skysight-inc/HackerNews huggingface dataset:
> plats reacting and signalling is no different than a bacteria moving along a concentration gradient.

No different than pain receptors, you mean.

> Plants have no brains or analog at all

No brain, yes. But what of "no analog" if the qualifier for suffering is deliberately clouded in ambiguity?

The only reason the brain matters qua suffering is owing to the capacity for consciousness. Plants have no brain, well, sardines have no cerebral cortex.

If you're going to trivialize the cerebral cortex based on whim/feeling, you can do the same for the whole brain. By extension it makes as much sense to attribute the possibility of consciousness to insects as it does to plants, because you're throwing the particulars of the brain out the window. Some "magical unknown thing 'X'" is giving them consciousness - but there's no reason "magical unknown thing 'X'" has to be specific to a brain.
Changing Wikipedia's theme back to the old one with a browser extension
Subjective and Objective Measurement of Democratic Backsliding
The problem with this is that we are talking about pseudo-anonymous signup for websites. They can't go back and verify the credentials you used to create the account because you didn't provide any. But if this is the case then the help desk is a major security vulnerability, since just anybody can claim to be you and take over your account. The help desk has little to no way to actually verify your identity.

At the very least if the helpdesk does reset your account, there should be a 48 hour lockout and a message sent to the account allowing the owner to dispute the change. Yes it is inconvenient in cases where the actual owner lost all of their login credentials, but this is hopefully rare.
It should be OK to rest on your laurels a little bit after a big win. When your ancient caveman ancestors killed a mammoth, everybody in the tribe chilled out for a couple days afterwards I bet.
In the era before cell-phone internet, being able to call the automated weather reporting station at the nearest airport and have it read out conditions was hugely useful.

For folks who haven't seen what's in a METAR/TAF: https://www.faa.gov/air_traffic/weather/asos/ (By default, clicking a station gives you the abbreviated format; you can select the "decode" radio button and click "update" to translate it into English.)
Totally agree that developing in many no-code tools is frustrating since you can’t use the development workflows you’re used to in your own IDE. Retool Mobile was built as an alternative to react native that makes it easy for developers that know some JS/SQL to build native apps.

We focused a lot on development workflows like staging environments, versioning with Git, debug tools, monitoring with Datadog, etc. There are a few development workflows we can make even better because we own the run-time. For example with Mobile when you’re shipping a new update you can test on a staging environment, test the app directly on a device (vs emulators) and inspect issues with debug tools. Then when you’re ready you can push it live OTA so everyone is on the latest version.

Are there other development workflows that would be helpful for you? We’re investing a lot more here and would love any ideas
I can’t speak to how tough it might be to edit and re-localize the generic error message here in your system, but I’ve seen many instances where now-loyal (B2B) customers saw error messages, and the wording of the error, especially in providing a path to escalate, was critical to turning that into a positive experience. Bad error messages, in a way, should be treated as a serious (though not critical) bug IMO.
> store 2FA secrets in a different place from their passwords is just not something normal people are ever going to do

Normal people, in the sense of people who do what the interface says to do instead of layering anything else on top, are told 2FA means "something you know, and something you have."

"Know" means it exists only in your mind; it is not stored elsewhere. "Have" means you cannot possibly produce it with your mind; it's stored elsewhere.

When abiding by this concept, "storing 2FA secrets in a different place from their passwords" (the former in some electronic or printed format; the latter in one's mind) is simple. Things get complicated when people start storing both in some electronic or printed format, but that's not what any login interface tells people to do.

The neologism "passkey" (a string used in lieu of a password, but which is not memorable, and therefore is destined to be something you "have") will probably help to sort out this concept: there would be no confusion about the fact that combining a passkey with totp constitutes two "have" items, and therefore is 1FA until combined with something else (biometric, probably).
Sensor was faulty, sensor replaced, system functioning normally.
And this is how you turn a second factor into another first factor.
Even for personal accounts, KYC regulation implies all personal data go to a handful of centralized exchanges, which incentivizes malicious hackers.

