skysight-inc/HackerNews huggingface dataset:
The only requirement for passwords these days should be that the entropy is high enough [...]

Which is at least somewhat non-trivial. What is the entropy of »abcd«? Four of four different characters, therefore 8 bit? Four hex digits, therefore 16 bit? Four lowercase letters, therefore 18.8 bit? Or even four letters, therefore 22.8 bit?

Ad hoc I would say that 8 bit seems to be the best choice as one does not have to guess the underlying alphabet, but that probably means that you mostly get values quite a bit lower than password length times the logarithm of the alphabet size would suggest.
See Virta Health recommendations, they have a lot of information on electrolytes management on their website.
Yes, it really does. Some things in the US are absurdly expensive (like eating at a restaurant or getting a medical procedure), other things frequently significantly cheaper than elsewhere (like buying a car, assuming the same model, or a gallon of milk). Sometimes it's due to expectations: Americans have expectations that others don't, and meeting those expectations costs a lot of money.
Oh man, stop shilling. Ethereum is a stupid idea and responsible for the most amount of financial scamming in human history. That's what it's good for, nothing else. All the grifters and scammers moved onto Ethereum, if that's what you mean by "crypto industry".
False positive and false negative rates can be different. Trusting that when it says bad, it means bad can be consistent with doubting when it says good
I guess ChatGTP, like most of the Internet it was trained on, hasn't actually read Sherlock Holmes and only knows about it though pop culture references.
An unspoken part of NATO is that the US is the primary military supplier of its allies. The comment that this purchase is partly political/diplomatic is spot on. In fact, why does Canada even need a state-of-the-art Air Force in the first place, if not to appease the US and NATO?
I have sent money across borders countless times and it arrived just fine. No need to give my money to shady exchanges like FTX.
A Syrian Christian Rite for the Baptism of Muslim Children (2023)
"Books" don't get a cut of all book sales, whereas YouTube gets a cut of all video profits. "Books" don't have editorial control over what goes in them, YouTube does. It's clearly closer to a publisher than a medium. Maybe you meant platform instead of medium?
Not detachment from pain, you misunderstand. You will feel all the pain just the same. It's just that pain won't imply the same amount of suffering, as you experienced before. In this context, pain is what you feel, suffering is what you make of it.

What you are reminded of, regarding ptsd and detachment, is called dissociation (in psychology). It's an unhealthy, but working, coping mechanism for something that a mind decides it cannot face. A major difference with the detachment I'm trying to explain is that the Buddhist / stoic practice is conscious, but dissociation is unconscious.
Laws can be updated/modified.

If I have a software safety check in a giant combine harvester: if person detected <3m in front of harvester, emergency stop.

Farmer finds it annoying so they install a "patch" they found on the Internets that disables it. Now there are two major options legally:
* The law states that it's the company who is responsible for this safety feature, therefore the company tries to lock down the hardware/software as much as possible * The law states that modifications null/void certain parts of the warranty & other bits.

If I have a warranty on a CPU, isn't it void if I overvolt that CPU to the point it dies? Don't you think it should be? Afaik it's accepted that warranties on cars are void if you do something stupid with them.
Great take. I never see this type of anti-crypto sentiment on HN. What does it feel like to be a contrarian?
I vaguely recall gnome phoning home, not sure if this happens on debian.
That's interesting. I was going off this post from a while back. https://jameswillia.ms/posts/chatgpt-rot13.html

Perhaps it's been fixed now?
Belgian here. I don’t use "ploum ploum" either (else I would never have this pseudo) but realized over the years that a number of people use this expression. (look on twitter for "ploum ploum" for example).

