skysight-inc/HackerNews huggingface dataset:
The following is a very poor description of how color vision and paint color works. Almost nothing you’ll ever experience outside of lasers and LEDs have narrow light emission peaks around a single wavelength. Everything has a spectrum of color and trichromat vision splits these spectrums into three slightly overlapping bins with their own spectrum response. The colors you see do not map to frequency. They’re all synthetic based on the biology of your eyes.

Plus if the nonsense about activating two cones is right, why not activate three and paint them white? The yellow they picked is just bright and has a lot of contrast against more or less everything in the environment because there aren’t many big yellow things around… and they picked a color that is quite loud but also not very obnoxious like a neon yellow would be… just slightly muted while still standing out.

> “The yellow is not pure spectral yellow,” says Ivan Schwab, clinical spokesperson at the American Academy of Ophthalmology. “The best way to describe [the color] would be in wavelength,” says Schwab. The wavelength of the popular school-bus color is “right smack in the middle” of the peak wavelengths that stimulate the photoreceptor cells our eyes use to perceive red and green. The red and green photoreceptor cells, or “cones” as they are commonly known, are the two most predominant cones in our eyes. Schwab says, “If you get a pure wavelength of one color…and you hit just one cone with it, you’re going to have x amount of transmission of signal to the brain. But if that [wavelength] were to stimulate two cones, you’ll get double the amount of transmission to the brain.” Remarkably, “That color that we are calling school bus yellow hits both peaks equally.” So although they may not have fully comprehended the science behind it, the color Cyr and his colleagues chose at the 1939 conference makes it hard for other drivers to miss a school bus, even in their peripheral vision. “And it’s darned big,” Schwab adds.
Expiring passwords are the bane of my existence. My current job does that. It was originally a requirement by Microsoft and they've been recommending against it, but it catches up slowly.
> in wintry implementations they don't allow pasting into a password field

With Firefox, setting the "dom.event.clipboardevents.enabled" about:config setting to false stops this dark pattern, allowing one to paste into fields that the website designer attempted to block one from pasting into.
Sounds like an interesting theory. Can you give some examples of these hobbies?
How did you sell out, and practically how did it turn out?

I'm interested in doing the same thing.
I mean until they're $17 pre-tip, your drink is under $20.

And yeah, most good cocktail bars except the absolute fanciest (like, nationally known) are running at half the price this person was saying. It's in incredible exaggeration.
-- this thread seem to forget bond is not meant to be punitive -- it's to make sure you come back to court - the 8th amendment protects against this - if the court is going to set an excessive bond - they need to grant latitude on how it's exercised --

https://www.law.cornell.edu/wex/excessive_bail

https://nationalparalegal.edu/ViewNews.aspx?intTakeOnNewsID=...
kinda. you can calculate the number of bits of entropy in the password

8 character long alphanumeric lowercase password: (26+10)**8 = 208827064576 possible passwords. 11000010011111000100000010000100000000 in binary = 38 bits of entropy

20 character long upper+lower+numeric+other ASCII password: (26+26+10+32)**20 = 2901062411314618233730627546741369470976. 132 bits of entropy

128 bits of entropy is considered to be enough for all purposes
Designwerk Unveils Megawatt Charging System for Electric Trucks
L.A. students have high grades but low test scores
I think equivalent collateral to 250 million was posted yes.

Anyone catch the AMC -> APE reverse

Let’s name the FTX tokenized stocks
Mximiazing Privacy and Security with iCloud’s Advanced Data Protection
That's from an eternity ago. Speaker diarization has come a long way.
TIL The beer was first named Siglo XX which stands for 20th century. The name Dos Equis later came about from the roman numeral for twenty, which is XX.
I used ChatGPT to make a website, mainly for programmers to write code.
The code process of this website took me more than two days on Saturday and Sunday, I think, with front-end html, css, js and so on, and then the back-end with python, the key now also makes me happy and surprised is that the website code I am using ChatGPT to write . A little bit of ask him to let it write out, python I do not know, asked it to write , interested can see the following link. The page is very simple, referring to the playground of the official website
YC companies are in the business of raising the next funding round. It creates different incentives and management styles.
The military is perfectly capable of solving more than one problem at a time. This issue is being dealt with in addition to the other items you read about in the news.