In Romania, I will resort to notaries and LocalBitcoins/classifieds for trading BTC. I would probably get a better deal than the ridiculous exchange spreads (if you include deposit/withdrawal) as well.
Related: I recently bought some Yubikey Security Keys (U2F/FIDO2/WebAuthn only) and decided to update all websites I use with those keys. The problem is virtually no website supports them. I think out of the hundreds of accounts I have only Google, Cloudflare, and 1Password support them. But also the UX is a bit of a disaster:

https://blog.silverorange.com/web-authn-ux

I had an old set of YubiKeys which I used as a MFA option for LastPass. In comparison to WebAuthn, the process is dead simple. Input master password and LastPass prompts to touch yubikey. Dead simple with no scary dialogs. I have not seen any website offer an integration with Yubikeys like that. Is that only possible because LastPass was a Chrome extension? Or is it simply lack of demand?
But that price and convenience is at the cost of quality and employee safety. And honestly not even worth it as a consumer even if you don’t care about the ethical issues. I’ve been severely disappointed with the quality of the average item on Amazon over the last few years, to the point that I have stopped using them completely. Even Walmart is better, which is saying a lot.
Google's 2FA is an absolute embarrassment. Super annoying that Google hasn't yet done more to improve it.

See also: https://news.ycombinator.com/item?id=33895836
Well almost nothing creative does, unfortunately.
It has already taken multiple clicks for users wanting to read English Wikipedia in a language that wasn't one of the nine in the sidebar. In fact, clicking the "287 more" link at the bottom of the left sidebar in the old design brought up the exact same box that clicking the "297 languages" link at the top of the new design does, with the same list of languages in the same order.

Alternatively, one could create an account and set a default language, or visit a wikipedia site dedicated to that language.

https://en.wikipedia.org vs https://zh.wikipedia.org for example.

Once you've switched, further links within the site should keep you in that language.
They don’t seem to be very concerned about injuries. One example that comes to mind is storing 40 lb bags of dog food such that people had to duck and lean over and drag them under a low shelf, that’s practically designed to cause back injuries and in fact caused multiple in a single warehouse.
> Allowing customer service to bypass customer auth requirements is just weakening your system. There will always be a CS agent who is bribed, makes a mistake, etc. And besides, the agent following a flow chart has no better info to make the decision on than a computer.

This is true, but OTOH there will _always_ be edge case scenarios that no one anticipates until they actually happen. Or maybe someone did anticipate, but they were drowned out by the other voices in the room saying "that can't/won't happen," so it wasn't included in the requirements. What happens when a customer encounters a problem that doesn't fit neatly into one of the user journeys that the product team planned out? Are they just shit out of luck?
+1 I just set up a Matrix homeserver for the first time, and it was really slick with the Ansible playbook.

I am astonished by how well the Signal bridge works — everything works! Read indicators, threads, mentions, groups…so far I have it configured as a linked device to my phone, but you can also configure it as your primary device.

I really want to use the WhatsApp bridge, but that seems messier. I don’t want to install WhatsApp on my phone, so it requires running Android in a VM with a VoIP number, and apparnetly risks getting banned from WhatsApp.
But that's the thing, right, you didn't consider those things before. There's no difference between not having considered suicide and not having considered pro ballet and it doesn't reflect anything about you in particular. That's why I'm saying I don't think it's incomprehensible that some people just haven't thought of things you've considered before. Because obviously you also haven't thought of things to consider until someone else (myself) brought them up.
This imaginary yardstick for measuring developer effectiveness is flimsy and appears mythical because it is extremely sensitive to context.

The same 100x dev who will build the medical imaging system single handedly, will also be a 0.01x dev when asked to fix an npm dependency issue in another team, will also be a 1x dev fixing a cassandra config issue, or an aws build system issue.

