skysight-inc/HackerNews huggingface dataset:
Bitwarden didn't fail, there was no embarrassment. They actually encrypt the vault unlike Lastpass. There is heightened awareness around the various issues that came to light following the Lastpass attack, and PBKDF2 is one of them. In Bitwarden the iteration count is user configurable.

Note also that Bitwarden provides its server software (and there is a great alternate implementation in vaultwarden); it doesn't have to be an "internet-connected data vault".

Your position is not vindicated by TFA, but I applaud your caution and you are like 10% less of an old man howling at the moon.
Good article - mirrors my thoughts.

I moved to Australia from the US in 2006. I swear that when I left the tip was more like ~15% (as the sales tax where I was was 7.5% and the rule was that you doubled the tax to work it out). Every couple years I'd go back and it would seem to creep up. All of the sudden it was 20% and, then when I was back last year, somebody told me 20% was minimum and 25% was really more expected if the service was good.

The last time I was there I was out with 6 people and the bill was $500 and I watched them tip $150 (and then expect us all to evenly split it). The service was not exceptional - if anything I remember waiting ages to get the second drink and the bill. I am sure that person was working at least 5 tables (likely more) and you'd think at least a couple sittings so they'd be making some quite good money for a night at those kinds of numbers.

I made a bit of a comment about how it felt generous and they said "if you can't afford to tip like this you can't afford to go out to eat in America" - and I remember feeling things had gone way too far. It is a bit of a strange flex?
Lots of 32-bit Windows apps shipped with 16-bit installers (old versions of InstallShield and the like). When MS dropped Win16 support from x64 Windows, they built native implementations which "ran" the 16-bit installer based on the resources packed into it. In console emulation terms, they supported 16-bit InstallShield and friends with a HLE (High Level Emulation) approach rather than continuing to execute the original binaries on top of a low-level emulation.

For a hobby/minimalist Win32 implementation I wonder if HLE support for popular packers/obfuscators would be easier than getting the low level details right?
Those are far more common.
It's much, much better than working in fields like Medieval peasants, and better than working any kind of manual labor job. It pays well, lets me live the lifestyle I want, and doesn't drive me crazy. Being intellectually interesting is just a bonus.
Global cigarette sales peaked around 2011. Later than I want but glad it's behind us.

(Ok, it's because vaping is a substitution product but let's pretend this paragraph doesn't exist. Hopefully we're on the way down)
Europe Is Bracing for a Sharp, Abrupt Real Estate Reversal
So just FUD? An entire article for saying that they should increase the default number of interactions?

You can do better if you have to do FUD.
I am really of two minds about this. On one hand, yes, the suggestion that I leave a tip and the amount suggested has ballooned to a ridiculous level in some businesses.

On the other hand, I recognize that there are plenty of businesses that still don't offer a way to tip at all (Starbucks until very recently), and more importantly, that none of these employees make anywhere near a living wage. Having worked service industry jobs and found my way out, I can't help but thinking that most of these jobs are merely dark patterns that take advantage of people who can't or won't demand what they actually should be paid.

The unfortunate conclusion I've arrived at is that US consumers simply aren't willing to pay the true price for many of the things they enjoy on a day to day basis. Just one example is that their daily coffee is subsidized through the misery of minimum wage coffee shop employees.

You say you pay a "higher wage" - what does that actually equate to for someone working 40 hours a week?
It would be less obviously bad, but the same issue applies: say the company has three teams of ten people and they are all good: one gets fired/lower salary anyway each round.

And now you have the additional issue that evaluations need to be objective, which is hard, while a manager never wants to lose member of their team, so they're naturally pushed to overrate their people to protect them from ending up at the bottom.
How about shrinking and growing? I think I saw that in Patanjali
American whataboutism at it's finest.

Russia and the whole world minus the US voted against Nazism at the UN. Russia beat the Nazis the first time, despite American propaganda claiming a role. In reality America not only funded the Nazis till 1942, but squirreled away the best of them after that, then went on to back Nazis in power wherever they were, across the globe. America has also funded fascist causes and leaders across the globe in their eternal war against communism. so no. there are right wing Russians, but the global cause of white supremacy, Nazism and the promotion of a matter race is a distinctly white, Western, NATO promoted set of fascist organisations that are very much at the ideological heart of what being "Western" is.
how on earth is this, a back-breakingly empathetic comment, being downvoted

thank you for being reasonable and for having far more patience than I
"It reeks."
"Toxic fumes."

Same's true of ICE automobile exhausts. In far more voluminous quantities. The whole "great outdoors" is their ashtray. When will they be banned?
Considering modern laws governing construction sites do not allow workers to carry anything over 20lb and that also in strict limited time, I would rather say an average gym member exercising 3 times a week would be a tougher mate.

Not to mention criminals and crazy people do carry guns. The whole thing might as well ended with "three 6 feet-tall construction workers with black belts in jujitsu ended up dead shot by a 140 pounds stalker with semi-automatic gun"
Agreed, that’s why I said “experimenting”… cause as you’ve stated, it’s still not scalable. I think in time though, someone is going to disrupt this market. That’s just my opinion though.
Japan has been doing it like this for years. And it's much better. Pay people properly, and encourage them to be the best they can be (even for jobs that are so-called "unskilled") and then everyone's a winner.
This is great! It's usually more expensive to have a non ASCII leter in your surname, as you have to register two domains.

And if we'll ever ditch punycode for real UTF-8, one will have to buy three for backwards conpatibility with punycode.

My national registry does not do administrative building - I have a domain with a (correctly) placed š, but some other guy has the š in his surname substituted with a s in the domain he owns (:

does CIRA actually register alternative domain representations or just reserve them and wait for you to pay?
What alphanumeric password length would be sufficient enough to still be protected with only 1000 or 5000 iterations?
I'm pretty sure MacBooks have extremely high resale values; it should be possible to sell yours and get a PC without spending an extra dime if you want to follow the OP's advice.
It leads to the metagame.

