skysight-inc/HackerNews huggingface dataset:
Access to my HSBC accounts is via a digit-only pin and SMS (to the same phone the app is running on) for the second factor. The pin used to be max 9 characters alpha-numeric, which is still bad, and when they changed it (earlier this year) to be shorter and numeric only all the communications were are great pains to assure me that things are just as secure as before… (Which by some definitions may be true: it went from not secure enough to not secure enough).

Luckily for me the only significant thing I have with them is a mortgage that will be paid off in January at which point I'll be closing all accounts I have with them. In the meantime I'll keep pushing about it in every relevant thread in the hope someone high enough up there gets wind and is embarrassed enough to make change happen.

FirstDirect is very similar, though those accounts at least still have 9-character case-sensitive alphanumeric passwords not just a numeric-only pin.
This is a somewhat myopic and outdated description of what "code" or "software" is. I'm writing an article on this, but software is a much broader idea and domain than just getting computers to do something. At a minimum, it includes getting a computer to do something, communicating between humans and not humans and computers, and encoding a domain. All this adds up to software being "executable knowledge", which makes it far more powerful than thinking of it as just bits executing on a machine. Thinking of it this way also highlights all the problems with software, because the process of system design and encoding knowledge is downright hard and not something humans excel at. Getting a computer to do something is rarely the hard part aside from specific instances where pure performance is necessary.

It isn't surprising to me that the best software developers I have met have been those who either had no computer science degree or got it after having some degree or major interest in another field, typically a liberal arts or science field. Liberal arts are actually the study of systems in disguise because of the need to connect together various ideas, events, etc. that do not necessarily have clear delineations or relationships.
The Black and Decker story is from 2013. HSTS was rare back then.

AFAICT the site didn't enable HSTS until late 2018:

$ curl -Lis 'https://web.archive.org/web/201810/https://www.blackanddecker.com/' | grep -i '^x-archive-orig-strict-transport-security:'
[nothing]

$ curl -Lis 'https://web.archive.org/web/201811/https://www.blackanddecker.com/' | grep -i '^x-archive-orig-strict-transport-security:'
x-archive-orig-strict-transport-security: max-age=86400 ; includeSubDomains
They want to make money out of your browsing history, they don't it to become a cost center.
Thought experiment: if Apple didn't provide an App Store on iOS, would you argue that they must provide the capabilities for others to build and deploy App Stores? What would be the argument to force them to do that?
In future one can only do API calls via a Google owned firebase like environment. Your services need to run there and each service is reviewed and constantly monitored by smart AI bots who can detect abuse and flag your services as dangerous if needed and in result reject and remove your app from the app store. You can appeal against very smart AI which sometimes tell you what to do to resolve the issue by sending you a link of 1000 pages of terms and conditions. Google finally added a personal contact phone number for a developer. You can request support 24 hours per day. The extremely intelligent and responsive AI will solve every issue for you.
The same way shady financial stuff won't pass audit by the big four.
Multi-cellular life has only been around for 600 million years or so.
Selling all your lenses for a loss just to buy mostly the same thing sounds like a pain to me. Adapters are hit and miss too, even when on paper they should be 100% compatible
Can't wait for the moment when my text cursor does a phantom braking while I'm writing a tweet.
Thanks for the kind words, it means a bunch to me and other devs that worked on the game!

I cannot comment to why they decided to switch to Unreal, but it is one of the reasons I left. I hope it works out for them but I wouldn't hold my breath waiting for the next game release.
Yes. In particular a 'lightweight' variant, cf. https://en.wikipedia.org/wiki/Lightweight_markup_language
Good stuff! more people working on this space is a good thing
Anecdotally, my local DJ equipment/repair store said the same - apparently the build quality of the mk7 isn’t as good as the older models. Unsure how true that is, but similar to many in this thread I have a pair of 1200mk2s which must be 30+ years old (I got them second hand for a steal) still going strong
> If normalized, it's part of their expected compensation package.