The USA, technologically and manpower wise is doing fine at the moment in addressing these external threats.
> LastPass storing the URLs unencrypted is so mind boggling. What could possibly be the justification for that?

I've never used LastPass, but if the URLs would be encrypted then checking "is there a password for news.ycombinator.com?" would require unlocking the vault, right?

So then you'd at least have to enter your password once on (browser) startup so it can load the list and keep that in memory, and you won't be able to automatically sync things either.
Obviously yes and there are billionaires whom it is not even known they are billionaires!

As one example of some discovered -
https://www.bloomberg.com/news/articles/2014-05-08/three-mys...
Yep. Folks treat relational databases like dumb bit buckets. They assume they are limited and therefore treat them as limited despite the reality of modern SQL. It should not be a surprise to find that most devs skip modern development practices with it as well.
Ask HN: Could I pay someone to host a fingerprinting script on their site?
I am collecting browser fingerprints for a project and I need a lot to analyze them for data. Is there a service that I could use to host my fingerprinting script on a high traffic website or would anyone on here be willing to do so?
they are afraid because their yachts are on the line
TikTok is a massive platform that can be used to subtly influence popular opinion through its algorithmic feed. That should make you afraid, even if you don't believe you'll ever be targeted as an individual by China.
How does file sharing performance compare?
If anyone has any questions about Mutagen (or integrating it into their Docker-based workflows), I'm happy to help.

Just one clarification on the article: Mutagen offers Docker Compose integration, not Composer integration (Composer is a PHP package manager). However, as mentioned, DDEV is a great option if you're looking to do containerized PHP development while using Mutagen for performance improvements.
“it is difficult to get a man to understand something, when his salary depends on his not understanding it.” - Upton Sinclair
How to learn bootstrap(CSS framework)?
Most people say learn by starting a project, but how do you learn like that? It irks me. I am watching brad traversy's video

https://www.youtube.com/watch?v=4sosXZsdy-s&t=460s

and I get nothing till now.

I know html,css and js properly. How do I learn bootstrap now?
Like I said, your not drinking enough.
> What level of rape/murder is acceptable from criminals who have not yet been charged with a crime?

Huh? What are you talking about? You don’t even get a bail hearing unless you've already been charged with a crime.
I'm reminded of the way computer chess has evolved. It wasn't all that long ago that you needed rooms full of all kinds of special purpose power hungry hardware and then suddenly all that was gone and the strongest programs in the world fit in your pocket on a device using as much power as a small lightbulb. An extra level of understanding of the problem domain achieved through 'slow' methods can be an enormous difference in terms of practical applications.
At least 19 killed this year in hoverboard, e-scooter fires
See ~ page 16 here for the (historic) definition:

https://personal.math.ubc.ca/~cass/courses/m446-05b/dedekind...

It’s possible to work with both {x : x < r} and {x : x <= r} and maintain the distinction between 0.999… and 1, but then eg. 1 = 0.999… + x has no solution.
No idea if this could be related, but @pantulis you're in Madrid (says your profile. Well, "from"), whilst @marcinzm you are (I'm guessing) statistically in the US, maybe SF?

Is it possible that it works better to "just talk to people" in some parts of the world, than other parts? In SF, software engineer salaries can be $X00k/year, but a lot less in Madrid. I wonder if this can influence people's behavior.

(Nonetheless personally I'd never do only such unstructured interviews.)
The Army once built an underground ice fortress during the Cold War
No experience, just saw a post on someone attacking LastPass Vaults. It looked to include everything. Apparently they wrote a tool specifically attempting password recovery on LastPass vaults and with a RTX 2070 (2 generation old) managed 309,000 against the 5000 iteration flavor and 15,500 against the 100,100 flavor.