For many junior employees, far more likely to be predesignated as H2F, you onboard as a hire to fire employee.

Then immediately begin networking for an adjacent team to join.

It's never about what you can do.

Always about who you know.
> One issue I could see with that is that because it’s the encryption key it’s going to lock out all your “live” devices, so an explicit step is an easy opportunity to warn them.

how so? The iteration count must be part of the non-encrypted parts of the vault data. If a client is offline, it will use its locally stored vault with the old (lower) iteration count. If it's online, it will have the updated vault with the higher iteration count.

> The second issue is that the transcryption would have to be done on login, which is a pretty shit UX as the user logs in then immediately gets locked out for however long it takes to convert the store (then again for most people I’d assume the payload is not enormous).

You could do this asynchronously in the background: Decrypt the vault, store it in memory (which all password managers do for some amount of time in order to provide any UI), re-encrypt, store to disk, send blob (which will continue an unencrypted iteration count) to server.

But this is the complicated case where the vault is re-keyed. What would totally be sufficient is to re-encrypt the same value key using a new hash derived from the same password, only with more rounds which means that the bulk of the vault blob won't change - only the password-derived key and the iteration count.

If any of this happens simultaneously on multiple machines, treat it the same way as you already treat editing conflicts (I'm not offering guidance there - this is a hard problem that each cloud provider is already solving one way or another).

> They are but needing to update the work factor as hardware progresses remains. In fact scrypt and argon have more work factor knobs than pbkdf2, which only has the iterations count.

Given the current state of the art and given these two algorithms, I think it would need to happen significantly less often than with PBKDF2, so if there's something that would need to cause the UI to re-lock immediately after unlock as you think (and I'm not sure about) then having argon or scrypt in the loop means you have more time between causes of shitty UX.
keepassxc does this the right way — you're not picking the "iteration count" (which is hard enough to understand even for someone relatively technically inclined), but the time it takes to open the database. The default is 1 second, with the minimum of 100 ms.

"Higher values offer more protection, but opening the database will take longer".

I highly recommend keepassxc to everyone instead of these password-solutions-of-the-day that are coming and going so fast it's hard to remember all of them.
No police force in the US has a duty to protect. See: https://scholar.google.com/scholar_case?case=910846825412517...
A few companies around town here in SF Bay Area started doing cashless and the community saw it as a red flag as it clearly disadvantages certain groups in our community. A couple of those places I frequented took back cashless from said pushback.
I get really sad when I see my country going down. But at the same time there isn't much that I can do.
> You ready to get a mortgage at prime plus 5% instead of prime plus 1%?

So then homes would become more affordable, as monthly payments are the limiting factor? Sounds like a win-win, if that actually were to happen. But it seems unlikely for secured credit.
This looks interesting, thanks!
Another way to see it is that the employer steals the first hours_worked*(minimum_wage-actual_wage) dollars from what the employee got in tips.
Or used a mix of oracle/sun/IBM hardwares and the like.
I can imagine easily 9 digits yearly budget including licenses.
Guessing it's this: https://awakening.bar/
Add some “we don’t accept cash” signs too to be nice to your customers, I’ve seen multiple instances of flustered people getting caught by no cash policies in the last year.

It’s the worst once someone has gone all the way through a tablet/GUI menu and made all their purchase decisions only to be awkwardly thwarted at the payment step. Negative bonus points if there is a line of customers behind the pour soul attempting to use cash
This letter from November says they have over $6 billion worth of shares. I think that's less than half a percent of Google shares.

Alphabet - TCI Fund Management https://www.tcifund.com/files/corporateengageement/alphabet/...
What's astonishing to me is that AI complies.

Is it because writings that present contrarian responses were underrepresented in the training data or is it a general feature of documents created by humanity that commands a followed by obedience and questions by generally good will (at most bullshitting) responses?
I'm at a big company that I ended up at by default not knowing how long I'd stick it out. At first I didn't think I'd like it, the pace was far too slow coming from startups. Since then, I've been on numerous large and successful projects. What I enjoy most is working with the team, designing together, and leveling each-other up. The codebase is large and many parts are old, there's a lot we'd like to change about it. We never get a full rewrite, but small and sometimes not-so-small parts of the system do get rewritten, or rather a replacement gets written and incrementally convert over to it. It's great to see the system evolve and improve. It's best when you have a good idea of the direction to go and take steps to get there. The tools are 'boring technology' but within that medium you learn to find ways to solve hard problems in compact and efficient ways.

Emergencies are rare, though I'm always on last line of support I never get paged except rare times I'm also on first line. Daytime support requests go to a person selected from a large rotation. About the only complaint is that shipping code can sometimes take a while go get through CI/CD as the test suite is large and arbitrary/intermittent failures can happen and take several tries in some cases. Meetings are either very project focused or larger informational ones can be watched async.

Work is remote, work from home, but we do have team meetings most days and often pair/screen-share working on specific problems. Sometimes we do mob-programming in larger groups. One thing that's great is that deadlines are not decided too far in advance. Only when the work is approaching completion is a date chosen to align with an external event to release major features.
That worked for big american tech companies only thanks to the insane amount of money they made, also thanks to the de facto oligopoly they have. Alphabet inc alone made 70B of net income in 2021.
I know no other market like this.
Perhaps we just need a quick break where customers realize that they're paying for the service, one way or another. Your hamburger costing $20 and you leaving $5 is no different from your hamburger costing $25. It's really only the poor tippers who shouldn't want this transition to a fixed wage with the costs added to the food. Currently, they're getting subsidized service from good tippers.