skysight-inc/HackerNews huggingface dataset:
This is great, of course. And I think the people who will get the most out of the new AI tools are those who can treat them as iterative assistants. The fact that not everyone can use tools this way has become apparent to me recently. e.g. people who use car driving assistants as if they're fully autonomous; or people who use Copilot and are upset the code is incorrect.

The point isn't for it to be correct, but for it to be so fast that it can be mostly correct and you can fix the last bit.

I use Copilot extensively for my Python glue code and it is positively fantastic. I also use it at my shell with copilot.vim with a quick C-x C-e and write a comment and let it write the code.

The iterative improvement nature of the tool means that I make faster progress. It doesn't have to get things right. It only has to make progress and be obvious how to make improvements.

For instance, I just bought some Reserved Instances (c6i) on AWS and I want to make sure that I don't have any c5 instances in there that I won't be covering. I hit C-x C-e and type in `# list all aws instances in tokyo that are c5` and then hit Enter and type `aws` and it completes the rest for me.

I can then run the query and edit it, or I can validate that it looks okay, etc. The point is that I'm a human capable of understanding what this machine is making. That makes me way faster. I don't need to check Stack Overflow, and the machine teaches me syntax etc. and puts it in my history.

It's the closest thing to the Primer from Neal Stephenson's Diamond Age and I love it.
Dangit I just finished migrating from Lastpass and moving all of the TOTPs into Bitwarden. I was worried about losing access to the TOTPs in the event of a broken phone, so both LP and BW's cloud backup of the codes seemed like a good idea.

The article makes sense and I see the flaw in keeping them both in one place. Wish I'd thought that through.

Related: did you know you can use multiple apps for that TOTP code? Just scan the QR code in App A, then scan the exact same code in App B. That + Yubikey 5's TOTP app means two identical copies of the codes on two different media. Approaching a decent backup scheme.
I think the more telling test for bias (genetic, social, or otherwise) is to compare groups with long standing US ancestry with recent immigrants of the same background and education.

My understanding is that while we attribute much of inequality to bias in treatment, recent immigrants and their decedents vastly outperform comparable individuals with the same skin color.

To me, this indicates that much of the differences we observe are due to biases of past treatment, opposed to discriminatory treatment in the present.
Which certainly seems like a shitty thing to do. It being Apple doesn't magically make it ok.
Handedness, language areas and neuropsychiatric diseases:brain imaging&genetics
This version brings support for middleware (besides many small improvements). Middleware provides a way to implement logging, authentication, and other cross-cutting concerns. This is a major step towards version 1.0
Didn’t think it needed saying but only representing the perspectives of half the population doesn’t sound like a great way to make your point especially since these problems are not restricted to women.
Are you certain that humans can properly digest gasoline and make use of its calories?
They are used in these applications, typically very high grade, unless you're buying a legacy product line.

In, say, a hybrid stepper the magnet is usually a wide thin round disc, sandwiched between two steel rotor lamination stacks. With the link below you can examine the BH curve and load line for a Ø20 mm N52 disc magnet, 2mm thick, at 20 degrees C. (It's not exact because this assumes a magnet in free space and neglects the steel of the rotor - but it's an illustration).

https://www.kjmagnetics.com/bhcurves.asp

You'll notice that the load line (which assumes the magnet is in free air) is already landing within the "knee" where the intrinsic magnetization starts dropping rapidly. That's working too far along the hysteresis curve, where the poles are already starting to flip and demagnetize.

However, if that magnet were surrounded by the steel of the stator, the high permeability of the magnetic circuit would put the load line at a steeper angle, where the magnetic field through the magnet would be much higher. Small changes in permeability around that point would not damage the magnet, but allowing it to fall all the way down below the knee-point would. It would not be completely demagnetized by that, but it would lose some of its original strength.
Who are the shareholders?

Pension funds, which ensure a decent retirement for a large portion of US residents. Index funds, in which many people have invested their retirement funds.
Discussed yesterday:

https://news.ycombinator.com/item?id=34507579 (45 comments)
The last example is a man.
I reproduced the parts list in PCPartPicker, including some manually entered price data: https://pcpartpicker.com/user/irskep/saved/x8Jxf7

Comes out to about $2K USD. Just in case anyone's looking to do a similar build.
compiler autovectorization is poor, people often outperform it when writing SIMD code. intrinsics are so low level they might as well be assembly.
> The judge is the law finder.

> Lawyers are there so your rights don’t get trampled

Aren't those rights all legal rights, or laws? What happened to our law finder between the second and third paragraph?

Edit: Also isn't that sort of admitting that if you don't go in with a lawyer your rights get trampled? It seems we agree.

> the judges I’ve encountered can suspend their baser instincts for a few minutes at a time in order to /do their job/ and part of that job is respecting the Constitution and the rights of the litigants.