In my experience,
this is not because (s)he can't but mostly because (s)he WON'T.
Why do people keep falling for this? This same fraud used to pop up only every 10 years. Now it's 5 or less.

I'm a PhD chemist. Please consider this: While plastics and oil are both hydrocarbons they have this important difference. Liquid hydrocarbons have short carbon chains and lots of hydrogen. Plastics have very LONG carbon chains, usually with many double bonds, and very little hydrogen.

That is why, when you heat plastic it decomposes into char -- as in charcoal. It is IMPOSSIBLE to produce oil, even theoretically, without adding a source of hydrogen.

A few centuries ago these same fraudsters would be selling you a way to change Iron into Gold.
> I'm not in Europe, so I have no rights to my photos and nowhere to complain.

If it makes you feel any better, Facebook doesn't care about the law and Europeans don't have any more luck than you do when it comes to this: https://ruben.verborgh.org/facebook/
Revised follow-up paper https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3805927
Abstract:

Despite the general narrative that we are in a period of global democratic decline, there have been surprisingly few empirical studies to assess whether this is systematically true. Most existing studies of backsliding rely heavily, if not entirely, on subjective indicators which rely on expert coder judgement.

We survey other more objective indicators of democracy (such as incumbent performance in elections), and find little evidence of global democratic decline over the last decade.

To explain the discrepancy between trends in subjective and objective indicators, we develop formal models that consider the role of coder bias and leaders strategically using more subtle undemocratic action.

The simplest explanation is that recent declines in average democracy scores are driven by changes in coder bias. While we cannot rule out the possibility that the world is experiencing major democratic backsliding almost exclusively in ways which require subjective judgement to detect, this claim not justified by existing evidence.
For the amount of money you're proposing to spend to make America better we could fund universal health care and almost completely fund 2-year college for everyone. I think that would be money better spent.
And despite what everyone thinks of our schools, we manage to learn both systems and divide by numbers other than 10.
One downside of Advanced Protection for Android users that intend on linking the account to their device is that you will not be able to install apps from "aftermarket" app stores, like F-Droid. You can still install apps with `adb install`, though.
I wish my experiences with federal LEO in CBP could reflect that. I've lived some corrupt ass places but federal CBP officers take the cake.
I think this level of heavy-handed measures are a result of cases like this [0] where a Sony employee embezzled $150 millions and converted them to BTC using Coinbase. Probably their silly security flags went up thinking you are trying to steal your business's money using BTC?

Edit: people who want to know more about the case, here's a Money Stuff article by Matt Levine [1], jump to "Coinbase compliance". Bunch of related links there as well, like NY Department of Financial Services release [2]. Summary from that:

> In the spring of 2021, an individual purporting to be an employee of a corporation (“Corporation A”) was able to open an account on behalf of Corporation A without authorization from that corporation, and without the appropriate personal identification documentation required by Coinbase policy. As part of a sophisticated fraud, the individual was able to submit an online request form to raise the daily withdrawal limit by 50 times, which was granted despite a total lack of account activity and, therefore, no evidence that the existing thresholds were insufficient for the customer’s activity. Then, on a single day, the employee transferred more than $150 million from Corporation A’s bank account (that the employee had also gained unauthorized access to) into Corporation A’s Coinbase account. The employee then immediately converted the fiat funds into virtual currency, then immediately moved the virtual currency to a wallet off the Coinbase platform. Coinbase did not become aware of this activity until six days later, when Coinbase was contacted by Corporation A’s bank. Coinbase assisted with the investigation of law enforcement, which ultimately led to recovery of the funds.

[0] https://www.justice.gov/usao-sdca/pr/united-states-files-civ...

[1] https://www.bloomberg.com/opinion/articles/2023-01-05/coinde...

