skysight-inc/HackerNews huggingface dataset:
> It's not the onboarding, it's how the experience goes a month, or even a year, in.

No -- as any product or marketing manager could tell you, it is the onboarding.

Using any product is a "funnel" that starts when you open the website/app for the first time. Every piece of friction/confusion that results in lost users, well it results in lost users, period. And that's 100% the fault of the onboarding process. It's never the fault of users who won't stick it out for "a month" or "even a year" (!).

And journalists should be reporting on the experience of the average user. Sure, they should get the perspective and some quotes from die-hard fans as well, but you certainly can't expect a journalist to use a product for a year before writing an article about it that needs to be published tomorrow.
$10 per karma point. A bonus for every milestone of 100 and 1000 points. I trained on GPT-3 not long ago though so most of my posts these days are low effort curation of the output.
From my world:

* WebGPU will ship but early adoption will be slow.

* Stable Diffusion will run on WebGPU.

* Rust adoption will accelerate rapidly; C++ increasingly for legacy code only.

* Rust will also become an official side in the Stupid Culture Wars.

* Twitter.com will become a pale shadow of its former self (also having become a side in the SCW).

* Mastodon will be big. It will have growing pains but deal with them reasonably well.
Attackers don't generally control the login forms, but they do have the LastPass vaults, so this response doesn't make much sense.
Is not? The title says, Inflation (first derivative) is falling (second derivative) much faster (third derivative) than most people know.
There's a video where Alan Moore recommends reading terrible books. Knowing what frustrates me in years of poorly presented university textbooks helps me in a way.
I noticed this too. I made an account for a business and it was just odd. Maybe they’re targeting the younger generation? If not, that’s certainly what it felt like when signing up, lol.
I think sometime else is wrong if you've had a "crash" per hour.
I suspect most of the work of a password manager goes into the other features. At one point (not sure if they still do), Lastpass had a feature that could auto-rotate passwords for you for select sites. From watching it attempt it once or twice, it looked like it was done with scripted screen-scraping which must have been tedious to develop and maintain. Also providing form filling functionality seems like it took a lot of work.
This data was allegedly extracted using an exploit in the Twitter public API sometime in early 2022.

The seller could be lying about that, but there is relatively strong circumstantial evidence that suggests they are telling the truth.
Their encryption code predates libsodium, and ECB was (on many platforms still is) the default mode --- also, the only mode that doesn't require confusing extra parameters.
I probably would have stopped at the pdf level because I’m lazy. Thanks for not being me, following through with your hatred, and doing a short write-up!
Here are some predictions:

- 49ers wins Super Bowl

- Belarus president Alexander Lukashenko dies and Russia invades Blarus. No war.

- Ukraine war continues but Russia is willing to negotiate. Negotiations will start but the war is still on.

- In China, Xi Jinping is replaced with somebody from Hu Jintao side. China’s economy cools a little.

- Google starts big layoffs. Considering spinning off cloud business.

- US economy still in recession and inflation is high

- AI becomes mainstream. 60% of all startups in 2023 are about AI.
I remember trying OT for go awhile back and it just wasn’t ready compared to just relying on OpenCensus and OpenTracing. Do you think it’s ready for prime time yet?
https://news.ycombinator.com/item?id=34127486
Arch Linux. I have to use Nix for a project and it broke almost every time Arch updated its glibc which made it a pretty horrendous experience.
Open Assistant: Open Source Offline Voice Assistant
Every time I think I’ve found all the Toyota-related clickholes on the internet, I find another one. I love Toyota
Ruby 3.2 Released with WebAssembly Support, Production-Grade YJIT
No paywall https://www.vwvortex.com/threads/my-ride-series-japanese-v12...
>Congresspeople regularly outperform the market with their investment which is called "insider trading"

Have you considered the selection bias going on as an alternative explanation. Maybe the people with the competence and skills to get to Congress are just smarter than the average person with an investment account.
Ask HN: Would you change job in this climate?
Given the looming crisis imagine you having a decent role in a rock-solid company/product. Now, would you take on the opportunity to a scale-up for double the salary? There will be no fall back to your previous role if things go bad.

