skysight-inc/HackerNews huggingface dataset:
> To your point, password rotation is considered an insecure practice because it causes people to append 1, 2, 3, etc to the same password.

A good solution to discourage this would be to have heuristics that'd make sure that the new password isn't too similar to the old one, but doing that without having plaintext in there somewhere is pretty difficult.

Another solution would be mandating that all of the passwords should be randomly generated, but enforcing that would be difficult, because everyone who isn't used to having 99% of their new account information being in KeePass databases with randomly generated passwords, probably would find that too cumbersome to remain productive.

This seems like a people problem that makes being secure essentially impossible, due to how people use passwords (e.g. "I just use one password across X sites because remembering multiple ones is too difficult" or "I just add a number at the end of my current password").

And others also mentioned the productivity loss, for when people are slowed down by the need to change their passwords. You might easily rotate Let's Encrypt certificates thanks to automation but when it comes to people, things aren't so easy.

At that point, you might just stick with whatever passwords you have, do some dictionary checks in the future, maybe have infrequent password rotation and otherwise stack on more mechanisms, like TOTP through whatever application the user has available, or another means of 2FA, because relying just on passwords isn't feasible.
Another question then: can we verify (even if we have to jailbreak and check the binary) that the encrypted app delivered on iOS (and I presume Android) is built from the exact same source code?

E.g. could we build it ourselves in, say, Xcode, and compare a hash of the resulting app binary with the installed one?
Partial solutions that take minimum effort are great. It's like replacing a single incandescent light with an LED. Sure it doesn't solve climate change, but it definitely helps, and doing easy helpful things is way better than not doing them and complaining that the problem is big.
My high level analysis is that this is because of institutionalized 'dispersion of responsibility' stemming from the pure capitalistic doctrine we all have supposedly signed up for. Essentially you have individual entities whose responsibility (& only one) to maximize the profit. so anything that is measurable ends up getting projected on one dimension of 'capital'. There is a lot of talk about social responsibility but most 'don't be evil' lasts until a few bad quarters and then its back to same story.

No supposedly the govt/unions are supposed to provide a counterbalance to this but for some incredible reason folks here in America are convinced that any collective action is basically soviet style socialism hence out of question. So what we are left with is this dispersion of responsibility to do social good but no one actually in charge of it. And don't even get me started on the Senate composition/electoral college & institutionalized gerrymandering (so you can actually fix it with simple majority you need a special kind of majority).
Some people are just rude and you see it in all ages.

Older people probably have an expectation that you have read and understood the rules as well
Doesn't have to be a university either. Depending on the amount of compute needed any capable IT guy can do it for you from their garage with a contract.
> drop Gladwell and self-help books

The advice I like is "read them until they all sound the same".
I had a somewhat similar feeling when I thought “cool, but why?”

I get the appeal but you’re stuck with whatever notion decides to do with their platform.
They also ban for blocking the /api/science/ data mining endpoint.
That one has an actual useful definition in economics:

https://en.wikipedia.org/wiki/Human_capital
Hardly, I bought just two at 20 and I'm still holding on to them :p
Was wondering about the money thing and found this on ... Wikipedia :) https://en.wikipedia.org/wiki/Wikimedia_Foundation

Seems like >$235MM in net assets excluding the $100MM in the Wikimedia endowment and growing at a healthy rate YoY.
I've never had this issue on macOS, and use it almost daily...
Furthermore, scientific computing often (usually?) involves trainees. It can difficult to train people when small mistakes can have five figure bills.
I just did the math. Simply buying the coin and holding would have given me a 132,141% ROI today
Not ridiculous at all, depends on your threat model. It's perfect for me.
The romantic in me hopes not! These are now doing crazy things with MK10 (i am amazed how i find the story line just getting better and better). I hope they can appreciate the hacker in these folks from their own early days!
> This parent is wrong, and the teacher is also wrong. There is no reason for children to use a source like Wikipedia for anything.

Exactly. To oversimplify, the correct advice has two parts: 1) don't use Wikipedia, 2) use these better sources instead. The teacher is wrong because they're apparently forgetting the second part, but the parent is also wrong because missing that doesn't make Wikipedia a good source.

