skysight-inc/HackerNews huggingface dataset:
You can see from my comment history that I have a history of problems with alcohol also.

I have spent many Christmas's holed up in motels alone with a bottle, thinking "what's the point?". You think going through that one year would be enough, but it wasn't enough to learn my lesson.

It's no place to be, but it CAN get better as you've pointed out.

I noted in a prior comment I went from a senior software engineer to a homeless shelter.

I'm back to being a senior software engineer.

Merry Christmas / Happy Holidays everyone.
No,it is farenheit always. Below 32 is freezing but below 0 is more freezing
> I'm starting to suspect that the CISO is getting some sort of kickback from LastPass, because he's doubling down with every breach on a bad decision.

Corporate Occam's Razor says that either the CISO thinks that reverting the LastPass move right now would be a business mistake, or that ordinary big-company politics is a factor (in either doubling-down to protect from political fallout, or having to do things delicately behind the scenes).

On corporate politics, your paper trail letters to the CISO could be awkward. You might've tried collegial verbal dialogue with them first.

Corporate INFOSEC has a lot of nonsense, the CISO is often the predetermined fall-person when something inevitably goes wrong, and a paper trail that looks like the CISO made an oops despite being warned isn't a great situation for the CISO.

Fortunately for the CISO, mess-ups by vendors like LastPass are commonplace in enterprise software, and people routinely go unscathed for much obviously worse corporate purchasing/deployment decisions. Bad decisions are almost the norm.
Every economic blessing is also a curse.

Plastic

Concrete

Fertilizer

Teflon and related products.

Fossil Fuels
> How is that complicated?

I'm not saying for a moment that Lastpass are competent (there's plenty of evidence to the contrary), but... saying that this isn't complicated seems a bit much. This is an extremely complex set of transactions where many many things can be done incorrectly.

There's also of course the general as-yet-not-conclusively-solved problem of non-reproducible builds / trusting remotely-updated code.
Not passwords, but the hackers have some unencrypted data because LastPass did not encrypt all vault data client-side:

"The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs" - https://blog.lastpass.com/2022/12/notice-of-recent-security-...

The "such as..." without enumerating everything is very ominous as well.
Cards didn't natively support VBE and emulated a subset of it just for compatibility purposes.

What do you mean by "natively support VBE" or "emulated"?

VBE is just a set of functions in the VBIOS to do modesetting and get information about the modes.
Emotional kickbacks are still kickbacks.
It's 13F right now. I can afford clothing.
I’d rather do without consumer battery replacement and have strong waterproofing instead.
But now I can’t. Thanks EU.

Oh, and thanks also to the EU for condemning all my Lightning cables and accessories to landfill. Nice one.
C++20 adds the timezone/caldendaring/formatting from Howard Hinnat’s Date Library https://github.com/howardhinnant/date .

So calendrical calculations and time zone support.
Sounds like Meson isn't a very good match for your use case. That's too bad. Good thing there are other tools like CMake which are a better fit for you. It seems like you have also lost some time attempting to port your build over to Meson and failed, which was probably really frustrating. As a result, you really dislike Meson, going so far as to call it "unfit for human consumption".

Many other people like Meson, and many large projects have gone so far as to switch to using Meson. It's great that it worked for them, and it's OK that it didn't work for you.
This doesn't work that well. Conspiracists won't change their mind despite any evidence. Unless you're a very good speaker, trying to argue with them will only give them a "stage" to profess their ideas.

Arguing against an irrational but skilled speaker will only benefit the unreasonable one, specially if you arguments are simple and technical: most people don't understand simplicity or technicalities; but get hypnotized by voice, fear, indignation and a feeling of "if he is that person is right them I'm screwed!"

