skysight-inc/HackerNews huggingface dataset:
They weren't focused on pushing political views instead of actually working on code.

The guy who kicked them out was focused on pushing political views instead of actually working on code.

And as a bonus, the political view he's trying to push is alt-right edgelordism, which is a step on the modern pathway to actual nazism.
It is. We're getting paid peanuts compared to our American counterparts and we do the same work. What's worse is we pay higher taxes. The only way this changes is by European tech workers standing together and demanding matched salaries.
You're double-spaces are disappearing automagically

Better than any /s tag. Thanks!
The secret has been out for over a decade. Yet Amazon still get new hires.
Covid researchers combine omicron spike with original virus, test strain on mice
Potential criminal liability and resume stench. Would you hire ex scammer/ponzi to maintain your backend? I wouldn't.
I can’t help but recall this Cheyenne Dialysis satire whenever I watch Zuck lead a keynote; https://youtu.be/E4jQe9h5v5E
Sound very much like the guy who started Zappos - clearly there was evidence he was on a downward spiral but people and so-called friends around him used it scam him.
They signed something with their PGP key to prove their account was not hacked
Meanwhile, I prefer meetings in VR than via Zoom as it's much less fatiguing.
> Is there some Unix-ish tool to generate these TOTPs on a laptop? I don't like to keep the 2nd factor on a small mobile device that is easy to lose.

I know that this is not really answering your question, but most open-source TOTP apps (like andOTP and Aegis) can export all the TOTP in an encrypted file that you can save. So if you lose your main TOTP device you can restore all of them quite easily.
Agreed that the lack of docket support is frustrating given how pervasive docker has become. However I’ve been using jails[0] in my home lab for 12 years and it’s a delight to use.

[0] - https://docs.freebsd.org/en/books/handbook/jails/
You could add cooling towers and they would not have had the problem. But it would still increase the costs further to a degree that it may not be viable anymore.

The high energy prices in Germany are to a large degree political. For instance to make the switch to renewables. It doesn't mean the base cost of energy is high. It is in fact lower for the most part.

The three plants don't do too much, only when you really need every Watt of energy you can muster. Not worthwhile economically to let them run really, as the decommission needs to be reorganized. The owners of the plant weren't too happy.
everything I've read suggests that they are, in fact, E2EE

of course, they're not open source, so I'm not really going to bat for them here, but am I missing something?

https://authy.com/blog/how-the-authy-two-factor-backups-work...

https://www.ghacks.net/2022/08/10/twilio-the-company-behind-...

etc.
It's generally true to be fair, reference counting could be used for every garbage collected language (and be much simpler). The only reason they switched to more complex schemes is they're faster on average. Even smart schemes that try to remove unnecessary ref count changes will tend to underperform compared to a (well built) tracing GC. As for a reference, https://en.wikipedia.org/wiki/Tracing_garbage_collection#Per...

The point about predictability is totally valid though (and combined with simplicity is the reason many languages still pick ref counting).
I'm the same on icons vs text. I read the text label and "know". An icon is horrible as I find them meaningless, so I have to click or hover to check for tooltips.

Another reason icons suck is that different apps use the same or similar icons for different things, my memory just doesn't "click" with simplistic icons.

The old UI is information dense but easy to work with. It is one of the reasons I went to and paid for Jetbrains on my own dime, rather than using VS Code like others at my workplace.

The new UI looks nice but it won't work well for me. If they want everything to be so similar to VS Code then I might as well use that.
Did you mean "u kids?"
Yes. It had no import functionality, no Apple Watch companion, and a relatively convoluted setup process that adds a point of failure without reasonable reduction in any risk.

