skysight-inc/HackerNews huggingface dataset:
Seems as if most were out of my control e.g disease but that’s a solid point can’t escape it
I was thinking of smoking meats in particular.
Yes, Docker CLI will be configured to talk to the VM.
Netflix definitely benched their context-switches and they determined it was expensive enough to be worth engineering out.

https://www.phoronix.com/news/Netflix-NUMA-FreeBSD-Optimized

https://2019.eurobsdcon.org/slides/NUMA%20Optimizations%20in...
Like I said; the features don't work reliably. I've driven thousands of KM in a Model 3 and the features are impressive but not reliable. I'd go for less impressive but more reliable every single day.
I've also seen a lot of other sneaky bypassing of the law.

For example the news site nu.nl now requires having a free account to read many specific articles. This is a smart move on their part because logging in requires maintaining a higher amount of user information across visits and thus it brings a lot of tracking into the "technically necessary" realm so they don't have to ask permission.
One interesting book I read on this topic was Discovering God by Rodney Stark. The author discusses the development of other early religions and compares Christianity to other current religions. It's one of the most logical books I've read on the topic.
A decade plus library of photos & videos here; probably in the 50k mark now, it’s been pretty flawless for me other than than the iPhoto to Photos upgrade. Never really had any issues with imports and exports (which is how I ended up upgrading). I’ve even used the iCloud sharing more often than not which has been a bit clunky but works once you figure out how to get a link out to people.
Surely that would be the infamous "I am rich" $1000 app that does nothing ?

https://www.wired.com/2008/08/eight-people-bo/
I often get irritated by formulaic instructions for "strong" passwords when creating an account. I use a respectable password manager, so everything is unique and at least 10-15 characters with some numbers and symbols mixed in. Occasionally I use DiceWare. God forbid I don't include a number or use upper case, lower case, one of five symbols, but not th#t one! The worst is when I cannot copy and paste in both text fields. I don't even know what the assumption is there about end user behavior, but it's quite frustrating.

I know these practices must be reduced to the lowest common denominator, but perhaps websites need to allow minimum entropy and not force rules unless the minimum entropy isn't met. I don't know much about implementing, but people are so lazy that all these different rules and schemes are turn offs from better security practices.
I deliberately call myself anything but engineer, pretentious
Wordiply: Find the longest word that includes the starter word
Like a bomb calorimeter… you rapidly decompose your sample to efficiently extract the energy from it in thermal form for measurement.
> For reference, I've spent my whole career building boring Crud apps in a language you've never heard of.

Well now I have to guess. ColdFusion?
I had similar experience. I had interviewed with HR. Took technical test and interviewed with team lead of company. Then interviewed the CTO of the company. All of them were positive. No one called after that. I call them back but no result as you may guess. It was painful. I liked the company a lot.
> That's literally impossible without plaintext passwords

No, it’s not. It’s called locality-sensitive hashing. You’d store the last 10 LSH hashes in a database next to the SHA-256 hashes. Compare those LSH hashes to the LSH hash of the new password. Match? Reject the new password.

It’s also used to identify photos that are similar:

https://en.m.wikipedia.org/wiki/Locality-sensitive_hashing
"I pretended to be somebody I wanted to be until finally I became that person. Or he became me." - Cary Grant
> "Democracy" is more or less an delusion those in power perpetuate to ensure the cattle think they have a choice

Like him or not, Trump was very much not the preference of those in power, and very much was the preference of many people in America. That shows the people do have power.
People used to do them all the time for Christmas, but then got lazy and started sending just a card.
Tell HN: LastPass Deletion Instructions
1. You need to purge all your data manually, you can do this using a simple script from the vault page to select all items. Open the console of your browser and type:

for (item of document.getElementsByClassName('vault-item-displayname')) {
item.click()
}

2. When you navigate to the https://lastpass.com/delete_account.php to delete your account, the modal (for me) was blank and empty. There is an automatic HTML display: none tag applied. You can open the console and remove this CSS and it will show the confirmation to remove.

Cheers.
I have yes. I often use my old VT520 when working on textual material. It's great. Not so great when you need online reference material of course.

There's also something really comforting about that soft orange glow. And it's the one display device where the brightness and contrast controls aren't hard to find. Just two analog dials. It can also regulate from barely legible in a dark room to eye-wateringly bright. In some ways LCD still hasn't caught up.
littleton here. dropped from 42 to 14 in about 20 mins
Why are the sites where you have accounts not part of your encrypted vault?