The best way to counter conspiracists is (I think) leaving them alone and spread rationality among the ones who are still not sick or can be cured.
What are some good methods to not create patterns, while allowing yourself to have an easier time remembering more complicated passwords?
Actually only Sony and Fuji make tape. All the brands use one or the other. However they use two different technologies (metal oxide and metal evaporate) so the general recommendation is to use both for long-term archive. I generally use HPE or Overland (Sony-based) and Fujifilm.
And American at that. America is super extroverted culture where small talk is expected. UK is close culturally. People's interpretation in other cuktire will be different
This link now redirects to a 404 page for me. I presume that they are reading this thread.

Whoever is implementing these changes, shame on you.

edit: this one works: https://lastpass.com/delete_account.php Let's see whether they remove it or not.
Yes?

The entire industry is obsessed with onboarding and first-experience ease and intuitive interfaces and making things "just work", etc, etc. This includes Linux, which still has rough edges but the approach of just making things simple instead of easy and aiming at advanced users is very rare these days.
I have my health, a career and I have my parents but this has been the hardest of holiday seasons. While I'm blessed, I feel like I'm falling behind peers who are are in serious relationships and starting families of their own; guess it's one of the first times I've felt lonely and the world/reality closing in.

This thread has been a good read; to me its a reminder to charish what I have and remember to look forward to tomorrow. Some Sun would sure help...
I work on a database team at Google, tricky algorithms are definitely used. Now did I write any of those? No, they were already implemented in places where it makes sense before I joined the team.

I'm sure the dynamo team, the spanner team and etc are using all the techniques to make their database performant.
A while back I had an issue with Lastpass settings not being properly enabled on my account. I discovered that all settings were rendered, and in order to disable them they used 'display: none' rather than not rendering them on the dashboard at all.
The fix was for me to disable Display: none and it gave me access to the feature in a limited way.

After reaching out to support with screenshots, they fixed the issue and I gained full access, but it is clear to me that Lastpass uses 'display: none' as feature gating and that their software is absolute garbage.

This was 100% intentional on Lastpass' side
I use BitWarden, but I'm thinking of self-hosting BitWarden. BitWarden's commercial offering might be tempting to crack from a hacker's perspective, but I don't think they would go after a specific user's instance.
I use the same password for every account that doesn’t have any private/payment info of mine. Don’t really care if they get hacked.
Hitting the switch tests assumptions and builds confidence. That's all great when one knows the redundancy setup. In this case one doesn't, so one shouldn't.

For scrappy startups where the main investor has admin access, the mean time to shut down is measured in months.
I was hoping Bootstrap would continue despite Twitter convulsions.
That complexity distracts you from the fact that proof-of-stake is self-referential and is not resilient to the kind of hard fork that Ethereum has already experienced.

Someday there will be another doctrinal conflict with a near 50/50 split in the community. Probably for the same reason - some DAO hack too massive to ignore. In a proof-of-work world, we can evaluate the health of each fork by measuring the scarce physical resources allocated to each.

In a proof-of-stake world, each fork can have a valid voting majority of stakers. There's no actually-scarce resource to split, so no external mechanism to decide which fork is the "real" one.

I wouldn't bet a potential future world monetary system on this scheme.
For most people, the keepass db will need to be synced and they’ll also want clients on their computers and phones to access it.

What’s the difference, security wise, to an all in one offering that works the same way under the hood, like 1password cloud or bitwarden?

It seems to me that those syncing keepass databases around are just incurring pain without any real increase in security.
Save for the matter that many of the "quotes" they investigate turn out to be alleged quotes and not actual quotes.

It rather leads with the punchline to only "quote" actual quotes.

