skysight-inc/HackerNews huggingface dataset:
Yes, that's how I explained it myself as well - a lot of people have life and jobs they hate, they're overstressed and here is a cheap and socially approved (pressured even) way to deal with it.

I had a programming as a hobby since age of 6 and non-controlling parents, so I was good.

Caffeine I don't care much. I love culture of coffee, and enjoy good coffee. The latest metastudy I read on coffee concluded that there is no detrimental effects, unless excessive consumption or special conditions. Seems safe to me. I also tried 3 months off the coffee completely and it was incredibly easy switch - no issues at all.
If you can just tell the AI to create something, so can all of your customers, and they know exactly what they want from it.
> > If I use four unicode code points outside the [multi-language characters table], my password is probably very safe already.

> Security through obscurity. This is safe until everyone does it. It's not a strong password by virtue of being short, it's strong because this is impossible to input and so nobody uses it and so it doesn't make sense to guess. But you bet that if you ever log into a compromised system, use a phishing page, or a site stores and loses your password in plain text, the gig is up and it's known that cracking u/alanfranz's passwords is a matter of trying a few random unicode characters instead of letters.

This is plain wrong. The Basic Multilingual Plane consists of 65536 most commonly used codepoints. If your password contains a character outside of the BMP (e.g. an emoji), the attacker has to be bruteforcing over at least one other plane in addition to the BMP, which is 2*65536 characters = 17 bits of entropy per character. 4*17 = 68 bits of entropy is plenty. Even if everyone included an emoji in their passwords, this won't become any weaker.
> But if you're in Texas, Florida, Alabama, or 25 other states? It's absolutely legal to be fired for being gay.

Recent Supreme Court precedent says that discrimination by sexual orientation is a type of discrimination by sex. If that's what you're referring to here:

> Title IX was decided in favor of making orientation a protected class in education in 2020.

The result wasn't that orientation is a protected class. It was that discrimination by orientation is an example of discrimination by sex, and sex is a protected class. So if it's not legal to fire someone for being female in Alabama, it also isn't legal to fire them for being gay, since that's the same thing.

But none of that would apply to the first amendment, since it's statutory and the first amendment is constitutional. Is there a distinction between race and sexuality relevant to the first amendment?
The author's point is not that you should use a short unicode password, but that the key thing to focus on is password strength, not length. That is, use a lib that enforces password strength -- he is arguing -- instead of focusing on arbitrary and possibly wrong constraints such as "password too short". Strength is going to take care of it if it really is too short, anyway.

The author is also aware that we've known these things for a long time now -- he opens his article by complaining about this and how slow some websites and apps are at catching up, in fact.
https://justine.lol/pledge/
I was looking, last week, what to recommend to a customer and ended up at https://github.com/zxcvbn-ts/zxcvbn because the one from Dropbox seems to be completely abandoned and does not recognize e.g. 2020 as a year.

Other alternatives are also welcome if there is an even better one I missed! This was the best password strength estimator I could find.
In the b2b world it's basically impossible to improve password policies. Most of the onerous examples only exist because some other entity (a customer, insurance company, parent company, etc) has demanded them. The problem is that the demand isn't being made by security professionals, it's being made by risk management people who are only interested in a simple way to mitigate risk - it's simply much easier for them to reach for an obvious and easily testable policy with character counts, expiry, no autocomplete, etc.

Even if you manage to convince one of them to accept something a little more forward-thinking and less user-hostile, it's only a matter of time before Big Customer X comes along with their antiquated requirements and you have to choose between doing what they want or losing that business.
You can have different sync ids on xbrowsersync for completely isolated bookmarks.

