skysight-inc/HackerNews huggingface dataset:
Again, where are you going to get it from? Russia? And, no, it's not cheaper than oil, since the transportation process is so expensive and difficult. It's a gas, remember? In case you haven't noticed, Germany's NG has been severely curtailed because of the troubles with Russia, and they're facing a cold winter without much heat. So again, I ask you: where exactly is all this "cheap NG"?
What is the memory requirements of this model?
Let's hope nobody falls for that technicality. It was his stock to use as collateral, it is his stock that gets sold.
American execs aren't any more or less ethical than Chinese ones. The difference is what is and isn't legal or acceptable. They likely just thought they'd get away with it or they're not culpable if it wasn't their order.

News Corp hacked phones to track people, they just got caught and punished.

https://en.m.wikipedia.org/wiki/News_International_phone_hac...
In the US I’m not really afraid of China. There are some people who should be, but I’m not. I’m annoyed at American companies who bow to their wishes, but I’m also annoyed at American companies who censor to advertisers so nobody says “fuck” on YouTube and my level of annoyance is about the same.

Some other places would do good to ban tiktok and people concerned about national secrets and the like sure should, but I’m just some dude leaking plenty of information plenty of places and china is among the least of my concerns.
His parents are reported to have a $16M Bahamas property in their names, so they can just go to the other houses they bought with funds from their college professor salaries.
So you want Congress to make laws that they actively abuse themselves?
Same reason people don't give up their morning latte, a relationship, food, behavior, or anything else that brings them pleasure.
Password strength cannot reliably be measured by looking at a password.

To take one common trick: is VpttrvyJptdrNsyyrtu a strong password? It looks pretty okay, definitely less of a pattern than CatName1985, and an estimator like zxcvbn might also not know that it's just CorrectHorseBattery offset by one character on a qwerty keyboard. Now that you know this, you can start to guess my other passwords. Would you still say it is strong now? What if I'm not the only person on the planet using this trick, does that affect it?

The strength calculator you're looking for is (technically) the method of generating the password. If you generate 6 random words on a dictionary size of 15'000, that's log(15e3⁶, 2)≃83 bits of entropy. You can only know this by asking the user how they came up with the password, or by telling them to do it a certain way. The rest is just guessing, though I will say that something like zxcvbn does a surprisingly good job at it.

The caveat is that the generating method should not have any plausible chance of overlapping with other (insecure) in-use methods. E.g., if you roll a die between zero and a hundred quadrillion and use that as password, most of the time you'll roll a really long number. But if you roll 123123 or 12345678 and use that as password, you can expect it to be cracked. Technically, by excluding "weak" choices from the list of possible values, you are reducing the strength of the password because there are fewer remaining valid guesses, but given how attacks actually work, it makes sense to do this.
MySQL Workbench is a buggy heap of garbage
I think your comparison to a cousin/sibling language is very close to the truth. Historic forms of a language are nearly the same thing as that.

For example, Norwegian and Swedish were once the same language, that was about 800 years ago. We can think of Swedish as being separated from Old Norse by 800 years of language change. But we can also think of Swedish and Norwegian being separated by 1600 years of language change, 800 years on each side, linked through Old Norse at the half way point. (Of course it's not quite that simple, since Swedish and Norwegian have been in contact, not isolated, all this time, among other things. Still, I find it an interesting perspective.)
> Security through obscurity. This is safe until everyone does it.

If he's actually randomly selecting from the entire set of valid Unicode characters, then theoretically his four character password has orders of magnitude more entropy than an eight character alphanumeric password.

The problem is that from the website's perspective there's no way to know what set of characters the user is choosing between. They could be dealing with someone who's picking truly at random, but more likely someone just thought they'd be cute and throw a few popular emoji at it. By just looking at a single password I can't tell the difference, so it's safer just to impose a minimum length requirement.
OK, but presumably other people experience some kind of positive/pleasant effect? I don't get that at all.
I used generic programming to automatically generate puzzles for a puzzle game. It worked really well. I still needed to play each generated puzzle to see if it was interesting/fun. But most of them were great. I can imagine that ASP would be really good for that kind of thing.
This repo claims to document the vault format.

https://github.com/cfbao/lastpass-vault-parser/wiki/LastPass...
Not sure what to say on that other than I am using it on brave and edge for years and and it's currently at 1.5.2
It can also be done securely if you have a flag that, when a password reset link is redeemed, the password must be reset in order to log in. There’s a couple of steps needed to make that happen cleanly (such modification should not be done on the GET of the password reset, but on a POST after the password reset link, prior to testing the passwords against old passwords and other security mechanisms).
If the donation is structured as an unrestricted gift, many universities take <5% as overhead. The nature of such gifts is that they cannot have, well, restrictions. So you can’t ask for deliverables or any other guarantees that might go along with a normal contract.
Same. Edgedb is doing something good but I wish I didn’t have to deploy a new service on top of my own db. Postgres only as well.
Awesome to see so much engagement on this topic from the HN community (I work on community at Coherence with Robert, who wrote this piece). Thanks, y’all!

