skysight-inc/HackerNews huggingface dataset:
2FA is good and is evil.

Good because with a SMS you can get easy access to recover your password.

Evil because, loose your phone, loose your access to email, bank and other services.

Maybe use 2FA with at least 4 methods of RECOVERY like: password, email, secret question, OTP SMS, another secret question.

Stop 2FA with limit methods.
> Facebook added 24MILLION new users in the same period

Of those 24M users, how many of them are people I care about or want to follow? I.e. not bots, not people on the other side of the planet, not people who don't have a language in common with me, etc. etc.

A network with 10,000 users, 10% of whom are interesting enough for me to want to follow, is much better than a network with 1M users but only 0.1% are people I'd care to interact with.
What is the “video of kaia”
No, it is not broken.

You just make cloned yubikeys. You can't read data from the key, but you can initialise it with your own data and you can initialise more than one with the same payload.
It's impossible to make anything free. The likely outcome is the costs will be moved around so that its paid indirectly.
Improve Note-Taking by Organizing Notes Like Code
> I wonder if it's because Apple captures so much margin from the final product which means they can afford to spend top dollar on CPU design teams?

That's an excellent question. If I could answer it completely and definitively I'd probably be making my living as an industry analyst for some magazine or investment fund. I have a suspicion that might be right, though.

Apple and Google today, and sometimes other companies, are starting to remind me of AT&T before the divestiture. They're such big, profitable players that they can have huge skunkworks attacking adjacent problems to their core business and keep doing so in new directions.
Yet, companies just love to hire instead of retain. Take an employee who just got trained/experience and is now worth $N, who is currently making $N-2. Most companies I've worked with would piss and moan about giving that employee a raise to $N-1. They'd rather let him leave. Then, they suddenly have no problem hiring a relatively unknown employee and paying him $N+2. It's never made sense to me in all my decades in this business. Obviously value-destroying behavior that's routinely done by most companies.
> and we're still paying the costs of previous wars in the form of mass illness (both physical and mental) experienced by our veterans.

we aren't even really paying that - at least not at the extent we should be.
It’s not in my mix because it’s a fairly “big” language, which is a huge bonus once you’re proficient but makes it a poor choice for me to dive into Lisp(s). For someone else, that might not be true. But I like to be able to hold things in my head.

In the long run, CL is a great option. My theory is that it’s a place I could go if/when I’m up and running in another Lisp.
Questions for self-reflection:

Are you generally seeing your brain as a performance tool needing regular and daily maintenance?

In the time since, what have you changed about yourself in how you live, work, and play to be at your best?

Do you prioritize good sleep, eat well, exercise daily, and manage stress as the continuous physiology?

How are your social relationships? Do you use or abuse any drugs including nicotine and caffeine?

Consider that focus, attention, memory, and decisions are core brain functions. How do you optimize your best capabilities?

You are a professional athlete. Do you train and recover like one?

If you’re considering medication for (mental) health, has your doctor tested your sleep and vitamin D?
I see entire apartment complexes that don’t have recycling options at all, whatsoever.
Functional programming, as a paradigm, is way better than object-oriented programming, and also equally more complicated than object-oriented programming. My observation, over the past 30 years, is that 90+% of programmers aren't even capable of doing object-oriented programming - so getting them to do functional programming is a pipe dream.
Fair enough, but, you then have the problem of not being able to cater to people with feature phones. I think a combined email or SMS based options solve most problem cases.

I don't understand the hate for SMS, like "how are these people in tech?" -- most banks I know of work on SMS based OTP. SMS also gives you a sorr of a real identity to work with and physical location in most common cases (not the app provider, but investigative authorities if they get involved).
bridge exposes imap making it easy to download all your data using Thunderbird or another client. I don't know about "export" because imap does what I want and is supported by most providers in the same format.
> Specifically, FP requires expansive working memory,

What? FP increases local reasoning!

> in OOP one can reason from the perspective of the object

In FP one can reason from the perspective of the function?
It's typical journalistic manipulation. It's a garbage article meant to do two things. Scare people and tug on the belief, which is confirmed in these comments, that the US spends the most money on the military.
Not saying you're wrong, but what's your logic? It seems to me that control of 99% of my accounts already reduces to having control of my email account, because account creation and password reset processes depend on my email. I've never understood why only a handful of my service providers let me select email as an option for 2-step verification.
> It’s uncommon to meet an adult with such expectations

I don’t think this is an accurate assumption. Many adults probably have a nagging feeling about this version of free, I doubt most of us can accurately describe the cost (and most wouldn’t care to try).

I mean it really does “feel” free in that the costs are so abstract and externalized. In fact I’d argue that it has completely changed our perspective on pricing, value, and entitlement.

