skysight-inc/HackerNews huggingface dataset:
> Point being, you can only change the number of rounds if you re-encrypt the vault, and you can only do that, if the users participates by giving their password to first un-encrypt it during that process. So it cannot be done silently in the background.

I think there might be a way to update it without having to wait for the user to supply the master password, at least if their web login works like most, although it would require some additions to the database and their server side vault storage.

According to the documentation I found the master password you create when you make your account is the master for both logging in to your account and for encrypting your vault.

To handle its use as a login password they probably have a table somewhere that contains:

email, salt1, hash1(master_password,salt1)

I'll assume that they want to update both the login password hashing difficulty and the vault decryption difficulty.

To handle updating login hashing they could change that table to contain for accounts that have logged in or been created after the difficulty change:

email, salt2, hash2(master_password, salt2), NULL

and for accounts created before the change that have not yet logged in:

email, salt2, hash2(hash1(master_password, salt1), salt2), salt1

For the vault storage, they'd have to change it so that instead of just singly encrypted vaults, Encrypt(vault, derived_pass), it can also store doubly encrypted vaults, Encrypt(Encrypt(vault, derived_pass), derived_pass2).

When they do the change, they would change existing vaults to double encrypted, with derived_pass2 = hash1(master_password, salt1).

When someone logs in for the first time after the change, they supply master_password. The server would see from the login hash table that salt1 is not NULL meaning they are an un-upgraded account. It could then compute

temp = hash1(master_password, salt1)
pwhash = hash2(temp, salt2)

and see if that matches the hash in the login hash table. If it does the login is successful, and it can (a) generate a new salt and update the login hash table to contain:

email, new_salt, hash2(master_password, new_salt), NULL

and (b) use hash1(master_password, salt1) to remove the double encryption from the vault, use master_password to decrypt the vault, and then re-encrypt with a new derived password with the new upgraded work factor.

NOTE: the above is based on documentation of theirs that says you use the master password for logging in to your account. However other documentation of theirs says that the master password is never sent to their servers.
Strongly disagree. I posted elsewhere in this thread but the semiconductor ran on Sun / Solaris / SPARC. We switched to Linux x86 practically overnight in 2002. Sun was slightly relevant for a few jobs requiring 64-bit >4GB memory. When AMD released the 64-bit Opteron that was the exact moment that Sun died and was completely irrelevant to the semiconductor industry. 99% of our software was text based and could be recompiled for Linux by typing "make"
Sure, but you also don't have a team of lawyers who know how to deal with the government. Twitter does (or, well, did).
Personally, unless it has explicit "lazy" syntax I kind of hate the idea. One thing I always liked about python was how predictable and simple module imports are.
Before they get too far along they should consider changing the name. Airtable would probably have a good trademark infringement case that it’s confusingly similar.
The FBI in the 60s was inflitrating and disrupting civil rights groups.
Thanks for pointing this out. I attempted to use the original title, but it was too long to fit within the character limit, so I chose a different one instead. Is there a rule to follow if the title is too long? Should I just let it get cut off?

Thank you for moving my comment back :)
We are discussing whether the event is notable, not if it is legal. And as someone not from the US, I care more about making people aware that Twitter collaborates with the US to help spread their govt. propaganda (in the same way I would want them to know if the doctor they're discussing smoking with is employed by the tobacco industry), than whether Twitter complies with laws written by that same government.

I.e. claiming no laws were violated (hypothetically) is as much a defense of Twitter as claiming TikTok hasn't broken Chinese law.
Here's an article I found on it [0] and a direct link to the report [1] which shows 7 trackers. The latest report [2] shows that is down to 5.

For comparison, BitWarden's report shows 2 [3] and 1Password's shows none [4].

