skysight-inc/HackerNews huggingface dataset:
I wish people would understand that biometrics are great for identification, but not for authentification.

In the case of fingerprints, you leave them on pretty much everything you touch, meaning obtaining a copy of your fingerprint in most cases is just a question of stealing the glass you were drinking from at the bar.

It's the equivalent of leaving little notes with your password everywhere you go.
You should read about the work that his foundation does. Many billionaires set up foundations like this.

Not sure where the skepticism comes from but surely he isn’t “giving over $4.5 billion to himself”.

https://en.wikipedia.org/wiki/The_Children%27s_Investment_Fu...
What's that joke that ends like "are you sure you were breeding the crows and they weren't breeding you?"
Depending on engine it's mostly YAML hell unless you work with Unreal and get tricked into building custom netdrivers... then it's PF_RING hell instead.
Smoking (also) causes cardiovascular disease - Atherosclerosis, increased blood pressure, increased cholesterol, etc.

1 in 3 deaths from cardiovascular disease are estimated to be caused by smoking.

Smoking damages your body in all sorts of ways, one just rolls the dice on which one gets them first.
Common misunderstanding. Good sales is far more than closing big contracts. Good sales is about finding low cost customers, good fits, and prospects that challenge the expertise in the company in the right ways.

If you measure just total contract size and think this is all there is to evaluate sales on, you incentivise bad sales.
The US is taking corruption to institutionalized levels probably never seen before in any society. However, the media is so tightly controlled by corporate monopolies that the people of the US still believe they live in a democracy.
Big tech layoffs have had tons of major threads on HN recently. What's the significant new information* here? "Grinch investor wants to squeeze more" seems rather dog-bites-man.

* that's the test for whether a follow-up story on a major ongoing topic should be downweighted or not: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...

p.s. While I have you, would you please stop posting flamebait comments to HN? you've been doing it a ton lately, including abject howlers like https://news.ycombinator.com/item?id=34457949 - that's just trolling. And dross like "people should spit on him in the street" (https://news.ycombinator.com/item?id=34477338) is seriously not ok and should never appear here, regardless of who you're spitting at.

We have to ban accounts that abuse HN that way. I don't want to ban you, so if you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules, that would be good.
When I was training Dreambooth on images of myself, then trying to get tags out of the images it generated of me to write better prompts, I clicked “booru tags” on automatic1111 not knowing what it was. It thought I was some sort of Yaoi manga and generated lots of tags that made me both uncomfortable and confused.
I think one issue, underneath this, is that threats are anti-inductive.

Whatever you learn eg., about hacking-X today, will be obsolete tomorrow because X has been patched. You can't do induction (here, I supposed called Bayesianism) nor can you deduce anything since the problem space is intractable.

(The system underneath this, of course, is the human animal).

There's a new epistemic (, ontological) framework lurking here that has to do with complex systems, anti-induction, the failure of the scientific method (eg., methodological reductionism), and the limits of human knowledge.

"Antifragility", complexity theory, chaos etc. get you 70% of the way there. But as this article demonstrates, all that talk still doesn't give us a clear language for, eg., infosec.

In my view we're 95% of the way along the S-curve called "scientific knowledge of the reducible world", and nearing an end of the success of the scientific method. Since all open domains now have the characteristics above, and simply, there is no method which produces knowledge in the face of them.
Elastic, Loki and SigNoz – A Perf Benchmark of Open-Source Logging Platforms
I do get breathing reaction, it's not funny. And I start sneezing and coughing so everyone starts looking at me like I have covid, very amusing. The thing is, a smoker can't really smell how bad it is unless they stop smoking for a while. This is very apparent when you get an ex-smoker into an elevator with a heavy smoker. Did this with a working buddy and he was looking sideways at me and then asking "Was I really that bad?". Yes, yes you were my friend. Glad you are off it :-)
They just have to ban the smoking. Pretty hard to smoke if there are no cigarettes on the ship or if the crew runs over to put out the fire any time you light a cigarette.
> Some warning to users: Changing iterations MAY corrupt your data

This is incorrect.

https://bitwarden.com/help/what-encryption-is-used/#changing...

> When you change the iteration count, you'll be logged out of all clients. Though the risk involved in rotating your encryption key does not exist when changing KDF iteration count, we still recommend exporting your vault beforehand.
Nah, my friends know better than use a system I built
It may sounds convenient to just use TAI, but that does open a whole new category of issues - you get UTC and TAI time mixed, we humans are good at making mistakes, god knows how many horrible bugs, damages or even deaths could be caused by mixing those two in systems.
But this isn't christmas ... ?
Right! And if you can have covid and not put on a mask, why the fuck can't I smoke next to you on a plane?
There is so much reductive thinking in this thread, it is painful. Fentanyl has been on the market since the 1960. The deaths started spiking in 2014. Did we step up enforcement majorly in 2014? Or did something else start this rise?

