skysight-inc/HackerNews huggingface dataset:
Are you serious? What do you know about the families? And what right do you have to dismiss our families as "advantaged" and thus deserving of having awards kept secret from us. This is the kind of two-faced callousness that has gotten the school into this trouble. Let me guess? You're also a member of the TJ Alumni Action Group, which has targeted our Asian families with racist stereotypes like the kind you are perpetuating.
From this doc: https://pages.nist.gov/800-63-3/sp800-63b.html

There’s also this great quote:

Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically).

There’s other great stuff in there as well like that you should allow users to “paste” passwords and potential passwords should be checked against a list of known bad ones.
Highly recommend http://reddit.com/r/Alcoholism_Medication as a way to learn more!
> Who came up with the $25 million for bail?

No one, because there was no $25 million used for bail.
15-16-18, does it really matter? You were all "gold and gemstones" Anyway, you're going to tip, right?
Single Page App being one-upped by a Single PDF App! Wild idea here! It's so neat what we can do with a flexible medium.

> The planner is just a pdf file, so you load it onto your tablet like you would any other pdf or ebook file. The steps vary depending on the device you're using
It could be a password 3 passwords ago rather than the current one
https://pages.nist.gov/800-63-3/sp800-63b.html

> Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.
Bail is a filter. People that are functioning in our society and have something to lose will have earned the resources (either financial or social capital) to post bail.

People that are not functioning on any level (just because they're low-income doesn't mean they don't have friends or family to help) should be treated with caution, because they have nothing to lose.

They already are facing jail, so why should they try to function?
> Anyone who thinks that doesn't understand programming, and is someone who you probably don't want to work with anyway.

I agree, and it disqualifies most tech companies.
Yup. And if you’re buying bare cells (18650, 21700, etc.) a guy called Mooch is the unofficial authority on their specs and how to avoid counterfeits.

He’s been at this for years now, mostly followed by ecig users (who rawdog these cells, and are keen on not lighting our faces on fire)

https://www.e-cigarette-forum.com/blog/moochs-recommended-ba...
No it's not. It's about a pattern of withholding merit information from parents and students for years.
There is no way to tell if a password is strong since it may be reused.

Instead services should provide a random password so the strength can be known.

For example, this is a 128 bit password: CR4EOJ5ZYQRKCGQV4OLN2ZRFS.

Since that is a random number provided by the service it has a guaranteed strength of 128 bits.

Some in this thread seem to gloss over a vital point: security is measured in bits.

The whole character set stuff, "this many characters, special character, must include a number" is meaningless. Instead, a target strength in terms of bits should be specified. That can be represented in whatever base or alphabet as desired. This tool help makes that point: https://convert.zamicol.com/#?inAlph=0123456789ABCDEFGHIJKLM...
Can vouch for this approach, been using it for rails development for the past 6 months after my work swapped my macbook pro for an M1 Max Mac Studio and it's been solid.
I feel like this is what comes from someone who doesn’t have anything to lose by abandoning these platforms. Yes, you can stop using big tech platforms and controlling your data, what’s the reality of doing that? Who are you making videos for and whose videos are you seeing? Can you get all of your friends and family to use Mastodon? Do they want to? How about sharing pictures of your kids with your parents?

None of the big tech solutions are good, but they are where people are.
> but it's much more likely that someone just picked four that they like

Or as I would call it, the fallacy of uniformity. The author assumes that hackers would only try a dictionary attack using lower case letters, but this is no longer true since mid-2010s. Some dictionaries geared for international services also have non-Latin characters since not all countries restrict passwords to alphanumerics.
That's insanely inefficient
I do think a careful and deliberate parsing of what he said is necessary. The rage machine likes to distort.

"Last night, car carrying lil X in LA was followed by crazy stalker (thinking it was me), who later blocked car from moving & climbed onto hood.

Legal action is being taken against Sweeney & organizations who supported harm to my family."

So for the scorecard:

Stalker: yes

Has to do with Musk: yes, it's his family

Didn't have anything to do with tracking his plane: Never made that claim. " legal action.... Taken against.... Who supported harm to my family" (I would add he could have used the words "supported potential harm)

Didn't happen in the way that musk described: he didn't describe how it happened. (unless from another source)

I think this is a good example of how going to original sources, not letting others prime opinions, and careful parsing of words is necessary in this world so as to not become a pawn in the game of outrage.
This is how I did it on an M1 in September: https://github.com/nlothian/m1_huggingface_diffusers_demo

I think it probably needs updating now, but it should give you something to start with.
I thought alcohol was helping me in my 20’s - just like I thought I was a high functioning alcoholic by the end of said 20’s.

