skysight-inc/HackerNews huggingface dataset:
When it comes to important stuff I think it’s important to trust no one.

I’m sure LastPass tried really hard to protect data. But everything fails eventually. If there’s things that are life threatening or financially devastating then I don’t think I can afford to audit people sufficiently to trust them with the info.

This is also why I can’t imagine ever using Plaid/Mint/etc that require my bank credentials just to do minor stuff like make payments or read transactions.

These password managers are in a tough spot market wise as they aren’t smart enough to secure super important stuff and for unimportant things, iOS/chrome password management is pretty good. I don’t mind if my audible account gets rooted, but it would be very bad if my bank or brokerage gets rooted.
Wine is major part of Proton, so if it works on proton it's usually possible to get it working on wine. (Changes to Proton branch of wine are regularly incorporated back into Wine).

What proton is - its a tested distribution of wine and its libraries AND nice wrapper around wine, that helps setting everything up so it just works.

If you want to get games working on linux, proton is the easiest and best way to go. But if you want to get some of the programs running, that are not supported under proton, wine might work.
But also...

I'd hardly call it a trend because It's been a thing for as long as I've used the web; but some 'classic' style programmers seem to opt out of CSS for their personal sites. One such example is Dan Luu [0], who wrote in a post [1] that styling decreased his viewership.

Additionally, it can emphasize good structure that was concealed with CSS

[0] https://danluu.com/

[1] https://danluu.com/look-stupid/
I have a Intel ECE and RTX 3060 in almost the same case as this one. The ECE is a mobo and intel processor in a GPU form factor[1]. It's quite small, but can tend to run hot and demand lots of fans.

Luckily Intel has a tuning utility which is really useful, and I slightly under volt to run much cooler and quieter.

For SFF, I can enthusiastically recommend the Intel ECE line.

1. https://www.intel.com/content/www/us/en/products/docs/boards...
This is not the proper use for Show HN?
What is Syncthing? A thing that syncs?
Yeah, most of these companies park their cash outside the US to avoid having to pay taxes, then borrow money in the US against their assets/stock. It worked great when interest rates were essentially zero. Not so much now.
There is also this: https://www.productplan.com/glossary/weighted-shortest-job-f... Weighted Shortest Job First (WSJF)
Not a stupid question, having built a small form factor PC,
I can say that liquid cooling the whole machine would require an 10x effort as you need to install extra equipment to make it work such as: pumps, reservoirs, dealing with tubing, leak testing, annual cleaning of liquid, dealing with corrosion if you use the wrong metals for the cooling parts and million other things.

Note that the author used AIO (all in one) cooling for the CPU, which is equivalent to plug-n-play liquid cooling in a closed loop. You don't have to deal with any of the above with this.

And finally, the GPU are very optimized for air cooling anyways, especially the Founder Edition cards that you see here. You would not see any huge temperature drops going from air > liquid. But liquid sure looks cooler.
Good point, but maybe the data they don't directly get from banking isn't as heavily regulated ?
Man, that cable routing looks fiendish.

We could really do with a form factor that lets case manufacturers route this stuff internally for you, but getting the manufacturers to agree on a format & support it is probably not feasible sadly.
Pass has clients on iOS and Android, but there was some blocker with my GPG key on YubiKey last time I tried.

Ended up on Bitwarden (Vaultwarden in my closet really) instead for web passwords. Admin passwords stayed in pass because I want to be sure I have them. Git is local to the device even if the server burns down.
Space-based ADS-B is now a thing. It is used for coverage of the north Atlantic.

https://www.navcanada.ca/en/air-traffic/space-based-ads-b.as...
Take all the work of writing a book.

Factor out the creative tasks.

Focus your work on the creative tasks and let the AI do the rest.
what I don't understand is: if the plane could make contact with the satellite, why aren't there automated systems in place to send location info through that channel? can someone explain?
> Yep, it’s worth repeating.

I don't know; I haven't really seen most of these things in the wild for a long time.

For "#4) Hacking is Cool" the zeitgeist has moved in the exact opposite direction with "white hat", bug bounties, etc. I think that section in particular is a pretty outdated view of things.

