skysight-inc/HackerNews huggingface dataset:
I’m the founder/CEO at Stytch, and the amount of misinformation and direct falsehoods in this post are pretty jarring. I’m surprised this has gotten any traction on HN, but I’m happy to go point-by-point:

- OP claims we do not have a bug bounty program. We do have a private bug bounty program. We also triage all reports that are sent to security@stytch.com. In addition to this, we have an in-house security engineering team and work with an external firm.

- OP claims we do not have a responsible disclosure program. We do [1]

- On the point about CSRF, OP is correct that login CSRF scenarios are common with magic link products. For the uninitiated, Login CSRF is a vulnerability where an attacker gets a victim to log into an account controlled by the attacker, instead of their own. For example, an attacker could forward a magic link email to a victim, who clicks it unknowingly and ends up logged into the attacker’s account. Stytch adapted PKCE [2] to magic links so that applications have cryptographic proof that the device clicking on the magic link is the same device that originally requested the magic link. Our PKCE design was audited by our external security consultant. PKCE - as well as other more contemporary cookie-based CSRF measures - are not effective on mobile applications due to heavy use of webviews. Often, there is no guarantee that the browser on the device (perhaps an embedded webview within an application) that requests the magic link is the same browser that is opened by the email client when the magic link is received. For mobile-centric customers with workloads that are sensitive to login CSRF, we recommend pairing magic links with one of our second factor products such as SMS OTP, TOTP, or WebAuthn.

- On their point about OTP tokens, it’s unclear if they’re talking about our magic link product or our actual one-time passcode products. In either case, the author is incorrect. Each product behaves slightly differently. For email/SMS/whatsapp one-time passcodes, these tokens expire both a) after first-time use and b) if the developer initiates a new one. For magic links, the token is invalidated once it is consumed or when it expires (whichever comes first). Their description of default behavior is also misleading. For example, while a sign-up magic link defaults to 1 week expiration (and can be configured lower) due to common email confirmation flows at sign-up, a login magic link has a lower default expiration at 1 hour. For OTP codes, the default code expires in 2 minutes and the longest it can be valid for is 10 minutes (this distinction is by design as there’s less entropy with a 6-digit code than a magic link token)

[1] https://stytch.com/docs/#security_overview
[2] https://stytch.com/docs/magic-links#email-magic-links_adding...
That being said, I would be very happy if there was a resurgence in the popularity of Commodore 64s.
this is called market failure and its what happens when you privatise a natural monopoly
Far from your Burger King straw men, there's even a very famous study, out of the UK if I'm not mistaken, that confirmed the thesis of black women being the least attractive group across the whole spectrum of major ethnic groups. I mean, there must be one group, out of all, that would score lower than the others ain't there? Reality doesn't have to be politically correct at the end of the day.
Elon Musk Spoke to Putin Before Tweeting Ukraine Peace Plan
What is the difference between ceramic and 'ceramical'?
It's kind of like asking how you can build a server that will last 30 years without maintenance. There are a few examples of long-running servers around, but they've all had lots of parts replaced - but how about Voyager 1 and Voyager 2?

A well-shielded server on a spacecraft in a distant orbit (maybe around Mars) hooked up to the Deep Space Network, powered by satellite solar panels - that might be the ticket.
Thanks! And congrats on your book as well. It turned out to be way more work than I imagined, but it was worth it. I ended up learning and growing as an engineer myself during the whole process. Getting the right words down on paper really forces you to organize your thoughts and clarify what points you're trying to make.

I'm hoping this helps junior devs focus on the soft skills earlier in their career, rather than putting them off until they're ready for the promotion.
I will never understand people that bought a 3090 for gaming.

It was literally double the price of a 3080, but was at most 20% faster, and usually only 10-15% faster.

nVidia's claim that "It's for 4K gaming!" was marketing bullshit. With a such a small performance premium over the 3080, I'd argue that if a 3080 can't handle a game in 4K, the 3090 probably can't either.
This model ignores a key incentive: dating apps that don't successfully match won't be used.

