprised if they had brought them back, as I remember the security team being somewhat averse to them. I'm sure OneLogin is also investigating.

The security team at Uber was quite good. Constantly under stress. Constantly overworked. The last thing they need are knowitalls speculating about how stupid they are on HN. Cut them some slack - this could happen to any company (yes, it could, even yours - don't try to convince me otherwise).
Migrating off your primary e-mail provider with over a decade of history is not trivial. I could do it if I devoted a a lot of painful time to it.

For non-technical family & friends? Forget about it.
This isn't about blame, though. Even if for some reason you feel the need to care about blame passed around in a company after you've left, I would say it's still worse to strike when you can leave.

Unless you're suggesting that being blamed by management is intrinsically important and going on strike is going to be less blamed by management? I would just disagree with every aspect of that statement.
I have identical twin sons. When they were newborns, to quiet them down I would carry one around the Trader Joe's directly across the street from our house, walking up and down the aisles (it was cold outside). Then I'd come back to do the same with the other one. It worked like a charm. The employees knew me well.

It wasn't until a few months later that we showed up at Trader Joe's with both of them in a stroller. Some employees later confessed that they didn't believe I had two kids until then.
You can also export files from Microsoft products. There is no difference in vendor lock in between Google and Microsoft.
Seriously? Well not connecting them to the internet works less and less, Amazon is rolling out their 900Mhz mesh with echo devices and there's LTE-M, NB-IoT and such.

The idea of not letting a device connect to the Internet is slowly becoming a thing of the past unless you live in a faraday cage (which is becoming more and more tempting). Oh, correction, thanks to mesh networks like that of Alexa living in a Faraday cage is not actually enough if at least one device is connected. Yay.