I know this is a personal question depending much on the specifics of each but I just want to see different angles on it.

TIA
Attacker doesn't need to control the login form to use it as an oracle to confirm password reuse.
It's literally a bot autoresponse on our Slack, and I didn't put it there. Don't give me too much credit; it was a widely-held opinion.
Masto.host will charge you $6/month for that, though I think they’ve paused signups for now. If you want to do it yourself you can probably manage that sort of pricing using ovh or similar.
Note: regarding my prediction about cis-women taking testosterone. I really don't know enough about medicine to predict that T would help/hurt cis women in business/tech and that is NOT what I am predicting. I am only predicting that there will be a small movement that DOES believe it helps. And among any small movement of people who try to be successful a few succeed. There are both successful people doing the RAW paleo diet and successful people doing the MANA/Soylent vegan meal replacer diet.
I would love to hear more about YJIT. Who's using it in production?
Please read this comment chain from the beginning
What's the saying, there's nothing more permanent than a temporary fix?
I don’t know about US but here in Northern Europe the utility outlets we use for stoves and such are not just higher voltage but also distributed over 3 phases rather than just one. This translates into sqrt(3)=1.7 times more of the cable can be used. For a 3x16A outlet you get 400V x 16A x 1.7 = 10kW.

Compared to a normal 220V 10A outlet where your max is 2kW.

Higher voltage also means you get more power for less current, less heat loss in the cables.

If you have an electric car, the example above should explain why you want to get a proper charger with proper wiring installed. Don’t use the ones which plug straight into a shuko.
Do you know if standard latest Rails 7.0.x runs fine on ruby 3.2?
Knowing you reused the same password between your Amazon and $CompromisedWebsite accounts (but nowhere else, maybe you set them up the same day) gives attackers a significant advantage over having to try every password they have on every website.
You've typed exactly what I was thinking, in a far more eloquent way than I could have worded it.
Reminds me of the constant battle between my high school's sys admin and those smart kids who knew all the Windows 2000 network commands!
Set aside what you wrote for about two weeks and read it. Reading aloud what you wrote, too. Emphasis on smaller sentences-less than 10 words on average. Never more than 20 words.
This looks awesome. Really well done and certainly well presented!
A lot of instances have had to scale up rapidly lately, which doesn’t help. Steady state cost will likely be lower.
It is (or was) the default mode, and, unlike CTR, you don't need anything more than a key to use it; no nonces, no IVs, no parameters. Put yourself in the shoes of someone who doesn't know much about cryptography, and it's a natural choice.
- Commercial fusion becomes profitable business

- Tax optimization becomes mainstream thanks to defi

- There is no global recession and the world's economies reach unprecedented levels of high growth rates
You can however still download and use an older version of the kindle program (at least on windows), which download the files with the old DRM scheme.

It's one by one though.
Clojurists Together 2023 Long-Term Funding Announcement
>It's easy to sign up for Twitter, it follows all of your expectations of how apps work

I always find it funny when I read things like that about twitter, because I honestly wanted to see what it was several times and I swear I could never figure it out. I know I am most likely an outlier, and yes, I have a Linux server sitting below my desk (my basement is way too damp).
I’m assuming maliciousness on the part of an exemployee
For anyone curious (as I was once and looked into it) Dell and Lenovo both ship Laptops with Xeon's and ECC memory though they are very expensive.
The only historical evidenence for the ressurection of Jesus is second-hand testimony about people who allegedly saw him. And even in this testimony it is emphasised the witnesses did not recognize the person as Jesus. So outside of the question of faith, it seems very weak evidence.

From a historians perspective, there is better evidence for the ressurection of the Emperor Nero.
You actually can search repos in their entirety on github now, think it’s a beta-feature you can enable or use. In other words, congrats, they’ve already indexed your entire codebase because they needed to for copilot.
>Am I misunderstanding something here?

