skysight-inc/HackerNews huggingface dataset:
Passwordless might be the way to go. We (as a society) have been trying to do 2FA now wherever we can. 2FA can involve an authenticator app but it is easier with a physical key. That physical key by itself can obsolete the password for many uses.

The more numerous the places where we can abandon passwords, the fewer the secrets that we need to keep.
Newbie question: how is this different than using an Arduino + power injection?
"\javascript\bin\srcc"
The problem is that these bots are extremely good at generating valid-sounding bullshit.

Human-generated bullshit and bullshit generated by previous iterations of spam blogs used to be relatively easy to identify as bullshit. These models will confidently give you an answer, sounding perfectly plausible, even if it is completely wrong.
The fact that you have found a function of type () -> () is a proof that true implies true. This is the Curry-Howard isomorphism.

Not a particularly interesting proof.
That's very unlikely.

Even for singly linked lists, implementations for general purpose use usually keep pointers to the first and last elements so that you can use it as an O(1) FIFO queue, as well as prepend in O(1) time.

If you only keep a pointer to the head of the linked list, then it can be practically used a LIFO queue (stack), and a few other corner cases, but not much else. (A FIFO isn't very useful if adding an item is O(1) but removing an item is O(N), or vice versa.)
What a creative, delightful solution. I encourage you to pursue this!
oh that's cool. what I do is similar except simpler, much so.
Nim, D, Go, Rust, and several other languages in this space all offer a similarly integrated toolchain without the drawbacks of legacy build systems. And those are all free and available, unlike Jai.
K&R probably taught more working C programmers than anything besides experience.
I think the biggest lesson to learn from all this is that just because things sound convincing doesn't mean it is accurate. We should probably incorporate this same skepticism when talking to people as we have when talking to machines (but that doesn't mean we should abandon good faith).
It’s going to have graph traversals, path optimization, input parsing, various flavors of map-reduce, and recursing every year.

In that sense, it has a definite pattern, but I wouldn’t say I experience it as formulaic.
I found a third-party description[1], which someone in another forum linked to as evidence that notes inside items are encrypted. None of the other unencrypted fields feel as high-value as the URL field, although some of them are clearly valuable, such as whether the password was autogenerated, whether or not there are attachments, and last password change timestamp, which is convenient for comparing against known breaches.

That said, I have no information as to the veracity of that description, except that others seem to be using the library it belongs to.

[1] https://github.com/cfbao/lastpass-vault-parser/blob/master/l...
pnpm for Node packages also has a similar design. Once upon a time, it cited Nix as a source of inspiration in its docs!

I hope that basic design continues to propagate. Better-behaved package management for language ecosystems is easier to work with for Linux distros, including NixOS. :)
Examples of wrongness include most of arithmetic and logical inference (like in the example above). If you ask about the mass of 1 kilogram of nails, it gives the correct answer. The problem is that when the answer is wrong, it's not a "bug" that can be "fixed". It's just happens that, based on training data, the parameters of the resultant Rube Goldberg device are such that the weight of 1 kilogram of nails depends on the type of nails. It doesn't make sense even to ask why.
Switched from LastPass to Bitwarden some time ago. The only issue I had thus far was exporting the contents out of LastPass. Some of the special characters in some passwords did not export properly. I had to add those items by hand.

As for Bitwarden, I like the UI (iPad, Mac, iPhone) but routinely forget how to generate a new password - the function is buried inside one of the menu options. Other than that, I really like it. And, there is option to host your own vault.
No, that doesn't solve the problem -- I had a few megabytes of fast RAM, and it still sucked. The chipset bus is completely contended in 4 bitplane high res graphics in OCS/ECS, so any attempt to access the serial port registers is blocked until the horizontal blanking interval (as is chip or slow RAM). The faster and wider data path in the AGA chipset improved this substantially, but that data path was only used for video DMA, not for the blitter or other chipset register accesses. The only real solution was to use an aftermarket serial port card that wasn't on the chipset bus and used a real UART like the 16550 that had a 16 byte FIFO.
I found lightning worse than USB-C. So far none of my USB-C cables broke, however I already broke one lighting cable and my current one is only charging from one side. I sometimes plug it in with the wrong side up, and it doesn’t charge my phone. Then I have to plug it out, turn it by 180 degrees and plug it in again.