IMHO, a pretty good lesson for schoolchildren is: quality information usually takes some effort to access, and information that's easily accessible is probably bad. That's because quality is usually expensive, so free very often takes shortcuts on quality or injects an agenda.
They should have used the third definition of "warp" in relation to weaving. As the Web was just starting to become big at the time maybe they could have done a "Weave a web" marketing campaign.
Poppycock. Wikipedia is not a repository of primary sources nor original research. It merely aggregates information from outside sources and should be used as a reference tree.
I don't think it's a good idea to do that without insurance, personally. Though paradoxically if it burned down it probably would be worth more. I'm more worried about personal liability if someone hurts themselves.
Having had the responsibility of providing HPC for a literal buildings full of scientists, I can say that it may be true that you can get computation cheaper with owned hardware, than in a cloud. Certainly pay as you go, individual project at a time processing will look that way to the scientist. But I can also say with confidence that the contest is far closer than they think. Scientists who make this argument almost invariably leave major costs out of their calculation - assuming they can put their servers in a closet,maintain them themselves, do all the security infrastructure, provide redundancy and still get to shared compute when they have an overflow need. When the closet starts to smoke because they stuffed it with too many cheaply sourced, hot-running cores and GPUs, or gets hacked by one of their postdocs resulting in an institutional HIPAA violation, well, that's not their fault.

Put like for like in a well managed data center against negotiated and planned cloud services, and the former may still win, but it won't be dramatically cheaper, and figured over depreciable lifetime and including opportunity cost, may cost more. It takes work to figure out which is true.
Any particular you could recommend for GPU?
Are you suggesting I'm also a school aged child? Because, that's the only way your point works as an equivalency.

Learning isn't just about solving problems it's about understanding concepts. Teaching concepts is fundamental to understanding methods. Googling is a method to solving a problem. You're suggesting teaching methods in a discussion about corrupting conceptual instruction; which is the exact thing the school is doing.
ATLAS tried to auto-tune BLAS quite a while ago -- it works OK (not as good as the hand-tuned libraries with assembly kernels, though).
"One is a group of humans and the other is a group of machines, the rules/expectations are 100% different."

This is exactly what they were saying in the comment you are replying to.
Wrong school? Our local schools (Silicon Valley, CA) encourage kids to use Wikipedia. Your school may just be a little behind the times.

The discussion now has moved to NLP models. GPT-3 models at this point can generate extremely high quality answers to complex questions. Is there still a point in asking a student to write a few paragraph on the definition and effect of acid rain if you can get that from OpenAI within seconds?
Peter Zeihan's 2022 keynote on geopolitics and globalization
Genuine question: why would you need to move to a different cms? If what you’re using works, why change it?
These threads always reveal that different people have had wildly different experiences with Wikipedia. I wish everyone would clarify what those experiences actually were so we could answer questions like "is it only some parts of Wikipedia."
> - linear programming - didn’t actually get this as part of my CS curriculum.

Isn't this part of a standard Linear Algebra course?
I hang my laundry sometimes, I've never been bothered about this in a string of rentals, owning houses in HOAs, owning houses outside of HOAs. Mostly you just don't do it in the front yard, which seems like basic common sense? Also, in the US nearly everyone has a washer and dryer, so the only time you need to hang laundry is for delicate clothing that is drip-dry only.

I lived in Europe for a time where it was common to have a washer and no dryer, because the electrical grid couldn't support it (old buildings retrofitted with power with only 60A service were commonplace in two of the European countries I lived in). But even in this case, mostly people had brackets on a window that pushed out to make a clothesline towards a center common courtyard for a blockhouse/flats, not out into the street (or if it was street-facing it was well above street level). This is different than in this article where someone is hanging clothes out at street level in their front yard, rather than the back, which is considered a private space.

If you don't want an HOA, don't buy a house in an HOA area. I certainly got tired of HOA bullshit, which is why I bought a non-HOA house.
> There is a tiny argument that still exists for buying legacy analog media - the "it sounds warmer" argument.

There are more arguments than that. For some people, it's all about collecting and community. For others, they love the large format artwork. I'm not playing analog media, but I still like the physical interaction part. Many of us also like that, for some artists, buying a record is a way of supporting them. Then there's the fact that playing a record or CD doesn't require an internet connection and that means nobody is tracking the records you play today in order to better sell things to you tomorrow. There's also the gear part - it's an excuse to put together a great audio setup. For those of us who still buy physical media, I don't think the "it sounds warmer" argument is terribly common.

All of this stuff is fun. There's not a lot of joy in tapping "dylan blonde" into a search box and pressing play.
Where I live (Northern California) there is a waste transfer station that accepts e-Waste at no charge. When you drive to the station a staff member asks what you have and points to an open stall/section in a large covered structure where e-waste can be dropped off. It's a pile, but it's also a not-for-landfill pile.

(And thanks for the reminder, I have some stuff to take over there)

An interesting video on the system & process from there: https://www.youtube.com/watch?v=S2lmPIa1iWE
Money was obviously an issue. $319 USD/month didn't cover the costs of running it. As noted in the post, "I’ve donated countless hours".

Where is the line between "trying to make a profit" and "trying to be self-funding"?

