skysight-inc/HackerNews huggingface dataset:
This isn't a security flaw, this is incompetency. Google not allowing disabling or altering 2FA after resorting to a backup code is simply bad design.

They could've done the same with any method of authentication. Using a password isn't even enough for Google any more these days, look at Gmail+IMAP.

This is pure incompetency, not a flaw in 2FA. Whatever device this person is on has been flagged insecure enough to need repeated re-authentication of the highest level, locking them in a loop until the recovery mechanisms are exhausted.

Competent support would also have helped. Google doesn't do support for almost all of its customers but in a normal company, a support agent would've been able to help restore the account. Sure, Twitter has shown us that such support can also be a major risk to important or famous people, but that's why Google has a special program you can enable that will lock down security even more.
I would think Apple still exists precisely because it knows that, if they don’t cannibalize their own product, somebody else will.

The Apple II paid for development of the Mac, the iPhone cannibalized the iPod.
It's ok that congress has that authority, however it should be implied that when they grant spending authority that the treasury may raise money to pay for what Congress granted.
This is all a lot of weasel words to avoid the fact that the President does not pass the budget, and their proposals bear little resemblance to what actually get passed.

Liz Cheney is completely irrelevant here.

Post FAA's ACTUAL BUDGET over the last 8 years and let us judge.
is 16Gb m2 pro enough for iOS+Android Dev work?
Thanks for making me look this up. I was curious since my wife can't eat dairy proteins (not as a severe a reaction fortunately). I think that it was probably whey. There are some companies that have claimed to create whey that is identical to milk whey from vegan sources [0]. It makes me wonder how the ingredients list is labeled though. Since there are requirements to call out allergic sources in ingredients lists (it will say something like "Contains Milk" or "Allergy Warning: Milk, Tree Nuts") how or if it is listed on there. EDIT: On the Perfect Day website there is a small warning at the bottom that says "Our protein is a milk allergen". Also found some Brave Robot ice cream that uses their protein listed online at my grocery store. Under the Allergen Info it does say "Contains Milk and its Derivatives".

Also while looking around found that for casein, it is still used in some glues [1] on bottle packaging. Likely not the source since it wasn't ingested more of an interesting factoid.

[0] https://perfectday.com/animal-free-milk-protein/

[1] https://en.wikipedia.org/wiki/Casein#Glue
Time for a Google Takeout while you still have access to the account then!
You are correct about the QR code just representing a (fairly short) string, but applications can handle QR code just fine - 1password can read it directly from the screen.
Presumably that depends on your monitor size
Just like the "water carburetor" and other miracles that never materialized, the problem is that the alternative is cheaper and simpler (which means cheaper).

It doesn't sound expensive to add water injection to an internal combustion engine, until you have to make it work in production, with end users.

YOU can make it work, because you are motivated, but what about the guy who buys it because it's cool and then forgets to fill the system. Sure it's easy to add programming to work around this condition, but is it easy to integrate and test?

Anyway, crude oil is very, very cheap, and very easy to integrate into a production process. Waste plastic in the recycling stream is dirty and heterogeneous in composition and size, which makes it hard to integrate into a production process. Not impossible, but more expensive, which means that no one will do it without outside compulsion (and maybe not even then).
My company just announced they were hacked a third time in about a year and each time they get more and more…. Draconian, about security measures. Each time my job gets more and more difficult. I have to approve MFA requests on my phone around 6 times a day because the login timeouts are so low.

Now they’re saying we aren’t going to be able to use our own devices, and must use the company-issued computers that are running Windows. That makes no sense. Force me to use the least secure OS because “we need to beef up security”. I do mostly data science work that lends itself to not only a *nix OS but Linux specifically. There are things I use to complete my work that are Linux-only, so I wouldn’t even want a Mac.

I started job searching when this news dropped. Life is too short fellas. Life is too short. Make it harder to do my job, for no real reason beyond bureaucracy and politics, and I am out.
This is amazing, thank you! The symbol replacement seems really slick https://github.com/iheartla/iheartla/wiki/Keywords-And-Speci...
Sometimes they might be. But even if you know the font size of the headers, the contents, and the bulleted lists, you still won't know where the paragraphs wrap, unless you also require a fixed-width font, and don't allow any of the word lengths to change. But then we probably wouldn't be calling it a "modern library for PDF generation".
You can configure a theme yourself. The default theme only applies to users who aren't logged in.
So many knee-jerk reactions by people disliking the change, so I want to give another view: I really like the new design.

- When reading an article, I want to have absolutely minimal visual noise. Removing the old sidebar helps.

- The smaller column width helps with readability, because it's easier to scan back to the start of the next line.

- It's great to have the table of contents always visible, to quickly jump around the some of the miles-long articles typical for Wikipedia.