In actuality, my consumption had slowly (but dramatically) lowered my standards on _everything_. My daily routines had all but evaporated. I was in a constant rush, phoning in virtually everything in my life - all while planning for the next drink.

Took 30 days of sobriety to realize the sauce had robbed me of 15 years of my life. I can count on one hand the number of events in hindsight actually _better_ due to alcohol’s presence. Turns out most gatherings begin awkward - with or without alcohol.

Alcohol is a scourge. It suffocated my values and turned me into someone I was not. Unsurprising [0]”Criminal activity is more closely linked to the use of alcohol than any other drug.”

Fascinating “Pet Theory” that would surely electrify a room of bev alc marketers.

[0] Esser, M., Sherk, A., Liu, Y., Naimi, T.S., Stockwell, T., Stahre, M., Kanny, D., Landen, M., Saitz, R., and Brewer, R.D. (2020). Deaths and years of potential life lost from excessive alcohol use-United States, 2011-2015. MMWR Morb Mortal Wkly Rep, 69 (30): 981-987.
The others are https, not http:

https://histalk2.com/
Where are you from and where do you live?

My impression is the USA has the worst drinking culture. Many other places in the world have much better ones. UK pubs, Japanese izakayas.

I had a pretty negative view of drinking growing up in the USA with MADD's messaging etc. Even though my parents drank socially it just seemed not worth.

Then I moved abroad and my outlook changed

Here's an interesting talk on some of the possible benefits to society of drinking

https://longnow.org/ideas/drinking-10000-years-intoxication-...

note: I am not suggesting you should go drink. Rather, I'm only passing on my experience. I didn't drink until I moved abroad in my mid 30s. I still generally don't drink in the USA but I've had some great times drinking abroad.

I experienced those "benefits" outside the USA but rarely inside.
one tequila, two tequila, three tequila, floor
PC Magazine is in Google books so you can browse those to your hearts content.

Fun to read the old reviews and columns from time to time, as well as look at the old ads

https://www.google.com/search?tbm=bks&q=Pc+magazine
Alcohol is great if you can keep it moderate. It helps socialization quite a lot and I don't think I would keep going to clubs and parties if I didn't drink. But I try to only drink once a week and not go beyond 4 beers.
A no-cloud password manager: https://www.pwsafe.org/

With a whole host of alternate, compatible, implementations:

https://www.pwsafe.org/relatedprojects.shtml

Allowing for self-hosting (and in a few instances, some 'syncing').
The piece has a lot of anecdotes and personal stories and very little in the way of actual quantitative claims about contamination. Mushrooms allegedly tasting weird isn't exactly someone one would base industrial policy on.
NIST is pretty good to convince people
It’s much easier than ever before. You centralize identity to an IDP and require SAML or OAuth for applications.

Then you manage it once. Typically you can get rid of most of the password bullshit by adding MFA, with some exceptions. Unless you’re a DoD contractor or handling taxpayer data the came from the IRS on behalf of a client, MFA should meet or exceed compliance requirements.
Relevant context: Mencken is the namesake of a white supremacist hate group.
B2B is worse because EVERYONE shares business accounts with other people at the business. And so the usernames passwords and even two factor setups are passed around like coffee.

“Oh use bobs login for that, the standard password but add a ! for reasons”
Codd argued this a long time ago. Unfortunately Codd died twenty years ago, so we can't ask him his current thoughts on the matter. On the other hand, Chris Date dropped this rigid view of the relational model way back in the 1990s.

https://www.youtube.com/watch?v=swR33jIhW8Q
Because the countries are so small? In the USA, you could be shipping 30 miles or 3000 miles (not counting including Alaska and Hawaii).
I used Lispworks alongside SBCL and other Common Lisps for about 16 years. Once in a while I had a problem with some quicklisp library in Lispworks, but it was infrequent.
At least in the US in a high paying job you can very easily save 50% and still have more spending money than most people around you. It doesn’t necessarily mean you have to sacrifice anything other than lifestyle creep
Mysql Workbench has always been buggy but when it works I love it...even more than SQL Management Studio(not that the two are interchangeable since one is for Mysql and the other MSSQL).
I just settle for Heidi SQL most of the time now.
> when trying to login, the "enter your password" field isn't got the same limitations, and you cannot login because you're using the wrong (too-long) password

> You cannot paste into this field

If I may self-promote, my web browser extension StopTheMadness solves both of these problems. https://underpassapp.com/StopTheMadness/
On MacOS the Force Quit Applications can be launched with Cmd-Option-Esc similar to how on Windows Task Manager can be launched with Ctrl-Shift-Esc.
I would be more likely to take a $250 million credit risk than with 15 collateral than $2,500 credit risk with no collateral.