Trying to be funded off of donations is really hard and rarely works. Most of the time you need other funding models.

If someone runs a biz where they run mastadon instances and the business breaks even (or just a little more) is that making a profit?

How does an organization behind an instance make money to cover expenses? This has to be looked at.
If I follow malthus law, I would say we would have less war in the first https://en.m.wikipedia.org/wiki/Malthusian_growth_model
I have a hunch if the developers eventually got this to run on original Midway hardware and installed it at Galloping Ghost Arcade outside Chicago that Ed would show up to check it out and say hi.
I still have a few blank CDs. I never touch them. I have two DVD-RW drives inherited from my dad, which no longer has space for a 3,5" in his new computer a few years ago. I never use them. I never bothered to upgrade to Blu-Ray either.
There will always be a tension between security and usability. A common situation is when a phone stops working (for instance, it fell into a puddle) or is lost or stolen. If it stops working, you can just pop the SIM and put it on a new phone (assuming the new phone accepts SIM cards of the same size, instead of requiring an even smaller one); if it's lost (or your SIM card is too big for the new phone), you can go to one of the phone company's stores, present your identity card, and get a new SIM card associated with the same phone number. Either way, you don't have access to the Signal account anymore, since it was on the broken/lost/stolen phone; the SMS verification (plus the optional password) is the only way to recover it.
“Mother Will Be Pleased”: How It Feels to Be Run over (1900)
Lots of nosy old biddies eager to play with someone else's budget.
I didn't mention any baking concepts.

I quoted Malcolm Gladwell -- who was the originator of the "10,000 hours" rule (remark?) in popular culture.
CDs already use Reed Solomon, though. But yes, you can double it up.
Expertise isn't something you need to start a career, it's something you gain over the course of a career. Figure out the minimum necessary skills to enter a new field and focus on developing those skills.

Even if you did spent the (completely mythical, made up) 10,000 hours, you'd likely be wasting a lot of time if most of those hours aren't in the actual profession, as opposed to some detached academic hobby.
ohh, I had an addon on my Firefox statusbar that did this. Gone it is with the status bar, sadly.
But he's dead and his keys lost
This is a result of taking a product made by someone else for a certain purpose and then using it for one it isn't intended. Its not Google's fault gmail is a bad fit here. They didn't design it with this use case in mind.

The solution is to use one that is. Why are case workers directing the homeless to setup gmail accounts? Because they haven't been provided with a better solution by the system they work within.

So its the government's problem to fix. They are the ones handing out phones and setting the expectation to communicate through email. So they can either design an email service themselves that fits their needs. Or they can work with an industry partner, such as google or someone else to provide the service.

Normal gmail is a one size fits all commodity solution. It works well enough for most people, most of the time. Specialized problems call for specialized solutions. Complaining that google didn't think of you is misplaced.
Fwiw it's hard to make friends for everybody after college life
I am not sure at which level his kids are.

It’s more than fine for elementary school, not fine for university… and there is spectrum in between.
What's crazy impressive is this was a CD-RW, not a CD-R.
> I want to give you as much time as possible to download your data and migrate to a new server.

Does it mean you can download your messages and put them back in the global conversation ? How does that work ? Are those messages stored only on one instance ? Do they disappear forever when an instance disappears ? Will users switch to new identity from another instance and import messages or is this lost ?
Obligatory Deadpool/Bill Murray reference: http://qahipster.weebly.com/uploads/8/1/4/4/8144013/common-s...
What would you propose they use instead, given they need to develop quickly across multiple platforms?
Explains why apps need programmatic clipboard access, security implications, API detection, text handling, binary handling, and events.
This old article only proves how vulnerable Signal is by relying on the security (or lack thereof) of other 3rd party service providers.

The phone number requirement should be removed if Signal wants to be taken seriously. Maybe the next hit might affect more users than 1900 people.
I, however, get this regularly.
> being exposed to far right beliefs just makes me more and more crazy

> watching the thought processes behind those rants

I think, perhaps, the problem stems from only paying attention to people who are making emotional arguments based on ideology or repeated talking points that they don't truly understand but simply feel align with whatever group they see themselves as belonging to. This is the partisanship or tribalism that seems to be poisoning a lot of public discourse. I specifically say discourse here because I don't believe it is actually disrupting society at the interpersonal level as much as popular opinion seems to think it is.

With either side, if you examine the well reasoned arguments that underly a lot of the talking points you find that they are often quite different and more nuanced than the things firebrands are turning them into. This is troubling because it means even the people who supposedly believe in these ideas actually don't understand them at all. I think this is responsible for the phenomenon of people turning out to be over all much more centrist and agreeing with each other when they make an effort to sit down and discuss these things in a rational manner.