Anyways, total tangent to the main topic.
Tesla is 65 on the Fortune 500, and Twitter was ~600 before the acquisition. SpaceX is also huge, but it's hard to say just how huge without it being public. The amount of commitment and work to become CEO at a company that's even 600 on the Fortune 1000 is insane. A quick google says there are 213 million companies in the world, I think having at least two in the top 1000 counts, no?
I switched from C++ because the type of work is typically boring. Its either system level stuff, or HFT, usually some market data system or similar. Not to mention its likely a big old system with legacy code base.

Seeing the salaries now I kinda regret switching out, but the companies and business problems you get in Python & Java are much more interesting.
All these companies have someone(s) who actually runs them (i.e., the COO at SpaceX), leaving Musk with overall strategy/vision (though he obviously gets deeply involved too at times, at least he did with Tesla for a period.)
Yikes. You should get a new bank. There are acceptable places for compromising security a bit, but reading out your password over the phone and then verifying SMS code also over the phone is definitely not one of them.
Point 1 is reasonable, point 3 arguable, but point 2 is way off..

> The drop in productivity is a fake as it is still higher than in 2010 before Covid.

Could it be that we made technological progress in the mean time?

The drop definitely isn't fake (https://www.bls.gov/charts/productivity-and-costs/nonfarm-bu..., look at the blue line), and a stark break from a consistent increase in productivity that's been ongoing for decades with few exceptions (https://ourworldindata.org/grapher/labor-productivity-per-ho...).
What does gatekeeping mean in this context? Genuine question.
I don't think it is possible to simplify it down beyond what has actually happened. Hackers for China in the US fall under US jurisdiction and so they'll be treated pretty harshly. Hackers for China in China -- it's complicated, if they are doing something their government wants them to do, they probably won't be.

Then the US will try to incur some diplomatic cost for China, which does have a pretty bad reputation on this front... it's all part of the big game.
Text run by an interpreter. Different strokes.
> To note, this is as much an engineering problem as it is societal and legislative.

Yeah, it definitely is. I think there are two things that should happen.

In the short term, producers of self-driving cars (or systems) should be given immunity from lawsuits related to crashes provided that the NHTSA (or some other authority) can verify that the deaths per passenger mile in their cars does not exceed the rate for traditional cars. Once the majority of passenger miles are in self-driven cars, revoke the immunity.

For the long term, software engineering should become a real engineering discipline and we require self-driving systems be signed off by licensed Professional Engineers. If those engineers ship software with bugs that lead to death or damage, those engineers can be held responsible, sued for malpractice, and have their license to practice revoked.
Sure, let me just move my brokerage accounts to a provider that supports FIDO. I am sure that is a real thing that the free market has provided or will provide soon.

I'm sticking with Schwab for now because they are at least vish resistant. I have a 'verbal passphrase' and support will not help "me" unless I provide it.
The reality is that deep down in your soul, this is not something that you really want to be doing with your life. Unfortunately in modern society, we have to trade our time and focus, staring at a piece of glass all day, just so we can survive. It’s absolutely insane if you think about it. I’d bet that most ADHD, depression, anxiety is caused because we see no end in sight working on these meaningless tasks. My advice is to find something you love and also adds value to society. Start very small and watch it grow…
Well, the entire rest of the industrialized world was bombed to shit and the US was not only untouched but also had been ramping up production as much as possible for 5 years. It's pretty much an ideal situation for a large economy when all of your competitors have destroyed each other and now everyone has to look to buy their rebuilding supplies from you.
I like and agree with much of the advantages of FP, but I’ve never used it exclusively.

A number of years ago, we worked with a startup that was based around a new FP language, focused on image processing pipelines[0]. It’s actually quite cool. We came from a C++ background.

Learning the language was difficult, but our team was very capable, and very experienced. We did it.

But it was just too limited, and the advantages never appeared for us. We were doing it for an embedded implementation.

It was a really neat experience, but ended up as a failure. I am sorry for that, as I actually thought they had the right idea, and I think that management failure was as much to blame as technical hurdles. The language had many limitations, but we were still able to work with it. That’s what you get, with a highly capable team. The startup we worked with, had some real rockstars.

These days, I program in Swift, which has many FP features. I enjoy it.

Nonetheless, I think that many of these “new paradigms” are built around the premise that most programmers suck, and need to be forced to write good code, which never seems to work.

Companies seem to be desperate to hire crappy engineers, and get them to write good code, as opposed to hiring decent engineers, in the first place, who can write good code, regardless of the tools.

[0] https://halide-lang.org/
What if tcp/ip and the digital pangaea known as cesspool devises domestic protocols and retires tcp/ip for a national infrastructure on a modern 21st century protocol, without a billion illiterates (they can sit around all day and shake the tree for fruit and nuts)?