More info at: https://blog.elcomsoft.com/2020/04/breaking-lastpass-instant...
It depends on where they practice. In some countries, they should absolutely be worried about misrepresenting themselves as licensed engineers.

For example, in Canada, the title "engineer" is reserved for licensed/professional engineers, so it would be misleading to use the title "electrical engineer" if they're not actually licensed.
In my opinion, the Barista makes or breaks the coffee place. It never made sense to me how some coffeeshops mis-hire for baristas/servers. Starbucks got this right, and they have (most times) highly qualified staff even in foreign countries.

This is not the same for Amazon. What you care about is delivery time and choice and they are doing well in that front.
My assumption would be that the research education would be very subpar at an institution like that
Another question, what if they are still paying a mortgage? Then they are “bailing on leverage”? Committing the bank’s home to the US govt.
As I explained above, time is not used in the decryption at all. You use a timer to set expiry for the masterkeyphrase. For eg: If I want to encrypt all personal communication with my family, I could use a single master key phrase for the year 2022 (for all personal correspondence). The UI could prompt me when the new year arrives to reset the master keyphrase. There would still be the file level data encryption key phrase.

In the following [] denotes a byte sequence and | denotes concatenation of two byte sequences and +/-> denotes a transformation.

Encryption

[correspondence] -> [masterkey encrypted datakey|datakey encrypted data]

Normal Decryption

[masterkey encrypted datakey|datakey encrypted data] + [datakey] -> [correspondence]

Key recovery (datakey lost/forgotten)

[masterkey encrypted datakey|datakey encrypted data] + [masterkey] -> [datakey]

Once the datakey is recovered, the encrypted data can be read.

We use keyrecovery as a backup.

We don't need to worry about clock accuracy for this as the timeframe we are talking about is in the order of days or months.

For added security you can use a different keyderivation/encryption method for the masterkey and even a different encryption method. For eg: You could use RSA to encrypt the datakey while you use AES for the data.

I hope this clarifies.
I'm pretty sure he himself is surprised that this ruse keeps working over and over again. It really shouldn't be legal though, to lie like that and get away with it while stiffing retail investors should be criminal and I'm kind of surprised that it isn't.

And the more he gets away with the more he will push that boundary.
Quotable, but very seldom recorded.

The one extant audio interview I'm aware of was made at the Library of Congress, in 1948. It's now available on YouTube:

<https://yewtu.be/watch?v=QpGzpqU-b04>
I don't think that is correct. I don't think the market actually needs phd level stats skills. Its just like the market doesn't need phd level pure math or doesn't need phd level CS. The number of situations where these specialized knowledge is useful in industry is vanishingly small. Having a phd is more about being even considered for an interview for such a position. The actual day to day knowledge used will consist of topics that even a person with a bachelor could require without putting in years.
This was exactly my theory for a long time, but I really do think it’s chemical. My baseline anxiety turns out to be very well treated by my ADHD meds (amphetamines). Cannabis high doesn’t feel at all like my baseline anxiety or like heightened anxiety that more closely fits typical general anxiety symptoms for me. It feels like what people describe when they talk about a bad trip.

Anyway I’ve thought about taking advantage of the legal market to see if there’s bud that works for me, and even (maybe especially) after working in the industry for over half a decade I’m not inclined. They just don’t grow anything for me, and I’m too old now to want to experiment.

I do appreciate your pattern recognition, because it’d be the same recognition I would have. I don’t think the pattern fits me though, I really do just react negatively to THC in high doses.
Password strength is:

Unknown entropy - known entropy = password strength

Where "unknown" entropy is known only to the user and service and "known" entropy is any entropy known by a third party. Since this is an information problem, it should be treated with the tools of information theory, where security is measured by "unknown" entropy. Services have no way to know if a provided string is entropic, since it may be 100% "known" by others. The only way for a service to verify that a password is secure is for the password to include entropy provided by the service. If the user also wanted to validate entropy, it too could provide entropy for mixing in.