And, yes, lot of spam is because this email was in multiple exposed account but I’ve received lot and lot of "fresh subscription/confirm your emails" where it was obvious people were simply writing whatever in a field.
What is the... purpose of something so small? I can't imagine getting any real I/O onto the edge of this board.
That's only true if you are talking about Vietnam/Cold War era. In the past 20 years or so, defense spending as a percentage of US GPD has actually increased: https://www.macrotrends.net/countries/USA/united-states/mili...
I haven't catched up on games after 2016, so sharing some good low to medium-spec titles:

Resident Evil 4: old-school controls but great gameplay with lots of easter eggs. Can easily rack up hundreds of hours.

Battlefield 3: typical US-Russia plot but the greatest storytelling I've ever seen in a videogame

Deus Ex Human Revolution: haven't played the first one, so recommending this instead. Highly flexible gameplay style with the player's choices affecting the outcomes.

Devil May Cry 4: outstanding hack-slash gameplay with way too many combos. Can easily spend hours on it.

God of War (original) trilogy: arguably the greatest storyline ever in a game, much better gameplay mechanics than the Norse reboot imo

The Witcher 3: Absolute beauty of an RPG. Might feel slow for the first 10-15 hours, but picks up the pace. Can stack hundreds of hours in a single gameplay. A plethora of side missions, then two DLCs, each having 20+ hours content. Strong NSFW stuff, so watch out.
French startup uses Hi-Fi speakers to develop eco-friendly heat pumps
Show HN: Tidy [pdf]
Tidy is an encryption scheme based on an old project of mine which uses an absurd set of processes for encryption(madXOR). I have my personal concerns about the project and its feasibility and/or usefulness. I still have a few sections to write-up and a final revision to conduct before writing the proof of concept. But it feels as if I am merely justifying and defending something just for the sake of the effort.

Any form of constructive criticism is appreciated.
P.G. Moneybags here - you know when I have a support issue at either of those companies regarding the billion dollar advertising campaign I am running I never have any problems getting support.

The solution seems clear - poor people just need to run billion dollar advertising campaigns to improve their support.
The stories are probably in there somewhere, but they're in there once or twice, while the pop culture Sherlock is in there thousands of times. That's got to weight things. (I just asked it to produce an imaginary Shakesheare dialogue. The results were not great.)
K-Means Clustering in Machine Learning
The internal Netflix comparison of the ideal show with a ‘gourmet cheeseburger’ is one that stuck. Really interesting read on the company Netflix has become now.
GPTHero
I know exactly what the scene is. If the T800 does not know the name of the dog, why would the T1000 know?
Raised Lead levels in blood of Children living near airport
gas boilers usually vent to the outside.
From recollection, so apologies if I get it wrong because I didn't go check, but...

IIRC above a certain size, you skip the double write; part of the reason to do the ZIL batching is, I believe, to group tiny sync IOs together in a persistent form that can be replayed later, so you can return sooner, rather than having to do lots of random IOs before returning.
Personally I think a lot of the warts with Bash are more down to it's "language" design rather than pipes. Things like how $VARIABLES are expanded before a statement is compiled into a argument (which leads to spaces in $VARIABLES breaking things) are entirely fixable and quite a number of alternative Linux/UNIX shells do address those kinds of problems directly.

That all said, I'm not disagree with your point about smarter pipelines (rather than dumb byte streams) would be advantageous too.
I think code reviews might.
This was a fun rabbit hole to go down, with the ETOPS [1] hint.

I enjoyed the history of ETOPS-138 [0]. ETOPS-120 leaves some small triangles of the Atlantic inaccessible, particularly if one emergency airfield is unavailable. A 15% increase to 138 minutes covers it.

Anecdotally, though, my experience as a commercial passenger feels like airlines fly almost directly over pacific islands rather than within X minutes of diversion. My memory may be anchored in bygone years.

[0] https://aviation.stackexchange.com/questions/30979/why-etops...

[1] https://en.m.wikipedia.org/wiki/ETOPS
> designed for modern hardware with a focus on responsiveness and performance

Not sure why a text editor needs modern hardware to be performant. I’m working on a text editor myself, and aspire to vim on the performance front as it is fast as one would reasonably want. If anything, my physical body is the bottleneck. There are edge cases such as really large files (100+ million lines) or ones having super long lines that makes certain data structures choke, but vim can do random access on 180m line files just fine on my M1.