As for "staring at work bookmarks" - put them in a subfolder.
“(26+10)*12” is irrelevant

Please Refer back to “If you take the most popular 1M passwords and attack the master password…”
Blink and Gecko don’t fare as well as WebKit does when it comes to efficiency which would suggest they’re making tradeoffs favoring things other than battery life.
Although the author focuses on organization building and finding product market fit, it's obvious that this thought technology applies more generally. Does anybody have real-world examples of staring into the abyss in very different fields? Academia, painting, bowling?
Maybe you should be running in what those git remotes are running in (hint, something Unix probably in a container).
Nice to find another life-long teetotaler. One of the most infuriating things is how confused people get when they hear that I don't drink, I have had people ask me how I am "able to have fun" and other similar things. I don't understand why people need to be in an altered state to have fun, I have plenty of fun and it seems like alcohol brings a lot of trouble. I'm not against alcohol, I think it can be used in a moral and responsible way, but the widespread dependence for social interaction is concerning.
How liberal is California though?

People vote for the Democrats, sure, but do the Democrats do things to help the poor or the rich there?

Or is a liberal vote one to give nimbys the power to nimby?
Yeah, I didn't mean the specific drug. I imagine that habits generally work by needing some chemical to act as a reward to reinforce it, maybe different chemicals for different habits. The idea of forming a good habit to preempt a bad habit with something that will block the reward chemical, whatever it is for the bad habit, is interesting, and I wonder how generally it can be applied. Like, I wonder if it would be an effective idea to block dopamine or another chemical to help against bad habits related to computers/internet or food.
I don’t know about cruel, he’s just preparing for a significant legal defense. Communications, researching, etc using the internet is an important part of defending himself in court which he deserves a fair shot at. The purpose of the bail is to enable him to better participate in the upcoming legal proceedings.
Something tells me that there isn't anyone in the bail bonds business who can put up $250M (or would be willing to if they did).
More than just a niche. Imagine a pair of glasses a tourist would wear that would translate in real time what that waiter just said.
This makes no sense.

Earthquakes in different places can be compared only on a common scale.
Old password detection isn't necessarily a sign of weak security, if they are doing it right, they are just comparing a hash of the new password to saved previous password hashes. It is probably debatable if it is better security to not save old passwords hashes at all to perform this check, or to let users re-use old passwords that may have been disabled since they are known to have been cracked.
It cost money sounds like the big one
> John Mallory left MIT decades ago

Not true, and his name is spelled Mallery. No idea if he reads HN.
It's solar city, so there likely wasn't a working product
@willm Textual (and Rich) freakin' rock! Thank you so much for your hard work makin' them great!
I think the OP is arguing you can guess a (possibly) current password this way.
I think even those who came into contact with addiction and substance abuse may fail to realize that social media dependence is a very similar thing.

We can get technical - drugs and booze are psychoactive, while social media is behavioral addiction. Even so, the habit-building loop and the compulsion that stems from it is effectively the same.

So, I don't think it's condescending to say "just quit it". I suspend my Twitter account from time to time when I realize I built a habit loop again, and the "urge" just goes away.
It's quite probably set up by some Western powers.
Source article: [https://techcrunch.com/2022/12/22/lastpass-customer-password...]
thanks for sharing your views; I hadn't thought of ideology as that "fourth category" but it resonates deeply.
I'm really hoping somebody comes along and puts this in a format that I can attach to my head inconspicuously.
Again, the reason it seems great to you is because developers have papered over so many bugs and other deficiencies. Linux has its own issues but it overall is at a completely different quality level from macOS.
I doubt there will be a trial, as too many politicians could be deposed along with tracing washed funds from US to Ukraine to FTX. He will have an unexpected medical complication or will take a plea deal.
sad but this is too true
I wonder what happened tonPC Format. It was such a great magazine. All editions have been scaned and uploaded to archive.org
I was thinking that he just generated a new type of coin that he said was worth $250M and posted that as collateral.
I'm old enough to remember them too! I'm not saying that system was better. I'm just saying it's weird that the new system is so much more expensive to run.
In general, I don't expect anything to be worse than existing solutions, but not everything will be better.