But it already is normalised. I think this is morally difficult because it is customary, expected and if you refuse you will not get anything done but also won't change anything. So what have you gained?

I don't think you can fight corruption this way, you just can't do it alone.
Wayne Gretzky
Every algorithms integrated in Ikomia HUB keep the License defined by its author.
For example, YOLOv7 is GPL3 and our algorithm "infer_yolo_v7" is also GPL3.

https://github.com/Ikomia-hub/infer_yolo_v7

Algorithms in Ikomia HUB are not in Ikomia API code, they are used by the API.

So if you use Ikomia API (Apache 2.0) with YOLOv7 (GPL3), your workflow becomes GPL3.
Show HN: Vers – Social Media as It Should Be
There are different kinds of regulation. They don't necessarily need
to be prescriptive or to test static quality in the same way that
drugs are regulated. (But I think that some security people would like
them even less than flat-out being told what code to put in their
sites.)

Instead of regulating the product, you regulate the processes around
it. Why?

The assumption is that users are stupid, but security people are
clever. A side-effect (lemma of this axiom) is that security is for
control rather than safety. Ergo - safety emerges from control.
Security becomes power.

But as we see, frequently mother does not know best. The fact is that
some security people are stupid (it's difficult and not the highest
paying job out there) and a few users are actually very clever. Now,
if the clever ones are malicious (bad hackers) you've got
problems. But in reality far more clever users are benevolent and
would choose to participate in a "security culture" if it were
encouraged rather than imposed on them like children. It's their data.

As it stands our security culture leads not just to dismissive
authoritarianism but unassailable systems that may not be questioned.

Regulation that puts much more power into the hands of all
stakeholders can be a great alternative to ever more compliance and
auditing imposed top-down (which is really a weak solution to a
dynamic problem: security changes almost daily).

Consider a regulatory mechanism like the GDPR that allows users not
just to know what data is held, but how it is protected and to
request (with some force) changes to that protection.

Taken to the limit, let's call it "User Side Security" (USS), we build
interfaces so that the user gets to decide their chosen security
solutions (obviously compartmentalised so as not to affect any other
users assets or choices).

(I feel a tremor in the Force, as if a million security people
suddenly cried out in horror then suddenly fell silent.)

But this would provide the bottom-up incentive for firms to get their
PII-security systems back on track without Byzantine top-down regs
which I guess the industry fears more.
Ask HN: How does a software engineer bring to life a hardware project dream?
I am a software engineer and don't have experience with developing hardware projects. I have an idea for tablet and mobile device that will be environmentally friendly and free of bloat and attention seeking apps.

The hardware idea I have is not new. It was suggested earlier by hardware industry but it was not picked up by the ODMs for lack of excessive profits.

This idea reduces the hardware consumption by consumers that they have to do now i.e. frequent upgrade s.

If I have an idea for a project to build devices to reduce hardware waste and improve the situation on the software front at the same time, then where do I start? Where do I meet like-minded people with whom I can work to make this dream a reality?
> That points to a lack of developer resources.

No, that points to prioritization issues. Many other features were developed and added over the years, but backup was not. It's not an accident, it's a result of multiple decisions where backing up user data was not seen as important.
Absolutely. This is partly a UX problem and partly user education. But yeah requiring all permissions upfront was a terrible model, but that was long ago.
Full recovery to what, stagnation? He is just taking the risk of trying to leap forward in addition to just waiting - FB currently is stagnant, unfashionable, lame, boomer network for old people and ads and it will be like that for a long long time.

I'm 100% sure it will be "fashionable" again but the question may be if it will be able to stay alive and able to adjust long enough.
I'm surprised they aren't trying to morph one of messaging apps into western "weechat"
Yep I've tried several solutions but since moving to Joplin I haven't felt the need to try another software.
I don’t see much issues with privacy or security with a service like this.

They don’t get traffic going through them. They mainly exist to point to an IP. With enough data they have information on how an ISP rotates IP’s and who they’ve gone to.