This is just a special case of Kolmogorov complexity, and the highest algorithmic entropy for this problem is a random number.
The biggest bummer is that it was said back in August that some shitty info was obtained by the hackers... few months later... sorry something else was also obtained. This is the worst. They should've scrubbed everything clean the dev had access to.

As a client, when your instincts kicked in alerting you that your passwords are in danger, you might've been patting yourself in the back saying to yourself: ok, my passes are safe, phew.

Well...
Rotating passwords is an old idea but mathematically it does reduce the probability of bring compromised. Otherwise I can know for certain when something is not your password each time I get it wrong.
You should be aware then that HN is a place for sincere and kind discussion. If you're going to speak sarcasm you must mark it, that's how it goes here. You shouldn't come here calling people stupid because you're not following proper social etiquette. In case you aren't aware, placing a \s at the end of your comment is enough to properly denote sarcasm. Communicating intentions is very important and I think you'd be surprised who might say what you said genuinely. A healthy and kind discussion has no place for denigrating those who take you at your word or for trolling people into "falling for it". This place trusts you to properly communicate your ideas.
3 //chosen by dice roll
I think you missed the word “similarity”. You can’t check similarity with hashes, only exact matches
This is just really false. As someone that used Windows as my daily driver & migrated to Linux many years ago, the tooling on Linux is vastly superior. Most codebases and extensions also work trivially easy in shell, and command line operations in general are much less a pain point.

I’ve since migrated to Mac because I was spending too much time making linux work properly, but I do miss the control I had. I have Windows on parallels and I can’t believe how much of a disaster it’s become. I wouldn’t encourage anyone to it.

For most people migrating off of Windows, I’d recommend Kubuntu. It is KDE Ubuntu, and it feels like Windows used to during its golden age. Also, it’s free. All major IDEs work on Linux so the shift is pretty painless. Really recommend migrating.
I also found the English and spelling interesting, but also very hard to get through. I never finished the book. It's not just the (now archaic) vocabulary and spelling that make it difficult, but also also the length of sentences – they never seem to end! I thought KJV could be difficult, but that's easy compared to Leviathan.
People complain that the magic of programming has been lost because all we do is stitch together APIs. They're oversimplying the work done, those people are cynical, this is amazing.
I will concede that in some instances we reach a level of thoroughness that could be considered more like plumbing.

But it is less funny if we go with code-plumber, the goal here is to justify trying to steal the protected job title.
Software jobs pay $X00k in some places.

And working remote with software, if you're in a low income country, can make you wealthy compared to those around you.
GPG just complained about my 40+ character passphrase because it didn't contain a number.
Yeah, beauty and fun aren't necessary. Maybe we should instead exist in a drab, brutalist world. That ought to decrease emissions a fair bit.
Mine never defines is_prime():

def all_prime_elements(sequence):
"""Returns every prime element of the sequence."""
return [x for x in sequence if is_prime(x)]

def all_prime_factors(sequence):
"""Returns every prime factor of the sequence."""
return [x for x in sequence if is_prime(x) and x!= 1]

def all_prime_factors_with_limit(sequence, limit):
"""Returns every prime factor of the sequence up to the given limit."""
return [x for x in sequence if is_prime(x) and x!= 1]

def all_prime_factors_with_limit_and_step(sequence, limit, step):
"""Returns every prime factor of the sequence up to the given limit."""
return [x for x in sequence if is_prime(x) and x!= 1]

def all_prime_factors_with_limit_and_step_and_start(sequence, limit, step, start):
"""Returns every prime factor of the sequence up to the given limit."""
return [x for x in sequence if is_prime(x) and x!= 1]

def all_prime_factors_with_limit_and_step_and_start_and_end(sequence, limit, step, start, end):
"""Returns every prime factor of the sequence up to the given limit."""
return [x for x in sequence if is_prime(x) and x!= 1]

def all_prime_factors_with_limit_and_step_and_start_and_end_and_step(sequence, limit, step, start, end, step):
"""Returns every prime factor of the sequence up to the given limit."""
return [x for x in sequence if is_prime(x) and x!= 1]

(and so on)
Or perhaps institution see some value in keeping a consistent denotation when you have records spanning hundreds of years, multiple counties, and multiple languages.
> Past password similarity checking (I'm actually not even sure how they do this unless they somehow have access to the plaintext version of user passwords; if there's a benign/secure way of doing this I'd be very curious)

Most systems that allow you to change your password require the current password as a verification. This means the software performing the validation of the new password also has access to your old password and could perform a comparison of the two to see how many characters differ or the overall edit distance.