Enabling Rosetta can have a minor performance hit on memory-intensive workloads in the VM (not only x86 ones) because of TSO memory ordering, so it'll be optional. Hypervisor.framework doesn't have an API for third-party VMMs to set this and doesn't seem to let the VM modify ACTLR_EL1 either, so unless I can find a private API for it, I'm stuck with Virtualization.framework's limitation of Rosetta being either on or off for the entire VM at boot time.

Memory usage is probably the biggest uncertainty right now. It should be at least slightly better, but I'm not sure if I can improve it much more due to Virtualization.framework limitations. Still looking into it.

Networking is implemented with my custom userspace proxy for VPN compatibility. Servers are forwarded to localhost automatically, but you can't connect to the VM by IP because the network doesn't exist from the host's perspective. I've ran into too many issues with Apple's NAT setup and host-only networking is a private API, so this is postponed for now. Should be able to do better with root.

Graphics won't be supported at launch, but I could look into it later if there's interest. Not sure how feasible acceleration will be if I can't find a way around having to use Virtualization.framework.

Let me know if there's anything specific that I missed!
Until the advent of the new screen manager, you could always reliably get to a VT terminal.

Full io access and unlimited kill power, far better than ctrl alt delete...

Any regressions in this area I blame on systemd, which I think runs on cpp, so you know I blame cpp... (kernel is written in c, windows got a bit better when they used c# instead of cpp, Mac never used cpp...everybody kill cpp, quick)
> Yes, being drunk seems to be like removing your psychological self-defence, which builds trust, especially in a high-stake business relations. But it's not the only way to build trust, for sure, and definitely doesn't justify the damage alcohol does to the body.

Not trying to convince you to change your mind, but you seem to be missing some information: I'd wager that for the vast, vast majority of people, "drinking alcohol" in a typical way rarely means "being drunk." At least in US culture, those things are only synonymous for certain specific groups, like people to whom drinking is novel (think college students) or alcoholics. Your mileage may vary, of course, and lots of this is my perception, but "benefits of drinking" and "benefits of being drunk" are definitely not the same conversations.
apoligies for the lack if clarity

how does a rainbow table crack "dog" with the salt "109231oijoasdfnaisdfabatteryhorse123"?

rainbow tables are as old as time and indeed still work on passwords with poor salting. for more complex (but not complex enough) passwords there are more modern approaches, like probabilistic candidate generation
It was surprising to me seeing the news with Ukrainian soldiers using TikTok out in the field.
It costs no more to import NG to Japan than to anywhere else. NG is everywhere cheaper than the same BTUs from oil, the older standard.

In the future, the fuel will be synthetic, and cheaper than NG.
It is relevant, because it's where LastPass' responsibility ends. It's not their job to prevent people from being stupid and choosing a password like `lovelovel0ve` but rather to define a requirement that allows for sufficient complexity.
well the gp's point is that it literally is not 'just as easy' because the space of possible passwords increases greatly with each character, such that 'dog' is much, much easier to bruteforce than 'doggie12'.
I had my 2012 MacBook Pro for 8 years, before giving it to my dad where it continues to be used (though under far less load than when I had it).

I did get the battery replaced once, it was free. The screen got replaced twice, also for free (the second time they just did it when replacing the battery because the person at the Apple Store noticed a slight wear on the edge anti-reflective coating)
The alcohol effects may be moderated by dosage, pacing, anything that accompanies the drink, etc. Personal metabolism can also affect the effects. Having right kind of food with the drink may indeed diminish the alcohol almost to the level of condiment.

I guess, the relaxing effect is what the casual drinkers are after. Loose tongue, less inhibitions in interactions, less anxiety. It works... but briefly, it's too easy to cross into drnking-for-the-sake-of-drinking zone. All leading to feeling tired and dehydrated one way or another.

As it's figuratively said, at some point even the finest wine begins drinking itself, that is its alcohol content overpowers anything else that made it 'fine'.

I guess, in youth the drinking is mostly for bonding, in adulthood it's also for coping and habit, god forbid, dependence... Well, it does make one sleepy too.

