skysight-inc/HackerNews huggingface dataset:
A .csv file on an encrypted hard drive, in a single user system or with proper user permissions arguably does provide 90% of the security benefit of KeePass.

But:

1. Ease of use is a security concern - if it's a pain in the ass to use a security measure, users won't.

2. There's also attacks that for whatever reason aren't able to achieve persistence, but are able to obtain files. Let's imagine a browser or scp or rsync or whatever exploit that tricks it into uploading unintended files. These cases will be blocked by KeePass but not by your .csv

3. Users want to sync their password database via untrusted means (e.g. cloud providers). This is easier when the database is itself encrypted. (This attack targets the application config, not the database config, which is a strange choice to sync).
Exactly the same experience here. At encouragement of intel contacts, we went into Intel (ex-Altera) FPGA last year, with the oneAPI push and programming the FPGA cards with SYCL being free.

The cards are now discontinued (but still sold), the drivers don't work on any distro more recent than 2018 - even though the oneAPI toolkit itself requires a more recent OS; the only non-discontinued replacements require software ecosystem license purchase, it's impossible to download the older (working) versions of the toolkit, and the contacts stopped talking to us once we actually bought the cards.

Add to that the constant show-stopping compiler bugs and toolkit issues that made it feel like we were the only people actively using it, I think we've learned to run far, far away now.
Attaching a debugger to a process on my OS requires me to enter my system password.

Listening to global clipboard events at the OS level is a permission I have to explicitly grant.
It depends on the effect at the margin. If the income they earn from people keeping the subscription is larger than the income they lose from people moving away from it, then it was a smart business move. (Not saying it's a good thing though)
If the contract says that I don't see how it could be enforceable. Where's the consideration?
An Opinionated Guide to Getting Started with Jakarta EE Development in 2023
I still don't get the same features I get from the app. And that's fine that others prefer not to use it. I'm just a little confused why the parent comment suggests no one should use it.
Sure, it'll be great for -some- of the people who come after us. Unfortunately, in this analogy, we're the horses
That might be the goal. Get away from the small enterprise users so that they can milk the bigger ones. If their 15x increase in price on larger customers drops off smaller customers, they probably still boost their revenues.

If BigCo was paying $30k/yr is now swallowing $450k/year, that allows them to lose 140 small customers only paying $3k/yr. Which has more knock-on effects, less support staff. All in all, it will probably turn out to be a net positive for Oracle.
did he not have any decision making on going towards ARM and M chips?
""4) Why do crows gather around their dead? Certainly one reason is that the death of a crow can offer a “teachable moment” that other crows use to learn that the place and responsible party is dangerous. You can read more about this behavior here.""

https://corvidresearch.blog/2015/09/26/why-crows-gather-arou...
<insert Cmdr Scott or Lt Cmdr Data bafflegab>
With WordPress, send email function could be tricky to master. This tutorial will guide you through various ways on how you can do it, including sending email with/without plugins, wp_mail, HTML and more.
C++ was all the rage in late 90s / early 00s.
does it have an open source debugger yet?

https://isdotnetopen.com/
I think you’re missing the point. Music is an experience, not a checkbox or text book needing summarized.
Unrelated: the image on the home page has a low resolution and doesn't look good ...
My understanding is it is configuring the KeePass application configuration (~/.config/Keepass/KeePass.config.xml) to perform an export via KeePass' own scripting/configuration mechanism. It's not the kdbx file itself being modified here.

KeePassXC has not replicated the automation ("Triggers") system of KeePass, so there's unlikely to be a similar action to take using KeePassXC's config file
Getting something that generates multiple angles of the same subject in different typical poses would go a long way.
I can get midjourney to kind of do this by asking for "multiple angles", but it's hit or mis.
And none of that music has been good
Hey all, this is my first ever published blog post, so in case you have any feedback not just on the content but on the format as well, I'm all ears.
It's possible to install Zoom without any admin privileges on macOS.

https://uhlcithelp.zendesk.com/hc/en-us/articles/63528758480...
When you put it that way it sounds like a nuisance, but surely that could be resolved through better UX engineering.

Deciphering a captcha or staring at a camera each time you want to post are real annoyances and such a site probably wouldn't get much traction. But if the right infrastructure were in place, a lot of us would be happy to participate in a community where we're confident that everyone there is an actual person, not a spambot or a sock puppet.

The right infrastructure here could a tall order, but I don't think this is an impossible problem.
This is genuinely great. Unlike others spamming my search results with StackOverFlow crawlers I can find actual people's posts here.
18 or so years ago, I was a phone monkey for a government department who was initially learning to code for fun, but quickly realised programming could be a great way to earn a living.

I read about Erlang on /r/programming, which was having a new fad for a new shiny language, as was the custom back then.