The point is to show you, your family, and associates have skin in the game and think you will show up at court
The problem is (as always) the "bad user" case. You get some users who run at 100% utilization full time (or more because depending on your model they might be able to have multiple instances). They'll be the ones doing things like running a Discord bot in a popular server, or reselling the image generation or something.

This kills your margin.
Mindblowing that this was so easy to build.

Coming soon to a phone near you, and in realtime.
That is if you have no collateral to back it up
That depends on the legislation in your country (which may include international agreements to abide to other countries' data protection laws). But you should be fine with these main provisions:

Data privacy policy: offer a data privacy policy which explains which data is processed (collected, stored, processed), for which purpose and how a user can request data deletion. State clearly when data cannot be anonymised (eg. email for user login). Make sure to include 3rd party data processors (eg. google analytics).

Purpose: process only the data needed, don't process data because it might be useful in the future

Identifying data: where such data identifies a single person, anonymise it (eg. blank out the last part of the IP address)

Retention: aggregate and anonymise data as soon as possible, delete the raw data once it stops being useful
Even billionaires like LeBron James are afraid, I doubt there is hope for the little guys.
Incorporate AI in your workflow to help kickstart and save time on your tasks
It is a little weird — I vaguely recall that the sort of “diplomatic” answer about password managers has been for a while something like “well, you should use keepass and just keep things local, but if you want to ease of use, lastpass is not too bad.” So that went right out the window I guess.

I mostly use keepass, but for some accounts I don’t really care about I’ve started using the built in Firefox/iOS stuff. Giving that a second thought about now…
Rich folks are only so seemingly "efficient" and good at creating capital because they decline to do what the government does.

The ultra wealthy property developer only builds what is profitable, and so slices off to serve only the most profitable part of the market to serve, and accordingly only builds luxury condos.

Meanwhile the government is obliged to serve everyone, the disabled, the poor, etc, and so with its housing whatever profits are gained by its market priced rents to the middle class are leveraged toward sustaining the unprofitable housing it is obliged to create, and the whole enterprise isn't profitable and needs outside subsidy to continue. We disparage this as "inefficient" government yada yada.

These two different groups aren't working on the same problems.
I wonder if this would have been swept under the rug if it didn’t get to this point in public.
My intuition tells me GPU utilization is very different. Those services are egress bound. Egress is super elastic and can be scaled to stupefyingly large numbers.

GPU utilization is less scalable. No GPU cloud service is particularly popular. I don’t think any of them are profitable. Having 1:1 GPUs to users use tough.

Gaming is especially difficult because it’s super latency sensitive. Which means you need racks or expensive GPUs sitting in hundreds of edge nodes. I’m super bearish on cloud gaming still.

ML tools aren’t that sensitive. They’ll exist and they’ll be profitable. But I think the economics are tough. And as a consumer I’d still greatly prefer to run locally. Which means there’s a tension between “good for the customer” and “good for the business”.
It is not true for the United States. The cost varies based on the distance between the shipper and the receiver. Shipping from New York to New Jersey is much less expensive than from New York to San Francisco.
> - Past password similarity checking (I'm actually not even sure how they do this unless they somehow have access to the plaintext version of user passwords; if there's a benign/secure way of doing this I'd be very curious)

Same way you verify the current password: hash it and compare to what you have on file. If you use salted hashes and the salt changes, you'll have to keep enough of those around, too.
Just out of curiosity, in what sense is Codex is better trained than CodeGen?
Must be nice to be a big time financial crook. You get treated better than a normal person.
No. I am NOT describing vigilantism. I am describing enforcement of rights, at the time they are violated.

The distinction being that vigilantism happens after the fact, or by people who were not witnesses.

As an example, if someone steals from a business and returns later, its too late to arrest or hold them. But if you perform a citizens arrest at the time of the theft that is legal.

Another classic example is a use of force altercation. All participants should be present from start to finish to avoid legal jeopardy if they wish to intervene. Someone that sees a fight after it started has no idea whose side it is legally permissible to take. Even so, it's very risky to intervene because it's hard to know what's going on in the heat of the moment.

This is why rights must be enforced in the here and now, by those that have standing to do so.

Otherwise, as you say, it's vigilantism.
> I probably would, because of the memories, but you didn't give that option

So you recognize it is conceivable for someone in a female body to desire to be a man. Great.

For YOU, you think only your memories would drive this and you can’t fathom people coming to such a conclusion otherwise. You assert that hormones might lead you to accept being a woman.

Well some people have naturally different levels hormones. So by your reasoning it stands that some people may have naturally varying identification with their gender.