My advice is to shun reddit, YouTube and twitter and instead find some old books that discuss the topics in a rational way from a variety of perspectives, read them and then draw your own conclusions.
I think I might have overstated my amateur status, I had to look up what a prime lense was :) I mostly just used the "auto" setting on my Canon heh.

Anyways the only things I really dislike with the Canon are the lack of viewfinder and no auto-transfer photo to phone which the Sony has.

It sounds like the image quality of the Sony isn't that dramatic of an upgrade as my Canon?

Thanks for the info though, maybe I just momentarily got excited at the prospect of upgrading as that Sony looks really sweet. There also might have been hint of "I'll get even more into photography if I upgrade" so I'm going to sleep on it.
Rewards of Routine
I can imagine the Clintons doing some sketchy stuff.
What are you talking about? Wikipedia has a perfectly adequate page on how to cite it [1] and provides tools that account for how dynamic it is in generating citations. Newspapers and textbooks are also regularly cited to demonstrate general facts of knowledge and are usually accepted anywhere other tertiary sources would also be appropriate.

[1] https://en.wikipedia.org/wiki/Wikipedia:Citing_Wikipedia
Yeah, a good piece would interview The Neighbors and ask what they think about it. It could be very telling or even damning of them
Learning how CDs work in Physics class blew my fucking mind. If there was only a way to communicate to the normies how amazing they actually are.
Pitfalls of Serverless Development Ownership
California starts sending out stimulus checks up to $1,050
That's what I told my kids. They weren't allowed to use Wikipedia either, so I told them to use it for the sources referenced there.

Google Search content farm results should not be allowed, but good searching might turn up some decent material so I think it should be taught but with those caveats. Is it too much to ask that the teachers at least give a cursory review of the source links students submit, and give feedback to the students who are not choosing good ones?

Back in my day we were allowed to use popular magazine articles as sources (Time, Newsweek, etc) and honestly those probably weren't that great either (see Gell-Mann amnesia effect).
I'm not saying AWS is automatically the best option but the question isn't just servers. It's servers, networking hardware, HVAC, a facility to put them all in, and at least a couple people to run and maintain it all. The TCO of some servers is way higher than the cost of the hardware.
Are you talking about transmission remote gui or something else?
Just having any methodology doesn't count, it has to actually serve to legitimize the model (which it doesn't). Pretty much every publicly traded firm has had MBA managers for the past fifty years, and yet somehow they still make a profit.

This report may arouse people's ingrained dislike of the business managers they've had to deal with but it doesn't actually offer any insight that can survive the least bit of scrutiny.
Are you arguing or reiterating?

What am I missing here?
Can someone explain to me how printing more money and handing it to consumers is combatting inflation?
Games definitely had custom "put this data on this sector" software, for authoring their gold masters. Generally, data that was needed fast was on the outer tracks, since they spin faster and can have lower seek times. Something less time-critical like background music would be on a slower part of the disk, streamed incrementally.

If I'm remembering right — has been some years.
You could say the same about any democratic action - if people are too lazy to vote then yeah they won’t get what they want.
As a complete outsider who thrives on drama, everyone sucks here.

Alex has shit opinions, 100%. But the back and forths in the Pleroma MRs linked are at the level of high school catty drama. And that applies to everyone in there, on both sides. I feel like every single MR listed would have gone completely differently if the people involved treated the others as humans and actually worked towards building better software. At the end of the day, the commits were simple enough and could have been worked on had the people there actually wanted to do that. But instead they all just turned into name-calling high school kids. In short, everyone there needs to grow up.

And while I agree that a one man shop in the form of Soapbox is likely not going to last, I wouldn’t put my support in for Pleroma based on what I read either.
Except it was investigated and nothing like this was determined.
It's not "fashionable", as that would imply it's merely based on subjective taste. It's not like console or distro debates at all, which depend on the situation and user preferences/taste.

A system where you can blow away the server and automatically have a new instance recreated is objectively better than a bespoke server that needs someone to recreate everything. The less time I need to spend manually configuring and tending to systems, the better. This is objectively a better model for software infrastructure and deployment. These are literally machines, not cattle or pets or whatever.
I'm 100% in agreement that we should see the source, but it seems to me there could be a "black boxy" way to check for this? As in set up e.g. an emulator and sniff all traffic in and out?
> in high school back in 2004, we were already told to not use Wikipedia as a source

I think we all assumed the situation had evolved.
With Telegram you can. They provide instructions. (At least used to do.)

Not sure about Signal.
I didn't downvote you but I presume others did because the StackOverflow post I linked to essentially says the same thing.
Finally I can become a one man AAA game factory...