- I don't need anything else on the page - so I don't have any complaints about "inefficient use of space". On the contrary - more whitespace helps me focus on the article.

- Unlike with Wikiwand, there are no distracting animations.
It would probably good for your mental health.

If you came away from the sabbatical refreshed and ready for new things that alone would be worthwhile.

Rich Hickey's creative sabbatical gave us Clojure:

"I started working on Clojure in 2005, during a sabbatical I funded out of retirement savings. The purpose of the sabbatical was to give myself the opportunity to work on whatever I found interesting, without regard to outcome, commercial viability or the opinions of others. One might say these are prerequisites for working on Lisps or functional languages. I budgeted for two years of self-directed work, and Clojure was one of two projects I pursued. After about a year I decided the other project (a cochlear modeling and machine listening problem) was more of a research endeavor that might require two to five more years, so I dedicated myself at that point to getting Clojure to a useful state."

Source: https://download.clojure.org/papers/clojure-hopl-iv-final.pd...

As long as you have the savings to do it, I say go for it.
>Wouldn't that make him qualified to continue doing what he has been doing for 52 years?

A long tenure does not necessarily mean that one is qualified to continue.
What if by Randall Munroe
Not rigorous but it changed my perspective that was instilled in me in middle school.
Otherwise Feynman Notes changed me academically. Easier to pickup math through physics if you arent looking for deeply pure avenues.
So weird, because I cannot!

Maybe it's because I haven't used a 2FA code on this account in the past year? I typically stay logged out of my Google account and just have the email forwarded to another provider.
My understanding is that the passport is not actually required at the CBP checkpoint if you present a valid unexpired green card. But yeah, there's no way different officers should be yelling contradictory things at you.

Side note: A passport may still be required to board an inbound international flight even if I'm right about it not needing to accompany a green card at the CBP checkpoint, depending on the rules of the airline and the departure country.
2FA/MFA isn’t the problem. Google is just a pain to deal with when their products don’t work as expected. On one hand, security-wise, it’s good that they tend to design their algorithms to err on the side of being restrictive, but on the other hand, they have no legit support, so if you or their algorithms mess up and you’re locked out of your account, you’re basically on your own. For a company so many of us rely on so deeply, that’s awful!
Most people are taught that there are two values for the square root. It was only in later math courses (e.g. precalculus) that they reserved the square root symbol exclusively for the positive square root.
I've definitely seen a couple of cookie toggles that worked this way. But, i can't remember which ones off-hand.
I have a better idea: reduce plastic consumption. I know, I know, totally OC donut steel.
The most recent president to seriously control (and even eliminate!) the deficit was Clinton, who was a Democrat.

One can quite reasonably debate what the government deficit should be, but the idea that Democrats are big spenders and the Republicans are big savers is ludicrous.

The debt limit, of course, is terrible policy.
Thats true, but to do that well given what's out there, you have to do it yourself.
What about protein intake?
I mean for the vast majority of the votes the Democrats had the lead [1]. It seems much easier for 6 Republicans to ask for some pork projects or other concessions instead of 15 Democrats.

[1]: https://en.wikipedia.org/wiki/2023_Speaker_of_the_United_Sta...
South Korea and Japan are a tiny minority of the Asian population and most civilians in those countries (and the rest of Asia) don't care what Taiwan's status is.
It's been awhile since I read it but I believe they ask you about all felony convictions whereas the use / non-convicted felonious activities itself only goes back like 7 years (perhaps not coincidentally is also statute of limitation for many federal crimes).
I did not expect that to read so similarly to a good doc on coding conventions as it did.
> Adding a new file, for example, requires that the filesystem compare the new item name to the name of every other file in the folder to check for conflicts, so trivial tasks like that will take progressively longer as the file count increases.

Not necessarily. Any file system worth its salt is using B-trees or hash tables, where file name existence can be checked in respectively O(log n) or O(1) time.
A Mathematical Mosaic is a little-known gem here.
I lost a bunch of email addresses because they decided to start enforcing the use of security answers even when I had the correct password. Then I lost some more email accounts because I logged in from different locations (I moved) and they thought I was a fraud, even though I was able to confirm using the backup email address. I'm fairly concerned that eventually I'm going to lose all my email addresses due to these increasingly draconian requirements that are sprung upon us.
Steroids are healthcare, and they are legitimately used for treatment of ailments.

Plastic Surgery is healthcare, as it can help treat mental disorders affected by body dysmorphia. Additionally, plastic surgery is much, much more common than you think and not always done for vanity. Even if it was, that's the individual's choice to have the procedure performed.

Do you have a source on that 99%? Most sources I'm seeing from a quick google search state that pregnancy is objectively dangerous for people that can get pregnant in many cases, much more than 1%
It shouldn't be impossible to secure wp as-is, happy to help if need be. Reduce excess plugins, enable automatic updates, avoid plugins that can't be updated via wp.org repo., reset wp salts. You'd likely find it's very reasonable afterwards.