"‘All that is necessary for the triumph of evil is that good men do nothing’ (or words to that effect)"

- Martin Porter, January 2002 [1]

"Four Principles of Quotation"

- Martin Porter, March 2002 [2]

[1] https://tartarus.org/martin/essays/burkequote.html

[2] https://tartarus.org/martin/essays/burkequote2.html
How does purity culture count? Tabooisation of these topics? Strong pressure on conformity?
That has been on a downward trend for some time thankfully, due to the way things work these days it's much easier and more reliable to hijack a vm or rent one with a stolen card, rpki, urpf and carrier verification means using thieved IP space is a lot of effort these days
i agree with everything you're saying except "there's too many humans". there's plenty of space for all the people, if we could only live a bit more densely.
Elon Musk Warns Against Margin Debt on Risk of Market ‘Mass Panic’
Taxes on corporations to me always seemed rather silly.

If there was a tax hike on my business, I'd automatically hike prices by 15%. This is what businesses are supposed to do. You buy shoes for your shoe store, you mark up the price, you can't sell them for what you bought them for. You hire an extra person, you raise the price of your goods or services. Oil prices go up? Gas stations raise the price of a gallon of gasoline. You have to pay extra taxes, you raise the price of your goods or services. It's always the customer who pays that extra 15% tax. It has to be that way, how else could it be?
There’s often not-very-visible differences between Canadian and US car models, even base models.

Canadian BMWs will all have the “cold weather package”, which for me means heated seats and an H8 battery instead of a smaller H6.

For my mom’s old Corolla, it means a 1.6kw starter instead of the 1.4 in the US models (which became a sorta problem when I bought a refurb at a Canadian parts store…)
If this is what it looks like, poor integrity is a bad look for a company that asks to be trusted as a critical part of customers' infosec.
Christmas is one of the most difficult holidays for all the people who are different, or grew up in a emotionally/physically abusive family.

No one is alone! Merry Xmas HN!
The meaning and origin of the expression “Bronx cheer”
Sorry, I was asking for the numeric answers, I'm genuinely curious about the distance values of the two pairs of numbers using the two formula.
Thanks, and sorry for letting myself being baited. But I think the history of those curves before Apple is seriously interesting.
Bootstrap has had nothing to do with twitter for a very long time.
I'm a diabetic. 90% of supermarket food is dangerous for me. There are no labels on apples telling me they have sugar. It's on me to count calories and carbo in my food.
Chinese EV Maker Nio Launches New Models, Upgraded Battery Swaps
Ah, that is an entirely different kettle of fish.

So why would people use Tether as opposed to Coinbase's stablecoin?
Texas themselves said they may have to resort to blackouts.

https://archive.ph/rXtj9#selection-3763.0-3767.72

> The order allows the state’s grid operator to exceed certain air pollution limits to boost generation amid record power demand in the state. The Electric Reliability Council of Texas, whose service area includes 90% of electric customers in Texas, requested the emergency order Friday, warning it may need to resort to blackouts.
I am not really contradicting you here. Just want clarification from GP. My reaction was Huh? As well.

With N=15 years of gps data and 40-70 of those days per year below zero very few below -10°C. I can say that I ride slower on cold days on avarage.

I am not fit and do not track that at all. I can barely keep my avarage above 25km/h in city traffic for 15km, very few conflict points maybe twenty but not comparable to road cycling. So a km/h decrease of avarage speed during winter is common but not a given. I do not count bad road conditions, but Stockholm has really good maintanance during winter, ice free asphalt all year.
Without quantifying and controlling the amount of sesame, that's not useful information.

That's why these foods added the sesame--now it's measured, quantified, and controlled.

Someone with a mild allergy can try the food and see what the reaction is. If it's fine, then that food can be eaten knowing that the sesame level likely will be consistent.

People with severe allergies will avoid that food like always.

This is a good thing and the complaints make me facepalm. "Gee, now we can experiment and know what this food will do to us as opposed to playing Russian roulette every time. This upsets us and we're going to complain."

Oh, gee, what you really wanted was everybody to surgically clean their manufacturing lines but not pay them any extra money for doing so? So sorry, that's not how this works.
Even though I knew this, the video is so good that I watched the whole thing in a single sitting. Thanks for sharing.
On the other hand, Xorg pulled the original -vga driver quite a long time ago because it was quite a lot of code.
Happy Christmas!
Because it’s much more efficient to heat up a modern car by driving it than it is to let it idle.
Same, was completely off my face so don't remember much though !
I wonder if the increased resistance is overcome by the fact that ICEs can put out more power with colder denser oxygen rich air.