[0]: https://www.tomsguide.com/news/lastpass-android-app-tracking
[1]: https://reports.exodus-privacy.eu.org/en/reports/165465/
[2]: https://reports.exodus-privacy.eu.org/en/reports/com.lastpas...
[3] https://reports.exodus-privacy.eu.org/en/reports/com.x8bit.b...
[4] https://reports.exodus-privacy.eu.org/en/reports/com.agilebi...
I’m sure Lockheed Martin and Raytheon would love to replenish the supply if we ever start to run low.
The import code in Python is a mess, probably made slower since the advent of importlib.

You need developers who care about fast, clean code to fix the issue. Those kind of developers usually don't fare well in the Python swamp, so it won't happen.
Delivery companies aren't going to have a human check the coordinates of every delivery address. It's totally impractical for their business model.
I read them, and I know that what I saw was the FBI reporting TOS violations. Can you provide a link to a tweet which you believe was censored but was not in fact a TOS violation?
Uh huh....
I have foot pedal ctrl and alt keys. One set at home, one at the office.

Some guitar pedals wired as momentary switches wired to a teensy.

It's been using it for so long I forget they are there. I haven't even checked on the teensy since I can remember.

I instinctive tape my feet even if I'm working away from my desk. If I'm zoned in I can even stamp my foot as though the pedal has become unresponsive...

I don't use Emacs as much as I used to but that's why I built them.

The very first version I had predate the current setup and was a button on the underside of my desk that plugged into my keyboard with an audio jack and jury rigged internally to ctrl (didn't have alt for some reason). Thats got to be like 25 years ago now.

It was so inconvenient as pushing my knee up was hard work (I was convinced this would stop me getting a DVT from long desk hours... But only in my right leg I guess?) esp as I got a new desk that had more clearance, if I moved the keyboard it might unplug or pull the button off the desk. And finally once I got a new keyboard the wire would trigger the button and I couldn't think why so I ditched it.

What a blast from the past!
Lot of iPhone users seem mention longevity as main feature. I personally know both Android and iPhone users, who like to have phone longer than 2 years. Having user changeable battery doesn't take away your freedom to change phone more often, but now you have phone with aftermarket value.
A law requiring everyone to have replaceable batteries puts everyone on even ground- phones will continue to be exactly as thin as they can be.
Endless war, domestic surveillance, expanding government power.

The modern left has become the neo-conservatives.
You’re relying on multiple meanings of the word “train”. Humans produce new knowledge, art, solutions, etc, without consuming the full body of human created media. It’s hardly even reminiscent of the same things. Humans produce solutions, at times, without ever being trained in a fraction of the vast body of human knowledge. This is not the same as a generative AI.
> at some point people need to learn how to put themselves through boring mindnumbing stuff as well, because this will sometimes be part of what you need to do if you wanna reach your goals

Framing is important, and there is a huge difference when approaching something with the attitude of "toleration" compared to "determination". The value in the skill of determination, is the realisation that with it, many things can become intrinsically more interesting and rewarding the more work you put in. When you find something that clicks and try hard at it you can end up in a feedback loop, and this is the sweet spot you want everyone to find in life.

Suggesting that hard work should only be tolerated is not a fruitful path to put people on - sure some things in society like filling out paper work are inherently boring, and unfortunately the realty of current systematised education is kind of similar, but ironically nether match the reality most real cognitive or skilful work.

Perhaps this sounds more like a romantic ideal than something practical - I get that in the reality of current school environments it seems like a hopelessly subtle idea to convey in the hurricane of the massive curriculum you are trying to get them to absorb - However, ideas and wisdom can have a much longer lasting effect on a student's life than what may as well be ephemeral knowledge at that age. I think the least a teacher can do is to encourage students whenever they see a spark of interest, it doesn't matter whether or not it looks "useful" or is even tangentially part of the curriculum, because you can learn the value in the skill of determination by learning to doing anything substantially difficult, and it's a surprisingly transferable mindset.