Point being, performance is a weak selling point to switch text editors, and I question whether it should even be predicated on “modern” hardware ( GPU accelerated rendering ? ). The selling point has to be something else. This is why the editor wars is a dichotomy between Emacs and Vim. Emacs strives for many things, but speed isn’t one of them, and that’s perfectly okay. The main selling point of my editor, built for myself, is native support for Org-like files without the rabbithole of Emacs.
Asking money back did influence my opinion and that would ruin the relationship over time. That's why I've stopped asking for money and went even further and stopped expecting anything back.

I've picked that up from friends I made in Taiwan. It was mostly paying each other's lunch but there's no reason why it shouldn't work in other areas of life.
I can’t agree more with what you’re describing. Just working over the information over time, poking at the nuances of a way of thinking is almost impossible through a short article.
I would NOT recommend sculpting tools for making low poly. That's nest done drawing a basic reference image and then manually drawing/shaping polygons to get the desired look. Low poly is a lot like pixel art.

I have used sculpting (in blender) however, for making more organic 3d printable stuff, since fusion360 absolutely sucks for organic shapes. With a proper drawing tablet sculpting in blender is so much fun tbh.
The pdf is directly downloadable from here: https://dl.acm.org/doi/10.1145/356580.356581
I take it you run a rack for your desktop computer at home?

What makes you think you have the same constraints at your home kitchen as a restaurant?
How do you ask ChatGPT to write long stories?

It always stops after a while, and while you can ask it to "continue", the continuity between each answers is not really very good in my experience.
If you actually care about this then you can go and write a polite but firm letter/mail to Facebook's legal department.

Contacting support/appealing is unlikely to do much since their metric is tickets closed, whereas the legal metric is "number of things prevented from blowing up"

That said, there's a chance legal won't care, but it's the best option I think.
We use zxcvbn and allowing only good passwords (score >2) is already too hard for many people to figure out a usable password.
GPS Jamming near Russia and Ukraine is expanding
I'd prefer the compiler file an HR complaint against the author.
First thing that jumped out to me.
ETOPS: Extended-Range Twin-Engine Operational Performance Standards
Is it red flag for it being a bad fit or something else?

The more important thing is what does he like? I agree with the top comment though that on some level, he is an adult now and your ability to direct his life is more diminished now.
Normative statements.

You should be asking what are the incentives.

> like the more straightforward tech solution is to improve traffic cameras/monitors such that tickets are given out more appropriately

This is not straightforward from a bureaucratic sense. There is no strong incentive (that I can identify - humanitarian ideals do not count) to improve the functionality here to make traffic tickets and their resolutions more sensible.

However, an AI that can resolve traffic tickets and citations might incentive a city to start gathering data more effectively - to win cases and get revenue - and that is a great incentive to improve the general tech.

> Why do we need lawyer of any type to handle something as banal as speeding tickets?

I also want to mention that this is a great point. The fact that my job provides legal insurance, the end result being I can get out of my traffic tickets by hiring a lawyer for free to show up and ask for a dismissal, is pretty dumb.
Having done PCI compliance audits and talked to QSAs who told me about pretty serious breach from a well known payment processor owned by Visa, I wouldn't put too much faith in the PCI compliance process when it comes to protecting my data.

I guess where we differ is that between banks having lousy security, social medias and search giants selling all our data, the cat is already out of the bag when it comes to privacy and won't be put back until law is updated to have teeth, so I see that as a separate problem (which does bother me) that's orthogonal to the 3 companies credit scoring system.