[2] https://www.dfs.ny.gov/reports_and_publications/press_releas...
*Flavor Aid

They didn't actually use Kool-aid in the Jonestown massacre, people just think they did.
"I love and accept myself, exactly as I am" and "I am a person striving everyday to improve in multiple dimensions" are not mutually exclusive! It sounds like a paradox but I think that's a result of our imprecise language. Accepting yourself and improving yourself are two side of the same coin.
I've always seen all the language links in the sidebar without clicking anything. I can see how, if you have had a different experience, the new arrangement might seem less of a disruption.
Sites should just let people choose red bubble, blue bubble, or no bubble, so everyone gets what they want. It's not so big a change.
He just said he wasn't American so why would it be intuitive to him?
In that case removing the broken bulb and sticking your fingers on the metal bits also works.
Python ecosystem: article about how nox is supposedly better than tox, which seems to be the python go to tool for automated testing of python projects
Price comparisons assume you get the actual product you ordered.
won't long running write transactions block eachother? Not all apps can avoid the need for these kinds of transactions.
Not a single one do your sources refutes anything that I said. Or supports your claim that cows spend their whole lives on factory farms. All they say is that they exist and that most animals go through them. Newsflash! That’s what I have been saying all along.

> Even if the cattle was 'first grass fed then shipped to factory farms to fatten' like you argue, the factory farming consuming ~70% of the grain in the US at that point would STILL make my argument. That's bad. That's inefficient. There is no defending it, even if your argument was true.

You’re arguing against a point I never made! I never said factory farms didn’t exist, that they were good, or that the system itself is good! You’re fighting for the sake of fighting.

All I said is that it is true that cows start off on grass. That’s the beginning and end of my point. It’s a factual statement and you do yourself a disservice by continually arguing against basic factual information.

Factory farms (for meat) don’t rear animals. They buy animals from other ranches that oversee other parts of the process of raising cattle. They then take those cows and feed them a mountain of grain to fatten them up and slaughter them. It’s gross, it’s terrible for the cows welfare, etc.

If you want to criticize the system, though, it is important to understand how it actually works, or you don’t look credible. That is my point, it is incredibly frustrating to be told over and over that I support factory farming, or somehow deny its existence, because I am pointing out information that is false on your part.
I don't think imposter syndrome is real, or I think it's overstated. I think most people are good at ascertaining their competence or lack thereof. If you take a math class, for example, I think it's reasonable to assume that one can reliably ascertain their knowledge of the material by exam or homework performance. If you can follow along with the lectures and do the problems, then you are competent, no?
I don't understand the use case. Very large file support aside, are you saying you've observed people looking at git and say "I wish I could use this like I use a chat server?"
It is, but if you're a website operator, it's much easier to not use Google Analytics than it is to convince your government to clamp down on law enforcement search powers.
I believe they started on the wrong foot. They cheaped out on the welding process and so the whole system was losing pressure and stinky volatiles. They had to redo their entire plumbing and people still complained after they swore up and down that there were no more leaks. which might be improper detection or people are used to a smell and don’t believe it’s gone.
The billionaires aren't choosing what you can express. You are free to email your newsletter.
That's false. Most domains where it would benefit have already made the change.
The good news is this HN post could possibly get you the traction you need, which is also sad. Why is it that so many companies' customer support fails to function until someone squawks loudly on a high-traffic public site or social media?
sure, but a copepod is a lot closer to a shrimp than bacteria.
Imagine having your salary drop 70% year over year because interest rates are no longer zero.
Thank you for this. I will make extra backups of my 2fa seeds. I currently have all of them in my bitwarden vault which won't probably ever fail me but it's better to be extra safe
Nit: should this be 3 years since?
I recommend Lang: Mathematische Methoden der Physik

https://link.springer.com/book/10.1007/978-3-662-49313-7
Or maybe it's all still just a matter of perspective:

https://youtu.be/zyuYiehl2DM?t=173
Just virtue signalling.