Why import anything if you could produce it domestically? Is it possible that basic enforcement has obvious impact? If we allowed labs to produce it domestically, do you think we would see more, or less? What mechanism drives that outcome? What if this is already starting to happen?

The creation of the DEA has had a negative value outcome with respect to the amount of drugs in our society, I'll grant you, but I have a feeling that's due to it being setup as a paramilitary organization as opposed to a knowledge and tactical care based organization focused on the ground level issues surrounding actual users and user/dealers.
Notably, none of those list it as a "crime". Instead, it's a civil penalty with a small fine.
Depends where. It’s illegal to smoke on terraces, near entrances, and near windows in Canada.

I believe NYC has similar bylaws.

But yes in many places, outdoor and terraces/patios are still a health hazard.
I was thinking about specifically asking people, whether already hired or those about to, to become "sacrificial parts"[0]. The difference between this and "hire to fire" would be that in my scenario, these sacrificial employees would enter the deal voluntarily, fully aware of their purpose. Extra compensation would be there to offset both the immediate hassle of searching for a new job and damage to work history on the resume of such sacrificial employee.

--

[0] - https://en.wikipedia.org/wiki/Sacrificial_part
Money is nice but it doesn’t appear you’ll be lacking it over the course of your career. Early on I personally find it more valuable to learn everything you can from anyone and “make good mistakes” by being willing to take risks and trying different things - but that’s not very actionable.
You’re the only person who knows what’s best for your situation, good luck
"Funny" code.

I'm quite sure nobody would do something like that "in production"…

The problem starts with the signature of this function: There is—of course—no function which could take an arbitrary String and return a SubscriberName.

You need to return at least an Option, or better a Result.

But at this point the fun starts. You need to thread this wrapped value throughout your whole program.

Crashing your program (by a panic in the above function, or by a unwrap somewhere later) because someone sent you an invalid String is not an option in real life.
Sweet but the photos don't show the omnipresent nauseous smell penetrating you up from the hair down to the socks. The absolute global ban of smoking was the best thing since the fall of Communism and no design will make me sentimental about it.
This isn't my experience.

You must be using a different Internet
My comment was in reference to the post implying people should move to free Lichess rather than paying chess.com
I believe evaluating software development only works at the bottom line of tasks with formal metrics like issues, bugs or tickets solved. Also in general only possible in larger teams and probably more for maintenance tasks than active development.

There are no boni for top performers in my company at all. If business is good everyone gets a bonus. The only exception here is sales. Here people are more competitive. I guess I would get martyred if I even suggested it for other departments. And I believe it would be pretty bad for morale and teamwork overall. It is good that people don't use energy to present themselves in a good light and instead solve the problems we have. I still believe there is a lot of incentive for employees to see the company performing well. As you said, I have the impression that this becomes a background issue if employees compete with each other.

There was a time I would love to have worked at Blizzard, even while being aware of the volatility and risk of the industry. I wouldn't want that today regardless of compensation. Still, I don't believe it is either or. Both systems you suggest probably have an overall net negative effect for development. There are other forms for employees to participate on company success. Administration for employee boni is wasteful overhead for the most part.

If it is true what the article reports, I believe the manager did the correct thing. On that metric he might be a high performer among his peers.
> long range EV

That's called a train.
I also expect banks charge larger businesses that deal with a lot of cash for the privilege of getting the bank to handle that cash for them.
We had a few very heavy smokers at work, and they were pretty loud about the stupidity of the ban in pubs which was coming up. Six months later the smokers agreed that it was much better inside the pubs than before the ban. All the protests just died.
Smoke used to be the smell of jazz. Going to hear live music was the only thing that could get me to second hand smoke.
I LOVE my job!! I am a Front-End developer who specializes in React and Next.JS applications, and I usually spend my days building and fixing new marketing websites for Fortune 500 companies like Toyota, Mazda, Coca Cola, McDonalds, etc

The problem is, I have a rather low intellect. My IQ is medium/low, so I am not capable of solving complex algorithms, and my brain processing power is nowhere near some of the other guys that I work with, so I can't build truly incredible feats of engineering like 3d rendering engines or voice recognition systems.

And yet, despite my shameful lack of smarts, I feel truly satisfied by my job, because it is the right fit for my capabilities. I build and fix UI's, have a fantastic manager, am supported by a positive and helpful team which practices positive communication strategies, and regularly get rewarded with compliments for my work.

I'm not a big fish swimming in a small pond, nor am I a small fish swimming in a big one - my pond and I are in balance, and there are no sharks or parasites in it, and that keeps me happy every day.