"#6) Action is Better Than Inaction" is probably the only one that still broadly applies today, and is actually a special case of "X exists, therefore, therefore we must use it ASAP, and any possible negativities are not our problem and inevitable anyway" attitude that seems the be prevalent among a certain types of people.
If only JSON would have supported comments right from the start, our lives would be a bit better.

But JSON wasn't intended for configuration or meddling around with much. But it's incredibly useful to have a file format parsable with vanilla JS so it just became de facto configuration syntax - without comments!
You probably subconsciously downregulate your physical activity when you reduce calories, due to lower energy levels. If you wear a fitness tracker and equate number of steps to high calories you should see a difference even with slight reductions in caloric intake. Even the amount of fidgeting you do during the day can change your base caloric expenditure.
A screenshot for those who read this news after it has been fixed:

https://imgur.com/a/AauqekH
No. A USB side-loaded book in AZW3 or KFX format with embedded ASIN, and tagged EBOK, is treated as Amazon books. Everything sent via Send to Kindle is tagged PDOC so they behave differently.

Normally, books sent via USB can't use Whispersync to sync reading position between different devices. OP is saying that if you embed ASIN into the book (can just be a random ASIN) and sideload the same books to multiple device, they will sync, too.
Does it support GraphQL APIs?
Can someone explain it to me like I am 5 years old. Why would I take all my passwords, centralize them and place them onto a 3rd party site? Why is this security best practice?
And probably CCPA in that case?
Cruise the net faster with 2 wheels
With Cameras Everywhere, Crazy Coincidences Are Now Normal – PetaPixel
Would academia still reward that kind of thinking? Business certainly doesn't seem to, where you're mostly sticking to 'universal' solutions. The problem is that this 'universe' has such an enormous range.
> training achieves the same effects as much longer endurance training at much shorter times

For a very specific set of effects.

Other effects vary widely person to person.
https://old.reddit.com/r/facepalm/comments/5w9j6k/cruise_the...
Drugs with bigger TV advertising budgets are typically of “low therapeutic value
> I would like to be able to check if they are among my customers via a simple API call, but I want to preserve people's privacy so that they do not have to log in or authenticate in any way, and without actually transmitting their information or IP address.

> I don't want them to tell me their IP address in detail, since this would just compromise their privacy and increase their attack surface area.

I don't see the point, your server knows their IP address anyway, and I bet you log it too.

It seems overcomplicated and unnecessary.
Continuing Our Investment in Nevada – Tesla
that's a crazy thread right there
The body is not closed system if it would be perfect close system then eating once a day or once per week would have the same effect spreading that over the day. The cells do not use calories. They use ATP, converted different pathways such as glucose, fatty acids, ketones and oxygen.

Calories are measured by burning them, so that means we are using two different measurements that may overlap but are not compatible.

In the Calories model would it be possible to explain why people with diabetics type 1, that don't use insulin stay thin even though they would eat massive amounts?

https://www.everydayhealth.com/eating-disorders/diabulimia/
There are other features for a home battery. There are shutoffs. Each job is a bit custom on the install + electrician work. Retail markup.

You can use your car battery - though you will degrade that car battery much faster which is probably the battery you want to have better performance.
Maybe an overkill, but i use cryptomator, which encrypts the files, the files are synchronized with nextcloud of remote location, but i suppose you can use whatever software you want. Inside that there is a https://keepassxc.org/
It works on a phone too, cryptomator open vault with finger, open keepassxc with finger, well not the quickest way but it will do.
I still have some useless passwors in chrome but for not important stuff.
KeepassXC + unison is the best combo for me. I'll never let some cloud service lay their hands on my passwords.
I tried this app, I thought it was very elementary and a very sub-par experience for myself as the user. I would not recommend.
Wasn’t aware of this case. Looks like a solid build, and might have a bit more room for a GPU than the NZXT H1.
I would not be surprised if such sensitive details could ruin someones life, and that is now in hands of a bad actor.
Ahh so you’re a Covid denying loon. This makes a lot of sense now.
<< Being able to solve rather trivial problem(s) that tutorial websites don't cover isn't valid measuring stick to assess someone's potential commercial viability.