Anyway, these issues could be user issues or bad luck (so please don’t comment on this), but I have one nitpick which isn’t:

USB 2.0 speeds for pro-res footage are a joke. Why even praise your camera and the pro resolution format being introduced on iphone, when I can’t get it off my PC via cable vat decent speeds? I only used it once to make for a side project, and had ~30min of footage. Took about 1.5h to copy.
Stop loss orders can work reasonably well for retail investors trading small positions in liquid securities, but they aren't completely reliable. Sometimes prices make a sudden discontinuous drop on bad news and blow past the limit order before it can be executed. Or if trading is halted they become useless. And for institutional investors trading large positions in less liquid markets, stop loss orders barely work at all. They usually employ more sophisticated hedges.
It all depends on how the data are encrypted. With a sensible design capturing the encrypted storage will only reveal the number of encrypted records, rough estimates on their size, and time stamps.
Initial concept for mistborn was to show epic fantasy world live through different stages of technological progress. Initially he planned to do three trilogies, one pure epic fantasy, one set in early computer age and one in space age, but since release date gap between epic fantasy and computer age was too large, he decided to write another series, which is set in industrial revolution. And I'd expect him to write cyberpunk series between computer age and cosmoopera.
Thomas Hobbes Subtweeted Francis Bacon
Haha yeah I was just making fun of the idea that such potentially long sentences can be negotiated down at all.
> I think you mean flammable.

Inflammable and flammable are both adjectives that mean "easily set on fire". They have slightly different etymologies. In the case of inflammable, in- means "into" and is not a negation.
Improperly?
But the phrase “cutting your losses” has application does not?

A stop loss could be set at a threshold that isn’t so tight to lose money on normal variations, low enough if it’s acceptable to take the loss and and capture and deploy the capital elsewhere, and not too low to never be triggered.
make it a percentage of revenue, and while we're at it make it for all sports!
If the hack of LastPass happened yesterday, sure, but it happened months ago. There are a variety of different attacks that could be executed in that time, and the sooner the attacks are executed, the better — because less time for credentials to be rotated.

I find it implausible that the first hint of vault compromise comes 4 months after the hack and is against a low value cryptocurrency wallet. Especially considering that when LastPass first had issues, there were dozens of people reporting personal experiences of it here on HN — if LastPass vaults are compromised, the internet would be flooded with reports.
That seems arbitrary. I would consider that "politics" and like a place that had a rule to treat hashes as unordered a bit less.
And malt does more than Milton can
To justify God's ways to man.
I bet there are a lot of actual SAT question/answer pairs in its training data.
How did this channel get so many subscribers?
How did they get so many current viewers?
Why isn't youtube handling this?
Having all your keys/passwords on a 3rd party server is something that I've never been willing to accept from a security standpoint. That's what always kept me from using a `hosted` solution. I do get the allure from a multi-user management aspect though.
Lynn Margulis knows the answer.
I use LastPass at work and Bitwarden (technically Vaultwarden but same clients) at home.

I find that Bitwarden's UI is much less quirky, for lack of a better term. LastPass finds ways to consistently annoy me.

The commonly clicked secrets move to the top, I can see more than two items in the list, it doesn't forget me periodically, and when prompted for credentials I can't cancel it and get in anyway.

You can add multiple sites to the secret, not in some hidden menu in Bitwarden. That's handy for things like AD/LDAP credentials.
Loss of knowhow for terrestrial plant construction and operation doesn't worry me, because conditions and designs for uses in space are completely different. You are better off with people who are completely free of all the assumptions embodied in old designs.
This is mostly true, but it is also because there is only one implementation of an these languages.