Please God one day they will invent a therapy that will give me Einstein's IQ. Until then, this will have to do. Hope this helps.
I guess in AWS-land the true Serverless DB is DynamoDB or Athena with S3? But I was also a bit disappointed by AuroraV2. Even with the minimal config it's still quite expensive if you expect "Serverless" but compared to the other RDS offerings it seems good (in relation to connection limit and HA).
The Chertsey Tiles
so it would log other devices out, but not the device you're currently looking at. I think that's still an acceptable behavior compared to have people stuck with iterations counts of 500 or even 1 as we had seen in LastPass
> The broken system will come to an end when more and more people get replaced by robots and AI.

Automation increases employment, it doesn't decrease it.
The person you are replying to suggests that covid is higher risk for a 3 hour exposure than second hand smoke, which is the correct risk analysis. Only a covid-denier would suggest differently.
If you going do business with them, then ...

If not, one has to think about the use case, 42$ isn't so much but it's a plenty just for the funs.

I for myself would appreciate something like "Problem? 5$"
If it's not solved, then 0.5
:)
I am not a cryptographer but to my understanding, the number of PBKDF iterations is really only of concern for weak (low-entropy) passwords. If you know that your password has high entropy (>128 bit), for example because you generated it randomly uniformly from at least 2^128 possible outcomes[1], you are safe even if you used only 1 iteration. PBKDF is all about password strengthening, so if you are making changes for yourself the most effective change is just to use a secure password and stop worrying about key derivation functions.

[1] 28 characters in a single case, 23 characters if both upper and lower case are used, 22 characters if you include numbers, 12 words if you use a word list of 2000 words and sample uniformly
I believe around 20% of respondents in the Netherlands said they smoked in 2020.

For the same period, Iceland though was close to the US, with a reported rate of 12% of respondents saying they smoked.
My joke (?) proposal for a contracting business was "Scapegoat Solutions". You're a manager somewhere with a project which is of course late, over budget, crappy quality? Your bonus, or even ass, could be on the line? Never fear - just contract us to "work" on your project for a quarter, we'll drink a little coffee, play some Kicker, twiddle some files in your SCM, then you ceremonially fire us while bewailing the outlandish harm we did to your otherwise well-managed project, explain to your Lords & Masters that it will take months to right the ship... Obviously we're blacklisted as "No Hire" for your company - at least until the next time you need our well-remunerated services...
You misspelled "can't be bothered to contribute to the wellbeing of the people around us". Incidentally, you think wearing a rated mask for a couple hours qualifies as "suffering"? When did notionally adult humans get this soft? Try working 10 hours straight in a tyvek bunny suit and full face respiratory PPE. We'd be carting you off my jobsite in a wheelbarrow after 30 minutes.
https://cs.wikipedia.org/w/index.php?title=Hv%C4%9Bzdoplavba...

The Czech article is way shorter and has a bunch more different authors
This article is a rabbit hole of links that I happily wasted two hours of work reading. Well done.
If it’s thumbs up/down there’s not going to be a difference between the median and (mean
> 0.5).
Hotels used to have smoking and non-smoking rooms around here until some years ago. Now they are all fully non-smoking, and if they notice that a room smells of smoke after you leave your credit card will be charged (a lot), for cleanup. All written up front when you check in.
>humans bring an immense amount of suffering into this world

Is it really correct to regard humans as running the world and responsible for it, or are humans just a mechanism for making more cows?

c.f. https://xkcd.com/1338/
And hide your dog, but don't worry about your cat, she can take care of herself.
If we are serious about sustainability, the environment, and the 'climate crisis' we need to embrace population decrease at least for a few decades.

To blast us continually about the environment crisis and a 'population crisis' at the same time is contradictory (or bad faith).
This too shall pass. This is no different than the time when everyone was crazed about having an Alexa at home because "oh i am too busy to write down my grocery list"
I prefer to stay inside...
> ...to give a low evaluation to an employee that he felt didn’t deserve it in order to fill a quota...

So essentially the same method used as in Stalin's Great Purge, rat out your colleagues even though they did nothing wrong just to fulfill a made up quota. That will be really great for morale and the public image of the company /s
That is when you change your master password, or rotate your encryption keys, not changing the number of iterations (as far as I can tell).

From what I read, changing the number of iterations is safe to do.
One thing PKD did that lends itself to moviemaking is just the fact that his novels are generally short and focus on quickly building a fantastic yet consistent world in the first few pages. Then he gives us a plotline that involves a conflict between the world he's built for us, and our common sense notions borne out of our experience in the "real" world.

The cherry on top is the denouement, where he asks us: are you sure your world is the "real" one?

I think this formula just really matches the pace and scope of a feature-length movie. Note that TV series based on his books have not been as numerous or successful. The best of the bunch may be "Man In The High Tower", but it massively diverges from the book not too far in.

Also, he was a f*king genius at predicting future memes.
Hammerspoon is needed because App Store apps are sandboxed and can't focus specific windows, can't run arbitrary scripts and AppleScripts.