If only the new password is available, it’s still possible to perform this analysis against older password hashes by simply manipulating the new password and checking if it validates against the old hashes. Possible transformations are replacing any numbers with other digits, e.g. “foobar2” would check “foobar1” through “foobar9”.
I'm not able to see the page due to a 'No Russians--Slava Ukraini' error.
I was involved in building a few decently large e-commerce sites in the early 2000s. One thing I always advocated and we did in a few places was to create an account for a user in every instance. If they ever came back to the login form, they would get a password reset email automatically.

One thing that really surprised us: a significant number of return users clicked "forgot password?" before attempting signup. We deduced that they believed they had an account but couldn't remember the password (this was before password managers).

When they'd did access their account, it had all their order history, email support history, etc all pre-populated.

This approach did not require us to retain any additional data on top of what we would have retained with only keeping their unauthenticated (guest) checkout orders on file.
Dude, ease up on the sales pitch — you've been spamming this thread with generic copypasta but that shotgun approach isn't very effective. For example, it's not clear to me that you noticed that I said we need nuclear power or that we're talking about green power options so the fact that fossil fuels have downsides is a given.
Not so much hardly as basically none other than Central.
Why? If there is no market for graduate students with a certain degree then the market will (correctly) reduce the number of graduates with those less-in-demand degrees. Nobody has a right to be paid a wage just because they finish a degree. A lot of degrees are completely useless.
drill spiral tunnels in some mountains and pump water though them.
The opportunities ChatGPT is creating for startups
Clever hack/solution, and the thorough documentation is appreciated!
This isn't just a younger dev thing. This attitude was common even twenty years ago.

And for the record, I love both SQL and tools like Prisma. (I actually prefer Postgraphile, but that's a minor distinction without a substantive difference.)
I also do run-throughs at speed to make sure my fingerings are sufficient; at slower speeds everything works
> Certainly a few, but if the past is any indication the universities are geared up to vastly overproduce

No kidding. 90% of my cohort (who finished a PhD) went on to jobs outside academia, and my impression is that that’s pretty typical.

> So why not cut the number of students in half and use the savings to boost the stipends?

Easy, because then you have to hire more faculty.

Even if you could pay faculty as little as grad students (you can’t—because they have other options), universities get away with failing to pay payroll taxes (social security, Medicare, unemployment insurance) for grad TAs because they are not classified as “employees”. Grad TAs also have essentially no benefits (no 401k, no vacation time, no sick time, crappy health insurance, etc.)

Faculty are also likely to actually take their labor elsewhere if you jerk them around and treat them like minimum-wage retail employees (as many universities do to grad TAs): You will show up to your assigned sections (which may change at short notice). If you have a conflict, you need to find another TA to cover your time—and you will need to have the switch approved by your boss.

One you have earned your PhD, who is going to teach a lab or recitation section part time for $20/hr under those conditions when you can earn literally 10x that figure in industry, and be treated like a king (relatively speaking)?

In short, this whole thing makes more sense when you realize that graduate students are nothing more than cheap labor for universities.
“Your assigned password will be two random words and 2 random numbers”

“Pass”, “word”, “12”, “34”
Yes. Which is why ChatGPT is open to public.
And so is yours?

I do often find myself wondering whether Docker saved developers or system administrators any time. Is Docker really better than building an AMI and provisioning EC2 instances on-demand?
Very cool. Zack Friedman made something similar to wear on a hoody. It wasn't perfect, but it worked. https://youtu.be/mTK8dIBJIqg