That doesn't mean that it shouldn't be solved, I believe Equifax, Experian and Transunion should be heavily fined for any breach of data especially considering how important the data they have.
> until it’s not the dollar anymore

which you'd better hope is not within your life time, because the implications is that the US has fallen, and that a new world order would've taken over. It is unlikely that you, as a citizen of the west (presumably) is going to fare as well as you are today.
The Document Foundation | LibreOffice Developers (two positions) | Full-time | Remote

The Document Foundation (TDF) is the non-profit entity behind the world’s leading free and open-source office suite, LibreOffice. We are truly passionate about free software, the open source culture and about bringing new companies and people with fresh ideas into our community, especially in the second decade of our project.

To improve features in LibreOffice, the office productivity suite for over 200 million users around the globe, we’re searching for two developers (m/f/d) to start work (from home) as soon as possible.

The first role initially focuses on accessibility topics: https://blog.documentfoundation.org/blog/2022/12/21/join-the...

While the second initially on right-to-left and complex-text-layout languages: https://blog.documentfoundation.org/blog/2022/12/21/join-the...
Unity dreams of removing all the C++ code and replacing it with their "High Performance c#", ie. using the burst compiler and manual memory management to remove the GC problem.
Sign up for a shipping account. It's often an immediate ~50% discount off retail, and that improves (slowly) as you ship more. At least that's how it works for FedEx.

I don't know if that's just because they like keeping out the "retail riff-raff", they like having your credit card on file, that juicy "data", or what, but it works.
John Connor behaves and talks like a figure any kid in the movie theater want to associate themselves with.
Because there is an inevitable translation step between "customer wants X" and "engineers have to build Y to achieve X". This takes time and is a non-trivial task. I'm an engineer myself and I'm glad there are people between me and the customers. They're there to shield engineers from unnecessary tasks and scope creep. They are the necessary abstraction layer between engineering and business.
It's not very arrogant for them to guess that maybe the person using "irony" for something not ironic might be confused about its meaning.
One of the coolest emergency airfields I can think of is, literally, Uruguay Route 9, along the coast of the country, where a 2-lane highway becomes an enormous runway that you continue driving along. I don't know if there were any famous landings there; I heard it's only used rarely by the Presidential jet.

Here's where it is:
https://goo.gl/maps/fpwxuPzGVDtDEKmB8

and what it looks like when you drive on it:
https://www.youtube.com/watch?v=3C5LSrRkFyU
Ask HN: What's your favorite illustration in computer science?
I'm curious to see some examples of what people consider good visual illustrations of CS concepts, from both usefulness and aesthetics perspectives.
Yeah, that's just a dumb claim. A bigger population means more people who can become lawyers. The problem isn't population, and never was, at least for this problem: it's always been the case that justice is arbitrary and money buys better lawyers.
I did, you're missing my point about having to wait for the water to heat up before pouring it in.
Sorry, it was the wrong link :(

The guide to bulk download in a zip file (like google takeout) is here: https://support.apple.com/en-us/HT208502
My biggest pet peeve with pyinvoke is that you can’t pass arbitrary arguments through to the underlying task. For something like invoking pytest you need to replicate the arguments you use in the task definition.
maybe tell it to write the chapter titles and then ask each one?
Food allows me to stay alive -> it has value for me

Legal tender of the country I live in allows me to pay taxes and stay out of jail -> it has value for me
Fisher and Paykel also make washing machines that last.

https://www.fisherpaykel.com/nz/laundry/washing-machines/
Nothing weird about it. I don’t watch Youtube except the rare cases, and when I have to I download videos. I can't stand getting interrupted for ads during watching so I opted out of youtube completely.
Go 1.20
PEP 703: Making the Global Interpreter Lock Optional in CPython
Fiber-Optic cable out of air using a Laser
Yes yes, I am a dumb US Army infantryman so I do struggle with "strategy" and so on and so forth. /s

I can steelman your argument to be something like "without lobbying, DoD procurement would be much more efficient and the savings would be spent on social programs" ... which is just absurd.