Most of the impediments are long gone at that point. Domestic jurisdiction/regulation has better options, customs and etiquette, similar to domestic speedlimits (that do not apply anywhere else).

Technology moves fast. Something similar to a VPN client would still have access to tcp/ip subscriptions, so online gaming and things like that could still flourish.

I don't see telehealth, remote learning and several other industries blossoming until domestic protocols are the norm.

Security with obscurity is elementary nowadays :p

Similar to phonograph, to reel-to-reel, to cassette, to CD, to DVD, to streaming, to 21st century mediums, the quality data goes with each generation. The cool music is still there
It’s for sure not enough demand to increase the production line.
It appears that German electricity is 45% fossil fuel generated. They keep shutting down their nuclear.
Do you really expect politicians to fix a technical issue that technical people don't know how to fix?

This reminds me the old quotation: "you only trust in laws and sausages if you don't know how they're made".
Rich doctors.

And relatively wealthy seniors who spent their social security going to rich doctors.
Pixel 7 Pro.

Right now, this is my only major gripe on an otherwise great phone.
Interesting. The excess deaths from graph looks to be ~500,000 to 600,000, not the 1,000,000 that is claimed.
Arguments from academic and mathematicians will/may favor provability.

Pure Functional where everything is function composition have more hope of producing a valid mathematical proof for a block of code. CS/Math will favor this over the aspects that get grouped into total programming, which often don't help provability.
I hear you. However, don't force it on me then. Why not make it optional and give me a big disclaimer that I assume the risk if not signing up for that SMS based 2FA ? We already check many boxes. happy to check 1 more.
Nobody has actually tried a concerted effort to banish SMS 2FA (that I know of). Here's how I'd do it:

1. Figure out what the alternative is ("X"). It must be one thing that is dead simple, and it must work for 90% of people without annoying the fuck out of them. "Technically superior" is bullshit, it must be superior to an industry, organization, and an individual lazy user.

2. Get a coalition together of corporations who depend highly on SMS 2FA. Get them to all agree to be involved in changing to X. There are big financial and legal implications here, this is not easy. People have probably signed long-term contracts and those will need to run out or be written off.

3. A big marketing push to tell people that you are spearheading change; SMS 2FA is old and busted, X is the new hotness. You have to convince users to give it a chance, organizations to stake their reputation and security on it.

4. An organization needs to exist whose sole purpose is to make money off the new alternative. Partly this is because orgs want to pay for "premium support", partly it's to offer indemnity to customers, partly to provide a white glove service during transition, and of course, any company that makes money off something gives it legitimacy, which is needed to make people take it seriously.

5. Get official standards bodies, the government, consumer protection agencies, etc. to all make official proclamations that SMS 2FA is a danger to the nation and should be abandoned in favor of X.

6. A long period of transition. Years. A lot of support for people during the transition. Bug-fixing, figuring out edge cases, adding support to every platform on the god damn Earth.

7. All this needs to be paid for. Get the money, get it to the right people at the right time.
Many banks already provide such possibility within their ecosystem for free. Additionally the faster SEPA payments are already mostly available, but expensive. So all the bits are already there, what is missing is the will of the banks. The situation is similar to the phone roaming fees, where heavy regulatory action was needed to provide best value for customers.
Agreed. But keep in mind that "too early to tell" is the perfect time period for people to project their personal biases onto the potential future outcomes. After all, there is no way to strongly disprove it.

I keep getting flashbacks to the frontpage of HN in the months after Zuck's acquisition of Instagram and Whatsapp. It was overwhelmingly flooded with posts and replies, all in consensus, and all in a very similar vein to what I see now with Elon's acquisition of Twitter. A few years later, both of those acquisitions (insta+whatsapp) were near-universally accepted as successful and forward-looking for the time.

Mind you, I am not using this example as an evidence of the Twitter acquisition turning out well. It totally can turn out terrible. We will have to wait and see. The point I am trying to make is that all these current speculations on the future of Twitter are more similar to astrology rather than anything substantial.
Very cool site. Thank you very much. I have always used usafacts.org to view spending but after I quick glance I think the site you linked is much easier to view and understand.

Crazy how everyone always talks about of defense spending yet its not nearly the 50% I've been told.
> How do you recover your account if you lose the 2FA device?

All TOTP apps provide backup codes and export options. Store them in my password manager. If my phone gets stolen, I just import them into the new device.

> If the service offers email or SMS recovery then it’s not any better than SMS 2FA.

I've explained this in another reply. Briefly, in some countries, losing SMS-based 2FA is much more of a hassle than losing device-based 2FA because of government and private bureaucratic hurdles.