Can someone confirm my understanding that 1Password does in fact encrypt the entire vault, including the URL/domain associated with each login?
I mean, your govt is banning enough of the shit with some real questionable reasons(while keeping some actual questionable things/traditions alive) that being skeptical is probably still the best bet.

and let's not pretend that the UA govt has had a history of transparency lol. Being better than Russia has been a low bar in the eastern bloc. -30 is better than -70 but it's still far below 0.
Thanks! Also that code seems pretty straightforward. Later there's this bit:

conv_layer.weight.data = (eigenvectors/torch.sqrt(eigenvalues+eps))[-shape[0]:, :, :, :]
## We don't want to train this, since this is implicitly whitening over the whole dataset

Oh it looks like you then just "remove" the correlated data.. Actually, you're just pre-"padding" the basic (gaussian?) covariances. Ah so then you'd skip training basic statistical information that's already easy to calculate directly. Clever!
I noticed the goal had nothing to do with providing value, or customers being satisfied, or even about the product being "good".
Then I hate to break it to you but that’s totally not true. It might have PMs or engineers shitting themselves, but the lawyers don’t really care. It’s just not a big deal.
When you're this neckbeard, you don't need a phone...
You are correct. The parent’s home plus some assets of two other individuals probably totaling a max of $5 million but nowhere close to $250 million - which was a stupid amount to set in the first place. Either require a reasonable bond amount or deny bail.
We have a brainfuck interpreter in brainfuck. We have Conway’s game of life in Conway’s game of life. When will we get doom in doom?
nobody is trying to embarrass you or "take potshots" but when you start objecting to comments because they are off by a rounding error or you start calculating percentages in response to the theme of "this shit has gotten expensive," you're outing yourself
It's worth getting a list of the most common passwords and rejecting them, regardless of whether the passwords are generated by machine or by the user.

For four digit numbers there's barely any variation in what people use. Even 1234, the most common, is only twice as likely as hundreds of other PINs. Maybe block the top half a percent of most-guessed pins.
WPA3: No go on Raspberry Pi (plus some Mac gotchas)
You and I, we're nobodies with no power. We share a country with people who do have power. The power they exercise impacts our lives. Those people have weaknesses. Those weaknesses can be exploited.

If you ran an intelligence service, you might want to identify targets, prioritize targets, and potentially create a graph of social connections.

Tiktok provides picture data (geolocation, timestamps, hashes, potentially facial recognition and OCR), location data, time data (hours app is opened), private message data, and data on hobbies/interests, I assume there is profile and private message data as well.

That's all without bringing up the glaring problem which is damaging institutional trust. Promoting anti-science videos or showing one group very pro videos and another group very against videos is damaging to our very social fabric. Amplifying things that feel intuitive but aren't correct is dangerous.

The threat model you perceive is that our authoritarian government would oppress us. The threat model that is happening is that external governments are causing chaos within our borders, amplifying division, and sewing distrust.

You perceive the government to be a bigger threat because of how you imagine you might exercise power, maybe you want to unionize, maybe you worry about police abuse, maybe you worry someone might take your guns, maybe you hate taxes. That misses the bigger picture... out of the following people, would you prefer them to be "compromised" by the CIA or by China? Soldier, Politician, Judge, CEO, Engineer, nuclear scientist, EPA regulator, Chief logistics officers, FCC employees, Bankers, etc.

I think the answer is pretty obvious, but I'm open to an explanation of why it is not.
Ask not what you can run Doom on, instead ask what Doom can run for you
Searching that phrase ... turns up only your HN comment.
We're Getting There – CrossOver Support for DirectX 12 (2021)
>What causes this behaviour?

As someone who's brown it's always been really irritating to have the white people try to pretend (and some of them even believe it) to have the white knight/savior complex.

Just leave me alone and let me do my own shit ffs. Browns and Blacks are not not mentally challenged 12 year olds.
Thank you for adding excellent context, as you usually do, dang. It's strange how so many discussions on this topic seem to proceed with no prior inputs, it's puzzling.
Tell HN: MailChimp's RSS Functionality Now Requires Posts 10-12 Hours in Advance
MailChimp used to send out a client's newsletters from RSS feed without issue. A few weeks ago, they started showing up a day later. After weeks of trying to get support to track down this bug, we finally got this response

"Thank you for your patience while my team looks at this. We were able to confirm that the best time range currently to space the blog posts is 10-12 hours before Mailchimp's sending time. There just isn't enough time between your posts and the feed to pull the new content.

As a best practice, I would plan your content releases a day in advance with this functionality in mind."

It started with 4 hours, now they are telling us 10-12 hours in advance? My client runs a news site and sends our daily news. It's not always possible to even publish content that far in advance. It's insane to me that this functionality was working fine, for years. That they have managed to break and instead of fixing are saying just publish an insane amount of time ahead of the newsletter being sent?

I'm not sure what it takes to get someone's attention at MailChimp to actually fix this. Read the RSS feed before sending the scheduled post. Like it used to. Otherwise, what newsletter providers would people recommend replacing MailChimp with?
> Now we can finally make the ultimate punchline: "Can Doom run it?"