Scientifically speaking the evidence is human begins are not capable of doing that. For example rulings of judges tend to heavily align with their political preferences, if they didn't nobody would care who is appointed to the supreme court and what party they favor. Another example litigants often wish to venue shop to find a court that is more likely to rule in their favor, if this perfect law finder actually existed that behavior wouldn't alter outcomes.
There has to be a point where the data is secured by a password, and you will need to keep that password safe both in your head and in a secure location. In your case this would be your password to your backup file.

Pick a good password for the backup and recall it every morning and at random points in the day; the intent is to make you remember it even under stress. Also have it printed out or written somewhere in a place that no one will notice/find - say as a scribbling in your sketchbook or printed at the bottom of a document in your file folder. If you're creative you can even hide it on a sticker inside an object or so forth. No one will know that the string there actually is your password, and if you want you can split it among different pages/etc.
There's no way to construct a TOTP app that uses that TOTP secret to actually encrypt the on-disk password database though, correct? In the case where e.g. LastPass gets breached, even if you have 2FA enabled, the only thing actually protecting your vault is the Master Password itself, not the TOTP code? Since there's no way to use a TOTP code cryptographically to prove anything other then a shared secret.

In theory some sort of HSM like a Yubikey could do it, but in practice I'm not aware of any password managers that use that feature (other than maybe one or two obscure KeePass plugins?)

Similarly, that's why 1Password is more secure than BitWarden or LastPass, because it has a separate "master key file" that's required in addition to your password to set up your vault.
> “I feel like the older generation is constantly pushing you to do stuff like they did when they were in their 20s, but it’s not even comparable to when they were in their 20s,”

To be clear, much of the older generation didn't do this in their early 20. It's been a building concern for many decades.

And they've been lectured about it forever, same as 20-somethings are today. It's not clear what "older generation" here here, but Millennials and Gen-X got stuff like SNL's 2006: "Don’t Buy Stuff You Cannot Afford" https://www.youtube.com/watch?v=R3ZJKN_5M44

This isn't "Gen Z is poor; Boomers/Gen X/Millennials were rich". This is "I'm poor, and know some older people who aren't". There's no shortage of people in their twenties making well into six figures.

> Ms. German-Tanner said 20-somethings were often encouraged to take financial steps like build emergency funds, save for retirement and pay off debt.

Well...yeah. It's good advice. It might be hard, but it's been hard for a sizeable chunk of the population for many, many decades. That's why there's constant push for it—without this emphasis, people just borrow and spend. True in the 70s, true in the 90s, and true today.
Hate to break it to you but all mammals share common body language. That is, they all pay attention to what you are looking at and expect that you will do the same. This is true of cats, dogs, horses, rodents and probably true of some non-mammals such as birds I just don't talk with them very often.

How the language of gaze, 'pointing' and such plays out very differently if you are predator or prey but the cues are the same (consider how you can get much closer to a wild animal on horseback than on foot because you get misinterpreted as an herbivore.)
> Most likely this data comes from some OTA that was breached.

What do you mean here? I take OTA to mean "over the air," but I'm struggling to see the connection to this breach. Were reservations being transmitted by radio/satellite?
If you're an Android user, you may be interested in Aegis [0,1].
It allows you to import data from various formats, either through a file or directly from another app like Authy (needs root access).
It also allows for export options, such as encrypted JSON or unencrypted TXT/HTML. Additionally, it enables backups to file storage, I am using my Nextcloud as a target.

Overall, Aegis is my to-go open-source alternative to Authy.

[0] https://getaegis.app/

[1] https://github.com/beemdevelopment/Aegis
> they'll last pretty-much as long as a LiFePo if managed sensibly

[Citation needed]

Typically lead acid lifespan is around 10x less than lifepo4, even if kept within spec.

But in practice it's hard to keep them in spec too, shit sulphates immediately when you look at it wrong.
That's more a COW, than a (Beo)wulf, no?

<https://www.oreilly.com/library/view/high-performance-linux/...>

A cluster of workstations (COW) is usually opportunistic exploiting existing systems, and lower density than a dedicated (usually rack-based or datacentre-based) cluster.

In practice, COWs usually turn out to be not especially useful, though there are exceptions.
Become the stakeholder yourself.
Also a good language for non-professional programmers. When people ask me which language they should learn as a first language, I recommend Python. Not because it's a great language; but because it has a massive ecosystem that allows beginners to build fun things with minimal effort.

The greatest strength of Python, I think, is that it allows cross-disciplinary collaboration, because it's easy for non-programmers to learn.

Which makes the lack of a functional easy-to-use package manager all the more frustrating.
The answer is never use floating point. Use BigDecimal for everything.
Subsidies are a terrible way to run energy policy because they can change quickly with politics. Big players stay away from big commitments to subsidy based markets.
You track calories in by making all your food and weighing everything you eat.