In your case, with a WireGuard VPS, all traffic goes through the server. That’s a very different setup.

In their case, a request goes to them at a regular interval and they update the IP the dns record points to. That’s it.

When someone requests the domain, they simply respond with an IP. At most, if there’s little caching, they could get frequency of usage.
If Amazon was remote and GoDaddy was in person, he suddenly would have been a bit more accepting of remote I bet
This confirms that Jack Dorsey will be back on top
https://www.nature.com/articles/s41467-022-32652-y

Presuming I understood correctly.

Another system used a hydrogen-side electrode made of foamed metal immersed in water, where the surface area presented to the water was therefore very large, and the small pore size limited the hydrogen bubbles' interference with contact between water and electrode surface.
This article is a polemic. Don't take it personally. Enjoy!
Also it's clear they are well versed in the topic. You may not agree but it is great food for thought.
if you want to rely on takeout, you better not have uploaded youtube videos with the same account.

even tho you get a lower quality than what you uploaded, takeout will contain those as well, and trust me it balloons the overall download.
> but by fudging some numbers

And this is the corruption mentality right there.
The article (like most RISC hit pieces) neglects the implicit value of simplicity.

Complexity needs to be justified, and the article does a very poor job there.
Sounds like you might have some anecdotes to share :-)
Bringing a dynamic environment to C: My linker project
Information overload, the early years (2010)
This is one of the important problem i have seen in many beginners.
Is Japan the exception?
That has more to do with the census sucking. There's no option even for Indian! So if you grew up in Bangalore, your options are "white" or "asian" I guess? What if you're an Australian Aboriginal? or a recently-contacted tribe from New Guinea?
>It kind of pushed their own definition of what RISC is.

That's intentional. A straw man tends to be easier to attack.
I'm curious, what was the typo? The grammar hinted at German, but that's all I can see.
I recall one of the Ars Technica journalists saying that they use markdown when writing their articles.

Even things like Twine (interactive fiction text adventures) have a Markdown-like syntax.
While I agree with many of the points, the proposal that we need a a new standard based on HTML is a bit weird. I guess the author hasn't read the HTML5 spec which is a total monstrosity and suffers from problems similar to Markdown. If you want a document format where essentially every document is valid, you have to specify each and every corner case which gets messy very quickly. Just look at the HTML5 spec. To my knowledge, there isn't even a formal, unambigious Markdown spec. CommonMark comes closest, but it's still a mostly informal spec often based on examples. In my opinion, the best option is still XML, or better yet some slimmed down version without DTDs and with a saner solution for namespaces.
>$150m was a big money in the 90s. More so for apple in that situation.

It was ~2% of Apple's 1997 revenue[1].

[1] - https://money.cnn.com/1997/10/15/companies/apple/
and there you have an unanswerable question! :-)
at an atomic level in computing, as others have said, it's a stream of ones and zeroes..
after that everything else is implementation, i.e how to interpret, use, store etc.
In fact it's one of the "bug bears" in computing that there are so many "data format standards" (used loosely not definitionally)..

or the age old joke:
"The good thing about (data) standards is there are so many of them!"
This is awesome. I desire a high res skybox at the entrance so I can take one look back out onto the Central Field before I delve inside. It would add to the experience!
Great job though I love stuff like this.
What’s with the sink?
I build a fanless (Linux) desktop with the mainboard from a Ryzen mini PC[0] and an after-market fanless case[1] designed for it.

Works like a charm. It's absolutely silent and the temperatures are actually better than with the stock Asus case.

[0] https://www.asus.com/displays-desktops/mini-pcs/pn-series/mi...

[1] https://www.akasa.com.tw/update.php?tpl=product/product.deta...
A lot of sites I visit pop up a box that says, "We noticed you're using an adblocker." I'm perfectly fine with that. My response is to immediately close the tab and move on to other content. They've let me know that they don't want to serve me content that's ad-blocked, and I've let them know that I don't find their content so valuable that I'll suffer the rude interruption.
I didn't really read beyond that reflection:

> This is real. A Scrum Master in ninja socks has come into your office and said, “We’ve got to budget for apps.” Should it all go pear-shaped, his career will be just fine.