So at best, the developer is incentivized to have the user find someone to date in the short term and have the relationship fail in a manner that doesn't reflect poorly on the dating site. And it's not really feasible for the dating site distinguish between "will successfully date for a few months" and "will successfully date for a lifetime".

You could apply the same logic to any long term purchase. Dealerships only sell lemons because they want you to come back and buy more cars. Recruiters only match you with companies that you'll definitely want to leave because they want to match you again. Realtors only show you houses you'll hate because then you'll want to move again.
France gets up to 75% of their energy from nuclear. So the answer to your question is No.

Germany’s decision to close down their nuclear and rely on gas from terrorist state is one of the most profound mistakes of the last 3 decades with serious negative consequences for the Germany and the world.
I loved Sketch. It was refreshing to use coming from illustrator and eventually adobe XD which was a poor-man's Figma (lol). Figma really just got everything right though, not platform-specific, and just much easier to share and work together.
I used this on a raspberry pi for this kinetic sculpture: https://www.youtube.com/watch?v=6xAiKI6XswM
I was thankful that it worked on a variety of diverse faces, even masked somewhat.
Hey there, I'm the founder/CEO at Stytch. I provided some more responses in this reply on the general post, but I'd also add that login and sign up links are invalidated after their first-time use

https://news.ycombinator.com/reply?id=33164969&goto=item%3Fi...
> just invalidate them after use

I can't speak for Stytch, but I know at $CURJOB, we have run into issues with this where corporate phishing protection software invalidates one time use codes. I believe it does that because it retrieves links in emails before the user clicks on them. This was an issue several of our customers have raised. So it isn't as straightforward as you might think.

There's more details, including the workaround we ended up using, on the GH issue: https://github.com/FusionAuth/fusionauth-issues/issues/629

PS I agree they should absolutely have guidance around link lifetime as well as safe defaults. Converting the links to one-time use seems like a good start.
I'm not sure this is really targeted at gamers. For eg deep learning workstations, it's extremely reasonably priced for the amount of horsepower it provides - it seems likely to stomp 2-3 2080 Ti's, at a much lower power draw, while fitting larger models.

For games, unless I was running a top-of-the-line res/refresh rate monitor, I'd probably just get whatever the 4060-4080 ends up being and call it a day.
I'm sure private prisons have an obvious profit motive and pointing that out is very important.

But the question remains, what the hell do you do when there's literal zombies roaming the streets in America? That is not hyperbole.

> KENSINGTON AVE PHILADELPHIA AT NIGHT
https://www.youtube.com/watch?v=cOBoDT-3oM0

> Streets of Philadelphia, Kensington Avenue, What happened today, Aug, 2021.
https://www.youtube.com/watch?v=Bi1Kf-1qd6Y&t=57s

>The Oakland, California Homeless Problem is Beyond Belief
https://www.youtube.com/watch?v=yRWmKh13b50

> WALKING THROUGH LOS ANGELES UNBELIEVABLE OUT OF CONTROL HOMELESS SLUM | HOMELESS CRISIS IN AMERICA
https://www.youtube.com/watch?v=1WVDieQ8MsI&t=9s

> ZOMBIELAND TENT CITY METHADONE MILE BOSTON MASS
https://www.youtube.com/watch?v=DCgNaITiCXY

There's hundreds of videos like that on YouTube from many areas. It's easy to ignore when it's not near you.

Would you feel safe having this in your neighborhood? Would you be ok with your loved one taking a wrong turn somewhere and being stuck alone in any of these places? I'm not saying I love cops hassling homeless people for bullshit reasons, but there are some really out of control areas. How do you even start to deal with this?
Slum would still be better to homeless compared to being without roof. First we need to ensure everyone has somewhere to live.
It’s not clear from the article, but I think they’re aiming to do both: create new geothermal sources by drilling (running, I guess, some of the risks of fracking) _and_ storing excess energy as heat in those sources.
How is wanting to meet a partner "weakness"?
Some links to how the InboxSDK can modify Gmail:

[1] Inserting buttons into the compose toolbar <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[2] Adding indicators to threads in a list <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[3] Adding a sidebar to a thread <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[4] Adding buttons to a thread toolbar <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[5] Adding autocomplete search results <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[6] Adding sections to the left nav <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[7] Defining full page routes with custom content <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[8] Adding entire sections to the inbox <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>

[9] Adding keyboard shortcuts <https://uploads-ssl.webflow.com/5ff703387b4e84030da35e5e/600...>
"presenting some silly fun data analysis as "science""

Their silly data analysis had a sample that was probably orders of magnitude larger than any cohort an university paper could dream of getting their hands on, but yeah, it was just a silly fun data analysis.
Meaning the two pictures in the readme? The first is an image from Wikipedia, and the second is my face. If there is another image that is concerning, please let me know and I'll remove it and clean the history. I built this because I am uncomfortable sharing images of others without their consent (as happens all the time on social media) and also sharing my own childrens' faces, because I completely distrust the social media companies in particular.
Probably not. Even if French capacity was going to increase enough to supply all of Germany, it would take several years.

Even before they shut down their nuclear plants, Germany's top source of energy was still lignite coal.
People can meet each other offline like they did 10+ years ago. They (or some large proportion) might prefer to meet online though, as the evidence seems to indicate.
Probably because online dating/apps are mainstream now. OkCupid was most certainly not mainstream. Online dating still had a social stigma even in 2010 and OkCupid was the one that geeks used. It was generally full of unattractive people. Some people now intentionally take and curate pictures for their online profile and even some of the most attractive people use it.
To be clear, I don’t think we should “despise” anyone and I wouldn’t call any place a “shit hole” because it’s rude.

But insofar as the term is commonly used as a shorthand to describe places marked by dysfunction, Pakistan (and to be fair Bangladesh) fit the bill—notwithstanding nice people, great food, and pretty scenery.
Tbf, $1000 in 2005 money is hair over $1500 in 2022 money. That $250 GPU would be ~$380 going strictly off inflation.
Honestly, I wouldn't mind paying $10K for finding someone who actually becomes my life partner, let's say due upon 2 years of stable marriage. In such a system, user incentives would be fully aligned with the business. However -- this would be hard to enforce.
Congratulations!
One thing I have heard, that I am afraid to test is that if after a period of time of not drinking, an alcoholic starts again, quite quickly they revert to drinking as much or more than they did previously. I played around quitting and starting smoking several times, so I know I have a very addictive personality. It is not worth the risk for me to drink.
30 years is a very long time on the Internet. Your best bet is probably to utilize the Internet Archive in one form or another.

And all the other comments about plain html and nothing new or fancy.

https://archive.org/developers/index.html#warc-web-archive
No-ones mentioned blockchain yet, but now there's so many blockchains that even if the site was around in 30 years no-one would be able to find it.
Compared to past cards, these behemoths aren't the equivalent of a top-end car. They are the equivalent of an oil tanker: slow, wasteful, and while yes, you might sometimes need to harness the power offered by one of these, as a private individual you definitely want something whose fuel efficiency is not measured in hundreds of tons of fuel per day.

Besides all that, releasing "consumer" cards with such overly inefficient power consumption is just being tone-deaf at a time where half of the Western world is facing rapidly rising electricity bills.
Latex is a tool.
I am sure that is the case, their goal is to keep you swiping as much as possible and buying their upgrades. I had a Gold membership for about a year or so. Boosts didn't work for me, I found that the boots only yielded a lot of low-quality likes (ie: profiles, that my filters should have rejected). I also continuously had profiles showing up that didn't meet my filter criteria and that I'd already swiped left on just days before.

I ended up emailing support and making the case that the site wasn't working as advertised or even as support said it was supposed to be working. I ended up getting a full refund.
Google Cloud Next – Day 1 livestream
This is why I had high expectations and hopes for Facebook Dating. They "have all the data" - and benefit from you being on the site, whether you get married and stop using dating, or not.