> all you should need to do is use a randomised password generator and password manager

No complaints there. Unfortunately, my bank forces me to use 2FA and, worse, forces me to use SMS 2FA.
This is incorrect. It is gross economic output which includes investments. Investments is real net change in money. It’s not “made up”.
CVE-2022-31692: Spring Security susceptible to authorization rules bypass
Phone only 2fa is horrible if you do oversea travel and too get local SIM cards. I can’t stand companies that do this
Thanks for the tips.

Jot my email address down anyway, and if you ever get around to working on those speech tools I'll be thrilled to help.
The best about you guys is that you click on down vote without discussion or even trying to understand what others have stated. I wish you Angsthasen good luck on your further life hahhah

And @musk pls don't care about the slowdowners and the guys from yesterday, I still can help you with the range.
I view this as one of JavaScript’s myriad flaws. Adding “1” to 1 is nonsensical and the result of “11” is even more so.
Another upside of Alma is it is backed by the CloudLinux guys who have been around for a long time with a solid reputation in the Linux/hosting industry—- and I believe you can also obtain a support package for a relative pittance (obviously it’s not RHELcorp-level support, but if you require/need support, it’s something at least).

We have a couple thousand Alma 8 in production and it’s been smooth sailing.
Did they?

I know that when I did my CS in early 2000s, they didn’t even teach a specific language — you were expected to pick one up yourself in your own time.

Perhaps it’s just part of a bigger zeitgeist that people just care less about C++ than they did before, faster than the actual job pool is decreasing?
I get that not everyone does, but a large part of why I use Clojure is because it makes a whole class of concurrent designs easier. In particular, sharing that immutable data across multiple threads.

As a simplified example: one thread modifies the data, and another thread writes a snapshot of the data.

In the programs I write, it would pretty much never benefit from this optimization.
People have to get used to socialism first, THEN hit them with higher taxes after it is too late to turn back.
Snowflake elastic data warehouse architecture
Snowflake has skyrocketed in popularity over the past 5 years and firmly planted itself at the center of many companies' data stacks. Snowflake came into existence in 2012 with a unique architecture, described in their seminal white paper as "the elastic data warehouse". Rather than have compute and storage coupled on the same machine like their competitors did, they proposed a new design that took advantage of the near-infinite resources available in cloud computing platforms like Amazon Web Services (AWS). In this post, we'll dive into the three layers of Snowflake's data warehouse architecture: cloud services, compute and storage.
Per the other comment here, Duckduckgo uses Apple data.

https://venturebeat.com/business/duckduckgo-ducks-google-to-...
dating apps over phone calls is an absolutely ludicrous take that demonstrates a disconnect from reality
What is a strawman? Do you know?

So you're saying during Jim Crow people should have refused to build factories? I don't follow your point, laws which attack black people are very different from bureaucracies that require bribery to give you permits for your business. I mean both are bad, but they are very different, and Jim Crow is a thousand times worse, both because of it's basic nature and because it was the law of the land and enforced with the full power of the government (vs corruption, which is people sneaking around in violation of the law).

This is what you are doing: "So you think it's ok to just pay it when the police to give you a speeding ticket when you weren't speeding!? That means you are fine with the holocaust!"
Yeah, that's exactly the point.

If the process takes couple of days and they do a lot of communication, there is a good chance the real owner of the account will get notified and have time to react before the attacker gets access to the account.

Also, the commenters are completely wrong on that it is enough to have the email or ID to get through the process. The AWS people who contacted me required a lot more information that only the owner of the account would know.
Current state of James Webb, main technical difficulties, future after JWST and LUVOIR, possible quantum telescopes
URLScan has a private submission mode.
30% of households in the $50-75K income range will pay no federal tax. Are you defining those as "low-income households"?
I may be misunderstanding, but from the linked article:

> “We’ve returned close to $1 trillion to the Treasury over the last 10 years. We did not keep that revenue in the Fed,” St. Louis Fed President James Bullard told reporters last month.
To me it looks like Musk always intended to complete the Twitter deal and the entire bot saga was a feint to protect the deal from governments and internal actors. They had the power to do a lot of damage in the six months it would have taken before the deal closed, if they even allowed it to close in the first place.
It's a full story.
The key word there being analog phone lines. Cell phone lines, which account for 99.99999% of all phone communication these days, are IMO worse than VOIP for sound quality (though better at latency). It's weird that kids growing up in the post-landline era will never realize how clear and amazingly low-latency phone calls used to be. If two people were seated across a table talking on a landline, they'd hear the signal from the phone before they heard it over the air.
Try harder. You can run their bridge to expose imap and use any client to export your emails. Also, your info from "years" ago is out of date as they are a small company that has been working on product/features all those years.