One would have to set a password that they then store in a password manager, that is then accessed using the same 2FA protected by the password. Plus a mandatory PIN, with the same caveats. Cyclical or duplicate authentication is simply not good design.
The first iteration of what will eventually turn into Cyberbrain Sclerosis.
Difftastic Diffing with Magit
GoPLS is honestly really good, and while I haven't tried GoLand myself, I have no trouble believing you. Even rust-analyzer beats IntelliJ Rust IME. I'm very bullish on language servers because these two (and ElixirLS, though it isn't on the same level as GoPLS and rust-analyzer IMO) are countering the common assumption that you need an IDE to have powerful dev tools.
Yeah. i mean just due to continuous snapshots. Otherwise i don't really trust it that much. It's like this outsider kid which is kinda cool. But still needs to grow up and sell it :-D
Emil has been working in Rust for eight years. Hardly a honeymoon phase.

As for your accusation of lying: I cannot imagine where you’ve pulled that from. Emil’s description of unchecked exceptions as invisible errors insofar as you can’t see where errors might occur from the source code alone is objectively an accurate and reasonable description.
Judging from media and friends who currently work there, it seems like few employees actually believe in the Metaverse vision, and that it is largely being pushed onto them by Zuck, who seems to think he has little responsibility to justify his decisions to his staff. In fact, a lot of Zuck’s rhetoric lately, from explicitly blaming lazy employees to canceling accepted internship offers, seems to be washing himself of all responsibility for Meta’s issues while demanding the kind of unquestioning loyalty that intelligent, capable folks are typically unwilling to give.

A crisis shows a leader’s true colors, and Zuck has shown himself to be a visionless bully. It won’t happen, but the best thing for that company would be for him to step down as CEO in favor of someone more capable.
Exceptions are invisible though? (unless you're using checked exception in Java, which nobody does and neither python nor C++ offer). I've personally found unexpected exceptions being thrown to be one of the main causes of unreliability in production applications I've worked on. Of course you can have a blanket catch statement so it doesn't entirely crash your app, but that doesn't compare to the Rust experience where those errors almost never happen.
If you think I'm mistaken I will gladly reevaluate what I said if you could kindly restate your position, by answering a few questions

What does separate service mean? What would Copilot look like if it was not separate?

Elaborate on "not a service on their website", as it is available and listed as a feature "Github Copilot" on their website.

Is the contradiction related to payment for the service, or just because you think it is separate?

Since I thought you were arguing that Githubs own terms prevent them from using the public repositories in Copilot, this is what I argued against.

If you think fair use is involved, then that's the end of the line. If MS claims fair use, then until a court says otherwise, it is. Anyone who thinks their copyright is being violated can get an injunction tomorrow.
This is personal preference of course, but exceptions are essentially "on error GOTO foo". They never resonated well with me either, since the control flow is muddled once you introduce exceptions.

> "invisible errors"

If you read further on you get the author's justification for this claim:

auto result = foo().bar();

> As a reader, I can't see where potential errors can occur. Even if I look at the function declaration for foo and bar I won't know whether or not they can throw exceptions [...]

Do you disagree with the reasoning reasoning this?
It's on. I just switched to an IntelliJ window that hasn't been used for a few days and -indexing!
I believe it is worth mentioning here that reading secrets from command line arguments exposes the secrets in shell history (e.g., ~/.bash_history, ~/.zsh_history, etc.), thus writing the secrets in cleartext to the filesystem. If command line auditing is enabled on a system, any secrets in command line arguments would be exposed in such audit logs too.

Further, if multiple users are logged into the same system (perhaps an unlikely scenario for most people), then secrets in command line arguments would expose the secrets in the output of ps -ef too thereby exposing the secrets to other users.

By the way, I have a similar script at https://github.com/susam/mintotp but it reads secrets from the standard input (as opposed to reading from command line arguments), one secret per line, and outputs TOTP values, one per line. Most of what this script does can be done with oathtool too and there is a section titled "Alternative: OATH Toolkit" in the README that documents this in detail.
> It's very obvious from enormous numbers of examples that current AI systems are capable of learning much more abstract features of human culture

This doesn't seem to translate well to code. You can't copyright 'rembrandt's style', which is what dall-e and co learn from analysing those paintings. But what copilot gives you is a sizable chunk of code. That code is (mostly) exactingly precise: It's not like the AI learned a style and recreates the style. It learns what you intended to do and then verbatim copies a code chunk in. I'm pretty sure the AI part comes in to determine what it is you were likely trying to do, so that it knows which code to copy. Not to generate the code out of the AI model. At least, that's how I understand it works.