No, not at all. The point is that while ECB is a silly choice, it does not make it easier for the attacker to crack your vault. It does allow the attacker to see if you're reusing passwords, but does not reveal to the attacker what those passwords are.

On the other hand, If the attacker were to discover one of your passwords from another source, they'd be able to confirm reuse anyway by simply attempting to use that password on other websites.
I find that comment funny too. Internet has only gotten more accessible.

I do miss when it seemed almost everyone you talked to was a hacker in their own way but at the end of the day... you have everyone from kids on tablets to your grandma being able to use it now.
Optimizing Ruby’s Memory Layout: Variable Width Allocation
The bitcoin one I’d disagree with, it was quite easy to see the drop.

It never hit 12k, but my target was always 17k, which it did hit. I publicly told many people who asked when it was around 50k to wait for 17k.

Simple analysis made this quite clear - The last three crashes had an 85% drop in price, based on the trend, 17k was the target.

I don’t see it going to 5k, to this point, the crash has followed historical precedent - going to 5k would not follow historical precedent.

Guess we’ll find out, one of us will be wrong.
So far the exact opposite is happening, although you are correct that being the top selling car in the US won't happen, just the world as a whole. It's a pretty easy prediction, as even if it is wrong it will still barely trail Toyota for the top selling spot, barring some significant disruption and reversal.
PG seems to be putting it in very concrete terms. For example, he mentions spending only 8 Christmas with a young kid who feels it's "magical". 8, he argues, is an objectively small number for lots of human experiences, like "8 books" or "8 times I dined my favorite meal".
Reuse of what? If you're assuming the attacker already has a valid password, the list of URLs they use it also irrelevant, as is the password vault. Just do what real attackers do and hit every single known login page on the Internet with it.
That's interesting to read. I find that I do imagine how things could be worse in specific situations, the usual example being right before I get what I might want.

But in that case I'm almost always comparing hypothetical to hypothetical, i.e. bracing myself before trying someone's first homecooked meal. I imagine that I'm about to eat literal dirt, and this makes even lightly-seasoned sludge taste somewhat fancy.
"Mastodon isn't for the masses in its current state."

Fwiw, Even for somewhat geeky guys with kids and family and busy lives, Mastodon isn't friction less enough.

That being said, for a somewhat geeky guy, twitter is also hard to sign up - if you don't want to give them your phone number and other personal information, it's full of dark patterns. Less of an issue for non geeky folks though.
In my experience, a larger engineering team makes these kinds of problems more likely

I wonder how many teams worked on tweet embeds, each with their own incomplete understanding of the full widget and their own competing product priorities and OKRs
Dunno. HN is actually a powerful "viral engine." Lots of people without an internet following (including me) have had stuff blow up unexpectedly, and it's not world-class research or anything.
> How could X be different?

This is great prompt for ChatGPT. I had fun exploring its internal biases. Examples:

guns -> add safety & tracking features

drug abuse -> decriminalization, safe injection sites

national defense policy -> fewer nukes, more cyber & space defense

interrogation techniques -> more ethics & sensitivity training, more psychological & non-coercive techniques

environmental regulation -> prevention, penalties, accountability, global approach

cryptocurrency -> scale up, security features, regulation, integration

abortion -> increase access, funding, legal protection

racial justice -> more academic, employment & leadership opportunities, intersectionality

It clearly has a bias towards lefty, pro-government, pro-regulation positions. I would assume because its training inputs came more from academia, less from right-wing rants.
Mastodon (and potentially other ActivityPub-based Fediverse services) has Toot (https://toot.readthedocs.io/en/latest/index.html) which is a CLI/TUI interface that probably looks like you want?
(I know there's also at least one other project for Pleroma + forks specifically called Pleroma-CLI too...)
Exploring the Duolingo app internal API
I made a comment few weeks ago that was made with good intent bit criticized how the west and western companies look and treat non-western and non-democratic countries and undermine their sovreignity.

