skysight-inc/HackerNews huggingface dataset:
This is sort of like saying “the problem is not that our security is bad, it’s that people post malware on the Internet. Someone should put a stop to that.”

There is no way to prevent anyone from starting a fake science journal. There is no worldwide registry of which academic journals are legitimate. They are just different groups of people who do their own thing. “Academia” is not a sufficiently coherent group of people to set standards in this way.

Maybe there should be a worldwide registry for which journals are real, but it wouldn’t be any easier to set up than a registry of which newspaper websites are real.

Journalists operate in a world where people try to trick them. That’s just how it is.
Hindenburg is brought up in every single article about airships, so reminding people to remember is rather redundant. It happened 80 years ago. 30 people died. There might even have been one or two people looking into the causes over the last century in the hope of improving things. It was a PR disaster more than anything. When 1500+ people died on the Titanic, it lacked movie reels of explosions and thus we still sail the seas. And now we have TV news, where nothing of note happens unless there is a camera to catch the carnage.
It was just the first result on Google.

I have the same personal experience with those horrible CARB gas cans. You can google it if you need other experiences.

I spilled so much gas using one of those CARB gas cans I couldn't believe it. I then went online and bought a normal spout and have not spilled anything since.

Every since then I assume anything from CARB is going to be bad.
Oh really? Is it only the chocolate bar or that's in addition to everything else?
I think you missed my 2nd paragraph. What I was saying was: no, this article didn't show that. The only thing it's exposed so far is that "science journalists don't watch out for this vulnerability". Well, so what if they don't? There are a million things people don't watch out for. Is this one actually causing problems in reality, or is this a hypothetical thing that doesn't occur in practice? To show this is a real problem requires providing evidence of real-world p-hacking in the wild that has had significant actual adverse consequences.
Certainly the Germans, as the inventors, had far more experience building dirigibles; they weren't suffering outright structural failures causing crashes, as happened to the Brits in the same era. Or course, dirigibles weren't the safest way of booking air passage across the Atlantic then, except in so far as they were the only way to book an air passage. Still the Hindenburg may have suffered a fire due to aluminum paint on the skin catching fire.
It’s like a triangle. You can see it in the actual patent.

https://patents.google.com/patent/US10144532B2/en
I'd guess they haven't updated the old one (larger UFO) with the new one (correct distance between 4-engine jet wing and red arrow cutout, better lettering work)...
It seems that the fundamental problem here is Okta is sending passwords by design to execute a password sync. Typically, when you build an authentication system, you design your code to not store the password in plaintext so that there is no possibility of the password being read back out of the system, but Okta isn't doing this because they need to be able to do password syncing.

If you're trying to do this right, the short answer is "don't try to sync passwords." Use federated authentication (such as OAuth), or just use different passwords.

Can someone fill me in as to why they can’t just store the password using something like bcrypt?

It's addressed in the last paragraph: "For Okta's part, the passwords are in clear text because there is no standard reliable protocol for syncing hashes, researchers noted."

I guess you either have to store the password in plaintext so they can do dynamic hashing operations on it, or transmit the password (via TLS hopefully) which is vulnerable to packet capture (or captured within the receiving app).

TLS (when securely configured) is generally considered sufficient protection for the passwords in transit because stealing the password out of TLS typically requires first compromising the TLS connection, in which case you don't even need the password because you can steal the bearer token and the bearer token doesn't require you to get past a MFA check.

Are there any techniques for identity providers to authenticate people without storing or transmitting the users password to them?

This question doesn't quite compute for me, do you mean provisioning as opposed to authenticating? There's no reason an identity provider would need to send a user's password to the user when trying to authenticate that user.
SCIM is a sensible protocol and useful for syncing users and groups from central system to apps, syncing the clear text password is the problem, it should be used to sync user id and group membership only and the OpenId Connect performs the login.
gdb for a long time has been able to watch almost any expression at all. Unfortunately the visual studio debugger can't watch very much at all and that's what many of us are stuck with.
Seems like it can be exploited and misused to terrible effect as well though
"It highlights them because they are a direct contrast to nearly every other interface feature on iOS."