To first address the idea that preview environments are trivial to build or are already solved, generally we think that’s not true except in a “rsync=dropbox” kind of way. On top of what we’ve already built at Coherence, which represents a considerable investment of resources (especially when compared to what’s available to software teams <30 heads), there’s still so much more to do before we are even close to 10x better than what teams do today with PaaS or Infra-as-code.

Staging and other static pre-prod still has a place in the SDLC, the rise of previews doesn’t mean that these have no place. If your app has static integrations with 3rd parties, special data that needs to be manually managed, or integration with other workflows/teams/customers that require manual integration - staging/pre-prod has a huge place. In our case, Coherence supports static environments just as easily and fully as it supports previews (as do many other devops automation tools).

To the point above about tons of work left to do, one of the biggest pieces is helping with data generation/automation for new environments. Integration with data anonymoization tools to make moving data from prod possible, data generation/seeding tools that can introspect a schema and generate realistic data, and a library of snapshotted datasets from other envs are all things that some teams do, but which should be available to everyone. Features like load testing and security scanning for ephemeral environments are adjacent areas of opportunity.

There is absolutely no question that sprawling microservices make automating previews more complex, as do bigger teams. And the concerns around cloud cost are 100% valid. On cost, Coherence automatically does things like use spot instances and pause inactive environments. In practice, cost is not the primary issue with usability. Complex serverless systems often have the most trouble with dependencies across 100’s of functions and cloud-provided resources, and to us that only means that these kinds of systems will benefit the most as preview automation scales to encompass them (it still doesn’t do a good enough job today). That said, for a lot of real-world teams, there are cheap productivity benefits on the table if they’d invest in better developer experience.

Alongside reproducible cloud-hosted dev envs, automated pipelines, and ephemeral environments, feature flags and canary releases are also relevant best practices for release management. Coherence doesn’t really help with either of those at this point, but great tools exist for lots of language/framework ecosystems already.

We’re still a new product/company and we love hearing from users - feel free to ping hn@withcoherence.com with any questions/comments!
To "massively overproduce" renewables is cheap. Build more, get more, sell the overproduction.
Why monolithic architecture might still be a better fit
Ask HN: How to collect usage data without violate user privacy?
When building side projects, usage data would be useful for product iteration, like which part of your product has most usage, what countries are your users from, etc. But users are also very concerned about their privacy. So how can we collect usage data without violate user privacy? What data is ok to collect? what is not? and how?
I was working out in my garage when this happened, it had been 50F outside when I went in the garage, I was sanding some woodworking for around 3-4 hours. At one point I turned on a propane heater on the next workbench over, but was still cold so I moved it over to my feet right next to me. Over about an hour, even with this I got cold and called it quits. My garage is drywalled, with insulation in the walls but none in the ceiling. I need to fix that.
I use a shitbox of a thinkpad with my dev environment in the cloud, but they run Linux so I can just as easily run it locally if I have no connection. I buy them for $300-500 on eBay, upgrade them to at least 16gb of RAM and a 1TB Samsung SATA SSD. I have 2 cold spares ready to go, credentials loaded, just need to update and sync a few git repos. 14 inch 1080p IPS displays, i5 processor, 16GB of RAM.

The money I save not paying for Apple laptops could pay for a crazy overpowered dev VM until the end of time.

I used Apple laptops for about 10 years until about 5 keyboard replacements with the butterfly switch debacle.
Why not make it a crime to have a TikTok account?
Stop Talking to Each Other and Start Buying Things
I'm a drinker in principle, as in not being a teetotaller, but am just not attracted to drink very often. I probably have less than a bottle of wine and half a dozen beers a year. Same with drugs. I've tried most of the common ones, including those considered very addictive, but was never tempted to make a habit of any of them. Likewise food - I'm not an over eater and am in my late '50s the same weight I was 3 decades ago (though a little fitter since taking up running, which along with other sporty activities I abjured with exaggerated horror in my youth).

None of this has taken the slightest effort or even any consideration to be honest. Neither is this easy sobriety a consequence of some sort of well-managed successful life (au contraire - it's a mess).

Perhaps some of us just have naturally temperate temperaments.
"After analyzing the informations you provided, it seems that you're using an unsupported operating system using third party client library."
I might not be defined by Java but after programming in it since it came out in 1995, I certainly identify with it.
If you work for a company that could be punished by China, you should fear them. They can have you fired if your say the wrong thing.
Selective enforcement and laws that are designed not to be enforced degrade the very rule of law and rules-based order that we're supposedly trying to protect here.
Idea: just run a standard compression algorithm on the password and measure its length.
China can have you fired.
Suplemental:
Stop listing things in product pages and search results, just to click through and find it's out of stock.