Go for example has a gcc compiler as well. And that compiler has very different options than the one written in go.
You're torturing me.

Edit: just this morning, I was wondering if I could make pretzels at home.

conclusion: too much trouble for the size of oven I have. I'd probably eat them all inside of a day.
Thanks very much. I wanted to hear from others who've made the same switch, so this is really helpful. LP has been pretty seamless for across devices so I wanted to know what to expect with BW.
And something as messaging apps require neither. Yet Google can’t bring a decent one to market and introduced three incompatible products in one year even though it has the worlds most popular mobile operating system.

What profitable products have all of their brilliance abd money brought to the world outside of adTech?

It came out in the Oracle trial that Android only made Google a total of around $23 billion in profit total by 2016. All indication is that Google pays more to Apple to be the default search engine on iOS than it makes on Android.
I do ignore it, thank you. I’m merely sharing my opinion and reasoning that it is, conceptually, bad.
A Brief History of Geologic Time (2017)
The hacker would have a copy of the old vault, so just assume it.
Perhaps the crypto passwords were stored in the unencrypted URL field, or could be understood from data in there.

https://twitter.com/SwiftOnSecurity/status/16060717986671738...
Google search is just plain bad these days, and I think it has more to do with their attempts at algorithmic curation instead of focusing on simple indexing.
I had a single core Athlon 64 that I upgraded to a dual core back in the day. That was my primary PC until I got a Ryzen 2400G several years ago. All are really great CPUs for many years after they're made. Next up might be a Zen 5 APU. I'm on a slow upgrade cycle...
Is there any evidence the “view count” is accurate? Apparently it’s just an estimate based on analytics, and I see no reason they wouldn’t just overstate it.
You can't say Link In Bio on TikTok
Did you know that you can't say Link in Bio on TikTok, as TikTok does not want users to leave their platform.

If you say Link in Bio written or in speech. TikTok will remove it. One work around is to say or write BiggerBio as it escapes the TikToK censors.
I fly premium economy from Europe to the US 3-4 times per year, and this is usually enough to keep my top-tier status. I fly SAS (preferably) and I try to fly on less popular times of the year/days of the week, which increases my chances of getting upgraded. I avoid connections in the US if I can because I rarely get good seats as a non-United ff.
By your example, your passwords are a set of fixed or knowable data, plus a unique identifier that in your examples is three characters long. Therefore knowing one of your passwords gives all except three characters of every other password, thus making your effective password length three characters (substitute the actual length of your unique identifier if it's more than three).
Let's build a browser engine (2014)
Quick tip: if you have Bitwarden's browser extension installed, you can use Cmd + Shift + 9 (I'm assuming it's Ctrl + Shift + 9 for Windows) to load your clipboard with a randomly generated password: h4!E49vFcGEE%c#$HZ%z*3^5B
I used KeePass + Dropbox/Syncthing for years, but eventually gave up. At some point I saved my KeePass db with a newer version (of the software and the DB format), and later found out that the newer software version will not run on an older version of MacOS that I still use on one machine.

I mean, I could maybe update the OS on that machine (not sure--it's over 10 years old) but at that point it was less work and less risk to switch to BitWarden. And the user experience is much better as well.
Their ‘chief regulatory officer’ Dan Friedberg was previously tied to a massive online poker scandal!

Let's get real here, there was no "due diligence" or anything else that should have been done when you are investing hard-earned money.
> Hopefully openAI will pay directly the information providers

It’d be nice if they tell the information providers they used the data. I think expecting them to pay is wishful thinking.
This is already happening at a state level, and with some not-unconcerning implications: https://www.cnn.com/2022/12/22/tech/tiktok-universities/inde...

For those two schools, students are completely blocked from accessing TikTok on school networks.
This is my exact use case.

I narrow down my searches with ChatGPT.

I love your analogy. Google would surely become the phone book of the internet and that's ok!
I think it's unfair to say he was unproductive.