Hahaha, really? That's a laughable claim. Tell us how to remove a city from the Weather app then.
What is scientism?
The efficiency of an electric plant is 60%. Many are as low as 45%.

You have a serious blind spot, or wilful ignorance about natural gas vs electricity.

A natural gas water heater easily eclipses any electric one.

A heat pump water heater just barely is better, in some, warm climates, and only if you barely use water (their recovery rate is so low they basically only work in 2 person households). For most people it is NOT better.
Pandemic Unemployment Fraud Estimate Rises to $45.6B
Can you talk with a manager?

My professional advice is to work the job that you have or take a leave of absence.

Personally, a therapist is always a great resource and ally in life.
Okta's primary use case is for enterprise orgs with dozens or hundreds of third party apps that need to be integrated. You use modern auth with the 90% of apps that support it. But there are almost always a couple of legacy apps that aren't going to add OAuth anytime soon if ever.

How do you propose your average enterprise should manage auth for these legacy systems without using SCIM?
How did you come up with "99% are rubish"
Referring to this article?

https://thedebrief.org/mysterious-insignias-and-symbols-from...
This isn't a bad construction worker OR an ethical security researcher story.

This is a straight-up exposé of "journalists" and nothing more. They print "experts say" and "studies show" stories when they don't or can't even do the most rudimentary verification.

So yes, trust IS a beautiful thing, and he's demonstrated that any trust you still have in "trusted sources" (looking at you, fact-checkers) is misplaced.
> Converting gas into BTUs by burning it in a power plant and transmitting it to a home is much better than burning it in the home.

This is utterly false, as multiple people, and multiple sources of data have shown you.

At this point you either have to update your knowledge and accept reality, or acknowledge that you are being willfully ignorant, and quit making false statements.
Is this to work around the way Apple has utterly and bafflingly broken the insertion-point handling in iOS?

It worked fine for years, and now suddenly it takes five tries to invoke the "select all", "paste", or whatever menu. And moving the insertion point? Cumbersome shitshow.
I think the real meaning in hidden in plain sight. The US is finally going to invade Canada once and for all.
> Food is a complex mix of vitamins, minerals and phytochemicals (plant chemicals). Phytochemicals are an important component of food and help to reduce the risk of conditions such as heart disease, type 2 diabetes and some cancers. Vitamin and mineral supplements do not provide the benefits of phytochemicals and other components found in food, such as fibre.

> Whole foods usually contain vitamins and minerals in different forms – for example, vitamin E occurs in nature in eight different forms – but supplements contain just one of these forms.

> Vitamin and mineral supplements can’t replace a healthy diet, but a general multivitamin may help if your diet is inadequate or where there is already a well-supported rationale for you to take one. If you feel you could be lacking in certain vitamins and minerals, it is better to look at changing your diet and lifestyle first, rather than reaching for supplements.

https://theconversation.com/health-check-can-vitamins-supple...
I'm working with a junior dev now and the phrase that I keep repeating is "slow the fuck down". He's completely frantic with the copy and paste. I'm watch him google something, click the first link, paste the code into his project, and when it doesn't work he's on to the next link, paste, repeat. He doesn't even back out the changes he made the first time that didn't work.

I spent hours fixing his code and hand it back to him and it's broken again in a week.

I had to wash my hands of it. The only advice he's getting out of me now is to follow a single tutorial all the way through until he gets that one tutorial working and then compare the tutorial to his code. I'll answer specific questions, but I'm not going to try to mentor him until he's ready to receive the wisdom.
Where I live, a chocolate bar is ~600Cal. I would definitely lose weight living on 600Cal a day (it won't be healthy/sustainable but the weight is going to be lost for sure).