Unfortunately, they made a pretty shitty 'dating' system and left it to rot.
Anecdata here but a few months ago I started eating "one meal every other day" (a massive ribeye with butter and eggs. i have no idea what the calories or protein or whatever are.). I had been strength training for a while without dietary control.

I'm severely obese. Significantly less so than I was when I started fasting, but still over 35 BMI.

I think I've gained a small amount of muscle? It's definitely slowed down since before I was fasting, but lifts are progressing still. It may just be skill progression but these are simple lifts that I'm pretty familiar with (overhead press and deadlift), and I feel like I'm still gaining real strength.

I don't know how to judge muscle size really, especially since I'm losing body fat which is obviously making them look more pronounced.

I do take one "testosterone-boosting 'supplement'" (the main one). I've been running a test level of around 900.
Yup. And is anyone wants further proof of the statement that the union faction wasn't exactly for complete equality, just read Lincoln's statements during his famous Lincoln-Douglas debates. While he was against slavery, he still expressed that white people were superior and would still in some fashion, rule over blacks. And that black people could not govern. He was morally against slavery, but that does not mean he thought the people who were slaves were equal.
Meta executive orders employees to love VR product
Back in the day Blender was basically a pure OpenGL program with all the controls/widgets implemented directly. I guess that's not the case any more. Does it use any kind of widget library now?
Wired.com: 20 Years Later
The bisexual thing was pretty stupid and pretty revealing how much this blog post was bullshit, there was a bunch of reason why you would pick one gender as a bisexual, especially if online dating was just to meet more of the gender you wanted.

But a bi dude, in 2010 you simply wouldn't get match with women if you write bi and plenty of gay dude would turn you down as well, so you just wouldn't bother and write gay or straight eventually.

Edit: removed today
I read somewhere (probably Raymond Chen's blog) that there were different camps at Microsoft. One recognized that backwards compatibility was a very powerful feature. The other thought that there had to be a limit, infinite compatibility was too great a tax to pay forever. The camps have traded power and influence over the years.

Personally I think compatibility has been a huge boon for Microsoft. If you need to throw everything away and start over, why would you stick with Windows?
> “I’m bisexual.” REALITY: 80% of self-identified bisexuals are only interested in one gender

This isn't the slam dunk it appears to be. A dietary equivalent would be "X% of self-professed omnivores avoid vegetarian dishes". They are open to the idea, but still have preferences. Just because one is open to the superset, doesn't mean they assign each subset equal weight.
"incel" and "black pill" terminology didn't even exist in 2010.
Ah did not know that. I thought they were marketed towards consumers.
>”That's a center-left policy at most.”

I don’t like this kind of thinking. We should be evaluating the idea on its own merit, not tying to frame it as something acceptable because it is centrist - a word which is rapidly loosing any distinction.
Broccoli gas: a better way to find life in space
August Dvorak was more prescient than we ever gave him credit for!
For myself personally I found mindfulness meditation helping with anxiety. It is however like any excercise: it does not show effects without regular practice over months. And it is not the sitting session itself that helps as much as developing a skill, and habit, of seeing your mind clearly doing what it does. That is applied outside the meditation coushion.
It just can do 4k. I’m one of these people, my only monitor is a Pro Display so I need every last % because less than 4k is unplayable on it.
On the go with GitHub Projects on GitHub Mobile (public beta)
> It means “white: having the most rights”, which isn’t the definition at all and is deliberately misleading

So what is the definition then?
Entirely possible they don't care for the page views. Don't get me wrong, I'm not defending it, I think it's a shame that interesting content like that gets pulled down but it's usually for boring corporate reasons (don't want to maintain the blog any more, they don't benefit from the pageviews) than conspiratorial Orwellian reasons.
Tesla now operating 10k+ Supercharger posts across Europe
I've been using a measly 1060 3GB for years, even Cyberpunk 2077 is totally playable.

But I mean if you only care about games which are available on console, if you prefer a gamepad, sure buy a console.
Don't pay, network! Livejournal was free for me (early 2000s, what do I know about it today), and via friends of friends feature I met my wife. Of course those relations came from people I met on IRC...
People really are this villainous in real life, and a lot of them actively seek positions of power such as this to enact their moral crusades.
HoTT?
Source or it wont be discussed.