Tolkien was an academic and didn't approach this in the same way a professional writer would today.
you're right - i have clarified what I actually do. however I do something similar with a different password for sites I deem unsafe, or spammy.
"It's okay babe, I developed a crippling gambling addition and gambled away our life savings ironically."
How does one handle password rotation requirements?
Not to mention that during events like the flash crash of 2010, even small volume traders with stop losses got screwed.

A stop-limit order in some cases works better than a stop loss order, but if there's a rapid crash that's not going to bounce back, a stop-limit order will be worse. There's really no substitute for robust alerting for abnormal market conditions and getting eyeballs on the problem quickly.

(I was writing execution algos for a Fortune 500 broker dealer during the 2010 flash crash.)

(This is not trading advice. Don't mistake it for trading advice.)
So can it run Solvespace? CAD with GTK gui.
If they issue you a refund it should be fine tbh.
They did both get hired by Jane Street, which is not so easy to do to.

So they did have the "smarts", it just depends on if this started out as, or became, a massive fraud.
Last password change date is a good way to figure out if a password is in a known breach dump, too.
Waaaay back in the day, I packaged Gazebo for Nix when I had an internship at a company that made robots. That was when I first dove in with NixOS, and decided that whatever packaging issues I ran into were just something I had to get good at dealing with and solve along the way. Nixpkgs was just a tiny reaction of it's current size back then, so I ended up packaging several things! I ended up needing quite some help in IRC at the time for Gazebo, which I remember as having a very quirky and bespoke build system. Folks there were extremely kind and helpful.

I ended up abandoning the packages when the gig ended. Sorry about that! Pretty cool that a whole ROS environment is well-supported via Nix nowadays. :D
This is the answer. The only advantage of passwords is that they’re cheap and universally compatible. PKI based solutions are more secure and more convenient. They cost a few dollars and there are too many standard, though.

Ultimately, I expect the biggest barrier to be mental. People have had mantra about passwords banged into their heads for decades that they have become synonymous with a secure system and people are suspicious when their device just lets them in with little to no friction.
I've started asking it to write tests for the previous answer. It helps with fixing up and hardening the solution
As someone who recently decided to forego future software engineering jobs in favor of an Applied Math PhD, this article is giving me some great confirmation bias.
It's doing abstractive summarization over the search results, using GPT-3. The pipeline is:

- Search using Google
- Run some filters to exclude SEO spam, etc.
- Scrape the pages that are returned
- Find chunks of text likely to align with the answer (comparing embeddings)
- Feed the most likely chunks into GPT-3 to get a summary

It is leveraging GPT-3 to produce better summaries, and it isn't purely extractive - the LLM uses context and knowledge to generate a better summary.

I want to experiment with a local model next, versus using GPT-3.
I'm no cryptoanalyst, but it seems to me that 1password's addition of the Secret Key, and encrypting all vault data, put them in a much better position than LastPass was.

[1] https://blog.1password.com/what-the-secret-key-does/
It's very rare to read such honesty on the internet.

While the internet has been in existence for a while, it is actually still quite young in the sense of affordable democratization of access to the internet. This does raise a lot of questions regarding long term effects of the internet.

While the current threat actors were relatively predictable, I wonder how in the long run nations can protect themselves from threat actors which are currently still seen as allies? On long timescales allies can become threats and threat actors can become new allies. Does this mean the concept of international companies and services will fragment? Currently Europe is trying to organize more domestic manufacture of semiconductors. Will the future see a race of nation states to be as self-reliant as possible? On the level of individual humans the prepper who wants to make his own shoes / computer / ... is ridiculed, while blocks / nation states / ... are taking steps in such directions...