My HN posting habbits have not changed, used HN for 5yrs+ but right after that point I will spend a long time composing a comment and the get "you're posting too fast" throttling my post rate and a few other "shadow" limits I noticed. I would have maybe 30min for HN and other sites like this so I would read comments/posts and maybe reply 3-4 posts in ~1-2h window (30min spread over that time), nothing changed on my end and I am not spamming anyone.

I may say things that sound offensive but unless you assume I am commenting in bad faith, I take care to post something valuable and relevant that won't ruffle anyone's feathers too much.

Who knows, I hate shadow moderation but I have no proof there is one on HN either other than circumstantial stuff like this and for what reason? Is it over a misunderstanding? Something I can correct?

I never been much of a joiner so it isn't just HN, everywhere I go I disagree with everyone that holds on strongly to any bubble or hive mind, I don't think that can be avoidee if you pursue truth with sincerity and apply critical thinking. But I also know it isn't just what you say but how you say it that matters, so I am confused a bit.

I have seen deleted comments long after the edit time expires just not on my own to answer your question.

All this said though, this a YC site with a specific audience and goals not a general purpose social media so I understand having to accept more moderation especially given the resource constraints of the moderators.

Just glad I didn't get banned I guess? Enjoy the holidays.
> SDRAM is continuously refreshing all cells

...so ? we're not talking about slow deterioration (which is why refresh is needed), we're talking about bit flip from cosmic rays where cell changes state completely.
> What hope does an average site have if a simple tweet requires MegaBytes of JS and seconds to interactivity?

Their hope is that their orgs probably aren't as bloated as twitter's
It's very unlikely to randomly delete your hard disk, and it's easy to set up a VM or container for development..also it may be a command that you use all the time but can't remember the syntax, and it's just retrieving information.

There are a lot of cases where displaying the command first and asking for a confirmation is just an unnecessary step.
It does for Guix, but it's not such a big deal in my opinion regarding Nix. Please note I didn't think about this in depth, but, yeah, of course, using Haskell or Ocaml would probably be cooler than some domain specific language. But I also believe the nix language also makes Nix more accessible at first than let's say Guile : entering into the Guix world is certainly more costly, and I feel Nix* capitalizes on this lower entry bar.
It's not necessarily the teacher's fault. They could be perfectly adequate (not extremely boring as a baseline), but you have students that may have ADHD, ODD, etc, and just the temptation knowing the hidden game is there is enough to jack up the excitement level of an otherwise rather boring game enough to detract from classes.
I don't think this is a significant advantage, the cost of an incorrect password attempt is essentially zero. Trying "every password they have on every website" for an individual will still be a very small set of passwords to try.
I'm the person you're responding to. I drop my kid off by bike when it's warm. 14 min door to door. And drive other times. Solve my suburb :)
Pretty interesting article I happen to agree with.

As other commenters have noted, we no longer know if any content we read in the Internet is legit. Soon enough, the problem will go beyond text and encompass image and video[1]. Give it a little longer, and entire digital personas will pop up. Next will be "feedback narratives", where groups of AIs, possibly de-federated, will use content produced by each other to produce even more content (similar to how fanlit works today, but in longer and longer chains).

We will find mechanisms to cope of course, but it may well be that our kind-of-true-information free-lunch is about to end.

[^1]: It's somewhat possible still to discern images generated using AI.
I'm aware you can't do it silently in the background. But they can prompt the user to input their password. And you're already prompted when signing in on different devices or at regular intervals when the vault locks. Seems fairly easy to me from a UX point of view.
Co-creator at best. Ignotus Peverell is the anonymous and disappeared creator. I'm the creator of its PoW(s).
Number 5 is the only one of these that is going to happen.
"Stock photography" covers a lot of ground. I don't see company art directors shifting to generative AI--at least not yet--for a variety of reasons, including legal concerns. However, you'll probably see a lot of use for people looking for graphics, any graphics to illustrate things. But for content like that, people today are probably mostly using Creative Commons or (more commonly) just grabbing stuff of the Internet.