What that gives you is the ability to map Right Option+letter to specific windows or tabs of the currently focused app.

So in your case you could dorcmd-s for Safari then ralt-m for mail tab, ralt-h for HN tab and so on, and it can also open those tabs/windows if they aren't already open.

And you also get a visual switcher to see what your options are in case you tend to forget these shortcuts.

Here are some examples of how I tend to use that feature: https://files.lowtechguys.com/rcmd-window-actions-h264.mp4

I'll have to make it more discoverable and user friendly though.
Exactly. In Roman times, they probably also had endless variations of what they called garum. There wasn't really any food authority. They would likely have used what would have been available to them locally. Mostly that would have been what they grew locally + what they fished out of the Mediterranean + what they could get their hands on via trade.

The recipe probably wasn't set down in stone. Which was of course one of the ways to publish information at the time. But mostly people just copied what other people were doing at the time. There weren't many recipe books/scrolls or literate cooks even. And it sounds like the process of making garum basically involved a lot of rotting fish guts so that doesn't strike me as something as a likely career choice for somebody with an actual education at the time.

So, basically the recipe would have gone something like: take whatever off cuts of fish, fish guts, etc. you have, add salt, and let it do its thing for some time. You get different results based on what fish you use, whatever else you might toss in (herbs, spices, etc), how long you let things ferment, etc. Probably all those variants would have been considered garum. Probably a lot of trial and error involved to get that right. That's also more or less how Asian fish sauces work.
> I, personally, think that password managers contradict the idea of passwords. A password is something that YOU know. You and nobody else. Ideally not even the system you access.

That's the theory of passwords, but it has been demonstrated that most people simply can't manage their passwords.

I have about 600 passwords stored in my password manager.

Without a password manager, I'd have to reuse passwords (either partially or fully) to manage all of that.

A much better option is to get my password manager to generate a random password for each of those sites.

My Hacker News password, for example, is 60 characters long and contains upper and lower case letters, numbers, and symbols.
It wasn't life advice, I was walking through my thought process towards asking why this is relevant. Which you have not addressed.
For finding local sex workers in São Tomé?
Mixed C++ Monorepo Project Structure Development and Build Workflow
That's a simplified example that I grabbed in the middle of the book before the author refactors it, of course you shouldn't `panic` if you don't need to.
That's another proof that things can exist and not be indexed by Google. Soon we'll realize that there's more than what we can see. We will go back to search aggregators like in the 90's.
With a Pareto distribution you may as well fire the bottom 30-40%, but I suspect the remaining 60% of workers will redistribute their relative contributions again to go back to a roughly 80/20 split of relative contribution.
And managment should be aligned on happy customers if they want to stay in business for long. Maybe I'm missing something else.
The bad thing is that this is predictable behavior and management still does it. Should the suggestion get grouped into the 5% of low performers? This is clearly damaging to overall work morale and company goals. And not to an insignificant part.

What would you give for that performance? I cannot see anything that would benefit the company. Not even employment costs, because employees certainly price that in.
I know I would to that, to protect my team, and those who I consider good performers.
It's a basic courtesy to wear a mask if you know you have a respiratory issue (whether it's a cold, the flu, or Covid doesn't really matter). Masks work much much better when the sick person is wearing them.

I think it should also be something that cabin attendants can force you to do - if they notice you have cold/flu/Covid symptoms, and you are not wearing a mask, they should be allowed to bring a mask to you and ask you to wear it, and you shouldn't be allowed to say no.
The answer(s) to this question depend(s) on which foundation of number theory you like to use.

The classical foundation of number theory is set theory. (No types there!)

But you could actually base number theory also on type theory… (No clue whether someone did this actually).

The result may differ than, I think.
StyleGAN-T: Unlocking the Power of GANs for Fast Large-Scale Text-to-Image
Ballmer hunger game'd Microsoft to the brink. If Google ever does the same thing at the same scale, the next Google will arise.

It's as hard to make a Google nowadays. It's hard to get those people who know how to do it out of Google!
What did OpenAI do, exactly?
I'd generally say anything you save payment info in for general physical purchases should probably be secured decently. But consider: Social media accounts used for public posting present no additional metadata. The risk profile to many accounts being stolen is "they can see my already public content, and also pretend to be me on that site". Which is of limited value. I'd really hope nobody trusted a sensitive transaction solely based on my HN posts, for instance. (It's definitely fair though that many people are not a good judge of this particular risk assessment.)

And I'd say for many sites, using a one-time password that you immediately don't bother to save is also probably a reasonable step up from this. If it remembers you on all your computers for a while... just lose the credentials and reset it later.
Why Carl Sagan Is Truly Irreplaceable (2014)
> Ideally not even the system you access.

But you really can't know if the system handles passwords correctly or just stores them as plain text into a database. And memorizing a unique password for each system you want to access seems like a hard task.