Looking back, one thing for sure is early youth social drinking is very much unnecessary and can cause more trouble than good.

A nice piece on the subject of alcohol and anxiety:

https://www.psychologytoday.com/us/blog/staying-sane-inside-...
For one thing, many enjoy the taste of beer or wine or whiskey, and don't drink to the point of inebriation e.g. one beer.
On the other hand I just installed Chrome Flex OS on a 2011 HP laptop with 4 GB of memory and am in shock at how responsive it is.
Reprocessing of thermal burner reactor fuel causes only a marginal extension of the uranium resource.

What would be needed are breeder reactors operating with a breeding ratio > 1. Otherwise, the vast majority of the 238U cannot be used.
One big deal about Lispworks is that it comes with a nice GUI creation toolkit. If you need to write a program with a GUI, it's easy with Lispworks and difficult with the free implementations.
This is the truth. Model tinkering in Jupyter notebooks is heavily saturated and won’t get you very far now days.

If you know data engineering and a little devops as well as graduate level stats and linear algebra… the jobs are bountiful.
One status email per week is plenty. I have worked like that for years and been super productive.
The Mediterranean is quite small and developed along all its coastlines. Sweden is relatively barren with a massive ocean alongside, making it far safer launch site.
That’s only one reason. Seeking altered mental states doesn’t mean your regular life is bad. Some people enjoy variety to gain perspective.
I only said check it out, there is a lot of content there useful to the wider topic and the page clearly states what it is and isn't.

>>> IMPORTANT!!! What this calculator is NOT . . .

It is NOT a “Password Strength Meter.”

Since it could be easily confused for one, it is very important for you to understand what it is, and what it isn't:

The #1 most commonly used password is “123456”, and the 4th most common is “Password.” So any password attacker and cracker would try those two passwords immediately. Yet the Search Space Calculator above shows the time to search for those two passwords online (assuming a very fast online rate of 1,000 guesses per second) as 18.52 minutes and 17.33 centuries respectively! If “123456” is the first password that's guessed, that wouldn't take 18.52 minutes. And no password cracker would wait 17.33 centuries before checking to see whether “Password” is the magic phrase.

Okay. So what IS the “Search Space Calculator” ?
This calculator is designed to help users understand how many passwords can be created from different combinations of character sets (lowercase only, mixed case, with or without digits and special characters, etc.) and password lengths. The calculator then puts the resulting large numbers (with lots of digits or large powers of ten) into a real world context of the time that would be required (assuming differing search speeds) to exhaustively search every password up through that length, assuming the use of the chosen alphabet.

How can I apply this to my daily life?
Answering that question is the reason this page exists. The whole point of using padded passwords is to adopt a much more you-friendly approach to password design. On June 1st, Leo Laporte and I recorded our weekly Security Now! podcast as part of Leo's TWiT.tv (This Week in Tech) audio and video podcasting network. You may download a shortened, 37-minute, excerpted version presenting the padded password and Haystack calculator concepts:
Funny enough the time spent is basically nil with auto fill.
Makes me wonder if it used the "CS Grad" memes as part of its training set:

https://i.imgur.com/RGLFim0_d.webp?maxwidth=2560&fidelity=hi...
This is amazing. I love how the cables are animated
Moral progress is when people who nominally espouse a judeochristian culture take the Book of Ruth seriously.

I suspect our axioms are very different, and am trying to think of where in between to start from; will write more later tonight.
I've been pretty impressed with chat gpt generating working implementations of various algorithms in different languages. Crucially, it actually knows about algorithms. I was trying to get it to generate some algorithm for calculating concave hulls the other day and ended up learning a thing or two about various algorithms for that in this space. Almost but not quite worked for my use case. It seems limited in the amount of code it can generate in one go. But otherwise, I was pretty impressed.