And I desperately followed all the /r/programming fads because I was worried that I'd end up irrelevant if I wasn't skilled up in the latest Haskell web framework.

But one of those fads was Erlang, and it intrigued me so much, that I ended up printing Mr Armstrong's thesis, stuck it in a manila folder, and read it, slowly, cover to cover while waiting for, or riding on, my bus to my contact centre job, and I've still got it in my bookcase.

His thinking on resiliency in the face of inevitable failures, and on safe concurrency, has shaped my thinking, and proved invaluable repeatedly and is very relevant today. It's like their phone switches were distributed microservices running in a container orchestrator, before it was cool.
>I also never wanted to shop or spend time in the supermarket getting spaced out by their weird lightning they install to make you make bad decisions.

Not that I ever used grocery pickup during the pandemic, my anecdotal observation is that, at least around where I live, you see very few pickers in stores for curbside pickup at this point. Curbside delivery/home delivery/meal kits/etc. are by all indications extremely niche from what I can see. I'm sure things have changed for some small minority however.
This is good example to highlight how ChatGPT looks smarter than it is by confidently stating made up things like they're fact.
That's fair. Although I think it's reasonable for some users to decide that the risk vs reward tradeoff is acceptable.
Normally I 100% agree and this is, to me, one of the most important things that separates comments that are constructive from ones that are unfocused and all over the map. A lot of my own comment history is me making that same criticism.

But in this case, I think they are identifying an implication of "not making generalities" which I find to be perfectly appropriate. It reminds me of the robolending scandal, and how companies involved tried to deflect systematic criticism by suggesting each instance of robolending needed to be reviewed on a case by case basis without drawing why systematic conclusions.

It's meant as a criticism of how "don't make generalizations" can be used to deflect important and appropriate criticism, and I don't think it's just a case of someone changing the subject randomly.
The point is that the file itself should be encrypted or at least signed with the master password.
Not food and housing. Getting a brand new AAA video game mostly generated by AI dirt cheap is awesome, but that's not going to matter much when you can barely afford rent and groceries
This makes the digging of the 57km Gotthard Basis train tunnel seem like a cakewalk.
Go is famous for its support for easy concurrency, but sometimes, too much concurrency hurts! Check out this post to see how you could manage that, and leave your valuable input please!
I never knew a programming language with more disrespect and constant attacks than Java (Ok, maybe that old Visual Basic thing). It's mindblowing.
> They are calling for banning AI art because they are afraid

I'm not afraid for myself but I am for the future and the willingness to hand it off creation to these tools. Personally, this is another example of a few deep pockets monetizing and selling back another piece of humanity. All without asking or caring. Facebook monetized your family and relationships. Google monetized the knowledge of humankind.

Right now people using a tool like Photoshop are varying degrees of craftsmen. You could take it away and give them a different tool and they'll be able to achieve something similar. You can take away a laptop from a writer and they'll still be able to write. Someone who illustrate in Procreate could lose their iPad and still achieve something with a pencil.

Now a couple generations down the line the skills will start to be gone and the only creation will be made at $99.99 a month for your OpenAI suite. We've been on the road to idiocracy for awhile and it's just been sped up. I don't think it's a doomsday scenario but I do think it's a potentially uglier future.
I agree. It's just an fyi
For what it's worth, 1 egg contains about 3.3 grams of lecithin. Provided one is not averse to eating eggs there should be no need to take it in supplement form. Eggs have the best form of lecithin.
Python might have nice features, but it also has terrible features. Like using dicts for everything. It's not enough to allow good practices, you have to prevent (or at least reduce) bad practices.
EDIT: I misunderstood. You need write access to a config file that should only be on the local filesystem, not the kdbx.

So if I'm understanding, a common usage pattern for Keepass is keeping the kdbx on a shared drive (OneDrive, Dropbox, etc.) Someone with read/write access to a bunch of Dropbox shares could perform this exploit on a bunch of kdbx files so that it will write plaintext files to the share, then wait and collect the passwords. It would be hard to hide the attack but it would be incredibly damaging.

So I'm not sure the assertion that this requires local access is correct. It sounds like it only needs access to a shared filesystem that contains a kdbx, and I think it is reasonable to expect Keepass to be secure against that.
Learnings from Southwest’s Operational Meltdown
If I have write access to the machine's files, I could install a key-logger.
You don’t get the pen without signing the contract.
> Apple will just scrap…

False: for just one counterexample, Apple employees receive refurbs from trade-in as work machines. (Source: First hand experience of years).
I don't think these two things are equivalent...
Raph Koster's Theory of Fun talks about this really well. There are things you learn while having fun. But real learning requires lot of repetitive boring stuff, sort of like practicing piano everyday for a long period, before something clicks. Getting players to do that is always the challenge.