... But regardless of this framing, to be fair to the rest of your comment which I agree with, the real contender is the new reality of the short attention span, ruined by entertainment. Even as an adult who has long learned the rewards in this skill find it being eroded if I am not careful.
You are (wilfully?) missing the point that the paragraph about cases is making. Many people (most in my bubble) use cases. As consumers the device that we want isn't being built, and we resort to a subpar substitute. Why is something that soany people so obviously want not being built? Why is there no "slightly more clunky and no glass on the back" 'caseless' option? My thesis is because markets don't optimize for what we want, but for what is easy to sell us.

As for other decisions you don't get to make: One obvious example is the safety requirements for all your electronic devices. You can not decide to sell/buy unsafe devices.
The breaks I mentioned are just whilst on Intel though. The change to Apple Silicon assuredly broke an ton of stuff but I'm not even counting those.
So I'm confused, is any tweet that isn't reposted on the front page of the nyt "suppressed" now?

Those who have seen the story think it's not worth publishing. One of the points of news/media is to vet stories and exercise good judgement and editorial choice about what is worth publishing and what isn't.
That's why I hang onto 1Password - at least on macOS and Safari, the browser extension just calls the native client - the actual UI (where you enter your master password and then select which credential to auto-fill) is managed by a separate process. The worst a compromised browser can do is prompt the UI to display and provide a suggested domain to pre-select.

Unfortunately I believe that’s Safari-only and even then they seem to be aiming to move away from it - all non-Safari extensions are a “fat” client called 1Password X where the entire logic (and thus the sensitive data) is within the browser.
libc (under the name libsystem_c.dylib) is one of several components that make up libSystem. But none of these dylibs (including libSystem itself) actually exist in the installed image as dylibs: they’re part of the dyld shared cache.
>In short, the collective well-being of humanity should always be a top priority, and this includes moderating harmful or extremist content on the internet.

Who defines what is harmful or extremist in the government? Sounds like you either get in the good graces of the "intelligence community" or you are now harmful, as shown pretty clearly with the hordes of "intelligence community" people calling the biden laptop(whatever it had, its content is irrelevant) russian propaganda[0], while even the DOJ and FBI says it isn't[1]. And of course those officials making the stink are contracted by the news agencies to talk about it where journalists will just blindly accept whatever they're given.

The "intelligence community" isn't your friend(neither are the proper agencies but I digress), it never was if you're not an us citizen and it probably stopped being if you are after the patriot act.

[0]:https://www.politico.com/news/2020/10/19/hunter-biden-story-...

[1]: https://www.dailywire.com/news/breaking-doj-fbi-confirm-hunt...
Absolutely. The risk of putting load on the engine before the moving parts and oil have reached operating temps is far greater than the threat of tiny amounts of gasoline washing residual oil from the cylinder walls or thinning the oil.

The only risk described here applies to prolonged idling only and is a long term risk mitigated by reasonable elwarmuo and oil changes. The short term risk is the rotating assembly and value train is far more immediate.

Fuel injection has convinced people that they can just jump in a cold car, fire it up and be fine. Doing so, especially in extreme cold is just incredibly damaging.
I have an account and I've tried to use it. It's never been clear to me who their paid customer is - though obviously they've found a ton of customers, so this is nothing more than my own curiosity.

The entry-level paid plan is limited to 5000 rows, so it's not a substitute for an SQL database. If I want to capture data in this type of app with a few hundred rows, why not use a spreadsheet, which everyone already knows how to use and already has installed? For other uses, Trello significantly overlaps, but with a simpler interface. Put differently, why pay for Airtable unless you need a performant way to manage a significant amount of data?
Doesn't work on Wikipedia. They specifically don't take "primary sources". They only take secondary sources. If Obama was to try to edit his own article to correct some facts he knows are true they'd delete his edits immediately unless he can point to a secondary source that backs up his facts.

This is especially frustrating because often the secondary sources are from journalists who got the story wrong, made up "facts", incorrectly reported something, or just didn't understand the topic. But, because there words on are on some website they're taken as the authority.