So, we're not that far off from basically pair programming with an AI that will do most of the boring/tedious work we currently do manually. Something like chat gpt integrated into an IDE could be useful right now.
Android app that integrates with OpenKeychain and a Yubikey. The Yubikey works with both NFC and USB. The same Yubikey works for SSH to sync passwords with the git server.
Can you explain this obsession with locality? There's a place for it, but not always. In HN I've seen it used as a sort of artificial or unorganic "going back to the roots" kind of thing.

My local newspaper is boring, because nothing happens in my small city. There's no Nexdoor. There are very few if any local events. You can create a youtube or tiktok account and get your message spread to a wider range of people and tell if you're charismatic enough or if your ideas resonate in less time and with less effort. You're also competing with people doing this.
Tracking my sleep (via Apple Watch + AutoSleep app) has helped me drink a lot less. It's very noticeable if I have more than one drink.
Any one of those I guess. I'm not going to make that call, Interpol has a warrant out and nothing happened as a result of that so if she's hiding she's very good at it (which may well include plastic surgery) and if she's dead she did in fact get her comeuppance and then some.
https://us3.campaign-archive.com/home/?u=71a2b2a38789d4d25b7...

We are moving platforms (email & hosting and some personal stuff happened related to a flood, so website archives haven't been updated yet).

Thanks for checking it out!
Microfront Ends
Buying puts on cruise lines.Clever!
And that's just today...
I don't log into anything from my phone. Why would you? How is that unusual? It was within living memory that phones were only used to make phone calls. These days they're most useful for 2FA which is my only use case for having one. But hopefully if more services start supporting products like Yubikey, I'll be able to ditch the phone altogether.
gone to in 2010
That's fair, but I think the value proposition is there for some :)

I'm honestly not sure how pricing and licensing will work yet, but there will be some way to try it for free. Maybe something like Docker Desktop: free for personal use, license required for companies? That seems like a risky bet as an indie dev.

There's also the whole question of one-time purchases vs. subscriptions. Subscriptions seem like the optimal model for this, so I'm not sure how to accommodate people who just don't like them.

Would love to hear if you have any thoughts on how it could be done to reach as many users as possible.
> How much do you drink?

These days, a single sip of wine when my wife is having a glass of wine with dinner. When I was younger, I'd have a glass or two of wine, or a pint of beer. But I always concluded that I'd feel better without the alcohol, so I cut back to the minimal amount.
Why on earth is that even configurable, what a bizarre decision. It's like my bank asking me how many bits I'd like in my hashes, only more useless.

This kind of meaningless voodoo is a big red flag for any "security company".
Tesla: Wireless Charging Platform
Transmission lines work fine in England. Wales and Scotland are hard by.
LastPass gets hacked so often that I’m not surprised. I stopped using them about three years ago and I’m happy that I did.

I just don’t understand how they can be so consistently bad at this when they are a security company. I can understand why “Farmer Joes Potatoes” gets hacked, but LastPass? Bruh.
The above commenter claims they're using Tailscale, a zero-conf VPN, which negates any port forwarding issues.
Starting in 2020.

Seriously, this time it is for real. Last time was just kidding. You know... like he always does when he says stuff that allows him to make money off the backs of those that believe him.

What really irks me is that people keep falling for it.

I would be happy to bet that before the 1st of March Elon has sold another batch of stock.
Yes, those with pure random passwords are safe. What percent of LastPass users do you think use a very hard to remember completely random 12+ character password?

Personally I use either VaultWardens random password generator, or some variation of the XKCD like 4-6 words out of 100,000 which give me somewhere north of 64-96 bits of entropy. Cracking that @ 300k/sec takes a quite long time. I like the XKCD approach, because it's particularly voice/phone friendly.

However much more common in the real world is to pick an easy to remember password with low entropy, something like PinkFloydRocks, which fail because of lack of a number and change it to P1nkFloydRocks. Or maybe PinkFloydRocks<2 digit birth year>.

Quite a few plaintext passwords have been leaked, some even with helpful popularity tables. I'd place bets that a decent percent of LastPass's vaults would fall to a top 10,000 12 character or longer popular passwords. I suspect someone is testing this right now.