But aside from that, and the inherent assumption that beauty standards are universal and biological which is a pretty big assumption.

A slight societal preference does not lead to the conclusions people drew from the article.

To give an example, taller men have a higher chance of being promoted. Fortune 500 CEOs are disproportionately tall compared to the general population. As a society we still promote meritocracy, and working hard. Not telling people who are 5'4 to just give up and be unemployed cause they will never be the CEO of Ford Motor company.
>Nowadays, I don't want to fiddle with Windows (which insists on forcing updates when I do power my PC up to play with friends)

Unfortunately consoles have become normal PCs in this regard - if you wanna play online you'll be forced to update the console OS and applyvgame patches.
Bandwagoning is as old as time itself.
Front End Security Primer
Not to suck you into a ten year old MMO, but Guild Wars 2 just launched on the Steam Deck, if that was an itch you wanted to scratch =]
How do you figure 20 drinks takes only 20 hours to process?

I use a BAC calculator test, for a 70kg person 20 shots takes more than 40 hours to reach 0 BAC.

(My drivers license requires 0 BAC so I’m aware of one beer taking about 2.5 hours to process fully.)
Actually, the repository contains also Go implementation: https://github.com/xwmx/nb/tree/master/nb.go
On the other hand, deleting potentially compromising stuff once it is no longer needed is really good for former clients' privacy. In case of a hack, no one will be able to dig in decades of old erotic penmanship and blackmail people.
https://archive.ph/6iL9V
Don't worry. Soon you won't even own your graphics card, you'll just rent it out from a cloud gaming platform like Stadia. /s
Most of the places in the US where passenger rail would have the highest utility are the same places where there isn't a lot of space. That being said, it's still possible to make happen with high enough density (e.g. the Northeast megalopolis, which has usable, if expensive, passenger rail).
MacBooks May Become 'Assembled in Thailand' as Apple Diversifies Supply Chain
Could you elaborate on what OkCupid was like in the early 2000s? I've only known it for a few years.
We arent gonna survive the next century if we cannot sort out our inability to build infrastructure.
> How would a "important things in the world" algorithm work ?

I've tried to figure that out myself. The best I've come up with is Wikipedia's current events page. It's not ideal, but as a bone dry, non-sensationalized summary of things going on worldwide, it's pretty impressive. Sometimes it would be nice to have more context, but the linked articles usually help with that. It's biggest problem for me is it's a bit overwhelming realizing how often ferries sink and buses crash.

https://en.wikipedia.org/wiki/Portal:Current_events
Indeed, this is not a new idea. The news here is about particular implementation for extracting passwords from QWERTY keyboards.

That said, this is not a big problem for ATM pin pads with metal keys, because these conduct heat well and so a heat pattern is hard to detect after few seconds. See: https://www.youtube.com/watch?v=PJCfTlQ82Fw
DLSS3 is an absolute game changer for games that are incredibly CPU-bound, like MS Flight Simulator.
Eh... I build a new machine about every 4 years. $1000 is still a-ok as a price point.

$1000 on a new machine will get you running basically any new release at 1080p 60fps with only a little tweaking in the settings. I usually do 4k @ 60fps with medium/high graphics on my now nearly 4 year old rig, and it's FINE.

Don't buy these stupidly overpriced cards unless you have a really compelling use case (as in - you're using these commercially) or you're overflowing with cash.
No, I didn’t change the title. Blame the submitter :)
When this happened, the nation went through a significant financial crisis consuming almost all media headlines. Injustice sucks, but potentially losing your home and retirement is probably a higher priority to most.
I have a bunch of 3090s in the garage for machine learning almost 24x7. The garage has no AC at all. None of them have failed yet.
Loneliness can make people do dumb things, like waste money on scammy dating apps that artificially block you out unless you fetch the money.
I’ve wondered about this for years. Given the obviously misaligned incentives between a for-profit dating app and its users, dating seems like a perfect area for a non-profit to operate.