Been searching for a particular pair of skis recently, and so many places listed them, only to click through and find they have no stock in any size. Complete waste of time.
‘Mind-blowing’ network of magma chambers found under Hawaii’s volcanoes
it's a bit dated, but works fine for self-hosting and it's a single go binary to run - https://github.com/ishani/xSyn
The best solution to password requirements is to eliminate passwords altogether. Passwords are the most problematic and weakest authentication factor we have.

Instead, let’s authenticate with PKI. It works.
CC inputs know within 2 or 3 digits... it's how some entry forms display an Amex, MC, Visa icon in the input window.
2022 in Graphics
> The whole concept of using poisonous chemicals to alter your brain state was and still is very alien to me. I just don't get it. Willingly disrupt your body's functions on a cellular level hoping for something good, while all the scientific evidence points only to the bad? Still don't get it.

So in the ancestral environment they fermented grain (first by accident, then on purpose) which became a means of preserving the calories from competitor organisms. This phenomenon probably co-evolved with agriculture and predates written records.

Note that in the Epic of Gilgamesh, Gilgamesh (agricultural) and Enkidu (a 'wild man' which would imply he came from a pre-agricultural, foraging people) were to fight but they gave Enkidu beer and a woman. This probably indicates that beer was something the agriculturalists had and the 'wild men' did not.
Google is the real social network
Round-trip efficiency is not very important for a backup storage medium when the marginal cost to produce is zero.

Other considerations drive choices, then, e.g. capex, transportability, usefulness for other processes.
I think my New Year’s resolution is going to limit my alcohol consumption to 3 units / week. I think of it as a tool for building relationships… for me 1 or 2 drinks goes a long way to opening up and having a good time with someone I’m trying to get to know (going on a date for example, or maybe catching up with a long lost friend). But outside of that application, I find that alcohol has no place in my life.
I have seen it happen already, altough the technology is different
Passwords should just be random numbers, and services should provide a suggested password on the sign up pages. Here's a 128 bit password: CR4EOJ5ZYQRKCGQV4OLN2ZRFS.

Better than all that is public key authentication.
> Maybe something like Docker Desktop: free for personal use, license required for companies? That seems like a risky bet as an indie dev.

That's how it works currently.
would be a nicer UX if instead of "sorry" it was "great, your password hasn't changed as this was your old password. ps. you're now logged in, go do whatever you were hoping to do you rascal!"
You might be able to appeal to NIST standards, which now recommend against some of the bad practices like special characters.
PCMag, Maximum PC, CPU, these were some of the smut mags I remember flipping through with hardware lust as a young enthusiast.

Before high speed internet access took over it was definitely the best way to get high resolution photos of the hardware you’d never touch. Not to mention the exciting world of case/pc modding usually in a few pages at the back.
I had a shareware software business for a number of years that was originally built on various iterations of PC Mag DOS file managers. [1] The assembly language listings for many years were great.

[1] http://bitmasons.com.s3-website-us-east-1.amazonaws.com/bitm...
Welcome to the First Ever McDonald's Where You're Served by Robots–In Texas
TL:DR;

Author got severe migraines from consuming alcohol and stopped for that obvious reason.

I am glad OP isn’t medically endangering themselves any further.
like any password - goes into my password manager
Think about what features you need, what are nice to have, and what don’t really matter to you.
I’m sure this article is right about some stuff, but man if it doesn’t make me sad to read.

Software can be so exciting and fun, and this “careerist” perspective really sucks the joy out of it.

If you’re looking for something that is kind of the opposite of this article: https://ferd.ca/the-little-printf.html.
Yes but realistically they’re not paying that much. Most of US salaries have stagnated for years (thanks inflation) but factoring in inflation, this is where white collar salaries should be. A starting salary of 100k (lower than most FAANGs) may be excessive but in most of America 100k is barely enough for a house, car, kids (especially with college), and a comfortable retirement savings. It’s more than enough for a young single person, but not to support a family.

Obviously most people make less, and most households in America make less, but a solid, comfortable, stress free, middle-class life expects that now.
German shipping companies charge the same for everybody in the country, no matter the distance?
It can be on command. It might be now.
I hope you stick with it. I know too many people who tried addictive substances and failed badly. Specifically I know people who began by drinking just one glass with dinner, but over decades end up with chronic drinking behaviours.

We all “know” the obvious reasons for not drinking. Anecdotally, I see plenty of unobvious health outcomes, like long term negative mental health outcomes from boozing (such as memory issues - I suspect there is a spectrum of memory issues before Korsakoff syndrome).