It's funny how organizations manage not to fall apart with so many people with so different motivations. For example, an SWE can despair in 2022 because they work on Openstack bugfixing or on mainframe JCL2 batch jobs, but here this exec worries about his position being undermined by some software project.
Multiple Aggregates in One SQL Query
> Is it weird to say that these issues are too stupid for software engineer licensing to be a good answer?

It is. If the problem keeps happening it's proof enough.

> I don't see how licensing enforcement is going to go better

And yet it worked in many other domains.
There's no routing of the actual traffic, only basic DNS forwarding. Of course it's not meant for business production services, but it's decent for homelab. Especially considering for how long has DuckDNS been operating.
I live in NZ. Our meat is mostly grown in open fields. Except chickens. They get it rough.
> I've ruled each of those out for good-ish reasons.

And what would those reasons be?
The article actually fails to answer the question in the title. It's a long list of reasons the author believes it should not be popular. But it clearly is massively popular. So maybe there's something wrong with his line of reasoning?

Anyway, Markdown emerged out of the Ruby community. So it's not strange that there is no specification. Ruby is a dynamically typed language so, ruby programmers tend to not specify a lot of things like types or schemas. And indeed the Ruby language it self is a bit under-specified. The spec is simply "whatever ruby does is what it does", which sucks for alternate implementations like JRuby. The same is true for Markdown. Whatever the original markdown library does was the spec. And it has since been loosely implemented by others doing their own Markdown derivatives. Like the widely used Github flavor. Which is also a ruby based implementation, I think. So it is similarly under specified.

However, the lack of a specification is not much of an issue since markdown is used by humans to be turned into something human readable with some html formatting. Either it's readable or you fix it. And it's simple enough that any markup typos in markdown are usually not that big of a deal. The main goal of Markdown is to get out of the user's way so they can focus on content rather than formatting.

As for editors. There are plenty of editors that support markdown. Many of them even have live previews. So, it's great for that.
I run a pretty-much-fanless Arch Linux desktop. It’s a Lenovo m920q I bought second hand, ex lease on eBay. Super simple, no fuss at all. Comes with remote KVM in the motherboard. (The security implications are totally probably fine)

It’s totally silent in normal use. (Go web dev mostly)

Occasionally the fans will start up to alert me to the fact that I’ve landed on some social scummy website that’s crammed with 20 banner ads on the one page and is probably trying to mine something in the background as well. I shut that browser tab and the noise goes away.
These are all the correct answers. Amazing summary - Technic is indeed the only way to go for turntables.
India got rid of it in 2015.
They're pretty explicit in the email, the service has to be related to Reddit.

OAuth login to edit all your comments in a react CMS? OK. OAuth login to to update you server dynamic ips? Not really Reddit focused.

Really more of a failure on the API key generation page where you should (perhaps now do) have to click a "Yes, my thing extends or uses data from reddit" to get a key.

What other auth system should they have used to allow 3rd party login, that some how also handles site intent?
So, it's still pending ?
> I can say that the Unity runtime abstracts dozens of platforms' (mac, windows, etc) various APIs, today

I hear you. It's the best solution, and all credit to unity and others for doing that work. That said, I don't like it, because it's almost always a bad upfront tradeoff between fiedlity and velocity. Moreover you just end up with another layer in the stack, when we should have fewer. Half the time these things are broken, in my experience, not because of any fault of the middlemen, but because Microsoft, Apple or Google changed something in their proprietary, poorly documented code base.
> While the Reddit userbase does skew somewhat towards the tech-y, there's also loads of non-tech folks on there.

Every time someone tries to do a list (eg cooking recipes) they fail hard, because both the need to have a two newlines for a one newline and a unnumbered list for a numbered list is thing which surely is out of knowledge of Average Joe. Even consulting a help doesn't help sometimes.