In practise you don't need to track the out because it doesn't change much per day. It's not easy to burn 200 calories but it's easy to consume them. That's why it's common to hear that weight loss happens in the kitchen.
When I was there, I knew peoples levels and we were encouraged to tell people “I’m a staff engineer working on foo” for interviews etc.

Plus, almost everyone E5 and above posts their titles on linkedin.
How is it equivalent, it's not nearly as good. Some transparency about how close it is to MJ would be nice though, because it can still be useful.
> brute force / rainbow

If I'm using a long random password generated by a password manager, are these attacks realistic?

> phishing / MITM attacks

But if they can phish or otherwise capture my password, can't they just as easily phish or capture my one-time code?

> (or I’m forced to use 2FA when I don’t want to)

IMO, this is the only actual use-case, and it sucks because it adds additional login friction for absolutely no reason. If you want to ensure I'm using a strong password, generate the password for me as a condition of disabling 2FA.
It's not about virtue. Founding a company is a very risky endeavor, and more risk means more (potential) reward.
I'm big into archiving. It's almost autistic how perfect I want my media to be named and tagged and bpm'ed and with fitting cover art and so on Foobar with the that wealth of addons helped a lot:

- Buttons to search for images with artist and album name

- complex renaming patterns

- replaygaining

- batch editing tags...

There is so much I love (ed) about it!

Haven't tried navidrome yet but was planning on installing a multiroom soundsystem with navidrom and snapcast. But that just serves a different purpise :-)
> Seems we're approaching limits of what is possible w/AI alone.

Not even close. We've barely started in fact.
The PMC class that this article is aimed at is represented correctly in this article. It's heavily female.
I feel you. Even though I am more okay with the transience of the feeds.

I have a similar setup but running on my cloud VM and using my custom scripts and apps. I have built a CLI client but not gotten around to mobile apps yet. Hope to finish work on a proper self hosted server and a suite of applications for desktop and mobile for the same and open source it.
This is a thread focused on markdown and html based SSBs. If you would like to continue our political discussion, you are welcome to contact me on my website, where I occasionally write about related issues. But HN guidelines suggest this unrelated thread is not the place for such a conversation.
There’s 365.2425 days per year, so a six hour outage is just about 0.2425 hours, which suggests that they remain able to declare 365 when considering this specific outage only.
AFAIK TOTP doesn't provide protection against phishing / MITM attacks if the attacker is able to response within the time window (usually ~2x 30 seconds).

It also has limited benefit against brute force attacks since it's essentially just a few extra numbers added to the password (although that certainly helps).

It does provide a defense against leaked previously passwords, and keyloggers if they aren't immediately used.

I'd love to be corrected if this isn't the case though.

EDIT: Totally forgot - it also protects you if your password manager is breached, assuming you don't store it in the password manager
Most developers don't have agency to choose what they work on within a company. Expecting the developer to have any influence on the outcome of what they produce other than the implementation quality shows a lack of understanding in how actual software development works.

And to be fair to you, almost all management two steps removed from actual coding does not understand how actual software development works. If you are interviewing a PM you should care about the outcome, for engineers focus on quality, timeliness and skill.
Thanks for the informative comment!
Keep in mind that Amazon tracks people’s return histories and has been known to ban people who are deemed return abusers.
Yeah, it's interesting that this is getting treatment that sounds like it's a new phenomenon.

I was born in 1981, my family was comfortably middle class. I left college in the early 00s with a decent chunk of debt, and couldn't really start saving until I was nearly 30.

Yes, I get that many college graduates today are saddled with more debt than I had, and inflation and rising housing costs aren't helping, but is it really that different? It seems like the severity is worse, but the tune is the same.
I was kind of hoping this was something based on MacOS 9-.

Sort of reading it as "Original MacOS Philosophy".

In the early days, there actually was a "better" MacOS. It was the Apple IIGS. The GS system software was second stab at what was MacOS, but with a bit of "clean slate" ethos to it to fix some of the early issues.

Its hard to appreciate the marvel and hoops the system and the developers had to jump through on early machines that lacked memory protection. The IIGS was a nice little sojourn further on in trying to make that kind of system a little bit better. The IIGS memory/process manager (which is kind of the heart of all of this) on top of the 65816 is a pretty neat piece of kit.
Do they even know?
It's a good idea to keep TOTP source separate, if as hardware key - even better.

Though what's with all the recent criticism of Bitwarden? It's by far the best solution for personal security that you can also self-host and its code is OSS.
Yay another phage thread!

Phages do work, and we've treated a small bunch of people at Phage Australia for our clinical trial.