Virtue being subjective of course.
https://medium.com/faa/faa-testing-new-system-to-increase-we...

https://www.google.com/url?sa=t&source=web&rct=j&url=https:/...
Three Step Poverty Solution Is Nonsense
I think they shouldn’t be common carriers. That said taking away their common carrier status will mean only those with the resources to sanitize at scale can compete without litigation risk. The existing players can afford it, and will likely build better and better LLM classifiers to protect themselves and auto police content. But the essential result would be there will be no new players.
I'm not sure how to interpret this. Were the antihistamines in case you had a drug allergy? Or were they for the other kind of allergy (pollen, pet danger, dust, etc.)?
1. Energy - The renewable folks would have us believe this is incredibly cheap
2. Land - Most of this land is not usable for other purposes. At least in the U.S. I am not speaking about globally because the problems there are largely political
3. Labor - Creating jobs and opportunities is not a bad thing
4. Environmental - With the wars going on I think we have a lot more to worry about than the 3% of emissions coming from animal husbandry in the U.S. Other than climate change impacts (which could be minimized even further with feed supplements), animal husbandry is actually beneficial to the environment.
I have tried switching to Linux from Windows a couple times now. I enjoy it, but every single time I experience crashes. Twice it's been corruption of key boot files. I wish I had a couple billion to donate to / create some key Linux orgs to make the year of Desktop Linux a reality.
I would rather donate $10 to my local charity monthly than have one more company track my entire browsing history.
At this point I'm just waiting for the country to collapse under bureaucracy.
I'm on Coinbase's side. From their point of view, this story reads like "I am trying to launder money".

Why not just use a payment method with a settlement period, instead of insisting on using a (new) debit card?
I agree to some extent but large companies do staff roles that have public outreach as part of their job description. Suggesting that no one is able to say "there is an internal ticket for this" is not the full answer.
They also never supported smile donations from the mobile app for no good reason, so it was always pretty clear to me that it was nothing more than a PR stunt/tax write off.
I always enjoy seeing what a good awk & sed user can achieve in bash.

However one of the not so good Devs I worked with used awk to load a large, deeply hierarchical JSON file. They refused to use a library to parse JSON. It was a many hundreds of line monstrosity.

Luckily when they left we were able to parse it in JQ instead .
Funny thing is I’d bet the small amount trickling in to the long tail charities is more impactful to them than a larger amount to the big mega-charities.

I run one of those long tails and Amazon Smile was just right to cover running costs for hosting, bank fees, etc.
It's misleading to say that storing your passwords and 2FA secrets in the same place defeats the purpose. There are several vectors here, right?

Enabling 2FA on a site (regardless of how or where the 2nd factor is stored) means if a malicious party were to obtain your plaintext password, they still wouldn't be able to access your account. So, outside of the entire discussion of password managers and secrets, 2FA does require a second factor.

Keeping your 2nd factor in the password vault does make the vault a much higher-value target. But it doesn't diminish the fact that if only your plaintext password is compromised (for example through a leak or re-use) the account is still protected until the point the 2nd factor is compromised.

Security is a spectrum, and often at odds with convenience. While demonstrating that something is provably secure is important, I feel we often fall victim to the nirvana fallacy when discussing the practical everyday use of these things.
I don't consider myself knowledgeable about biology, but it strikes me that even this omits the nominally distinct fauna in our guts.

I say nominally distinct because from a philosophical standpoint it makes a point about where "we" end and "other" begins. Our microbiome consists of distinct organisms but it is also kind of "us".
Seems they traced it down:

> We are aware of an issue that impacts Actions, resulting in slow or failed jobs. Root cause in a dependency is understood and we are working with that team on a mitigation.

> Posted 1 minute ago. Jan 19, 2023 - 18:49 UTC
This is even affecting the CI pipelines in our GitLab repo because it has submodules at GitHub -_- probably a lesson here
Comparing FastAPI and BentoML