I hesitated a little bit, but I will admit you got me curious. The position assumes that you know a better way to assess that viability ( which assumes I accept that framing at face value -- I don't, but I want to get to the bottom of this argument ). Would you be willing to disclose your personal favorite measuring stick?

<< I'm not the one who created this situation, but it's trivial to observe.

I wholeheartedly disagree. It is trivial to generalize. Careful observation resulting in nuanced findings is difficult precisely, because we tend to crave simple answers.
I think this misrepresents password entropy. For example forcing a capital letter mostly results in lusers capitalising the first letter (and losing about 1 bit versus having the choice of case for every character). Requiring "special characters" further decreases the entropy (certainly in theory, and I assume in practice).
There is no clear answer to that. Industry in a bandwagon. Repeating rust, go, python or js.
Try .net or clojure. There are serious alternatives out there that people cannt try because no one makes hype trains about them.
What are the eviction rules like in Milan?
Have a look at unison, it's what I use instead of Syncthing and I couldn't be more happy.

https://github.com/bcpierce00/unison

edit: Also, KeepassXC!
> I think the main problem with Linux is the security model.

Does Apple have the same problem with iOS and its BSD heart?
Typewind: Magic of Tailwind Combined with the Safety of TypeScript
> Everybody knows that high intensity exercise does more than low intensity ones per hour invested. At least in running world.

“Does more” is hella vague. As a 40-mile a week runner I find that low intensity runs “do more” for me because they’re more relaxing.
Firebreaks on GOV.UK (2018)
https://archive.is/dOsE2
Yes, we support it, you can find the documentation here https://refine.dev/docs/advanced-tutorials/data-provider/gra.... Are you experienced with GraphQL? If you can provide feedback, we would greatly appreciate it.
What’s the best way to delete an account? Overwrite all password values? Wait a month, overwrite again, wait a month, delete? It’s hard to tell what’s sufficient to reduce risk of someone who breaches in the future will use my data.

I doubt LastPass deletes my data when I delete my account. I even wonder if to comply with GDPR, they just disassociate the data from me so it can never relink, but keep the data so it can be used, sold, or rented.
Sucks that LastPass has these significant problems. From purely a product perspective it's pretty good. I used it for years quite happily as it kept myself and wife in sync with all of our accounts/passwords across all of our devices and browsers. LastPass is one of only a handful of products that truly works on virtually all platforms and browsers. Windows and Mac, home and corporate devices, mobile, you name it.
LTT had a stream building a computer using this case too. https://www.youtube.com/watch?v=Il556YxkdhA&t=1400s&ab_chann...
Great questions form all ends. Let me try and clarify.

This is not monkey-patching or hot-swapping, but a different approach -
we call it dynamic instrumentation. This amounts to having an agent (an SDK/library, in essence) perform the addition of Lightrun Logs, Snapshots and Metrics, then (potentially) pipe the information where it needs to go. We've got a nice diagram here [0].

I think that the mechanism itself - which changes by runtime, naturally - is well explained in the link above. However, the core security mechanisms we have are enabled by another component of the agent we dub the Sandbox.

In essence, we've got a (patented) way to verify everything that we do at runtime. That means we ensure that each evaluated expression does not have side effects (like changing the value of a member of an array, or editing a variable value), every metric we could think of is throttled and rate-limited (that includes our usage of CPU, RAM, the rate of I/O and a bunch of other things).

Given this sandbox mechanism, and the way the networking requirements look like (again, look at [0] - no need to open a debug port / inbound ports, and a pretty agnostic deployment model) I think we've got a pretty robust defense layer against a variety of failures. Also see my comment a few comments above regarding data security.

[0] https://docs.lightrun.com/more-about-lightrun/#how
A good advice I was given a long time ago and I have since followed:

When you need to admit a mistake or apologize, get it all out and be truthful about it. Effectively get it over and done with.