For the editor:
Install this, it's supported through 2024 (at least) and will revert the editor to the old version:

https://wordpress.org/plugins/classic-editor/
JMP.chat is a commercial provider, but their infrastructure is open-source. The central bridging component is actually cheogram.com (maintained by the same team). If you're determined enough, there are other providers you can bridge through Cheogram, including Vonage and Twilio, which offer European numbers. It's not as seamless as JMP, but if you're determined enough it works: https://wiki.soprani.ca/VonageSetup and https://wiki.soprani.ca/TwilioSetup

Alternatively, hang tight... I know JMP do want to offer European numbers at some point.
You can get a fever, aches, and headaches from the cold as well
"Delete" should always be taken to mean "remove from this list I'm looking at right here" and never assumed to mean "actually really for real delete", unless regulations require hard deletion. (And even then, mostly it's still in a backup and will go away in 7 years or whatever dumb thing).

If you don't like this probably your only option is to never create the thing in the first place.
Not in iOS, apparently. I recently printed out my QR codes by screenshotting Authenticator's export screen on an iPhone. I just tested a moment ago and it still works.
Incorrect. Most Asians are anti-war and understand the biggest war monger by far is the USA. It really is that simple for ~4 billion people.

An insignificant minority of the people on this planet feel Taiwan is their concern and are interested in involving themselves in a Chinese domestic dispute. Most of them are western European imperialists that have no legitimate business interfering in Asian affairs.
my first "real" job was managing the public computer lab at college, and doing misc IT type tasks. Also part of my job was managing the workstudies that attended the lab and helped students. It was a pretty lightweight job and the workstudy positions had a fair amount of turn over as students moved on.

One day I got a call that one of my workstudies had applied for an internship with the NSA and put me down as a reference. They wanted to schedule a meeting with me to talk about the applicant. Up to that point I had received a few reference check calls from companies that were hiring former workstudies, and they never lasted more than 5 minutes, and they never wanted in-person meetings.

The meeting ended up lasting over an hour, and not once did they ask me about technical capabilities or job duties. All the questions were about his social connections, personality, narcissism. I realized that this wasn't a reference call but a security clearance screening. A lot of times they asked the same question in multiple ways, trying to trip me up or see if I had inconsistant answers. They also asked questions about me, presumably to determine if I was a trustworthy source.

A few years later I applied for security clearance since I had moved jobs to the US Navy, and I had to maintain PC with classified data on them. My clearance level was probably the lowest level because their interview of me was not as probing as what I went through for the workstudy that applied to the NSA (I never heard whether he got the internship.)
I think all countries should use their own instances of gitlab or others. It feels wrong that they all depend on GitHub to publish such important information.
Clearly designed by someone who only uses one language.

The one most used element for me was the side bar, where I could hover over the language to see the translation of some term. Now it's hidden behind a click, and a looot of scrolling. Just try to reach Svenska.

I can work around the style changes easily with custom CSS and stylus, but I'm not impressed by that change.
My first thought was "what kind of oil?". It matters. The clean burning, energy dense stuff was turned into fuel from the start. The rest of it is barely fit for a cigarette lighter.

But beyond that, not all plastics come from crude oil directly. Many plastics, especially baggies and consumer plastics of the type shown in these photos, come from liquids that are removed from natural gas.

Either way, you're certainly dealing with a liquid hydrocarbon of inferior quality. And at the huge energy cost of having refined it twice. I'd be surprised if this provided any net-positive energy. And it's certainly a dirty burning fuel with low BTU per volume.

Why not just burn the plastic directly at this point?
Type hints, Data Classes, and Enums
Ask HN: Are GitHub pages failing to deploy?
I'm trying to publish a new post on my blog, which uses GitHub pages, and the Action fails with a timeout.

It keeps stuck on "Current status: deployment_queued"
Some cultures, and strongly correlated thus nationalities, are more brutally honest than others. So it may just be a test to see if you're an apple pie white American, which could be unlawful discrimination.
> There were no studies involving all the shots that kids in the US are getting together these days.

It's been decades; the kids are the study. Also, they're no longer kids. Do people who have taken the vaccines report higher rates of autism? It would be relatively simple to check for that.

> Did you have any idea other than "anything but the vaccines"?

Increased awareness of autism, increased medical attention on kids at large, increased medicalization of societal deviance, less socialization, less parental time, environmental factors (more CO2, more exposure to pollutants, more exposure to forever chemicals), dietary factors (more sugar, more carbs, more fat, microplastics), derived factors from any of the above (more screen time, earlier occurence of obesity and diabetes, higher prevalence and normalization of societal deviance).