That's a statement about 2023. I don't pretend to know what will be the case in five years.
> Is there a reason you can’t just create your own identity, without an instance?

It looks like Mastodon has aimed for total decentralization like email, rather than the kind of decentralization that IRC does that still keeps identities centrally managed with nick servers (e.g., how irc.libera.chat works).

Presumably, managing identity verification would be much cheaper than managing the content, so Mastodon or something like it should be able to scalably do it centrally, while still federating separate instances for the content.
Ask HN: How do you take notes when reading pdf textbooks not in your field?
Hi experts,

Happy holidays!

Context: My field is data engineering and the pdf textbook I'm reading is of Microcomputer Architecture (the Mick Bit slice book) from my laptop.

Issues: I'll list the two issues below.

*Issue 1*: How to effectively take notes when read from *pdf sources*? I feel the best way is to insert a *BLANK* page after each *TEXT* page (by saying text page simply means any page with texts), use an e-pen to hand-write in the BLANK page while circling/labelling contents in the TEXT page. I can probably insert the blank pages using a Python script but I'm not sure which e-pen and writing board I should purchase for my laptop (Lenovo T-460S). I believe handwriting is the only fast, reliable way to take long notes.

*Issue 2*: How to effectively take notes for *technical textbooks not in my field*? I just completed the nand2tetris hardware part and had no other training in computer engineering, so the Mick Bit slice book is much more advanced. But at least the opening 20% of each chapter is very well accessible so I only intend to read those parts. I hate to admit, but I actually don't know how to take effective notes in a non-academic environment. There are two questions bugging me:

1- When should I take notes? Taking them too early, then I found myself erasing previous notes frequently. Taking them too late, I found myself forgetting previous contents frequently.

2- How much note should I take? The book is for advanced users so I have to evaluate a lot of Boolean logic by myself. Should I include all of them in notes? Should I copy down a lot of contents from the textbook into notes?

Afterthoughts: Maybe at the age of 40 I still don't know how to study effectively. This doesn't surprise me, as back in university I tended to gloss over details and proofs and grab for good marks (I did get 3.7+ in both undergraduate and master). But now this is a hobby so I want to stop cheating myself. If anyone (especially someone who struggled with the same problems) can point me to a resource to re-learn how to study I'd appreciate the help. I learned about Pomodoro Technique but it doesn't suit topics that need hours of focus.
That's exactly what I'm saying :)

If the attacker doesn't have the valid password, the knowledge that two different sites share the same password isn't exactly game-changing. And if the attacker does have the password, they'll figure out where it works regardless of access to LastPass db.
Didn't you know that dang is paid by the deep state?

/s, since sarcasm on the internet is dead, and someone is bound to take this at face value. smdh
Better Accessible Names
https://archive.ph/AEUsX
Where’s the ASIC cracking 100,100-iteration PBKDF2-HMAC-SHA256 at 2M H/s? Let alone GPUs. TFA pulled that number out of nowhere.
So essentially, it doesn't want to get involved in racism and tells you do go look for it yourself. How is that bad?
I think this is a common misconception. In set theory, one does not say that some set is the same as (ontologically) the number 7. After all, we understood what the number 7 is far before we had the concept of an abstract set in our mathematical vocabulary.

Rather, set theory lets us say that questions about 7 are equivalent to other questions about sets. So, 7 is prime if and only if some claim about sets holds, stuff like that. We do indeed usually pick some particular set to represent the number 7 for the purpose of this translation, but that isn't a claim that 7 is that set (since, e.g., there are many ways to choose a set to represent 7). So one cannot ask questions like 'is the number 7 equal to the trivial group?' within ZFC but only questions like 'is the set I've chosen to represent 7 equal to the set I've chosen to represent the trivial group,' which - while strange - shouldn't cause any philosophical worries.
Works perfectly well inside the Xwayland session. Less so outside of the Xwayland session.