People do appreciate honesty, but will strike back with retaliation if they find out you only appeared honest. Telling a half truth is no better than lying.
The functionality provided by such an API could be limited to disabling the account until the password is manually reset given that the client provides a valid email and password. The blast radius for that would be pretty small.

I don't use 90% of the entries in my password manager on a monthly basis so anything that allows me to delay the password change on hundreds of accounts until I need to use the account again would be valuable.
According to the article, it is not just the video, but links to the video that Modi's government tries to take down. However, no idea how this could be confirmed outside India.

Not sure what options Musk has in his cards - not cave in, take a risk to get Twitter banned or just follow the local censorship laws - which obiviously here might being abused.

Not commenting the quality of the document, as BBC has produced some bad quality content now and then before, but the journalists seem to stand behind this. Even bad criticism should be tolerated in a democratic country and BBC is still faraway from the worst trolls and trash what you could see e.g. with Trump's legions. Is this finally how the democracy dies and only the opinion of Modi becomes the right truth? Looks like Indian opposition agrees.

Let's wait and see if Streisand Effect kicks in:

https://en.wikipedia.org/wiki/Streisand_effect
I'm of the opinion that all kids books should be heavy on metaphor and allegory and all of the other important and joyful aspects of language. Restricting children to books that have been "written at their level" or "made easy to read" is doing them a disservice. It's no wonder so many people grow up to be seldom readers if their first exposure to reading is saccharin pablum that presents no challenge, no meaning, no mystery, and no danger. A proper children's book should be one which an adult can also read and enjoy if they give way to that childlike wonder that still lives within them.
And what the brain produces is not something that is statistically (at many levels) close enough that it will fool most of the people, most of the time?

Have you looked into even basic neuroscience research or perhaps at least personally known someone with, for example, dementia? It would perhaps teach you something about what the mind is and isn't and what we know and don't know and how perhaps AIs might fit in this story.

Just handwaving because it's "just statistics" is not useful.

As for the environment - well, I have my opinion on social media and online content and even most print content and most books. Will AI make that worse? Yes. But it's already bad enough that this is not a meaningful change. The good stuff has always been accessible and for a long time.
Ask HN: If you write/draw using AI is the intellectual property still yours?
No Linux support =/
Anyone remember GOOG-411? During the days before smart phones, you'd call a phone number and do a Google search via voice.

My favorite part was that the sound it made while waiting for the results was a human making robotic beep-boop sounds.
Thanks. I also put it into archive.org before posting

https://web.archive.org/web/20230125115413/https://www.w3.or...
Kerckhoff's Principle only applies to cryptosystems. In systems security it is more like an onion or layers of swiss cheese.
If marketshare is a reflection of meeting customer requirements, then the fact that Google Maps is indisputably #1 and what 10X larger than Apple Maps means that consumers have decided which solution meets their needs the best, right?

For the record, the best data available suggests that only ~50% of iOS users choose the pre-installed built-in Maps versus explicitly downloading the Google Maps app.

One wonders what that number would look like without anti-competitive monopolistic bundling, too. From that perspective, it seems that the "majority of iOS users" would choose Google over Apple Maps, but Apple's anti-competitive behavior has kept it at around 50/50 on their own platform.
Can you give a single example of a buzz-word or a site that includes paragraph after paragraph of “buzz-word hell”?

Odds are it’s that you are playing dumb and really think you’re much smarter than the person who wrote the page and you also don’t have much respect for marketing work.
Gabon's Natural Nuclear Reactors: The 2B-Year-Old Fission Reactors
I use KeepassXC too, and Dropbox for database sync. Probably not very secure, but I store root password only in my head, and secret key offline. Never used mobile client though, not sure if they can be trusted.
Cool, but will the energy company pay for the wear and tear? Do you get paid extra if you promise to not use your car between hours X and Y?
Java is AOT compiled since Android 5, switched into AOT/JIT with PGO feedback loop since Android 7, and as of Android 8 PGO data gets shared across devices via the Play Store.