All of those are as likely as vaccines; which is to say, extremely unlikely. We can test for them. Or we can keep testing this one thing we've already tested for, over and over, until as statistically expected, a study eventually happens to agree with your preconceptions about vaccines, proving the all-encompassing conspiracy of $cienti$t$ and $tati$tic$ and error margin$, and plunging us into another two decades of unvaccinated idiocy.
You can do this, or you can write down the secret (Click to get the text), and use oathtool to generate codes rather than google's auth.

I keep all my 2fa secrets in pass for this reason. Never lose access again!
"DIP switch" is an acronym for "Dual Inline Package switch". Such as these:

https://octopart.com/electronic-parts/electromechanical/swit...
Feels like a private workaround for civic failure, but given the numbers on methane from rotting food landfill it might actually pencil out as cost effective compared with other personal GHG reductions.
Our veterans are "dumb crap" now? When I was growing up, that kind of talk would get a hippie's face smashed in. Wild times.
I'm all for it. How do we as consumers do that in a practical way?
That’s expensive.
I'm AMAZED at the comments here. I see two common ones: 1) this is news? and 2) no experts used. Both are just insane.

For 1) not everyone is tech literate. You're telling me that everyone you know also knows that companies like Google, Apple, Amazon, Netflix, etc are capturing your data across the web? That they can (almost) uniquely identify you? You've probably been living in SV your entire life and never traveled around the bay -- or further -- if that is an honest statement. This statement comes off as self serving, saying that _you_ know better. Maybe the article isn't for you, and that's okay. You don't have to comment. The comment section may not be for you either. Post if you can _contribute_ to the discussion, otherwise don't.

For 2) I understand the concern, but ProPublica has long worked with topics like these and legal issues. I guarantee you that their staff has enough expertise to understand what browser fingerprints are. That's really not a high bar so your screams for experts are falling short. They list the tool they used and the websites in question. Your calls for expertise will raise if you give reason to them by pointing out how a tool might be flawed and/or that websites are actually capturing fingerprints like the article claims (but that can change after the article's release). So if you want to disprove the article disprove it instead of making a call to authority. Otherwise you're just noise.

Ironically these two types of posts are in direct contradiction to one another. But can we please stop and actually discuss the article instead of you? This is a stupid flame war and most of us just want to discuss the actual contents of the article. Please don't even respond to this, just participate in the conversation to the actual contents of the article.
Everybody hates the blockchain. Even when it works.
I strongly dislike that the table of contents have folded entries. I now have to click to get the link to a subheading.

In general, for quite a few things I need extra clicks to get to it.

Also, as I mostly print articles[1], I had a special printing layout set up to print Wikipedia articles. I need to come up with a new layout (reader view for Wikipedia used to be terrible).

[1] https://blog.nawaz.org/posts/2021/Dec/consuming-articles-off...
ChatGPT Is No Magic Bullet for Microsoft’s Bing
I doubt that Apple’s offer, if/when it comes, will give “the same result” as the $400 Quest.
Isn't the big picture just maximizing income for the company while minimizing expenditures? This is the only purpose of everything but charities. Products are only for transforming into money.
Well, page 42 doesn't show it, but the Stanford Seal font had a second, distorted, copy of the seal under a different character code, to be used when you wanted it printed nearer the edge of the paper rather than the center. This was because the XGP printer didn't have the smarts to correct for the sweep of the laser, resulting in the pixels near the edge of the page being wider than those in the center. I'm told that this was due to it really being a hacked Xerox copier, which had been designed to just match the non-linearity of the scanner with that of the output imager.
Many Americans see our country as more like a single country than an EU style coalition. We’re for example expected to send money to support some of the less successful states under the justification that we can’t leave our countrymen behind. We get dragged into wars because our countrymen feel like going on an adventure.

So we also expect things like human rights to be somewhat consistent. But we seem to be on a waning trend as far as national unity goes.
especially when it works.
I went down this rabbit hole for a bit. The only obvious issue seems to be that burying (or burning if you're Swedish) plastic is really, really cheap. For the turkey waste, we're already good at rendering animal remains, so there just isn't a need.
Sorry, but life expectancy changes constantly. As you age your life expectancy increases because you haven't died yet. Otherwise this will reach a point where it thinks you should be dead, which is ridiculous. Isn't it?
Sure, that's the publicly-reported story. Is it sufficient? Hard to tell from the outside.

Just a tiny bit of blackmailer-sabotage or vandal mischief-making – the sort of thing often underreported for legitimate reasons! – could've been the margin between some mild embarassment & the total collapse we saw. (For example: tying up the call-in lines to turn a normal hold time of minutes into hours, or long busy signals.)

Simple monocausal stories are for unsophisticated spectators.