I think most of your thinking here is dumb and willfully ignorant of the explanations of people who feel they are not the correct gender despite being in a body of that sex. But sure, glad we can agree that this concept is fathomable.
Can they when the government has sized them?
> The vast majority of people are able to buy Internet service and it is not a significant percentage of income

how did you know that the cost of such a service is not way overpriced compared to the cost of production?

Are there really many ~sandwich providers~ISP that you can compare it to? Or are the prices just taken because there's no alternative, and that ~sandwiches~internet access is needed for living?
Ask HN: How can a game with big vulnerability can be still sold?
https://www.cvedetails.com/cve/CVE-2018-10718
https://www.cvedetails.com/cve/CVE-2019-20893/

https://steamcommunity.com/id/Wackiiy/recommended/10180/

or is this a past thing and fixed? I have not found any info about that it has been fixed.
open the dev console and use Javascript. Find the input element to check and create a query that sets them all to checked with https://developer.mozilla.org/en-US/docs/Web/API/Document/qu...
Similar example. I'd managed to not read it somehow until 3--4 years ago.

It is quite the yarn.
I suppose this is equivalent to writing an option for a very unlikely downside event.

- Pledge $250M in exchange for $4M collateral and $X in interest (?)
- Near certain outcome of SBF showing up into court, unless some 4-D chess plan has already been contrived to have him and parents flee (what career do they flee to? Each of them?)
- Collect risk-free interest

In the case that this trade blows up, you then call Talib Nassem and tell him you have another anecdote of underpricing tail risk and he'll write about it in his next book on the folly of underestimating black swan events.
Who is claiming anything is binary?

So you agree things are objectively more expensive. Now the distinction is... that it's not entirely the Boomer's fault?

Sure, there are likely a few other factors involved but that doesn't mean Boomers hands are clean.

Boomers had a good run despite the challenges of their era, benefited much from policies they rolled back, and remain largely in control of government and wealth in the US to this day.

They oppose changes needed for the new generations to come into their own: NIMBYism, longer careers, owning multiple homes, denying voting initiatives like ranked choice or same day primaries, deregulated industries, rolled back most estate taxes, opposed unions, teaching fantasy economics and berating the kids who find it's not working.
That could be the case wherever you live, but this isn't true in general. The word "engineer" is protected title in some countries (without requiring additional qualification such as the word "professional" or "licensed").
Was a High-Altitude Airship Spotted Recently Near the South China Sea?
The big advantage of bloomberg are their bond tools. I have yet to find an alternative.
I’m interested to see how project finch works out compared to Docker on a Mac.
It’s an open source client for container development.

https://github.com/runfinch

When I tried Rancher Desktop it didn’t work so well.
She has to hope that Sam goes to trial. If he does, her testimony against him earns her that 5k1.1. motion to reduce sentence. If he doesn't, the government may or may not file the motion. And if there's no 5k, there's no Rule 35.

Despite the noise, it doesn't look like either Carol or SBF profited much from this scheme. At the end of the day, the "luxurious lifestyle" looks pretty spartan. Bernie funded years of living large off of his victims; not the case here.

The clawbacks and value of the FTX positions long term will be interesting.
Not only high enough to make it unlikely for him, but if there have been other financial dealings (say, money laundering, offshoring, or various forms of criminal activity), which might serve interests to not see surfaced in court, then to make disappearing him overly financially painful for them as well.
Works fine for me, for the last 10+ years. Fedora and Thunderbird.
Germany and France seek to match US green industry subsidies
That article portrays a very bleak future. I can’t imagine programming will be generally useful if it needs a massive AI model that can only run on machines that cost an enormous amount of money, or cost you some cents for every word it generates using an API.
Thank you both for posting these comments. I see myself in both of them and feel somewhat spooked, because those are my problems and the things I do (especially the laptop docking part and trying to do a productive hobby after work). And to hear from other people that they also have these problems and also do these things, is kind of cool (although i don't wish anyone these problems).

Airgapping would have too much friction for me to be a feasible solution. But i still need to get away from this time/brain capacity/energy wasting thing called internet.

Literally every blocker i try to implement is just another time waster, first I need to spend time thinking of a blocker, implementing/setting up the blocker and then last but not least bypassing the blocker.

I don't really have "hobbies" that don't include using a computer. So there is not much time i spend doing the fun things but instead doing the things that just happen when i'm trying to do my hobbies.
Could you unpack that a bit?
Mexico plans to ask US for up to $48B for solar projects
The things that are bad about SQL have nothing to do with set theory. The non-orthogonal syntax. The terribly limited and opaque type system. Ternary logic that fails silently. The utter lack of composability or testability.