I get it's a hard problem. The primary source could have reasons to lie. I've just seen too many cases where I've seen the secondary source was wrong either being the primary source or being at the primary source.

But, it's only going to get worse as A.I can start making up its own secondary sources and then link to them in a few weeks/months to edit wikipedia.
> in-kernel driver has bound before the proprietary one (eg, nouveau) and potentially left the card in a state the proprietary driver isn't expecting

Thanks for reminding me of that - we definitely ran into that some. It wasn’t always with proprietary drivers, though. I think there were cases where legacy intel or amd cards would be incorrectly brought up by the old non-KMS drivers and then the KMS driver wouldn’t load, or maybe vice-versa as there were definitely specific cards within generations of chipsets that were documented as working under KMS/DRM failing and we would have to resort to the legacy drivers.

> But the answer there is not to simultaneously ship both the free and the proprietary stacks.

We didn’t really have a choice given that there wasn’t a one-size-fits-all driver (we didn’t try simpledrm - iirc it went through phases of breakage). But truth be told, while nvidia was the worst and most painful to deploy and upgrade, aside from the issue that we had to choose which version of the nvidia driver we wanted to ship (until we got the conflicting shared dependencies situation worked out by hot swapping the components before loading the driver), it was the most likely to work with all the cards it advertised support for. Only issue there was older cards not supported on current kernel versions or lacking drm drivers altogether.
I've realized this recently too, and I'm trying to just ignore/flag everything even remotely political that gets posted here. If you disagree with the idea that information control is something the government has no business of doing, you're in the minority here. The response to the twitter files was the slap in the face I needed to finally understand that.

After all, it's a blog for a VC fund. I'd say a lot of people here are building things that do much worse than what the twitter files exposed.
Batteries are a consumable item, they only last a year or two before they have degraded significantly, whereas the phone will almost certainly work for years. With open source firmwares it could last a decade or more and indeed in the past I extended mobile phones for a long time that had replaceable batteries. Its become increasingly hard to avoid manufacturers planned obsolescence at a time where the improvements in phone performance has been diminishing.
A Vermont farmer proved no snowflakes are alike
To add to my comment, if one's response is to point out it's difficult to trust the company's opsec, handling of your data etc then use something like bitwarden. If a fully open src online pw manager doesn't calm your nerves, self host it.
Repository for the Book “Grokking Deep Learning”
really love both the site and the work on the site
I didn't read that response as a defense. It sounded more like the opposite.
We need a phone number v6 as well, with vastly more possible entries. Having hide my phone number would be a great service.
Which specific actions do you think the FBI took which aren’t part of their mandate? Please link to the sources for those claims.
My two cents on this, based on personal observation of driving habits: The real problem is that people will warm up the engine and cab, and then drive the vehicle like the entire thing has warmed up. Something that couldn't be further from the truth. Your tires will be low on air pressure. The entire driveshaft will be dry and its lube will be more viscous than normal. The digital traction controls and diff locks could be stuck (or at abnormally slow to respond).

So, IMO, while there's benefit to letting an engine warm up, keep it under 2k RPM for the first couple of miles; until the entire drive train is also warmed up.
I've read that the decline of DVD sales are the precise reason for much of the monoculture in feature releases since you could re-coup much of the budget of e.g. rom-coms, which were plentiful in the 90s and 00s.
How do we all move to EU for a bit and vote this down?
I would argue that selectively recommending political comments which may be censored has a chilling effect on political speech — and therefore is illegal.

I also think it’s interesting how many people I know who “protested” things like COINTELPRO, but cheer this.
I prefer sticking w/ the basics and using EventEmitter.

https://speaker.app has a UI I've been prototyping w/ this approach.
We all stand in the shoulders of others.