Not likely, as an increase in air is going to be accompanied by a corresponding increase in fuel. Unless your fuel mapping is all messed up, it will give you more power, but not likely better fuel economy.
Stanford is an image-obsessed academic-business operation that's ridiculously expensive for students. Note also that Stanford featured fairly prominently in the recent admissions scandals, in which parents paid bribes to ensure acceptance.

> "The annual tuition and living expense budget to go to Stanford was $78,218 for the 2020/2021 academic year. The cost is the same for all students regardless of California residence status as there is no in-state discount." - collegecalc.org

Why go to Stanford then? Is it the world-class education, or is the networking opportunities, the chance to meet the children of other extremely wealthy parents who might ease your way into a lucrative job opportunity post-graduation?

Since the students are certainly not the ones footing the bill for an ~320,000 four-year education, this marketing operation is aimed at the parents, most likely. Safe, controlled, bland...
Don't buy bitcoin, buy my shitcoin

Its faster! Its new! Its more advanced!
Feels like a dad joke!
Merry Christmas, happy holidays and the best of the season to all. Thanks dang.
Because the user experience is that it doesn't work.
So you think that when the frickin' pandemic is officially over, it'll be OK again?
I dare you to find those examples in the Terms and Conditions.
ETH is a captured system and is not censorship resistant like Bitcoin. Since its switch to PoS, entities that verify blocks must be OFAC compliant. https://www.mevwatch.info/
1Password and Mac OS X Keychain used to do that.[1] They'd leave the URL and title in plain text, amongst some other metadata.

I think both no longer do, but the fact that they once did was very surprising to me.

[1]: https://1password.community/discussion/12237/metadata-is-not...
#define else
>” then after college, people will finally start the growing up process at age 22.”

I used to think like this, but then I realize that a good portion of the students who are used to this kind of institutionalized infantilizing internalize that it is proper and necessary.

Then they go on to agitate for similar structures “in the real world”. Something to be especially mindful of is the fact that these students are going to “elite” schools and are therefore likely to end up in management or decision making positions.
This comment is layered like an onion and I love it.
> There’s no particular reason that a dryer and washer have to go in the same room

Uhhhh convenience? People prefer them right next to each other so that clothes washing isn’t a long journey. At least that’s why the plumbing and electrical/gas connections are usually built close to each other.
This is the way it seems to go in the public sector, at least here in Norway.

1. Get an n year government contract for some huge public IT overhaul. E.g building a new hospital journal system for a large region(this example is real, google "helseplatformen")

2. Spend years developing this huge proprietary .net monolith with a waterfall model, and minimal user interaction and testing during most of the contract.

3. Release an MVP by the end of the contract that's barely suited for the task(inevitable due to inherently broken dev model) and causes a huge amount of problems

4. Get another n year contract to fix the thing

5. Print money.
>exclusionary and produce a cadre of out-of-touch elites who think or operate as if the rest of us are genetically inferior

...wouldn't let you in, eh?
You can imagine a difference between 'the number of letters in the word prime' and 'the word prime has a prime number of letters' if one of those phrases was meant to meant 'the number if unique letters'. But that's working hard to apologize for ChatGPT's failings.

Here's another failing: it was trained over a year ago, so it knows nothing of the current war in Ukraine. Nor today's weather for that matter.
Colder air's increased density and bigger temperature gradient also improves the efficiency of internal combustion engines.

Increased rolling resistance from displacing snow is a far bigger cause of winter driving inefficiency.
Interesting to read some real world reports on how modern EV owners are coping with the extreme cold weather. Judging from various comments here it seems mostly fine albeit with a bit of range reduction.