Donate the lost money to the charity of your choice.
Adding some reasoning why to the above:

In February Russia invaded Ukraine, and Europe and Russia responded by levying sanctions and counter-sanctions. However the EU was rather dependent on Russian gas, so they couldn't act as rapidly as they'd have liked.

If there had previously been an EU directive to "divest from natural gas by 2020-2025", the situation would be somewhat different. Even if the EU was only half-way, that would still have left them in a much better position.

* There would be less reason to invade Ukraine, since the gas infrastructure would have been worth less to an invader.

* Without a need to appease Russia, The European Union could have reacted a lot faster and sharper than it did.

* Russian analysts would have been able to predict some of this ahead of time, and possibly advised against war in the first place.

Thus: EU countries (especially Germany) would have been a lot better off if they had eliminated their dependency on non-renewable sources sooner. Especially for private use.

To be fair, they thought they had more time. Unfortunately it turns out they didn't.
We already knew this. That's why they knew that "chocolate" and "weight loss" were the magic words.
Toyota to permanently close Russian plant
People act like "Oh my god this guy did a thing that no real scientist would do". Yet, my cousin was in a biotech lab where she was unable to replicate the result she was relying on to do her next work. The reason? Original result photoshopped the outcome. She quit and went elsewhere.

Meanwhile, I'm sure some online expert has gone and linked that study saying something like "There's evidence that this gene does that" and whatnot.

There's wholesale fraud in science. And if you guys want to act like it's not then fine. Go ahead and believe what you want. It's your funeral.
54 no beard here ;)

If you're talking about web applications then I tend to disagree. The SaaS paradigm and the UI living in a browser are relatively new ideas that are still maturing. I don't think there is a lot of good "what was already there" and we're just seeing the evolution of tooling for this ecosystem, not completely decoupled from the evolution of the large companies that rely on this tooling. Not sure it's worth getting frustrated about... I tend to just stay away from it because I prefer to work in areas that are less fluid. And sure, sometimes there's just Not Invented Here syndrome and let's reinvent the wheel instead of using existing wheels. Nothing new about that either, it's always been like that.

All that said, the principles of how everything works are unchanged. People that only learn to use a framework are just not good software developers. People that understand the principles can work in any framework. This has always been true and is still true. There's a shortage of people that really know their sh*t and there's always been as well. That's great... I'll never run out of work (I might run out of motivation ;) ).
This guy.
52 megapixels according to this article, and Lumen moved into autonomous driving vision in 2020:

https://photopxl.com/the-worst-camera-ever-light-16/

Maybe someone could ask them to open source their software. There's people looking for challenges that could fix/improve it.
I see you are just another vegan who cares more about feeling morally superior over reducing the most animal suffering. I can only assume you haven't been vegan long or else I feel very doubtful of our movement to change many more peoples minds.
And also: Use tabs.
There is too much to learn out there

It's crazy. I sometimes get the itch to learn a new language like Rust, but I haven't even come close to reaching the bottom of all the languages I already know. They are inventing new things faster than anyone can acquire them.
> OpenId Connect performs the login

Doesn't this presume that the third-party app supports OIDC? Which again makes it dependant on the vendors, not Okta.
Don't use this feature with a handlebar mount, I think is the lesson. I suspect 99% of these reports are going to be dropped phones and police will learn to ignore them.
Right. The wheels of commerce keep on turning (and often, running things over.)
Some parameters missing in your description:

Are you expecting a large severance payment if you do work until they initiate termination, that you would not get if you quit?

Do you need any of these political bloodsuckers' reference and good word to land a new job?