That is the fundamental difference.

> OK, if you said "what word comes next? MR. AND MRS. DURSLEY OF NUMBER FOUR PRIVET DRIVE WERE PROUD TO SAY" ... same thing

Let the AI fill in the rest of that sentence and we can debate whether that is copyright infringement or not. However, if the AI system is capable of finishing that sentence, it can presumably fairly trivially be asked a slightly different question. Instead of 'finish the sentence', how about: "Suggest the next likely sentence". That system would presumably generate the next exact sentence straight from the book, and keep going and - voila you recreated the entire book.

Which is clearly copyright infringement.

AI systems have a 'volume dial' to configure how much they mix and match. Turn it down low enough and asking DALL-E for 'a girl with a blue bandana and an earring in the style of Vermeer' will just give you a copy of Girl with the Pearl Earring, reproduced sufficiently accurately that it's trivially a copyright infringement (let's leave out the notion that the painting has moved past its copyright date of course).

Point is, for copilot, the volume dial has to be kept extremely low, because you can't just mash 5000 snippets together, unless those snippets are identical. Which is its own intriguing copyright infringement conundrum (500 artists each individually paint the same thing, and they can each prove they weren't influenced by the others, thus, not copyright infringement. Then, you reproduce the averaging of the 500, which results in yet another painting. Did you just infringe copyright? Surely the answer is 'yes', but whose copyright did you infringe? All of them? Is it 'yes'?)
Admittedly I do update my plugins, but I've had ridiculous levels of breakage with CoC
OATH Tookit provides console tool for generating TOTP codes: oathtool.
https://www.nongnu.org/oath-toolkit/
Aegis is another open-source option. It can import the andOTP format and can also export the keys, but has the advantage of being able to use fingerprint unlock.
In physics there are many universal constants or material constants with ranges between 10^10 and 10^40, and their reciprocals are between 10^-10 and 10^-40.

Some of these cannot be represented in single precision, while for the others one or two multiplications or divisions are enough to cause underflows and overflows. Such wide ranges are unavoidable in complex physical simulations, because their origin is in the ratios between quantities at human or astronomic sizes and quantities at atomic or molecular sizes.

Single precision values are perfectly adequate to represent the input data and the final results of any computation, because 24 bit is about the limit for any analog-to-digital or digital-to-analog conversion, and the exponent range is also sufficient for the physical quantities that can be measured directly, but when you simulate any semiconductor device and even when you simulate just an electrical circuit with discrete components, it is very frequent to have intermediate results with values much outside the range that can be represented in single precision, even up to 10^60 or 10^-60. When computing a high-order polynomial in order to approximate the solution of some problem, some intermediate values may be even outside that range.

In theory it is possible to avoid underflows and overflows by introducing a large number of scale factors in the equations, in appropriate places.

However, handling those scale factors in a program is extremely tedious and error prone. The floating point format was invented precisely in order to avoid the need of dealing with scale factors. If someone introduces scale factors in a program, they might as well use fixed-point numbers, because the main advantage of the floating-point numbers is lost.
Well it's either an overestimation in production or an underestimation in demand. Or likely both to some extent in this case.