Forty years ago, this was my state of computing.
Microsoft accidentally revealed a UI design prototype for the next Windows
It would be weird for a security assessment not to include source code access.
Not too surprising that advertising gets used to crime. At least in the US, advertising typical walks right up to falsehoods, and oftentimes veers into dark patterns and other hostile usage. Once you're comfortable with grey zone, not-quite-falsehoods, it's an easy step over the line into crime.
This is very welcome news if it passes. Non-replaceable batteries have NO redeeming qualities in my opinion. Some will say that they're important for waterproofing, but I previously owned an IP68 (ie, certified waterproof) mobile phone which had a user replaceable battery. It's clearly not a requirement. Being able to replace batteries as they go bad will go a long way towards reducing electronic waste, as devices can be used for significantly longer.
At what point did Wikileaks become the bad guys?

Was this a change in their behavior, or a change in American political attitudes towards the role of journalism?
Uber and Doordash have pretty solid PMF though. It's just that their economics aren't profitable. This seems to be true, especially for western countries.

In other countries where the city is a lot more dense and min wage is low, these delivery apps are okay-ish.
It's an objective fact that the professional mathematical community has decided that ZFC is the standard foundations. The point of my post was not to explain my experience with textbooks, it was to note that you can check virtually any published source on this topic to find a reference for that claim.

Extracting semantic content of DNNs is not a pure mathematical or metamathematical problem; it is an applied problem. Again, I'll happily admit type theory can be good for engineering stuff. But you claimed it was good for metamathematical inquiry. I'm looking for a statement about things like consistency, independence, shapes, numbers, etc. Set theoretical inquiry gave us tons of those, as I pointed out above.
Their own official tally was 250 million infections, so it's probably safe to say that they will all have it very soon.
yeah it seems much less practical, but it is pretty crazy from the standpoint of how it can be controlled - turn off and in by a literal switch.

There’s a dystopian black mirror future in here somewhere where people can take be administered viral vectors programmed with unique, proprietary methods of activation to stimulate a response - altering behavior, mood, hormones, etc… probably in a subscription model serviced by Comcast
- Saudi Arabia will release an ethical standards requirement for each of its Western tech company holdings. The exact definition will be confusingly progressive, which will put everyone on guard.

Al Jazeera by Saudi Arabia
I'm not sure about just sitting in a drawer, but 40% of garbage fires are caused by lithium ion batteries

Source- https://apps.cce.csus.edu/sites/CalRecycle/usedoil18/speaker...
If it ain’t broke don’t fix it?
If you're even using a car at all, then you have already decided that comfort and convenience are necessary.
The First Urban Freeway in America – Davison Freeway (1942 – Detroit)
CTR with no authentication is strictly better than EBC with no authentication in that case. Similarly, CTR-then-MAC (with MACs being e.g. per packet) is strictly better than EBC-then-MAC.
Right, just another example of many mistakes made by these agencies since their inception. I do think there is legitimate need for some form of FBI, though.
2022 was the year of Linux on the Desktop?
Everyone, water is wet. Please review these other links we earn money for.

1) Dihydrogen oxide, the source of life?
2) Is water killing you? 7 pointlessly aggregated water facts.
3) Why water is important to everyone and how it's costs have changed over our pointlessly defined time bins to influence clicks on articles 1 and 2.

I'm so tired of these. This article is so far removed from being informative. It's the south park parody, this is an ad disguised as news/information.
Gentleman layoffs are when you increase bottom performer targets. You don’t formally lay then off with generous severance but manage them out.
I don't get the point about cats and dogs being status symbols. I'm sure lower class had dogs for security and cats for rodents. Geting a portrait with a pet is a status symbol because of the portait part, not the pet.
4 years of college on Sun workstation keyboards and then another 4 years in the late 90's at work and my hand and brain are hardwired to expect control being where caps lock is on traditional PC keyboards.

In vi/vim I never hit the escape key, because the old terminals I used in high school didn't have an escape key or arrow keys. ctrl and left curly bracket is escape and h, j, k, l are to move the cursor.

The muscle memory is too strong to change after 30+ years so change the keyboard mappings instead!