The biggest difference is that while some Android devices might be a sluggish if too many applications are taking liberties with memory, on iOS they just die, specially on Objective-C code, where not everyone checks all pointer related code.
The article is from 2005, while NemID and MitID were rolled out around 2010 and 2021, respectively. That nit-picking aside, would you be willing to elaborate on your problems with the concept of NemID/MitID as a whole?

And thank you for your work. The JS based NemID login was a huge improvement over the earlier, Java based implementation.
As always when styling comes up there's always a few people on HN who claim to prefer "no CSS" because they "always" use Lynx, or deeply customize all content on their own from scratch, or are using a 1G flip phone, or care about milliseconds of loading time or they're RMS (oh, wait, stallman.css exists!).

Sure, some idiosyncratic blogs can get away with that css-free "look" (eg https://danluu.com/). The W3? NO? but now I guess so!
If you like Flatpak's issues you'll love Snap! The point about smartphone userlands is a good one. If the desktop modus operandi were similar to how APKs are used then I imagine Linux would have much better security. For now I think that only something like Qubes provides the security and isolation you want without subtly breaking things.
Oddly enough I've generated similar graphs for stack tracing and profiling in the far far distant past and had not realised they'd been named and formalised.

For anyone else who has not recognised the name, I found these origin links which may interest some:

Abstract [2]:

Flame graphs are a simple stack trace visualization that helps answer an everyday problem: how is software consuming resources, especially CPUs, and how did this change since the last software version?

Flame graphs have been adopted by many languages, products, and companies, including Netflix, and have become a standard tool for performance analysis.

They were published in "The Flame Graph" article in the June 2016 issue of Communications of the ACM, by their creator, Brendan Gregg.

[1] https://www.brendangregg.com/flamegraphs.html

[2] https://www.usenix.org/conference/atc17/program/presentation...

(hour long usenix talk of [2]) https://www.youtube.com/watch?v=D53T1Ejig1Q

This paper appears to be formalising the nature of a flame graph, recognising that they rest on data from sampling profilers and as such suffer a "never the same twice" variation when repeatedly run, and thus seeking to quantify "distance" of one graph from another as well as "average" of multiple graphs (for the "one true mean reference graph" I guess).

The motivation is then to be able to reliably measure "distance" from one group of profiling runs to another, before and after changes of interest.

I dare say much more is possible, but I fear I've barely skimmed the material before bedtime :/
Dart is also AOT/JIT compiled since version 2 was introduced.
See also https://news.ycombinator.com/item?id=34507230 (19 hours ago, 239 comments)
Sure, it's obvious why they do this. Unlike drug dealers (who don't actually give school kids free crack, that makes no economic sense) it does make sense for Microsoft to ensure every kid who knows how to do rudimentary word processing knows Word, etc.

Nobody is under any illusion that Microsoft just really likes universities for some reason. But on the other hand, we did need lots of this stuff and it's very cheap, budgets are tight and it's not as though hand-rolling even more stuff would be cheaper - we do hand roll some things where it makes sense.

For example, periodically senior people say "Why do we spend $$$$ on a supercomputer? Surely we could rent one from the cloud?" and we (well, not me, different group same department) go OK, we will cost that for you. And they get Azure, Google, etc. to quote them for what they need a supercomputer to do, and then they present this, "The Cloud providers can do that for $$$$$". Ah, that's more money. No thanks, we will continue to run our own supercomputer.

It's not even close. Cloud supercomputer is great if you need the supercomputer for six weeks to do a special project and then you're done with it, the Cloud provider saves you a lot of money. But the University needs supercomputers all the time, so the numbers do not work.
Hey there. Please go ahead creating an account using the form just below the hero. You should be able to provision a router right away.
The one I use for quick one of conectios is:

screen /dev/ttyS1 300

or

screen /dev/ttyS0 300,cs8

My cheatsheet:
screen /dev/ttySX baud_rate,cs8|cs7,ixon|-ixon,ixoff|-ixoff,istrip|-istrip

But I am heavy screen/tmux user so its natural to me.

*I believe GTKTerm has GUI for setting that up