If the product is making money but somehow the company that owns it does not see a future in more investment there, who are their competition and why not work for these guys instead?
How valuable is your domain knowledge and how much is locked in non-competes?
Same question for the customers of the product you are working on...
Why is your goal to do the bare minimum?
Why use the passive form in "being managed out"? Someone somehow has put themselves on top of your game what did they do to corner you, is this in the company's best interest, or is it in their own personal best interest?
You're only 40? Hold my beer. I'm 68.
It's an exposé of society that will believe anything that makes us feel good about our bad behavior
The Worst Camera Ever (2020)
Hunter S. Thompson wasn’t kidding when he called the late 60s in SF the high water mark.
The problem is those who create the messes to need that advice probably will take that advice and create even bigger messes

In practice, pithy adages don't get us any closer to sanity

Really the only news you can use is

1. Try to modify things with code you didn't write by not simply throwing parts away

2. If you think it's really difficult to deal with, figure out if other people agree with you.

3. understand why everybody thinks this

4. If you are doing that in your own code, then stop doing that.

You have to viscerally understand why a practice is bad and how doing it affects other people.

This is how you can intuitively avoid such practices in the future. Not through things that rhyme or acronyms that spell words but through social intelligence. It's fundamentally behavior
Haha, yes! I'm a software engineer and it took me a decade of smartphone usage before I realized that long-pressing various keys (e.g. vowels, symbols) shows a pop-up allowing you to enter related characters (e.g. á, æ, ¡, ₹, ±, ·, ½, ²)†. Blew my tiny little mind! If I were using a language that required the variants menu in its native keyboard layout, I might have discovered this a decade before by explicitly searching for how to enter certain characters.

† Typed these on mobile, of course. Android, in case you're wondering.
I think the documentation is usually pretty great if you can find it. Somehow I never seem to be able to.
> used my name and address to impersonate me and obtain my DOB and email from my insurer

Sounds like the biggest fail was your insurer handing over those details based only on your name and address. How did that work? "Hi, I'm Dave Smith from 101 Easy Street South Sydney, can you tell me my DOB and email please?" Why would the insurer give a customer their own personal details? They are supposed to ask the caller to state those details in order to proceed with account access.
That was the whole point. Science journalists dont do the jobs we think they do.

Our presumption is that they do not trust anything as true facts until they verify and vet the information. I.e do what a journalists do. Report whats true

But thats not actually their job anymore. Their job is to get eyeballs. Doesnt really matter whats true.
Oh I completely agree - but I also remember putting a graphical header on the first page of the output from the print symbiont (aka daemon, essentially CUPS), I had to type in pages of assembler from microfiche
Hey... Good find.

That looks nice but do you know if it's available in India? Import duty is like 40% on stuff so we can't really buy from other countries.
I feel this pain every time I go to reconcile transactions for the week/month. At the same time, I'm not ready to trade the exposure I get to every penny of my income/expenses that manually typing entries gives me. It's just not the same as reviewing a ledger - the act of typing, reviewing, and reconciling has really boosted my confidence in how I currently manage my finances.
How Could We Have Been So Naive about Big Tech?
Unix of the day was not "free" you could get free access at a Uni, but outside of there you had to pay AT&T, who frankly didn't really understand what they had (which is why we now have Linux)
That is due to schools giving importance to memorization over critical thinking skills
I just received my Framework laptop recently, installed Fedora 36 + KDE Plasma, and even though it took some tweaking to get a close to my Mac behaviour, it works perfect. I had 0 driver problems. So it looks like Linux on the desktop seems to be getting there.
And the best part, with this laptop, no shop needed to replace the battery, I can do it myself.
Well, their task is to turn UFOs into IFOs, isn't it?
Is there some innate cultural need to always have these circular insignias?
I'm sorry but if your app was open source (like Streamlit) it would get more "love".
I am in Germany so I checked ALDI:

1 Liter of 3.5 Fat Milk = 0.99 EUR

1 Liter of unsweetened soy drink = 0.95 EUR
It costs $3-5k for an electrician in that part of the country to get off their arse and sign off on an already completed installation. Throw in the permitting procedure and everything else involved, and I'm moderately surprised it's so cheap. There's a reason such a high percentage of homes in the area have illegal lofts/porches/bedrooms/stoves/....
I wonder if she actually drank the beer that was served to her not by a bartender, but by her anonymous date who could be a serial killer. That's inadvisable. Never let a drink out of your sight. Always permit your companions to receive their drink directly from the server or bartender.
Lol. Reminds me of those flash projects we did back in 2006 during high school and college years. Good times. Good to see the new wave of developers and programmers still upholding this.
> I recently read an article about how most modern mainframe deployments (IBM excluded) are software emulation running on x86 platforms.