But surely the ultimate punchline is “Can Doom run Doom?”
Wait, the default is the less secure option?

This company is a joke.
Archaeologists Devise a Better Clock for Biblical Times
> If we got rid of TSA-precheck, I would expect some of the bullshit that regular travelers have to go through would be eliminated.
It's pretty easy for people with power and influence to not give a shit about what the rest of us have to deal with, when they never need to experience it.

I must admit: if TSA pre-check is an example of what people with power & influence get away with, then I can simply not be convinced of your case.
Thank you! And good feedback, the README could be condensed a bit more to be more clean and readable.

Thanks so much for the suggestion, I'll take a look at it! And much appreciated to a huge degree on interest in the script, it's still not perfectly polished stylistically but now that the baseline checks out, we definitely have a lot of performance gains to be had in the next release! :D :)

Feel free to ping me if you ever need anything, I'm not the most active on GitHub but if you ever need to reach me by email for questions/comments/thoughts/etc, hi [ period ] tysam [ the at symbol ] gmail [ period ] com is my email address. :D
Worst case scenario is hackers push out a malicious update that steals master passwords.
Why are any fields unencrypted?! That is insane!

The only data I want my password manager to store is a single encrypted blob, and whatever information they need to store so I can safely decrypt it with my master password on my own device.
> perhaps even with 4 cones instead of 3?

You may enjoy reading https://en.wikipedia.org/wiki/Tetrachromacy#Humans

It seems that we've found one woman who is actually capable of using this (ctrl-f for subject cDa29)
I won't dispute that calling yourself a programmer is bad for your career.

But now that nobody is listening, let me tell you my little dirty secret: I can't think of any other occupation label that defines me better. And, it might be silly, but calling myself a programmer makes me really happy.

A few days ago, someone submitted pg's article advising keep your identity small [0], or at least the smallest you can. Being a programmer is part of my minimum set.

But of course, saying the truth about it, like saying the truth about so many things [1], can be very bad for you.

[0] http://paulgraham.com/identity.html

[1] http://paulgraham.com/say.html
When I became a dad I started making 'dad' jokes sarcastically. Now I make them and I don't even notice. So yes, beware.
Researchers discover reality is being run in Doom
Ask HN: Is structural editing considered mandatory for Lisp?
I recently tried using Lisp (CL and Racket) again after college, and ran into a problem that doesn't really seems to find any mention in books and evangelising blogs.

All style guides seem to agree that in Lisp, all closing parenthesis should be put in the last line of code (instead of stacking theme line-by-line C style). However, if you do this, and then want to add more code after the last line, you either end up having to move cursor to correct location by counting parenthesis (usually augmented with editors' matching paren highlighting functionality); or just delete all the closing parens, add your code and add close all of 'em again. Both are tedious ways of writing code.

Looking around the internet, the "solution" I find is to edit the Lisp code structurally through editing in whole s-expressions. This seems yo imply that if I want to write Lisp without pulling out my hairs, I need to first learn a new way to edit code and only then go to actual programming; not to mention that always being stuck in the constraints of sexprs would inevitably be too..., well, constraining.

Is this true? Is learning Lisp should really be preceded with learning structured editing? And if so, how come no learning material or style-guide ever mention this practical hurdle?
The amazing thing about this is, if at my company we had a project to migrate that much data, it’d take a month. There would be multiple layers of security to move through. How’d these ‘actors’ sneak in and get it all? I think they’ve had access longer than LP is letting on…
Right. So it basically depends on the person.
This is great, it's a big PDF? How do all notes get stored (as annotations)? What does a file size look like when it's all filled up?
I see UA before Zelensky and after as two completely different countries politically. Most of the things UA gov was criticized for seems to be mostly an effect of Russia's influence.
There's replit. Constantly announcing new features around such models. They'd introduced "ghostwriter" a while back and yesterday or so they announced ghostwriter chat.
> The audience for this article is engineering graduates starting a career, not artists searching for meaning.

Totally agree, I understand how it could sound irrelevant or pretentious. There are a couple of reasons why I wrote this comment, and I assure you it’s all in good spirit:

First, some young people who love programming don’t want to play the career came, and there is space for them as well. I read the article as “you must play to get anywhere” (my interpretation). You can do your thing, either alone or at a company, and simply not care.

Secondly, I know many who have more money than they could dream of earlier in their lives, but they’ve readjusted and moved the goalpost, and keep grinding seemingly because of peer pressure and habit alone. Some of them are miserable for no reason.

Third, working in order to play another game that you really like (family, hobbies, travel) is perfectly fine. Many people in my generation think that you must play all games at once, and they get exhausted. But no need – not giving a shit is sometimes the highest virtue.
I have a bookmark to a personal Google Doc called “SaaS Business Ideas”, for whenever I think of a project that I think I can monetize.