I don't think this is very surprising. This is not the first winter for many EV manufacturers, or owners. And of course EVs are pretty popular far into the arctic circle. E.g. there are super chargers in Northern Norway, people use them throughout the year, and it seems fine there.

I think at this point there are very few surprises for manufacturers and they are pretty well aware how their vehicles perform under different conditions.

I'd be interested to know in how those shiny new F 150s are holding up providing power to people who are in areas with power outages. It seems that these are exactly the type of conditions that justify owning such a vehicle. Presumably, Ford did a lot of testing in cold conditions to make sure they work fine there.
Thank you all for everything I find on here, and for being the wonderfully brilliant group of people you are.

Merry Christmas HN
I have been self-hosting bitwarden_rs for many years now, and am very happy with it. It's free as in freedom, open source, and designed to be run and operated and secured by you exclusively, so you have full control over your data and don't need to rely on a third party being available.
Probably not the “HN consensus”, but if you have apple devices the built in password manager works great for me. Can even setup totp with each site and safari will auto fill
It's a bad idea because URLs, email addresses and user names help with phishing, identity theft, social engineering, matching with other leaks, may lend themselves to blackmail (certain dating apps) or otherwise endanger people (gay dating apps in certain places), for very questionable benefit. No definite idea if they really do that, but if they did, that would strike me as irresponsible.

Also, I think the failure here is to not use cryptographical methods in the first place which would seem to be a screw-up in a different security specialty.
More than 7000 Games now available for the Steam Deck
Not so sure. I was in a research lab at a similar school a couple decades ago. There were two staff lab assistants (not sure they'd be considered administrators by any stretch), and the PI shared an executive assistant with three other PIs. That's not a ton of local overhead.

At the department level, there were of course deans, provosts, counselors, admissions people, etc etc etc, but even that departmental overhead wasn't more than maybe a 1:8 ratio compared to the number of grad students.

I'm sure there was similar or even greater proportional administrative staff once you got to the university level, but even if you include every single employee in big departments like Research and Graduate Admissions, it wasn't anywhere close to even half the number of students. I know this because the entirety of the administration fit into a few old buildings in half the campus, while the rest of the buildings on that half and all of the buildings in the newer part of campus were filled with labs and classrooms.

So in the ensuing twenty years, administrators have either gotten massively worse at their jobs and required far more of them to accomplish the same things (running directly counter to the general trends in worker productivity in that time), or they've created an immense amount of new make-work for themselves and their colleagues. Articles like this point pretty strongly at the latter explanation.
Parent / casino founder here. The casino specialized in original, exotic games. The obfuscated portions of the front-end were game modules (including art assets) that were loaded after login. We had several games that we were filing for patents on. We were also in talks with a much larger online casino about licensing individual games and/or the software as a whole to them. The purpose of the obfuscation was to make it harder for competitors to decompile and get at raw assets or read the math by which the game mechanics worked. For instance, we had a 3D slot machine based on a Rubik's Cube that paid out based on the odds of being able to solve one side in N steps from any given randomly scrambled position. That algorithm had to exist client-side to calculate the odds visible to the user in realtime, along with server-side for confirmation against someone trying to cheat in the client.

I felt it was important to make it as hard as possible for someone to reverse engineer the unique mechanisms. Ultimately, it was probably a waste of time. This is why I think in most cases the uses of obfuscation are at best limited, but they can put a costly stumbling block for competitors if you want to encourage them to license your software rather than copy it. Where I think they tilt toward the nefarious is when they're designed to extract hidden data from end users. As a distinction, what went over the wire between the client game modules and the casino back-end were completely human-readable game states in all cases (besides the user's unique ID and session hash, which were named as such). There were no bullets of obfuscated fingerprints flying around. Any user was free to read what came and went from the API, and even to mess with it by adjusting parameters if they wanted to see what the server would accept or reject.