Also anecdotally, drinking seems to lead to all your social group being drinkers or alcoholics. I unfortunately know very few who don’t occasionally drink to excess (New Zealand has a strong drinking culture).
The legality of this kind of tracking is one thing. What I think is most egregious about this though is that ByteDance said this before:

> TikTok has never been used to ‘target’ any members of the U.S. government, activists, public figures or journalists,

This sort of outright lying is bound to piss off DC. Will it lead to TikTok getting banned? Idk, depends on their lobbying budget
You're right. In post-soviet countries people generally drink to get intoxicated on purpose. In Europe and US, from my experience, drinking culture is much more healthy. I do have respect for that. Yet, if alcohol was invented today it would be clearly classified as worse drug then heroin, for example, and would be banned.

Discussing that one country has more helthy heroin mass-consumption culture than another country hopefully sounds odd to everyone.
Finding the Right Angle: Considering the Perspective of David Jones
From React to Htmx on a real-world SaaS product: we did it, and it's awesome
Markdown to JSON parser with GPT-3
With VirtioFS on the scene I just don’t have this experience anymore. Docker for Mac is significantly faster than it used to be, particularly when using named volumes.

Mutagen also improved the experience but I prefer VirtioFS as it’s “built-in”
Are URLs the only thing that's unencrypted? That's bad enough, but what about other fields? I know I've accidentally saved passwords in the username field before, stored sensitive info in the note field as well.

I guess moving off of LastPass is how I'll be spending my Xmas...
I don't think it's very difficult at all. We already have an elaborate system to measure and tax wealth with our system of property taxes on real estate. That's already in place.

It would be trivially easy as well to track and tax the wealth of people hold public equities.

Those two things there are an enormous bulk (majority?) of wealth.

It only gets a bit more complicated with privately held equities this I will grant.

If you start to get into the nitty gritty of assessing assets like ming vases and such it gets complex as well and likely diminishing returns, but at this point, with this stuff, you might as well not even bother because few are going to hold their wealth in ming vases.
Related: the story is about Forbes journalists. And Forbes journalists include fraudsters: https://www.niemanlab.org/reading/woman-accused-of-4-5-billi...
x87
The moment we discovered that particles are a lattice everything began to make sense
Why Aren't There More Programming Languages Startups?
While I wouldn't be too surprised if websites about Common Lisp did the expected dogfooding, it was indeed a joke about certificates being a solved problem.
So they put 3 Qi charging coils on sliders or motors for auto-alignment and are charging $300 for it?

Who would buy this product given how inexpensive most Qi chargers are?

Also, did they make an effort to avoid interference and overheating like what AirPower experienced?

https://www.youtube.com/watch?v=2Mb_LXJyHFw
yep, all true... this is a solved problem on how to do it right. The fact that the OP finds this interaction funny leads me to believe they don't understand how it can be done correctly, which is scary.
I have had trouble convincing people before, would you happen to have a link ?
But it can only mean one thing here, because it is labeled as the thing Microsoft was doing, and we know what Microsoft was doing.
Correct, but the recommendation in the article is still wrong. If I get a password that has four Unicode characters in it, it's possible that it's a strong password that chose truly randomly from the available Unicode characters, but it's much more likely that someone just picked four that they like. In the latter case, the bits per character is going to be much lower, but I can't tell the difference just looking at the password.

The only good solution I can think of is to assume low bits per character and require a minimum password length.
A bit late myself, but to clarify:

Making late (in this case, after the competition was already over) changes to a crytographic primitive - without extensive documentation both of why that's necessary (not just helpful) and why it's not possible (not just you promise it doesn't) for that to weaken security or insert backdoors - is a act of either bad faith or sufficiently gross incompetence that it should be considered de facto bad faith.

Schneier claiming to believe that it's good faith implies that he either doesn't understand or (presumably more likely given his history?) doesn't care about keeping the standardization process secure against corruption by the NSA, which suggests either incompetence or bad faith on Schneier's part as well. (Or, in context, that someone was leaning on him after the earlier criticism.)

This is particularly inexcusable since reducing security parameters on the pretense that "56 bits ought to be enough for anybody" is a known NSA tactic dating back to fucking DES.
Start with minecraft, build logical gates
No sh*t! No surprise here at all. Stop using big tech, start controlling your data, and then these corporate gloryholes (which you're clearly on the wrong side of) will stop existing...
If I came across that in an Apple EULA I wouldn't be surprised, but I've read several EULAs found at the site I linked to and haven't found any language that suggests what you describe.
this is one of the reasons i changed my OS to linux since docker there works natively. i believe there will always be a bottleneck for peak performance on macOS until we are able to run natively, not virtualized.
Another fun thing to do - if they're using client-side validation, you can often just open up the html and delete the form fields, and the download link will often relent because there's no more required fields for you to provide.