I bought a few of them a while back and have only recently managed to integrate one of them into a really basic project. They tried to make some kind of middle ground between an ESP and an Arduino, while providing an incredibly buggy MicroPython build and no Arudino IDE integration. Some of that's been corrected, but it still remains this all rounder thing that's never the best choice for the application.
Yes but all of that is a good idea to implement on a new project starting today with lots of money and a big competent team.
Migrations are hard when you have to fight with the project management triangle and then realize that the migration you're doing is on a system which is old, bespoke or not supported. Or all of the above.
I like your optimism, but it's always hard work. The most important part of all processes is knowing when you're past a point at which you cannot turn back from.
Not sure when you were last in the UK but almost every village[1] has a skate park now.*

1. https://www.skateparks.co.uk/park-finder/

* slight exaggeration
YouTube Ends Limited Test That Locked 4K Video Behind Premium Paywall
Good News, the World Is Getting Better
If you want to use Rust for web development (server applications, APIs...), have a look at the upcoming book "Rust Web Development" (print around mid November):

https://www.manning.com/books/rust-web-development
Apple Restores Russian Social Network VKontakte and Mail.ru to App Store
"you don’t have to worry about phishing" .... TOTP is also vulnerable to phishing, same as SMS.
Or use a desktop!
>>nvidia RTX 4090 still out of stock in most places :|

I mean, I just don't think they made that many in the first place. Overclockers UK(one of the biggest online electronics stores in the UK) was very upfront with how many units they are getting from manufacturers, and they got like ~500 cards total for launch. That's nothing. So of course it's out of stock, even if only a very limited group of enthusiasts is actually interested in buying one.
Even multi-hop is not enough to hide your IP. There are timing correlation attacks, you need to build a system with jitter and randomness to somewhat hide your IP. It is a very complicated topic. You cannot hide your IP by just chaining two VPNs.

TOR isn't adequate too, far too many state actors maintain the nodes.

Only option is to use a public WiFi. There are still issues with public WiFi usage but it is still far better than other options listed.

That being said, Multi-Hop VPN is more secure than single hop as the article claims.
Do those firewalls block all network activity? Would a DNS lookup trigger an alert?

I had an application that was phoning home and after some digging I found that it was doing so through DNS. It would lookup something like $KEY.some.domain.com and the response would decode to the value.
I wonder, is anybody training an AI to transcribe handwritten actors’ notes on movie scripts?
I got mine (and it randomly died so they sent me a second one). You still haven't received your first one? That sucks, they're generally very good devices (minus them randomly dying, I guess).
Yeah, I wouldn't hire someone from a company who caused mass genocide and ran a fake news propaganda machine and then and profited billions from it [0] and is also using Rust as well then. /s

[0] https://www.globalwitness.org/en/campaigns/digital-threats/r...
I sometimes wonder if these types of administrative systems, which are really important for the well being of people and the development of society as a whole, are made to have a horrible user experience on purpose.
That's impressive... If I randomly stumbled onto it, I wouldn't even recognize that as code!
> I always found it very difficult to work at a high level of abstraction in C++.

That's the opposite of my experience. The ability to abstract is exactly what I miss since working with C#, with much useful stuff removed to please incompetent developers and their managers.
I don't know how people can make these strong statements about anything in law.

Disney have won cases in court were some artist has drawn their own version of Mickey Mouse, similarly try writing a story about some kids in a wizard school and you need to be extremely careful not to violate (or at least get taken to court) for Harry Potters copyright.

I'm pretty certain image production models have produced some images which would very likely to be judged to violate copyright (a much less strong statement).
Either the user-base of HN suddenly became a bunch of unethical folks who don't CARE about copyrights, usage licenses, authorship, or the future of open-source projects,

OR

This place is currently crawling with Micro$oft employees who have been instructed to swamp the place with disingenuous comments basically amounting to:

1) "fair use" is anything I want it to me

2) gimme your code NOW, because I want it, and it's MINE

3) get used to habitual violation of licenses as the new
normal

4) you are ruining progress! harming kittens!

I can't see the actual HN crowd all suddenly being copilot users and fans, so that leaves me to conclude the latter.