Again, I thank you for your honesty, most people would just be embarassed for their past activity on foreign platforms, and not highlight it to others.
That doesn't sound too different from learning Mandarin or any other Chinese dialect. There are some parts of characters which are roughly phonetic, but generally speaking you're not going to know how to write a word by hearing it, or how to speak a word by reading it.
That's still no reason to keep Metal alive and ignore Vulkan. It's a huge competitive disadvantage by now. Put Metal on live support, implement Vulkan and transition to sit on a Vulkan translation layer. Profit!
> All children of Feanor (the main contingent of the Noldor)

This makes it sound like most Noldor were children of Feanor or that most of them followed Feanor and his sons, but that's not the case. The sons of Feanor and their followers were first to Middle-Earth - is that what you mean by 'main'? It's stated a few times that there weren't as many of them. The Noldor were an entire people, and most were neither Feanor's children nor followers of his children. (They were technically all under Feanor as high king of the Noldor for a time, though.) This is from the Silmarillion, describing their travel through Valinor on the way to Middle-Earth:

> Fëanor and his following were in the van, but the greater host
came behind under Fingolfin; and he marched against his wisdom, because
Fingon his son so urged him

and then after those who didn't follow Feanor cross to Middle-Earth in the north, many die, but there are still more of them:

> for the agony of those that endured the crossing of the Ice had been
great, and Fingolfin held the sons the accomplices of their father. Then there was
peril of strife between the hosts; but grievous as were their losses upon the road,
the people of Fingolfin and of Finrod son of Finarfin were still more numerous
than the followers of Fëanor,
Great idea! We'll look into that.
Kind of?

I can see it both ways. It is putting all your eggs in one basket. The flip side is your vault is supposed to be protected enough that shouldn't be an issue.
I wonder what school boards and the different levels of government will think about a sudden increase in students using VPNs and Tor.
Sure, stop losses are a retail-investor tool that subsitutes for not having a 24/7 active (human or algorithmic) dedicated decision-maker deciding when to try to unwind a position, for situations where your position is negligible relative to the market.

It's kind of a weird thing to talk down even of you aren't in the segment that uses them (though, I guess not if you are trying to sell people on hands-off investment in an actively managed fund rather than directly trading more fundamental securities themselves.)
“Christians” is too wide a net to ask for a single mindset on any topic. Relevant here is that the US was settled initially in some areas by Puritanical Calvinists, which is a large twig off the branch of Protestant Christianity.

As for my take, a few quick searches about what Puritans thought of the poor will give ample sources for reading.

I don’t have a (remembered) source directly for my own knowledge— it was just part of what I learned throughout a rigorous high school and college curriculum, various sources etc.

I do remember having to read a sermon by a famous Puritanical Protestant: Sinner In the Hands of an Angry God.

It was somewhat of a trend setter in terms of 1700’s fire & brimstone preaching.
Dope Notes IOS: https://apps.apple.com/us/app/dope-notes-life-organizer/id16...

Dope Notes Android: https://play.google.com/store/apps/details?id=com.holmgren.d...
This is quite interesting. A couple of weeks ago, I received an extortion phishing email, but it was directed to a secondary email address that hasn’t been previously compromised. It made it past Gmail’s spam and phishing filters into my inbox.

Maybe a coincidence, but I guess every weird thing that happens is going to raise alarm bells.

I was suspicious of the LastPass concept (storing passwords in a cloud app) when a former employer introduced it some years ago, but they had a strong IT and security culture so I trusted them to make the right choices and adopted it for my personal use.

A few months ago I hsd an issue with my LastPass 2FA device and a policy set by my former employer blocked me from resetting it for my personal account. It was resolved by LastPass, but that was the first strike, and I had spent most of the night extracting my personal account passwords manually from the mobile app, which remained logged in. That was strike 1. This is strike 2.
This seems like an aside, but I'd love to see smart contract wallets with velocity send limits, or time locked whitelists as well as social recovery
He said there wasn't much value in the wallets. Doesn't strike me as crazy to keep a small amount in something convenient. You see a similar convenience/security trade off made by big players, with immediate transactional needs satisfied by online/hot wallets and reserves held in offline/cold wallets.