The Google Doc is actually view-only and says “Stop ideating about projects to make money! You probably don’t need the money. Just work on projects that you find fun.”
From my current employer I discovered that you can get surprisingly high mileage with spreadsheets and a little bit of scripting.

My employer uses Google Sheets with app scripts [1].

It automatically reads emails, updates a bunch of spreadsheets, makes other API calls, creates entire report documents etc.

The initial setup might take a while though.

[1] https://developers.google.com/apps-script
Grade inflation in massive scale?
I strongly suspect that discriminiation, affirmative action, and bureaucratic recordkeeping play at least some role here.

Informal, application-free processes are great for those for whom they work, but are also frequently a path to discrimination based on ethnicity, gender, religion, or other factors. Standardised forms and recordkeeping provide a track record that can help address any claims or investigations arising (though won't always cure the underlying problem).

That and simply increased information-handling capacity by businesses, moving from pen-and-paper to computerised formats --- initially punch-cards, now almost entirely electronic recordkeeping.
It's fine that you want extremely secure iteration counts like 99999999999999999999, but you should wait 9999 seconds to unlock. Every product should have just right default value. LastPass default iteration value was maybe fine in 2008 but computer power is improving.
Not working for me in Safari on macos (works in Chrome though ... nice!)
Sure here :)

https://hackaday.com/2022/07/12/even-doom-can-now-run-doom/
I was in charge of password policy for a healthcare app. We tried to use phrases, often cited as more secure than character/length requirements.

The doctors hated it. They didn't understand what a phrase was, it was too different from every other system they interacted with, and it was extra cog load in their already busy days.
Where does it appear to be going word by word to you?

It's sweeping each sentence at a fixed number of milliseconds per character, set so that both languages finish simultaneously. Look at when "Donald Tusk" appears during the first line. Much sooner in English than in Polish, and both are happening before he actually says the name.

The example from the game is doing entire sentences too.
> You can't frame a house at home in the shower

I beg to differ. I only do building as a hobby, but the amount of time I spend thinking about how to build things in the shower is pretty much the same as with my tech job.

Again, it may be more about the person than the job
Update Your Course Syllabus for ChatGPT
Get there fast. From very far away. The over simplified example I see posted a lot is “Pearl Harbour at the push of a Button”. It’s completely ignoring any aspect of defence which while not a well developed situation yet, there are definitely technical capabilities that can be improved to offer some level of defence. But the concept is well conveyed, long range surprise attack capability is something a military will obviously want.
(A Non-Twitter redirect) – alternate source : https://archive.vn/mERtx
No.. just overfitted models
I think that’s a very cynical outlook on society.

I take it you’re not a huge fan of the US constitution?
Why aren't sanctions transitive by default? E.g., if we ban sending tech to Russia, we should also ban sending tech to any country that doesn't have the same sanction.
He notes many are asking for it. They want to migrate off Twitter but require Quote Tweet.
Go work for the government then? Or wait, the government is way stingier with raises than private companies are! Engineers fight over jobs at private companies and shun government jobs because governments don't reward good work.
Surely even having an LSH stored is a potential compromise - e.g. if my password happens to have the same LSH as somebody else because I've used "Secret-123" and they've used "Secret123", then you've presumably got a better chance of guessing what my password is than if the LSHes weren't stored (if you can't get from me directly, you can try to get it from others who have the same LHS).
>If we talk about rational numbers the 1/3 + 1/3 + 1/3 proof is not so bad, is it?

It's not a proof at all, as the author acknowledges. In fact it essentially assumes the consequent.

The issue is that writing down 0.333... essentially already assumes that you are working with real numbers. 0.333... should be thought of as an infinite series and you really want to use analysis in that case.

You can do analysis on the rationals, but that is a very bad idea. But in the end you would still define equality the same way, which already is the proof.
Remember back in the days of https://what-if.xkcd.com/96/ when $1,800 was the highest hourly rate for a lawyer?
From the article (emphasis added):

“The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs …”
This is very cool!

I've been wanting to play around with synthetizers / trackers (?) for a bit. I played around with TIC-80 (another fantasy console like PICO-8) amazing track + SFX editor, but I'm very lost as to how to actually make... music, instead of noise.

Does anyone have any beginner resources on music theory, specifically oriented to working with synthetizers and trackers?
As a TSA-precheck member, I’ve never felt like part of the ruling class until today. Bow before me and tremble!
Being able to communicate effectively seems not pointless.
Probable explanation for the mysterious hacks on Xfinity accounts despite having 2FA enabled:

2FA bypass allegedly circulating privately

"A researcher has told BleepingComputer that the attacks are being conducted through credential stuffing attacks to determine the login credentials for Xfinity attacks.

Once they gain access to the account and are prompted to enter their 2FA code, the attackers allegedly use a privately circulated OTP bypass for the Xfinity site that allows them to forge successful 2FA verification requests."