I find Microsofts continual business model of evil to be rather threatening and annoying and they need to be checked, as they have only gotten worse with the decades. They abuse their market position to stifle any and all tech innovation.
Break them up already.
On the upside, the name tells you what it is and does.
Mautic, vtiger, Odoo, maybe SuiteCRM?
pass-otp[0] integrates into pass[1] nicely. It's about as unix-y as password/secret management comes in my eyes.

Alternatively, gopass[2], which re-implements pass in golang, has this functionality built in[3].

[0] https://github.com/tadfisher/pass-otp

[1] https://www.passwordstore.org/

[2] https://www.gopass.pw/

[3] https://github.com/gopasspw/gopass/blob/master/docs/commands...
> certainly much better than SMS. And it’s much easier to implement than SMS as well.

Certainly it is, and where sites have it available I prefer to use it over those stupid SMS codes. But -- having worked closely with marketing/UX teams in the past, I'm fairly certain the hurdle isn't technical, it's that most users can at least sorta understand 2FA in the form of an SMS message, not so much using a dedicated password manager app that keeps track of TOTPs. I like to think this explains why lots of "big" sites that deal with customers from all walks of life (like banks and utilities) offer, at best, SMS 2FA.
> from entry level roles all the way up to vice presidents, the lowest attrition rate for one of the company’s 10 tiers of employees was almost 70 percent, with the highest reaching a staggering 81.3 percent.

How long till they run out of people? This can't be sustainble in the long term.
Sounds a lot like Silicon Valley circa. 1999
I don’t feel that needed to be stated personally. That’s true of pretty much anything.
Seems like bluff
Thanks (O/T: copy-pasting text into vim to even read TFA high times to flag ad-ridden, basically unreadable content, or not link to it in the first place)
> For one, there's a saying within biker circles, 'loud pipes save lives'

And believing that then they start overtaking on the right, or between two cars, or not wearing a helmet or protective clothes, etc.
FedEx is shutting down its robot delivery program
As far as I can tell it’s any and every network lookup or request. Frankly, ever since I started using them (several years ago) I’ve only been feeling more and more that it may be the only way forward.

My data isn’t up for grabs for profiteering/aggregating/snooping on, sorry.

EDIT: Your comment made me curious so I will do more due diligence and return with an update.

EDIT2: So after not that much investigation--mostly just rereading what's shown on their project page (https://github.com/henrypp/simplewall) -- it confirms my belief that this adequately shields me from any and all networks without my knowledge or consent. In my opinion, it's kind of dystopian that The Industry basically operates on the assumption that most people will in fact just not care, but maybe more would care if it was presented as more of a choice than a concession.

Like, I don't mind sharing for the purpose of analytics. I read through privacy policies (is this being an adult?) kind of frequently these days, and as much as I hate to say it, Apple is still probably what I consider the poster child for big tech data privacy, they are doing the absolute bare minimum by clearly and plainly disclosing what data is used for what and how, and it allows my mind some rest.

EDIT3: Proof shown here https://github.com/henrypp/simplewall/issues/980
Our typing class in high school taught two spaces on old apple 2e computers.

The issue was that the teacher was still using a book out of the 50s.
They definitely do for in-app and web payments.

Not sure about the name actually, but they do get the email address - that‘s how they were able to email me an invoice without me entering anything.

That said, my my email address does contain my name, and while I could configure an alias in my Apple Pay settings, I doubt that too many people would do so. Would be a nice way for Apple to use their email privacy relay feature.
> If you make walk-able, mixed-use neighborhoods there is no guarantee people will use them.

Plenty of evidence exists in 2022.
Book a flight to Paris, Barcelona, Berlin, Milano ,Casablanca, Tunis …

I don’t know Asia or South america but I’m sure you can find some example running in production right now.
Someone just paid over $39,000 for a 15-year-old iPhone
I'm really impressed at how this article uses exactly the right amount of detail to illustrate the points it's trying to make. I've read too many that either have too much or (more typically) too little. That's a really difficult balance to achieve.