If you think that "lobbying" is the only reason that the US has a very very large defense budget that's on you, since the internet is widely available. Ad minimum, USN is responsible for policing the entire planet to allow trade to continue. The point of overspending your competitor (in the defense realm) is that you reach a point where they just can't catch up, or they realize it would take a decade (or many) to catch up and suddenly war makes zero sense ... unless there is a new technology that resets the gameclock. This has happened. And so, here we are, continuing to invest in new technology.
> I live downtown, and I don't have a car. The UPS location I would have to pick things up is a 15 minute drive away [...]

Here in Norway, UPS and FedEx have deals with local corner shops and similar. If I'm not at home they'll bring it there. I live on the outskirts, but I've not had to walk more than 15 minutes.
I find that a little hard to remember, and nmap isn't as widely available as netcat:

nc -zv 1.1.1.1 443

Alternatively, the most barebones version, useful for inside a container where all you have is a shell and the kernel:

cat > /dev/tcp/www.google.com/443
This is just great press hacking by the company, jumping on the coverage ChatGPT has recently received. In essence, the company is just offering a checklist of reasons why the ticket was given by mistake but making it sound advanced and technologically impressive to a wide audience. Which seems like a perfectly fine societal use to me.
You identified the threat correctly (legitimate users being prevented from using the app because they forgot or lost access to their password) but the measure you proposed exposes the application to a new threat (attacker can lock accounts without authentication).

Now I would typically task you with an exercise to improve your design so that the password reset mechanism, once triggered by an unauthenticated user ("reset password" is clicked) does not result in locking the legitimate account.

After a few minutes, you would likely come up with a new protocol that consists in two steps instead of one:

1. Unknown user triggers the password reset mechanism by submitting an email address to the "reset password" form.

2. Legitimate user receives a password reset link by email. If the link is clicked, the legitimate user is redirected to a prompt to provide new credentials. If the link is never clicked, nothing happens.

enjoy

Then I would challenge you again with a new threat: "Now we have a new problem. Instead of locking user accounts randomly, the attacker could just write a script that submits the password reset form repeatedly for hours, thus triggering thousands of emails and severely disrupting both our users and our email gateways."

You would say "oh! that's a great challenge!" :)

And a few minutes later, you would likely come up with the solution to implement a CAPTCHA equivalent in the first stage of the password reset mechanism to reduce the likelihood automation.

enjoy

Then I few months later, I would challenge you again with a new threat: "It appears that someone has devised a technique to bypass our CAPTCHA mechanism. We need to find something else."

You would say "oh! that's a great challenge!" :)

And a few minutes later, you would likely come up with the epiphany that no, this part of the challenge is actually not that great because we simply reached the final stage of our analysis that basically requires monitoring the world for new research work that would ultimately cancel the benefits of our CAPTCHA mechanism and force us to find something else.

But that part of the challenge is for another team ;)
Did you consider adding password suggestions? I do this. Generate 10 passwords and make them clickable.
Would running a speech recognition engine on-device and saving only the text constitute "recording"?

And why is it illegal anyway? If media can attend and report about a case, why can't they record?

I see Chandler v. Florida established that "a state could allow" photos and broadcast for criminal trials.

https://en.wikipedia.org/wiki/Chandler_v._Florida
Interesting idea. Although I worry about relying on fd3, it seems like it could be a bit fragile. An executable might have a bug in its file descriptor management which only gets triggered when it inherits an extra fd. The developers might never notice because they never run it under your shell, and then someday some user does.

An idea I've had before: the shell should listen on a Unix domain socket, and put the path to that in an environment variable. Then commands could talk to the shell which invoked them. That could be used for this kind of content negotiation stuff. It could also be used to do other things – for example, a subprocess could modify the current directory of the user's shell, or its environment – there are scenarios in which being able to do that would be useful. A Unix domain socket path in an environment variable seems less likely to cause unexpected issues than inheriting an extra file descriptor.