But that book was written long ago, so fingers crossed game designers are making breakthroughs.
"Python" levels of safety? Let's aim a little higher in life.
Fibonacci is pretty much cherry picked to make recursive definitions look good.

It's not that far from a function like the Collatz sequence, which will may just earn you a Fields medal if you're able to say for certain what it will return for all given inputs.
AI/ML. We can argue what AI/ML really is capable of, but one thing for sure, with current market condition, I only see companies spend more money on AI/ML infrastructure than ever before. My company is putting ton of money into that space. I was planning on doing SICP and Crafting Interpreter this year, but I just might switch over to AI/ML study just to make sure I'm in the conversation for my future.

Another no so popular take, BlockChain/Ledger type technology in traditional financial market will see an uptick in activities.2
Why would you ever pay for the privilege of building something in Java, of all things?

There’s so many better and free alternatives.
If I had to guess the parent commenter's rationale, they probably want people to boycott usage of such Electron apps. In the hopes that these companies would stop making them and pushing them onto their users.
Which image (and which browser)?
Obsidian handaxe-making workshop from 1.2M years ago discovered in Ethiopia
It's just another law that nobody will push nor apply. Argentina, no lo entenderías.
What ajsnigrutin is describing recently happened to me with Lenovo (2nd offense) and backcountry.com (1st). It seems like companies are getting more "approximate" about their inventories :-(
I've not written Java for a very long time, but why are people paying for Java when Azul and OpenJDK exist?

I know there must be a reason for it - but I don't know what that is? Is it support? How is that useful for a programming language - do Oracle engineers come and tweak some Java code at your megacorp, or what is it?

I don't understand the model
You don’t know what you’re talking about. Vinyl windows get destroyed by the sun in 5 years or less. They also warp a lot and that nice seal you have is gone in a couple years tops. They are such a bad product with the only redeeming feature being they are cheap.

Wood windows that are clad in aluminum or fiberglass will last 50 years and perform.

Same for siding. Vinyl siding fades from the sun and warps and stops doing its job after a few years and now water is getting in.

There’s a reason only the cheapest construction uses these materials.
Pleasantly surprised. When I saw the headline I thought it was going to be a game about gluing yourself to things.
> Except you're locked into a more confined ecosystem.

The Microsoft ecosystem can become more confining if you continue to operate as if its 2008 and follow all their old patterns (e.g. IIS, Azure, et. al.)

For the more clever developer in 2023, you take .NET 7 and skip over all of the Azure-integrated bullshit. You can throw away 100% of their complex AspNetCore libraries in favor of minimal API integrations. You can do everything your way and run it wherever you want.

The entrapment in the Microsoft ecosystem is of a substantially different nature than entrapment in the Java ecosystem. Becoming mired in Microsoft licensing concerns is a matter of technical competence. Becoming mired in Oracle licensing concerns is a matter of business competence.
This is _not_ modifying kdbx files. It is modifying the application config file (~/.config/KeePass/keepass.config.xml or your OS equivalent).
They get ridiculed because they argue in bad faith with bad or even made up references and data.

Their predictions are basically useless. Decades ago these "debators" were arguing in favor of global cooling because solar activity is going down yet what we got is record temperatures after record temperatures practically every single year.

Even with correct data they intentionally misinterpret it or omit crucial factors. For example a graph where solar insolation, co2 levels and global temperatures are listed they remove the solar insolation data and then argue that there is no correlation between CO2 and global temperatures or state that past CO2 levels have been higher while ignoring that over the time of millions of years solar insolation has increased by a few percentage points and it takes less CO2 today to cause the same level of warming Vs millions of years ago.

Let's assume there was a "debate", why is one side acting in such a way? You would have to put on a tinfoil hat and explain this by saying something ridiculous like "the green lobby routinely funds junk science to discredit climate skeptics".
That is a cop out. You always need to train your people. I've been doing C++ for 20 years, and consider myself somewhat and expert, but if I join your team I will still need to learn a lot of things that are just how your team does it. If I also need to learn Erlang/java/go/ (pick any language I haven't used much) that only adds a short time.

Even as complex as C++ is, I can train a great programmer C++ a lot faster than I can train a future great junior C++ programmer to be a great programmer. Yes you will encounter the rough edges of whatever language often in the first 5 years, but a great programmer will be great in any language quickly. You need one expert in the language on the team for the weird complex stuff, but most code isn't that complex.
Dude needs a blog. That stream of tweets was unreadable.
Can we stop using the household budget analogy for megacorps, governments and economies? It’s overly simplistic and wrong.