"New" Reddit solved it by having a WYSIWYG editor, but even then things get out of hand sometimes.
There is not only attack surface in the equation. I guess the basic calculation is something like:

(attack risk x attack surface x attack damage) - (security costs) must be greater than 0.

The damage you get when your security token is a piece of immutable data is relatively high. With a mutable password caught by phishing, you can retain/recover your accounts / machines and data and hopefully just clean them up. Breach closed. With immutable 3d data of your face... what do you replace it with, once it got stolen / reverse engineered?

I'd also like to point out that attack surface may be higher than you think for face recognition. The attack vector for any of your online accounts is ... your public profile picture.

I think your points are valid points regarding the current situation. However, I think that some practical and low-entry barrier automation around passwords and TOTP would be far more secure than biometrics.
Also, there are people at Apple that still think that I remember my Apple ID password and can type it into a modal popup on an iPhone without accessing 1Password.

For something as important as Apple ID, how can Apple expect me to use an easily-remembered password?
Exactly. This is what the rest of the world usually says on the first encounter with "tips culture" in the US.

As I see it, cultures are different and one thing that is considered an absolute taboo in one culture might be customary in another. Tips in the US are customary yet at the same time they are offensive in Japan. Bribes are killing the economy in my country yet it makes economy moving in India.

PS: I personally hate corruption more than anything.
Then what happens when one party controls the Senate and another the Presidency?

Which has happened quite often?
I remember dropping my bag at a luggage store at the big train station in Mumbai. Bags needed to be scanned before being stored, not uncommon. Except the scanner was on the other side of the station.

So I was sent off and queued up to get my bag scanned and more importantly get my receipt stamped to say it'd been scanned walked back through the crowds where I could have done anything with the bag - to the luggage drop where the attendant checked that I had the correct stamps to say it had been checked! No seals on the bag, nothing to stop me giving them a different bag, just the essential stamp on a bit of paper!
My biggest concern would be someone scanning CT logs to find hosts with hobbyist grade security. That’s not meant to insult hobbyists, but they might be a juicy target for immediately exploitation after a zero day hits. To be clear, it’s the same for any well known DynDNS domain.

Besides that, I looked at every DynDNS system I could find back in the summer. There were only 3 that I was happy with; Hurricane Electric, Google Domains, and a pair of self hosted Bind servers.

If you want the best, simple solution, and it doesn’t need to be completely free, register a domain with Google domains. If anyone knows of limitations, let me know.

Namecheap maxes out at 150 DynDNS hosts :-(
This is basically the "seize the telephone exchange and TV station" phase of a coup, where ideologically driven people can be replaced with different ideologically driven people. Musk himself has described his ideological motivations.
Yeah, with a 9+ year old server, i wouldn't trust those disks, plus the amount of power...
> Becoming an IAS/IPS officer is the most prestigious thing you can do as an individual.

If you are in UP and Bihar. That's not true for the rest of the country.
All complaints basically seem to boil down to these two:

* It's not standardised

* I don't like using it

I think the two big advantages of markdown are simply:

* It's readable without having to parse it

* A lot of people do like using it

Replacing it with HTML, as useful as HTML is for its intended purpose, sounds like an incredibly bad idea. There's a very good reason why markdown won: its readability. Except for tables, but that's why people don't use them. It's not meant to be suitable for every conceivable purpose, it's meant to be readable.

Using a rich text editor for it sounds like a bad idea to me, because you don't know what the raw text is going to look like. And yes, I do type > for blockquotes. It's not very hard to do.

Should we have a single standard for markdown? The lack of one seems to be the primary disadvantage of markdown, but personally I'm not sure it really needs a standard. It's pretty simple and I don't think it really needs to be portable. But it would certainly be nice to have a standard.
I have almost the same setup, but with Linux/Fedora instead and the Ryzen 4750 without 'G' but a card.
I even made the same thermal images out of curiosity :)
Is this a move to cold storage or something else?