There's a few things about using phages for treatments I think everyone should be aware of:

(1) phages work!! The physicians we work with (and ourselves) are surprised every time they work. It's just really labor and time-intensive.

(2) if antibiotics are "bite sized snacks" then phages are like "getting a personalized chef
- a course of phages should be highly personalized to the pathogens causing trouble, and sometimes the antibiotics. Too generic and it won't work. Too personalized and it's too expensive. Tricky balance. We're collecting data and trying to figure out what that balance is. Every patient is very different though and it's hard to draw conclusions and see patterns.

(3) at Phage Australia we're not doing the cocktail approach — we're (trying to) assembling a library of phages that should be able to cover lots of common pathogens and local outbreaks. We work with antibiotic resistance reference labs and hopefully eventually get enough coverage, by building a library of phages that we can mix and match before we get an inquiry. The TGA is onboard with this. (The FDA is looking into this tentatively; look up Adaptive Phage Therapeutics). The kind of phage therapy we're looking at is closer to CAR T-cell therapy, FMT and other kinds of individual / personalized therapies.

tl;dr: Phages work, but getting them and getting/paying for them is more like a service and less like a pill. It's also very expensive and hard to do today. We to work with regulators to push more personalized therapies. The age of generic pills in a bottle is slowly fading away.

(Source: I'm the "computer person" aka research software engineer on the Phage Australia clinical trial)
That was certainly part of it. The structure of neuro academia meant that I would be stuck in a postdoc position for 3-10 years paying, likely, around the NIH minimum of around $55k. Which goes along with more responsibility and drastically less job security than a graduate student without any better chances of actually getting a faculty position.

Combine that with the fact that I didn't have the drive or disposition that the field selects for and I was out of there immediately after I got my degree for a more lucrative, more interesting (to me) job with a better work-life balance.
Here in EU, day ahead prices that are available to me as consumer are now ranging from €0.18/kWh to €0.34/kWh in the same day (winter). So that is 16 cents per kWh diff to profit from. I guess there is some energy loss with charging and de-charging.

Since prices a per day, announced the day before, the algorithm is not that complicated.

Also, if I install solar panels, the electricity just goes back into the grid, and I would get money for it. For the car it would be the same, just reverse the electricity into the grid. So it is mostly just the connecting the day-ahead prices, plus the cars and wall chargers returning electricity of-course.
Why can't it be built into the browser?

Preserving privacy is nice when there's no compelling reason to sacrifice it. Does this really need to be a SaaS?
Oh, I switched to macOS due to Adobe apps, but I still using Linux on lots of devices (without GUI). Yes Debian has very conservative software but it’s super-stable! I think you can add the repo for newer software like fvwm3 , I don’t remember well now..
> But saving is especially difficult right now because on top of student debt, housing and food costs remain high even as inflation has started to cool.

Statements like this are weird to me, because "cooling inflation" doesn't mean "prices are dropping", and suggests that the author doesn't really understand basic economic concepts. When inflation raises the price of something, that's it: that's the new price. Absent other innovations to make it cheaper (more efficient production or logistics, etc.), the price will not go back down. The hope, of course, is that once inflation is under control, wages will rise to counteract its effects.

> Theresa Fairless [...] said paying off student loans was her priority. Ms. Fairless graduated from college in 2018 with about $25,900 in government loans and $50,000 in personal loans.

Now I don't know the details of her loans, but this was a mistake I made in my 20s: if your interest rate is low, your priority should be saving and investing, not paying off the loans. Obviously you still need to make the minimum payments.

Granted, investing has not been great over the past year, so it probably has been a good idea to pay down debt more aggressively than in prior years.

I had a government college loan at 3.5% that I absolutely should not have paid off early. I had a private loan as well that was variable, and I think when I paid it off it was a little over 4%. Still questionable; maybe should have put the extra cash toward investments rather than the loan. But at the time I didn't really know what I was doing, and was also worried about the variable rate rising too much.

(Her loan amounts are also in line with what I had... well, I guess technically lower than mine, considering inflation over the past 20 years.)

A couple paragraphs down it talks about how she is saving and investing, has a $10k emergency fund, and is still able to give her mom some money to help her out. So... it seems like she's doing just fine? Seems better off than a ton of people, anyway.
There's another set of countables on feet, for a total of 20.
LINPACK, generally:

<https://en.wikipedia.org/wiki/LINPACK_benchmarks>
The specific mention of Bitwarden made it sound like there's something wrong with Bitwarden's implementation of TOTP in particular (which would be hard, since the TOTP client doesn't really do much beyond store a very password-like string).

But it's not; the author's point is just that putting your MFA token into the same place as your other passwords defeats some of the purpose of "multi-factor" authentication in the first place, since a breach of your password manager gets the attacker both factors.

So, nothing in particular for Bitwarden users to worry about, just general OpSec advice.