(For just one example, a household has a single non-varying income stream and everything else is expense. Large companies have many revenue making depts, lines of business, products, etc)
The variations in line thickness are exactly what you’d get with a calligraphy pen (and pens before ball points like fountain pens, quills) and are a function of the consistent direction of the pen and the smoothly varying direction the line is being written. So you will see it in all old pen/quill writing styles.
Is it OK for an athlete to have an extraordinary gift and not use it?
I'm sorry but you are wrong. I am describing how physics works and it is at odds with many of the claims made regarding our understanding of what is a very, _very_, complex system. You can't just claim there is "consensus that it's going to be bad" without having the sort of scientific discussion I am trying to have. Let's discuss what we know, what the limits are of that knowledge, etc, before we declare that the sky is falling.

I do think you make a great point, which is that the risks and rewards need to be considered. The problem is that analyzing the cost is also a pretty complex problem and there are very real arguments to be made that going green could end up being very costly.

FWIW, I actually came into the climate science debate on your side and have been won over by paying attention to a broader set of sources. One of the things I really can't stand about the climate change disaster is that even if you accept all the claims from the IPCC, it pales in comparison, in my opinion, to other issues that seem a bit simpler to me. The collapsing insect populations, for instance, can have a pretty direct impact on human health and happiness. The climate discussion seems takes all the attention even though no one has made a credible argument as to why it is more dangerous than other problems we face.

edit: I'll add that scientific modelling is _very_ difficult in general, even for much simpler systems than what we are talking about here. These models have tons of simplifying assumptions baked into them and they can be made to spit out just about anything, depending on what values for certain parameters are chosen. The tools aren't particularly trustworthy.

edit: I'll add a bit more. I do think climate change is happening and I do think that humans might have a big part in why it is happening. What I don't find compelling is why this is necessarily an end-of-the-world scenario. The typical argument is: "there has already been warming and there will be further warming. Then there will be runaway effects, then the warming will become extreme and life will become very difficult for most people in most places." Well I do agree with the first part, but it is _really_ hard to predict what happens afterwards, i.e. are there going to be runaway effects. There are reasonable arguments that there won't be. The arguments that there will be tend to focus on a few scientific facts and ignore the complexity of the system at large (i.e. they ignore negative feedback mechanisms and focus only on positive feedback).
As a longtime apple customer, the quality and innovation in my M1 pro is absolutely in line with their old values.
Looks like a great project; happy to talk
Best practices in Python:

Always look on the bright side of life.
> which is 1-dimensional and has probably much less internal modelling to care about

There is an ocean between “I like that sound” and a final, produced piece of recorded music. Much of that ocean being ineffable.

Trying to reduce it to a set of parameters around the final waveform and you’ve missed the entire point.

> but it will suffice for, say, putting a music background for your startup cheap marketing ad.

We need less of that—not more. It’s like a climate disaster of the soul.
I never published on Medium, but one of the benefit that I thought it provided was that it also works as a discoverability platform, so your articles get promoted/pushed to people browsing Medium?
>Urbit is not an "operating system".

Agree, term is wrongly used. Here it is used in the literal meaning of it. A software stack upon which you can execute other apps. The original concept iirc was to run both natively and overlayed but seems they've settled down to just the later.

>It's a freaking web app.

You can use Urbit without ever touching the web app and the neworking protocol is independent of http.
2050 is a 10cm rise from today. I expect most of the Maldives is already "uninhabitable" (and always was) by whatever standard is being used there.

You could literally dredge up land 100x faster than sea levels rise for the Maldives.

There are many nasty consequences of global climate change, sea level rise is an irrelevant distraction from things like India heating up and ocean acidification.
> sodware

This made me giggle.
Puma is certainly fine as the app server - but normally you'd still have a proxy/load balancer/tls terminator/"ingress server" in front. Something like traefik, nginx, haproxy or caddy.

If (one of the) front-facing servers do regular http caching (a good idea anyway to play nice with rails caching[1])", you can probably "serve" the static assets straight from rails and let your proxy serve them from cache (if you don't have/need a full cdn).

[1] https://guides.rubyonrails.org/caching_with_rails.html#condi...
A Bloomberg Terminal for Mastodon
http://archive.today/INYg0
Politicians are mastery of their own cultural gestures.

Ground chief, instructs large machine operators.

Scuba divers, alerts others to surroundings.

American Indian use sign language as a bridge between disparate tribal language.

Gestano, an universal sign language for human today.

Koko, a gorilla who mastered Sign Language.

Sheepdog, also a master of distinguishing gesture vs. behavior.

Once basic gestures are mastered, one can tell the difference between gesture and behavior.

Heck, even body behavior is a form of a language in itself.

Association gets harder when going from physical realm into psychological; even harder when going into virtual abstraction.

(Disclaimer: my kid has a PhD in Communication Science)