That's not particularly new either. The k-12 school district I attended and worked at in information systems did that in 1996 or so. It was a small unisys mainframe, so only maybe 20 feet long, 3 feet deep and 3 feet tall, became a 4U box running emulation on NT4, I think quad pentium pro, but maybe it was only dual, cause I'm not convinced you could fit four ppros in 4U.

That distict currently has 70 schools and 44,000 students. The mainframe was used for grades, schedules, payroll/personell files, etc. Had a terminal version of wordperfect on there too, as I recall (although, maybe that was on a different system, I was a desktop tech, I didn't get to work on real computers)
I thought you were making a "UFOs are not real" joke.
I think the title is misleading - it is not a server performance comparison, it is just a comparison on a single application using a single kind of workload on a fixed dual core setup.

It also lacks basic insights into the results, e.g., when both AWS and GCP are using ARM's Neoverse V1 design, why those two servers are having such significant performance gap? Maybe it was just caused by some bad software configuration in the stack which can void all relevant results?

When there are up to 64 cores available, why only 2 cores were used? Surely other 62 cores are relevant, right?
You appear to be an outlier. The scientific evidence for the efficacy of curcumin taken orally appears to be very thin to say the least.
ASCII Back End for Matplotlib in Terminal
It's not always being cooler per se that makes the difference; other problems such as electron tunnelling (we're getting well beyond my paygrade, there's a lot more) can be limited with a better hardware design (say tapeout) as well. But yes, you get better performance from being able to function at a higher frequency on a large die (with more heat, but that wasn't necessarily the limiting factor previously) or on a smaller die where the parts are now closer together and so take less time and energy (heat) to communicate. A better tapeout geography can mean fewer lost cycles waiting for this or that info to get where it's going and so actually increase useful IPC at least a bit.
That sounds a lot like stealing? Which is quite illegal
Lol. Was Bobby Seale a ‘ghetto thug’, a ‘bully’, & a ‘thief’? Was Fred Hampton all the above as well?
If Fred Hampton was, then why not just proudly say who in government ordered for him to be assassinated in his sleep?
I don't think programming today is that different. I've been programming since 1982 or so and I don't think it's fundamentally that different. You have to keep learning new stuff. That's the way it's always been. That's what it means to be a programmer. But the new stuff is just the old stuff and the basics are the same.

By the way, electric engineering of today is also quite different from electric engineering of the 80's. You have to learn new tools. Maybe if you work for an electric utility it's still the same though I tend to doubt that as well.
Fair enough, I did say I was an application programmer!
I'm not a subject matter expert, but think much of the value stems from lignin being so abundant because it's a byproduct of paper making rather than some advancement in chemistry, itself.
over the years I have seen a good 30% refuse to do it

I'll do reasonable take homes, but I'll often pass on interactive coding sessions. I don't like coding in a browser, and I use my dev tools as a major crutch.

"Why did you store that value as a string instead of a long?"

"Because it's a string from standard in and I have no idea what bullshit inputs there will be so I can check it before casting it."

"But the user story said it will be a number."

Well if I had more than 15 minutes maybe I would have been able to gain confidence in the input. Something like that comes from many years of experience getting burned yet it's considered a negative mark. Some of these places are actually selecting for recklessness.
Mobile debugging using a real handheld? I'm using the FF devtools extensively, I only have to switch to Chrome when some weired mobile issue arises.